last executing test programs:

32.745138807s ago: executing program 1 (id=926):
socket$key(0xf, 0x3, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x6, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0)
sendmsg(r4, &(0x7f0000001740)={&(0x7f0000000000)=@llc={0x1a, 0x30e, 0x2, 0xf, 0x7, 0x2}, 0x80, 0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000080))
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000100)=ANY=[@ANYRES32=r8, @ANYRES32=r7, @ANYBLOB='&'], 0x10)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000000fc0)="8fda", 0x2}], 0x1}, 0x4024011)
recvfrom(r5, &(0x7f0000001780)=""/4112, 0x11fe0, 0x2080, 0x0, 0x0)

31.511186557s ago: executing program 1 (id=941):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x8a500, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0xf)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x453, 0x100, 0x70bd2c, 0x25dfdbfd, "dc24"}, 0x14}, 0x1, 0x0, 0x0, 0x40091}, 0x20000000)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x2)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000ff03030000000000a79361fb5817f9144b1bfe65a4acb0b053e31ccaf7624b2986c25a0a67ebf594ec4e4cdd6b"], 0x0, 0x26}, 0x28)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="61636c2c63616326795568655f73747261746567793d726561646168686164ac6e6f757365725f78617474"], 0x0, 0x181, &(0x7f00000003c0)="$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")
r6 = socket$packet(0x11, 0x3, 0x300)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
clock_gettime(0x0, 0x0)
getrlimit(0xb, &(0x7f0000000280))
capset(&(0x7f0000000580), &(0x7f00000005c0)={0x8, 0x3, 0x6916, 0xf, 0x709df5aa, 0x4})
socket(0x10, 0x3, 0x2)
socket$pptp(0x18, 0x1, 0x2)
getsockopt$packet_int(r6, 0x107, 0x13, 0x0, 0x0)

19.955886881s ago: executing program 1 (id=956):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x1ff)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)={0x0, 0xfb, 0x30, 0xe, 0xff, "7b4c7e8e2cf04084800af6ebb12f51af", "486ee3e73e89ed0f558dcec373ad4c628a6e3bb15d39dd3bec2f9d"}, 0x30, 0x3)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
futex(&(0x7f000000cffc), 0x7, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = userfaultfd(0x80001)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140))
setns(0xc9, 0x0)
r3 = socket(0x11, 0x2, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r3, &(0x7f0000000100)=[{&(0x7f0000000180)=""/198, 0xc6}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r1, 0x28f42000)
sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x8800)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x9080)
write(0xffffffffffffffff, 0x0, 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
copy_file_range(0xffffffffffffffff, &(0x7f0000000040)=0xb4a, 0xffffffffffffffff, 0x0, 0xdc, 0x0)

17.752300505s ago: executing program 1 (id=962):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000400)={0x10, 0x2}, 0x10)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000740)={0x0, 0x3f, 0x5, "3dd6dbb82e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg(r2, &(0x7f0000000900)=[{{&(0x7f00000002c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000340)="3eb76bf1ced2a918de0d443e7bf9e6b4abb72c18d30cca512b46cd9c04d2bff6021fc23767013274a0548258b3e914c03f36f8625209818bed7c2760da0f6eda54b129c430ea5acb203894e04cc786e9682012112c42ec76856379b4ef2f72ec92fcf004eaac0ef5bdf7849711b47c527fdb85d6c651a72217920683b5d41cefd64de940a77f1b56b8be6ddbab0ddc14e65a16b6570110840f46cd80e90267e89dd9f064c436a6f363aadee4a4552a271abc96f105595dbcef06122251f2", 0xbe}, {&(0x7f00000004c0)="ae065ecf597a31db649e08fa703ef03fb357f048b4b0179bd2e1f5e6575607514e2c557864e1a8ce450b2130126c24b2a4d88764f22336a2dfeb496d5d99e25e99d8367af80384998ea4264e0af35085efd96c8cc6dbe10a20cb366fd51a6914a70508edeffe6bed9e488b33309cbe907bc7c021c43a0c4558456ddd909eb7281198325ef6b706ac75b96dccccffd538", 0x90}, {&(0x7f0000000580)="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", 0xfc}, {&(0x7f0000000680)="21e43ce6e756b5fd52e2588a3e8ca45ee5cfddec3fb4424e62ecae75d1258e22968328c2e58b15d24fbf9ae9d15415750ad4259db44bf61f0d698c4c2cca9a15e49e34d067ca55186c36b3049b3dc4728df3b0c98b3ea4d80d5231b6c357492805b16da890f5bcb0450ee70a1f1fcf56c573c3842398c61115db9afadcd09789efb7e76f80096c13bbb2e0a6fc4fd5a2add2f030134e0b864e9dc25b22ce89a6ecd0f50011178f3dcd844f", 0xab}, {&(0x7f0000000780)="ad45347d1735aba22c229ad174f3577fc88c27173ec6a69a8fa1e554791d5f600263e872350a726d4a02be364c13b98e802fd2e76f4077e5e09d744518", 0x3d}], 0x5, &(0x7f0000000840)=[{0x28, 0x103, 0x1, "116adc5eede5d7297db77b2d442a357653f4a3f13c"}, {0x70, 0x114, 0x79f, "d6a8102d6610eaababbff65f7f79bd38061789782b9610858294b083d4a0067f5c58794d1bd596cf0e31e20c9064fc9d0743753d62cc73db563b7ddc84c3e43935883d0753c1a6615457c79b2496a0ce78a017cc1ac186766bb2f1c640"}], 0x98}}], 0x1, 0x10)

14.942410304s ago: executing program 1 (id=972):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x8a500, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0xf)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x453, 0x100, 0x70bd2c, 0x25dfdbfd, "dc24"}, 0x14}, 0x1, 0x0, 0x0, 0x40091}, 0x20000000)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x2)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000ff03030000000000a79361fb5817f9144b1bfe65a4acb0b053e31ccaf7624b2986c25a0a67ebf594ec4e4cdd6b"], 0x0, 0x26}, 0x28)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="61636c2c63616326795568655f73747261746567793d726561646168686164ac6e6f757365725f78617474"], 0x0, 0x181, &(0x7f00000003c0)="$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")
r6 = socket$packet(0x11, 0x3, 0x300)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
clock_gettime(0x0, 0x0)
getrlimit(0xb, &(0x7f0000000280))
capset(&(0x7f0000000580), &(0x7f00000005c0)={0x8, 0x3, 0x6916, 0xf, 0x709df5aa, 0x4})
socket(0x10, 0x3, 0x2)
socket$pptp(0x18, 0x1, 0x2)
getsockopt$packet_int(r6, 0x107, 0x13, 0x0, 0x0)

7.76359383s ago: executing program 0 (id=992):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x1ff)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)={0x0, 0xfb, 0x30, 0xe, 0xff, "7b4c7e8e2cf04084800af6ebb12f51af", "486ee3e73e89ed0f558dcec373ad4c628a6e3bb15d39dd3bec2f9d"}, 0x30, 0x3)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
futex(&(0x7f000000cffc), 0x7, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = userfaultfd(0x80001)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140))
setns(0xc9, 0x0)
r3 = socket(0x11, 0x2, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r3, &(0x7f0000000100)=[{&(0x7f0000000180)=""/198, 0xc6}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r1, 0x28f42000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r4, 0x0, 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
copy_file_range(r4, &(0x7f0000000040)=0xb4a, r4, 0x0, 0xdc, 0x0)

6.558567099s ago: executing program 2 (id=997):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x8a500, 0x0)
mknodat$loop(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x6000, 0x1)
r4 = fcntl$dupfd(r3, 0x0, r3)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x2)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
getsockopt$packet_int(r5, 0x107, 0x13, 0x0, 0x0)

6.487486671s ago: executing program 0 (id=998):
openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
gettid()
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002ac0)=[{{&(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10, 0x0, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000700000001"], 0x18}}], 0x1, 0x50008000)
write$binfmt_misc(r0, &(0x7f0000000300), 0xfdef)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./trace/trace\x00', 0x0, 0x0)
preadv2(r1, &(0x7f0000002780)=[{&(0x7f0000000780)=""/4096, 0xfdef}], 0x1, 0x7fc, 0xffffffff, 0x10)

6.459071382s ago: executing program 0 (id=999):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

6.050733332s ago: executing program 0 (id=1000):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4)
bind$inet(r1, 0x0, 0x0)
connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

5.761341159s ago: executing program 0 (id=1001):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000ff070000000000000000040018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffff372f62cf6eb80fa400b70300000000000085c5670072000000850000009e0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000feffffff0000000000040000851000000200000085000000230000009500"], 0x0, 0xfffffffe, 0x0, 0x0, 0x727c45cd4283345, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fffffff}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1a, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket(0x2, 0x2, 0x0)
connect$inet(r4, &(0x7f0000000400)={0x10, 0x2}, 0x10)
bind$inet(r4, &(0x7f00000001c0)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000180)=r1, 0x4)
sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
fcntl$getown(0xffffffffffffffff, 0x9)
syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000980)={0x44, &(0x7f0000000740)={0x0, 0x3f, 0x5, "3dd6dbb82e"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sendmmsg(r2, &(0x7f0000000900)=[{{&(0x7f00000002c0)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x4e21, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000340)="3eb76bf1ced2a918de0d443e7bf9e6b4abb72c18d30cca512b46cd9c04d2bff6021fc23767013274a0548258b3e914c03f36f8625209818bed7c2760da0f6eda54b129c430ea5acb203894e04cc786e9682012112c42ec76856379b4ef2f72ec92fcf004eaac0ef5bdf7849711b47c527fdb85d6c651a72217920683b5d41cefd64de940a77f1b56b8be6ddbab0ddc14e65a16b6570110840f46cd80e90267e89dd9f064c436a6f363aadee4a4552a271abc96f105595dbcef06122251f2", 0xbe}, {&(0x7f00000004c0)="ae065ecf597a31db649e08fa703ef03fb357f048b4b0179bd2e1f5e6575607514e2c557864e1a8ce450b2130126c24b2a4d88764f22336a2dfeb496d5d99e25e99d8367af80384998ea4264e0af35085efd96c8cc6dbe10a20cb366fd51a6914a70508edeffe6bed9e488b33309cbe907bc7c021c43a0c4558456ddd909eb7281198325ef6b706ac75b96dccccffd538", 0x90}, {&(0x7f0000000580)="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", 0xfc}, {&(0x7f0000000680)="21e43ce6e756b5fd52e2588a3e8ca45ee5cfddec3fb4424e62ecae75d1258e22968328c2e58b15d24fbf9ae9d15415750ad4259db44bf61f0d698c4c2cca9a15e49e34d067ca55186c36b3049b3dc4728df3b0c98b3ea4d80d5231b6c357492805b16da890f5bcb0450ee70a1f1fcf56c573c3842398c61115db9afadcd09789efb7e76f80096c13bbb2e0a6fc4fd5a2add2f030134e0b864e9dc25b22ce89a6ecd0f50011178f3dcd844f", 0xab}, {&(0x7f0000000780)="ad45347d1735aba22c229ad174f3577fc88c27173ec6a69a8fa1e554791d5f600263e872350a726d4a02be364c13b98e802fd2e76f4077e5e09d744518", 0x3d}], 0x5, &(0x7f0000000840)=[{0x28, 0x103, 0x1, "116adc5eede5d7297db77b2d442a357653f4a3f13c"}, {0x70, 0x114, 0x79f, "d6a8102d6610eaababbff65f7f79bd38061789782b9610858294b083d4a0067f5c58794d1bd596cf0e31e20c9064fc9d0743753d62cc73db563b7ddc84c3e43935883d0753c1a6615457c79b2496a0ce78a017cc1ac186766bb2f1c640"}], 0x98}}], 0x1, 0x10)

5.154322344s ago: executing program 2 (id=1002):
r0 = syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x3004006, &(0x7f0000000080), 0x1, 0x576, &(0x7f0000000ac0)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1030c1, 0x10)
r2 = openat(r0, &(0x7f0000000380)='./file1\x00', 0x0, 0x198)
pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xe7c)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000100)={0x17c04, r0, 0x84, 0x1000000000075ea, 0xffffffff, 0x200000000000000})
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000200)={'#! ', '', [], 0xa, "b5602600005a1d790767d50000000000000000"}, 0x17)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x13, r3, 0x1000)
getdents(r0, &(0x7f0000000180)=""/103, 0x67)
io_uring_register$IORING_REGISTER_RING_FDS(r2, 0x14, &(0x7f0000008500)=[{0x2, 0x0, &(0x7f00000008c0)=[{&(0x7f0000000280)=""/205, 0xcd}, {&(0x7f0000000380)}, {&(0x7f00000003c0)=""/195, 0xc3}, {&(0x7f0000000540)=""/17, 0x11}, {&(0x7f0000000580)=""/30, 0x1e}, {&(0x7f00000005c0)=""/145, 0x91}, {&(0x7f0000000680)=""/104, 0x68}, {&(0x7f0000000700)=""/151, 0x97}, {&(0x7f00000007c0)=""/245, 0xf5}]}, {0x7, 0x0, &(0x7f0000001200)=[{&(0x7f0000000980)=""/231, 0xe7}, {&(0x7f0000000a80)=""/62, 0x3e}, {&(0x7f0000001040)=""/222, 0xde}, {&(0x7f0000001140)=""/153, 0x99}]}, {0x8, 0x0, &(0x7f0000002400)=[{&(0x7f0000001240)=""/4096, 0x1000}, {&(0x7f0000002240)=""/90, 0x5a}, {&(0x7f00000022c0)=""/253, 0xfd}, {&(0x7f00000023c0)}]}, {0xec9, 0x0, &(0x7f0000004700)=[{&(0x7f0000002440)=""/29, 0x1d}, {&(0x7f0000002480)=""/20, 0x14}, {&(0x7f00000024c0)=""/197, 0xc5}, {&(0x7f00000025c0)=""/60, 0x3c}, {&(0x7f0000002600)=""/211, 0xd3}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/4096, 0x1000}]}, {0x3, 0x0, &(0x7f0000005880)=[{&(0x7f0000004780)=""/216, 0xd8}, {&(0x7f0000004880)=""/4096, 0x1000}]}, {0xfffffffb, 0x0, &(0x7f0000005980)=[{&(0x7f00000058c0)=""/182, 0xb6}]}, {0xb9c, 0x0, &(0x7f0000005bc0)=[{&(0x7f00000059c0)=""/147, 0x93}, {&(0x7f0000005a80)=""/210, 0xd2}, {&(0x7f0000005b80)=""/33, 0x21}]}, {0x7, 0x0, &(0x7f0000005d00)=[{&(0x7f0000005c00)=""/9, 0x9}, {&(0x7f0000005c40)=""/138, 0x8a}]}, {0x5, 0x0, &(0x7f0000005e40)=[{&(0x7f0000005d40)=""/244, 0xf4}]}, {0xa78b, 0x0, &(0x7f00000070c0)=[{&(0x7f0000005e80)=""/4096, 0x1000}, {&(0x7f0000006e80)=""/122, 0x7a}, {&(0x7f0000006f00)=""/233, 0xe9}, {&(0x7f0000007000)=""/149, 0x95}]}, {0x5, 0x0, &(0x7f0000007180)=[{&(0x7f0000007100)=""/113, 0x71}]}, {0xfffffff7, 0x0, &(0x7f0000008480)=[{&(0x7f00000071c0)=""/68, 0x44}, {&(0x7f0000007240)=""/133, 0x85}, {&(0x7f0000007300)=""/228, 0xe4}, {&(0x7f0000007400)=""/4096, 0x1000}, {&(0x7f0000008400)=""/79, 0x4f}]}], 0xc)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000004000000000000004f00"/28], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0c00000004000000040000000700000000000000", @ANYRES32=r4, @ANYBLOB="000000008000"/20], 0x48)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x2000, 0x103)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x42, 0x836d9fb164f927b3)
io_setup(0x3, &(0x7f0000000600)=<r6=>0x0)
io_submit(r6, 0x1, &(0x7f0000000000)=[&(0x7f0000000080)={0x0, 0x0, 0x10, 0x7, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x2}])
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9)

5.017751857s ago: executing program 4 (id=1004):
socket$nl_sock_diag(0x10, 0x3, 0x4)
socket$inet_tcp(0x2, 0x1, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0))
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
epoll_create1(0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x10)

5.016796737s ago: executing program 4 (id=1005):
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
r3 = socket(0x6, 0x2, 0xffffff04)
connect$tipc(r3, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$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")
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0)
r4 = userfaultfd(0x801)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000cde000/0x3000)=nil, 0x3000}, 0x4})

4.88784515s ago: executing program 2 (id=1006):
socket$key(0xf, 0x3, 0x2)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet6(0xa, 0x6, 0x3)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000000), 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48)
r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
quotactl$Q_SYNC(0xffffffff80000102, 0x110e22ffff, 0x0, 0x0)
sendmsg(r4, &(0x7f0000001740)={&(0x7f0000000000)=@llc={0x1a, 0x30e, 0x2, 0xf, 0x7, 0x2}, 0x80, 0x0}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000080))
close(r3)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20)
sendmsg$inet(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000000fc0)="8fda", 0x2}], 0x1}, 0x4024011)
recvfrom(r5, &(0x7f0000001780)=""/4112, 0x11fe0, 0x2080, 0x0, 0x0)
write(0xffffffffffffffff, &(0x7f0000000680), 0x0)

3.592975802s ago: executing program 1 (id=1007):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'})
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x8a500, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000001c0)=0xf)
r4 = fcntl$dupfd(r3, 0x0, r3)
r5 = socket$nl_audit(0x10, 0x3, 0x9)
sendmsg$AUDIT_USER_AVC(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x453, 0x100, 0x70bd2c, 0x25dfdbfd, "dc24"}, 0x14}, 0x1, 0x0, 0x0, 0x40091}, 0x20000000)
ioctl$TCFLSH(r4, 0x400455c8, 0x0)
ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000080)=0x2)
setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000600)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000ff03030000000000a79361fb5817f9144b1bfe65a4acb0b053e31ccaf7624b2986c25a0a67ebf594ec4e4cdd6b"], 0x0, 0x26}, 0x28)
syz_mount_image$erofs(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="61636c2c63616326795568655f73747261746567793d726561646168686164ac6e6f757365725f78617474"], 0x0, 0x181, &(0x7f00000003c0)="$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")
r6 = socket$packet(0x11, 0x3, 0x300)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
clock_gettime(0x0, 0x0)
getrlimit(0xb, &(0x7f0000000280))
mkdirat(0xffffffffffffff9c, 0x0, 0x1ff)
socket(0x10, 0x3, 0x2)
socket$pptp(0x18, 0x1, 0x2)
getsockopt$packet_int(r6, 0x107, 0x13, 0x0, 0x0)

3.324613779s ago: executing program 2 (id=1009):
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file2\x00', 0x1ff)
r0 = socket$inet(0x2, 0x2, 0x0)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x2a0, 0x208, 0x8, 0xfa04, 0x0, 0x6c02, 0x208, 0x194, 0x194, 0x208, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'batadv_slave_0\x00', 'pimreg\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlimit={{0x40}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x300)
setxattr$trusted_overlay_upper(&(0x7f00000000c0)='./file1\x00', &(0x7f00000002c0), &(0x7f0000000300)={0x0, 0xfb, 0x30, 0xe, 0xff, "7b4c7e8e2cf04084800af6ebb12f51af", "486ee3e73e89ed0f558dcec373ad4c628a6e3bb15d39dd3bec2f9d"}, 0x30, 0x3)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
futex(&(0x7f000000cffc), 0x7, 0x1, 0x0, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100))
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r1 = userfaultfd(0x80001)
r2 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000140))
setns(0xc9, 0x0)
r3 = socket(0x11, 0x2, 0x0)
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
readv(r3, &(0x7f0000000100)=[{&(0x7f0000000180)=""/198, 0xc6}, {0x0}], 0x2)
mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, r1, 0x28f42000)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/devices/system/memory/memory15/state\x00', 0x2, 0x0)
write(r4, 0x0, 0x0)
symlink(&(0x7f0000000000)='.\x00', &(0x7f0000000040)='./file0\x00')
copy_file_range(r4, &(0x7f0000000040)=0xb4a, r4, 0x0, 0xdc, 0x0)

3.171989682s ago: executing program 3 (id=1011):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, 0x0, 0x0)
listen(r0, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x2f, &(0x7f0000000040)=0x5, 0x4)
bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10)
connect$inet(r1, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
sendto$inet(r1, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0)
recvfrom$inet(r1, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25)
connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10)

3.062175315s ago: executing program 3 (id=1012):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000280)=ANY=[@ANYBLOB="400000000cff0101000000000000000002001c002000018006000340000000001400018008c301007f000001080002007f0000010c0019800800", @ANYRES32], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x0)

2.836940351s ago: executing program 3 (id=1013):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0xfffffffc}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{r0, <r1=>0xffffffffffffffff}, &(0x7f00000005c0), &(0x7f0000000600)}, 0x20)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdcb, 0x0, 0x0, 0x0, 0xfffffff7}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000003c0)={r2}, 0xc)
syz_mount_image$f2fs(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x1805a, &(0x7f0000000000)=ANY=[], 0x1, 0x105ca, &(0x7f0000004240)="$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")
socketpair(0x1, 0x1, 0x7, 0x0)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8)

2.03192046s ago: executing program 0 (id=1014):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x4f2, 0x418, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0x40, "", [{{0x9, 0x4, 0x0, 0x81, 0x2, 0x3, 0x0, 0x6, 0x0, {0x9, 0x21, 0x1, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x9, 0x80, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
io_destroy(0x0)
syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)=ANY=[@ANYBLOB="200828000000280583efb930f0187ff0470fa22a61a54607b71ea9e43d3513c6e60ef525cde38be3914077"], 0x0, 0x0, 0x0, 0x0}, 0x0)
close(0xffffffffffffffff)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0)
ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000dc0)={0x0, 0x800, 0x9, 0xcffe, 0xe, "0062ba7d8200000016001b000200f705096604"})
r2 = syz_open_pts(r1, 0xa0200)
r3 = dup3(r2, r1, 0x0)
syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
r4 = open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x83901)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0)
write$FUSE_NOTIFY_POLL(r3, &(0x7f0000000200)={0x18, 0x1, 0x0, {0x7}}, 0x18)
fcntl$lock(r5, 0x25, &(0x7f0000000080)={0x0, 0x1, 0x3ff, 0x2})
fcntl$lock(r5, 0x25, &(0x7f00000006c0)={0x2, 0x2, 0x1, 0x7})
ioctl$XFS_IOC_INUMBERS(r4, 0x80405880, &(0x7f00000000c0)={{0xd2, 0x0, 0xffffffff, 0x7ff, 0x200}, [{0x1, 0x850, 0x7}, {0x6457, 0x9, 0x3, 0x7}, {0xb4a, 0x6, 0x23, 0x8}]})
openat$ppp(0xffffffffffffff9c, &(0x7f0000000180), 0x369982, 0x0)

1.739938878s ago: executing program 4 (id=1015):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000003000000000000000040000018010000786c6c250000000000202020731af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000940)="63eced8e46dc3f0adf33c97bc065", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.62416395s ago: executing program 4 (id=1016):
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4)
socket$nl_route(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000a00)='./bus\x00', 0x200000, &(0x7f0000000540)={[{@dioread_nolock}, {@resuid}, {@journal_dev={'journal_dev', 0x3d, 0x2}}, {@noblock_validity}]}, 0x3, 0x480, &(0x7f0000000a40)="$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")

1.173173241s ago: executing program 2 (id=1017):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x0, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94)
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000200)=ANY=[@ANYBLOB="b50a00000000000061110c000000000018000000000000000007448e921f5ab20000000000000000c1930000"], &(0x7f0000000000)='GPL\x00'}, 0x80)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r1 = socket$tipc(0x1e, 0x2, 0x0)
getsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000180), &(0x7f00000001c0)=0x4)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000140)=@urb_type_control={0x2, {}, 0x2000000b, 0x81, 0x0, 0x0, 0x6, 0x7e, 0x0, 0x1, 0x101, 0x0})
r2 = epoll_create1(0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0)
unshare(0x40400)
r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x321002, 0x0)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r5, r4}, 0xc)
ioctl(r3, 0x400c4d02, &(0x7f0000000340))
ustat(0x90000000000, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x5, 0xf1, 0x7, 0x5}]})
epoll_pwait(r2, &(0x7f0000000040)=[{}], 0x1, 0xff, 0x0, 0x2000)

1.108005883s ago: executing program 3 (id=1018):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x5, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r0, 0xffffffffffffffff, 0x16, 0x0, @void}, 0x10)

905.714788ms ago: executing program 3 (id=1019):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000380)=ANY=[], 0x2, 0x5515, &(0x7f0000002140)="$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")
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a40)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xc}, {}, {0xa, 0x9}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_MODE={0x8}, @TCA_FLOW_KEYS={0x8, 0x1, 0x1fb2f}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8044}, 0x4040050)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
openat$selinux_attr(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
sendmmsg$unix(r6, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r5, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
socket$inet6(0xa, 0x2, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r7, 0x0, 0x0)
getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x0, 0x61, &(0x7f0000000b80)=ANY=[], &(0x7f0000000bc0)=0x2c)
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1001041, &(0x7f00000002c0)=ANY=[@ANYRES16=0x0], 0x1, 0x3a4, &(0x7f00000006c0)="$eJzs3U1om2UcAPB/9qYfGbr2IAwFJXoTtOwDD4qHjtHBsBeVsOlBDK5DSeqgwWB7WFY9iEfBo4LgRTzowcPOIijizYNXp+hUPOhuA4ePJHnz0eVtN9RuFn+/Q/nn/zzP+3wkTd6+L3n6/LXUODMVZ69cuRyzs6UoLx5fjKulmI8sBi7EpOmCHACwN1xNKX5PfcNkVhCNlG7R0ACAXdL9/E+d8cxrn+9UP/n0B4A9L//7v7JTndnJ1I+Pd3+e271xAQC7Z+L6/wOjK/z39W/zj93qLxfeEAAA9pann3n2iWPLEU9VqrMRq2+0a+1aPDYqP3Y2XopmrMShmItrEf0ThZTS6e97D06cXF46VK1WO/HTfNQi4r12LWK10671zxSOZb32M3E45mI+b5+fbaSUshOfLC8drvZExIVOr/9YLbVrU7E/7//b/bESR6Iad020jzi5vHSkmh+gtjpo34nYHF236I5/Iebi6xfiXDTjTOVUpDQ4rVleOn+4Wj2elre0b9dm4sxwFQqugAAAAAAAAAAAAAAAAAAAAAAAwD+wUB2aH+5/k0b79ywsFJT39sfpt8/3B9rs7w+UZlKk9NurD9fezPp79Qz2B7p+f552rRz7bu/UAQAAAAAAAAAAAAAAAAAA4D+jtT4d9WZzZa21vtEYDzprrfV9EdHNvPzlR59VYrLODYJy3sdYUTVPbTTqKRtUTtmWOnmQdTsfZD68OBzxeJ2Z4SwKh9Etbk1vU+fO+394Z6NRn+0X3ZsNjvznqE4WxRPMrhvGIJiKiNUDEVGJ6GVmYn1jajTlbVfsaB4cucGqXkopbXec889NtopSRHlyqNNRtOA3F0xH6gZfXH7x7qOtg4/0ij5NfQ8+NHfq0tvv/9KoN7s9dzU/mF5rXUuNev64+MW2Uipv02k2GOrrgwM2V0rjr4TyTmPe3JqpZ9/8evqet766rvK+4mcnjWdeKegi60/n47XWein/Tekvbz/o5rrBHVeGrSrNk1nExmKMH2fqbz8X2wWF0zn47mL94vnvft6heUqpM8yMvUmMNuqo/KtvPgAAAAAAAAAAAAAAAAAAwBZj3xXP5V/2ndqp1aNP5sHs7o4OAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAG6N0f//Hws2JzI3E/zRicmimZW1VsSB2z1NAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD+5/4KAAD///fWXQE=")
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="180100000000000000000000060000008500000023000000850000000800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

887.567519ms ago: executing program 2 (id=1020):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000000010bd28710000000000000109022400010000000009040100010300000009210200000122050009058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, &(0x7f00000005c0)=ANY=[@ANYBLOB="200f05"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2)

749.005562ms ago: executing program 4 (id=1021):
r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000500)={<r2=>0x0, <r3=>0x0, <r4=>0x0}, &(0x7f0000000180)=0xc)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x20000848, &(0x7f00000001c0)=ANY=[@ANYBLOB='iocharset=ascii,discard,dmask=00000000000000000000007,uid=', @ANYRESHEX=r3, @ANYBLOB="00646d61c6d62d303030303030303030303030303135322c696f433161720300000069736f380000000000", @ANYRES16=r4, @ANYRESHEX=r1, @ANYRES32=r2, @ANYRESHEX=r2], 0x81, 0x14f5, &(0x7f0000001580)="$eJzs3AlwVUX2MPA+3X0hxIjPiCyBPn0uPDFAExERWURAFhERERER2URAxIiIiIAKAdlEDIgIiCwRkSUgILLEEJF93/fNyCBGREQ2ARHor3D8DzN/5/935pv5Pqom51fVlT6595zXnZPKu/dWvXzffXidZnVrNiEi8S+BP39JEULECCEGCyFuEEIEQogK8RXirxzPpyDlX3sR9u/1aPq1XgG7lrj/uRv3P3fj/udu3P/cjfufu3H/czfuf+7G/WcsN9syo8iNPHLv4Of/uRm///8HySk7/ut1ZW/u8U+kcP9zN+7/f5y8/8zJ3P/cjfufu3H/czfu/3++Gv/LMe5/7sb9Zyw3u9bPn3lc23Gtf/8YY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjOUO5/1VWgjxX/NrvS7GGGOMMcYYY4z9+/i813oFjDHGGGOMMcYY+38PhBRKaBGIPCKviBH5RKy4TsSJ60V+cYOIiBtFvLhJFBA3i4KikCgsiogEUVQUE0agsIJEKIqLEiIqbhElxa0iUZQSpUUZ4URZkSRuE+XE7aK8uENUEHeKiuIuUUlUFlVEVXG3qCbuEdVFDVFT3Ctqidqijqgr7hP1xP2ivnhANBAPiobiIdFIPCwai0dEE/GoaCoeE83E46K5eEK0EC1FK9FatPm/yn9FvCpeE71FH5Ei+op+4nXRXwwQA8UgMVi8IYaIN8VQ8ZZIFcPEcPG2GCHeESPFu2KUGC3GiPfEWPG+GCfGiwliokgTH4hJ4kMxWXwkpoipYpqYLtLFDDFTfCxmidlijvhEzBWfinlivlggFooM8ZnIFItElvhcLBZfiCViqVgmlosVYqVYJVaLNWKtWCfWiw1io9gkNostYqvYJraLHWKn2CV2iz1ir9gn9osD4kuRLb76J/PP/bf8HiBAgAQJGjTkgTwQAzEQC7EQB3GQH/JDBCIQD/FQAApAQSgIhaEwJEACFINigIBAQFAcikMUolASSkIiJEJpKA0OHCRBEpSD26E8lIcKUAEqQkWoBJWhMlSFqlANqkF1qA41oSbUglpQB+rAfXAf3A/1oT40gAbQEBpCI2gEjaExNIEm0BSaQjNoBs2hObSAFtAKWkEbaANtoS20g3bQATpAR+gInaATJEMydIbO0AW6QFfoCt2gG3SH7tADekJPeAVegdfgNegDQvSFftAP+kN/GAiDYBC8AUPgTXgT3oJUGAbD4W14G96BkXAWRsFoGANjoJp8H8bBeCA5EdIgDSbBJJgMk2EKTIWpMB3SYQbMhJkwC2bDbPgE5sKn8CnMh/mwEDIgAzJhEWRBFiyGc7AElsIyWA4rYCWsgNWwBlbDOlgP62AjbITNsBm2wlbYDtthJ+yE3bAb9sJe2A/7IRWyIRsOwkE4BIfgMByGHMiBI3AEjsJROAbH4DgchxNwEk7BSTgDZ+AsnIPzcB4uwAW4CC8lfNt0d6m1qUJeoaWWeWQeGSNjZKyMlXEyTuaX+WVERmS8jJcFZAFZUBaUhWVhmSATZDFZTKJESTKUxWVxGZVRWVKWlIkyUZaWpaWTTibJJFlOlpPlZXlZQd4pK8q7ZCVZWbZ3VWVVWU12cNVlDVlT1pS1ZG1ZR9aVdWU9WU/Wl/VlA9lANpQNZSP5sGws+8JAeFRe6UwzOQyay+HQQraUrWRr+Q48KdvKkdBOtpcd5NNyNIyCTrKtS5bPyc5yHHSRL8jx8KLsJidCd/my7CF7yl7yFfmqbOd6yz5yCvSV/eR06C8HyIFykJwFteWVjtWRb8lUOUwOl2/LhfCOHCnflaPkaDlGvifHyvflODleTpATZZr8QE6SH8rJ8iM5RU6V0+R0mS5nyJnyYzlLzpZz5CdyrvxUzpPz5QK5UGbIz2SmXCSz5OdysfxCLpFL5TK5XK6QK+UquVqukWvlOrlebpAb5Sa5WW6RW+U2uV3ukDvlLrlb7pF75T65Xx6QX8ps+ZU8KP8kD8mv5WH5jcyR38oj8jt5VH4vj8kf5HH5ozwhT8pT8rQ8I3+SZ+U5eV7+LC/IX+RFeUlell4KBUoqpbQKVB6VV8WofCpWXafi1PUqv7pBRdSNKl7dpAqom1VBVUgVVkVUgiqqiimjUFlFKlTFVQkVVbeokupWlahKqdKqjHKqrEpSt6ly6nZVXt2hKqg7VUV1l6qkKqsqqqq6W1VT96jqqoaqqe5VtVRtVUfVVfepeup+VV89oBqoB1VD9ZBqpB5WjdUjqol6VDVVj6lm6nHVXD2hWqiWqpVqrdqoJ1Vb9ZRqp9qrDupp1VE9ozqpZ1Wyek51Vs+rLuoF1VW9qLqpl1R39bLqoXqqXuqSuqy86q36qBTVV/VTr6v+aoAaqAapweoNNUS9qYaqt1SqGqaGq7fVCPWOGqneVaPUaDVGvafGqvfVODVeTVATVZr6QE1SH6rJ6iM1RU1V09R0la5mqIG/VZrzD+R/+Hfyh/766pvVFrVVbVPb1Q61U+1Su9UetUftU/vUAXVAZatsdVAdVIfUIXVYHVY5KkcdUUfUUXVUHVPH1HF1XJ1QJ9XP6rQ6o35SZ9U5dU79rC6oC+ribz8DoUFLrbTWgc6j8+oYnU/H6ut0nL5e59c36Ii+Ucfrm3QBfbMuqAvpwrqITtBFdTFtNGqrSYe6uC6ho/oWXVLfqhN1KV1al9FOl9VJ+rZ/Of+P1tdGt9FtdVvdTrfTHXQH3VF31J10J52sk3Vn3Vl30V10V91Vd9PddHfdXffQPXQv3Uu/ql/VvXVvnaJTdD/9uu6vB+iBepAerN/QQ/QQPVQP1ak6VQ/Xw/UIPUKP1CP1KD1Kj9Fj9Fg9Vo/T4/QEPUGn6TQ9SU/Sk/VkPUVP0dP0NJ2u0/VMPVPP0rP0HD1Hz9Vz9Tw9Ty/QC3SGztCZOlNn6Sy9WC/WS/RSvVQv18v1Sr1Sr9ar9Vq9Vq/X6/VGvVEv0Vv0Fr1Nb9M79A69S+/Se/QevU/v0wf0AZ2ts/VBfVAf0of0YX1Y5+gcfUQf0Uf1UX1MH9PH9XF9Qp/Qp/QpfUaf0Wf1WX1en9cX9AV9UV/Ul/XlK5d9gQxkoAMd5AnyBDFBTBAbxAZxQVyQP8gfRIJIEB/EBwWCm4OCQaGgcFAkSAiKBsUCE2BgAwrCoHhQIogGtwQlg1uDxKBUUDooE7igbJAU3BaUC24Pygd3BBWCO4OKwV1BpaByUCWoGtwdVAvuCaoHNYKawb1BraB2UCeoG9wX1AvuD+oHDwQNggeDhsFDQaPg4aBx8EjQJHg0aBo8FjQLHg+aB08ELYKWQaugddDm31rf+7OFnnK9TR+TYvqafuZ1098MMAPNIDPYvGGGmDfNUPOWSTXDzHDzthlh3jEjzbtmlBltxpj3zNjdMWacGW8mmIkmzXxgJpkPzWTzkZlippppZrpJNzPMTPOxmWVmmznmEzPXfGrmmflmgVloMsxnJtMsMlnmc7PYfGGWmKVmmVluVpiVZpVZbdaYtWadWW82mI1mk9lstpitZpvZbnaYnWaX2W32mL1mn9lvDpgvTbb5yhw0fzKHzNfmsPnG5JhvzRHznTlqvjfHzA/muPnRnDAnzSlz2pwxP5mz5pw5b342F8wv5qK5ZC4bf+Xi/srbO2rUmAfzYAzGYCzGYhzGYX7MjxGMYDzGYwEsgAWxIBbGwpiACVgMi+EVhITFsThGMYolsSQmYiKWxtLo0GESJmE5LIflsTxWwApYEStiJayEVbAK3o134z14D9bAGngv3ou1sTbWxbpYD+thfayPDbABNsSG2AgbYWNsjE2wCTbFptgMm2FzbI4tsAW2wlbYBttgW2yL7bAddsAO2BE7YifshMmYjJ2xM3bBLtgVu2I37IbdsTv2wB7YC3vhq/gq9sbemIIp2A/7YX/sjwNxIA7GwTgEh+BQHIqpmIrDcTiOwBE4EkfiKByNY/A9HIvv4zgcjxNwIqZhGk7CSTgZJ+MUnILTcBqmYzrOxJk4C2fhHJyDc3EuzsN5uAAXYAZmYCZmYhZm4WJcjEuwIy7DZbgCV+AqXIVrcA2uw3W4ATfgJtyEW3ALbsNtuAN34C7chXtwD+7DfXgAD2A2ZuNBPIiH8BAexsOYgzl4BI/gUTyKx/AYHsfjeAJP4Ck8hWfwDJ7Fs3gez+MF/AUv4iW8jB5jrBSx9jobZ6+3+e0NNsbms38dF7ZFbIItaotZYwvaQn8To7U20ZaypW0Z62xZm2Rv+11cyVa2VWxVe7etZu+x1X8X17P32/r2AdvAPmjr2vv+Jm5oH7KN7OO2sX3CNrEtbVPb2jazj9vm9gnbwra0rWxr29E+YzvZZ22yfc52ts//Ls60i+wau9aus+vtPrvfnrc/26P2e3vB/mJ72z52sH3DDrFv2qH2LZtqh/0uHmPfs2Pt+3acHW8n2Im/i6fZ6TbdzrAz7cd2lp39uzjDfmbn2iw7z863C+zCX+Mra8qyn9vF9gu7xC61y+xyu8KutKvs6r+sdbndaDfZzXaP3Wu32e12h91pd9ndv8ZX9nHAfmmz7Vf2iP3OHrJf28P2mM2x3/4aX9nfMfuDPW5/tCfsSXvKnrZn7E/2rD336/6v7P20vWQvW28FAUlSpCmgPJSXYigfxdJ1FEfXU366gSJ0I8XTTVSAbqaCVIgKUxFKoKJUjAwhWSIKqTiVoCjdQiXpVkqkUlSaypCjspREt1E5up3K0x1Uge6kinQXVaLKVIWq0t1Uje6h6lSDatK9VItqUx2qS/dRPbqf6tMD1IAepIb0EDWih6kxPUJN6FFqSo9RM3qcmtMT1IJaUitqTW3oSWpLT1E7ak8d6GnqSM9QJ3qWkuk56kzPUxd6gbrSi9SNXqLu9DL1oJ7UC078+cMP1IdSqC/1o9epPw2ggTSIBtMbNITepKH0FqXSMBpOb9MIeodG0rs0ikbTGHqPxtL7NI7G0wSaSGn0AU2iD2kyfURTaCpNo+mUTjNoJn1Ms2g2zaFPaC59SvNoPi2ghZRBn1EmLaIs+pwW0xe0hJbSMlpOK2glraLVtIbW0jpaTxtoI22izbSFttI22k47aCftot20h/bSPtpPB+hLyqav6CD9iQ7R13SYvqEc+paO0Hd0lL6nY/QDHacf6QSdpFN0ms7QT3SWztF5+pku0C90kS7RZfIkQghlqEIdBmGeMG8YE+YLY8Prwrjw+jB/eEMYCW8M48ObwgLhzWHBsFBYOCwSJoRFw2KhCTG0IYVhWDwsEUbDW8KS4a1hYlgqLB2WCV1YNkwKbwvLhbeH5cM7wgrhnWHF8K6wUlg5fPzBquHdYbXwnrB6WCOsGd4b1gprh3XCuuF9Yb3w/rB++EDYIHwwLB8+FDYKHw4bh4+ETcJHw6bhY2Gz8PGwefhE2CJsGbYKW4dtwifDtuFTYbuwfdghfDrsGD4TdgqfDZPD58LO4fN/eDwl7Bv2C18PXw+9f0AtiC6MZkQ/i2ZGF0Wzop9HF0e/iC6JLo0uiy6ProiujK6Kro6uia6Nrouuj26Iboxuim6Oel83r3DgpFNOu8DlcXldjMvnYt11Ls5d7/K7G1zE3eji3U2ugLvZFXSFXGFXxCW4oq6YMw6ddeRCV9yVcFF3iyvpbnWJrpQr7co458q6JNfatXFtXFv3lGvn2rsO7mn3tHvGPeOedc+651xn97zr4l5wXd2Lrpt7yb3kXnY9XE/Xy73iXnWvud6uj0txKa6f6+f6u/5uoBvoBrvBbogb4oa6oS7Vpbrhbrgb4Ua4kW6kG+VGuTFujBvrxrpxbpyb4Ca4NJfmJrlJbrKb7Ka4KW6am+bSXbqb6Wa6WW6Wm+PmuLmJc908N88tcAtchstwmS7TZbkst9gtdkvcErfMLXMr3Aq3yq1ya9wat86tcxvcBrfJbXJb3Ba3zW1zO9wOt8vtcnvcHrfP7XMH3AGX7bLdQXfQHXKH3GH3jctx37oj7jt31H3vjrkf3HH3ozvhTrpT7rQ7435y6rfnnRfcL+6iu+QuO+/SIh9EJkU+jEyOfBSZEpkamRaZHkmPzIjMjHwcmRWZHZkT+SQyN/JpZF5kfmRBZGEkI/JZJDOyKJIV+TyyOPJFZElkaWRZZHlkRWRlxPui20Jf3JfwUX+LL+lv9Ym+lC/ty3jny/okf5sv52/35f0dvoK/01f0d/lKvrKv4p/wLXxL38q39m38k76tf8q38+19B/+07+if8Z38sz7ZP+c7++d9F/+C7+pf9N38S767f9n38D19L/+Kf9W/5nv7Pj7F9/X9/Ou+vx/gB/pBfrB/ww/xb/qh/i2f6of54f5tP8K/40f6d/0oP9qP8e/5sf59P86P9xP8RJ/mP/CT/Id+sv/IT/FT/TQ/3af7GX6m/9jP8rP9HP+Jn+s/9fP8fL/AL/QZ/jOf6Rf5LP+5X+y/8Ev8Ur/ML/cr/Eq/yq/2a/xav86v9xv8Rr/Jb/Zb/Fa/zW/3O/xOv8vv9nv8Xr/P7/cH/Jc+23/lD/o/+UP+a3/Yf+Nz/Lf+iP/OH/Xf+2P+B3/c/+hP+JP+lD/tz/if/Fl/zp/3P/sL/hd/0V/yl/kza4wxxhhj/xD1B8f7/p3vyd/GFf2EENdvL5Lz32tuKPjn+QCZ0DEihHiuT/dH/2vUqpWSkvLbuUuUCErMF0JErubnEX+J9VLRQTwjkkV7Ue7vrm+A7HmB/qB+9E4hYv8qJ0Zcja/Wv/1/qP/k02MyK4bn4/+X+vOFSCxxNSefuBpfrV/+f6hfqO0frD/f12lCtPurnDhxNb5aP0k8JZ4XyX9zJmOMMcYYY4wx9mcDZJWuf3T/fOX+PEFfzckrrsZ/dH/OGGOMMcYYY4yxa+/Fnr2efTI5uX1XnvCEJzz5y+Ra/2VijDHGGGOM/btdvei/1ithjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcZyr/8f/07sWu+RMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYu9b+TwAAAP//4ok7tg==")
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
syz_mount_image$fuse(0x0, 0x0, 0x80, &(0x7f00000015c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {'user_id', 0x3d, r3}, 0x2c, {}, 0x2c, {[{@allow_other}, {@max_read={'max_read', 0x3d, 0x3ff}}, {@max_read={'max_read', 0x3d, 0x6}}, {@blksize={'blksize', 0x3d, 0x800}}, {@blksize}, {@max_read={'max_read', 0x3d, 0xffff}}, {@blksize={'blksize', 0x3d, 0x800}}], [{@subj_type={'subj_type', 0x3d, 'mask'}}, {@permit_directio}, {@rootcontext={'rootcontext', 0x3d, 'sysadm_u'}}, {@smackfshat={'smackfshat', 0x3d, '\',.{\'%-+'}}, {@smackfsroot={'smackfsroot', 0x3d, '--#{*/\n&'}}]}}, 0x0, 0x0, &(0x7f0000003840)="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")

636.751505ms ago: executing program 4 (id=1022):
ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff})
syz_emit_ethernet(0x0, 0x0, 0x0)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs/binder0\x00', 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3c8, 0xe8, 0x1d0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@remote, @multicast2, 0x0, 0x0, 0x7, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@CLASSIFY={0x28}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x100}}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0xfc, {@empty, {[0xff, 0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@multicast, {[0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bond_slave_1\x00', 'ipvlan1\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010100, 0x4, 0x1}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418)
clock_gettime(0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x10}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops}, 0x48)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
r4 = dup(r3)
getsockopt$inet_mreqn(r4, 0x0, 0x62, 0x0, &(0x7f00000002c0))
pipe2$9p(&(0x7f0000000240)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000180), 0x2004000, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r5}, 0x2c, {'wfdno', 0x3d, r6}, 0x2c, {[], [], 0x6b}})

0s ago: executing program 3 (id=1023):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0)
write(r0, &(0x7f0000000180)='/proc/self/cwd/t', 0x10)

kernel console output (not intermixed with test programs):

29] F2FS-fs (loop3): invalid crc value
[  217.620428][ T3022] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  217.639974][ T3022] EXT4-fs error (device loop2): __ext4_get_inode_loc:4365: comm syz.2.766: Invalid inode table block 0 in block_group 0
[  217.653751][ T3029] F2FS-fs (loop3): Found nat_bits in checkpoint
[  217.698109][ T3022] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  217.717660][ T3022] EXT4-fs error (device loop2): ext4_truncate:4317: inode #11: comm syz.2.766: mark_inode_dirty error
[  217.733993][ T3029] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  217.750536][ T3022] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  217.807909][ T3022] EXT4-fs error (device loop2): __ext4_get_inode_loc:4365: comm syz.2.766: Invalid inode table block 0 in block_group 0
[  217.873582][ T3022] EXT4-fs (loop2): 1 truncate cleaned up
[  217.891226][ T3022] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[  218.771996][  T285] attempt to access beyond end of device
[  218.771996][  T285] loop3: rw=2049, want=45120, limit=40427
[  218.787376][ T3041] device gretap1 entered promiscuous mode
[  218.850092][ T3043] loop0: detected capacity change from 0 to 512
[  218.909482][ T3043] EXT4-fs (loop0): mounted filesystem without journal. Opts: nouid32,noquota,nouid32,,errors=continue. Quota mode: writeback.
[  218.922845][ T3043] ext4 filesystem being mounted at /147/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  219.292279][ T3056] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  219.380268][ T3058] loop4: detected capacity change from 0 to 512
[  219.478448][ T3062] loop4: detected capacity change from 0 to 1024
[  219.485855][ T3062] EXT4-fs (loop4): Ignoring removed orlov option
[  219.499213][ T3062] EXT4-fs (loop4): mounted filesystem without journal. Opts: block_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,norecovery,,errors=continue. Quota mode: none.
[  220.337072][ T3071] xt_CT: You must specify a L4 protocol and not use inversions on it
[  220.568379][ T3073] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  220.717688][ T3077] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  220.855803][   T30] kauditd_printk_skb: 12 callbacks suppressed
[  220.855818][   T30] audit: type=1326 audit(1788596829.304:990): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3069 comm="syz.1.777" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf5c9f159 code=0x7ffc0000
[  220.910916][   T30] audit: type=1326 audit(1788596829.344:991): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3069 comm="syz.1.777" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f5cf5c98ed7 code=0x7ffc0000
[  220.936325][   T30] audit: type=1326 audit(1788596829.344:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3069 comm="syz.1.777" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5cf5c404d9 code=0x7ffc0000
[  220.984312][   T30] audit: type=1326 audit(1788596829.344:993): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3069 comm="syz.1.777" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf5c9f159 code=0x7ffc0000
[  221.014280][   T30] audit: type=1326 audit(1788596829.344:994): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3069 comm="syz.1.777" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf5c9f159 code=0x7ffc0000
[  221.040421][   T30] audit: type=1326 audit(1788596829.344:995): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3069 comm="syz.1.777" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf5c9f159 code=0x7ffc0000
[  221.072537][   T30] audit: type=1326 audit(1788596829.344:996): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3069 comm="syz.1.777" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f5cf5c9f159 code=0x7ffc0000
[  221.098056][   T30] audit: type=1326 audit(1788596829.344:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3069 comm="syz.1.777" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf5c9f159 code=0x7ffc0000
[  221.124054][ T3062] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability
[  221.148402][   T30] audit: type=1326 audit(1788596829.344:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3069 comm="syz.1.777" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf5c9f159 code=0x7ffc0000
[  221.173786][   T30] audit: type=1326 audit(1788596829.344:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3069 comm="syz.1.777" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5cf5c9f159 code=0x7ffc0000
[  221.290603][ T3080] loop0: detected capacity change from 0 to 40427
[  221.308955][ T3080] F2FS-fs (loop0): invalid crc value
[  221.319168][ T3080] F2FS-fs (loop0): Found nat_bits in checkpoint
[  221.345216][ T3087] loop2: detected capacity change from 0 to 128
[  221.382667][ T3087] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm.
[  221.392415][ T3080] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  221.427165][  T576] udevd[576]: incorrect ext4 checksum on /dev/loop2
[  221.450912][  T576] udevd[576]: incorrect ext4 checksum on /dev/loop2
[  221.564170][ T3092] loop4: detected capacity change from 0 to 512
[  222.748841][ T3092] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  222.761231][ T3092] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  223.012217][ T3092] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.783: Invalid block bitmap block 0 in block_group 0
[  223.025956][ T3092] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  223.035572][ T3092] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.783: attempt to clear invalid blocks 983261 len 1
[  223.049087][ T3092] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.783: Invalid inode table block 0 in block_group 0
[  223.062803][ T3092] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  223.072495][ T3092] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  223.081366][ T3092] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.783: Invalid inode table block 0 in block_group 0
[  223.098430][ T3092] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  223.108702][ T3092] EXT4-fs error (device loop4): ext4_truncate:4317: inode #11: comm syz.4.783: mark_inode_dirty error
[  223.120256][ T3092] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  223.129504][ T3092] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.783: Invalid inode table block 0 in block_group 0
[  223.142393][ T3092] EXT4-fs (loop4): 1 truncate cleaned up
[  223.148148][ T3092] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[  223.753911][  T287] attempt to access beyond end of device
[  223.753911][  T287] loop0: rw=2049, want=45120, limit=40427
[  223.771508][ T3104] netlink: 68 bytes leftover after parsing attributes in process `syz.2.788'.
[  223.817669][   T60] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  223.837168][ T3102] loop1: detected capacity change from 0 to 8192
[  223.868120][ T3102] FAT-fs (loop1): Unrecognized mount option "ÿ18446744073709551615" or missing value
[  224.393290][ T3114] loop4: detected capacity change from 0 to 16
[  224.791849][    T8] Bluetooth: hci0: Frame reassembly failed (-90)
[  224.817973][ T3114] erofs: Unknown parameter 'cac&yUhe_strategy'
[  225.118187][ T3116] loop0: detected capacity change from 0 to 512
[  225.175315][   T60] usb 4-1: Using ep0 maxpacket: 16
[  225.505543][ T3122] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  225.584985][ T3116] loop0: detected capacity change from 0 to 256
[  225.709975][ T3116] exfat: Bad value for 'uid'
[  225.807808][   T60] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  225.818592][   T60] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  225.857297][ T3129] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  225.941880][ T3131] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  226.000482][ T3135] xt_CT: You must specify a L4 protocol and not use inversions on it
[  226.017781][   T60] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  226.027740][   T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.040238][   T60] usb 4-1: Product: syz
[  226.067817][   T60] usb 4-1: can't set config #1, error -71
[  226.078666][   T60] usb 4-1: USB disconnect, device number 12
[  226.241149][ T3137] loop2: detected capacity change from 0 to 40427
[  226.316933][   T30] kauditd_printk_skb: 129 callbacks suppressed
[  226.316952][   T30] audit: type=1326 audit(1788596834.764:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3134 comm="syz.3.795" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca880c9159 code=0x7ffc0000
[  226.348452][   T30] audit: type=1326 audit(1788596834.764:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3134 comm="syz.3.795" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca880c9159 code=0x7ffc0000
[  226.374541][   T30] audit: type=1326 audit(1788596834.774:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3134 comm="syz.3.795" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fca880c2ed7 code=0x7ffc0000
[  226.375477][ T3137] F2FS-fs (loop2): invalid crc value
[  226.400312][   T30] audit: type=1326 audit(1788596834.774:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3134 comm="syz.3.795" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca8806a4d9 code=0x7ffc0000
[  226.429698][   T30] audit: type=1326 audit(1788596834.774:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3134 comm="syz.3.795" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca880c9159 code=0x7ffc0000
[  226.456203][   T30] audit: type=1326 audit(1788596834.774:1134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3134 comm="syz.3.795" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca880c9159 code=0x7ffc0000
[  226.481565][   T30] audit: type=1326 audit(1788596834.774:1135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3134 comm="syz.3.795" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7fca880c9159 code=0x7ffc0000
[  226.484153][ T3137] F2FS-fs (loop2): Found nat_bits in checkpoint
[  226.506751][   T30] audit: type=1326 audit(1788596834.774:1136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3134 comm="syz.3.795" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fca880c9159 code=0x7ffc0000
[  226.537906][   T30] audit: type=1326 audit(1788596834.804:1137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3134 comm="syz.3.795" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fca880c2ed7 code=0x7ffc0000
[  226.563006][   T30] audit: type=1326 audit(1788596834.804:1138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3134 comm="syz.3.795" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fca8806a4d9 code=0x7ffc0000
[  226.594487][ T3137] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  226.864151][ T3148] loop1: detected capacity change from 0 to 512
[  227.923517][  T294] Bluetooth: hci0: command 0x1003 tx timeout
[  227.938902][ T1699] Bluetooth: hci0: sending frame failed (-49)
[  227.968945][ T3148] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  227.981195][ T3148] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  228.039336][ T3148] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.798: Invalid block bitmap block 0 in block_group 0
[  228.053145][ T3148] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  228.062383][ T3148] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.798: attempt to clear invalid blocks 983261 len 1
[  228.076121][ T3148] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.798: Invalid inode table block 0 in block_group 0
[  228.089301][ T3148] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  228.099078][ T3148] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  228.108170][ T3148] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.798: Invalid inode table block 0 in block_group 0
[  228.121051][ T3148] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  228.131082][ T3148] EXT4-fs error (device loop1): ext4_truncate:4317: inode #11: comm syz.1.798: mark_inode_dirty error
[  228.142468][ T3148] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  228.143341][ T3152] netlink: 68 bytes leftover after parsing attributes in process `syz.0.799'.
[  228.153180][ T3148] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.798: Invalid inode table block 0 in block_group 0
[  228.173440][ T3148] EXT4-fs (loop1): 1 truncate cleaned up
[  228.179167][ T3148] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[  228.462951][ T3158] loop0: detected capacity change from 0 to 512
[  228.558326][  T288] attempt to access beyond end of device
[  228.558326][  T288] loop2: rw=2049, want=45120, limit=40427
[  228.588795][ T3164] netlink: 12 bytes leftover after parsing attributes in process `syz.0.806'.
[  228.739294][ T3172] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  228.839404][    T8] Bluetooth: hci1: Frame reassembly failed (-90)
[  229.724281][ T3177] netlink: 68 bytes leftover after parsing attributes in process `syz.0.810'.
[  229.997800][ T1527] Bluetooth: hci0: command 0x1001 tx timeout
[  230.005269][ T1736] Bluetooth: hci0: sending frame failed (-49)
[  230.260459][ T3184] loop0: detected capacity change from 0 to 512
[  230.301243][ T3184] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  230.313406][ T3184] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  230.404408][ T3184] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.812: Invalid block bitmap block 0 in block_group 0
[  230.418994][ T3184] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  230.428669][ T3184] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.812: attempt to clear invalid blocks 983261 len 1
[  230.443172][ T3184] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz.0.812: Invalid inode table block 0 in block_group 0
[  230.457173][ T3184] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  230.467658][ T3184] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  230.477949][ T3184] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz.0.812: Invalid inode table block 0 in block_group 0
[  230.491746][ T3184] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  230.502383][ T3184] EXT4-fs error (device loop0): ext4_truncate:4317: inode #11: comm syz.0.812: mark_inode_dirty error
[  230.514546][ T3184] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  230.524259][ T3184] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz.0.812: Invalid inode table block 0 in block_group 0
[  230.537924][ T3184] EXT4-fs (loop0): 1 truncate cleaned up
[  230.543636][ T3184] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[  230.797719][  T393] Bluetooth: hci1: command 0x1003 tx timeout
[  230.804292][ T1736] Bluetooth: hci1: sending frame failed (-49)
[  231.157780][ T1505] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  231.204033][ T3175] loop2: detected capacity change from 0 to 131072
[  231.221357][ T3175] F2FS-fs (loop2): Unrecognized mount option "¥"¥‘sN%ùD<îªÀ‘SNÀ—צù¨ïèH)qžAÁ
î<{Œm¶0Ú/ýÖ’Ñ>’S›„„ê¼ÌtìÖ´N…%ºßy˜M§ÿÐnx°[E>‰»ëDûrÕ'îc®å.ëòä—Ä­�
}zQ!F(r&” ´¦ÑõÙæÅYÕ\_mçéž»«ÜÚèóYöl!�²M õl£´¢c›KTàw_)Ç1£ý33v€ß+ê°w†H¼U%|BËJás¢3§‚”=s>W•®¤Ÿ9í}ñT€2ôMaÊþ" or missing value
[  231.346460][ T3188] xt_CT: You must specify a L4 protocol and not use inversions on it
[  231.507715][ T1505] usb 4-1: Using ep0 maxpacket: 32
[  231.627875][ T1505] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  231.636165][ T1505] usb 4-1: config 0 has no interface number 0
[  231.659814][   T30] kauditd_printk_skb: 94 callbacks suppressed
[  231.659830][   T30] audit: type=1326 audit(1788596840.114:1233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3187 comm="syz.0.813" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b05336159 code=0x7ffc0000
[  231.707829][   T30] audit: type=1326 audit(1788596840.114:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3187 comm="syz.0.813" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b05336159 code=0x7ffc0000
[  231.732947][   T30] audit: type=1326 audit(1788596840.114:1235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3187 comm="syz.0.813" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b05336159 code=0x7ffc0000
[  231.733820][ T3191] loop3: detected capacity change from 0 to 512
[  231.757902][ T1527] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  231.764227][ T1505] usb 4-1: string descriptor 0 read error: -71
[  231.778503][   T30] audit: type=1326 audit(1788596840.114:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3187 comm="syz.0.813" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f5b05336159 code=0x7ffc0000
[  231.780167][ T1505] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  231.812840][   T30] audit: type=1326 audit(1788596840.114:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3187 comm="syz.0.813" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b05336159 code=0x7ffc0000
[  231.813278][ T1505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.838157][   T30] audit: type=1326 audit(1788596840.114:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3187 comm="syz.0.813" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b05336159 code=0x7ffc0000
[  231.849431][ T1505] usb 4-1: config 0 descriptor??
[  231.874143][   T30] audit: type=1326 audit(1788596840.114:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3187 comm="syz.0.813" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b05336159 code=0x7ffc0000
[  231.887994][ T1505] usb 4-1: can't set config #0, error -71
[  231.901240][   T30] audit: type=1326 audit(1788596840.114:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3187 comm="syz.0.813" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=326 compat=0 ip=0x7f5b05336159 code=0x7ffc0000
[  231.911682][ T1505] usb 4-1: USB disconnect, device number 13
[  231.937275][   T30] audit: type=1326 audit(1788596840.114:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3187 comm="syz.0.813" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5b05336159 code=0x7ffc0000
[  231.941283][ T3191] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  231.962201][   T30] audit: type=1326 audit(1788596840.114:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3187 comm="syz.0.813" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f5b052f698e code=0x7ffc0000
[  231.998291][ T3191] EXT4-fs (loop3): 1 truncate cleaned up
[  232.007250][ T3191] EXT4-fs (loop3): mounted filesystem without journal. Opts: noload,nolazytime,discard,max_batch_time=0x0000000000000003,data_err=ignore,noblock_validity,,errors=continue. Quota mode: none.
[  232.077711][  T393] Bluetooth: hci0: command 0x1009 tx timeout
[  232.127669][ T1527] usb 3-1: device descriptor read/64, error -71
[  232.153649][ T3196] loop3: detected capacity change from 0 to 40427
[  232.212003][ T3196] F2FS-fs (loop3): invalid crc value
[  232.219706][ T3196] F2FS-fs (loop3): Found nat_bits in checkpoint
[  232.255249][ T3196] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  232.418644][ T3203] loop0: detected capacity change from 0 to 512
[  232.627811][ T1527] usb 3-1: device descriptor read/64, error -71
[  232.822448][ T3203] loop0: detected capacity change from 0 to 256
[  232.877780][  T393] Bluetooth: hci1: command 0x1001 tx timeout
[  232.884418][ T1736] Bluetooth: hci1: sending frame failed (-49)
[  233.006468][ T1527] usb 3-1: new full-speed USB device number 13 using dummy_hcd
[  233.015014][ T3203] exfat: Bad value for 'uid'
[  233.185264][ T3212] netlink: 80 bytes leftover after parsing attributes in process `syz.2.817'.
[  233.318200][ T3216] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  233.359019][  T285] attempt to access beyond end of device
[  233.359019][  T285] loop3: rw=2049, want=45120, limit=40427
[  233.475556][ T3218] netlink: 68 bytes leftover after parsing attributes in process `syz.3.821'.
[  234.297701][ T1527] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  234.387711][ T1505] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  234.482439][ T3231] xt_CT: You must specify a L4 protocol and not use inversions on it
[  234.547766][ T1527] usb 3-1: Using ep0 maxpacket: 32
[  234.667772][ T1527] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  234.675975][ T1527] usb 3-1: config 0 has no interface number 0
[  234.747760][ T1505] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  234.759114][ T1505] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  234.772280][ T1505] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  234.781696][ T1505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.794567][ T1505] usb 1-1: config 0 descriptor??
[  234.837748][ T1527] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  234.847219][ T1527] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  234.855335][ T1527] usb 3-1: Product: syz
[  234.859538][ T1527] usb 3-1: Manufacturer: syz
[  234.864156][ T1527] usb 3-1: SerialNumber: syz
[  234.869557][ T1527] usb 3-1: config 0 descriptor??
[  234.908462][ T1527] smsc95xx v2.0.0
[  235.037733][  T393] Bluetooth: hci1: command 0x1009 tx timeout
[  235.060857][ T3237] loop4: detected capacity change from 0 to 512
[  235.220722][ T3243] loop4: detected capacity change from 0 to 40427
[  235.249520][ T3243] F2FS-fs (loop4): invalid crc value
[  235.257109][ T3243] F2FS-fs (loop4): Found nat_bits in checkpoint
[  235.268734][ T1505] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  235.280482][ T1505] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  235.297149][ T1505] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  235.305606][ T1505] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  235.314230][ T1505] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  235.314981][ T3243] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  235.323049][ T1505] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x0
[  235.343016][ T1505] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x4
[  235.348107][ T1527] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  235.357830][ T1505] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x6
[  235.366607][ T1527] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  235.377526][ T1505] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0xd
[  235.385030][ T1505] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0xd
[  235.392557][ T1505] kovaplus 0003:1E7D:2D50.0003: unknown main item tag 0x6
[  235.400108][ T1505] kovaplus 0003:1E7D:2D50.0003: unexpected long global item
[  235.408264][ T1505] kovaplus 0003:1E7D:2D50.0003: parse failed
[  235.414442][ T1505] kovaplus: probe of 0003:1E7D:2D50.0003 failed with error -22
[  235.476424][ T3249] netlink: 68 bytes leftover after parsing attributes in process `syz.3.832'.
[  235.515039][ T1505] usb 1-1: USB disconnect, device number 10
[  235.538156][ T3257] loop3: detected capacity change from 0 to 256
[  235.560997][ T3257] exfat: Deprecated parameter 'utf8'
[  235.566627][ T3257] exfat: Deprecated parameter 'namecase'
[  235.572682][ T3257] exfat: Deprecated parameter 'namecase'
[  235.579218][ T3257] exfat: Deprecated parameter 'utf8'
[  235.594814][ T3257] exFAT-fs (loop3): failed to load upcase table (idx : 0x00012153, chksum : 0x69f3fdb7, utbl_chksum : 0xe619d30d)
[  235.947920][ T1527] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  235.948311][ T1527] smsc95xx: probe of 3-1:0.67 failed with error -71
[  235.959752][ T1527] usb 3-1: USB disconnect, device number 14
[  236.270290][ T3265] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  236.394740][  T289] attempt to access beyond end of device
[  236.394740][  T289] loop4: rw=2049, want=45120, limit=40427
[  236.634946][ T3273] loop2: detected capacity change from 0 to 512
[  236.753987][ T3274] loop4: detected capacity change from 0 to 16
[  236.761636][   T30] kauditd_printk_skb: 386 callbacks suppressed
[  236.761725][   T30] audit: type=1107 audit(1788596845.194:1629): pid=3269 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Ü$'
[  236.783951][    T8] Bluetooth: hci0: Frame reassembly failed (-90)
[  236.791748][ T3274] erofs: Unknown parameter 'cac&yUhe_strategy'
[  237.527972][ T3280] xt_CT: You must specify a L4 protocol and not use inversions on it
[  237.893791][   T30] audit: type=1326 audit(1788596846.344:1630): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3277 comm="syz.2.842" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990a350159 code=0x7ffc0000
[  237.982583][   T30] audit: type=1326 audit(1788596846.374:1631): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3277 comm="syz.2.842" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f990a349ed7 code=0x7ffc0000
[  238.015660][ T3283] netlink: 28 bytes leftover after parsing attributes in process `syz.3.843'.
[  238.018507][   T30] audit: type=1326 audit(1788596846.374:1632): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3277 comm="syz.2.842" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f990a2f14d9 code=0x7ffc0000
[  238.049423][ T1505] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  238.061938][   T30] audit: type=1326 audit(1788596846.374:1633): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3277 comm="syz.2.842" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990a350159 code=0x7ffc0000
[  238.097849][   T30] audit: type=1326 audit(1788596846.374:1634): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3277 comm="syz.2.842" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990a350159 code=0x7ffc0000
[  238.123589][   T30] audit: type=1326 audit(1788596846.374:1635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3277 comm="syz.2.842" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=88 compat=0 ip=0x7f990a350159 code=0x7ffc0000
[  238.156114][ T3287] loop3: detected capacity change from 0 to 2048
[  238.163661][   T30] audit: type=1326 audit(1788596846.374:1636): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3277 comm="syz.2.842" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990a350159 code=0x7ffc0000
[  238.188688][   T30] audit: type=1326 audit(1788596846.384:1637): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3277 comm="syz.2.842" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f990a349ed7 code=0x7ffc0000
[  238.213858][   T30] audit: type=1326 audit(1788596846.384:1638): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3277 comm="syz.2.842" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f990a2f14d9 code=0x7ffc0000
[  238.309504][ T3287] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  238.324542][ T3287] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1176: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  238.340225][ T3287] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  238.353018][ T3287] EXT4-fs (loop3): This should not happen!! Data will be lost
[  238.353018][ T3287] 
[  238.363028][ T3287] EXT4-fs (loop3): Total free blocks count 0
[  238.369549][ T3287] EXT4-fs (loop3): Free/Dirty block details
[  238.375477][ T3287] EXT4-fs (loop3): free_blocks=2415919504
[  238.381267][ T3287] EXT4-fs (loop3): dirty_blocks=16
[  238.386734][ T3287] EXT4-fs (loop3): Block reservation details
[  238.392951][ T3287] EXT4-fs (loop3): i_reserved_data_blocks=1
[  238.404740][    T8] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 1 with error 28
[  238.417365][    T8] EXT4-fs (loop3): This should not happen!! Data will be lost
[  238.417365][    T8] 
[  238.447829][ T1505] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  238.617776][ T1505] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  238.626970][ T1505] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.635239][ T1505] usb 1-1: Product: syz
[  238.639480][ T1505] usb 1-1: Manufacturer: syz
[  238.644089][ T1505] usb 1-1: SerialNumber: syz
[  238.688320][ T1505] cdc_ncm 1-1:1.0: skipping garbage
[  238.747711][ T1527] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  238.798119][  T315] Bluetooth: hci0: command 0x1003 tx timeout
[  238.857287][ T1699] Bluetooth: hci0: sending frame failed (-49)
[  238.990577][ T3298] pimreg: tun_chr_ioctl cmd 1074025677
[  238.996329][ T3298] pimreg: linktype set to 512
[  239.009494][ T3294] loop2: detected capacity change from 0 to 40427
[  239.097773][ T1527] usb 4-1: device descriptor read/64, error -71
[  239.135884][ T3263] loop0: detected capacity change from 0 to 512
[  239.160956][ T3294] F2FS-fs (loop2): invalid crc value
[  239.261517][ T3263] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  239.270664][ T3294] F2FS-fs (loop2): Found nat_bits in checkpoint
[  239.328463][ T3294] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  240.865708][ T3311] loop1: detected capacity change from 0 to 512
[  240.929520][ T3311] EXT4-fs (loop1): Mount option "dioread_nolock" incompatible with ext3
[  241.137679][ T1527] usb 4-1: device descriptor read/64, error -71
[  241.145257][   T26] Bluetooth: hci0: command 0x1001 tx timeout
[  241.151404][ T1699] Bluetooth: hci0: sending frame failed (-49)
[  241.183087][  T288] attempt to access beyond end of device
[  241.183087][  T288] loop2: rw=2049, want=45120, limit=40427
[  241.277746][ T1505] cdc_ncm 1-1:1.0: bind() failure
[  241.298022][ T1505] cdc_ncm: probe of 1-1:1.1 failed with error -71
[  241.323376][ T3316] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  241.328000][ T1505] cdc_mbim: probe of 1-1:1.1 failed with error -71
[  241.351490][ T1505] usb 1-1: USB disconnect, device number 11
[  241.482582][ T3319] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  241.494715][ T1527] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  241.524516][ T3320] loop2: detected capacity change from 0 to 512
[  241.773797][ T3326] netlink: 28 bytes leftover after parsing attributes in process `syz.2.854'.
[  241.940259][ T3324] loop3: detected capacity change from 0 to 40427
[  241.941701][ T3331] loop2: detected capacity change from 0 to 512
[  241.954759][ T3324] F2FS-fs (loop3): Small segment_count (9 < 1 * 24)
[  241.961556][ T3324] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  241.971176][ T3324] F2FS-fs (loop3): invalid crc value
[  241.980067][ T3324] F2FS-fs (loop3): Found nat_bits in checkpoint
[  242.016614][ T3331] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,,errors=continue. Quota mode: writeback.
[  242.018127][ T3324] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  242.031416][ T3331] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  242.037081][ T3324] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  242.133127][    T8] tipc: Subscription rejected, illegal request
[  242.284468][  T873] Bluetooth: hci1: Frame reassembly failed (-90)
[  243.353255][ T3346] loop2: detected capacity change from 0 to 512
[  243.361320][   T26] Bluetooth: hci0: command 0x1009 tx timeout
[  243.398409][ T3346] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  243.410507][ T3346] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  243.495599][ T3346] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.859: Invalid block bitmap block 0 in block_group 0
[  243.510044][ T3346] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  243.523536][ T3346] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.859: attempt to clear invalid blocks 983261 len 1
[  243.538717][ T3346] EXT4-fs error (device loop2): __ext4_get_inode_loc:4365: comm syz.2.859: Invalid inode table block 0 in block_group 0
[  243.552091][ T3346] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  243.563780][ T3346] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  243.573147][ T3346] EXT4-fs error (device loop2): __ext4_get_inode_loc:4365: comm syz.2.859: Invalid inode table block 0 in block_group 0
[  243.587643][ T3346] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  243.598645][ T3346] EXT4-fs error (device loop2): ext4_truncate:4317: inode #11: comm syz.2.859: mark_inode_dirty error
[  243.610390][ T3346] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  243.621269][ T3346] EXT4-fs error (device loop2): __ext4_get_inode_loc:4365: comm syz.2.859: Invalid inode table block 0 in block_group 0
[  243.634763][ T3346] EXT4-fs (loop2): 1 truncate cleaned up
[  243.640514][ T3346] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[  244.170184][ T3354] FAULT_INJECTION: forcing a failure.
[  244.170184][ T3354] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  244.183924][ T3354] CPU: 1 PID: 3354 Comm: syz.0.862 Not tainted syzkaller #0
[  244.191253][ T3354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  244.201361][ T3354] Call Trace:
[  244.204660][ T3354]  <TASK>
[  244.207616][ T3354]  __dump_stack+0x21/0x30
[  244.212000][ T3354]  dump_stack_lvl+0x110/0x170
[  244.216717][ T3354]  ? show_regs_print_info+0x20/0x20
[  244.222039][ T3354]  dump_stack+0x15/0x20
[  244.226234][ T3354]  should_fail+0x3ab/0x500
[  244.230691][ T3354]  should_fail_usercopy+0x1a/0x20
[  244.235826][ T3354]  _copy_from_iter+0x220/0x10a0
[  244.240911][ T3354]  ? arch_stack_walk+0xee/0x140
[  244.245794][ T3354]  ? copy_mc_pipe_to_iter+0x7e0/0x7e0
[  244.251200][ T3354]  ? avc_has_perm_noaudit+0x30a/0x490
[  244.256651][ T3354]  packet_sendmsg+0x3160/0x5060
[  244.261566][ T3354]  ? kasan_set_track+0x4a/0x70
[  244.266354][ T3354]  ? ____kasan_slab_free+0x125/0x160
[  244.271674][ T3354]  ? avc_has_perm_noaudit+0x490/0x490
[  244.277072][ T3354]  ? kstrtouint_from_user+0x1c4/0x220
[  244.282468][ T3354]  ? selinux_socket_sendmsg+0x22f/0x340
[  244.288044][ T3354]  ? selinux_socket_accept+0x570/0x570
[  244.293530][ T3354]  ? __kasan_check_write+0x14/0x20
[  244.298781][ T3354]  ? packet_getsockopt+0x900/0x900
[  244.303932][ T3354]  ? security_socket_sendmsg+0x82/0xa0
[  244.309586][ T3354]  __sys_sendto+0x46d/0x620
[  244.314121][ T3354]  ? __ia32_sys_getpeername+0x90/0x90
[  244.319698][ T3354]  ? __ia32_sys_read+0x90/0x90
[  244.324489][ T3354]  __x64_sys_sendto+0xe5/0x100
[  244.329453][ T3354]  x64_sys_call+0x178/0x9a0
[  244.334002][ T3354]  do_syscall_64+0x4c/0xa0
[  244.338456][ T3354]  ? clear_bhb_loop+0x50/0xa0
[  244.343155][ T3354]  ? clear_bhb_loop+0x50/0xa0
[  244.347854][ T3354]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  244.353780][ T3354] RIP: 0033:0x7f5b05336159
[  244.358329][ T3354] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  244.378147][ T3354] RSP: 002b:00007f5b03d8f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  244.386597][ T3354] RAX: ffffffffffffffda RBX: 00007f5b055bdfa0 RCX: 00007f5b05336159
[  244.394604][ T3354] RDX: 0000000000000048 RSI: 0000200000000580 RDI: 0000000000000005
[  244.402627][ T3354] RBP: 00007f5b03d8f090 R08: 0000000000000000 R09: 0000000000000000
[  244.410627][ T3354] R10: 0000000000040001 R11: 0000000000000246 R12: 0000000000000001
[  244.418633][ T3354] R13: 00007f5b055be038 R14: 00007f5b055bdfa0 R15: 00007fff6ee33f68
[  244.426834][ T3354]  </TASK>
[  244.430684][ T1527] Bluetooth: hci1: command 0x1003 tx timeout
[  244.436752][ T1736] Bluetooth: hci1: sending frame failed (-49)
[  244.552391][ T3359] loop0: detected capacity change from 0 to 256
[  244.597490][ T3359] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d)
[  244.657261][ T3364] netlink: 28 bytes leftover after parsing attributes in process `syz.0.866'.
[  244.707320][ T3371] syz.0.867 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  244.751318][ T3372] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  244.877735][   T60] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  245.237797][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 246, changing to 11
[  245.249234][   T60] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  245.262099][   T60] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  245.271353][   T60] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.280757][   T60] usb 4-1: config 0 descriptor??
[  245.555999][ T3376] xt_CT: You must specify a L4 protocol and not use inversions on it
[  245.845578][   T60] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0
[  245.852940][   T60] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0
[  245.860163][   T60] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0
[  245.867359][   T60] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0
[  245.874560][   T60] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0
[  245.881775][   T60] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x0
[  245.889088][   T60] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x4
[  245.896259][   T60] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x6
[  245.903513][   T60] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0xd
[  245.910703][   T60] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0xd
[  245.917942][   T60] kovaplus 0003:1E7D:2D50.0004: unknown main item tag 0x6
[  245.925198][   T60] kovaplus 0003:1E7D:2D50.0004: unexpected long global item
[  245.932712][   T60] kovaplus 0003:1E7D:2D50.0004: parse failed
[  245.938762][   T60] kovaplus: probe of 0003:1E7D:2D50.0004 failed with error -22
[  245.968138][ T1527] usb 4-1: USB disconnect, device number 16
[  246.478110][ T1527] Bluetooth: hci1: command 0x1001 tx timeout
[  246.484169][ T1736] Bluetooth: hci1: sending frame failed (-49)
[  246.551141][ T3387] loop0: detected capacity change from 0 to 1024
[  246.577346][   T30] kauditd_printk_skb: 227 callbacks suppressed
[  246.577362][   T30] audit: type=1326 audit(1788596855.024:1866): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3389 comm="syz.2.876" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990a350159 code=0x7ffc0000
[  246.608929][ T3390] loop2: detected capacity change from 0 to 256
[  246.609216][   T30] audit: type=1326 audit(1788596855.024:1867): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3389 comm="syz.2.876" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990a350159 code=0x7ffc0000
[  246.640201][   T30] audit: type=1326 audit(1788596855.034:1868): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3389 comm="syz.2.876" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f990a350159 code=0x7ffc0000
[  246.665104][   T30] audit: type=1326 audit(1788596855.034:1869): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3389 comm="syz.2.876" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990a350159 code=0x7ffc0000
[  246.690178][   T30] audit: type=1326 audit(1788596855.034:1870): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3389 comm="syz.2.876" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990a350159 code=0x7ffc0000
[  246.715033][   T30] audit: type=1326 audit(1788596855.034:1871): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3389 comm="syz.2.876" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=51 compat=0 ip=0x7f990a350159 code=0x7ffc0000
[  246.740293][   T30] audit: type=1326 audit(1788596855.034:1872): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3389 comm="syz.2.876" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990a350159 code=0x7ffc0000
[  246.765464][   T30] audit: type=1326 audit(1788596855.034:1873): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3389 comm="syz.2.876" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990a350159 code=0x7ffc0000
[  246.767844][   T60] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  246.798120][   T30] audit: type=1326 audit(1788596855.034:1874): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3389 comm="syz.2.876" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f990a31098e code=0x7ffc0000
[  246.828647][ T3387] EXT4-fs (loop0): Ignoring removed bh option
[  246.831894][ T3390] FAT-fs (loop2): Directory bread(block 64) failed
[  246.841969][ T3390] FAT-fs (loop2): Directory bread(block 65) failed
[  246.848415][   T30] audit: type=1326 audit(1788596855.034:1875): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3389 comm="syz.2.876" exe="/root/ci2-android-5-15/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f990a350159 code=0x7ffc0000
[  246.849628][ T3390] FAT-fs (loop2): Directory bread(block 66) failed
[  246.883282][ T3390] FAT-fs (loop2): Directory bread(block 67) failed
[  246.890105][ T3390] FAT-fs (loop2): Directory bread(block 68) failed
[  246.896794][ T3390] FAT-fs (loop2): Directory bread(block 69) failed
[  246.903636][ T3390] FAT-fs (loop2): Directory bread(block 70) failed
[  246.904681][ T3387] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,nombcache,barrier,norecovery,debug_want_extra_isize=0x0000000000000080,lazytime,nodelalloc,usrquota,noauto_da_alloc,bh,init_itable,,errors=continue. Quota mode: writeback.
[  246.911038][ T3390] FAT-fs (loop2): Directory bread(block 71) failed
[  246.942706][ T3390] FAT-fs (loop2): Directory bread(block 72) failed
[  246.949580][ T3390] FAT-fs (loop2): Directory bread(block 73) failed
[  246.975009][ T3387] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  247.037567][ T3395] loop0: detected capacity change from 0 to 256
[  247.054882][ T3397] netlink: 28 bytes leftover after parsing attributes in process `syz.2.878'.
[  247.057806][   T60] usb 4-1: Using ep0 maxpacket: 32
[  247.065082][ T3397] netlink: 8 bytes leftover after parsing attributes in process `syz.2.878'.
[  247.088100][ T3395] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d)
[  247.170347][ T3403] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=69 sclass=netlink_route_socket pid=3403 comm=syz.4.882
[  247.187714][   T60] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  247.195875][   T60] usb 4-1: config 0 has no interface number 0
[  247.203799][ T3403] device ip6gre1 entered promiscuous mode
[  247.214233][ T3407] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  247.224897][ T3405] loop0: detected capacity change from 0 to 512
[  247.258491][ T3405] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  247.273138][ T3405] EXT4-fs (loop0): 1 truncate cleaned up
[  247.279580][ T3405] EXT4-fs (loop0): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback.
[  247.637744][   T60] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  247.646922][   T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.655685][   T60] usb 4-1: Product: syz
[  247.662801][   T60] usb 4-1: Manufacturer: syz
[  247.670324][   T60] usb 4-1: SerialNumber: syz
[  247.683114][   T60] usb 4-1: config 0 descriptor??
[  247.728150][   T60] smsc95xx v2.0.0
[  247.775430][ T3416] loop0: detected capacity change from 0 to 40427
[  247.869066][ T3416] F2FS-fs (loop0): invalid crc value
[  247.877266][ T3416] F2FS-fs (loop0): Found nat_bits in checkpoint
[  247.910916][ T3416] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  248.571195][  T559] Bluetooth: hci1: command 0x1009 tx timeout
[  249.118063][   T60] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  249.128880][   T60] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  249.225415][  T287] attempt to access beyond end of device
[  249.225415][  T287] loop0: rw=2049, want=45120, limit=40427
[  249.566281][ T3437] netlink: 28 bytes leftover after parsing attributes in process `syz.0.889'.
[  249.575415][ T3437] netlink: 8 bytes leftover after parsing attributes in process `syz.0.889'.
[  249.600128][ T3439] loop0: detected capacity change from 0 to 256
[  249.621691][ T3439] exfat: Bad value for 'uid'
[  249.656222][ T3441] loop0: detected capacity change from 0 to 512
[  249.667832][ T1505] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  249.698509][ T3441] EXT4-fs (loop0): Quota format mount options ignored when QUOTA feature is enabled
[  249.708716][ T3441] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 0 overlaps superblock
[  249.718483][ T3441] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  249.728495][ T3441] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  249.739359][ T3441] EXT4-fs (loop0): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  249.749771][ T3441] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz.0.891: Invalid inode table block 0 in block_group 0
[  249.763460][ T3441] EXT4-fs (loop0): get root inode failed
[  249.769517][ T3441] EXT4-fs (loop0): mount failed
[  249.797751][   T60] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  249.808805][   T60] smsc95xx: probe of 4-1:0.67 failed with error -71
[  249.817416][   T60] usb 4-1: USB disconnect, device number 17
[  249.852273][ T3441] loop0: detected capacity change from 0 to 256
[  249.877251][ T3441] FAT-fs (loop0): Directory bread(block 64) failed
[  249.889060][ T3441] FAT-fs (loop0): Directory bread(block 65) failed
[  249.904609][ T3441] FAT-fs (loop0): Directory bread(block 66) failed
[  249.911691][ T3441] FAT-fs (loop0): Directory bread(block 67) failed
[  249.918693][ T3441] FAT-fs (loop0): Directory bread(block 68) failed
[  249.925953][ T3441] FAT-fs (loop0): Directory bread(block 69) failed
[  249.933133][ T3441] FAT-fs (loop0): Directory bread(block 70) failed
[  249.939796][ T3441] FAT-fs (loop0): Directory bread(block 71) failed
[  249.946580][ T3441] FAT-fs (loop0): Directory bread(block 72) failed
[  249.953269][ T3441] FAT-fs (loop0): Directory bread(block 73) failed
[  250.027811][ T1505] usb 5-1: not running at top speed; connect to a high speed hub
[  250.119008][ T3450] loop2: detected capacity change from 0 to 16
[  250.127204][  T307] Bluetooth: hci0: Frame reassembly failed (-90)
[  250.154931][  T307] Bluetooth: hci0: Frame reassembly failed (-84)
[  250.168948][ T3450] erofs: Unknown parameter 'cac&yUhe_strategy'
[  250.189321][ T3449] loop0: detected capacity change from 0 to 512
[  250.245916][ T3449] EXT4-fs (loop0): Ignoring removed oldalloc option
[  250.275935][ T3449] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[  250.496756][ T3449] EXT4-fs (loop0): 1 truncate cleaned up
[  250.525668][ T3449] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,abort,data_err=ignore,acl,oldalloc,errors=remount-ro,. Quota mode: none.
[  251.157750][ T1505] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  251.217658][   T39] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  251.365214][ T1505] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  251.375673][ T1505] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  251.384750][ T1505] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  251.428840][ T1505] usb 5-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  251.477726][   T39] usb 4-1: Using ep0 maxpacket: 32
[  251.617777][   T39] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  251.625967][   T39] usb 4-1: config 0 has no interface number 0
[  251.637813][ T1505] usb 5-1: Failed to query (GET_INFO) UVC control 1 on unit 1: 0 (exp. 1).
[  251.724965][ T3459] loop0: detected capacity change from 0 to 512
[  251.792269][ T3459] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  251.804421][ T3459] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  251.860789][   T39] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  251.880800][ T3459] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.897: Invalid block bitmap block 0 in block_group 0
[  251.895251][ T3459] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  251.905392][ T3459] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.897: attempt to clear invalid blocks 983261 len 1
[  251.919745][ T3459] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz.0.897: Invalid inode table block 0 in block_group 0
[  251.933693][ T3459] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  251.944485][ T3459] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  251.953842][ T3459] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz.0.897: Invalid inode table block 0 in block_group 0
[  251.967951][ T3459] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  251.978575][ T3459] EXT4-fs error (device loop0): ext4_truncate:4317: inode #11: comm syz.0.897: mark_inode_dirty error
[  251.990606][ T3459] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  252.000827][ T3459] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz.0.897: Invalid inode table block 0 in block_group 0
[  252.014519][ T3459] EXT4-fs (loop0): 1 truncate cleaned up
[  252.020256][ T3459] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[  252.175590][   T39] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.191745][   T39] usb 4-1: Product: syz
[  252.196356][   T39] usb 4-1: Manufacturer: syz
[  252.203387][   T39] usb 4-1: SerialNumber: syz
[  252.236196][   T39] usb 4-1: config 0 descriptor??
[  252.243726][ T1421] Bluetooth: hci0: command 0x1003 tx timeout
[  252.251377][ T1736] Bluetooth: hci0: sending frame failed (-49)
[  252.289838][   T39] smsc95xx v2.0.0
[  252.827753][   T39] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  252.838634][   T39] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  252.857739][ T1505] usb 5-1: No streaming interface found for terminal 2.
[  252.937410][ T3470] netlink: 28 bytes leftover after parsing attributes in process `syz.1.901'.
[  252.946764][ T3470] netlink: 8 bytes leftover after parsing attributes in process `syz.1.901'.
[  252.973161][ T3472] loop1: detected capacity change from 0 to 256
[  252.997701][   T39] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  252.999718][ T3472] exfat: Bad value for 'uid'
[  253.017709][   T39] smsc95xx: probe of 4-1:0.67 failed with error -32
[  253.060763][ T1505] usb 5-1: USB disconnect, device number 12
[  253.075286][ T3468] loop0: detected capacity change from 0 to 40427
[  253.128624][ T3468] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[  253.135631][ T3468] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  253.146020][ T3468] F2FS-fs (loop0): invalid crc value
[  253.334595][ T3468] F2FS-fs (loop0): Found nat_bits in checkpoint
[  253.425472][ T3468] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  253.432786][ T3468] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  253.539176][  T307] tipc: Subscription rejected, illegal request
[  253.991591][ T3484] loop4: detected capacity change from 0 to 131072
[  254.017900][ T3484] F2FS-fs (loop4): invalid crc value
[  254.035513][ T3484] F2FS-fs (loop4): Found nat_bits in checkpoint
[  254.082886][ T3484] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  254.192041][ T3498] loop0: detected capacity change from 0 to 512
[  254.249043][ T3498] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  254.261233][ T3498] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  254.272924][ T3498] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:476: comm syz.0.908: Invalid block bitmap block 0 in block_group 0
[  254.286536][ T1421] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  254.294397][ T3498] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  254.303339][ T3498] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #11: comm syz.0.908: attempt to clear invalid blocks 983261 len 1
[  254.316892][ T3498] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz.0.908: Invalid inode table block 0 in block_group 0
[  254.329808][ T3299] Bluetooth: hci0: command 0x1001 tx timeout
[  254.335906][ T1699] Bluetooth: hci0: sending frame failed (-49)
[  254.340926][ T3498] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  254.351727][ T3498] EXT4-fs error (device loop0) in ext4_orphan_del:303: Corrupt filesystem
[  254.360624][ T3498] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz.0.908: Invalid inode table block 0 in block_group 0
[  254.373526][ T3498] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  254.383313][ T3498] EXT4-fs error (device loop0): ext4_truncate:4317: inode #11: comm syz.0.908: mark_inode_dirty error
[  254.394720][ T3498] EXT4-fs error (device loop0) in ext4_process_orphan:345: Corrupt filesystem
[  254.404043][ T3498] EXT4-fs error (device loop0): __ext4_get_inode_loc:4365: comm syz.0.908: Invalid inode table block 0 in block_group 0
[  254.416924][ T3498] EXT4-fs (loop0): 1 truncate cleaned up
[  254.422662][ T3498] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[  254.441557][   T39] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  254.567711][ T1421] usb 2-1: Using ep0 maxpacket: 32
[  254.687732][ T1421] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  254.695989][ T1421] usb 2-1: config 0 has no interface number 0
[  254.807735][   T39] usb 5-1: config index 0 descriptor too short (expected 60772, got 100)
[  254.816308][   T39] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  254.826877][   T39] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  254.835918][   T39] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  254.848050][ T1056] usb 4-1: USB disconnect, device number 18
[  254.867774][ T1421] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  254.876923][ T1421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.885622][ T1421] usb 2-1: Product: syz
[  254.890013][ T1421] usb 2-1: Manufacturer: syz
[  254.935147][ T1421] usb 2-1: SerialNumber: syz
[  254.940870][ T1421] usb 2-1: config 0 descriptor??
[  254.978104][ T1421] smsc95xx v2.0.0
[  255.024020][ T3506] loop0: detected capacity change from 0 to 128
[  255.030543][   T39] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  255.043226][   T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.051851][   T39] usb 5-1: Product: syz
[  255.057827][   T39] usb 5-1: Manufacturer: syz
[  255.062524][   T39] usb 5-1: SerialNumber: syz
[  255.108603][   T39] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  255.115956][   T39] cdc_ncm 5-1:1.0: bind() failure
[  255.364365][    T8] Bluetooth: hci1: Frame reassembly failed (-90)
[  255.373443][    T8] Bluetooth: hci1: Frame reassembly failed (-84)
[  255.470634][ T3484] xt_hashlimit: size too large, truncated to 1048576
[  255.567943][ T1421] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  255.621140][ T1421] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  256.117896][ T1421] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  256.171891][ T1421] smsc95xx: probe of 2-1:0.67 failed with error -71
[  256.265924][ T1421] usb 2-1: USB disconnect, device number 12
[  256.577553][ T1056] Bluetooth: hci0: command 0x1009 tx timeout
[  256.586291][ T3502] loop3: detected capacity change from 0 to 131072
[  256.645918][ T3516] loop1: detected capacity change from 0 to 256
[  256.758348][ T1421] usb 5-1: USB disconnect, device number 13
[  256.769234][ T3516] exfat: Bad value for 'uid'
[  256.792855][ T3502] F2FS-fs (loop3): Test dummy encryption mode enabled
[  256.801511][ T3502] F2FS-fs (loop3): invalid crc value
[  256.833383][ T3502] F2FS-fs (loop3): Found nat_bits in checkpoint
[  256.872859][ T3502] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  256.901386][ T3502] fscrypt: AES-256-XTS using implementation "xts-aes-aesni"
[  257.177703][ T1056] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  257.437675][ T3299] Bluetooth: hci1: command 0x1003 tx timeout
[  257.443807][ T1736] Bluetooth: hci1: sending frame failed (-49)
[  257.457669][ T1056] usb 4-1: device descriptor read/64, error -71
[  257.616800][ T3539] loop4: detected capacity change from 0 to 40427
[  257.681941][ T3539] F2FS-fs (loop4): invalid crc value
[  257.689041][ T3539] F2FS-fs (loop4): Found nat_bits in checkpoint
[  257.723728][ T3539] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  257.847701][ T1056] usb 4-1: device descriptor read/64, error -71
[  257.984461][ T3547] loop1: detected capacity change from 0 to 512
[  258.050634][ T3547] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  258.062722][ T3547] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  258.076031][ T3547] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.920: Invalid block bitmap block 0 in block_group 0
[  258.089936][ T3547] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  258.099015][ T3547] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.920: attempt to clear invalid blocks 983261 len 1
[  258.113368][ T3547] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.920: Invalid inode table block 0 in block_group 0
[  258.126253][ T3547] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  258.136034][ T3547] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  258.145104][ T3547] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.920: Invalid inode table block 0 in block_group 0
[  258.158145][ T3547] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  258.167932][ T3547] EXT4-fs error (device loop1): ext4_truncate:4317: inode #11: comm syz.1.920: mark_inode_dirty error
[  258.179178][ T3547] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  258.188499][ T3547] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.920: Invalid inode table block 0 in block_group 0
[  258.201477][ T3547] EXT4-fs (loop1): 1 truncate cleaned up
[  258.207167][ T3547] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[  258.251727][ T3551] loop3: detected capacity change from 0 to 512
[  258.298335][ T3551] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  258.310004][ T3551] EXT4-fs (loop3): 1 truncate cleaned up
[  258.315768][ T3551] EXT4-fs (loop3): mounted filesystem without journal. Opts: nojournal_checksum,noblock_validity,lazytime,usrquota,usrquota,,errors=continue. Quota mode: writeback.
[  258.395152][  T289] attempt to access beyond end of device
[  258.395152][  T289] loop4: rw=2049, want=45120, limit=40427
[  258.502941][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.508428][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.513840][ T3561] tap0: linktype set to 270
[  258.518731][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.524220][ T3561] tap0: linktype set to 270
[  258.528948][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.530122][ T3562] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3562 comm=syz.4.922
[  258.534622][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.552117][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.557469][ T3561] tap0: linktype set to 270
[  258.562363][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.567723][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.573153][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.578534][ T3561] tap0: linktype set to 270
[  258.585565][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.591023][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.596441][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.601829][ T3561] tap0: linktype set to 270
[  258.606605][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.611973][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.617388][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.623031][ T3561] tap0: linktype set to 270
[  258.627766][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.633121][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.639052][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.644418][ T3561] tap0: linktype set to 270
[  258.649185][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.654520][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.659943][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.665279][ T3561] tap0: linktype set to 270
[  258.670040][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.675365][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.680810][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.686150][ T3561] tap0: linktype set to 270
[  258.690885][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.696226][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.701631][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.707060][ T3561] tap0: linktype set to 270
[  258.711816][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.727298][ T3561] tap0: linktype set to 270
[  258.736846][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.742532][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.748220][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.753702][ T3561] tap0: linktype set to 270
[  258.758593][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.764034][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.770364][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.775822][ T3561] tap0: linktype set to 270
[  258.781132][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.786636][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.792359][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.798019][ T3561] tap0: linktype set to 270
[  258.802825][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.808371][ T3561] tap0: linktype set to 270
[  258.813077][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.818638][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.824015][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.829566][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.834961][ T3561] tap0: linktype set to 270
[  258.840380][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.848646][ T3561] tap0: linktype set to 270
[  258.853592][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.859703][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.865353][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.871142][ T3561] tap0: linktype set to 270
[  258.875913][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.878024][ T1056] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  258.882796][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.894390][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.896174][ T3566] loop1: detected capacity change from 0 to 256
[  258.900692][ T3561] tap0: linktype set to 270
[  258.911301][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.917551][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.923208][ T3561] tap0: linktype set to 270
[  258.927987][ T3559] tap0: tun_chr_ioctl cmd 1074025673
[  258.933463][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.938867][ T3561] tap0: linktype set to 270
[  258.943552][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.948726][ T3566] exfat: Bad value for 'uid'
[  258.949912][ T3561] tap0: linktype set to 270
[  258.958446][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.963811][ T3561] tap0: linktype set to 270
[  258.968572][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.973965][ T3561] tap0: linktype set to 270
[  258.978710][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.984097][ T3561] tap0: linktype set to 270
[  258.988824][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  258.994205][ T3561] tap0: linktype set to 270
[  258.999084][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  259.004496][ T3561] tap0: linktype set to 270
[  259.014288][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  259.020336][ T3561] tap0: linktype set to 270
[  259.025203][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  259.030983][ T3561] tap0: linktype set to 270
[  259.035797][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  259.041213][ T3561] tap0: linktype set to 270
[  259.045980][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  259.051688][ T3561] tap0: linktype set to 270
[  259.060046][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  259.068121][ T3568] loop1: detected capacity change from 0 to 512
[  259.074527][ T3561] tap0: linktype set to 270
[  259.079298][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  259.080053][ T3568] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  259.084644][ T3561] tap0: linktype set to 270
[  259.102289][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  259.107683][ T3568] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  259.117736][ T3561] tap0: linktype set to 270
[  259.122395][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  259.128394][ T3561] tap0: linktype set to 270
[  259.130780][ T3568] EXT4-fs error (device loop1): ext4_read_block_bitmap_nowait:476: comm syz.1.925: Invalid block bitmap block 0 in block_group 0
[  259.133314][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  259.147130][ T1056] usb 4-1: Using ep0 maxpacket: 32
[  259.152768][ T3561] tap0: linktype set to 270
[  259.158210][ T3568] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  259.162566][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  259.171701][ T3568] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.925: attempt to clear invalid blocks 983261 len 1
[  259.176446][ T3561] tap0: linktype set to 270
[  259.191411][ T3568] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.925: Invalid inode table block 0 in block_group 0
[  259.194046][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  259.207310][ T3568] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  259.211501][ T3561] tap0: linktype set to 270
[  259.211782][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  259.222541][ T3568] EXT4-fs error (device loop1) in ext4_orphan_del:303: Corrupt filesystem
[  259.225782][ T3561] tap0: linktype set to 270
[  259.232143][ T3568] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.925: Invalid inode table block 0 in block_group 0
[  259.239849][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  259.245762][ T3568] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  259.257113][ T3561] tap0: linktype set to 270
[  259.263748][ T3568] EXT4-fs error (device loop1): ext4_truncate:4317: inode #11: comm syz.1.925: mark_inode_dirty error
[  259.272022][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  259.277404][ T3568] EXT4-fs error (device loop1) in ext4_process_orphan:345: Corrupt filesystem
[  259.287179][ T3561] tap0: linktype set to 270
[  259.287378][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  259.294024][ T3568] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm syz.1.925: Invalid inode table block 0 in block_group 0
[  259.301934][ T3561] tap0: linktype set to 270
[  259.307426][ T1056] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  259.312431][ T3561] tap0: tun_chr_ioctl cmd 1074025677
[  259.325815][ T3568] EXT4-fs (loop1): 1 truncate cleaned up
[  259.329772][ T3561] tap0: linktype set to 270
[  259.337451][ T1056] usb 4-1: config 0 has no interface number 0
[  259.348134][ T3568] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[  259.517663][ T1421] Bluetooth: hci1: command 0x1001 tx timeout
[  259.523805][ T1736] Bluetooth: hci1: sending frame failed (-49)
[  259.577721][ T1056] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  259.829308][ T3574] loop4: detected capacity change from 0 to 40427
[  259.897456][ T1056] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  259.905557][ T1056] usb 4-1: Product: syz
[  259.909776][ T1056] usb 4-1: Manufacturer: syz
[  259.914401][ T1056] usb 4-1: SerialNumber: syz
[  259.921576][ T1056] usb 4-1: config 0 descriptor??
[  259.928952][ T3574] F2FS-fs (loop4): invalid crc value
[  259.955693][ T3574] F2FS-fs (loop4): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109)
[  259.959093][ T1056] smsc95xx v2.0.0
[  259.984369][ T3574] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  260.003848][  T289] attempt to access beyond end of device
[  260.003848][  T289] loop4: rw=2049, want=45104, limit=40427
[  260.214720][ T3585] loop4: detected capacity change from 0 to 40427
[  260.295013][ T3585] F2FS-fs (loop4): invalid crc value
[  260.311170][ T3585] F2FS-fs (loop4): Found nat_bits in checkpoint
[  260.350009][ T3585] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  260.407759][ T1056] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  260.419100][ T1056] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  260.896461][ T3597] loop1: detected capacity change from 0 to 16
[  261.988078][   T30] kauditd_printk_skb: 73 callbacks suppressed
[  261.988096][   T30] audit: type=1107 audit(1788596870.336:1949): pid=3592 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Ü$'
[  262.018247][ T3597] erofs: Unknown parameter 'cac&yUhe_strategy'
[  262.024978][ T3299] Bluetooth: hci1: command 0x1009 tx timeout
[  262.049327][  T873] Bluetooth: hci0: Frame reassembly failed (-90)
[  262.297716][ T1056] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  262.317741][ T1056] smsc95xx: probe of 4-1:0.67 failed with error -71
[  262.343564][ T1056] usb 4-1: USB disconnect, device number 20
[  262.354187][  T289] attempt to access beyond end of device
[  262.354187][  T289] loop4: rw=2049, want=45120, limit=40427
[  262.459636][ T3605] loop2: detected capacity change from 0 to 40427
[  262.504311][ T3605] F2FS-fs (loop2): invalid crc value
[  262.534907][ T3605] F2FS-fs (loop2): Found nat_bits in checkpoint
[  262.575983][ T3605] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  262.678611][ T3610] loop4: detected capacity change from 0 to 40427
[  262.711762][ T3610] F2FS-fs (loop4): invalid crc value
[  262.718683][ T3610] F2FS-fs (loop4): Found nat_bits in checkpoint
[  262.770593][ T3610] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  262.786357][ T3610] tipc: Started in network mode
[  262.791536][ T3610] tipc: Node identity ac14140f, cluster identity 4711
[  262.798583][ T3610] tipc: New replicast peer: 255.255.255.255
[  262.804834][ T3610] tipc: Enabled bearer <udp:syz2>, priority 10
[  262.811744][ T3610] tipc: New replicast peer: fc02:0000:0000:0000:0000:0000:0000:0001
[  262.936132][ T3621] loop3: detected capacity change from 0 to 512
[  262.978952][ T3621] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  262.991032][ T3621] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  263.007860][ T3621] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.934: Invalid block bitmap block 0 in block_group 0
[  263.021508][ T3621] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  263.030801][ T3621] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.934: attempt to clear invalid blocks 983261 len 1
[  263.045526][ T3621] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.934: Invalid inode table block 0 in block_group 0
[  263.058338][ T3621] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  263.068035][ T3621] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  263.076749][ T3621] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.934: Invalid inode table block 0 in block_group 0
[  263.089559][ T3621] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  263.099216][ T3621] EXT4-fs error (device loop3): ext4_truncate:4317: inode #11: comm syz.3.934: mark_inode_dirty error
[  263.110604][ T3621] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  263.119729][ T3621] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.934: Invalid inode table block 0 in block_group 0
[  263.175772][ T3621] EXT4-fs (loop3): 1 truncate cleaned up
[  263.181632][ T3621] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[  263.202617][  T288] attempt to access beyond end of device
[  263.202617][  T288] loop2: rw=2049, want=45120, limit=40427
[  263.529276][ T3628] loop2: detected capacity change from 0 to 512
[  263.611390][ T3628] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  263.623630][ T3628] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  263.932992][ T3628] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:476: comm syz.2.935: Invalid block bitmap block 0 in block_group 0
[  263.948296][ T3628] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  263.958568][ T3628] EXT4-fs error (device loop2): ext4_clear_blocks:883: inode #11: comm syz.2.935: attempt to clear invalid blocks 983261 len 1
[  263.973083][ T3628] EXT4-fs error (device loop2): __ext4_get_inode_loc:4365: comm syz.2.935: Invalid inode table block 0 in block_group 0
[  263.986791][ T3628] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  263.997202][ T3628] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem
[  264.006486][ T3628] EXT4-fs error (device loop2): __ext4_get_inode_loc:4365: comm syz.2.935: Invalid inode table block 0 in block_group 0
[  264.020400][ T3628] EXT4-fs error (device loop2) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  264.030935][ T3628] EXT4-fs error (device loop2): ext4_truncate:4317: inode #11: comm syz.2.935: mark_inode_dirty error
[  264.042906][ T3628] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem
[  264.053375][ T3628] EXT4-fs error (device loop2): __ext4_get_inode_loc:4365: comm syz.2.935: Invalid inode table block 0 in block_group 0
[  264.067562][ T3628] EXT4-fs (loop2): 1 truncate cleaned up
[  264.073325][ T3628] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[  264.119700][   T39] Bluetooth: hci0: command 0x1003 tx timeout
[  264.177889][ T1821] Bluetooth: hci0: sending frame failed (-49)
[  264.572495][ T1505] tipc: Node number set to 2886997007
[  264.651442][ T3631] loop3: detected capacity change from 0 to 512
[  264.703006][ T3635] loop4: detected capacity change from 0 to 256
[  264.707900][ T3631] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  264.721817][ T3631] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  264.730362][ T3635] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  264.743673][ T3631] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.936: Invalid block bitmap block 0 in block_group 0
[  264.757374][ T3631] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  264.766428][ T3631] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.936: attempt to clear invalid blocks 983261 len 1
[  264.780068][ T3631] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.936: Invalid inode table block 0 in block_group 0
[  264.793511][ T3631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  264.803521][ T3631] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  264.812317][ T3631] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.936: Invalid inode table block 0 in block_group 0
[  264.825171][ T3631] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  264.837100][   T30] audit: type=1400 audit(1788596874.286:1950): avc:  denied  { watch } for  pid=3634 comm="syz.4.938" path="/185" dev="tmpfs" ino=1072 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  264.854757][ T3631] EXT4-fs error (device loop3): ext4_truncate:4317: inode #11: comm syz.3.936: mark_inode_dirty error
[  264.870240][ T3631] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  264.879422][ T3631] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.936: Invalid inode table block 0 in block_group 0
[  264.892562][ T3631] EXT4-fs (loop3): 1 truncate cleaned up
[  264.898455][ T3631] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[  264.927674][  T309] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  265.127744][   T39] usb 5-1: new full-speed USB device number 14 using dummy_hcd
[  265.227714][ T1505] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  265.287823][  T309] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  265.297992][  T309] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.467747][ T1505] usb 4-1: Using ep0 maxpacket: 16
[  265.468093][  T309] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  265.481996][  T309] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.490254][   T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  265.500186][  T309] usb 3-1: Product: syz
[  265.504473][  T309] usb 3-1: Manufacturer: syz
[  265.509145][   T39] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  265.519962][  T309] usb 3-1: SerialNumber: syz
[  265.558230][  T309] usb 3-1: selecting invalid altsetting 1
[  265.597886][ T1505] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  265.606007][ T1505] usb 4-1: config 0 has no interface number 0
[  265.612626][ T1505] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  265.623570][ T1505] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  265.633705][ T1505] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  265.642801][ T1505] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  265.651911][ T1505] usb 4-1: config 0 descriptor??
[  265.719523][   T39] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  265.728769][   T39] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.736801][   T39] usb 5-1: Product: syz
[  265.741239][   T39] usb 5-1: Manufacturer: syz
[  265.745889][   T39] usb 5-1: SerialNumber: syz
[  265.753014][   T39] usb 5-1: config 0 descriptor??
[  265.848498][   T39] usb 5-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  265.965442][ T3642] loop0: detected capacity change from 0 to 16
[  265.973115][   T30] audit: type=1107 audit(1788596875.396:1951): pid=3639 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Ü$'
[  266.009393][ T3642] erofs: Unknown parameter 'cac&yUhe_strategy'
[  266.018771][  T873] Bluetooth: hci1: Frame reassembly failed (-90)
[  266.074598][ T3635] overlayfs: unrecognized mount option "smackfsdef=" or missing value
[  266.127964][  T309] cdc_ncm 3-1:1.0: failed GET_NTB_PARAMETERS
[  266.150055][   T39] usb 5-1: USB disconnect, device number 14
[  266.160442][  T309] cdc_ncm 3-1:1.0: bind() failure
[  266.296181][ T1527] Bluetooth: hci0: command 0x1001 tx timeout
[  266.305273][ T1821] Bluetooth: hci0: sending frame failed (-49)
[  266.329444][  T309] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[  266.425914][  T309] cdc_ncm 3-1:1.1: bind() failure
[  266.466864][ T3643] loop2: detected capacity change from 0 to 16
[  266.534415][ T3643] erofs: (device loop2): mounted with root inode @ nid 36.
[  266.550425][ T2315] udevd[2315]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  267.135758][ T3643] device syzkaller0 entered promiscuous mode
[  267.377705][ T1505] uclogic 0003:28BD:0071.0005: failed retrieving string descriptor #100: -71
[  267.386979][ T1505] uclogic 0003:28BD:0071.0005: failed retrieving pen parameters: -71
[  267.401685][ T1505] uclogic 0003:28BD:0071.0005: pen probing failed: -71
[  267.409122][ T1505] uclogic 0003:28BD:0071.0005: failed probing parameters: -71
[  267.414436][ T3646] xt_CT: You must specify a L4 protocol and not use inversions on it
[  267.416642][ T1505] uclogic: probe of 0003:28BD:0071.0005 failed with error -71
[  267.438274][ T1505] usb 4-1: USB disconnect, device number 21
[  267.891224][ T3649] loop3: detected capacity change from 0 to 256
[  267.931513][ T3649] exfat: Deprecated parameter 'utf8'
[  267.936971][ T3649] exfat: Deprecated parameter 'utf8'
[  267.942436][ T3649] exfat: Deprecated parameter 'namecase'
[  267.948278][ T3649] exfat: Deprecated parameter 'namecase'
[  267.954016][ T3649] exfat: Deprecated parameter 'namecase'
[  267.971496][ T3649] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0x0ab4ecf1, utbl_chksum : 0xe619d30d)
[  268.077758][   T39] Bluetooth: hci1: command 0x1003 tx timeout
[  268.083997][ T1821] Bluetooth: hci1: sending frame failed (-49)
[  268.144502][ T3651] loop3: detected capacity change from 0 to 40427
[  268.209792][   T39] usb 3-1: USB disconnect, device number 15
[  268.217375][ T3651] F2FS-fs (loop3): invalid crc value
[  268.230408][ T3651] F2FS-fs (loop3): Found nat_bits in checkpoint
[  268.292608][ T3651] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  268.317695][ T1527] Bluetooth: hci0: command 0x1009 tx timeout
[  268.444692][ T3659] loop4: detected capacity change from 0 to 40427
[  268.504242][ T3659] F2FS-fs (loop4): invalid crc value
[  268.667887][   T39] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  268.710068][ T3659] F2FS-fs (loop4): Found nat_bits in checkpoint
[  268.993664][ T3659] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  269.037638][   T39] usb 3-1: Using ep0 maxpacket: 32
[  269.207780][   T39] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[  269.216186][   T39] usb 3-1: config 0 has no interface number 0
[  269.319099][  T285] attempt to access beyond end of device
[  269.319099][  T285] loop3: rw=2049, want=45120, limit=40427
[  269.339641][  T289] attempt to access beyond end of device
[  269.339641][  T289] loop4: rw=2049, want=45120, limit=40427
[  269.427741][   T39] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  269.436852][   T39] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.460323][   T39] usb 3-1: Product: syz
[  269.464594][   T39] usb 3-1: Manufacturer: syz
[  269.477661][   T39] usb 3-1: SerialNumber: syz
[  269.498709][   T39] usb 3-1: config 0 descriptor??
[  269.599178][   T39] smsc95xx v2.0.0
[  269.616988][ T3669] loop3: detected capacity change from 0 to 512
[  269.659248][ T3669] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  269.671373][ T3669] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  269.683105][ T3669] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.947: Invalid block bitmap block 0 in block_group 0
[  269.696794][ T3669] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  269.705812][ T3669] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.947: attempt to clear invalid blocks 983261 len 1
[  269.719241][ T3669] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.947: Invalid inode table block 0 in block_group 0
[  269.732046][ T3669] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  269.741657][ T3669] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  269.750595][ T3669] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.947: Invalid inode table block 0 in block_group 0
[  269.763324][ T3669] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  269.772952][ T3669] EXT4-fs error (device loop3): ext4_truncate:4317: inode #11: comm syz.3.947: mark_inode_dirty error
[  269.784130][ T3669] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  269.793228][ T3669] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.947: Invalid inode table block 0 in block_group 0
[  269.806112][ T3669] EXT4-fs (loop3): 1 truncate cleaned up
[  269.811844][ T3669] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[  270.047730][   T39] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  270.058693][   T39] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  270.158018][ T1527] Bluetooth: hci1: command 0x1001 tx timeout
[  270.164370][ T1821] Bluetooth: hci1: sending frame failed (-49)
[  270.362434][ T3673] loop4: detected capacity change from 0 to 16
[  270.395836][ T3673] erofs: (device loop4): mounted with root inode @ nid 36.
[  270.436162][ T3677] loop4: detected capacity change from 0 to 16
[  270.470828][ T3677] erofs: (device loop4): mounted with root inode @ nid 36.
[  270.527785][   T39] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  270.538754][   T39] smsc95xx: probe of 3-1:0.67 failed with error -71
[  270.546544][   T39] usb 3-1: USB disconnect, device number 16
[  270.616389][ T3680] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  270.657819][ T1527] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  270.987771][ T1527] usb 4-1: not running at top speed; connect to a high speed hub
[  271.039509][ T3682] loop2: detected capacity change from 0 to 512
[  271.067769][ T1527] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  271.078613][ T1527] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  271.087866][ T1527] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  271.096962][ T1527] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.105106][ T3682] EXT4-fs (loop2): Ignoring removed bh option
[  271.112280][ T3682] EXT4-fs (loop2): dax option not supported
[  271.130971][ T3682] xt_hashlimit: size too large, truncated to 1048576
[  271.158634][ T1527] usb 4-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  271.377772][ T1527] usb 4-1: Failed to query (GET_INFO) UVC control 1 on unit 1: 0 (exp. 1).
[  271.809793][ T3694] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  271.877980][ T1527] usb 4-1: No streaming interface found for terminal 2.
[  272.057821][ T1505] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  272.085242][ T1527] usb 4-1: USB disconnect, device number 22
[  272.138642][ T3696] xt_CT: You must specify a L4 protocol and not use inversions on it
[  272.237766][ T3299] Bluetooth: hci1: command 0x1009 tx timeout
[  272.327683][ T1505] usb 5-1: Using ep0 maxpacket: 32
[  272.447799][ T1505] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  272.456627][ T1505] usb 5-1: config 0 has no interface number 0
[  272.585601][ T3699] netlink: 28 bytes leftover after parsing attributes in process `syz.2.957'.
[  272.617750][ T1505] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  272.626937][ T1505] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.635779][ T1505] usb 5-1: Product: syz
[  272.640226][ T1505] usb 5-1: Manufacturer: syz
[  272.644849][ T1505] usb 5-1: SerialNumber: syz
[  272.652342][ T1505] usb 5-1: config 0 descriptor??
[  272.698194][ T1505] smsc95xx v2.0.0
[  272.705038][ T3706] loop2: detected capacity change from 0 to 16
[  272.728531][ T3706] erofs: (device loop2): mounted with root inode @ nid 36.
[  272.816016][ T3707] loop3: detected capacity change from 0 to 512
[  272.959070][ T3707] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  272.971214][ T3707] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  273.830893][ T3713] loop2: detected capacity change from 0 to 512
[  273.916195][ T3707] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.958: Invalid block bitmap block 0 in block_group 0
[  273.940335][ T3713] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled
[  273.952029][ T3713] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  273.962166][ T3713] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  273.972005][ T3713] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  274.026108][ T3713] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  274.036175][ T3713] EXT4-fs (loop2): orphan cleanup on readonly fs
[  274.045683][ T3713] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.961: bg 0: block 34: padding at end of block bitmap is not set
[  274.061316][ T3713] Quota error (device loop2): write_blk: dquota write failed
[  274.068921][ T3713] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  274.078888][ T3713] EXT4-fs error (device loop2): ext4_acquire_dquot:6227: comm syz.2.961: Failed to acquire dquot type 1
[  274.092751][ T3713] EXT4-fs (loop2): 1 truncate cleaned up
[  274.099436][ T3713] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,bsddf,mb_optimize_scan=0x0000000000000001,acl,data_err=ignore,noblock_validity,usrjquota=,jqfmt=vfsv0,inode_readahead_blks=0x0000000000001000,resgid=0x0000000000000000,sysvgroups,,errors=continue. Quota mode: writeback.
[  274.135352][ T3713] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.961: iget: bad i_size value: 360287970189639690
[  274.157721][ T1505] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  274.168528][ T3707] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  274.185297][ T3713] EXT4-fs error (device loop2): ext4_lookup:1858: inode #15: comm syz.2.961: iget: bad i_size value: 360287970189639690
[  274.252535][ T1505] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  274.268017][ T3707] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.958: attempt to clear invalid blocks 983261 len 1
[  274.281752][ T3707] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.958: Invalid inode table block 0 in block_group 0
[  274.294596][ T3707] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  274.304343][ T3707] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  274.313340][ T3707] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.958: Invalid inode table block 0 in block_group 0
[  274.326370][ T3707] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  274.336061][ T3707] EXT4-fs error (device loop3): ext4_truncate:4317: inode #11: comm syz.3.958: mark_inode_dirty error
[  274.347322][ T3707] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  274.356598][ T3707] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.958: Invalid inode table block 0 in block_group 0
[  274.370379][ T3707] EXT4-fs (loop3): 1 truncate cleaned up
[  274.376467][ T3707] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[  274.614193][ T3725] netlink: 'syz.3.965': attribute type 16 has an invalid length.
[  274.622044][ T3725] netlink: 'syz.3.965': attribute type 17 has an invalid length.
[  274.642384][   T30] audit: type=1400 audit(1788596884.096:1952): avc:  denied  { load_policy } for  pid=3724 comm="syz.3.965" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  274.666162][ T3725] SELinux:  policydb magic number 0x0 does not match expected magic number 0xf97cff8c
[  274.677482][ T3725] SELinux: failed to load policy
[  274.727706][ T1505] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  274.734409][   T26] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  274.749520][ T1505] smsc95xx: probe of 5-1:0.67 failed with error -71
[  274.759639][ T1505] usb 5-1: USB disconnect, device number 15
[  274.881930][ T3731] loop2: detected capacity change from 0 to 16
[  274.902022][    T8] Bluetooth: hci0: Frame reassembly failed (-90)
[  274.919919][ T3731] erofs: Unknown parameter 'cac&yUhe_strategy'
[  274.947765][   T30] audit: type=1107 audit(1788596884.316:1953): pid=3727 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Ü$'
[  275.007694][   T26] usb 2-1: Using ep0 maxpacket: 32
[  275.127999][   T26] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  275.145425][   T26] usb 2-1: config 0 has no interface number 0
[  275.348115][   T26] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  275.357717][   T26] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.366146][   T26] usb 2-1: Product: syz
[  275.373032][   T26] usb 2-1: Manufacturer: syz
[  275.378468][   T26] usb 2-1: SerialNumber: syz
[  275.508466][   T26] usb 2-1: config 0 descriptor??
[  275.730181][   T26] smsc95xx v2.0.0
[  275.968528][ T3735] loop3: detected capacity change from 0 to 256
[  276.018954][ T3735] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  276.197869][   T26] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  276.209038][   T26] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  276.437695][   T60] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  276.611025][ T3739] netlink: 20 bytes leftover after parsing attributes in process `syz.0.969'.
[  276.694439][   T26] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  276.705699][   T26] smsc95xx: probe of 2-1:0.67 failed with error -71
[  276.713709][   T26] usb 2-1: USB disconnect, device number 13
[  276.723606][ T3743] loop4: detected capacity change from 0 to 16
[  276.769652][ T3743] erofs: (device loop4): mounted with root inode @ nid 36.
[  276.817760][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  276.827528][   T60] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 4
[  276.907725][ T1505] usb 1-1: new full-speed USB device number 12 using dummy_hcd
[  276.957727][   T26] Bluetooth: hci0: command 0x1003 tx timeout
[  276.963898][ T1699] Bluetooth: hci0: sending frame failed (-49)
[  276.997802][   T60] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  277.006917][   T60] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.014989][   T60] usb 4-1: Product: syz
[  277.019219][   T60] usb 4-1: Manufacturer: syz
[  277.023835][   T60] usb 4-1: SerialNumber: syz
[  277.029724][   T60] usb 4-1: config 0 descriptor??
[  277.068657][   T60] usb 4-1: 0:0 : invalid sync pipe. is_playback 1, ep 0a, bSynchAddress 07
[  277.227712][ T1505] usb 1-1: not running at top speed; connect to a high speed hub
[  277.245540][ T3747] xt_CT: You must specify a L4 protocol and not use inversions on it
[  277.271389][ T3735] overlayfs: unrecognized mount option "smackfsdef=" or missing value
[  277.291648][   T60] usb 4-1: USB disconnect, device number 23
[  277.327747][ T1505] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  277.337962][ T1505] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  277.429616][ T3750] loop1: detected capacity change from 0 to 16
[  277.437109][   T30] audit: type=1107 audit(1788596886.866:1954): pid=3744 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Ü$'
[  277.479256][ T3750] erofs: Unknown parameter 'cac&yUhe_strategy'
[  277.487867][  T307] Bluetooth: hci1: Frame reassembly failed (-90)
[  277.494424][  T307] Bluetooth: hci1: Frame reassembly failed (-84)
[  277.506856][  T307] Bluetooth: hci1: Frame reassembly failed (-84)
[  278.658181][ T1505] usb 1-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  278.667286][ T1505] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  278.708370][ T1505] usb 1-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  278.863601][ T3756] loop3: detected capacity change from 0 to 512
[  278.940439][ T3756] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  278.952595][ T3756] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  279.035565][ T3756] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.975: Invalid block bitmap block 0 in block_group 0
[  279.050365][ T3756] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  279.060256][ T3756] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.975: attempt to clear invalid blocks 983261 len 1
[  279.074595][ T3756] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.975: Invalid inode table block 0 in block_group 0
[  279.088869][ T3756] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  279.099627][ T3756] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  279.109229][ T3756] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.975: Invalid inode table block 0 in block_group 0
[  279.122940][ T3756] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  279.134005][ T3756] EXT4-fs error (device loop3): ext4_truncate:4317: inode #11: comm syz.3.975: mark_inode_dirty error
[  279.146120][ T3756] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  279.156250][ T3756] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.975: Invalid inode table block 0 in block_group 0
[  279.169960][ T3756] EXT4-fs (loop3): 1 truncate cleaned up
[  279.175677][ T3756] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[  279.634846][  T309] Bluetooth: hci1: command 0x1003 tx timeout
[  279.644221][ T1821] Bluetooth: hci1: sending frame failed (-49)
[  279.775942][ T3767] xt_CT: You must specify a L4 protocol and not use inversions on it
[  279.847975][ T1056] Bluetooth: hci0: command 0x1001 tx timeout
[  279.855024][ T1821] Bluetooth: hci0: sending frame failed (-49)
[  279.856716][ T1505] usb 1-1: Failed to query (GET_INFO) UVC control 1 on unit 1: 0 (exp. 1).
[  279.865361][  T396] udevd[396]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  279.907732][ T1505] usb 1-1: Failed to query (GET_INFO) UVC control 3 on unit 1: 0 (exp. 1).
[  279.947730][ T1505] usb 1-1: No streaming interface found for terminal 2.
[  280.148697][  T309] usb 1-1: USB disconnect, device number 12
[  280.157790][ T3299] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  280.398829][ T3299] usb 4-1: Using ep0 maxpacket: 32
[  280.517781][ T3299] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  280.525938][ T3299] usb 4-1: config 0 has no interface number 0
[  280.665490][ T3774] netlink: 20 bytes leftover after parsing attributes in process `syz.0.980'.
[  280.734458][ T3299] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  280.747978][ T3299] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  280.756085][ T3299] usb 4-1: Product: syz
[  280.767726][ T3299] usb 4-1: Manufacturer: syz
[  280.772368][ T3299] usb 4-1: SerialNumber: syz
[  280.787931][ T3299] usb 4-1: config 0 descriptor??
[  280.830436][ T3299] smsc95xx v2.0.0
[  281.209682][ T3780] loop4: detected capacity change from 0 to 512
[  281.267712][ T3299] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  281.278650][ T3299] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  281.288721][ T3780] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  281.300922][ T3780] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  281.314693][ T3780] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.979: Invalid block bitmap block 0 in block_group 0
[  281.328619][ T3780] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  281.337764][ T3780] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.979: attempt to clear invalid blocks 983261 len 1
[  281.351565][ T3780] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.979: Invalid inode table block 0 in block_group 0
[  281.364524][ T3780] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  281.374504][ T3780] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  281.383404][ T3780] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.979: Invalid inode table block 0 in block_group 0
[  281.396644][ T3780] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  281.406459][ T3780] EXT4-fs error (device loop4): ext4_truncate:4317: inode #11: comm syz.4.979: mark_inode_dirty error
[  281.417920][ T3780] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  281.427329][ T3780] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.979: Invalid inode table block 0 in block_group 0
[  281.440376][ T3780] EXT4-fs (loop4): 1 truncate cleaned up
[  281.446332][ T3780] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[  281.677672][   T26] Bluetooth: hci1: command 0x1001 tx timeout
[  281.683936][ T1821] Bluetooth: hci1: sending frame failed (-49)
[  281.817713][ T3299] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  281.828670][ T3299] smsc95xx: probe of 4-1:0.67 failed with error -71
[  281.836573][ T3299] usb 4-1: USB disconnect, device number 24
[  281.847646][  T309] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  281.917700][   T26] Bluetooth: hci0: command 0x1009 tx timeout
[  282.087704][  T309] usb 1-1: Using ep0 maxpacket: 32
[  282.207774][  T309] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  282.216242][  T309] usb 1-1: config 0 has no interface number 0
[  282.257711][   T26] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  282.352790][ T3787] loop3: detected capacity change from 0 to 512
[  282.377765][  T309] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  282.387189][  T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.395649][  T309] usb 1-1: Product: syz
[  282.400659][  T309] usb 1-1: Manufacturer: syz
[  282.405403][  T309] usb 1-1: SerialNumber: syz
[  282.405441][ T3787] EXT4-fs (loop3): Ignoring removed bh option
[  282.416322][ T3787] EXT4-fs (loop3): dax option not supported
[  282.423111][  T309] usb 1-1: config 0 descriptor??
[  282.432440][ T3787] xt_hashlimit: size too large, truncated to 1048576
[  282.468210][  T309] smsc95xx v2.0.0
[  282.627742][   T26] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  282.638146][   T26] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  282.751845][ T3793] loop3: detected capacity change from 0 to 512
[  282.808433][ T3793] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  282.820550][ T3793] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  282.832431][ T3793] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.986: Invalid block bitmap block 0 in block_group 0
[  282.846240][ T3793] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  282.855298][ T3793] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.986: attempt to clear invalid blocks 983261 len 1
[  282.868652][   T26] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  282.877788][ T3793] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.986: Invalid inode table block 0 in block_group 0
[  282.890479][  T309] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  282.901588][   T26] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  282.909678][ T3793] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  282.919355][  T309] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  282.928730][ T3793] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  282.937452][   T26] usb 5-1: Product: syz
[  282.941700][ T3793] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.986: Invalid inode table block 0 in block_group 0
[  282.954591][   T26] usb 5-1: Manufacturer: syz
[  282.959486][ T3793] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  282.969221][   T26] usb 5-1: SerialNumber: syz
[  282.973857][ T3793] EXT4-fs error (device loop3): ext4_truncate:4317: inode #11: comm syz.3.986: mark_inode_dirty error
[  282.985252][ T3793] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  282.994803][ T3793] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.986: Invalid inode table block 0 in block_group 0
[  283.008125][ T3793] EXT4-fs (loop3): 1 truncate cleaned up
[  283.013798][ T3793] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[  283.068498][   T26] usb 5-1: selecting invalid altsetting 1
[  283.217813][  T309] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  283.229000][  T309] smsc95xx: probe of 1-1:0.67 failed with error -71
[  283.236606][  T309] usb 1-1: USB disconnect, device number 13
[  283.492045][ T3785] loop4: detected capacity change from 0 to 16
[  283.507800][   T26] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS
[  283.514187][   T26] cdc_ncm 5-1:1.0: bind() failure
[  283.520283][   T26] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  283.527163][   T26] cdc_ncm 5-1:1.1: bind() failure
[  283.539607][ T3785] erofs: (device loop4): mounted with root inode @ nid 36.
[  283.567536][ T3785] device syzkaller0 entered promiscuous mode
[  283.658383][   T60] usb 5-1: USB disconnect, device number 16
[  283.771711][ T3800] loop3: detected capacity change from 0 to 512
[  283.779026][   T26] Bluetooth: hci1: command 0x1009 tx timeout
[  283.848494][ T3800] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  283.860619][ T3800] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  283.975909][ T3800] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.990: Invalid block bitmap block 0 in block_group 0
[  283.990680][ T3800] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  284.000753][ T3800] EXT4-fs error (device loop3): ext4_clear_blocks:883: inode #11: comm syz.3.990: attempt to clear invalid blocks 983261 len 1
[  284.015163][ T3800] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.990: Invalid inode table block 0 in block_group 0
[  284.029353][ T3800] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  284.039668][ T3800] EXT4-fs error (device loop3) in ext4_orphan_del:303: Corrupt filesystem
[  284.049024][ T3800] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.990: Invalid inode table block 0 in block_group 0
[  284.062839][ T3800] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  284.073186][ T3800] EXT4-fs error (device loop3): ext4_truncate:4317: inode #11: comm syz.3.990: mark_inode_dirty error
[  284.086683][ T3800] EXT4-fs error (device loop3) in ext4_process_orphan:345: Corrupt filesystem
[  284.096678][ T3800] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm syz.3.990: Invalid inode table block 0 in block_group 0
[  284.110539][ T3800] EXT4-fs (loop3): 1 truncate cleaned up
[  284.116256][ T3800] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[  284.366869][   T30] audit: type=1400 audit(1788596893.816:1955): avc:  denied  { unmount } for  pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[  284.542477][ T3807] xt_CT: You must specify a L4 protocol and not use inversions on it
[  284.599486][ T3809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.993'.
[  285.227699][  T309] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  285.515647][ T3818] loop4: detected capacity change from 0 to 512
[  285.562670][  T309] usb 4-1: not running at top speed; connect to a high speed hub
[  285.578740][ T3818] EXT4-fs (loop4): Ignoring removed bh option
[  285.589488][ T3818] EXT4-fs (loop4): dax option not supported
[  285.687807][  T309] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  285.698507][  T309] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2
[  285.707668][  T309] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00
[  285.716725][  T309] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.738045][ T3818] xt_hashlimit: size too large, truncated to 1048576
[  285.770986][  T309] usb 4-1: Found UVC 1.00 device <unnamed> (046d:0825)
[  285.977800][  T309] usb 4-1: Failed to query (GET_INFO) UVC control 1 on unit 1: 0 (exp. 1).
[  286.407825][  T309] usb 4-1: Failed to query (GET_INFO) UVC control 4 on unit 1: -71 (exp. 1).
[  286.839589][  T309] usb 4-1: No streaming interface found for terminal 2.
[  286.913366][  T309] usb 4-1: USB disconnect, device number 25
[  286.986403][ T3835] loop2: detected capacity change from 0 to 1024
[  287.096187][ T3839] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1004'.
[  287.148912][ T3835] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  287.506700][ T3848] loop4: detected capacity change from 0 to 512
[  287.576789][ T1527] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  288.502095][ T3848] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  288.514269][ T3848] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  288.671240][ T3856] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1008'.
[  288.691093][   T30] audit: type=1400 audit(1788596898.136:1956): avc:  denied  { mount } for  pid=3855 comm="syz.3.1008" name="/" dev="configfs" ino=14538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[  288.716135][   T30] audit: type=1400 audit(1788596898.136:1957): avc:  denied  { search } for  pid=3855 comm="syz.3.1008" name="/" dev="configfs" ino=14538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  288.743731][   T30] audit: type=1400 audit(1788596898.136:1958): avc:  denied  { read } for  pid=3855 comm="syz.3.1008" name="/" dev="configfs" ino=14538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  288.766437][   T30] audit: type=1400 audit(1788596898.136:1959): avc:  denied  { open } for  pid=3855 comm="syz.3.1008" path="/" dev="configfs" ino=14538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[  288.810178][ T3848] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1005: Invalid block bitmap block 0 in block_group 0
[  288.824092][ T3848] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  288.833104][ T3848] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.1005: attempt to clear invalid blocks 983261 len 1
[  288.847527][ T3848] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.1005: Invalid inode table block 0 in block_group 0
[  288.860654][ T3848] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  288.871449][ T3848] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  288.880681][ T3848] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.1005: Invalid inode table block 0 in block_group 0
[  288.893670][ T3848] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  288.903373][ T3848] EXT4-fs error (device loop4): ext4_truncate:4317: inode #11: comm syz.4.1005: mark_inode_dirty error
[  288.918868][ T3861] xt_CT: You must specify a L4 protocol and not use inversions on it
[  288.927522][ T3848] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  289.000082][ T3865] loop1: detected capacity change from 0 to 16
[  289.007775][   T30] audit: type=1107 audit(1788596898.446:1960): pid=3853 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Ü$'
[  289.021606][ T1527] usb 1-1: Using ep0 maxpacket: 32
[  289.028261][ T3851] Bluetooth: hci0: Frame reassembly failed (-90)
[  289.048925][ T3865] erofs: Unknown parameter 'cac&yUhe_strategy'
[  289.177974][ T1527] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  289.204309][ T1527] usb 1-1: config 0 has no interface number 0
[  289.638169][ T1527] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  289.691659][ T1527] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.782723][ T1527] usb 1-1: Product: syz
[  289.821005][ T1527] usb 1-1: Manufacturer: syz
[  289.864054][ T1527] usb 1-1: SerialNumber: syz
[  289.960653][ T1527] usb 1-1: config 0 descriptor??
[  290.037865][ T1527] usb 1-1: can't set config #0, error -71
[  290.127136][ T1527] usb 1-1: USB disconnect, device number 14
[  290.165619][ T3848] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.1005: Invalid inode table block 0 in block_group 0
[  290.180164][ T3848] EXT4-fs (loop4): 1 truncate cleaned up
[  290.186057][ T3848] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[  290.640293][ T3877] loop4: detected capacity change from 0 to 512
[  290.679192][ T3877] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  290.691318][ T3877] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  290.708420][ T3877] EXT4-fs error (device loop4): ext4_read_block_bitmap_nowait:476: comm syz.4.1016: Invalid block bitmap block 0 in block_group 0
[  290.722320][ T3877] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6191: Corrupt filesystem
[  290.731362][ T1527] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  290.739248][ T3877] EXT4-fs error (device loop4): ext4_clear_blocks:883: inode #11: comm syz.4.1016: attempt to clear invalid blocks 983261 len 1
[  290.752815][ T3877] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.1016: Invalid inode table block 0 in block_group 0
[  290.754869][ T3870] loop3: detected capacity change from 0 to 131072
[  290.766532][ T3877] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  290.782306][ T3877] EXT4-fs error (device loop4) in ext4_orphan_del:303: Corrupt filesystem
[  290.791160][ T3877] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.1016: Invalid inode table block 0 in block_group 0
[  290.804423][ T3877] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5904: Corrupt filesystem
[  290.809518][ T3870] F2FS-fs (loop3): invalid crc value
[  290.820510][ T3877] EXT4-fs error (device loop4): ext4_truncate:4317: inode #11: comm syz.4.1016: mark_inode_dirty error
[  290.823965][ T3870] F2FS-fs (loop3): Found nat_bits in checkpoint
[  290.832733][ T3877] EXT4-fs error (device loop4) in ext4_process_orphan:345: Corrupt filesystem
[  290.847362][ T3877] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm syz.4.1016: Invalid inode table block 0 in block_group 0
[  290.860492][ T3877] EXT4-fs (loop4): 1 truncate cleaned up
[  290.866174][ T3877] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,resuid=0x0000000000000000,journal_dev=0x0000000000000002,noblock_validity,,errors=continue. Quota mode: none.
[  290.910768][ T3870] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  290.942065][ T3870] F2FS-fs (loop3): Corrupted max_depth of 3: 16842753
[  290.961811][   T30] audit: type=1400 audit(1788596900.416:1961): avc:  denied  { getopt } for  pid=3884 comm="syz.2.1017" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  291.037876][  T309] Bluetooth: hci0: command 0x1003 tx timeout
[  291.044050][   T47] Bluetooth: hci0: sending frame failed (-49)
[  291.147919][ T1527] usb 1-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  291.160988][ T1527] usb 1-1: config 0 interface 0 has no altsetting 0
[  291.167961][ T1527] usb 1-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00
[  291.177084][ T1527] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.186191][ T1527] usb 1-1: config 0 descriptor??
[  291.333328][ T3889] loop3: detected capacity change from 0 to 40427
[  291.407917][ T3889] F2FS-fs (loop3): invalid crc value
[  291.414071][ T3893] loop4: detected capacity change from 0 to 256
[  291.430215][ T3889] F2FS-fs (loop3): Found nat_bits in checkpoint
[  291.442375][ T3893] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001207b, chksum : 0x1e861e4d, utbl_chksum : 0xe619d30d)
[  291.482860][ T3889] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  291.537669][   T60] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  291.692129][ T3902] x_tables: arp_tables: NFQUEUE target: not valid for this family
[  291.787657][   T60] usb 3-1: Using ep0 maxpacket: 16
[  291.907849][   T60] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  291.916036][   T60] usb 3-1: config 0 has no interface number 0
[  291.922458][   T60] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.933625][   T60] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  291.943662][   T60] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  291.952912][   T60] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.965125][   T60] usb 3-1: config 0 descriptor??
[  292.022907][ T1527] chicony 0003:04F2:0418.0006: ignoring exceeding usage max
[  292.032093][ T1527] chicony 0003:04F2:0418.0006: unknown main item tag 0x1
[  292.039286][ T1527] chicony 0003:04F2:0418.0006: unknown main item tag 0xe
[  292.083460][ T1527] chicony 0003:04F2:0418.0006: item fetching failed at offset 36/40
[  292.091874][ T1527] chicony 0003:04F2:0418.0006: Chicony hid parse failed: -22
[  292.092380][  T285] attempt to access beyond end of device
[  292.092380][  T285] loop3: rw=2049, want=45120, limit=40427
[  292.099340][ T1527] chicony: probe of 0003:04F2:0418.0006 failed with error -22
[  292.103669][ T1527] usb 1-1: USB disconnect, device number 15
[  292.232529][ T3904] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN
[  292.244381][ T3904] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007]
[  292.252835][ T3904] CPU: 1 PID: 3904 Comm: syz.3.1023 Not tainted syzkaller #0
[  292.260246][ T3904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[  292.270324][ T3904] RIP: 0010:vsscanf+0x196/0x24b0
[  292.275295][ T3904] Code: 48 c7 c6 20 d0 99 86 e8 58 b4 f7 fe 41 83 fe 25 74 4d 45 85 f6 0f 84 b6 21 00 00 48 ff c3 48 89 5c 24 78 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 4f 1b 00 00 41 0f b6 1f 45 0f b6 f6 44
[  292.294913][ T3904] RSP: 0018:ffffc90000d1f5e0 EFLAGS: 00010246
[  292.301134][ T3904] RAX: 0000000000000000 RBX: ffffffff854b5901 RCX: 0000000000000001
[  292.309139][ T3904] RDX: ffffffff82720be8 RSI: ffffffff8699d020 RDI: 0000000000000030
[  292.317120][ T3904] RBP: ffffc90000d1f710 R08: ffff888133eb93c0 R09: 0000000000000002
[  292.325107][ T3904] R10: 0000000000000025 R11: 0000000000000002 R12: ffffffff854b5900
[  292.333087][ T3904] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000
[  292.341067][ T3904] FS:  00007fca86b226c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  292.350009][ T3904] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  292.356631][ T3904] CR2: 00007fca88e83060 CR3: 0000000136ef3000 CR4: 00000000003506a0
[  292.364621][ T3904] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  292.372610][ T3904] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  292.380611][ T3904] Call Trace:
[  292.383928][ T3904]  <TASK>
[  292.386978][ T3904]  ? bprintf+0x140/0x140
[  292.391269][ T3904]  ? plist_add+0x3e6/0x470
[  292.396109][ T3904]  sscanf+0xdf/0x130
[  292.400209][ T3904]  ? skip_atoi+0x110/0x110
[  292.404678][ T3904]  ? mutex_lock_interruptible+0x9b/0x1c0
[  292.410364][ T3904]  ? check_stack_object+0x10f/0x150
[  292.415612][ T3904]  split_huge_pages_write+0x30d/0xfc0
[  292.421031][ T3904]  ? deferred_split_scan+0x860/0x860
[  292.426364][ T3904]  ? __asan_set_shadow_00+0xe/0x10
[  292.431494][ T3904]  ? do_futex+0xdd3/0x27f0
[  292.435928][ T3904]  ? kasan_set_track+0x4a/0x70
[  292.440717][ T3904]  ? kmem_cache_free+0x100/0x320
[  292.445773][ T3904]  ? do_sys_openat2+0x6df/0x7f0
[  292.451097][ T3904]  ? x64_sys_call+0x219/0x9a0
[  292.455795][ T3904]  ? __kasan_check_write+0x14/0x20
[  292.461091][ T3904]  ? debugfs_file_get+0x362/0x450
[  292.466134][ T3904]  ? avc_policy_seqno+0x1b/0x70
[  292.471000][ T3904]  ? selinux_file_permission+0x2aa/0x510
[  292.476653][ T3904]  full_proxy_write+0x10f/0x1c0
[  292.481515][ T3904]  ? full_proxy_read+0x1c0/0x1c0
[  292.486458][ T3904]  vfs_write+0x404/0xfd0
[  292.490707][ T3904]  ? file_end_write+0x1b0/0x1b0
[  292.495575][ T3904]  ? __kasan_check_write+0x14/0x20
[  292.500864][ T3904]  ? mutex_lock+0x9b/0x1c0
[  292.505313][ T3904]  ? wait_for_completion_killable_timeout+0x10/0x10
[  292.512067][ T3904]  ? __fget_files+0x2e1/0x340
[  292.516791][ T3904]  ? __fdget_pos+0x2d2/0x380
[  292.521417][ T3904]  ? ksys_write+0x70/0x260
[  292.525861][ T3904]  ksys_write+0x14a/0x260
[  292.530240][ T3904]  ? __ia32_sys_read+0x90/0x90
[  292.535031][ T3904]  ? __kasan_check_write+0x14/0x20
[  292.540166][ T3904]  ? switch_fpu_return+0x15d/0x2c0
[  292.545299][ T3904]  __x64_sys_write+0x7b/0x90
[  292.549913][ T3904]  x64_sys_call+0x8ef/0x9a0
[  292.554470][ T3904]  do_syscall_64+0x4c/0xa0
[  292.558959][ T3904]  ? clear_bhb_loop+0x50/0xa0
[  292.563685][ T3904]  ? clear_bhb_loop+0x50/0xa0
[  292.568433][ T3904]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  292.574372][ T3904] RIP: 0033:0x7fca880c9159
[  292.578823][ T3904] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  292.598497][ T3904] RSP: 002b:00007fca86b22028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  292.606956][ T3904] RAX: ffffffffffffffda RBX: 00007fca88350fa0 RCX: 00007fca880c9159
[  292.615033][ T3904] RDX: 0000000000000010 RSI: 0000200000000180 RDI: 0000000000000003
[  292.623039][ T3904] RBP: 00007fca88160024 R08: 0000000000000000 R09: 0000000000000000
[  292.631044][ T3904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  292.639034][ T3904] R13: 00007fca88351038 R14: 00007fca88350fa0 R15: 00007fffe188e218
[  292.647046][ T3904]  </TASK>
[  292.650114][ T3904] Modules linked in:
[  292.657780][   T60] uclogic 0003:28BD:0071.0007: failed retrieving string descriptor #100: -71
[  292.667868][ T3904] ---[ end trace 38b0e896c8505821 ]---
[  292.673436][   T60] uclogic 0003:28BD:0071.0007: failed retrieving pen parameters: -71
[  292.673454][ T3904] RIP: 0010:vsscanf+0x196/0x24b0
[  292.684607][   T60] uclogic 0003:28BD:0071.0007: pen probing failed: -71
[  292.687832][ T3904] Code: 48 c7 c6 20 d0 99 86 e8 58 b4 f7 fe 41 83 fe 25 74 4d 45 85 f6 0f 84 b6 21 00 00 48 ff c3 48 89 5c 24 78 4c 89 f8 48 c1 e8 03 <42> 0f b6 04 28 84 c0 0f 85 4f 1b 00 00 41 0f b6 1f 45 0f b6 f6 44
[  292.713674][   T60] uclogic 0003:28BD:0071.0007: failed probing parameters: -71
[  292.714808][ T3904] RSP: 0018:ffffc90000d1f5e0 EFLAGS: 00010246
[  292.721613][   T60] uclogic: probe of 0003:28BD:0071.0007 failed with error -71
[  292.728019][ T3904] RAX: 0000000000000000 RBX: ffffffff854b5901 RCX: 0000000000000001
[  292.743805][ T3904] RDX: ffffffff82720be8 RSI: ffffffff8699d020 RDI: 0000000000000030
[  292.752212][ T3904] RBP: ffffc90000d1f710 R08: ffff888133eb93c0 R09: 0000000000000002
[  292.762483][ T3904] R10: 0000000000000025 R11: 0000000000000002 R12: ffffffff854b5900
[  292.770769][ T3904] R13: dffffc0000000000 R14: 0000000000000030 R15: 0000000000000000
[  292.775696][   T60] usb 3-1: USB disconnect, device number 17
[  292.779561][ T3904] FS:  00007fca86b226c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[  292.793952][ T3904] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  292.800870][ T3904] CR2: 00007f87d50442f8 CR3: 0000000136ef3000 CR4: 00000000003506a0
[  292.809326][ T3904] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  292.817513][ T3904] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  292.825662][ T3904] Kernel panic - not syncing: Fatal exception
[  292.832135][ T3904] Kernel Offset: disabled
[  292.836516][ T3904] Rebooting in 86400 seconds..