last executing test programs:

49.201529707s ago: executing program 1 (id=355):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
fsopen(0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0x0, 0xff, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x0, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)

49.134323606s ago: executing program 1 (id=358):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="2501000000000000000009000000040003800400018050000380060007004e22000008000314040000001400020077673000000000000000000000000000080001"], 0x6c}}, 0x0)

49.061947321s ago: executing program 1 (id=360):
syz_mount_image$vfat(&(0x7f0000000180), &(0x7f00000000c0)='./file0\x00', 0x1000000, &(0x7f00000003c0)=ANY=[@ANYBLOB="73686f72746e616d653d77696e39352c756e695f786c6174653d312c636865636b3d7374726963742c646f733178666c6f7070792c757466383d312c757466383d312c757466383d302c696f636861727365743d6370313235de26302c696f636861727365743d69736f383835392d342c696f636861727365743d64656661756c742c73686f72746e616d653d6d69786564", @ANYRES8=0x0], 0xfe, 0x19c, &(0x7f0000000200)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
mkdirat(r0, &(0x7f0000000000)='./bus/file0\x00', 0x0)
renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, 0x0, 0x2)

48.905646801s ago: executing program 1 (id=364):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./bus\x00', 0x810, &(0x7f0000000140)={[{@nossd_spread}, {@nodatacow}, {@enospc_debug}, {@nossd}, {@nodatasum}, {@autodefrag}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x9041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x12d7498, 0x0)

48.685665833s ago: executing program 1 (id=365):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$unix(0x1, 0x1, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r1, &(0x7f0000000dc0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
listen(r1, 0x0)
connect$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ioctl$int_in(r0, 0x5421, &(0x7f0000000040)=0x3)
connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

48.381212211s ago: executing program 1 (id=366):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r1, 0xffffffffffffffff, 0x0)

48.343381285s ago: executing program 32 (id=366):
r0 = socket$inet6(0xa, 0x802, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
close_range(r1, 0xffffffffffffffff, 0x0)

19.393351467s ago: executing program 2 (id=682):
unshare(0x22020600)
r0 = syz_open_dev$loop(&(0x7f0000000180), 0x4e, 0x101240)
fadvise64(r0, 0x8000000000000004, 0x9, 0x3)

19.37478363s ago: executing program 2 (id=684):
syz_mount_image$squashfs(&(0x7f0000000440), &(0x7f0000000240)='./file1\x00', 0x5, &(0x7f0000000000)=ANY=[@ANYRES8=0x0, @ANYRESOCT, @ANYRES64, @ANYRESOCT, @ANYRESHEX, @ANYRES32], 0x0, 0x192, &(0x7f0000000500)="$eJzskEFrE0EUx39vZtJsxGqjnirYgMU1pdgkVQ+CEDy1kAWvgkFDGhsxVdPNQYtib7209jN486gePIkoeFZvHnRF6E26h34AiezO6Jfo/Njd//7fzHtv5vXjYVwE/hw86dIkR3OMrwgGmBEbU8rqW+d/O921wjXng/yBl85Px4837nUGg9565UqFch4o2cBRl/qL/3vi10wpUqGJfDvQ3Y7cjhg3WVMrEeUWczvoNsPqc6bNJKduoRmH2ywrhhK24PjCaO3hRsHWXe2t9u43GouXaxdrtUuNhTt3B73alLGLz4pWI0rVpxTaiJgjzAtS7atEy1zKRJvdz/r82fkUVd1njPAhTCn+MP2KgnMEN7MLLXFSeIGOmG1RUhjyRkvI9eDNF9eOYFPrC90Hg5WtG3aUsh9IfY9CWKezvHN1MRsNJ/jIVsJskuckZu8nM/Iu67Lt5mk2s+8r505zBoo86oxG6/UJ+CRhRCN7yzCZl1P5ucrw3uU44fu/H4/H4/F4PB6Px+PxHAL+BgAA///wE1fQ")
io_setup(0x1088, &(0x7f00000001c0)=<r0=>0x0)
r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001140)='/sys/kernel/kexec_crash_size', 0x1, 0x0)
io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000040)="d0", 0x1}])

19.156875413s ago: executing program 2 (id=688):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
ptrace$setsig(0x4203, r0, 0x5, 0x0)
sync()
sync()
sync()
sync()
sync()
sync()

19.101465916s ago: executing program 2 (id=689):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f646973636172642c6261636b67726f756e645f67633d73796e632c6261636b67726f756e645f67633d6f6e2c6e6f757365725f78617474722c6e6f71756f74612c64697361626c655f726f6c6c5f666f72776172642c67635f6d657267652c6e6f757365725f78617474722c636865636b706f696e743d64697361626c652c757365725f78617474722c6673796e635f6d6f64653d7374726963742c646973636172645f756e69743d73656374696f6e2c636865636b706f696e743d64697361626c652c6e6f696e6c696e655f64656e7472792c00ec6da92d1c80a6c720380e3c2c55bf27596d2776ce408c4bb19b149757508e1c7e919c6c2047023baa412d14fa75c8cac6e5f103e13ea52708af0a7c5da8af4ecb6612"], 0x2, 0x5505, &(0x7f0000002480)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1c0000000, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(r0, 0x4018f50b, &(0x7f0000000000)={0xfffffffc, 0x2110, 0x2})
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000980)='./file0\x00', 0x24a080, &(0x7f0000000000)={[{@gid}, {@unhide}, {@block={'block', 0x3d, 0x100}}]}, 0x1, 0x92f, &(0x7f0000001c80)="$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")

18.590868224s ago: executing program 2 (id=691):
r0 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000180), 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='{:\'@-\x00', &(0x7f0000000180)='%*.\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000000c0)='fuseblk\x00', &(0x7f0000000100)='fuseblk\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='(!\xef(.(\\-]\x00', &(0x7f0000000080)='\x00', 0x0)
fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f0000000240)='fuseblk\x00', 0x0, r0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000440)='\x00', &(0x7f0000000500)='^,/\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000480)='fuseblk\x00', &(0x7f00000004c0)='\x1c@\\\x00', 0x0)
read(r0, 0x0, 0x0)
close(r0)

18.409393662s ago: executing program 2 (id=695):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a00010073746174650000000800024000"], 0xd0}}, 0x0)

18.39793173s ago: executing program 33 (id=695):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000d00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000005c000000060a010400000000000000000100000008000b40000000000900010073797a300000000034000480300001800a0001006d617463680000002000028008000300b07346e30a00010073746174650000000800024000"], 0xd0}}, 0x0)

12.665063877s ago: executing program 3 (id=731):
socket(0x10, 0x2, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
syz_clone3(&(0x7f0000000180)={0x80000000, 0x0, 0x0, 0x0, {0x1b}, 0x0, 0x0, 0x0, 0x0}, 0x58)
bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a)
r1 = accept4(r0, 0x0, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
fsopen(0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x84}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4002, &(0x7f0000000200), 0x1, 0xb917, &(0x7f00000005c0)="$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")
creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')
open(&(0x7f0000000000)='./file2\x00', 0x6840, 0x120)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x60000, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x40f02, 0x0)
openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
write(r1, &(0x7f0000000040)="cb", 0xfffffdef)
socket$inet_sctp(0x2, 0x1, 0x84)
mount(&(0x7f0000000080)=@sg0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='bfs\x00', 0x1000000, &(0x7f0000000180)='ip6_vti0\x00')

11.681424343s ago: executing program 3 (id=748):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0)
write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a)
sendfile(r0, r1, 0x0, 0x2000000000401)

11.330408947s ago: executing program 3 (id=752):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff)
close(r1)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0)
close(r2)
execveat$binfmt(0xffffffffffffff9c, r0, 0x0, 0x0, 0x0)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f00000000c0)={[&(0x7f0000000100)='\xeaE*\x84\xdf\x1c\xbe\x19\xabH1?lR\xab\xcf\x1a#\xc3lF51\x03']}, 0x0, 0x1000)

11.225569397s ago: executing program 3 (id=756):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file1\x00', 0x2000002, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], 0x1, 0xc2d, &(0x7f00000001c0)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

11.092138147s ago: executing program 3 (id=760):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)

10.736538148s ago: executing program 3 (id=769):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2)

10.635356841s ago: executing program 34 (id=769):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2)

1.419644915s ago: executing program 4 (id=860):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r0, 0xfffffffc)
openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x100f, 0x8, 0x80, 0x2, 0xffffffff, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x9, 0x3c5b, 0x1, 0x24, 0x6, 0x1, 0x5, 0xffffffff, 0xe661, 0x4, 0xb, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x8f, 0x4006, 0x6, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0xfffffffe, 0x40], [0x10000007, 0x9, 0x10000, 0x6, 0x5, 0x6, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x185, 0x4, 0x7, 0x7fff, 0x9, 0x420, 0x401, 0x6, 0x1, 0xff, 0xffffffff, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x2, 0xb, 0x4, 0x9, 0x9, 0x9, 0x9, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x1, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x0, 0x2, 0x0, 0x5, 0xb, 0x4, 0x9, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x10000, 0x3, 0x5, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x5, 0x8, 0x2950bfaf, 0xffe, 0xa2, 0xfffff800, 0xa9, 0x5, 0x9, 0xac8, 0xbf, 0xc, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x0, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0x80b, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x9, 0x2, 0x57, 0x5, 0x3, 0x101, 0xf142, 0x4, 0x7fff, 0xffff, 0x2000a620, 0x2, 0x5, 0x1, 0x2, 0x5, 0xe7, 0x6, 0x16, 0x8, 0x80000003, 0x5, 0x4, 0xc8, 0x9, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x10000226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x1fd, 0xffff343e, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1.419471016s ago: executing program 5 (id=861):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
dup3(r0, r1, 0x0)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)={0x1c, r2, 0x1, 0xfffffffe, 0x25dfdbfb, {{}, {@val={0x8, 0x1, 0x1}, @void, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000001}, 0xc800)

1.359336619s ago: executing program 4 (id=862):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x191, 0x20, 0x1e0, 0x5f0b38e77865a432, 0x32, 0x1, 0x0, 0x0, {0x4}, {0x0, 0x0, 0xffffffff}, {0x0, 0x0, 0x3e000000}, {}, 0x0, 0x10, 0x0, 0x0, 0x1, 0x80, 0x100, 0x6, 0x1, 0x0, 0x0, 0xfffffffc, 0x10})

1.35924146s ago: executing program 5 (id=863):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDFONTOP_SET(r0, 0x4b72, &(0x7f0000000300)={0x5, 0xffffffff, 0x20000004, 0xe, 0x1bd, 0x0})

1.358872951s ago: executing program 5 (id=864):
r0 = socket$netlink(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-avx\x00'}, 0x58)
r2 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x205, 0x2)
mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000002, 0x11012, r2, 0x0)
madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa)
syz_clone3(&(0x7f00000002c0)={0x8040000, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r3 = accept4$alg(r1, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f00000021c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="08010000000000001701000002000000f0000000f2add6ae1e272c4f2373652b942a4b37257becc9e08abd5b2f3d51bfd401b17767502618e35070617f7bd9ed528a86b228e05927897d12bdac1d19a601a527e1d69f5323f7ad5efcd2263e0a4ee3eba941e0c45d61814dcf9cd99e09f84ac713b5e63379cd72925fbe27f135822e47f60abbc589a69c358ba83444ff886d17cca1f8c12e03eb729fc3c41cb3ca6db707e12721d2bb9be29c26e54a8a5de68399f54ca72cc4769867059f729dbd3a9b4dbc121e5877063cd403375da048f14ff5d3d79b655828343853b5a765ac0685302a6d45"], 0x108, 0x880}], 0x1, 0x80001)
recvmmsg(r3, &(0x7f00000053c0)=[{{0x0, 0x0, &(0x7f0000000a80)=[{&(0x7f0000000680)=""/241, 0xf1}, {&(0x7f00000008c0)=""/166, 0xa6}, {&(0x7f0000000780)=""/107, 0x6b}], 0x3}, 0x7}, {{&(0x7f0000000b00)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000b80)=""/242, 0xf2}, {&(0x7f0000000c80)=""/140, 0x8c}, {&(0x7f00000004c0)=""/56, 0x38}, {&(0x7f0000000e80)=""/133, 0x85}], 0x4, &(0x7f0000000f40)=""/113, 0x71}, 0x9}, {{&(0x7f0000000fc0)=@xdp, 0x80, 0x0}, 0xee}, {{&(0x7f00000012c0)=@ieee802154={0x24, @long}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001340)=""/63, 0x3f}, {&(0x7f0000001380)=""/129, 0x81}, {&(0x7f00000014c0)=""/81, 0x51}, {&(0x7f0000001540)=""/33, 0x21}, {&(0x7f0000003200)=""/4096, 0x1000}, {&(0x7f0000001580)=""/134, 0x86}, {&(0x7f0000004200)=""/4096, 0x1000}, {0x0}], 0x8, &(0x7f00000020c0)=""/237, 0xed}, 0xfffffffa}, {{&(0x7f0000001880)=@llc, 0x80, 0x0, 0x0, &(0x7f0000001a80)=""/194, 0xc2}, 0x6}, {{&(0x7f0000001b80)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000001e40)=[{&(0x7f0000001c80)=""/146, 0x92}, {&(0x7f0000001c00)=""/19, 0x13}, {&(0x7f0000001d40)=""/194, 0xc2}], 0x3, &(0x7f0000001e80)=""/12, 0xc}}, {{&(0x7f0000001ec0)=@ieee802154, 0x80, &(0x7f0000002000)=[{&(0x7f0000001f40)=""/175, 0xaf}], 0x1, &(0x7f0000002040)=""/70, 0x46}, 0x10001}], 0x7, 0x10102, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x80000001, '\x00', 0x0, 0x0}, 0x48)
r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94)
r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x13}, 0x94)
r8 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r8, 0xc0406618, &(0x7f0000000480)={@id={0x2, 0x0, @auto="1ad5808ce0965912068aa6bf606997b3"}})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0xb}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {0x4}, {0x7, 0x0, 0xa}, {0x4, 0x0, 0x7, 0x2, 0x0, 0x0, 0x1d}, {0x18, 0x9, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xc, 0x9, 0x4}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x2e, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0)

1.358687635s ago: executing program 4 (id=865):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000007080), 0x40040, 0x0)
lseek(r0, 0xffff, 0x1)

1.287893196s ago: executing program 4 (id=866):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0x5, 0x2}, {0x0, 0xe}}}, 0x24}}, 0x0)

1.287666394s ago: executing program 4 (id=867):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000380)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.231418663s ago: executing program 4 (id=868):
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000d7dda4108911930800000102030109022400020000000009046802006e02c000090468"], 0x0)

891.343357ms ago: executing program 5 (id=870):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10)
set_mempolicy_home_node(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0)

539.558201ms ago: executing program 0 (id=874):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0)
read$msr(0xffffffffffffffff, 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000540)={@fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x29}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1}}, &(0x7f0000000600)={0x0, 0x18, 0x40}}, 0x1000}], 0x0, 0x0, 0x0})

368.821634ms ago: executing program 0 (id=875):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xba)
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000140)=0x7f)

368.335416ms ago: executing program 0 (id=876):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
close(r0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
close(r0)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
socketpair(0x0, 0x0, 0x0, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r3}, 0x10)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0xf00}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78)

330.054295ms ago: executing program 0 (id=877):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_int(r0, &(0x7f00000000c0)='pids.max\x00', 0x2, 0x0)
write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[@ANYBLOB='-', @ANYRESOCT], 0x27)

251.060143ms ago: executing program 0 (id=878):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000001a00)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10)
setsockopt$inet_udp_int(r0, 0x11, 0x67, &(0x7f0000000640)=0x6, 0x4)
sendto$inet(r0, &(0x7f00000000c0)="8689d46205a341", 0x7, 0x0, 0x0, 0x0)

250.761228ms ago: executing program 0 (id=879):
r0 = syz_usb_connect$hid(0x3, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x20a0, 0x4287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x30, 0x20, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x3, 0x6, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x2}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x4, 0xba, 0x9f}}]}}}]}}]}}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000000c0)={0x24, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x22, 0x5, {[@local=@item_012={0x2, 0x2, 0x9, "a39f"}, @main=@item_012={0x1, 0x0, 0x9, "ed"}]}}, 0x0}, 0x0)

574.863µs ago: executing program 5 (id=880):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)={0x94, r1, 0x15, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x53, 0xe, {{{}, {}, @broadcast, @device_a, @random="13610680c4c9"}, 0x0, @default, 0x1, @void, @void, @void, @void, @val={0x6, 0x2, 0x5}, @void, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x800, 0x2, 0x3, 0x0, {0xe, 0x6, 0x0, 0x0, 0x0, 0x1, 0x1, 0x2}, 0x1, 0xc9b9, 0xb}}, @void, @void, @val={0x76, 0x6, {0x0, 0x1, 0x2b, 0x4}}}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xf5c}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_HE_BSS_COLOR={0xc, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x2b}]}]}, 0x94}}, 0x0)

0s ago: executing program 5 (id=881):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@ipv4_newroute={0x34, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0xc, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_GENEVE={0x8, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x4}}}}]}, 0x34}}, 0x0)

kernel console output (not intermixed with test programs):

ck distance 1388 @ lcn 42 of nid 36
[   72.116261][ T6425] erofs (device loop1): failed to decompress -21 in[56, 4040] out[1851]
[   72.119051][ T6425] erofs (device loop1): read error -117 @ 43 of nid 36
[   72.680014][    T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   72.834807][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=008d, bcdDevice=7a.ac
[   72.838705][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.844195][    T9] usb 2-1: Product: syz
[   72.846139][    T9] usb 2-1: Manufacturer: syz
[   72.848266][    T9] usb 2-1: SerialNumber: syz
[   72.852618][    T9] usb 2-1: config 0 descriptor??
[   72.859975][    T9] usb 2-1: interface 1 not found
[   73.193211][ T6450] loop0: detected capacity change from 0 to 40427
[   73.202290][ T6450] F2FS-fs (loop0): build fault injection rate: 690
[   73.207325][ T6450] F2FS-fs (loop0): invalid crc value
[   73.228192][ T6450] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   73.232563][ T6450] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   74.117018][ T6486] loop0: detected capacity change from 0 to 2048
[   74.125674][ T6486] UDF-fs: warning (device loop0): udf_fill_super: No fileset found
[   74.167415][ T6488] loop0: detected capacity change from 0 to 256
[   74.177040][ T6488] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d)
[   74.397048][   T24] usb 3-1: USB disconnect, device number 4
[   74.424950][ T6492] loop2: detected capacity change from 0 to 1024
[   74.428310][ T6492] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[   74.459229][ T5949] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   74.623170][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   74.627790][ T5949] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   74.632601][ T5949] usb 1-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[   74.636583][ T5949] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   74.644925][ T5949] usb 1-1: config 0 descriptor??
[   75.006629][ T6506] loop2: detected capacity change from 0 to 128
[   75.013232][ T6506] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   75.018913][ T6506] ext4 filesystem being mounted at /48/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   75.036030][ T5973] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   75.051354][ T6510] loop2: detected capacity change from 0 to 256
[   75.060909][ T6510] FAT-fs (loop2): Directory bread(block 64) failed
[   75.063188][ T6510] FAT-fs (loop2): Directory bread(block 65) failed
[   75.065642][ T6510] FAT-fs (loop2): Directory bread(block 66) failed
[   75.068502][ T6510] FAT-fs (loop2): Directory bread(block 67) failed
[   75.075496][ T6510] FAT-fs (loop2): Directory bread(block 68) failed
[   75.083495][ T6510] FAT-fs (loop2): Directory bread(block 69) failed
[   75.086814][ T6510] FAT-fs (loop2): Directory bread(block 70) failed
[   75.090695][ T6510] FAT-fs (loop2): Directory bread(block 71) failed
[   75.091932][ T5949] hid-steam 0003:28DE:1142.0002: : USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0
[   75.092992][ T6510] FAT-fs (loop2): Directory bread(block 72) failed
[   75.100164][ T6510] FAT-fs (loop2): Directory bread(block 73) failed
[   75.149259][ T5949] hid-steam 0003:28DE:1142.0002: Steam wireless receiver connected
[   75.157999][ T5949] hid-steam 0003:28DE:1142.0003: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.0-1/input0
[   75.190341][    T9] usb 2-1: USB disconnect, device number 2
[   75.418754][ T6042] usb 1-1: USB disconnect, device number 4
[   75.444534][ T6042] hid-steam 0003:28DE:1142.0002: Steam wireless receiver disconnected
[   75.540186][    T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   75.690677][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   75.694133][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   75.698568][    T9] usb 2-1: config 0 has no interface number 0
[   75.703281][    T9] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[   75.707297][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.713363][    T9] usb 2-1: Product: syz
[   75.715292][    T9] usb 2-1: Manufacturer: syz
[   75.717356][    T9] usb 2-1: SerialNumber: syz
[   75.722275][    T9] usb 2-1: config 0 descriptor??
[   75.726917][    T9] cx231xx 2-1:0.1: New device syz syz @ 12 Mbps (0572:58a5) with 1 interfaces
[   75.730636][    T9] cx231xx 2-1:0.1: Not found matching IAD interface
[   75.941233][   T24] usb 2-1: USB disconnect, device number 3
[   75.980036][ T6519] loop0: detected capacity change from 0 to 16
[   75.994126][ T6519] erofs (device loop0): mounted with root inode @ nid 36.
[   76.127437][ T6535] loop0: detected capacity change from 0 to 512
[   76.141492][ T6535] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842e01c, mo2=0002]
[   76.148397][ T6535] System zones: 1-12
[   76.153338][ T6535] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.237: invalid indirect mapped block 8 (level 2)
[   76.158280][ T6535] EXT4-fs (loop0): 1 truncate cleaned up
[   76.162576][ T6535] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   76.179477][ T5959] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   76.218277][   T33] audit: type=1326 audit(1755976034.471:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6541 comm="syz.0.240" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc510d8ebe9 code=0x0
[   76.539860][   T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   76.699229][   T24] usb 1-1: Using ep0 maxpacket: 32
[   76.702969][   T24] usb 1-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[   76.706672][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.711073][   T24] usb 1-1: config 0 descriptor??
[   76.715167][   T24] gspca_main: sq930x-2.14.0 probing 041e:403c
[   76.729220][    T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   76.879173][    T9] usb 2-1: Using ep0 maxpacket: 8
[   76.884997][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[   76.888834][    T9] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[   76.892750][    T9] usb 2-1: Product: syz
[   76.894580][    T9] usb 2-1: Manufacturer: syz
[   76.896660][    T9] usb 2-1: SerialNumber: syz
[   76.900174][    T9] usb 2-1: config 0 descriptor??
[   76.906241][    T9] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[   77.025087][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz.2.246'.
[   77.035611][ T6554] bridge0: entered promiscuous mode
[   77.038079][ T6554] macvlan2: entered allmulticast mode
[   77.040578][ T6554] bridge0: entered allmulticast mode
[   77.044303][ T6554] bridge0: port 3(macvlan2) entered blocking state
[   77.047391][ T6554] bridge0: port 3(macvlan2) entered disabled state
[   77.052825][ T6554] bridge0: left allmulticast mode
[   77.055160][ T6554] bridge0: left promiscuous mode
[   77.109210][    T9] gspca_zc3xx: reg_w_i err -71
[   77.111385][    T9] gspca_zc3xx 2-1:0.0: probe with driver gspca_zc3xx failed with error -71
[   77.127110][    T9] usb 2-1: USB disconnect, device number 4
[   77.131365][   T24] gspca_sq930x: ucbus_write failed -71
[   77.133253][   T24] sq930x 1-1:0.0: probe with driver sq930x failed with error -71
[   77.138556][   T24] usb 1-1: USB disconnect, device number 5
[   77.157800][ T6556] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.160860][ T6556] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.190981][ T6556] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.197475][ T6556] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.251345][   T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.255007][   T13] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.267985][   T13] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.279277][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.312573][ T6560] input: syz1 as /devices/virtual/input/input5
[   77.317773][ T6560] input: failed to attach handler leds to device input5, error: -6
[   78.539390][    T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   78.719721][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[   78.723959][    T9] usb 3-1: not running at top speed; connect to a high speed hub
[   78.732680][    T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[   78.751414][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   78.755149][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.758854][    T9] usb 3-1: Product: syz
[   78.760853][    T9] usb 3-1: Manufacturer: syz
[   78.762799][    T9] usb 3-1: SerialNumber: syz
[   78.909277][   T47] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   79.013519][    T9] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   79.064213][    T9] usb 3-1: USB disconnect, device number 5
[   79.079609][   T47] usb 1-1: Using ep0 maxpacket: 16
[   79.086308][   T47] usb 1-1: New USB device found, idVendor=09c0, idProduct=0201, bcdDevice= a.a4
[   79.094060][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   79.099995][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.107126][   T47] usb 1-1: Product: syz
[   79.108620][   T47] usb 1-1: Manufacturer: syz
[   79.113292][   T47] usb 1-1: SerialNumber: syz
[   79.118822][   T47] usb 1-1: config 0 descriptor??
[   79.174570][   T47] dvb-usb: found a 'Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver' in warm state.
[   79.317708][ T6587] befs: (nullb0): invalid magic header
[   79.371981][   T47] gp8psk: usb in 128 operation failed.
[   79.375517][   T47] gp8psk: usb in 137 operation failed.
[   79.377986][   T47] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   79.384395][   T47] dvbdev: DVB: registering new adapter (Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver)
[   79.387700][   T47] usb 1-1: media controller created
[   79.414826][   T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   79.436097][   T47] gp8psk_fe: Frontend revision 1 attached
[   79.438965][   T47] usb 1-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)...
[   79.444300][   T47] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered.
[   79.576431][ T6589] openvswitch: netlink: IP tunnel dst address not specified
[   79.698802][   T47] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receiver successfully initialized and connected.
[   79.703096][   T47] gp8psk: found Genpix USB device pID = 201 (hex)
[   79.902217][   T47] usb 1-1: USB disconnect, device number 6
[   79.906637][ T6591] loop2: detected capacity change from 0 to 8
[   79.945684][   T47] dvb-usb: Genpix 8PSK-to-USB2 Rev.1 DVB-S receive successfully deinitialized and disconnected.
[   80.254240][ T6615] loop2: detected capacity change from 0 to 256
[   80.263971][ T6613] loop1: detected capacity change from 0 to 4096
[   80.274800][ T6615] FAT-fs (loop2): Directory bread(block 64) failed
[   80.278074][ T6615] FAT-fs (loop2): Directory bread(block 65) failed
[   80.281514][ T6613] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   80.285943][ T6615] FAT-fs (loop2): Directory bread(block 66) failed
[   80.289558][ T6615] FAT-fs (loop2): Directory bread(block 67) failed
[   80.292314][ T6615] FAT-fs (loop2): Directory bread(block 68) failed
[   80.294972][ T6615] FAT-fs (loop2): Directory bread(block 69) failed
[   80.297682][ T6615] FAT-fs (loop2): Directory bread(block 70) failed
[   80.307204][ T6613] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   80.310244][ T6615] FAT-fs (loop2): Directory bread(block 71) failed
[   80.310650][ T6613] ntfs3(loop1): mft corrupted
[   80.313113][ T6615] FAT-fs (loop2): Directory bread(block 72) failed
[   80.314939][ T6613] ntfs3(loop1): Failed to load $Extend (-22).
[   80.317580][ T6615] FAT-fs (loop2): Directory bread(block 73) failed
[   80.320134][ T6613] ntfs3(loop1): Failed to initialize $Extend.
[   80.330452][ T6613] ntfs3(loop1): ino=1e, mi_enum_attr
[   80.332676][ T6613] ntfs3(loop1): ino=1e, mi_enum_attr
[   80.334890][ T6613] ntfs3(loop1): ino=1e, "file1" mi_enum_attr
[   80.337431][ T6613] ntfs3(loop1): ino=1e, "file1" mi_enum_attr
[   80.341563][ T6613] ntfs3(loop1): ino=1e, "file1" mi_enum_attr
[   80.395765][ T6617] loop1: detected capacity change from 0 to 2048
[   80.406319][ T6617] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[   80.412835][ T6617] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   80.652206][ T6627] loop0: detected capacity change from 0 to 32768
[   80.678732][   T33] audit: type=1800 audit(1755976038.931:4): pid=6627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.277" name="file1" dev="loop0" ino=7 res=0 errno=0
[   80.694385][ T6635] syz.1.281 uses obsolete (PF_INET,SOCK_PACKET)
[   80.709192][   T47] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   80.745186][ T6627] ERROR: (device loop0): dbAdjCtl: the maximum free buddy is not the old root
[   80.745186][ T6627] 
[   80.751672][ T6627] ERROR: (device loop0): remounting filesystem as read-only
[   80.762164][ T6637] loop1: detected capacity change from 0 to 128
[   80.765055][ T6637] EXT4-fs: Ignoring removed nobh option
[   80.782548][ T6637] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   80.792539][ T6637] ext4 filesystem being mounted at /71/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   80.800992][   T33] audit: type=1800 audit(1755976039.061:5): pid=6637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.282" name="file1" dev="loop1" ino=12 res=0 errno=0
[   80.823502][ T5962] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   80.851875][ T6641] netlink: 20 bytes leftover after parsing attributes in process `syz.1.283'.
[   80.891366][   T47] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   80.895918][   T47] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFC, changing to 0x8C
[   80.908645][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has an invalid bInterval 0, changing to 10
[   80.922271][   T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8C has invalid wMaxPacketSize 0
[   80.926282][   T47] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   80.950101][   T47] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[   80.956135][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.962475][   T47] usb 3-1: Product: syz
[   80.964275][   T47] usb 3-1: Manufacturer: syz
[   80.966170][   T47] usb 3-1: SerialNumber: syz
[   80.969208][   T47] usb 3-1: config 0 descriptor??
[   80.973060][   T47] xbox_remote_probe: endpoint_in message size==0?
[   81.177005][ T6042] usb 3-1: USB disconnect, device number 6
[   81.480010][   T10] cfg80211: failed to load regulatory.db
[   81.985107][ T6659] loop2: detected capacity change from 0 to 164
[   82.046029][ T6663] IPv6: NLM_F_CREATE should be specified when creating new route
[   82.054489][ T6663] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.057550][ T6663] IPv6: NLM_F_CREATE should be set when creating new route
[   82.060660][ T6663] IPv6: NLM_F_CREATE should be set when creating new route
[   82.063693][ T6663] IPv6: NLM_F_CREATE should be set when creating new route
[   82.067525][ T6663] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[   82.071536][ T6663] Zero length message leads to an empty skb
[   82.190499][ T6677] loop2: detected capacity change from 0 to 8
[   82.194661][ T6677] SQUASHFS error: lzo decompression failed, data probably corrupt
[   82.198329][ T6677] SQUASHFS error: Failed to read block 0x91: -5
[   82.201476][ T6677] SQUASHFS error: Unable to read metadata cache entry [8f]
[   82.204604][ T6677] SQUASHFS error: Unable to read inode 0x11f
[   82.465665][ T6688] loop0: detected capacity change from 0 to 256
[   82.481099][ T6688] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   82.492231][ T6688] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   82.504937][ T6688] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[   82.541577][   T33] audit: type=1800 audit(1755976040.801:6): pid=6688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.303" name="file1" dev="loop0" ino=1048648 res=0 errno=0
[   82.613028][ T6696] loop0: detected capacity change from 0 to 1024
[   82.616625][ T6696] EXT4-fs: Ignoring removed orlov option
[   82.618574][ T6696] EXT4-fs: Ignoring removed nomblk_io_submit option
[   82.651203][ T6696] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.661879][ T6696] IPVS: length: 8 != 171493831088
[   82.672688][ T5959] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.683055][ T6692] loop2: detected capacity change from 0 to 32768
[   82.689668][ T6692] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.305 (6692)
[   82.716208][ T6692] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   82.722084][ T6692] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[   82.786439][ T6692] BTRFS info (device loop2): enabling ssd optimizations
[   82.792591][ T6692] BTRFS info (device loop2): enabling free space tree
[   82.804112][   T33] audit: type=1800 audit(1755976041.061:7): pid=6692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.305" name="file2" dev="loop2" ino=261 res=0 errno=0
[   82.845457][ T5973] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   83.308433][ T6731] random: crng reseeded on system resumption
[   83.331324][ T6735] loop1: detected capacity change from 0 to 128
[   83.338414][ T6735] EXT4-fs: Ignoring removed nobh option
[   83.352029][ T6735] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   83.367431][ T6735] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   83.377191][ T6735] fscrypt (loop1, inode 12): Sub-block data units not yet supported with IV_INO_LBLK_32
[   83.393051][ T5962] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   83.430953][ T6744] netlink: 'syz.2.319': attribute type 34 has an invalid length.
[   83.540183][ T6757] netlink: 152 bytes leftover after parsing attributes in process `syz.2.325'.
[   83.658590][ T6767] loop0: detected capacity change from 0 to 128
[   83.664961][ T6767] vxfs: WRONG superblock magic 7b3185b5 at 1
[   83.673659][ T6767] vxfs: unsupported VxFS version (-1232326277)
[   83.687733][ T6750] loop1: detected capacity change from 0 to 32768
[   83.696810][ T6750] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.322 (6750)
[   83.706028][ T6750] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   83.716709][ T6750] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   83.783147][ T6750] BTRFS info (device loop1): enabling free space tree
[   83.785847][ T6750] BTRFS info (device loop1): enabling auto defrag
[   83.788352][ T6750] BTRFS info (device loop1): force zlib compression, level 3
[   83.792848][ T6750] BTRFS info (device loop1): max_inline set to 0
[   83.879676][   T10] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   83.890456][ T5962] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   84.039454][   T10] usb 3-1: Using ep0 maxpacket: 32
[   84.045849][   T10] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[   84.055659][   T10] usb 3-1: config 0 has no interface number 0
[   84.058355][   T10] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   84.065571][   T10] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[   84.072873][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   84.076194][   T10] usb 3-1: Product: syz
[   84.077937][   T10] usb 3-1: Manufacturer: syz
[   84.085152][   T10] usb 3-1: SerialNumber: syz
[   84.088390][   T10] usb 3-1: config 0 descriptor??
[   84.093616][   T10] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[   84.097748][   T10] em28xx 3-1:0.132: Video interface 132 found:
[   84.320288][ T6804] loop0: detected capacity change from 0 to 32768
[   84.346831][ T6804] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   84.411281][ T6804] XFS (loop0): Ending clean mount
[   84.418483][ T6804] XFS (loop0): Quotacheck needed: Please wait.
[   84.443415][ T6804] XFS (loop0): Quotacheck: Done.
[   84.505878][   T10] em28xx 3-1:0.132: unknown em28xx chip ID (39)
[   84.617812][ T5959] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   85.319442][   T10] em28xx 3-1:0.132: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5)
[   85.734393][   T10] em28xx 3-1:0.132: board has no eeprom
[   85.789797][   T10] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[   85.800177][   T10] em28xx 3-1:0.132: analog set to bulk mode.
[   85.802186][ T6042] em28xx 3-1:0.132: Registering V4L2 extension
[   85.805711][ T6844] netlink: 8 bytes leftover after parsing attributes in process `syz.2.354'.
[   85.807027][   T10] usb 3-1: USB disconnect, device number 7
[   85.812473][   T10] em28xx 3-1:0.132: Disconnecting em28xx
[   85.852506][ T6849] sch_tbf: burst 19872 is lower than device lo mtu (65550) !
[   85.883620][ T6042] em28xx 3-1:0.132: Config register raw data: 0xffffffed
[   85.885818][ T6042] em28xx 3-1:0.132: AC97 chip type couldn't be determined
[   85.888112][ T6042] em28xx 3-1:0.132: No AC97 audio processor
[   85.891077][ T6042] usb 3-1: Decoder not found
[   85.892604][ T6042] em28xx 3-1:0.132: failed to create media graph
[   85.894767][ T6042] em28xx 3-1:0.132: V4L2 device video103 deregistered
[   85.895335][ T6856] netlink: 32 bytes leftover after parsing attributes in process `syz.1.358'.
[   85.897504][ T6042] em28xx 3-1:0.132: Remote control support is not available for this card.
[   85.906902][   T10] em28xx 3-1:0.132: Closing input extension
[   85.917520][   T10] em28xx 3-1:0.132: Freeing device
[   85.950106][ T6853] block nbd2: server does not support multiple connections per device.
[   85.956290][ T6850] block nbd2: shutting down sockets
[   85.967250][ T6860] loop1: detected capacity change from 0 to 128
[   85.982581][ T6860] FAT-fs (loop1): Directory bread(block 32) failed
[   85.985130][ T6860] FAT-fs (loop1): Directory bread(block 33) failed
[   85.987777][ T6860] FAT-fs (loop1): Directory bread(block 34) failed
[   85.990369][ T6860] FAT-fs (loop1): Directory bread(block 35) failed
[   85.998429][ T6860] FAT-fs (loop1): Directory bread(block 36) failed
[   86.001175][ T6860] FAT-fs (loop1): Directory bread(block 37) failed
[   86.003638][ T6860] FAT-fs (loop1): Directory bread(block 38) failed
[   86.006130][ T6860] FAT-fs (loop1): Directory bread(block 39) failed
[   86.023189][ T6860] FAT-fs (loop1): Directory bread(block 40) failed
[   86.025898][ T6860] FAT-fs (loop1): Directory bread(block 41) failed
[   86.209926][ T6042] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   86.270525][ T6870] loop1: detected capacity change from 0 to 32768
[   86.277285][ T6870] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.364 (6870)
[   86.285932][ T6870] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   86.289582][ T6870] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   86.303203][ T6870] BTRFS info (device loop1): setting nodatasum
[   86.305203][ T6870] BTRFS info (device loop1): setting nodatacow
[   86.307223][ T6870] BTRFS info (device loop1): enabling free space tree
[   86.309469][ T6870] BTRFS info (device loop1): enabling auto defrag
[   86.311612][ T6870] BTRFS info (device loop1): max_inline set to 0
[   86.359174][ T6042] usb 1-1: Using ep0 maxpacket: 32
[   86.364799][ T6042] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   86.368065][ T6042] usb 1-1: config 0 has no interface number 0
[   86.379185][ T6042] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.389239][ T6042] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.393227][ T6042] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[   86.396905][ T6042] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.402068][ T6042] usb 1-1: config 0 descriptor??
[   86.596223][ T5962] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   86.596727][   T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.647383][   T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.704063][   T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.744887][   T12] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.815246][ T6042] ft260 0003:0403:6030.0004: item fetching failed at offset 0/2
[   86.828650][ T6042] ft260 0003:0403:6030.0004: failed to parse HID
[   86.832462][ T5240] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.833567][ T6042] ft260 0003:0403:6030.0004: probe with driver ft260 failed with error -22
[   86.839019][ T5240] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.842812][ T5240] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.848081][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.853493][ T5240] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.856796][   T12] bridge_slave_1: left allmulticast mode
[   86.859999][   T12] bridge_slave_1: left promiscuous mode
[   86.864302][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.867477][   T12] bridge_slave_0: left allmulticast mode
[   86.870418][   T12] bridge_slave_0: left promiscuous mode
[   86.877585][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.953423][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.957526][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.961768][   T12] bond0 (unregistering): Released all slaves
[   86.970690][ T6892] sp0: Synchronizing with TNC
[   87.013551][ T6042] usb 1-1: USB disconnect, device number 7
[   87.125995][ T6889] chnl_net:caif_netlink_parms(): no params data found
[   87.164898][   T12] hsr_slave_0: left promiscuous mode
[   87.167097][   T12] hsr_slave_1: left promiscuous mode
[   87.169279][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.171781][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.174268][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.177099][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.181885][   T12] veth1_macvtap: left promiscuous mode
[   87.183782][   T12] veth0_macvtap: left promiscuous mode
[   87.185688][   T12] veth1_vlan: left promiscuous mode
[   87.187639][   T12] veth0_vlan: left promiscuous mode
[   87.288041][   T12] team0 (unregistering): Port device team_slave_1 removed
[   87.294588][   T12] team0 (unregistering): Port device team_slave_0 removed
[   87.338572][ T6889] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.341532][ T6889] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.343877][ T6889] bridge_slave_0: entered allmulticast mode
[   87.346723][ T6889] bridge_slave_0: entered promiscuous mode
[   87.349961][ T6889] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.352398][ T6889] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.355129][ T6889] bridge_slave_1: entered allmulticast mode
[   87.358061][ T6889] bridge_slave_1: entered promiscuous mode
[   87.383870][ T6889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.388942][ T6889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   87.404034][ T6889] team0: Port device team_slave_0 added
[   87.408876][ T6889] team0: Port device team_slave_1 added
[   87.422950][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_0
[   87.425794][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.435868][ T6889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   87.440803][ T6889] batman_adv: batadv0: Adding interface: batadv_slave_1
[   87.443162][ T6889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   87.449440][ T6042] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   87.453643][ T6889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   87.479356][ T6889] hsr_slave_0: entered promiscuous mode
[   87.481475][ T6889] hsr_slave_1: entered promiscuous mode
[   87.532194][ T6889] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   87.542201][ T6889] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   87.547584][ T6889] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   87.554879][ T6889] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   87.607684][ T6889] 8021q: adding VLAN 0 to HW filter on device bond0
[   87.611754][ T6042] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   87.625079][ T6889] 8021q: adding VLAN 0 to HW filter on device team0
[   87.628041][ T6042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   87.633984][ T6042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[   87.638041][ T6042] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   87.644234][ T6042] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   87.645172][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.648063][ T6042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.650490][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   87.658487][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.661679][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   87.665915][ T6042] usb 3-1: config 0 descriptor??
[   87.688956][ T6889] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   87.695963][ T6889] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   87.771902][ T6889] 8021q: adding VLAN 0 to HW filter on device batadv0
[   87.785115][ T6889] veth0_vlan: entered promiscuous mode
[   87.789733][ T6889] veth1_vlan: entered promiscuous mode
[   87.801597][ T6889] veth0_macvtap: entered promiscuous mode
[   87.805052][ T6889] veth1_macvtap: entered promiscuous mode
[   87.811169][ T6889] batman_adv: batadv0: Interface activated: batadv_slave_0
[   87.816836][ T6889] batman_adv: batadv0: Interface activated: batadv_slave_1
[   87.823419][ T5948] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   87.828011][ T5948] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   87.891660][ T5948] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   87.931200][ T5948] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   87.970240][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   87.973289][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.006671][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   88.013229][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   88.083254][ T6042] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[   88.293992][ T6042] usb 3-1: USB disconnect, device number 8
[   88.676476][   T10] IPVS: starting estimator thread 0...
[   88.740699][ T6982] loop0: detected capacity change from 0 to 1764
[   88.783572][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.388'.
[   88.787420][ T6986] netlink: 24 bytes leftover after parsing attributes in process `syz.3.388'.
[   88.793791][ T6979] IPVS: using max 76 ests per chain, 182400 per kthread
[   88.807431][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.388'.
[   88.822641][ T6986] netlink: 24 bytes leftover after parsing attributes in process `syz.3.388'.
[   88.909247][   T55] Bluetooth: hci1: command tx timeout
[   88.912305][ T6990] netlink: 'syz.2.390': attribute type 1 has an invalid length.
[   88.916053][ T6990] netlink: 184 bytes leftover after parsing attributes in process `syz.2.390'.
[   89.058796][ T6996] input: syz0 as /devices/virtual/input/input7
[   89.424926][ T7006] capability: warning: `syz.0.397' uses deprecated v2 capabilities in a way that may be insecure
[   90.783893][ T7031] netlink: 40 bytes leftover after parsing attributes in process `syz.3.405'.
[   90.990476][   T55] Bluetooth: hci1: command tx timeout
[   91.116889][ T7045] loop2: detected capacity change from 0 to 2048
[   91.127419][ T7045] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[   91.139542][ T7045] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[   91.142708][ T7045] UDF-fs: Scanning with blocksize 512 failed
[   91.166906][ T7045] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   91.176891][ T7039] loop3: detected capacity change from 0 to 32768
[   91.185036][   T33] audit: type=1800 audit(1755976049.441:8): pid=7045 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.412" name="file1" dev="loop2" ino=838 res=0 errno=0
[   91.301754][ T7039] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   91.301927][ T7039]   allowing incompatible features above 0.0: (unknown version)
[   91.302007][ T7039]   features: 
[   91.318626][ T7039] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[   91.322527][ T7039] bcachefs (loop3): initializing new filesystem
[   91.344988][ T7039] bcachefs (loop3): going read-write
[   91.355442][ T7039] bcachefs (loop3): marking superblocks
[   91.383040][ T7039] bcachefs (loop3): initializing freespace
[   91.393693][ T7039] bcachefs (loop3): done initializing freespace
[   91.405568][ T7039] bcachefs (loop3): reading snapshots table
[   91.408799][ T7039] bcachefs (loop3): reading snapshots done
[   91.450282][ T7039] bcachefs (loop3): done starting filesystem
[   91.769822][ T7039] syz.3.409 (7039) used greatest stack depth: 15896 bytes left
[   91.808747][ T6889] bcachefs (loop3): shutting down
[   91.816229][ T6889] bcachefs (loop3): going read-only
[   91.825167][ T6889] bcachefs (loop3): finished waiting for writes to stop
[   91.835605][ T6889] bcachefs (loop3): flushing journal and stopping allocators, journal seq 4
[   91.894899][ T6889] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 5
[   91.904532][ T6889] bcachefs (loop3): clean shutdown complete, journal seq 6
[   91.908968][ T6889] bcachefs (loop3): marking filesystem clean
[   91.975536][ T6889] bcachefs (loop3): shutdown complete
[   92.687751][ T7069] netlink: 'syz.0.417': attribute type 9 has an invalid length.
[   92.709326][ T6042] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   92.793399][   T33] audit: type=1326 audit(1755976051.051:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.0.418" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc510d8ebe9 code=0x7fc00000
[   92.806519][   T33] audit: type=1326 audit(1755976051.051:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.0.418" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc510d8ebe9 code=0x7fc00000
[   92.816379][   T33] audit: type=1326 audit(1755976051.051:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.0.418" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc510d8ebe9 code=0x7fc00000
[   92.825565][   T33] audit: type=1326 audit(1755976051.051:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.0.418" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc510d8ebe9 code=0x7fc00000
[   92.845642][   T33] audit: type=1326 audit(1755976051.101:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.0.418" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc510d8ebe9 code=0x7fc00000
[   92.854331][   T33] audit: type=1326 audit(1755976051.101:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.0.418" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc510d8ebe9 code=0x7fc00000
[   92.862320][   T33] audit: type=1326 audit(1755976051.111:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.0.418" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc510d8ebe9 code=0x7fc00000
[   92.879174][ T6042] usb 3-1: Using ep0 maxpacket: 8
[   92.882595][ T6042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[   92.887026][ T6042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[   92.891066][ T6042] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[   92.894717][ T6042] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[   92.898572][ T6042] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[   92.902457][ T6042] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[   92.905428][ T6042] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.908843][ T6042] usb 3-1: config 0 descriptor??
[   92.917179][ T7063] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   93.070402][ T5240] Bluetooth: hci1: command tx timeout
[   93.163121][   T24] usb 3-1: USB disconnect, device number 9
[   93.165931][   T55] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[   93.577150][   T33] audit: type=1326 audit(1755976051.831:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7070 comm="syz.0.418" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc510d8ebe9 code=0x7fc00000
[   93.869386][   T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   93.872714][ T5308] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   94.019188][ T5308] usb 1-1: Using ep0 maxpacket: 32
[   94.021442][   T24] usb 4-1: Using ep0 maxpacket: 8
[   94.026042][ T5308] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.035703][   T24] usb 4-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice=ff.7b
[   94.040126][ T5308] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   94.044481][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.047916][   T24] usb 4-1: Product: syz
[   94.053336][   T24] usb 4-1: Manufacturer: syz
[   94.056621][   T24] usb 4-1: SerialNumber: syz
[   94.060838][ T5308] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   94.065526][ T5308] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   94.072795][ T5308] usb 1-1: Product: syz
[   94.082301][   T24] usb 4-1: config 0 descriptor??
[   94.086282][ T5308] usb 1-1: Manufacturer: syz
[   94.093981][   T24] upd78f0730 4-1:0.0: upd78f0730 converter detected
[   94.108340][   T24] usb 4-1: upd78f0730 converter now attached to ttyUSB0
[   94.113054][ T5308] hub 1-1:4.0: USB hub found
[   94.315738][   T47] usb 4-1: USB disconnect, device number 2
[   94.322184][ T5308] hub 1-1:4.0: 2 ports detected
[   94.335335][   T47] upd78f0730 ttyUSB0: upd78f0730 converter now disconnected from ttyUSB0
[   94.355589][   T47] upd78f0730 4-1:0.0: device disconnected
[   94.607841][ T7101] loop2: detected capacity change from 0 to 256
[   94.618072][ T7101] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x4ec6003b, utbl_chksum : 0xe619d30d)
[   94.662860][ T7103] program syz.2.429 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   95.149339][   T55] Bluetooth: hci1: command tx timeout
[   95.422918][ T5308] hub 1-1:4.0: hub_hub_status failed (err = -32)
[   95.425382][ T5308] hub 1-1:4.0: config failed, can't get hub status (err -32)
[   95.605080][ T7124] loop2: detected capacity change from 0 to 512
[   95.625863][ T7124] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.435: corrupted in-inode xattr: invalid ea_ino
[   95.632018][ T7124] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.435: couldn't read orphan inode 15 (err -117)
[   95.637637][ T7124] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   96.578350][ T7134] loop3: detected capacity change from 0 to 32768
[   96.598570][ T7134] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[   96.625541][ T6889] ocfs2: Unmounting device (7,3) on (node local)
[   96.818383][ T5973] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.821841][ T6042] usb 1-1: USB disconnect, device number 8
[   96.899250][ T7148] loop0: detected capacity change from 0 to 8192
[   97.022151][ T7161] loop3: detected capacity change from 0 to 1024
[   97.025182][ T7161] EXT4-fs: inline encryption not supported
[   97.027585][ T7161] EXT4-fs: Ignoring removed bh option
[   97.044829][ T7161] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   97.066100][ T7161] EXT4-fs warning (device loop3): ext4_resize_begin:72: won't resize using backup superblock at 1
[   97.116424][ T6889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.185668][ T7175] loop2: detected capacity change from 0 to 4096
[   97.194572][ T7175] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   97.221206][ T7175] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   97.225473][ T7175] ntfs3(loop2): ino=1a, mi_enum_attr
[   97.227683][ T7175] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[   97.240385][ T7180] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   97.244192][ T7180] bridge0: port 3(macsec1) entered blocking state
[   97.246916][ T7180] bridge0: port 3(macsec1) entered disabled state
[   97.269943][ T7180] macsec1: entered allmulticast mode
[   97.272073][ T7180] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[   97.282200][ T7180] macsec1: entered promiscuous mode
[   97.284331][ T7180] bridge0: port 3(macsec1) entered blocking state
[   97.286880][ T7180] bridge0: port 3(macsec1) entered forwarding state
[   97.378105][ T7189] loop2: detected capacity change from 0 to 512
[   97.429792][ T7189] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   97.470807][ T7196] loop3: detected capacity change from 0 to 2048
[   97.478401][ T7189] EXT4-fs (loop2): revision level too high, forcing read-only mode
[   97.484126][ T7200] loop0: detected capacity change from 0 to 136
[   97.486849][ T7196] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[   97.491013][ T7189] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e000e118, mo2=0002]
[   97.494009][ T7189] System zones: 0-1, 15-15, 18-18, 34-34
[   97.498244][ T7189] EXT4-fs (loop2): orphan cleanup on readonly fs
[   97.505770][ T7201] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   97.512280][ T7189] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[   97.519606][ T7189] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   97.526024][ T7189] EXT4-fs (loop2): Cannot turn on quotas: error -22
[   97.528724][ T5959] iso9660: Corrupted directory entry in block 2 of inode 1472
[   97.532346][ T7189] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.462: bg 0: block 40: padding at end of block bitmap is not set
[   97.546468][ T7189] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   97.546816][ T5959] iso9660: Corrupted directory entry in block 2 of inode 1472
[   97.549619][ T7189] EXT4-fs (loop2): 1 truncate cleaned up
[   97.554493][ T7189] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   97.576859][ T7189] EXT4-fs (loop2): shut down requested (0)
[   97.603695][ T5973] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.626365][ T7211] loop2: detected capacity change from 0 to 764
[   97.632822][ T7211] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   98.271494][ T7222] loop3: detected capacity change from 0 to 32768
[   98.309121][ T7222] XFS (loop3): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   98.332358][ T7222] XFS (loop3): Ending clean mount
[   98.380887][ T6889] XFS (loop3): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   98.505687][ T7239] loop3: detected capacity change from 0 to 4096
[   98.509031][ T7239] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[   98.520619][ T7239] ntfs3(loop3): ino=19, mi_enum_attr
[   98.522529][ T7239] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   98.531077][ T7239] ntfs3(loop3): failed to convert "c46c" to iso8859-9
[   98.533592][ T7239] ntfs3(loop3): ino=20, mi_enum_attr
[   98.542151][ T7242] loop0: detected capacity change from 0 to 8
[   98.553499][ T7242] SQUASHFS error: xz decompression failed, data probably corrupt
[   98.558662][ T7242] SQUASHFS error: Failed to read block 0x108: -5
[   98.571787][ T7242] SQUASHFS error: Unable to read metadata cache entry [106]
[   98.575720][ T7242] SQUASHFS error: Unable to read inode 0x11f
[   99.403454][ T7287] loop3: detected capacity change from 0 to 2048
[   99.425688][ T7287] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   99.434896][ T7287] ext4 filesystem being mounted at /51/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   99.460029][ T6889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   99.543898][ T7299] loop3: detected capacity change from 0 to 256
[   99.563538][ T7299] FAT-fs (loop3): Directory bread(block 64) failed
[   99.566338][ T7299] FAT-fs (loop3): Directory bread(block 65) failed
[   99.570570][ T7299] FAT-fs (loop3): Directory bread(block 66) failed
[   99.574059][ T7299] FAT-fs (loop3): Directory bread(block 67) failed
[   99.576979][ T7299] FAT-fs (loop3): Directory bread(block 68) failed
[   99.580453][ T7299] FAT-fs (loop3): Directory bread(block 69) failed
[   99.583349][ T7299] FAT-fs (loop3): Directory bread(block 70) failed
[   99.586257][ T7299] FAT-fs (loop3): Directory bread(block 71) failed
[   99.589050][ T7299] FAT-fs (loop3): Directory bread(block 72) failed
[   99.592372][ T7299] FAT-fs (loop3): Directory bread(block 73) failed
[   99.784138][ T7307] loop2: detected capacity change from 0 to 32768
[   99.843279][ T7307] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   99.843298][ T7307]   allowing incompatible features above 0.0: (unknown version)
[   99.843307][ T7307]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   99.859600][ T7307] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   99.863363][ T7307] bcachefs (loop2): initializing new filesystem
[   99.869872][ T7307] bcachefs (loop2): going read-write
[   99.876810][ T7307] bcachefs (loop2): marking superblocks
[   99.881636][ T7307] bcachefs (loop2): initializing freespace
[   99.885180][ T7307] bcachefs (loop2): done initializing freespace
[   99.888074][ T7307] bcachefs (loop2): reading snapshots table
[   99.890531][ T7307] bcachefs (loop2): reading snapshots done
[   99.898117][ T7307] bcachefs (loop2): done starting filesystem
[   99.964967][ T7324] loop0: detected capacity change from 0 to 4096
[   99.984931][ T7324] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  100.004063][ T7324] ntfs3(loop0): ino=19, mi_enum_attr
[  100.006027][ T7324] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  100.017441][ T7324] ntfs3(loop0): failed to convert "076c" to cp949
[  100.019978][ T7324] ntfs3(loop0): ino=20, mi_enum_attr
[  100.353607][ T7333] loop0: detected capacity change from 0 to 1024
[  100.372406][   T40] hfsplus: b-tree write err: -5, ino 4
[  100.411049][ T7327] loop3: detected capacity change from 0 to 32768
[  100.422604][ T7327] (syz.3.501,7327,0):ocfs2_verify_volume:2322 ERROR: Superblock slots found greater than file system maximum: found 65535, max 255
[  100.434654][ T7327] (syz.3.501,7327,0):ocfs2_verify_volume:2331 ERROR: status = -22
[  100.442549][ T7327] (syz.3.501,7327,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  100.450546][ T7327] (syz.3.501,7327,0):ocfs2_fill_super:1177 ERROR: status = -22
[  100.598988][ T5973] bcachefs (loop2): shutting down
[  100.602717][ T5973] bcachefs (loop2): going read-only
[  100.604831][ T5973] bcachefs (loop2): finished waiting for writes to stop
[  100.629353][ T5973] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  100.643303][ T5973] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  100.647060][ T5973] bcachefs (loop2): clean shutdown complete, journal seq 4
[  100.649906][ T5973] bcachefs (loop2): marking filesystem clean
[  100.657299][ T5973] bcachefs (loop2): shutdown complete
[  100.851881][ T7354] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  100.863861][   T33] audit: type=1800 audit(1755976059.121:17): pid=7354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.513" name="file1" dev="tmpfs" ino=363 res=0 errno=0
[  101.010759][ T7358] syz_tun: entered allmulticast mode
[  101.329252][  T790] usb 4-1: new low-speed USB device number 3 using dummy_hcd
[  101.484218][  T790] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  101.493416][  T790] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  101.503246][  T790] usb 4-1: string descriptor 0 read error: -22
[  101.505804][  T790] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  101.510082][  T790] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.510641][ T7366] netlink: 172 bytes leftover after parsing attributes in process `syz.0.519'.
[  101.517105][ T7366] netlink: 8 bytes leftover after parsing attributes in process `syz.0.519'.
[  101.520478][  T790] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  101.523156][ T7366] netlink: 172 bytes leftover after parsing attributes in process `syz.0.519'.
[  101.525816][  T790] usb 4-1: MIDIStreaming interface descriptor not found
[  101.527403][ T7366] netlink: 100 bytes leftover after parsing attributes in process `syz.0.519'.
[  101.534293][ T7366] netlink: 32 bytes leftover after parsing attributes in process `syz.0.519'.
[  101.709046][ T7379] loop2: detected capacity change from 0 to 16
[  101.716055][ T7379] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  101.736491][ T6042] usb 4-1: USB disconnect, device number 3
[  101.939221][   T24] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  102.059803][   T47] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  102.090508][   T24] usb 1-1: not running at top speed; connect to a high speed hub
[  102.094961][   T24] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  102.098735][   T24] usb 1-1: config 1 has no interface number 1
[  102.102115][   T24] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  102.111058][   T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  102.114740][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.118334][   T24] usb 1-1: Product: syz
[  102.120691][   T24] usb 1-1: Manufacturer: syz
[  102.122597][   T24] usb 1-1: SerialNumber: syz
[  102.210988][   T47] usb 3-1: config 0 interface 0 altsetting 185 endpoint 0x81 has invalid wMaxPacketSize 0
[  102.215354][   T47] usb 3-1: config 0 interface 0 has no altsetting 0
[  102.218296][   T47] usb 3-1: New USB device found, idVendor=05ac, idProduct=027a, bcdDevice= 0.00
[  102.222262][   T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  102.227349][   T47] usb 3-1: config 0 descriptor??
[  102.341114][   T24] usb 1-1: failed to enable PITCH for EP 0x82
[  102.355201][   T24] usb 1-1: USB disconnect, device number 9
[  102.390890][ T6279] udevd[6279]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  102.412406][ T7385] loop3: detected capacity change from 0 to 32768
[  102.429774][ T7385] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.527 (7385)
[  102.445653][ T7385] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  102.459279][ T7385] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  102.493844][ T7385] BTRFS info (device loop3): rebuilding free space tree
[  102.504493][ T7385] BTRFS info (device loop3): allowing degraded mounts
[  102.507568][ T7385] BTRFS info (device loop3): enabling ssd optimizations
[  102.512243][ T7385] BTRFS info (device loop3): enabling free space tree
[  102.515093][ T7385] BTRFS info (device loop3): force clearing of disk cache
[  102.518148][ T7385] BTRFS info (device loop3): enabling auto defrag
[  102.521089][ T7385] BTRFS info (device loop3): doing ref verification
[  102.523938][ T7385] BTRFS info (device loop3): max_inline set to 4096
[  102.650691][   T47] apple 0003:05AC:027A.0006: hidraw0: USB HID v8.00 Device [HID 05ac:027a] on usb-dummy_hcd.2-1/input0
[  102.854455][   T24] usb 3-1: USB disconnect, device number 10
[  103.279279][   T47] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  103.449231][   T47] usb 1-1: Using ep0 maxpacket: 16
[  103.452403][ T7414] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  103.453380][   T47] usb 1-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config
[  103.464370][   T47] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  103.468323][   T47] usb 1-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3
[  103.479596][   T47] usb 1-1: Product: syz
[  103.481430][   T47] usb 1-1: Manufacturer: syz
[  103.488197][   T47] usb 1-1: SerialNumber: syz
[  103.505930][   T47] usbtest 1-1:254.0: couldn't get endpoints, -22
[  103.508684][   T47] usbtest 1-1:254.0: probe with driver usbtest failed with error -22
[  103.603643][ T7418] loop2: detected capacity change from 0 to 8192
[  103.732210][  T790] usb 1-1: USB disconnect, device number 10
[  103.744681][   T47] libceph: connect (1)[c::]:6789 error -101
[  103.748319][   T47] libceph: mon0 (1)[c::]:6789 connect error
[  103.787500][ T6042] libceph: connect (1)[c::]:6789 error -101
[  103.791932][ T6042] libceph: mon0 (1)[c::]:6789 connect error
[  103.839588][ T6042] libceph: connect (1)[c::]:6789 error -101
[  103.843023][ T6042] libceph: mon0 (1)[c::]:6789 connect error
[  104.009749][   T47] libceph: connect (1)[c::]:6789 error -101
[  104.012370][   T47] libceph: mon0 (1)[c::]:6789 connect error
[  104.059452][  T790] libceph: connect (1)[c::]:6789 error -101
[  104.063476][  T790] libceph: mon0 (1)[c::]:6789 connect error
[  104.099461][  T790] libceph: connect (1)[c::]:6789 error -101
[  104.101979][  T790] libceph: mon0 (1)[c::]:6789 connect error
[  104.109505][   T55] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  104.112875][   T55] Bluetooth: hci2: Injecting HCI hardware error event
[  104.115810][   T55] Bluetooth: hci2: hardware error 0x00
[  104.307341][ T6889] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  104.456999][ T7441] netlink: 4 bytes leftover after parsing attributes in process `syz.3.537'.
[  104.519519][ T5308] libceph: connect (1)[c::]:6789 error -101
[  104.525798][ T5308] libceph: mon0 (1)[c::]:6789 connect error
[  104.566881][ T7420] ceph: No mds server is up or the cluster is laggy
[  104.566943][ T7423] ceph: No mds server is up or the cluster is laggy
[  104.579591][ T6042] libceph: connect (1)[c::]:6789 error -101
[  104.580453][ T7426] ceph: No mds server is up or the cluster is laggy
[  104.582231][ T6042] libceph: mon0 (1)[c::]:6789 connect error
[  105.590135][ T7472] loop3: detected capacity change from 0 to 1024
[  105.600943][ T7472] hfsplus: bad catalog entry type
[  105.610521][ T6280] hfsplus: b-tree write err: -5, ino 4
[  105.655258][ T7475] loop3: detected capacity change from 0 to 2048
[  105.660817][ T7475] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  105.709537][ T5308] usb 3-1: new full-speed USB device number 11 using dummy_hcd
[  105.734901][ T7482] loop3: detected capacity change from 0 to 512
[  105.755700][ T7482] EXT4-fs error (device loop3): ext4_orphan_get:1392: comm syz.3.555: inode #15: comm syz.3.555: iget: illegal inode #
[  105.762116][ T7482] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.555: couldn't read orphan inode 15 (err -117)
[  105.767894][ T7482] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  105.777536][ T7482] EXT4-fs (loop3): shut down requested (2)
[  105.795897][ T6889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.842018][ T7488] vim2m vim2m.0: Fourcc format (0x42474752) invalid.
[  105.861286][ T5308] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  105.865492][ T5308] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  105.928649][ T5308] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  105.933106][ T5308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.936329][ T5308] usb 3-1: Product: syz
[  105.938010][ T5308] usb 3-1: Manufacturer: syz
[  105.940874][ T5308] usb 3-1: SerialNumber: syz
[  106.189265][   T55] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  106.329282][ T5308] usb 3-1: 0:2 : does not exist
[  106.333952][ T5308] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  106.344668][ T5308] usb 3-1: USB disconnect, device number 11
[  106.355852][ T5845] udevd[5845]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  106.575579][ T7500] loop0: detected capacity change from 0 to 2048
[  106.581118][ T7500] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  106.591965][   T33] audit: type=1804 audit(1755976064.851:18): pid=7500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.562" name="/newroot/169/file0/file1" dev="loop0" ino=1346 res=1 errno=0
[  106.631982][ T7502] loop0: detected capacity change from 0 to 512
[  106.640981][ T7502] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  106.653613][ T5959] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.698354][ T7509] input: syz0 as /devices/virtual/input/input8
[  106.789750][ T7514] syz.0.567: attempt to access beyond end of device
[  106.789750][ T7514] loop0: rw=0, sector=64, nr_sectors = 2 limit=0
[  106.799063][ T7514] isofs_fill_super: bread failed, dev=loop0, iso_blknum=16, block=32
[  106.864910][ T7522] pim6reg: tun_chr_ioctl cmd 2147767507
[  106.896619][ T7527] loop2: detected capacity change from 0 to 65
[  106.900353][ T7527] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  106.903452][ T7527] BFS-fs: bfs_fill_super(): Superblock is corrupted on loop2
[  107.041410][ T7543] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  107.044358][ T7543] IPv6: NLM_F_CREATE should be set when creating new route
[  107.047316][ T7543] IPv6: NLM_F_CREATE should be set when creating new route
[  107.163069][ T7555] loop0: detected capacity change from 0 to 128
[  107.166749][ T7555] omfs: sysblock number (f784317bf884317b) is out of range
[  107.208304][ T7557] loop0: detected capacity change from 0 to 4096
[  107.211010][   T47] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  107.227528][ T7557] NILFS (loop0): invalid segment: Checksum error in segment payload
[  107.237154][ T7557] NILFS (loop0): trying rollback from an earlier position
[  107.246624][ T7557] NILFS (loop0): recovery complete
[  107.249983][ T7558] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  107.309224][ T6042] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  107.371362][   T47] usb 3-1: unable to get BOS descriptor or descriptor too short
[  107.375946][   T47] usb 3-1: config 14 has an invalid interface number: 21 but max is 0
[  107.380036][   T47] usb 3-1: config 14 has no interface number 0
[  107.382762][   T47] usb 3-1: config 14 interface 21 altsetting 251 bulk endpoint 0xA has invalid maxpacket 32
[  107.386664][   T47] usb 3-1: config 14 interface 21 has no altsetting 0
[  107.393087][   T47] usb 3-1: New USB device found, idVendor=c880, idProduct=760e, bcdDevice=35.fc
[  107.396694][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.400029][   T47] usb 3-1: Product: syz
[  107.401731][   T47] usb 3-1: Manufacturer: syz
[  107.403693][   T47] usb 3-1: SerialNumber: syz
[  107.407295][ T7535] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  107.459286][ T6042] usb 4-1: Using ep0 maxpacket: 16
[  107.462806][ T6042] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  107.466181][ T6042] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[  107.470084][ T6042] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1794, setting to 1024
[  107.473537][ T6042] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1024
[  107.477227][ T6042] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  107.480813][ T6042] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  107.484710][ T6042] usb 4-1: config 0 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  107.491242][ T6042] usb 4-1: New USB device found, idVendor=104f, idProduct=0004, bcdDevice=c6.c3
[  107.494195][ T6042] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.496736][ T6042] usb 4-1: Product: syz
[  107.498087][ T6042] usb 4-1: Manufacturer: syz
[  107.499986][ T6042] usb 4-1: SerialNumber: syz
[  107.502705][ T6042] usb 4-1: config 0 descriptor??
[  107.504913][ T7545] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  107.508659][ T6042] iuu_phoenix 4-1:0.0: iuu_phoenix converter detected
[  107.513277][ T6042] usb 4-1: iuu_phoenix converter now attached to ttyUSB0
[  107.559674][ T5308] usb 1-1: new full-speed USB device number 11 using dummy_hcd
[  107.621541][   T47] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  107.624309][   T47] usb 3-1: MIDIStreaming interface descriptor not found
[  107.636752][   T47] usb 3-1: USB disconnect, device number 12
[  107.652301][ T6279] udevd[6279]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:14.21/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  107.714790][ T6042] usb 4-1: USB disconnect, device number 4
[  107.719790][ T6042] iuu_phoenix ttyUSB0: iuu_phoenix converter now disconnected from ttyUSB0
[  107.722392][ T5308] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  107.724193][ T6042] iuu_phoenix 4-1:0.0: device disconnected
[  107.735832][ T5308] usb 1-1: New USB device found, idVendor=3344, idProduct=22f0, bcdDevice=ef.4d
[  107.741077][ T5308] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.744378][ T5308] usb 1-1: Product: syz
[  107.746097][ T5308] usb 1-1: Manufacturer: syz
[  107.747982][ T5308] usb 1-1: SerialNumber: syz
[  107.954498][ T5308] usb 1-1: selecting invalid altsetting 1
[  107.957224][ T5308] LME2510(C): Firmware Status: 00 00 00 00 00 00
[  107.957291][ T5308] dvb_usb_lmedm04 1-1:2.0: probe with driver dvb_usb_lmedm04 failed with error -22
[  107.964999][ T5308] usb 1-1: USB disconnect, device number 11
[  108.191038][ T7564] loop2: detected capacity change from 0 to 8
[  108.195761][ T7564] SQUASHFS error: zlib decompression failed, data probably corrupt
[  108.199053][ T7564] SQUASHFS error: Failed to read block 0x9b: -5
[  108.202981][ T7564] SQUASHFS error: Unable to read metadata cache entry [99]
[  108.205909][ T7564] SQUASHFS error: Unable to read inode 0x127
[  108.326612][ T7576] pim6reg1: entered promiscuous mode
[  108.328885][ T7576] pim6reg1: entered allmulticast mode
[  108.363651][ T7580] loop2: detected capacity change from 0 to 4096
[  108.373068][ T7580] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  108.379866][ T7580] ntfs3(loop2): ino=1e, "file1" attr_set_size
[  108.382803][ T7579] ntfs3(loop2): ino=1e, "file1" attr_set_size
[  108.485515][ T7596] Bluetooth: MGMT ver 1.23
[  108.838505][ T7613] loop0: detected capacity change from 0 to 256
[  108.981436][ T7613] FAT-fs (loop0): Directory bread(block 64) failed
[  108.986878][ T7613] FAT-fs (loop0): Directory bread(block 65) failed
[  108.991732][ T7613] FAT-fs (loop0): Directory bread(block 66) failed
[  108.994510][ T7613] FAT-fs (loop0): Directory bread(block 67) failed
[  108.997319][ T7613] FAT-fs (loop0): Directory bread(block 68) failed
[  109.000271][ T7613] FAT-fs (loop0): Directory bread(block 69) failed
[  109.002844][ T7613] FAT-fs (loop0): Directory bread(block 70) failed
[  109.005550][ T7613] FAT-fs (loop0): Directory bread(block 71) failed
[  109.008059][ T7613] FAT-fs (loop0): Directory bread(block 72) failed
[  109.011265][ T7613] FAT-fs (loop0): Directory bread(block 73) failed
[  109.071675][ T7615] netlink: 24 bytes leftover after parsing attributes in process `syz.0.611'.
[  109.075504][ T7615] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  110.550280][ T7638] delete_channel: no stack
[  110.623545][ T7643] loop0: detected capacity change from 0 to 4096
[  110.636548][ T7643] ntfs3(loop0): Primary boot: invalid record size -64.
[  110.640170][ T7643] ntfs3(loop0): try to read out of volume at offset 0x1ffe00
[  110.675742][ T7645] tipc: Started in network mode
[  110.677748][ T7645] tipc: Node identity 6255f9c1c355, cluster identity 4711
[  110.681656][ T7645] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  110.686218][ T7645] syzkaller0: entered promiscuous mode
[  110.688390][ T7645] syzkaller0: entered allmulticast mode
[  110.693840][ T7645] tipc: Resetting bearer <eth:syzkaller0>
[  110.700693][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  110.703992][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  110.709805][ T7644] tipc: Resetting bearer <eth:syzkaller0>
[  110.714137][ T7644] tipc: Disabling bearer <eth:syzkaller0>
[  110.731577][ T7647] loop0: detected capacity change from 0 to 4096
[  110.739284][ T7647] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  110.753865][ T7647] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  110.763985][   T33] audit: type=1800 audit(1755976069.021:19): pid=7647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.625" name="file1" dev="loop0" ino=30 res=0 errno=0
[  110.852116][ T7652] netlink: 168 bytes leftover after parsing attributes in process `syz.0.627'.
[  110.937225][ T7661] netlink: 'syz.3.631': attribute type 10 has an invalid length.
[  110.943884][ T7661] netlink: 40 bytes leftover after parsing attributes in process `syz.3.631'.
[  110.947487][ T7661] vcan0: entered promiscuous mode
[  110.951014][ T7661] A link change request failed with some changes committed already. Interface vcan0 may have been left with an inconsistent configuration, please check.
[  110.985906][ T7665] tc_dump_action: action bad kind
[  111.086182][ T7663] loop0: detected capacity change from 0 to 32768
[  111.091821][ T7663] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.633 (7663)
[  111.098547][ T7663] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  111.103537][ T7663] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  111.170043][ T7663] BTRFS info (device loop0): rebuilding free space tree
[  111.182848][ T7663] BTRFS info (device loop0): enabling ssd optimizations
[  111.189343][ T7663] BTRFS info (device loop0): using spread ssd allocation scheme
[  111.193196][ T7663] BTRFS info (device loop0): enabling free space tree
[  111.206327][ T7663] BTRFS info (device loop0): force clearing of disk cache
[  111.224156][ T7695] loop3: detected capacity change from 0 to 4096
[  111.242888][ T5935] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  111.243677][ T7695] ntfs3(loop3): ino=9, attr_set_size
[  111.309349][ T5308] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  111.314993][ T7698] loop3: detected capacity change from 0 to 2048
[  111.322401][ T7698] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  111.322723][ T5959] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  111.479671][ T5308] usb 3-1: Using ep0 maxpacket: 16
[  111.485206][ T5308] usb 3-1: config 15 has an invalid interface number: 107 but max is 0
[  111.495127][ T5308] usb 3-1: config 15 has no interface number 0
[  111.501208][ T5308] usb 3-1: config 15 interface 107 altsetting 8 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  111.513727][ T5308] usb 3-1: config 15 interface 107 altsetting 8 endpoint 0xB has invalid maxpacket 512, setting to 64
[  111.532812][ T5308] usb 3-1: config 15 interface 107 has no altsetting 0
[  111.546509][ T5308] usb 3-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice= d.c3
[  111.558382][ T5308] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.561471][ T5308] usb 3-1: Product: syz
[  111.563361][ T5308] usb 3-1: Manufacturer: syz
[  111.566044][ T5308] usb 3-1: SerialNumber: syz
[  111.795584][ T5308] usb 3-1: USB disconnect, device number 13
[  111.816165][ T7710] loop0: detected capacity change from 0 to 256
[  112.455529][ T7698] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 176128 lbcount: 180224 extent 129+144384
[  112.640707][ T7732] loop2: detected capacity change from 0 to 512
[  112.709034][ T7732] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  112.735207][ T7732] ext4 filesystem being mounted at /179/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  112.803646][ T5973] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.256193][ T7747] loop2: detected capacity change from 0 to 256
[  113.261805][ T7747] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  113.266302][ T7747] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  113.279828][ T7747] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x640de592, utbl_chksum : 0xe619d30d)
[  113.293394][   T33] audit: type=1800 audit(1755976071.551:20): pid=7747 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.662" name="file1" dev="loop2" ino=1048662 res=0 errno=0
[  113.345778][   T33] audit: type=1326 audit(1755976071.601:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7748 comm="syz.2.663" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff38078ebe9 code=0x0
[  113.769726][ T7761] loop2: detected capacity change from 0 to 64
[  113.773245][ T7761] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  113.821580][ T7766] netlink: 168 bytes leftover after parsing attributes in process `syz.2.671'.
[  114.037436][ T7771] Invalid source name
[  114.055570][ T7771] UBIFS error (pid: 7771): cannot open "/dev/sg0", error -22
[  114.298789][ T7778] process 'syz.0.673' launched '/dev/fd/7' with NULL argv: empty string added
[  115.651499][ T7800] loop2: detected capacity change from 0 to 8
[  115.668536][ T7800] SQUASHFS error: lzo decompression failed, data probably corrupt
[  115.675832][ T7800] SQUASHFS error: Failed to read block 0x91: -5
[  115.682958][ T7800] SQUASHFS error: Unable to read metadata cache entry [8f]
[  115.686383][ T7800] SQUASHFS error: Unable to read inode 0x11f
[  115.972543][ T7806] loop3: detected capacity change from 0 to 32768
[  115.993803][ T7806] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  116.095225][ T7810] loop2: detected capacity change from 0 to 40427
[  116.102958][ T7810] F2FS-fs (loop2): invalid crc value
[  116.135304][ T7810] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  116.140453][ T7810] F2FS-fs (loop2): Start checkpoint disabled!
[  116.147116][ T7810] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  116.157706][ T6889] ocfs2: Unmounting device (7,3) on (node local)
[  116.189968][ T7810] loop2: detected capacity change from 40427 to 0
[  116.198317][ T7810] syz.2.689: attempt to access beyond end of device
[  116.198317][ T7810] loop2: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  116.204103][ T7810] syz.2.689: attempt to access beyond end of device
[  116.204103][ T7810] loop2: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  116.210745][ T7810] syz.2.689: attempt to access beyond end of device
[  116.210745][ T7810] loop2: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  116.216081][ T7810] syz.2.689: attempt to access beyond end of device
[  116.216081][ T7810] loop2: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  116.222396][ T7810] syz.2.689: attempt to access beyond end of device
[  116.222396][ T7810] loop2: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  116.228062][ T7810] syz.2.689: attempt to access beyond end of device
[  116.228062][ T7810] loop2: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  116.233760][ T7810] syz.2.689: attempt to access beyond end of device
[  116.233760][ T7810] loop2: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  116.238255][ T7810] syz.2.689: attempt to access beyond end of device
[  116.238255][ T7810] loop2: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  116.242774][ T7810] syz.2.689: attempt to access beyond end of device
[  116.242774][ T7810] loop2: rw=12288, sector=28736, nr_sectors = 8 limit=0
[  116.247519][ T7810] CPU: 1 UID: 0 PID: 7810 Comm: syz.2.689 Not tainted syzkaller #0 PREEMPT(full) 
[  116.247531][ T7810] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  116.247536][ T7810] Call Trace:
[  116.247539][ T7810]  <TASK>
[  116.247542][ T7810]  dump_stack_lvl+0x189/0x250
[  116.247556][ T7810]  ? __pfx_dump_stack_lvl+0x10/0x10
[  116.247565][ T7810]  ? __pfx_queue_work_on+0x10/0x10
[  116.247573][ T7810]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  116.247584][ T7810]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  116.247594][ T7810]  ? __pfx_down_write+0x10/0x10
[  116.247601][ T7810]  f2fs_handle_critical_error+0x37c/0x540
[  116.247614][ T7810]  f2fs_get_meta_folio_retry+0x84/0xa0
[  116.247625][ T7810]  do_garbage_collect+0x72e/0x6410
[  116.247636][ T7810]  ? rcu_is_watching+0x15/0xb0
[  116.247643][ T7810]  ? lock_release+0x4b/0x3e0
[  116.247655][ T7810]  ? __mutex_unlock_slowpath+0x1a1/0x740
[  116.247666][ T7810]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  116.247678][ T7810]  ? __pfx_do_garbage_collect+0x10/0x10
[  116.247686][ T7810]  ? f2fs_get_victim+0x5a9a/0x6260
[  116.247697][ T7810]  ? kasan_save_track+0x3e/0x80
[  116.247711][ T7810]  ? rcu_is_watching+0x15/0xb0
[  116.247719][ T7810]  ? up_write+0x1c4/0x420
[  116.247727][ T7810]  f2fs_gc+0xc87/0x2590
[  116.247734][ T7810]  ? rcu_is_watching+0x15/0xb0
[  116.247745][ T7810]  ? __pfx_f2fs_gc+0x10/0x10
[  116.247752][ T7810]  ? rcu_is_watching+0x15/0xb0
[  116.247761][ T7810]  ? sb_start_write+0x114/0x1c0
[  116.247769][ T7810]  ? mnt_want_write_file+0x164/0x200
[  116.247777][ T7810]  __f2fs_ioc_gc_range+0x754/0xb10
[  116.247788][ T7810]  ? __pfx___f2fs_ioc_gc_range+0x10/0x10
[  116.247796][ T7810]  ? __might_fault+0xcc/0x130
[  116.247807][ T7810]  __f2fs_ioctl+0x2e00/0xb610
[  116.247817][ T7810]  ? file_ioctl+0x22d/0x780
[  116.247826][ T7810]  ? __pfx_file_ioctl+0x10/0x10
[  116.247835][ T7810]  ? rcu_is_watching+0x15/0xb0
[  116.247842][ T7810]  ? __pfx___f2fs_ioctl+0x10/0x10
[  116.247850][ T7810]  ? lock_release+0x4b/0x3e0
[  116.247859][ T7810]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  116.247868][ T7810]  ? kfree+0x18e/0x440
[  116.247877][ T7810]  ? tomoyo_path_number_perm+0x1bc/0x5a0
[  116.247886][ T7810]  ? do_vfs_ioctl+0xb33/0x1430
[  116.247895][ T7810]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  116.247905][ T7810]  ? do_futex+0x333/0x420
[  116.247916][ T7810]  ? has_not_enough_free_secs+0xf8b/0x18c0
[  116.247935][ T7810]  ? f2fs_ioctl+0x184/0x250
[  116.247943][ T7810]  ? __pfx_f2fs_ioctl+0x10/0x10
[  116.247950][ T7810]  __se_sys_ioctl+0xfc/0x170
[  116.247959][ T7810]  do_syscall_64+0xfa/0x3b0
[  116.247971][ T7810]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.247978][ T7810]  ? exc_page_fault+0x9f/0xf0
[  116.247988][ T7810]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  116.247996][ T7810] RIP: 0033:0x7ff38078ebe9
[  116.248004][ T7810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  116.248010][ T7810] RSP: 002b:00007ff381605038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  116.248019][ T7810] RAX: ffffffffffffffda RBX: 00007ff3809b5fa0 RCX: 00007ff38078ebe9
[  116.248025][ T7810] RDX: 0000200000000000 RSI: 000000004018f50b RDI: 0000000000000004
[  116.248058][ T7810] RBP: 00007ff380811e19 R08: 0000000000000000 R09: 0000000000000000
[  116.248064][ T7810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  116.248069][ T7810] R13: 00007ff3809b6038 R14: 00007ff3809b5fa0 R15: 00007ffde6af2b28
[  116.248078][ T7810]  </TASK>
[  116.248082][ T7810] F2FS-fs (loop2): Stopped filesystem due to reason: 2
[  116.367590][   T24] kworker/1:0: attempt to access beyond end of device
[  116.367590][   T24] loop2: rw=395265, sector=8, nr_sectors = 8 limit=0
[  116.373725][   T24] F2FS-fs (loop2): f2fs_commit_super fails to record stop_reason, err:-5
[  116.383117][ T7816] loop3: detected capacity change from 0 to 32768
[  116.730740][ T5240] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  116.734187][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  116.737273][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  116.741327][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  116.744463][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  116.789305][  T790] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  116.825459][ T7825] chnl_net:caif_netlink_parms(): no params data found
[  116.880786][ T7825] bridge0: port 1(bridge_slave_0) entered blocking state
[  116.884008][ T7825] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.886926][ T7825] bridge_slave_0: entered allmulticast mode
[  116.889525][ T7825] bridge_slave_0: entered promiscuous mode
[  116.892539][ T7825] bridge0: port 2(bridge_slave_1) entered blocking state
[  116.895255][ T7825] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.897698][ T7825] bridge_slave_1: entered allmulticast mode
[  116.900577][ T7825] bridge_slave_1: entered promiscuous mode
[  116.921202][ T7825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  116.931666][ T7825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  116.939451][  T790] usb 4-1: Using ep0 maxpacket: 16
[  116.942214][ T5935] bridge_slave_1: left allmulticast mode
[  116.944198][ T5935] bridge_slave_1: left promiscuous mode
[  116.946133][ T5935] bridge0: port 2(bridge_slave_1) entered disabled state
[  116.948653][  T790] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  116.952721][  T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  116.956404][  T790] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  116.956857][ T5935] bridge_slave_0: left allmulticast mode
[  116.960370][  T790] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  116.961737][ T5935] bridge_slave_0: left promiscuous mode
[  116.965153][  T790] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  116.966995][ T5935] bridge0: port 1(bridge_slave_0) entered disabled state
[  116.973073][  T790] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  116.977572][  T790] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  116.981675][  T790] usb 4-1: Manufacturer: syz
[  116.984804][  T790] usb 4-1: config 0 descriptor??
[  117.113513][ T5935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  117.117839][ T5935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  117.122698][ T5935] bond0 (unregistering): Released all slaves
[  117.135583][ T7825] team0: Port device team_slave_0 added
[  117.139758][ T7825] team0: Port device team_slave_1 added
[  117.155849][ T7825] batman_adv: batadv0: Adding interface: batadv_slave_0
[  117.158737][ T7825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.170998][ T7825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  117.176216][ T7825] batman_adv: batadv0: Adding interface: batadv_slave_1
[  117.181207][ T7825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  117.192377][ T7825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  117.221509][ T7825] hsr_slave_0: entered promiscuous mode
[  117.224299][ T7825] hsr_slave_1: entered promiscuous mode
[  117.226885][ T7825] debugfs: 'hsr0' already exists in 'hsr'
[  117.229776][ T7825] Cannot create hsr debugfs directory
[  117.230002][ T5935] IPVS: stopping backup sync thread 7414 ...
[  117.239332][  T790] rc_core: IR keymap rc-hauppauge not found
[  117.241907][  T790] Registered IR keymap rc-empty
[  117.244101][  T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  117.259694][  T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  117.289713][  T790] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  117.296008][  T790] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input9
[  117.311970][  T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  117.349802][ T7825] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  117.350402][  T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  117.356103][ T7825] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  117.364159][ T7825] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  117.370451][ T7825] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  117.381670][  T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  117.390910][ T5935] hsr_slave_0: left promiscuous mode
[  117.393425][ T5935] hsr_slave_1: left promiscuous mode
[  117.396535][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_0
[  117.401265][  T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  117.404430][ T5935] batman_adv: batadv0: Removing interface: batadv_slave_1
[  117.430086][  T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  117.453906][  T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  117.453942][ T5935] team0 (unregistering): Port device team_slave_1 removed
[  117.467154][ T5935] team0 (unregistering): Port device team_slave_0 removed
[  117.479628][  T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  117.499610][  T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  117.522696][ T7825] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.525624][ T7825] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.528695][ T7825] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.529235][  T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  117.531736][ T7825] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.560941][  T790] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  117.567515][ T6291] bridge0: port 1(bridge_slave_0) entered disabled state
[  117.572106][ T6291] bridge0: port 2(bridge_slave_1) entered disabled state
[  117.581664][  T790] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  117.585235][  T790] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  117.591938][ T7825] 8021q: adding VLAN 0 to HW filter on device bond0
[  117.605649][ T7825] 8021q: adding VLAN 0 to HW filter on device team0
[  117.612222][ T6197] bridge0: port 1(bridge_slave_0) entered blocking state
[  117.615404][ T6197] bridge0: port 1(bridge_slave_0) entered forwarding state
[  117.634738][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  117.637779][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  117.692585][ T7825] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  117.701145][   T24] usb 4-1: USB disconnect, device number 5
[  117.815547][ T7825] 8021q: adding VLAN 0 to HW filter on device batadv0
[  117.947787][ T7825] veth0_vlan: entered promiscuous mode
[  117.958655][ T7825] veth1_vlan: entered promiscuous mode
[  117.975435][ T7825] veth0_macvtap: entered promiscuous mode
[  117.982433][ T7825] veth1_macvtap: entered promiscuous mode
[  117.992124][ T7825] batman_adv: batadv0: Interface activated: batadv_slave_0
[  117.998858][ T7825] batman_adv: batadv0: Interface activated: batadv_slave_1
[  118.006991][ T5905] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  118.013562][ T5905] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  118.018653][ T5905] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  118.023465][ T5905] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  118.055376][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.059719][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.074697][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  118.077887][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  118.187446][   T33] audit: type=1326 audit(1755976076.441:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.697" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f3f8ebe9 code=0x7ffc0000
[  118.255380][ T7886] loop3: detected capacity change from 0 to 1024
[  118.268746][ T7886] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  118.289382][ T7886] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  118.298918][ T7886] EXT4-fs error (device loop3): ext4_get_journal_inode:5800: inode #32: comm syz.3.698: iget: special inode unallocated
[  118.309373][ T7886] EXT4-fs (loop3): Remounting filesystem read-only
[  118.312100][ T7886] EXT4-fs (loop3): no journal found
[  118.314197][ T7886] EXT4-fs (loop3): can't get journal size
[  118.389984][ T7886] EXT4-fs (loop3): filesystem is read-only
[  118.392340][ T7886] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  118.397263][ T7883] loop4: detected capacity change from 0 to 32768
[  118.412286][ T7883] read_mapping_page failed!
[  118.413823][ T7883] ERROR: (device loop4): txCommit: 
[  118.413823][ T7883] 
[  118.435718][ T6889] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.497471][   T33] audit: type=1326 audit(1755976076.441:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.697" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f58f3f8ebe9 code=0x7ffc0000
[  118.509187][   T33] audit: type=1326 audit(1755976076.441:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.697" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f3f8ebe9 code=0x7ffc0000
[  118.516328][   T33] audit: type=1326 audit(1755976076.441:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.697" exe="/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f58f3f8ebe9 code=0x7ffc0000
[  118.556128][   T33] audit: type=1326 audit(1755976076.451:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.697" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f3f8ebe9 code=0x7ffc0000
[  118.566042][   T33] audit: type=1326 audit(1755976076.451:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.697" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f3f8ebe9 code=0x7ffc0000
[  118.575558][   T33] audit: type=1326 audit(1755976076.451:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.697" exe="/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f58f3f8ebe9 code=0x7ffc0000
[  118.585934][   T33] audit: type=1326 audit(1755976076.451:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.697" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f3f8ebe9 code=0x7ffc0000
[  118.602632][   T33] audit: type=1326 audit(1755976076.451:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.697" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f3f8ebe9 code=0x7ffc0000
[  118.612959][   T33] audit: type=1326 audit(1755976076.451:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.697" exe="/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f58f3f8ebe9 code=0x7ffc0000
[  118.622332][   T33] audit: type=1326 audit(1755976076.451:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7881 comm="syz.4.697" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f58f3f8ebe9 code=0x7ffc0000
[  118.749307][ T5240] Bluetooth: hci2: command tx timeout
[  119.693803][ T7896] loop4: detected capacity change from 0 to 512
[  119.706657][ T7896] EXT4-fs: Ignoring removed orlov option
[  119.720756][ T7896] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  119.769650][ T7896] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  119.780356][ T7896] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.700: corrupted in-inode xattr: e_value size too large
[  119.802536][ T7896] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.700: couldn't read orphan inode 15 (err -117)
[  119.807312][ T7901] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(8)
[  119.809929][ T7901] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  119.816949][ T7901] vhci_hcd vhci_hcd.0: Device attached
[  119.817421][ T7896] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  119.847194][ T7825] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.860632][ T7901] vhci_hcd vhci_hcd.0: pdev(3) rhport(1) sockfd(10)
[  119.863334][ T7901] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  119.867555][ T7901] vhci_hcd vhci_hcd.0: Device attached
[  119.872611][ T7901] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  119.877687][ T7901] vhci_hcd vhci_hcd.0: pdev(3) rhport(3) sockfd(15)
[  119.880460][ T7901] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  119.884486][ T7901] vhci_hcd vhci_hcd.0: Device attached
[  119.888428][ T7901] vhci_hcd vhci_hcd.0: pdev(3) rhport(4) sockfd(17)
[  119.891316][ T7901] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  119.897725][ T7901] vhci_hcd vhci_hcd.0: Device attached
[  119.936207][ T7901] vhci_hcd vhci_hcd.0: pdev(3) rhport(5) sockfd(19)
[  119.938914][ T7901] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  119.944515][ T7901] vhci_hcd vhci_hcd.0: Device attached
[  119.951774][ T7901] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  119.967556][ T7901] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  119.972825][ T7901] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  119.989212][   T24] vhci_hcd: vhci_device speed not set
[  120.049514][   T24] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[  120.164830][ T7911] vhci_hcd: connection closed
[  120.166108][   T13] vhci_hcd: stop threads
[  120.188720][   T13] vhci_hcd: release socket
[  120.197205][   T13] vhci_hcd: disconnect device
[  120.219270][ T7903] vhci_hcd: connection reset by peer
[  120.221264][ T7914] vhci_hcd: connection closed
[  120.221828][ T7907] vhci_hcd: connection closed
[  120.223750][ T7909] vhci_hcd: connection closed
[  120.240288][   T13] vhci_hcd: stop threads
[  120.249049][   T13] vhci_hcd: release socket
[  120.251322][   T13] vhci_hcd: disconnect device
[  120.253414][   T13] vhci_hcd: stop threads
[  120.255161][   T13] vhci_hcd: release socket
[  120.256979][   T13] vhci_hcd: disconnect device
[  120.260411][   T13] vhci_hcd: stop threads
[  120.262160][   T13] vhci_hcd: release socket
[  120.264090][   T13] vhci_hcd: disconnect device
[  120.266158][   T13] vhci_hcd: stop threads
[  120.267903][   T13] vhci_hcd: release socket
[  120.270623][   T13] vhci_hcd: disconnect device
[  120.829644][ T5240] Bluetooth: hci2: command tx timeout
[  121.190565][ T7948] loop0: detected capacity change from 0 to 32768
[  121.198046][ T7948] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.714 (7948)
[  121.212240][ T7948] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  121.227881][ T7948] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  121.262557][ T7957] overlayfs: unescaped trailing colons in lowerdir mount option.
[  121.307633][ T7948] BTRFS info (device loop0): rebuilding free space tree
[  121.326846][ T7948] BTRFS info (device loop0): enabling ssd optimizations
[  121.339245][ T7948] BTRFS info (device loop0): using spread ssd allocation scheme
[  121.342503][ T7948] BTRFS info (device loop0): turning off barriers
[  121.352611][ T7948] BTRFS info (device loop0): disabling tree log
[  121.362568][ T7948] BTRFS info (device loop0): turning on sync discard
[  121.372045][ T7948] BTRFS info (device loop0): enabling free space tree
[  121.378306][ T7948] BTRFS info (device loop0): force clearing of disk cache
[  121.391683][ T7948] BTRFS info (device loop0): doing ref verification
[  121.400490][ T7948] BTRFS info (device loop0): use zlib compression, level 3
[  121.639205][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  121.760642][ T7978] loop3: detected capacity change from 0 to 1024
[  121.789469][   T10] usb 5-1: Using ep0 maxpacket: 32
[  121.796770][   T40] hfsplus: b-tree write err: -5, ino 4
[  121.798398][   T10] usb 5-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  121.803430][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.837435][   T10] usb 5-1: Product: syz
[  121.846687][   T10] usb 5-1: Manufacturer: syz
[  121.848670][   T10] usb 5-1: SerialNumber: syz
[  121.854942][ T7980] loop3: detected capacity change from 0 to 1024
[  121.868259][   T10] usb 5-1: config 0 descriptor??
[  121.873498][   T10] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  121.883069][ T7980] bio_check_eod: 2 callbacks suppressed
[  121.883085][ T7980] syz.3.721: attempt to access beyond end of device
[  121.883085][ T7980] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024
[  121.901257][ T7980] Buffer I/O error on dev loop3, logical block 458752, async page read
[  121.909672][ T7980] syz.3.721: attempt to access beyond end of device
[  121.909672][ T7980] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024
[  121.920225][ T7980] Buffer I/O error on dev loop3, logical block 458752, async page read
[  122.022151][ T5959] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  122.096267][ T7988] loop0: detected capacity change from 0 to 256
[  122.121316][ T7988] FAT-fs (loop0): Directory bread(block 64) failed
[  122.123646][ T7988] FAT-fs (loop0): Directory bread(block 65) failed
[  122.126023][ T7988] FAT-fs (loop0): Directory bread(block 66) failed
[  122.128251][ T7988] FAT-fs (loop0): Directory bread(block 67) failed
[  122.132102][ T7988] FAT-fs (loop0): Directory bread(block 68) failed
[  122.134455][ T7988] FAT-fs (loop0): Directory bread(block 69) failed
[  122.136698][ T7988] FAT-fs (loop0): Directory bread(block 70) failed
[  122.139024][ T7988] FAT-fs (loop0): Directory bread(block 71) failed
[  122.141900][ T7988] FAT-fs (loop0): Directory bread(block 72) failed
[  122.144194][ T7988] FAT-fs (loop0): Directory bread(block 73) failed
[  122.181486][ T7990] netlink: 'syz.0.726': attribute type 10 has an invalid length.
[  122.186040][ T7990] 8021q: adding VLAN 0 to HW filter on device team0
[  122.191008][ T7990] bond0: (slave team0): Enslaving as an active interface with an up link
[  122.357631][ T8000] loop0: detected capacity change from 0 to 256
[  122.541922][ T8007] loop0: detected capacity change from 0 to 32768
[  122.545320][ T8007] jfs_mount: dbMount failed w/rc = -22
[  122.547221][ T8007] Mount JFS Failure: -22
[  122.548677][ T8007] jfs_mount failed w/return code = -22
[  122.761565][ T8002] loop3: detected capacity change from 0 to 65536
[  122.790455][ T8002] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  122.811630][ T8002] XFS (loop3): Ending clean mount
[  122.909610][ T5240] Bluetooth: hci2: command tx timeout
[  122.932032][ T8036] netlink: 'syz.0.743': attribute type 1 has an invalid length.
[  122.938760][ T8037] bfs: Unknown parameter 'ip6_vti0'
[  122.942606][ T8036] netlink: 'syz.0.743': attribute type 1 has an invalid length.
[  122.952286][ T8036] netlink: 216 bytes leftover after parsing attributes in process `syz.0.743'.
[  123.193433][   T10] gspca_topro: reg_w err -71
[  123.284650][   T10] gspca_topro: Sensor soi763a
[  123.287844][   T10] usb 5-1: USB disconnect, device number 2
[  123.349860][ T6889] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  123.666673][ T8055] syz.0.751(8055): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  123.734786][ T8061] loop0: detected capacity change from 0 to 4096
[  123.738258][ T8061] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  123.752922][ T8061] ntfs3(loop0): Failed to load $Extend (-22).
[  123.757345][ T8061] ntfs3(loop0): Failed to initialize $Extend.
[  123.813258][ T8067] loop4: detected capacity change from 0 to 256
[  123.841114][ T8067] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  123.853503][ T8069] loop3: detected capacity change from 0 to 2048
[  123.855288][ T8067] FAT-fs (loop4): Filesystem has been set read-only
[  123.865408][ T8069] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  123.882437][ T8069] overlayfs: upper fs needs to support d_type.
[  123.885537][ T8069] overlayfs: cleanup of 'work/#9' failed (-2)
[  123.889854][ T8069] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  123.899484][ T8069] overlayfs: failed to set xattr on upper
[  123.907587][ T8069] overlayfs: ...falling back to redirect_dir=nofollow.
[  123.912940][ T8069] overlayfs: ...falling back to index=off.
[  123.915416][ T8069] overlayfs: ...falling back to uuid=null.
[  123.949261][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  123.964271][ T6889] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  123.967866][ T6889] UDF-fs: error (device loop3): udf_read_inode: (ino 1317) failed !bh
[  124.051486][ T6889] syz_tun (unregistering): left allmulticast mode
[  124.082387][ T8086] loop4: detected capacity change from 0 to 764
[  124.145974][   T40] Bluetooth: hci1: Frame reassembly failed (-84)
[  124.273590][   T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.297822][ T8095] input: syz0 as /devices/virtual/input/input10
[  124.325259][   T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.364001][   T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.415222][   T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.428159][ T8098] netlink: 'syz.0.772': attribute type 11 has an invalid length.
[  124.518179][ T5964] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  124.520868][ T5964] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  124.523253][ T5964] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  124.526447][ T5964] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  124.529409][ T5964] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  124.540356][   T13] bridge_slave_1: left allmulticast mode
[  124.542462][   T13] bridge_slave_1: left promiscuous mode
[  124.547992][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.552392][   T13] bridge_slave_0: left allmulticast mode
[  124.554582][   T13] bridge_slave_0: left promiscuous mode
[  124.556866][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.651448][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  124.655461][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  124.659545][   T13] bond0 (unregistering): Released all slaves
[  124.687797][   T13] tipc: Left network mode
[  124.719789][  T790] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  124.727380][ T8101] chnl_net:caif_netlink_parms(): no params data found
[  124.785073][ T8101] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.788290][ T8101] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.792290][ T8101] bridge_slave_0: entered allmulticast mode
[  124.795586][ T8101] bridge_slave_0: entered promiscuous mode
[  124.802646][ T8101] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.805839][ T8101] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.808764][ T8101] bridge_slave_1: entered allmulticast mode
[  124.812095][ T8101] bridge_slave_1: entered promiscuous mode
[  124.834847][ T8101] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.841576][ T8101] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.858675][ T8101] team0: Port device team_slave_0 added
[  124.862705][ T8101] team0: Port device team_slave_1 added
[  124.869470][  T790] usb 1-1: Using ep0 maxpacket: 32
[  124.875133][  T790] usb 1-1: config 0 has an invalid interface number: 247 but max is 0
[  124.878401][  T790] usb 1-1: config 0 has no interface number 0
[  124.886727][  T790] usb 1-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 1.9b
[  124.889932][  T790] usb 1-1: New USB device strings: Mfr=128, Product=0, SerialNumber=0
[  124.893602][  T790] usb 1-1: Manufacturer: syz
[  124.896313][  T790] usb 1-1: config 0 descriptor??
[  124.901230][   T13] hsr_slave_0: left promiscuous mode
[  124.903881][   T13] hsr_slave_1: left promiscuous mode
[  124.908189][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.914200][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.917851][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.921800][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.927483][   T13] veth1_macvtap: left promiscuous mode
[  124.931492][   T13] veth0_macvtap: left promiscuous mode
[  124.933840][   T13] veth1_vlan: left promiscuous mode
[  124.936111][   T13] veth0_vlan: left promiscuous mode
[  124.989543][ T5964] Bluetooth: hci2: command tx timeout
[  125.048093][   T13] team0 (unregistering): Port device team_slave_1 removed
[  125.058514][   T13] team0 (unregistering): Port device team_slave_0 removed
[  125.099472][ T8101] batman_adv: batadv0: Adding interface: batadv_slave_0
[  125.102976][ T8101] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.105797][  T790] usb 1-1: USB disconnect, device number 12
[  125.113689][ T8101] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  125.126158][ T8101] batman_adv: batadv0: Adding interface: batadv_slave_1
[  125.129409][ T8101] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  125.141152][   T24] vhci_hcd: vhci_device speed not set
[  125.143503][ T8101] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  125.176757][ T8101] hsr_slave_0: entered promiscuous mode
[  125.182219][ T8101] hsr_slave_1: entered promiscuous mode
[  125.257710][ T8101] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  125.263784][ T8101] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  125.270052][ T8101] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  125.280533][ T8101] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  125.322489][ T8101] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.333544][ T8101] 8021q: adding VLAN 0 to HW filter on device team0
[  125.341255][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.344092][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.360379][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.363380][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.375465][ T8101] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[  125.379869][ T8101] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[  125.449974][ T8101] 8021q: adding VLAN 0 to HW filter on device batadv0
[  125.557003][ T8101] veth0_vlan: entered promiscuous mode
[  125.563614][ T8101] veth1_vlan: entered promiscuous mode
[  125.582264][ T8101] veth0_macvtap: entered promiscuous mode
[  125.586661][ T8101] veth1_macvtap: entered promiscuous mode
[  125.596396][ T8101] batman_adv: batadv0: Interface activated: batadv_slave_0
[  125.603622][ T8101] batman_adv: batadv0: Interface activated: batadv_slave_1
[  125.610671][ T5935] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  125.614224][ T5935] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  125.617714][ T5935] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  125.621744][ T5935] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  125.662649][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.665665][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  125.687309][ T6197] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  125.694885][ T6197] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  126.189416][ T5240] Bluetooth: hci1: Opcode 0x1003 failed: -110
[  126.589593][ T5240] Bluetooth: hci3: command tx timeout
[  126.758744][   T33] kauditd_printk_skb: 46 callbacks suppressed
[  126.758753][   T33] audit: type=1326 audit(1755976085.011:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.780" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc510d8ebe9 code=0x7ffc0000
[  126.779705][   T33] audit: type=1326 audit(1755976085.031:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.780" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc510d8ebe9 code=0x7ffc0000
[  126.797106][   T33] audit: type=1326 audit(1755976085.051:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.780" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc510d8ebe9 code=0x7ffc0000
[  126.816446][   T33] audit: type=1326 audit(1755976085.051:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.780" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc510d8ebe9 code=0x7ffc0000
[  126.849778][   T33] audit: type=1326 audit(1755976085.051:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.780" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc510d8ebe9 code=0x7ffc0000
[  126.858336][   T33] audit: type=1326 audit(1755976085.051:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.780" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fc510d8ebe9 code=0x7ffc0000
[  126.877255][   T33] audit: type=1326 audit(1755976085.051:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.780" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc510d8ebe9 code=0x7ffc0000
[  126.901965][   T33] audit: type=1326 audit(1755976085.051:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.780" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc510d8ebe9 code=0x7ffc0000
[  126.912822][   T33] audit: type=1326 audit(1755976085.061:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.780" exe="/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7fc510d8ebe9 code=0x7ffc0000
[  126.923512][   T33] audit: type=1326 audit(1755976085.061:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8173 comm="syz.0.780" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc510d8ebe9 code=0x7ffc0000
[  127.111939][ T8204] loop4: detected capacity change from 0 to 4096
[  127.155163][ T8204] NILFS (loop4): invalid segment: Checksum error in segment payload
[  127.161215][ T8204] NILFS (loop4): trying rollback from an earlier position
[  127.186536][ T8204] NILFS (loop4): recovery complete
[  127.190289][ T8206] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  127.532535][ T8200] loop5: detected capacity change from 0 to 32768
[  127.553564][ T8200] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  127.623711][ T8200] XFS (loop5): Ending clean mount
[  127.633394][ T8200] XFS (loop5): Quotacheck needed: Please wait.
[  127.663460][ T8200] XFS (loop5): Quotacheck: Done.
[  127.700521][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  127.731776][ T8101] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  127.879190][    T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  127.883002][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.892869][    T9] usb 5-1: Product: syz
[  127.894245][    T9] usb 5-1: Manufacturer: syz
[  127.895760][    T9] usb 5-1: SerialNumber: syz
[  127.904588][    T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  127.927324][ T6042] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  128.332552][ T8229] loop5: detected capacity change from 0 to 1024
[  128.340418][ T8229] EXT4-fs: inline encryption not supported
[  128.343317][ T8229] EXT4-fs: Ignoring removed bh option
[  128.367311][    T9] usb 5-1: USB disconnect, device number 3
[  128.376877][ T8229] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.394840][ T8229] EXT4-fs error (device loop5): mb_free_blocks:2017: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt.
[  128.401220][ T8229] EXT4-fs (loop5): Remounting filesystem read-only
[  128.417977][ T8101] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.450321][ T8244] syzkaller1: entered promiscuous mode
[  128.454418][ T8244] syzkaller1: entered allmulticast mode
[  128.524455][ T8252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.805'.
[  128.652021][ T8261] netlink: 'syz.0.807': attribute type 83 has an invalid length.
[  128.669463][ T5240] Bluetooth: hci3: command tx timeout
[  128.989420][ T6042] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  128.999365][ T6042] ath9k_htc: Failed to initialize the device
[  129.002501][    T9] usb 5-1: ath9k_htc: USB layer deinitialized
[  129.625551][ T8292] loop5: detected capacity change from 0 to 4096
[  129.651387][ T8294] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  130.009006][ T8297] loop0: detected capacity change from 0 to 40427
[  130.020136][ T8297] F2FS-fs (loop0): Image doesn't support compression
[  130.022828][ T8297] F2FS-fs (loop0): build fault injection rate: 690
[  130.039767][ T8297] F2FS-fs (loop0): invalid crc value
[  130.068753][ T8297] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  130.073097][ T8297] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  130.099473][ T5959] syz-executor: attempt to access beyond end of device
[  130.099473][ T5959] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  130.107527][ T5959] CPU: 0 UID: 0 PID: 5959 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  130.107547][ T5959] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  130.107555][ T5959] Call Trace:
[  130.107560][ T5959]  <TASK>
[  130.107566][ T5959]  dump_stack_lvl+0x189/0x250
[  130.107586][ T5959]  ? __pfx_dump_stack_lvl+0x10/0x10
[  130.107600][ T5959]  ? __pfx_queue_work_on+0x10/0x10
[  130.107613][ T5959]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  130.107630][ T5959]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  130.107648][ T5959]  f2fs_handle_critical_error+0x37c/0x540
[  130.107669][ T5959]  f2fs_write_end_io+0x886/0xb60
[  130.107686][ T5959]  __submit_merged_bio+0x27a/0x6a0
[  130.107704][ T5959]  __submit_merged_write_cond+0x255/0x530
[  130.107722][ T5959]  f2fs_write_data_pages+0x261d/0x3000
[  130.107750][ T5959]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  130.107787][ T5959]  ? kthread_stop+0x194/0x5c0
[  130.107801][ T5959]  ? kill_f2fs_super+0x137/0x6c0
[  130.107813][ T5959]  ? deactivate_locked_super+0xbc/0x130
[  130.107826][ T5959]  ? cleanup_mnt+0x425/0x4c0
[  130.107838][ T5959]  ? task_work_run+0x1d4/0x260
[  130.107852][ T5959]  ? do_syscall_64+0x2bd/0x3b0
[  130.107868][ T5959]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.107883][ T5959]  ? do_raw_spin_lock+0x121/0x290
[  130.107927][ T5959]  ? do_raw_spin_unlock+0x4d/0x240
[  130.107942][ T5959]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  130.107960][ T5959]  do_writepages+0x32e/0x550
[  130.107977][ T5959]  ? rcu_is_watching+0x15/0xb0
[  130.107992][ T5959]  ? do_raw_spin_unlock+0x4d/0x240
[  130.108008][ T5959]  filemap_fdatawrite+0x199/0x240
[  130.108024][ T5959]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  130.108050][ T5959]  ? rcu_is_watching+0x15/0xb0
[  130.108064][ T5959]  ? do_raw_spin_unlock+0x4d/0x240
[  130.108080][ T5959]  f2fs_sync_dirty_inodes+0x31f/0x830
[  130.108102][ T5959]  f2fs_write_checkpoint+0x95a/0x1df0
[  130.108122][ T5959]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  130.108165][ T5959]  ? kill_f2fs_super+0x298/0x6c0
[  130.108179][ T5959]  kill_f2fs_super+0x2c3/0x6c0
[  130.108193][ T5959]  ? __pfx_kill_f2fs_super+0x10/0x10
[  130.108204][ T5959]  ? radix_tree_delete_item+0x2b6/0x400
[  130.108222][ T5959]  ? shrinker_free+0x2ce/0x3e0
[  130.108236][ T5959]  deactivate_locked_super+0xbc/0x130
[  130.108251][ T5959]  cleanup_mnt+0x425/0x4c0
[  130.108266][ T5959]  task_work_run+0x1d4/0x260
[  130.108283][ T5959]  ? __pfx_task_work_run+0x10/0x10
[  130.108298][ T5959]  ? __x64_sys_umount+0x122/0x160
[  130.108313][ T5959]  ? __pfx___x64_sys_umount+0x10/0x10
[  130.108329][ T5959]  ? rcu_is_watching+0x15/0xb0
[  130.108341][ T5959]  exit_to_user_mode_loop+0xec/0x110
[  130.108358][ T5959]  do_syscall_64+0x2bd/0x3b0
[  130.108375][ T5959]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.108386][ T5959]  ? exc_page_fault+0x9f/0xf0
[  130.108402][ T5959]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  130.108414][ T5959] RIP: 0033:0x7fc510d8ff17
[  130.108425][ T5959] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  130.108435][ T5959] RSP: 002b:00007ffdb5ec8e08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  130.108449][ T5959] RAX: 0000000000000000 RBX: 00007fc510e11c05 RCX: 00007fc510d8ff17
[  130.108457][ T5959] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb5ec8ec0
[  130.108466][ T5959] RBP: 00007ffdb5ec8ec0 R08: 0000000000000000 R09: 0000000000000000
[  130.108472][ T5959] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdb5ec9f50
[  130.108481][ T5959] R13: 00007fc510e11c05 R14: 000000000001fba7 R15: 00007ffdb5ec9f90
[  130.108495][ T5959]  </TASK>
[  130.109487][ T5959] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  130.309302][ T5308] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  130.377123][ T8316] netlink: 'syz.0.821': attribute type 1 has an invalid length.
[  130.454269][ T8324] syzkaller1: entered promiscuous mode
[  130.456771][ T8324] syzkaller1: entered allmulticast mode
[  130.479546][ T5308] usb 5-1: Using ep0 maxpacket: 32
[  130.483756][ T5308] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  130.490144][ T5308] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  130.494049][ T5308] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  130.497522][ T5308] usb 5-1: Product: syz
[  130.501442][ T5308] usb 5-1: Manufacturer: syz
[  130.504247][ T5308] usb 5-1: SerialNumber: syz
[  130.507159][ T5308] usb 5-1: config 0 descriptor??
[  130.722266][ T6042] usb 5-1: USB disconnect, device number 4
[  130.809730][ T5240] Bluetooth: hci3: command tx timeout
[  131.237582][ T8338] loop5: detected capacity change from 0 to 32768
[  131.244167][ T8338] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.830 (8338)
[  131.281434][ T8338] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  131.294130][ T8338] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  131.368326][ T8338] BTRFS info (device loop5): enabling ssd optimizations
[  131.419399][ T8338] BTRFS info (device loop5): enabling free space tree
[  131.560758][ T8101] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  131.963014][ T8370] loop5: detected capacity change from 0 to 22
[  132.003033][ T8370] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  132.010120][ T8370] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  132.118142][ T8372] netlink: 'syz.5.836': attribute type 5 has an invalid length.
[  132.515037][ T8376] loop0: detected capacity change from 0 to 512
[  132.574313][ T8376] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.580228][ T8376] ext4 filesystem being mounted at /293/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  132.593934][ T8376] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.838: corrupted xattr block 33: invalid header
[  132.598987][ T8376] EXT4-fs error (device loop0): ext4_xattr_block_get:593: inode #15: comm syz.0.838: corrupted xattr block 33: invalid header
[  132.604331][ T8376] fscrypt (loop0, inode 15): Error -117 getting encryption context
[  132.657717][ T5959] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.660973][ T8384] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  132.747544][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.751173][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.783384][ T8389] loop5: detected capacity change from 0 to 4096
[  132.913105][ T5240] Bluetooth: hci3: command tx timeout
[  133.169188][ T5308] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  133.243401][ T8404] netlink: 8 bytes leftover after parsing attributes in process `syz.5.849'.
[  133.309215][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  133.329917][ T5308] usb 1-1: Using ep0 maxpacket: 16
[  133.337397][ T5308] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[  133.345133][ T5308] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.350070][ T5308] usb 1-1: config 0 has no interface number 0
[  133.352653][ T5308] usb 1-1: New USB device found, idVendor=0bd3, idProduct=0555, bcdDevice= 0.1e
[  133.360221][ T5308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.365440][ T8411] loop5: detected capacity change from 0 to 64
[  133.370244][ T5308] usb 1-1: config 0 descriptor??
[  133.378066][ T5308] uvcvideo 1-1:0.64: probe with driver uvcvideo failed with error -22
[  133.557399][ T8421] Illegal XDP return value 4294967274 on prog  (id 65) dev syz_tun, expect packet loss!
[  133.587779][ T5308] usb 1-1: USB disconnect, device number 13
[  134.020427][ T6042] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  134.169707][ T6042] usb 5-1: Using ep0 maxpacket: 16
[  134.177097][ T6042] usb 5-1: config 0 has an invalid interface number: 104 but max is 1
[  134.183352][ T6042] usb 5-1: config 0 has an invalid interface number: 104 but max is 1
[  134.187015][ T6042] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  134.194146][ T6042] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  134.198105][ T6042] usb 5-1: config 0 has no interface number 0
[  134.200961][ T6042] usb 5-1: config 0 interface 104 has no altsetting 1
[  134.206600][ T6042] usb 5-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[  134.215972][ T6042] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.219536][ T6042] usb 5-1: Product: syz
[  134.221450][ T6042] usb 5-1: Manufacturer: syz
[  134.223561][ T6042] usb 5-1: SerialNumber: syz
[  134.232238][ T8455] loop0: detected capacity change from 0 to 512
[  134.234874][ T8455] EXT4-fs: Ignoring removed orlov option
[  134.235008][ T6042] usb 5-1: config 0 descriptor??
[  134.268367][ T8455] EXT4-fs error (device loop0): ext4_ext_check_inode:523: inode #3: comm syz.0.872: pblk 0 bad header/extent: invalid eh_entries - magic f30a, entries 3, max 1(4), depth 0(0)
[  134.276123][ T8455] EXT4-fs (loop0): Remounting filesystem read-only
[  134.278349][ T8455] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  134.283833][ T8455] EXT4-fs (loop0): mount failed
[  134.609670][ T6042] asix 5-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  134.615592][ T6042] asix 5-1:0.104: probe with driver asix failed with error -71
[  134.621176][ T6042] usb 5-1: USB disconnect, device number 5
[  135.007653][ T5308] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  135.084207][ T8481] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI
[  135.088963][ T8481] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  135.092668][ T8481] CPU: 0 UID: 0 PID: 8481 Comm: syz.5.883 Not tainted syzkaller #0 PREEMPT(full) 
[  135.097239][ T8481] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  135.101351][ T8481] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  135.103404][ T8481] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 39 30 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 18 30 36 f9 4d 8b 24 24 48 83 c3
[  135.110192][ T8481] RSP: 0018:ffffc90001c0fa60 EFLAGS: 00010206
[  135.112199][ T8481] RAX: 0000000000000005 RBX: ffff88811970d480 RCX: 0000000000080000
[  135.114661][ T8481] RDX: ffffc90023980000 RSI: 000000000000038e RDI: 000000000000038f
[  135.117252][ T8481] RBP: 0000000000000000 R08: ffff8880281c492f R09: 1ffff11005038925
[  135.119856][ T8481] R10: dffffc0000000000 R11: ffffffff88ecbef0 R12: 0000000000000028
[  135.122596][ T8481] R13: dffffc0000000000 R14: ffff8880281c4800 R15: dffffc0000000000
[  135.125504][ T8481] FS:  00007fcaa27bc6c0(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  135.128377][ T8481] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  135.131075][ T8481] CR2: 0000001b2f221ff8 CR3: 0000000038e7c000 CR4: 00000000000006f0
[  135.134255][ T8481] Call Trace:
[  135.135394][ T8481]  <TASK>
[  135.136397][ T8481]  pcl818_detach+0x66/0xd0
[  135.137907][ T8481]  comedi_device_detach_locked+0x178/0x750
[  135.140320][ T8481]  ? security_capable+0x7e/0x2e0
[  135.142353][ T8481]  comedi_unlocked_ioctl+0xcde/0x1020
[  135.144553][ T8481]  ? tomoyo_path_number_perm+0x47a/0x5a0
[  135.146788][ T8481]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  135.148937][ T8481]  ? do_futex+0x333/0x420
[  135.150641][ T8481]  ? lock_release+0x4b/0x3e0
[  135.152469][ T8481]  ? __se_sys_futex+0x36f/0x400
[  135.154393][ T8481]  ? __fget_files+0x2a/0x420
[  135.156239][ T8481]  ? __fget_files+0x3a0/0x420
[  135.157961][ T8481]  ? __fget_files+0x2a/0x420
[  135.159210][ T5308] usb 1-1: Using ep0 maxpacket: 8
[  135.159514][ T8481]  ? bpf_lsm_file_ioctl+0x9/0x20
[  135.163252][ T8481]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  135.163975][ T5308] usb 1-1: config 0 interface 0 has no altsetting 0
[  135.165380][ T8481]  __se_sys_ioctl+0xfc/0x170
[  135.165395][ T8481]  do_syscall_64+0xfa/0x3b0
[  135.165407][ T8481]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.165414][ T8481]  ? exc_page_fault+0x9f/0xf0
[  135.165424][ T8481]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.168278][ T5308] usb 1-1: New USB device found, idVendor=20a0, idProduct=4287, bcdDevice= 0.00
[  135.169748][ T8481] RIP: 0033:0x7fcaa198ebe9
[  135.169763][ T8481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.169771][ T8481] RSP: 002b:00007fcaa27bc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  135.169782][ T8481] RAX: ffffffffffffffda RBX: 00007fcaa1bb5fa0 RCX: 00007fcaa198ebe9
[  135.169788][ T8481] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000004
[  135.169793][ T8481] RBP: 00007fcaa1a11e19 R08: 0000000000000000 R09: 0000000000000000
[  135.169799][ T8481] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.169804][ T8481] R13: 00007fcaa1bb6038 R14: 00007fcaa1bb5fa0 R15: 00007ffde7b74b68
[  135.169812][ T8481]  </TASK>
[  135.169815][ T8481] Modules linked in:
[  135.170482][ T8481] ---[ end trace 0000000000000000 ]---
[  135.175059][ T5308] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.175686][ T8481] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  135.175708][ T8481] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 39 30 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 18 30 36 f9 4d 8b 24 24 48 83 c3
[  135.175716][ T8481] RSP: 0018:ffffc90001c0fa60 EFLAGS: 00010206
[  135.175724][ T8481] RAX: 0000000000000005 RBX: ffff88811970d480 RCX: 0000000000080000
[  135.175730][ T8481] RDX: ffffc90023980000 RSI: 000000000000038e RDI: 000000000000038f
[  135.175736][ T8481] RBP: 0000000000000000 R08: ffff8880281c492f R09: 1ffff11005038925
[  135.180668][ T5308] usb 1-1: config 0 descriptor??
[  135.181535][ T8481] R10: dffffc0000000000 R11: ffffffff88ecbef0 R12: 0000000000000028
[  135.238306][ T8481] R13: dffffc0000000000 R14: ffff8880281c4800 R15: dffffc0000000000
[  135.241216][ T8481] FS:  00007fcaa27bc6c0(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  135.244309][ T8481] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  135.246481][ T8481] CR2: 0000001b2f221ff8 CR3: 0000000038e7c000 CR4: 00000000000006f0
[  135.249321][ T8481] Kernel panic - not syncing: Fatal exception
[  135.252511][ T8481] Kernel Offset: disabled
[  135.253899][ T8481] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:08:13  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001522 RDI=0000000000001523 RBP=00000000000003f8 RSP=ffffc90001c0f1f0
R8 =ffff8881067b0237 R9 =1ffff11020cf6046 R10=dffffc0000000000 R11=ffffffff854f1cc0
R12=dffffc0000000000 R13=ffffffff99afa8d7 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1d3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fcaa27bc6c0 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b2f221ff8 CR3=0000000038e7c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fcaa1b87498 00007fcaa1b87470 XMM03=00007fcaa1b874a8 00007fcaa1b874a0
XMM04=00007fcaa26ed100 00007fcaa1b87460 XMM05=00007fcaa1b87478 00007fcaa1b874c0
XMM06=00007fcaa1b874b8 00007fcaa1b874b0 XMM07=00007fcaa1b874a8 00007fcaa1b874a0
XMM08=0000000000000000 00007fcaa1a12ee7 XMM09=0000000000000000 00007fcaa1a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000003587 RBX=ffff888136623900 RCX=0000000000000838 RDX=0000000000000000
RSI=0000000000003587 RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc900001e0e50
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000003 R11=ffffffff81703490
R12=000000000fffcf58 R13=dffffc0000000000 R14=0000000000003587 R15=0000000000000020
RIP=ffffffff81716179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005631153d1000 CR3=000000010ec02000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0104b60000000000 0000000000000000
XMM02=01dc100005bfbff0 0401000006080606 XMM03=8182100000040100 0008080608015996
XMM04=08060a0156e60010 0008808080808080 XMM05=0100100001080001 0000000806060103
XMM06=f60fffffffffffff 04189082d9b80800 XMM07=01080006012aa60f ffffffffffff0404
XMM08=100008848c100003 8004010000060806 XMM09=2030363864303061 3966666666666666
XMM10=6f6e5f6769726f5f 7664617461622062 XMM11=0a33312e79656b5f 5f2e77656e5f6564
XMM12=660a6c61636f6c5f 74726f70736e6172 XMM13=2030386130313061 3966666666666666
XMM14=0a6732685f74726f 70736e6172742062 XMM15=3061613031306139 6666666666666666
