last executing test programs:

4m4.541734572s ago: executing program 0 (id=78):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000004240)=0x40000006, 0x4)
recvmmsg(r0, &(0x7f0000003f80)=[{{&(0x7f0000000680)=@xdp, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000700)=""/224}, 0x80000001}, {{&(0x7f0000000800)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x0, &(0x7f0000000900)=[{&(0x7f0000000880)=""/120}, {&(0x7f0000000dc0)=""/4096}]}, 0x6}, {{&(0x7f0000000940)=@ll, 0x0, &(0x7f00000009c0)=[{&(0x7f0000001dc0)=""/4096}], 0x0, &(0x7f0000000a00)=""/156}, 0x9}, {{&(0x7f0000000ac0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, 0x0, &(0x7f0000000bc0)=[{&(0x7f0000000b40)=""/127}, {&(0x7f0000002dc0)=""/4096}], 0x0, &(0x7f0000000c00)=""/70}, 0xf}, {{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000c80)=""/136}, {&(0x7f0000003dc0)=""/110}, {&(0x7f0000003e40)=""/79}, {&(0x7f0000004280)=""/4096}], 0x0, &(0x7f0000003ec0)=""/180}, 0x7}], 0x400000000000014, 0x2, 0x0)
sendto$inet6(r0, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c)

4m3.54467062s ago: executing program 0 (id=81):
syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @broadcast}, @echo_reply={0xe0}}}}}, 0x0)

4m3.16690028s ago: executing program 0 (id=82):
socket$kcm(0xa, 0x2, 0x88)
openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
r0 = syz_mount_image$btrfs(&(0x7f0000000200), &(0x7f0000005600)='./file0\x00', 0x800, &(0x7f00000004c0), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SEND(r0, 0xd0009411, &(0x7f0000000380)={{r0}, 0x0, 0x0, 0xffffffffffffffff, 0x1})

4m2.613699026s ago: executing program 0 (id=85):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x42)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x28b501e, 0x0)
mount$bind(0x0, &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x84000, 0x0)

4m2.494687785s ago: executing program 0 (id=86):
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000001080)='./bus\x00', 0x0, &(0x7f00000010c0)=ANY=[@ANYBLOB="666c7573682c6e6f646f74732c646973636172642c646d61736b3d30303030303030303030303030303030303030303030322c646d61736b3d30303030303030303030303030303030303030303137372c646f74732c6e6f646f74732c71756965742c646f74732c0023c3cb4d2e3cbf18508098fe0de2af38db67d42d1bc4ab714d52f019082433fc9ca2d7174b2c4ece31c9f4c7a4d53914e100"/167], 0x1, 0x140, &(0x7f0000000000)="$eJzs27Fq21AUBuDj2m3ddvFcOgi6dDJtn6CluFAqaEnwkEwJOFnsYIgXJZMfJS8YCJ683ZAo2Imxhwy2IPq+RT/8CO4dpMMV6OjT2XAwnpyO/8+i3WhE60dkMW9EJ15FM0rTAABeknlKcZNSSm+n8e4qUkpVrwgA2DbzHwDqx/wHgPox/wGgfvYPDv/+zPPeXpa1I66nRb/ol9ey//0n733N7nWWd82Kot9c9N/KPnvav473D/33tf2b+PK57O+6X//ylf5DDLa/fQAAAKiFbraw9nzf7W7qy/To+8DK+b0VH1s72wYA8AyTi8vh8Wh0ci4IgrAIVb+ZgG1bPvRVrwQAAAAAAAAAAAAAANhkF78TVb1HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAWHUbAAD//0DvUik=")
truncate(&(0x7f0000000900)='./file1\x00', 0x100)
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)

4m2.173326615s ago: executing program 0 (id=88):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x3807, 0x3, 0x3, 0x80000001}})
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x0, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x105], [0x10, 0xffffffff, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0xec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x7fffffff, 0xfffffffd, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x8c, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x4000000, 0x80, 0x0, 0x4, 0x0, 0x7, 0x800000, 0x7], [0x10000, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0x0, 0xb78, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x520, 0xd, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x6, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x3, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x1, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x3, 0xbfb6, 0xfffffffe, 0x4, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x100, 0x0, 0x6, 0x3, 0xfffffffd, 0x53591b27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x3]}, 0x45c)

4m2.047358769s ago: executing program 32 (id=88):
r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0)
ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000800)={0x0, {0x1, 0x0, 0x3807, 0x3, 0x3, 0x80000001}})
ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000001c0)={{0x0, 0x0, 0xfffd, 0x8001}, 'syz1\x00'})
ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x3)
ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0)
write$uinput_user_dev(r0, &(0x7f0000000900)={'syz1\x00', {0x0, 0x0, 0x6}, 0x37b4, [0xfeff, 0x4, 0x0, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x3, 0x100, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0xbffffffe, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3, 0xffffffff, 0x0, 0xffff, 0x0, 0x20, 0x6, 0x5, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x20004, 0x0, 0x0, 0x105], [0x10, 0xffffffff, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, 0xbb, 0x1, 0xfffffffc, 0x5, 0x800, 0x0, 0xfffffffc, 0x0, 0x1, 0x0, 0x3, 0xec6a, 0x5, 0x40000000, 0xffffffff, 0xfffffffc, 0x7fffffff, 0xfffffffd, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xfffffffc, 0x0, 0x8c, 0x0, 0x0, 0x4, 0x5, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x0, 0x0, 0x4000000, 0x80, 0x0, 0x4, 0x0, 0x7, 0x800000, 0x7], [0x10000, 0x4, 0x0, 0x0, 0xffffffff, 0x1, 0xa000000, 0x0, 0x0, 0xb78, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x520, 0xd, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0xfffffffd, 0x0, 0xfffffffc, 0x2af, 0x0, 0x9, 0x0, 0x10000, 0x3, 0x0, 0x0, 0x0, 0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xff, 0x4000005, 0x0, 0x4, 0x2, 0x400000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3], [0x0, 0x0, 0x0, 0x6, 0x0, 0x401, 0x0, 0x211, 0x4, 0x0, 0x100, 0x3, 0x0, 0x0, 0x80, 0x0, 0x3, 0x0, 0x2, 0x1, 0x7fff, 0x0, 0xd, 0x800000, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x3, 0xbfb6, 0xfffffffe, 0x4, 0x3, 0x0, 0x0, 0x1, 0xffffffff, 0x100, 0x0, 0x6, 0x3, 0xfffffffd, 0x53591b27, 0x3fffffd, 0x0, 0x0, 0x5, 0x400, 0x7, 0x9, 0x0, 0x0, 0x80000000, 0x1000000, 0x0, 0x3]}, 0x45c)

2m44.316588002s ago: executing program 3 (id=1033):
r0 = syz_open_dev$radio(&(0x7f0000000140), 0x0, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf010004, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f90d, 0x0, '\x00', @value64=0xfffffffffffffffe}})

2m44.207068837s ago: executing program 3 (id=1035):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='./file0\x00', 0x3a00015, &(0x7f00000009c0)={[{}, {@barrier}, {@nls={'nls', 0x3d, 'macroman'}}, {@uid}, {@barrier}, {}]}, 0x3, 0x6c3, &(0x7f0000000a40)="$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")
mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0)

2m44.121023608s ago: executing program 3 (id=1038):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0)
ioctl$DRM_IOCTL_DROP_MASTER(r0, 0x641f)
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000040)={0x3, 0x0, 0x10000000, 0x80000005, 0xb, 0x1fd, 0x1})

2m43.986431991s ago: executing program 3 (id=1042):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000280)='./file0/file0\x00', 0x0, 0x101891, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

2m43.914859496s ago: executing program 3 (id=1045):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="1801000000000000000000006dfeff00850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x18)
unshare(0x22020600)
r1 = fsopen(&(0x7f0000000000)='btrfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)

2m43.567136379s ago: executing program 3 (id=1049):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x3, 0x4)

2m43.432870624s ago: executing program 33 (id=1049):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000000)=0x3, 0x4)

2m35.974679241s ago: executing program 2 (id=1106):
mkdir(&(0x7f0000000200)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000140)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0xc0089364, &(0x7f0000000180))

2m35.881752921s ago: executing program 2 (id=1109):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$KDENABIO(r0, 0x4b36)

2m35.815895635s ago: executing program 2 (id=1110):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x50)

2m34.86813573s ago: executing program 2 (id=1115):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080)='hugetlbfs\x00', 0x0, 0x0)
mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file0\x00', 0x8000, 0x0)

2m34.867841691s ago: executing program 2 (id=1116):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x40800, 0x0)
read$FUSE(r3, &(0x7f0000002ac0)={0x2020}, 0x2020)

2m34.745604859s ago: executing program 2 (id=1118):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0)

2m19.711155911s ago: executing program 34 (id=1118):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x103, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0)

2m0.531926045s ago: executing program 4 (id=1509):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x5}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000004000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)
io_submit(0x0, 0x0, 0x0)

2m0.531658621s ago: executing program 4 (id=1510):
r0 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x1c, &(0x7f0000000040)={<r1=>0x0}, &(0x7f0000cab000)=0x7)
setpriority(0x1, r1, 0x7)

2m0.462763424s ago: executing program 4 (id=1511):
r0 = socket(0x1e, 0x2, 0x0)
setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4)
sendmsg$tipc(r0, &(0x7f0000000200)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0x2}}, 0x10, 0x0}, 0x4000001)
recvmmsg(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000a40)=""/188, 0xbc}], 0x1, &(0x7f0000000500)=""/87, 0x57}}], 0x1, 0x0, 0x0)

2m0.462221144s ago: executing program 4 (id=1513):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800700, &(0x7f0000000200)={[{@orlov}, {@nombcache}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@grpquota}, {@barrier}, {@usrjquota}, {@jqfmt_vfsold}, {@minixdf}]}, 0x3, 0x466, &(0x7f0000000340)="$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")
mount$overlay(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000000)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
fsync(r0)

2m0.310812503s ago: executing program 4 (id=1517):
syz_usb_connect(0x1, 0x24, &(0x7f0000002280)={{0x12, 0x1, 0x200, 0xce, 0x85, 0x9b, 0x8, 0x2040, 0xb140, 0x7536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x9, 0x3, 0x40, 0xf2, [{{0x9, 0x4, 0x1, 0x8, 0x0, 0xff, 0x4e, 0x42, 0x5}}]}}]}}, &(0x7f0000003600)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})

2m0.025846358s ago: executing program 4 (id=1519):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)

1m59.86078463s ago: executing program 35 (id=1519):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001280)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f00, 0x18, 0x19, &(0x7f00000007c0)="9f44948721919580684010a40566", 0x0, 0x7ff, 0x0, 0xb1, 0x0, &(0x7f0000000700)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", &(0x7f0000000380)="8c5911c525f5cf4c4ecf207ad2ec", 0x0, 0x0, 0xffffffff}, 0x23)

1m26.438659159s ago: executing program 5 (id=1805):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000040)={[{@nobh}, {@abort}]}, 0xff, 0x23f, &(0x7f0000000540)="$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")
syz_mount_image$ext4(0x0, &(0x7f0000000080)='./file0\x00', 0x18808, 0x0, 0xf7, 0x0, 0x0)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000080), 0x18)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000003c0)=@v1={0x2, @adiantum, 0x0, @auto="b33504b72d91eb52"})

1m26.358209576s ago: executing program 5 (id=1807):
syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x1, 0x174, &(0x7f0000000240)="$eJzsmD9PwkAYxp9rESJxcMZBE0lEI6UtalxMJPEDmOCfsEGkErSIQgdh85MYv4CLu/GjKJMLo3NN2wNOouKgJsbnN7z3vNe317u3ydOkIIT8W3pPL48XvcaKDmAGaSTk/LM+qtGU+tVssTl3vZ28K9+WdlL3/fH1BADf//rzYwAeCjo8mfv+27vTctyDNtT70LAs9SEEDKnL0HAgtQOBktQnim4G9YZxXHcd46jpVgNhBsEKgh2E/Pj++lcCVWV/Qrne7nRPK67rtH5QTOpfv6BhS9mf+r4GvTGV/lnQYEmdh0BR6k0kBr2JWqKcPxUbra//8vkpKCj+mhj5k38jsKT4U0zxj5zXOM+1O91svVGpOTXnzLbzG+aaaa7budCIoviJ/02H/pRU1p/6oDYu4riseF7LiuIwt6P4nuPGQ//TkFmMciHnVMLvwaxYCIaMLnNCCCGEEEIIIYQQQgj5duYhwr+gE7B3w+rXAAAA//9nP3XZ")
getxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000000)=@known='user.incfs.metadata\x00', 0x0, 0x50)

1m26.143230464s ago: executing program 5 (id=1811):
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000140)='./bus\x00', 0x1a40cc4, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESDEC, @ANYRES8, @ANYRESOCT=0x0, @ANYRES16, @ANYRESHEX, @ANYRESHEX, @ANYRES8], 0xdf, 0x0, &(0x7f0000000480))
chdir(&(0x7f00000001c0)='./bus\x00')
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0)
rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0\x00')

1m26.048407714s ago: executing program 5 (id=1812):
mkdir(&(0x7f0000000000)='./file1\x00', 0x0)
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000140)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000040)='./file0/../file0/../file0\x00', &(0x7f0000000100)='devpts\x00', 0x0, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_EXPIRE(r2, 0x810c9365, 0x0)

1m25.669352782s ago: executing program 5 (id=1813):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r0}, 0x10)
r1 = io_uring_setup(0x2579, &(0x7f00000003c0)={0x0, 0x528f, 0x1000, 0x3, 0x4})
io_uring_register$IORING_REGISTER_PBUF_RING(r1, 0x17, 0x0, 0x1)

1m25.225197011s ago: executing program 5 (id=1815):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x18}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94)

1m24.715674069s ago: executing program 36 (id=1815):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x3, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x18}}, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x94)

1m23.429374513s ago: executing program 1 (id=1827):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=<r1=>r0, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000280)='consume_skb\x00', r3}, 0x10)
r4 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="c0", 0x1}], 0x1}, 0x0)

1m23.379237555s ago: executing program 1 (id=1828):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10)
geteuid()

1m23.378839684s ago: executing program 1 (id=1829):
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='kmem_cache_free\x00', r0}, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10)
r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d80)={&(0x7f0000000d40)='mmap_lock_acquire_returned\x00', r3}, 0x10)
r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8)
write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef)

1m23.28944758s ago: executing program 1 (id=1830):
mount$fuse(0x0, &(0x7f0000002880)='.\x00', &(0x7f00000028c0), 0x0, 0x0)

1m23.289223225s ago: executing program 1 (id=1831):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000800)=@can_newroute={0x14c, 0x18, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}, [@CGW_CS_CRC8={0x11e, 0x6, {0x1, 0x0, 0x3, 0x0, 0xff, "71ec6d721744cd5200080000f8cfcad4c4ec6511ec028c5028564abce83afe14c93e15e556c2baed7f897fe841c155a2b2a4b9f3052995cdf66a9c7922ff0300005b6c67281f1519cd7c32c2bf7563b9452575505da99ea128d37616896be8764a2c78edbad5bde7a5e405bdc893770338925f824bd24689c0d11a5568fc3aaa9ad0d7766d8ea8d3bf1006e3df494e2f373148ecb4adafdd39874e9808b118301f1e76054a64c6d243523f5de7b347f3b740e105d0ed18fae7289635301ebd8949268090b3bcd4cbed5f1cfe93cff41a9630802f96defe9e8ea850529827c5e301953a8abaafa1f121e590f74e28233f4129d4587eee87ec5d42c3ef0619022c", 0x0, "5c8d586b2a88d818b56d2a5e15c8a95d29e5b2ea"}}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x0, 0x1}, 0x0, 0x5, 0x0, 0x0, '\t\x00'}, 0x1}}]}, 0x14c}}, 0x4c0c8)

1m23.236503662s ago: executing program 1 (id=1832):
sync()

1m8.238350685s ago: executing program 37 (id=1832):
sync()

12.92211142s ago: executing program 7 (id=2610):
socket$nl_generic(0x10, 0x3, 0x10)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000300)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[], 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl'])

12.802493328s ago: executing program 7 (id=2613):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x18)
syz_emit_ethernet(0x4e, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6087fb890000000000000000000000000001fc0200000000000000000000000000005c020000000000000401000101fd"], 0x0)

12.72198245s ago: executing program 7 (id=2615):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000730000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x401, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x1}, 0x50)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000040)='contention_begin\x00', r1}, 0x18)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bind$bt_hci(r0, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6)
write(r0, &(0x7f0000000000)="2e000300010000", 0x7)

12.492544551s ago: executing program 7 (id=2619):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000240)='./file0\x00', 0xc02, &(0x7f0000000100)=ANY=[@ANYBLOB='iocharset=cp874,fmask=00000000000000000000004,errors=continue,gid=', @ANYRESHEX=0x0, @ANYBLOB=',iocharset=koi8-ru,uid=', @ANYRESHEX=0x0, @ANYBLOB=',fmask=00000000000000000000315,\x00ocharset=maccyrillic,errors=continue,dmask=00000000000000000000003,fowner>', @ANYRESDEC, @ANYBLOB='\x00\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="2c72010074636f6e7465780006656407000000"], 0x1, 0x1524, &(0x7f0000007640)="$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")
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000780)='./file0\x00', 0x0, 0x11080, 0x0)

12.492278879s ago: executing program 8 (id=2620):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x11, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10)
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f00000002c0)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x0, 0x2449})
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r1, 0x7a4, &(0x7f0000000180)={{@host}, 0xe1, 0x800000000000002, 0x20007fff})

12.136918863s ago: executing program 8 (id=2621):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x0)
sendmsg$xdp(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f00000009c0)='\"', 0x1}], 0x1, 0x0, 0x0, 0x20000010}, 0x840)
recvmmsg(r1, &(0x7f0000000680)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000280)=""/135, 0x87}], 0x1}, 0x10000}], 0x1, 0x28101, 0x0)

12.136745411s ago: executing program 7 (id=2622):
r0 = add_key(&(0x7f0000000240)='cifs.spnego\x00', &(0x7f0000000200)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd)
keyctl$invalidate(0x15, r0)
add_key(&(0x7f00000000c0)='encrypted\x00', 0x0, 0x0, 0x0, r0)

12.106751925s ago: executing program 8 (id=2623):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x48, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc}]}}}, @IFLA_LINK={0x8, 0x5, r1}]}, 0x48}}, 0x0)

11.980129039s ago: executing program 8 (id=2624):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000007000000850000000e000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x30}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

11.979992787s ago: executing program 8 (id=2625):
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x12, 0xfffffffb}, 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x4f, 0x200cc, 0x6, 0x5}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r0}, 0x38)

11.854802525s ago: executing program 7 (id=2626):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000100018010000696c6c2500000000002020207b1af8ff00000000bfa10000000000000701000017"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\t'])

11.85458479s ago: executing program 8 (id=2627):
preadv2(0xffffffffffffffff, 0x0, 0x0, 0x800ee, 0x3, 0x0)
syz_mount_image$minix(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000100)=ANY=[], 0xa, 0x234, &(0x7f0000000900)="$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")
sync()
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)

11.676986515s ago: executing program 38 (id=2626):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000100018010000696c6c2500000000002020207b1af8ff00000000bfa10000000000000701000017"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6ff}, 0x94)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\t'])

2.141612751s ago: executing program 9 (id=2674):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x2402, 0x0)
ioctl$TIOCOUTQ(r0, 0x5411, 0x0)

2.141419407s ago: executing program 9 (id=2675):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff})
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1022002, 0x0)
r3 = dup(r2)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x40542, 0x0)
ftruncate(r4, 0xee72)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000040)=0x3)

1.741459763s ago: executing program 6 (id=2679):
r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0)
lseek(r0, 0x80000000, 0x2)

1.741122978s ago: executing program 6 (id=2680):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x100400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000180)={'adq12b\x00', [0x4f27, 0x5, 0x2, 0x4, 0x5, 0xcc5, 0xf, 0x7, 0xa, 0xe8aa, 0x2, 0x1, 0xfffffffd, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x99, 0xcaa7, 0x0, 0x20001e58, 0x7, 0xe69, 0x3c, 0x8, 0x2, 0x0, 0xfffffff8]})
read(r0, 0x0, 0x0)

1.661203304s ago: executing program 6 (id=2681):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x8800)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
rseq(&(0x7f0000000400), 0x20, 0x0, 0x0)
io_setup(0x8, &(0x7f0000000000))
syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
syz_open_procfs(0x0, &(0x7f0000000000)='mountinfo\x00')
r2 = getpid()
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/seq/clients\x00', 0x0, 0x0)
preadv(r3, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0)
syz_pidfd_open(r2, 0x0)
mount_setattr(0xffffffffffffff9c, &(0x7f0000000180)='.\x00', 0x8000, &(0x7f0000001dc0)={0x8, 0x72, 0x80000}, 0x20)
r4 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r4, &(0x7f00000000c0)={0x2, 0x4e20, @broadcast}, 0x10)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x80)
shutdown(r4, 0x1)
recvfrom(r4, 0x0, 0x0, 0x61, 0x0, 0x0)

1.221021553s ago: executing program 9 (id=2682):
r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000280), 0x22802, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xd)
io_setup(0x8, &(0x7f0000004200)=<r1=>0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
io_submit(r1, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])

1.071459038s ago: executing program 9 (id=2683):
r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/pm_trace', 0x141a82, 0x0)
sendfile(r0, r0, &(0x7f0000000000)=0x1, 0x4)

1.071237051s ago: executing program 9 (id=2684):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
sendto$inet(r0, &(0x7f0000003a00)="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", 0x369, 0x800, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000480)=0x1df9, 0x4)
sendto$inet(r0, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)

978.121173ms ago: executing program 9 (id=2685):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5)
sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
sendmsg$tipc(0xffffffffffffffff, 0x0, 0x80)
ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0)
preadv(0xffffffffffffffff, &(0x7f0000000240), 0x0, 0xfffffffc, 0x0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e0000000000000000000000000600000d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e80c20000000000000000000000900000000000000000000000900000200000000000000000902"], 0x0, 0x96}, 0x28)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000680)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x28)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed={{}, [], {0x95, 0x0, 0x0, 0x97ff}}, &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1f00}, 0x2, 0x0, 0x0, 0x20}, 0x80)

478.910525ms ago: executing program 6 (id=2686):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x400, 0x0)
fchown(r0, 0x0, 0xee01)

209.657389ms ago: executing program 6 (id=2687):
r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1)
setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, 0x0, 0x21)

0s ago: executing program 6 (id=2688):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f0000000000), &(0x7f0000000080)=r1}, 0x20)
r3 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r3, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)

kernel console output (not intermixed with test programs):

: New USB device found, idVendor=0711, idProduct=0210, bcdDevice=fd.d6
[  212.991425][   T95] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.994714][   T95] usb 7-1: Product: syz
[  212.996429][   T95] usb 7-1: Manufacturer: syz
[  212.998289][   T95] usb 7-1: SerialNumber: syz
[  213.007541][   T95] usb 7-1: config 0 descriptor??
[  213.016243][T10284] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  213.113748][ T9431] BTRFS info (device loop5): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  213.357699][T10284] loop6: detected capacity change from 0 to 8192
[  213.406627][ T5923]  loop6: p1 p4
[  213.422482][ T5923] loop6: partition table partially beyond EOD, truncated
[  213.425309][ T5923] loop6: p1 start 524288 is beyond EOD, truncated
[  213.427557][ T5923] loop6: p4 start 16777216 is beyond EOD, truncated
[  213.449879][T10297] loop5: detected capacity change from 0 to 1024
[  213.485842][T10297] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.510704][ T9431] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.534557][T10284]  loop6: p1 p4
[  213.535724][T10284] loop6: partition table partially beyond EOD, truncated
[  213.543355][T10284] loop6: p1 start 524288 is beyond EOD, truncated
[  213.548125][T10284] loop6: p4 start 16777216 is beyond EOD, truncated
[  213.563929][   T95] mct_u232 7-1:0.139: MCT U232 converter detected
[  213.567182][   T95] mct_u232 ttyUSB0: expected endpoint missing
[  213.578064][   T95] usb 7-1: USB disconnect, device number 2
[  213.586215][   T95] mct_u232 7-1:0.139: device disconnected
[  214.043042][   T47] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  214.195145][   T47] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  214.198495][   T47] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  214.202471][   T47] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  214.208407][   T47] usb 6-1: config 1 has no interface number 0
[  214.210900][   T47] usb 6-1: too many endpoints for config 1 interface 1 altsetting 1: 32, using maximum allowed: 30
[  214.214983][   T47] usb 6-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 32
[  214.220838][   T47] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  214.225849][   T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.228518][   T47] usb 6-1: Product: syz
[  214.230214][   T47] usb 6-1: Manufacturer: syz
[  214.232281][   T47] usb 6-1: SerialNumber: syz
[  214.295340][T10322] loop6: detected capacity change from 0 to 32768
[  214.429629][T10322] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  214.429645][T10322]   allowing incompatible features above 0.0: (unknown version)
[  214.429650][T10322]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  214.448132][T10322] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  214.451229][T10322] bcachefs (loop6): initializing new filesystem
[  214.467084][T10322] bcachefs (loop6): going read-write
[  214.606272][T10322] bcachefs (loop6): marking superblocks
[  214.655401][   T24] usb 6-1: USB disconnect, device number 4
[  214.688629][T10322] bcachefs (loop6): initializing freespace
[  214.707224][T10322] bcachefs (loop6): done initializing freespace
[  214.721142][T10322] bcachefs (loop6): reading snapshots table
[  214.726166][T10322] bcachefs (loop6): reading snapshots done
[  214.756373][T10322] bcachefs (loop6): done starting filesystem
[  214.868212][T10322] syz.6.1585 (10322) used greatest stack depth: 16080 bytes left
[  214.901996][T10037] bcachefs (loop6): shutting down
[  214.905901][T10037] bcachefs (loop6): going read-only
[  214.909709][T10037] bcachefs (loop6): finished waiting for writes to stop
[  214.914058][T10037] bcachefs (loop6): flushing journal and stopping allocators, journal seq 3
[  214.949778][T10037] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 4
[  214.954883][T10037] bcachefs (loop6): clean shutdown complete, journal seq 5
[  214.958355][T10037] bcachefs (loop6): marking filesystem clean
[  214.993592][T10037] bcachefs (loop6): shutdown complete
[  215.536450][T10360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1597'.
[  215.540287][T10360] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1597'.
[  215.566921][ T5880] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  215.569689][ T5880] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  215.573688][ T5880] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  215.584086][ T5880] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  216.805539][T10382] 9pnet_fd: Insufficient options for proto=fd
[  217.423223][   T24] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  217.473071][ T5917] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  217.575224][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.579695][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.584973][   T24] usb 6-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[  217.588721][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.594872][   T24] usb 6-1: config 0 descriptor??
[  217.635426][ T5917] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  217.638736][ T5917] usb 7-1: config 0 has no interface number 0
[  217.641404][ T5917] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.646390][ T5917] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.650292][ T5917] usb 7-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  217.654215][ T5917] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.660072][ T5917] usb 7-1: config 0 descriptor??
[  218.009791][   T24] cm6533_jd 0003:0D8C:0022.0009: invalid report_size -101239751
[  218.012597][   T24] cm6533_jd 0003:0D8C:0022.0009: item 0 4 1 7 parsing failed
[  218.018168][   T24] cm6533_jd 0003:0D8C:0022.0009: parse failed
[  218.020273][   T24] cm6533_jd 0003:0D8C:0022.0009: probe with driver cm6533_jd failed with error -22
[  218.082497][ T5917] uclogic 0003:256C:006D.000A: unknown main item tag 0x0
[  218.087100][ T5917] uclogic 0003:256C:006D.000A: unknown main item tag 0x0
[  218.089922][ T5917] uclogic 0003:256C:006D.000A: unknown main item tag 0x0
[  218.092706][ T5917] uclogic 0003:256C:006D.000A: unknown main item tag 0x0
[  218.101189][ T5917] uclogic 0003:256C:006D.000A: unknown main item tag 0x0
[  218.111584][ T5917] uclogic 0003:256C:006D.000A: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.6-1/input1
[  218.208822][   T47] usb 6-1: USB disconnect, device number 5
[  218.279535][   T24] usb 7-1: USB disconnect, device number 3
[  218.619996][T10458] netlink: 'syz.1.1639': attribute type 10 has an invalid length.
[  218.632516][T10458] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.641794][T10458] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  218.656165][T10458] bond0: entered promiscuous mode
[  218.658203][T10458] bond_slave_0: entered promiscuous mode
[  218.660493][T10458] bond_slave_1: entered promiscuous mode
[  218.662808][T10458] batadv0: entered promiscuous mode
[  218.766818][T10462] comedi comedi0: Minor 3 could not be opened
[  218.810347][T10464] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1642'.
[  219.233429][   T24] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  219.403463][   T47] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  219.407813][   T24] usb 7-1: config 162 has an invalid interface number: 35 but max is 0
[  219.411442][   T24] usb 7-1: config 162 has no interface number 0
[  219.415371][   T24] usb 7-1: config 162 interface 35 has no altsetting 0
[  219.421668][   T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice=b9.11
[  219.425284][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.428567][   T24] usb 7-1: Product: syz
[  219.430306][   T24] usb 7-1: Manufacturer: syz
[  219.432216][   T24] usb 7-1: SerialNumber: syz
[  219.578261][   T47] usb 6-1: config 0 has no interfaces?
[  219.580462][   T47] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  219.585292][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.601272][   T47] usb 6-1: config 0 descriptor??
[  219.653202][   T24] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:162.35/input/input16
[  219.662000][ T5282] bcm5974 7-1:162.35: could not read from device
[  219.675271][ T5282] bcm5974 7-1:162.35: could not read from device
[  219.679818][   T24] usb 7-1: USB disconnect, device number 4
[  219.810028][   T47] usb 6-1: USB disconnect, device number 6
[  220.206409][T10486] input: syz1 as /devices/virtual/input/input17
[  220.283640][T10490] loop6: detected capacity change from 0 to 164
[  220.305230][T10490] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  220.315792][T10490] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  220.322783][T10490] Symlink component flag not implemented
[  220.329878][T10490] Symlink component flag not implemented
[  220.340830][T10490] Symlink component flag not implemented (7)
[  220.345678][T10490] Symlink component flag not implemented (116)
[  220.361302][T10494] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1657'.
[  220.427345][T10497] loop6: detected capacity change from 0 to 1024
[  220.458630][T10497] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.500786][T10037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.662478][T10512] 8021q: adding VLAN 0 to HW filter on device bond0
[  220.689508][T10512] bond0: (slave rose0): Enslaving as an active interface with an up link
[  220.766880][T10522] loop6: detected capacity change from 0 to 256
[  220.799504][T10522] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  220.988002][T10534] input: syz0 as /devices/virtual/input/input18
[  221.523766][   T24] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  221.673049][   T24] usb 7-1: Using ep0 maxpacket: 16
[  221.681677][   T24] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  221.690593][   T24] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  221.711302][   T24] usb 7-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  221.715293][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.718317][   T24] usb 7-1: Product: syz
[  221.719992][   T24] usb 7-1: Manufacturer: syz
[  221.721816][   T24] usb 7-1: SerialNumber: syz
[  221.739070][   T24] usb 7-1: config 0 descriptor??
[  221.953296][   T24] appledisplay: Apple Cinema Display connected
[  221.972081][T10570] loop5: detected capacity change from 0 to 32768
[  221.986970][   T33] kauditd_printk_skb: 10 callbacks suppressed
[  221.986983][   T33] audit: type=1800 audit(1755070372.556:88): pid=10570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1679" name="file1" dev="loop5" ino=4 res=0 errno=0
[  222.200605][    C1] usb 7-1: appledisplay_complete - usb_submit_urb failed with result -19
[  222.204744][ T5882] usb 7-1: USB disconnect, device number 5
[  222.209069][ T5882] appledisplay: Apple Cinema Display disconnected
[  222.268086][T10570] ERROR: (device loop5): dbAdjCtl: the maximum free buddy is not the old root
[  222.268086][T10570] 
[  222.272159][T10570] ERROR: (device loop5): remounting filesystem as read-only
[  223.245871][T10592] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1685'.
[  223.249049][T10592] netem: unknown loss type 12
[  223.250812][T10592] netem: change failed
[  223.319081][T10599] loop5: detected capacity change from 0 to 16
[  223.329298][T10599] erofs (device loop5): mounted with root inode @ nid 36.
[  223.432382][T10603] erofs (device loop5): readahead error at folio 2 @ nid 89
[  223.467671][   T56] erofs (device loop5): failed to decompress 6887 in[4096, 0] out[8192]
[  223.479640][T10603] erofs (device loop5): failed to decompress 6887 in[4096, 0] out[8192]
[  223.489262][T10603] erofs (device loop5): read error -117 @ 1 of nid 89
[  223.539655][   T33] audit: type=1800 audit(1755070374.086:89): pid=10603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1687" name="file3" dev="loop5" ino=89 res=0 errno=0
[  225.323126][  T795] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  225.483384][  T795] usb 7-1: Using ep0 maxpacket: 16
[  225.503242][  T795] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  225.508203][  T795] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  225.512625][  T795] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  225.518493][  T795] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  225.524185][  T795] usb 7-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  225.540489][  T795] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.561389][  T795] usb 7-1: config 0 descriptor??
[  225.564789][T10649] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  225.609440][  T795] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input19
[  225.852909][    T9] usb 7-1: USB disconnect, device number 6
[  225.855047][    C0] pxrc 7-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19
[  225.864219][ T5282] pxrc 7-1:0.0: pxrc_open - usb_submit_urb failed, error: -19
[  226.927288][T10691] loop6: detected capacity change from 0 to 32768
[  226.958818][T10691] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[  226.997835][T10037] (syz-executor,10037,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 76
[  227.005652][T10037] ocfs2: Unmounting device (7,6) on (node local)
[  227.203892][  T795] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  227.383305][  T795] usb 6-1: Using ep0 maxpacket: 8
[  227.395250][  T795] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x81 has invalid wMaxPacketSize 0
[  227.399269][  T795] usb 6-1: config 1 interface 0 altsetting 4 bulk endpoint 0x82 has invalid maxpacket 1024
[  227.410911][  T795] usb 6-1: config 1 interface 0 altsetting 4 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  227.418147][  T795] usb 6-1: config 1 interface 0 has no altsetting 0
[  227.424008][  T795] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  227.430527][  T795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  227.435314][  T795] usb 6-1: Product: syz
[  227.437111][  T795] usb 6-1: Manufacturer: syz
[  227.439122][  T795] usb 6-1: SerialNumber: syz
[  227.451364][T10702] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  227.455808][T10702] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  227.680799][  T795] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22
[  227.697930][  T795] usb 6-1: USB disconnect, device number 7
[  228.553142][  T795] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  228.738555][  T795] usb 6-1: unable to get BOS descriptor or descriptor too short
[  228.742503][  T795] usb 6-1: not running at top speed; connect to a high speed hub
[  228.750702][  T795] usb 6-1: config 14 has an invalid interface number: 90 but max is 0
[  228.754172][  T795] usb 6-1: config 14 has no interface number 0
[  228.756375][  T795] usb 6-1: config 14 interface 90 has no altsetting 0
[  228.763487][  T795] usb 6-1: New USB device found, idVendor=041e, idProduct=400a, bcdDevice=8c.6a
[  228.767226][  T795] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.769942][  T795] usb 6-1: Product: syz
[  228.771492][  T795] usb 6-1: Manufacturer: syz
[  228.773614][  T795] usb 6-1: SerialNumber: syz
[  229.024381][  T795] gspca_main: spca500-2.14.0 probing 041e:400a
[  229.050028][  T795] usb 6-1: USB disconnect, device number 8
[  229.423107][ T5882] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  229.573858][ T5882] usb 7-1: Using ep0 maxpacket: 32
[  229.581249][ T5882] usb 7-1: config 76 has an invalid descriptor of length 0, skipping remainder of the config
[  229.590204][T10749] loop5: detected capacity change from 0 to 128
[  229.607769][T10749] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  229.625333][ T5882] usb 7-1: New USB device found, idVendor=069a, idProduct=0001, bcdDevice=51.c5
[  229.630298][ T5882] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.637266][ T5882] usb 7-1: Product: syz
[  229.639768][ T5882] usb 7-1: Manufacturer: syz
[  229.642419][ T5882] usb 7-1: SerialNumber: syz
[  229.655127][ T5882] pwc: Askey VC010 type 1 USB webcam detected.
[  229.859653][ T5882] pwc: send_video_command error -71
[  229.861531][ T5882] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  229.864809][ T5882] Philips webcam 7-1:76.0: probe with driver Philips webcam failed with error -71
[  229.869098][ T5882] usb 7-1: USB disconnect, device number 7
[  230.510349][T10752] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  230.510499][T10751] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  230.516217][T10752] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  230.523063][T10751] Bluetooth: hci3: Error when powering off device on rfkill (-4)
[  230.538727][T10752] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  230.557950][T10759] loop6: detected capacity change from 0 to 4096
[  230.569822][T10751] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  230.578288][T10751] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  230.664955][T10761] cgroup: Need name or subsystem set
[  231.228648][T10763] loop5: detected capacity change from 0 to 40427
[  231.288938][T10763] F2FS-fs (loop5): invalid crc value
[  231.468110][T10763] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  231.486608][T10763] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  232.328299][T10789] loop5: detected capacity change from 0 to 2048
[  232.331780][T10780] loop6: detected capacity change from 0 to 32768
[  232.369667][T10789] FAT-fs (loop5): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[  232.384663][T10789] FAT-fs (loop5): Filesystem has been set read-only
[  232.780580][T10797] loop6: detected capacity change from 0 to 32768
[  232.793026][ T5917] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  232.804787][T10797] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  232.837743][T10797] XFS (loop6): Ending clean mount
[  232.845734][T10797] XFS (loop6): Quotacheck needed: Please wait.
[  232.882291][T10797] XFS (loop6): Quotacheck: Done.
[  232.911006][T10037] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  232.955384][ T5917] usb 6-1: Using ep0 maxpacket: 16
[  232.965552][ T5917] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  232.969633][ T5917] usb 6-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  232.987859][ T5917] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.992022][ T5917] usb 6-1: config 0 descriptor??
[  233.141866][T10818] loop6: detected capacity change from 0 to 128
[  233.157249][T10818] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  233.161477][T10818] ext4 filesystem being mounted at /59/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  233.217224][T10037] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  233.378914][   T33] audit: type=1326 audit(1755070383.946:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10825 comm="syz.6.1758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc171f8ebe9 code=0x7ffc0000
[  233.388519][   T33] audit: type=1326 audit(1755070383.946:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10825 comm="syz.6.1758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc171f8ebe9 code=0x7ffc0000
[  233.398762][   T33] audit: type=1326 audit(1755070383.946:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10825 comm="syz.6.1758" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc171f8ebe9 code=0x7ffc0000
[  233.407937][   T33] audit: type=1326 audit(1755070383.946:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10825 comm="syz.6.1758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc171f8ebe9 code=0x7ffc0000
[  233.416036][   T33] audit: type=1326 audit(1755070383.946:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10825 comm="syz.6.1758" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc171f8ebe9 code=0x7ffc0000
[  233.417183][ T5917] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  233.433739][   T33] audit: type=1326 audit(1755070384.006:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10825 comm="syz.6.1758" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc171f8ebe9 code=0x7ffc0000
[  233.436609][ T5917] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  233.453151][ T5917] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  233.455450][ T5917] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  233.457800][ T5917] mcp2221 0003:04D8:00DD.000B: unknown main item tag 0x0
[  233.460467][ T5917] mcp2221 0003:04D8:00DD.000B: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.5-1/input0
[  233.462076][   T33] audit: type=1326 audit(1755070384.006:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10825 comm="syz.6.1758" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc171f85ba7 code=0x7ffc0000
[  233.464238][ T5297] udevd[5297]: worker [5852] terminated by signal 33 (Unknown signal 33)
[  233.472414][   T33] audit: type=1326 audit(1755070384.006:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10825 comm="syz.6.1758" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc171f2add9 code=0x7ffc0000
[  233.486558][   T33] audit: type=1326 audit(1755070384.006:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10825 comm="syz.6.1758" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fc171f85ba7 code=0x7ffc0000
[  233.514595][   T33] audit: type=1326 audit(1755070384.006:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10825 comm="syz.6.1758" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fc171f2add9 code=0x7ffc0000
[  233.641110][    C0] usb 6-1: input irq status -75 received
[  233.836222][  T795] usb 6-1: USB disconnect, device number 9
[  233.940215][T10834] loop6: detected capacity change from 0 to 32768
[  233.960037][T10834] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  234.000105][T10834] XFS (loop6): Ending clean mount
[  234.013764][T10834] XFS (loop6): Quotacheck needed: Please wait.
[  234.048400][T10834] XFS (loop6): Quotacheck: Done.
[  234.086202][T10037] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  234.618068][T10856] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  235.266131][T10860] loop6: detected capacity change from 0 to 32768
[  235.278749][T10860] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  235.370985][T10037] ocfs2: Unmounting device (7,6) on (node local)
[  235.488716][T10868] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1770'.
[  235.721576][T10882] loop5: detected capacity change from 0 to 512
[  235.732447][T10882] EXT4-fs: Ignoring removed nobh option
[  235.735937][T10882] EXT4-fs: Ignoring removed nobh option
[  235.755994][T10882] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -2
[  235.759892][T10882] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #13: comm syz.5.1776: invalid indirect mapped block 4294967295 (level 2)
[  235.778451][T10882] EXT4-fs (loop5): 1 truncate cleaned up
[  235.782538][T10882] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  235.828833][ T9431] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.764792][T10930] loop6: detected capacity change from 0 to 32768
[  236.774639][T10930] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1798 (10930)
[  236.785809][T10944] loop5: detected capacity change from 0 to 128
[  236.788181][T10944] EXT4-fs: Ignoring removed nobh option
[  236.795202][T10930] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  236.799117][T10930] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  236.801375][T10944] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  236.802302][T10930] BTRFS info (device loop6): disk space caching is enabled
[  236.807086][T10944] ext4 filesystem being mounted at /151/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  236.817076][T10930] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  236.833593][T10944] fscrypt (loop5, inode 12): Unsupported log2_data_unit_size in encryption policy: 179
[  236.858772][ T9431] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  236.917147][T10930] BTRFS info (device loop6): rebuilding free space tree
[  236.922698][T10964] loop5: detected capacity change from 0 to 16
[  236.945603][T10930] BTRFS info (device loop6): disabling free space tree
[  236.948451][T10930] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  236.951729][T10930] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  236.959057][T10964] erofs (device loop5): mounted with root inode @ nid 36.
[  237.106346][T10037] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  237.293102][T10974] overlayfs: failed to resolve './file0': -2
[  237.644769][T10977] loop6: detected capacity change from 0 to 8
[  237.675009][T10977] SQUASHFS error: xz decompression failed, data probably corrupt
[  237.677950][T10977] SQUASHFS error: Failed to read block 0x108: -5
[  237.680059][T10977] SQUASHFS error: Unable to read metadata cache entry [106]
[  237.684392][T10977] SQUASHFS error: Unable to read inode 0x11f
[  237.702514][T10977] loop6: detected capacity change from 0 to 1024
[  237.707977][T10977] hfsplus: Bad value for 'gid'
[  238.033561][T10979] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1814'.
[  238.040296][T10979] netlink: 4595 bytes leftover after parsing attributes in process `syz.1.1814'.
[  239.161958][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  239.172038][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  239.179697][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  239.183949][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  239.190374][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  239.198704][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  239.203451][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  239.206756][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  239.210482][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  239.213967][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  239.396767][T10995] chnl_net:caif_netlink_parms(): no params data found
[  239.697691][T10995] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.700316][T10995] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.702796][T10995] bridge_slave_0: entered allmulticast mode
[  239.713929][T10995] bridge_slave_0: entered promiscuous mode
[  239.717365][T10995] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.719637][T10995] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.721836][T10995] bridge_slave_1: entered allmulticast mode
[  239.728070][T10995] bridge_slave_1: entered promiscuous mode
[  239.759924][T10995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  239.770921][T10995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.809926][T10995] team0: Port device team_slave_0 added
[  239.817883][T10995] team0: Port device team_slave_1 added
[  239.847132][T10995] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.849498][T10995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.858905][T10995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.869681][T10995] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.872435][T10995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.882325][T10995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.929210][T10995] hsr_slave_0: entered promiscuous mode
[  239.931849][T10995] hsr_slave_1: entered promiscuous mode
[  239.935993][T10995] debugfs: 'hsr0' already exists in 'hsr'
[  239.938190][T10995] Cannot create hsr debugfs directory
[  240.143070][T10995] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  240.149944][T10995] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  240.155418][T10995] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  240.168787][T10995] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  240.231791][T10995] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.234688][T10995] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.237679][T10995] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.240647][T10995] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.313975][T10995] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.327945][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  240.332271][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  240.351843][T10995] 8021q: adding VLAN 0 to HW filter on device team0
[  240.380625][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.383660][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.394926][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.397901][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.587894][T10995] 8021q: adding VLAN 0 to HW filter on device batadv0
[  240.597341][T11047] loop6: detected capacity change from 0 to 128
[  240.601354][T11047] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x614101ff (sector = 1)
[  240.606327][T11047] FAT-fs (loop6): bogus number of directory entries (203)
[  240.610174][T11047] FAT-fs (loop6): Can't find a valid FAT filesystem
[  240.740338][T11056] loop6: detected capacity change from 0 to 128
[  240.749366][T11056] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  240.811737][T10995] veth0_vlan: entered promiscuous mode
[  240.828537][T10995] veth1_vlan: entered promiscuous mode
[  240.832606][T11056] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  240.877247][T10995] veth0_macvtap: entered promiscuous mode
[  240.882775][T10995] veth1_macvtap: entered promiscuous mode
[  240.899203][T10995] batman_adv: batadv0: Interface activated: batadv_slave_0
[  240.909041][T10995] batman_adv: batadv0: Interface activated: batadv_slave_1
[  240.920839][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  240.924650][   T13] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  240.931738][   T13] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  240.944730][   T13] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.056680][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.059908][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.104826][  T372] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.108521][  T372] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.135502][T11067] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1846'.
[  241.189038][T11071] comedi comedi3: pcl730: I/O port conflict (0x5,4)
[  241.283542][ T5238] Bluetooth: hci3: command tx timeout
[  241.361275][   T33] kauditd_printk_skb: 69 callbacks suppressed
[  241.361292][   T33] audit: type=1326 audit(1755070391.926:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.7.1853" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f4f8ebe9 code=0x7ffc0000
[  241.376192][   T33] audit: type=1326 audit(1755070391.926:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.7.1853" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f4f8ebe9 code=0x7ffc0000
[  241.378007][T11083] loop7: detected capacity change from 0 to 512
[  241.386829][   T33] audit: type=1326 audit(1755070391.926:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.7.1853" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa7f4f8ebe9 code=0x7ffc0000
[  241.392225][T11083] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[  241.396683][   T33] audit: type=1326 audit(1755070391.926:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.7.1853" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa7f4f8ec23 code=0x7ffc0000
[  241.406851][   T33] audit: type=1326 audit(1755070391.946:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.7.1853" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa7f4f8d69f code=0x7ffc0000
[  241.417349][   T33] audit: type=1326 audit(1755070391.946:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.7.1853" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fa7f4f8ec77 code=0x7ffc0000
[  241.417749][T11083] EXT4-fs (loop7): 1 truncate cleaned up
[  241.425695][   T33] audit: type=1326 audit(1755070391.946:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.7.1853" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa7f4f8d550 code=0x7ffc0000
[  241.425736][   T33] audit: type=1326 audit(1755070391.946:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.7.1853" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa7f4f8e7eb code=0x7ffc0000
[  241.432514][T11083] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.438033][   T33] audit: type=1326 audit(1755070391.966:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.7.1853" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa7f4f8d84a code=0x7ffc0000
[  241.456709][   T33] audit: type=1326 audit(1755070391.966:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11082 comm="syz.7.1853" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fa7f4f8d84a code=0x7ffc0000
[  241.470941][T10995] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.513200][   T95] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  241.676863][   T95] usb 7-1: config 0 has an invalid descriptor of length 97, skipping remainder of the config
[  241.680504][   T95] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  241.696594][   T95] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  241.700024][   T95] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  241.736783][   T95] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1
[  241.758635][   T95] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 97, changing to 7
[  241.762149][   T95] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 24929, setting to 1024
[  241.774832][   T95] usb 7-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=d1.41
[  241.777627][   T95] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.780118][   T95] usb 7-1: Product: syz
[  241.781401][   T95] usb 7-1: Manufacturer: syz
[  241.782814][   T95] usb 7-1: SerialNumber: syz
[  241.799751][   T95] usb 7-1: config 0 descriptor??
[  241.958541][T11094] loop7: detected capacity change from 0 to 32768
[  241.968561][T11094] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  242.001657][T11094] XFS (loop7): Ending clean mount
[  242.019681][   T95] usb 7-1: ucan: probing device on interface #0
[  242.022219][   T95] usb 7-1: ucan: invalid endpoint configuration
[  242.025362][   T95] usb 7-1: ucan: probe failed; try to update the device firmware
[  242.032173][   T95] usb 7-1: USB disconnect, device number 8
[  242.122453][T10995] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  242.565791][T11110] netlink: 212940 bytes leftover after parsing attributes in process `syz.6.1861'.
[  242.616062][T11112] loop6: detected capacity change from 0 to 128
[  242.619987][T11108] loop7: detected capacity change from 0 to 32768
[  242.627363][T11108] bcachefs (/dev/loop7): error validating superblock: Invalid superblock section clean: entry type (unknown jset_entry_type 255) overruns end of section
[  242.627363][T11108] clean (size 2912):
[  242.627363][T11108] flags:          0
[  242.627363][T11108] journal_seq:    13
[  242.627363][T11108] usage: type=inodes v=8
[  242.627363][T11108] usage: type=key_version v=2
[  242.627363][T11108] usage: type=reserved v=0
[  242.627363][T11108] usage: type=reserved v=0
[  242.627363][T11108] usage: type=reserved v=0
[  242.627363][T11108] usage: type=reserved v=0
[  242.627363][T11108] data_usage: btree: 1/1 [0]=2816
[  242.627363][T11108] data_usage: journal: 1/1 [0]=0
[  242.627363][T11108] data_usage: user: 1/1 [0]=16
[  242.627363][T11108] datetime: 0
[  242.627363][T11108] clock: read=0
[  242.627363][T11108] clock: write=1280
[  242.627363][T11108] dev_usage: dev=1179915  
[  242.627363][T11108] 
[  242.627764][T11112] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  242.665310][T11108] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  242.670200][T11112] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  242.731191][T10037] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  243.363542][ T5238] Bluetooth: hci3: command tx timeout
[  243.821654][T11142] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1876'.
[  243.826904][T11142] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  243.996523][T11155] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1882'.
[  244.100727][T11163] loop6: detected capacity change from 0 to 1024
[  244.104301][T11163] EXT4-fs: Ignoring removed nobh option
[  244.106526][T11163] EXT4-fs: Ignoring removed bh option
[  244.121221][T11163] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  244.250655][T10037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  244.355538][T11177] loop6: detected capacity change from 0 to 2048
[  244.371691][T11180] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  244.406822][T11177] NILFS error (device loop6): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=80, inode=15, rec_len=2, name_len=0
[  244.424071][T11177] Remounting filesystem read-only
[  244.427295][T11177] NILFS error (device loop6): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=80, inode=15, rec_len=2, name_len=0
[  244.443458][T11177] NILFS error (device loop6): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=80, inode=15, rec_len=2, name_len=0
[  244.454519][T11177] NILFS error (device loop6): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=80, inode=15, rec_len=2, name_len=0
[  244.466204][T11177] NILFS error (device loop6): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=80, inode=15, rec_len=2, name_len=0
[  244.472817][T11177] NILFS error (device loop6): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=80, inode=15, rec_len=2, name_len=0
[  244.545332][T11188] loop7: detected capacity change from 0 to 256
[  245.443278][ T5238] Bluetooth: hci3: command tx timeout
[  245.750320][T11203] loop6: detected capacity change from 0 to 136
[  246.260443][T11212] loop6: detected capacity change from 0 to 256
[  246.288902][T11212] FAT-fs (loop6): Directory bread(block 1285) failed
[  247.484277][    T9] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  247.536539][ T5238] Bluetooth: hci3: command tx timeout
[  247.633629][    T9] usb 7-1: Using ep0 maxpacket: 8
[  247.641568][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  247.646840][    T9] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x2 has invalid maxpacket 166, setting to 64
[  247.650843][    T9] usb 7-1: config 0 interface 0 has no altsetting 0
[  247.658508][    T9] usb 7-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  247.662049][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.665531][    T9] usb 7-1: Product: syz
[  247.667230][    T9] usb 7-1: Manufacturer: syz
[  247.669080][    T9] usb 7-1: SerialNumber: syz
[  247.676133][    T9] usb 7-1: config 0 descriptor??
[  247.988422][    T9] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 found
[  248.003977][    T9] snd_usb_toneport 7-1:0.0: Line 6 TonePort UX2 now disconnected
[  248.012575][    T9] snd_usb_toneport 7-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  248.034613][ T5950] libceph: connect (1)[c::]:6789 error -101
[  248.037687][ T5950] libceph: mon0 (1)[c::]:6789 connect error
[  248.208186][ T5950] usb 7-1: USB disconnect, device number 9
[  248.296870][   T24] libceph: connect (1)[c::]:6789 error -101
[  248.299509][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  248.361129][T11224] ceph: No mds server is up or the cluster is laggy
[  249.426335][T11248] loop6: detected capacity change from 0 to 32768
[  249.449644][T11248] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  249.462683][T11248] (syz.6.1919,11248,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  249.470110][T11248] ocfs2: Unmounting device (7,6) on (node local)
[  249.723409][T11258] loop6: detected capacity change from 0 to 1024
[  249.732816][T11258] hfsplus: bad catalog entry type
[  249.750125][  T745] hfsplus: b-tree write err: -5, ino 4
[  249.892766][T11263] loop7: detected capacity change from 0 to 8192
[  249.916828][T11263] FAT-fs (loop7): error, corrupted directory (invalid entries)
[  249.920185][T11263] FAT-fs (loop7): Filesystem has been set read-only
[  250.272127][T11292] loop7: detected capacity change from 0 to 1764
[  251.444039][T11308] loop6: detected capacity change from 0 to 256
[  251.559313][T11318] netlink: 'syz.7.1949': attribute type 3 has an invalid length.
[  251.562526][T11318] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1949'.
[  251.669268][T11324] loop6: detected capacity change from 0 to 512
[  251.686335][T11324] EXT4-fs error (device loop6): ext4_get_branch:178: inode #11: block 4294967295: comm syz.6.1952: invalid block
[  251.692810][T11324] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1952: invalid indirect mapped block 4294967295 (level 1)
[  251.700029][T11324] EXT4-fs error (device loop6): ext4_free_branches:1023: inode #11: comm syz.6.1952: invalid indirect mapped block 4294967295 (level 1)
[  251.706221][T11324] EXT4-fs (loop6): 2 truncates cleaned up
[  251.709988][T11324] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  251.721549][T11324] EXT4-fs error (device loop6): empty_inline_dir:1760: inode #12: block 7: comm syz.6.1952: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0
[  251.733973][T11324] EXT4-fs warning (device loop6): empty_inline_dir:1767: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[  251.759999][T10037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.812295][T11328] loop6: detected capacity change from 0 to 128
[  251.817462][T11328] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  251.853448][    T9] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  251.955869][T11332] loop6: detected capacity change from 0 to 4096
[  251.977152][T11333] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  252.016530][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.033048][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  252.037005][    T9] usb 8-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[  252.040592][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.048429][    T9] usb 8-1: config 0 descriptor??
[  252.606138][T11351] wireguard0: entered promiscuous mode
[  252.608431][T11351] wireguard0: entered allmulticast mode
[  252.759259][   T33] kauditd_printk_skb: 16 callbacks suppressed
[  252.759274][   T33] audit: type=1326 audit(1755070403.326:195): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.6.1965" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc171f8ebe9 code=0x7ffc0000
[  252.771170][   T33] audit: type=1326 audit(1755070403.346:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.6.1965" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc171f8ebe9 code=0x7ffc0000
[  252.793057][   T33] audit: type=1326 audit(1755070403.356:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.6.1965" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fc171f8ebe9 code=0x7ffc0000
[  252.812718][   T33] audit: type=1326 audit(1755070403.356:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.6.1965" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc171f8ebe9 code=0x7ffc0000
[  252.825320][   T33] audit: type=1326 audit(1755070403.356:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.6.1965" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc171f8ebe9 code=0x7ffc0000
[  252.832048][   T33] audit: type=1326 audit(1755070403.356:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.6.1965" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fc171f8ebe9 code=0x7ffc0000
[  252.864100][    T9] hid-led 0003:27B8:01ED.000C: probe with driver hid-led failed with error -71
[  252.870143][    T9] usb 8-1: USB disconnect, device number 2
[  252.957094][   T33] audit: type=1326 audit(1755070403.526:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.6.1965" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc171f8ebe9 code=0x7ffc0000
[  252.964196][   T33] audit: type=1326 audit(1755070403.526:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.6.1965" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc171f8ebe9 code=0x7ffc0000
[  252.992623][   T33] audit: type=1326 audit(1755070403.556:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.6.1965" exe="/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7fc171f8ebe9 code=0x7ffc0000
[  253.053257][   T33] audit: type=1326 audit(1755070403.616:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11353 comm="syz.6.1965" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc171f8ebe9 code=0x7ffc0000
[  253.558488][T11371] ip6erspan0: entered promiscuous mode
[  254.516398][T11386] loop6: detected capacity change from 0 to 2048
[  254.522117][T11386] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  254.628044][T11390] loop6: detected capacity change from 0 to 512
[  254.635649][T11390] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.1981: corrupted in-inode xattr: invalid ea_ino
[  254.645919][T11390] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.1981: couldn't read orphan inode 15 (err -117)
[  254.653910][T11390] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  254.690451][T10037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  255.103090][   T47] usb 8-1: new full-speed USB device number 3 using dummy_hcd
[  255.163531][   T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  255.167955][   T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  255.172578][   T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  255.176989][   T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  255.180334][   T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  255.193080][ T5950] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  255.268735][   T47] usb 8-1: config 0 has an invalid interface number: 133 but max is 0
[  255.271549][   T47] usb 8-1: config 0 has no interface number 0
[  255.277705][   T47] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  255.280893][   T47] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.283789][   T47] usb 8-1: Product: syz
[  255.285556][   T47] usb 8-1: Manufacturer: syz
[  255.287103][   T47] usb 8-1: SerialNumber: syz
[  255.290503][   T47] usb 8-1: config 0 descriptor??
[  255.309948][T11418] chnl_net:caif_netlink_parms(): no params data found
[  255.342920][ T5950] usb 7-1: Using ep0 maxpacket: 32
[  255.346649][ T5950] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  255.353600][ T5950] usb 7-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  255.362136][T11418] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.362245][ T5950] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.364754][T11418] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.367847][ T5950] usb 7-1: Product: syz
[  255.369953][T11418] bridge_slave_0: entered allmulticast mode
[  255.371955][ T5950] usb 7-1: Manufacturer: syz
[  255.375461][T11418] bridge_slave_0: entered promiscuous mode
[  255.378542][ T5950] usb 7-1: SerialNumber: syz
[  255.379051][T11418] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.382759][T11418] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.385374][T11418] bridge_slave_1: entered allmulticast mode
[  255.386095][ T5950] usb 7-1: config 0 descriptor??
[  255.388067][T11418] bridge_slave_1: entered promiscuous mode
[  255.392431][ T5950] usb 7-1: bad CDC descriptors
[  255.401618][ T5950] usb 7-1: unsupported MDLM descriptors
[  255.411635][T11418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  255.417635][T11418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  255.437450][T11418] team0: Port device team_slave_0 added
[  255.440712][T11418] team0: Port device team_slave_1 added
[  255.447478][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  255.449467][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  255.473571][T11418] batman_adv: batadv0: Adding interface: batadv_slave_0
[  255.475755][T11418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.484146][T11418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  255.489035][T11418] batman_adv: batadv0: Adding interface: batadv_slave_1
[  255.491202][T11418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  255.499169][T11418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  255.530321][T11418] hsr_slave_0: entered promiscuous mode
[  255.532634][T11418] hsr_slave_1: entered promiscuous mode
[  255.537379][T11418] debugfs: 'hsr0' already exists in 'hsr'
[  255.539169][T11418] Cannot create hsr debugfs directory
[  255.598207][ T5950] usb 7-1: USB disconnect, device number 10
[  255.673778][T11418] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  255.678024][T11418] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  255.682411][T11418] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  255.687197][T11418] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  255.711056][T11418] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.713402][T11418] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.715753][T11418] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.717992][T11418] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.759187][T11418] 8021q: adding VLAN 0 to HW filter on device bond0
[  255.775914][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  255.781403][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  255.794869][T11418] 8021q: adding VLAN 0 to HW filter on device team0
[  255.805260][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  255.807858][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  255.819671][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  255.821973][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  255.859209][   T47] keyspan 8-1:0.133: Keyspan 1 port adapter converter detected
[  255.872062][   T47] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 81
[  255.879649][   T47] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 1
[  255.882285][   T47] keyspan 8-1:0.133: found no endpoint descriptor for endpoint 2
[  255.893595][   T47] usb 8-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  255.993094][T11418] 8021q: adding VLAN 0 to HW filter on device batadv0
[  256.108297][ T5950] usb 8-1: USB disconnect, device number 3
[  256.120944][ T5950] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  256.131701][T11418] veth0_vlan: entered promiscuous mode
[  256.132784][ T5950] keyspan 8-1:0.133: device disconnected
[  256.150447][T11418] veth1_vlan: entered promiscuous mode
[  256.169562][T11418] veth0_macvtap: entered promiscuous mode
[  256.175545][T11418] veth1_macvtap: entered promiscuous mode
[  256.186742][T11418] batman_adv: batadv0: Interface activated: batadv_slave_0
[  256.196875][T11418] batman_adv: batadv0: Interface activated: batadv_slave_1
[  256.207799][ T5880] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  256.215804][ T5880] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  256.224271][ T5880] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  256.237846][ T5880] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  256.310874][  T745] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.321687][  T745] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.343074][ T1101] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  256.345635][ T1101] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  256.454028][   T47] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  256.605226][   T47] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.609146][   T47] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2
[  256.612596][   T47] usb 7-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  256.635862][   T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  256.647750][   T47] usb 7-1: config 0 descriptor??
[  256.654805][   T47] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  256.658155][   T47] dvb-usb: bulk message failed: -22 (3/0)
[  256.667673][   T47] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  256.671411][   T47] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  256.679564][   T47] usb 7-1: media controller created
[  256.691426][   T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  256.702553][   T47] dvb-usb: bulk message failed: -22 (6/0)
[  256.711211][   T47] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  256.718189][   T47] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.6/usb7/7-1/input/input20
[  256.728437][   T47] dvb-usb: schedule remote query interval to 150 msecs.
[  256.731186][   T47] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  256.800391][T11461] loop8: detected capacity change from 0 to 32768
[  256.831209][T11461] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  257.179521][   T47] dvb-usb: bulk message failed: -22 (1/0)
[  257.183548][   T47] dvb-usb: error while querying for an remote control event.
[  257.210839][T11418] ocfs2: Unmounting device (7,8) on (node local)
[  257.213793][ T5238] Bluetooth: hci4: command tx timeout
[  257.304769][    T9] usb 7-1: USB disconnect, device number 11
[  257.321061][    T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  257.369369][T11471] netlink: 204 bytes leftover after parsing attributes in process `syz.8.2004'.
[  258.067388][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2010'.
[  258.076223][T11484] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2010'.
[  258.426363][T11498] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2017'.
[  258.683840][ T5917] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  258.843075][ T5917] usb 8-1: Using ep0 maxpacket: 8
[  258.851208][ T5917] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  258.860545][ T5917] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  258.867502][ T5917] usb 8-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b
[  258.876359][ T5917] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.883722][ T5917] usb 8-1: config 0 descriptor??
[  258.890050][T11510] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0)
[  258.896659][ T5917] hso 8-1:0.0: Can't find BULK IN endpoint
[  259.035286][T11515] loop8: detected capacity change from 0 to 128
[  259.101726][T11517] loop6: detected capacity change from 0 to 256
[  259.105547][ T5950] usb 8-1: USB disconnect, device number 4
[  259.114542][T11518] bio_check_eod: 84 callbacks suppressed
[  259.114554][T11518] syz.8.2024: attempt to access beyond end of device
[  259.114554][T11518] loop8: rw=2049, sector=153, nr_sectors = 8 limit=128
[  259.130280][T11517] FAT-fs (loop6): Directory bread(block 64) failed
[  259.132715][T11518] syz.8.2024: attempt to access beyond end of device
[  259.132715][T11518] loop8: rw=2049, sector=169, nr_sectors = 8 limit=128
[  259.137705][T11517] FAT-fs (loop6): Directory bread(block 65) failed
[  259.139896][T11517] FAT-fs (loop6): Directory bread(block 66) failed
[  259.142114][T11517] FAT-fs (loop6): Directory bread(block 67) failed
[  259.144749][T11518] syz.8.2024: attempt to access beyond end of device
[  259.144749][T11518] loop8: rw=2049, sector=185, nr_sectors = 8 limit=128
[  259.144767][T11517] FAT-fs (loop6): Directory bread(block 68) failed
[  259.152369][T11518] syz.8.2024: attempt to access beyond end of device
[  259.152369][T11518] loop8: rw=2049, sector=201, nr_sectors = 8 limit=128
[  259.154921][T11517] FAT-fs (loop6): Directory bread(block 69) failed
[  259.162644][T11518] syz.8.2024: attempt to access beyond end of device
[  259.162644][T11518] loop8: rw=2049, sector=217, nr_sectors = 8 limit=128
[  259.165144][T11517] FAT-fs (loop6): Directory bread(block 70) failed
[  259.175490][T11517] FAT-fs (loop6): Directory bread(block 71) failed
[  259.176645][T11518] syz.8.2024: attempt to access beyond end of device
[  259.176645][T11518] loop8: rw=2049, sector=233, nr_sectors = 8 limit=128
[  259.178056][T11517] FAT-fs (loop6): Directory bread(block 72) failed
[  259.182505][T11518] syz.8.2024: attempt to access beyond end of device
[  259.182505][T11518] loop8: rw=2049, sector=249, nr_sectors = 8 limit=128
[  259.191630][T11518] syz.8.2024: attempt to access beyond end of device
[  259.191630][T11518] loop8: rw=2049, sector=265, nr_sectors = 8 limit=128
[  259.196473][T11518] syz.8.2024: attempt to access beyond end of device
[  259.196473][T11518] loop8: rw=2049, sector=281, nr_sectors = 8 limit=128
[  259.196831][T11517] FAT-fs (loop6): Directory bread(block 73) failed
[  259.200764][T11518] syz.8.2024: attempt to access beyond end of device
[  259.200764][T11518] loop8: rw=2049, sector=297, nr_sectors = 8 limit=128
[  259.286082][ T5238] Bluetooth: hci4: command tx timeout
[  259.513918][T11543] netlink: 88 bytes leftover after parsing attributes in process `syz.8.2038'.
[  259.666457][T11555] loop8: detected capacity change from 0 to 512
[  259.717841][T11555] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  259.736242][T11555] ext4 filesystem being mounted at /21/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  259.750998][T11555] EXT4-fs (loop8): shut down requested (0)
[  259.826242][T11566] loop6: detected capacity change from 0 to 1024
[  259.829494][T11566] EXT4-fs: Ignoring removed nomblk_io_submit option
[  260.305384][T11566] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.338806][T10037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.426067][T11573] loop6: detected capacity change from 0 to 2048
[  260.431978][T11573] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  260.546905][T11418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  260.554424][T11468] __quota_error: 1 callbacks suppressed
[  260.554437][T11468] Quota error (device loop8): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  260.626999][T11577] loop7: detected capacity change from 0 to 1024
[  260.632073][T11577] EXT4-fs: Ignoring removed orlov option
[  260.636158][T11577] EXT4-fs: Ignoring removed nomblk_io_submit option
[  260.662095][T11577] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  260.878763][T10995] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.373315][ T5238] Bluetooth: hci4: command tx timeout
[  262.176003][T11612] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2065'.
[  262.888682][T11636] loop6: detected capacity change from 0 to 1024
[  262.896927][T11636] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  262.900857][T11636] ext4 filesystem being mounted at /200/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  263.081092][T10037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.171649][T11653] loop8: detected capacity change from 0 to 512
[  263.175704][T11653] EXT4-fs: Ignoring removed i_version option
[  263.178609][T11653] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode
[  263.196705][T11653] EXT4-fs (loop8): 1 truncate cleaned up
[  263.202531][T11653] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.470449][ T5238] Bluetooth: hci4: command tx timeout
[  264.067437][T11418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.445446][T11690] loop8: detected capacity change from 0 to 32768
[  264.486120][T11690] ocfs2: Mounting device (7,8) on (node local, slot 0) with ordered data mode.
[  264.621503][T11418] ocfs2: Unmounting device (7,8) on (node local)
[  265.128768][T11715] loop7: detected capacity change from 0 to 512
[  265.160054][T11715] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.195274][T11715] ext4 filesystem being mounted at /95/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  265.408472][T10995] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.519804][T11724] loop6: detected capacity change from 0 to 764
[  265.532822][T11726] loop7: detected capacity change from 0 to 1024
[  265.541081][T11726] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  265.581137][T11724] Symlink component flag not implemented
[  265.587649][T11724] Symlink component flag not implemented
[  265.601863][T11724] Symlink component flag not implemented (128)
[  265.616356][T11724] Symlink component flag not implemented (122)
[  265.656880][T11728] loop7: detected capacity change from 0 to 512
[  265.737603][T11728] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.747649][T11728] ext4 filesystem being mounted at /97/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  265.886008][T10995] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.411375][T11735] loop6: detected capacity change from 0 to 131072
[  266.415286][T11735] F2FS-fs (loop6): Test dummy encryption mode enabled
[  266.421974][T11735] F2FS-fs (loop6): invalid crc value
[  266.446973][T11739] vhci_hcd vhci_hcd.0: pdev(7) rhport(0) sockfd(3)
[  266.449448][T11739] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  266.457398][T11735] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  266.459615][T11739] vhci_hcd vhci_hcd.0: Device attached
[  266.467114][T11735] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  266.536992][T11740] vhci_hcd: connection closed
[  266.544394][   T33] audit: type=1800 audit(1755070417.116:206): pid=11735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2112" name="file1" dev="loop6" ino=10 res=0 errno=0
[  266.545086][ T5880] vhci_hcd: stop threads
[  266.566219][ T5880] vhci_hcd: release socket
[  266.570769][ T5880] vhci_hcd: disconnect device
[  266.633057][ T5917] vhci_hcd: vhci_device speed not set
[  267.093128][T11744] netlink: 100 bytes leftover after parsing attributes in process `syz.8.2115'.
[  267.130930][T11748] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2117'.
[  268.790257][ T5238] Bluetooth: Wrong link type (-57)
[  268.919693][T11783] loop8: detected capacity change from 0 to 32768
[  268.924560][T11783] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2131 (11783)
[  269.071392][T11783] BTRFS info (device loop8): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  269.074804][T11783] BTRFS info (device loop8): using crc32c (crc32c-lib) checksum algorithm
[  269.077613][T11783] BTRFS info (device loop8): disk space caching is enabled
[  269.080484][T11783] BTRFS warning (device loop8): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  269.798291][T11783] BTRFS info (device loop8): rebuilding free space tree
[  269.862471][T11783] BTRFS info (device loop8): disabling free space tree
[  269.864860][T11783] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  269.867973][T11783] BTRFS info (device loop8): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  269.886405][T11822] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2140'.
[  269.889279][T11822] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2140'.
[  269.919388][T11824] netlink: 'syz.6.2141': attribute type 1 has an invalid length.
[  269.922576][T11824] netlink: 168864 bytes leftover after parsing attributes in process `syz.6.2141'.
[  270.007002][T11825] BTRFS info (device loop8 state M): max_inline set to 4096
[  270.161573][T11418] BTRFS info (device loop8): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  270.226180][T11835] loop7: detected capacity change from 0 to 512
[  270.229859][T11835] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem
[  270.247601][T11835] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102]
[  270.254538][T11835] EXT4-fs error (device loop7): ext4_iget_extra_inode:5104: inode #15: comm syz.7.2147: corrupted in-inode xattr: e_value size too large
[  270.284456][T11835] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.2147: couldn't read orphan inode 15 (err -117)
[  270.290186][T11835] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.051557][T11854] loop8: detected capacity change from 0 to 512
[  271.054986][T11854] EXT4-fs: Ignoring removed oldalloc option
[  271.072022][T11854] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.2152: Parent and EA inode have the same ino 15
[  271.080136][T11854] EXT4-fs error (device loop8): ext4_xattr_inode_iget:433: comm syz.8.2152: Parent and EA inode have the same ino 15
[  271.088199][T11854] EXT4-fs (loop8): 1 orphan inode deleted
[  271.090975][T11854] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.128687][T11418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.217550][T10995] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.673673][T11873] openvswitch: netlink: Message has 1 unknown bytes.
[  271.745143][T11879] vlan1: entered allmulticast mode
[  271.747120][T11879] veth0_vlan: entered allmulticast mode
[  271.755461][   T33] audit: type=1326 audit(1755070422.326:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.7.2163" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f4f8ebe9 code=0x7ffc0000
[  271.773062][   T33] audit: type=1326 audit(1755070422.326:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.7.2163" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f4f8ebe9 code=0x7ffc0000
[  271.780764][   T33] audit: type=1326 audit(1755070422.326:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.7.2163" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fa7f4f8ebe9 code=0x7ffc0000
[  271.789991][   T33] audit: type=1326 audit(1755070422.326:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.7.2163" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f4f8ebe9 code=0x7ffc0000
[  271.797634][   T33] audit: type=1326 audit(1755070422.326:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.7.2163" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f4f8ebe9 code=0x7ffc0000
[  271.805151][   T33] audit: type=1326 audit(1755070422.326:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.7.2163" exe="/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7fa7f4f8ebe9 code=0x7ffc0000
[  271.812228][   T33] audit: type=1326 audit(1755070422.326:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.7.2163" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f4f8ebe9 code=0x7ffc0000
[  271.819436][   T33] audit: type=1326 audit(1755070422.326:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.7.2163" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f4f8ebe9 code=0x7ffc0000
[  271.827018][   T33] audit: type=1326 audit(1755070422.326:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.7.2163" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa7f4f8ebe9 code=0x7ffc0000
[  271.835828][   T33] audit: type=1326 audit(1755070422.326:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11880 comm="syz.7.2163" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa7f4f8ebe9 code=0x7ffc0000
[  271.909121][T11889] loop6: detected capacity change from 0 to 1024
[  271.914142][T11889] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  271.917807][T11889] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869)
[  271.921420][T11889] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  271.921832][T11891] loop7: detected capacity change from 0 to 512
[  271.927018][T11889] EXT4-fs error (device loop6): ext4_ext_check_inode:523: inode #3: comm syz.6.2167: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  271.928654][T11891] EXT4-fs: Ignoring removed nomblk_io_submit option
[  271.933815][T11889] EXT4-fs (loop6): no journal found
[  271.938189][T11889] EXT4-fs (loop6): can't get journal size
[  271.942026][T11889] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  271.942694][T11891] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  271.952745][T11891] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01d, mo2=0102]
[  271.960740][T11891] EXT4-fs (loop7): couldn't mount RDWR because of unsupported optional features (80)
[  271.964726][T11891] EXT4-fs (loop7): Skipping orphan cleanup due to unknown ROCOMPAT features
[  271.969593][T10037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.970281][T11891] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  272.000887][T11891] EXT4-fs warning (device loop7): dx_probe:861: inode #2: comm syz.7.2168: dx entry: limit 65535 != root limit 120
[  272.006410][T11891] EXT4-fs warning (device loop7): dx_probe:934: inode #2: comm syz.7.2168: Corrupt directory, running e2fsck is recommended
[  272.011412][T11891] EXT4-fs error (device loop7): ext4_readdir:264: inode #2: block 3: comm syz.7.2168: path /122/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0
[  272.046514][T10995] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.220254][T11910] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2176'.
[  272.480639][ T5880] netdevsim netdevsim8 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  272.485069][ T5880] netdevsim netdevsim8 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  272.489250][ T5880] netdevsim netdevsim8 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  272.493591][ T5880] netdevsim netdevsim8 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  273.323639][T11933] loop8: detected capacity change from 0 to 1024
[  273.387442][T11933] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.391519][T11933] ext4 filesystem being mounted at /66/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  273.570251][T11418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.570349][T11938] loop7: detected capacity change from 0 to 2048
[  273.616817][T11938] EXT4-fs (loop7): cluster size (1024) smaller than block size (2048)
[  273.705177][T11944] loop6: detected capacity change from 0 to 1024
[  273.725313][T11944] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.745328][T11944] EXT4-fs error (device loop6): __ext4_remount:6736: comm syz.6.2190: Abort forced by user
[  273.754815][T11944] EXT4-fs (loop6): Remounting filesystem read-only
[  273.757276][T11944] EXT4-fs (loop6): re-mounted 00000000-0000-0000-0000-000000000000.
[  273.787456][T10037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.889306][T11942] loop7: detected capacity change from 0 to 32768
[  273.899297][T11942] jfs_strtoUCS: char2uni returned -22.
[  273.901463][T11942] charset = cp936, char = 0xd4
[  274.072985][   T95] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  274.323205][   T55] Bluetooth: hci4: command 0x0405 tx timeout
[  274.349668][T11975] overlay: filesystem on ./bus not supported
[  274.983122][   T95] usb 9-1: Using ep0 maxpacket: 8
[  274.988828][   T95] usb 9-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  274.991759][   T95] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.995379][   T95] usb 9-1: Product: syz
[  274.996737][   T95] usb 9-1: Manufacturer: syz
[  274.998225][   T95] usb 9-1: SerialNumber: syz
[  275.001164][   T95] usb 9-1: config 0 descriptor??
[  275.006160][   T95] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  275.008912][   T95] usb 9-1: setting power ON
[  275.010393][   T95] dvb-usb: bulk message failed: -22 (2/0)
[  275.014169][   T95] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  275.018462][   T95] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  275.021185][   T95] usb 9-1: media controller created
[  275.034628][   T95] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  275.045203][   T95] usb 9-1: selecting invalid altsetting 6
[  275.047445][   T95] usb 9-1: digital interface selection failed (-22)
[  275.049450][   T95] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  275.057071][   T95] usb 9-1: setting power OFF
[  275.060056][   T95] dvb-usb: bulk message failed: -22 (2/0)
[  275.062037][   T95] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  275.065052][   T95] (NULL device *): no alternate interface
[  275.085356][   T95] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  275.215631][  T795] usb 9-1: USB disconnect, device number 2
[  275.226011][T11995] loop6: detected capacity change from 0 to 2048
[  275.228799][T11995] udf: Unexpected value for 'undelete'
[  275.651967][T12008] loop7: detected capacity change from 0 to 512
[  275.655496][T12008] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  275.665991][T12008] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a843c018, mo2=0002]
[  275.668700][T12008] System zones: 0-2, 18-18, 34-34
[  275.675080][T12008] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  275.679156][T12008] ext4 filesystem being mounted at /141/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  276.206546][T12016] loop8: detected capacity change from 0 to 1024
[  276.533100][    T9] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  276.571894][T10995] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.592337][   T95] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  276.699852][T12029] loop7: detected capacity change from 0 to 1024
[  276.703017][    T9] usb 7-1: Using ep0 maxpacket: 8
[  276.706890][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  276.711581][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  276.730601][    T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  276.736915][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  276.741470][    T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  276.748420][    T9] usb 7-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  276.751928][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.763605][   T95] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  276.767952][   T95] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  276.773871][    T9] usb 7-1: config 0 descriptor??
[  276.776186][   T95] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7
[  276.781399][   T95] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  276.789998][ T2274] hfsplus: b-tree write err: -5, ino 4
[  276.800757][ T5238] Bluetooth: hci5: urb ffff888121786900 submission failed (90)
[  276.809520][   T95] usb 9-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  276.817998][   T95] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  276.821161][   T95] usb 9-1: Product: syz
[  276.823490][   T95] usb 9-1: Manufacturer: syz
[  276.825449][   T95] usb 9-1: SerialNumber: syz
[  276.829622][   T95] usb 9-1: config 0 descriptor??
[  276.993778][    T9] usb 7-1: USB disconnect, device number 12
[  277.039127][   T95] adutux 9-1:0.0: ADU208  now attached to /dev/usb/adutux0
[  277.049208][   T95] usb 9-1: USB disconnect, device number 3
[  277.059988][T12031] netlink: 1347 bytes leftover after parsing attributes in process `syz.7.2224'.
[  277.384411][T12039] netlink: 'syz.7.2227': attribute type 4 has an invalid length.
[  277.539823][T12049] loop6: detected capacity change from 0 to 512
[  277.572780][T12049] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  277.581285][T12049] ext4 filesystem being mounted at /249/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  277.595375][T12055] unsupported nla_type 52263
[  277.598126][T12049] EXT4-fs error (device loop6): ext4_xattr_block_find:1869: inode #15: comm syz.6.2232: corrupted xattr block 19: overlapping e_value 
[  277.605055][T12049] EXT4-fs (loop6): Remounting filesystem read-only
[  277.628398][T10037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  277.700483][T12063] vlan2: entered allmulticast mode
[  277.709558][T12063] netdevsim netdevsim7 netdevsim0: entered allmulticast mode
[  277.744671][T12064] loop6: detected capacity change from 0 to 8
[  277.751209][T12064] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  278.473134][T12059] Bluetooth: hci0: Opcode 0x0401 failed: -4
[  279.321008][T12083] loop7: detected capacity change from 0 to 32768
[  279.322586][T12081] loop6: detected capacity change from 0 to 32768
[  279.326879][T12083] 
[  279.326879][T12083]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  279.326879][T12083] 
[  279.338993][T12081] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  279.345869][T10995] 
[  279.345869][T10995]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  279.345869][T10995] 
[  279.351970][T10995] 
[  279.351970][T10995]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  279.351970][T10995] 
[  279.357142][T12100] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2250'.
[  279.363892][T12091] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2250'.
[  279.391746][T12100] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2250'.
[  279.395715][T12081] XFS (loop6): Ending clean mount
[  279.400556][T12081] XFS (loop6): Quotacheck needed: Please wait.
[  279.462079][T12081] XFS (loop6): Quotacheck: Done.
[  279.616317][T10037] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  279.989652][T12110] loop7: detected capacity change from 0 to 32768
[  280.025221][T12110] JBD2: Ignoring recovery information on journal
[  280.197433][T12110] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  280.318283][T12123] netlink: 32 bytes leftover after parsing attributes in process `syz.6.2259'.
[  280.322728][T12123] tipc: Invalid UDP bearer configuration
[  280.337720][T12123] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  280.366590][T10995] ocfs2: Unmounting device (7,7) on (node local)
[  280.750123][T12130] loop7: detected capacity change from 0 to 512
[  280.757364][T12130] EXT4-fs: Ignoring removed mblk_io_submit option
[  280.762173][T12130] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  280.768936][T12130] EXT4-fs (loop7): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  280.776657][T12130] EXT4-fs (loop7): revision level too high, forcing read-only mode
[  280.780608][T12130] EXT4-fs (loop7): orphan cleanup on readonly fs
[  280.816497][T12130] EXT4-fs error (device loop7): ext4_read_block_bitmap_nowait:483: comm syz.7.2263: Invalid block bitmap block 0 in block_group 0
[  280.856468][T12130] EXT4-fs (loop7): Remounting filesystem read-only
[  280.859996][T12130] Quota error (device loop7): write_blk: dquota write failed
[  280.863278][T12130] Quota error (device loop7): write_blk: dquota write failed
[  280.867213][T12130] Quota error (device loop7): qtree_write_dquot: Error -28 occurred while creating quota
[  280.871179][T12130] EXT4-fs (loop7): 1 orphan inode deleted
[  280.878540][T12130] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  280.918664][T10995] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  281.059987][T12149] loop7: detected capacity change from 0 to 1024
[  281.082034][T12149] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  281.093523][T12149] ext4 filesystem being mounted at /165/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  281.115510][   T33] audit: type=1800 audit(1755070431.686:217): pid=12149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.2272" name="file1" dev="loop7" ino=15 res=0 errno=0
[  281.124843][T12151] loop8: detected capacity change from 0 to 4096
[  281.136738][T12149] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 1: comm syz.7.2272: lblock 1 mapped to illegal pblock 1 (length 3)
[  281.144605][T12151] ntfs3(loop8): ino=3, ntfs_set_state failed, -22.
[  281.147215][T12151] ntfs3(loop8): Failed to initialize $Extend/$ObjId.
[  281.151468][T12149] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: block 3: comm syz.7.2272: lblock 3 mapped to illegal pblock 3 (length 1)
[  281.160338][T12149] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 117
[  281.168577][T12149] EXT4-fs (loop7): This should not happen!! Data will be lost
[  281.168577][T12149] 
[  281.250653][  T784] ntfs3(loop8): ino=3, ntfs3_write_inode failed, -22.
[  281.254895][T11418] ntfs3(loop8): ino=3, ntfs_set_state failed, -22.
[  281.257359][T11418] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[  281.259715][T11418] ntfs3(loop8): ino=3, ntfs_set_state failed, -22.
[  281.268786][ T1101] ntfs3(loop8): ino=3, ntfs3_write_inode failed, -22.
[  281.309410][T12166] loop6: detected capacity change from 0 to 1024
[  281.391739][T12172] netlink: 'syz.8.2281': attribute type 16 has an invalid length.
[  281.396223][T12172] netlink: 'syz.8.2281': attribute type 17 has an invalid length.
[  281.830936][   T53] EXT4-fs error (device loop7): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  281.844606][   T53] EXT4-fs (loop7): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 36 with error 28
[  281.848382][   T53] EXT4-fs (loop7): This should not happen!! Data will be lost
[  281.848382][   T53] 
[  281.852159][   T53] EXT4-fs (loop7): Total free blocks count 0
[  281.857342][   T53] EXT4-fs (loop7): Free/Dirty block details
[  281.859221][   T53] EXT4-fs (loop7): free_blocks=4293918720
[  281.861032][   T53] EXT4-fs (loop7): dirty_blocks=48
[  281.864226][   T53] EXT4-fs (loop7): Block reservation details
[  282.475942][T12205] loop6: detected capacity change from 0 to 2048
[  282.488062][T12205] UDF-fs: warning (device loop6): udf_load_vrs: No anchor found
[  282.491213][T12205] UDF-fs: Scanning with blocksize 512 failed
[  282.503631][T12205] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  283.607557][T12234] loop6: detected capacity change from 0 to 1024
[  283.628495][T12234] EXT4-fs: Ignoring removed orlov option
[  283.638255][T12234] EXT4-fs (loop6): Test dummy encryption mode enabled
[  283.670980][T12234] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.671830][T12240] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2307'.
[  283.682142][T12240] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2307'.
[  283.734420][T10037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.766464][T12244] netlink: 10 bytes leftover after parsing attributes in process `syz.8.2310'.
[  283.805168][T12250] loop8: detected capacity change from 0 to 256
[  283.807945][T12250] exfat: Deprecated parameter 'utf8'
[  283.822161][T12250] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  285.065270][T12272] loop8: detected capacity change from 0 to 512
[  285.086586][T12272] EXT4-fs error (device loop8): ext4_orphan_get:1392: inode #15: comm syz.8.2321: iget: bad extended attribute block 1
[  285.092777][T12272] EXT4-fs error (device loop8): ext4_orphan_get:1397: comm syz.8.2321: couldn't read orphan inode 15 (err -117)
[  285.106813][T12272] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  285.207927][T11418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.287307][T12277] netlink: 'syz.8.2322': attribute type 3 has an invalid length.
[  285.427354][T12270] loop6: detected capacity change from 0 to 32768
[  285.451437][T12270] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  285.505478][T12270] XFS (loop6): Ending clean mount
[  285.679341][T10037] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  285.861687][T12296] loop8: detected capacity change from 0 to 512
[  286.013948][T12296] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  286.021766][T12296] ext4 filesystem being mounted at /109/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  286.104326][T12296] EXT4-fs error (device loop8): ext4_ext_check_inode:523: inode #2: comm syz.8.2328: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  286.123066][T12296] EXT4-fs (loop8): Remounting filesystem read-only
[  286.221198][T11418] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  286.652601][T12313] libceph: resolve 'R' (ret=-3): failed
[  287.742627][T12336] geneve2: entered promiscuous mode
[  287.751807][T12336] geneve2: entered allmulticast mode
[  288.071872][T12356] overlay: Bad value for 'uuid'
[  289.088704][T12383] tipc: Failed to remove unknown binding: 66,1,1/0:3515171453/3515171455
[  289.092339][T12383] tipc: Failed to remove unknown binding: 66,1,1/0:3515171453/3515171455
[  289.236627][T12385] loop6: detected capacity change from 0 to 4096
[  289.271801][T12385] ntfs3(loop6): ino=b, mi_enum_attr
[  289.279259][T12385] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  289.289561][T12385] ntfs3(loop6): Failed to load $Extend (-22).
[  289.291912][T12385] ntfs3(loop6): Failed to initialize $Extend.
[  289.442536][T12401] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2377'.
[  290.312442][T12446] loop7: detected capacity change from 0 to 1024
[  290.522480][T12454] ecryptfs_validate_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README
[  290.563615][T12454] Error validating options; rc = [-22]
[  290.705131][T12464] 9pnet_fd: Insufficient options for proto=fd
[  290.942189][T12470] loop7: detected capacity change from 0 to 32768
[  290.965179][T12470] JBD2: Ignoring recovery information on journal
[  291.030284][T12470] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  291.100209][T10995] ocfs2: Unmounting device (7,7) on (node local)
[  291.473111][    T9] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  291.633669][    T9] usb 8-1: Using ep0 maxpacket: 16
[  291.641048][    T9] usb 8-1: config 0 has an invalid interface number: 41 but max is 0
[  291.647415][    T9] usb 8-1: config 0 has no interface number 0
[  291.649963][    T9] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  291.653974][    T9] usb 8-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  291.659823][    T9] usb 8-1: config 0 interface 41 has no altsetting 0
[  291.682461][    T9] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  291.686160][    T9] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  291.688661][    T9] usb 8-1: Product: syz
[  291.689967][    T9] usb 8-1: Manufacturer: syz
[  291.691388][    T9] usb 8-1: SerialNumber: syz
[  291.867202][    T9] usb 8-1: config 0 descriptor??
[  291.869578][T12491] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  291.872078][T12491] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  292.218818][    T9] dm9601 8-1:0.41: probe with driver dm9601 failed with error -71
[  292.227195][    T9] sr9700 8-1:0.41: probe with driver sr9700 failed with error -71
[  292.232470][    T9] usb 8-1: USB disconnect, device number 5
[  292.778960][T12514] netlink: 48 bytes leftover after parsing attributes in process `syz.7.2427'.
[  292.781773][T12514] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2427'.
[  292.795435][T12514] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2427'.
[  292.883888][T12518] loop7: detected capacity change from 0 to 2048
[  292.888528][T12518] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  292.910901][T12518] UDF-fs: unknown compression code (0)
[  292.914445][T12518] UDF-fs: unknown compression code (0)
[  293.300036][T12535] netlink: 'syz.7.2435': attribute type 15 has an invalid length.
[  293.628604][T12547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  293.659166][T12549] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2443'.
[  293.664943][T12549] IPVS: Error joining to the multicast group
[  294.512119][T12565] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2449'.
[  295.209156][T12598] loop7: detected capacity change from 0 to 32768
[  295.211730][T12598] XFS: ikeep mount option is deprecated.
[  295.215101][T12598] XFS: ikeep mount option is deprecated.
[  295.216979][T12598] XFS: noikeep mount option is deprecated.
[  295.222989][T12598] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  295.241077][T12598] XFS (loop7): Ending clean mount
[  295.266971][T10995] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  295.476497][T12608] loop7: detected capacity change from 0 to 64
[  295.483816][T12608] BFS-fs: bfs_fill_super(): Last block not available on loop7: 163903
[  295.828839][T12620] team0: Port device vxlan0 added
[  295.831516][   T13] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  295.837421][   T13] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  295.844568][   T13] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  295.848272][   T13] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  295.895816][T12625] mkiss: ax0: crc mode is auto.
[  296.113393][    T9] libceph: connect (1)[c::]:6789 error -101
[  296.116340][    T9] libceph: mon0 (1)[c::]:6789 connect error
[  296.187626][T12633] ceph: No mds server is up or the cluster is laggy
[  296.523952][ T5950] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  296.572039][T12658] loop6: detected capacity change from 0 to 256
[  296.575702][T12658] exfat: Deprecated parameter 'utf8'
[  296.583779][T12658] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d)
[  296.648407][T12660] loop6: detected capacity change from 0 to 512
[  296.670232][T12660] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  296.675520][T12660] ext4 filesystem being mounted at /332/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  296.685488][ T5950] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  296.689731][ T5950] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  296.695906][ T5950] usb 8-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[  296.699583][ T5950] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  296.715923][ T5950] usb 8-1: config 0 descriptor??
[  297.166696][ T5950] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0
[  297.169774][ T5950] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0
[  297.172770][ T5950] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0
[  297.176024][ T5950] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0
[  297.178981][ T5950] playstation 0003:054C:0DF2.000D: unknown main item tag 0x0
[  297.200949][ T5950] playstation 0003:054C:0DF2.000D: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.7-1/input0
[  297.754060][ T5950] playstation 0003:054C:0DF2.000D: Failed to retrieve feature with reportID 5: -71
[  297.757811][ T5950] playstation 0003:054C:0DF2.000D: Failed to retrieve DualSense calibration info: -71
[  297.761575][ T5950] playstation 0003:054C:0DF2.000D: Failed to get calibration data from DualSense
[  297.765471][ T5950] playstation 0003:054C:0DF2.000D: Failed to create dualsense.
[  297.787979][ T5950] playstation 0003:054C:0DF2.000D: probe with driver playstation failed with error -71
[  297.806710][ T5950] usb 8-1: USB disconnect, device number 6
[  298.018147][T10037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  298.649933][T12679] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2490'.
[  298.845765][T12681] loop7: detected capacity change from 0 to 32768
[  298.848420][T12681] XFS: ikeep mount option is deprecated.
[  298.856802][T12681] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  298.869599][T12681] XFS (loop7): Ending clean mount
[  298.873789][T12681] XFS (loop7): Quotacheck needed: Please wait.
[  298.977045][T12681] XFS (loop7): Quotacheck: Done.
[  299.027371][T12693] netlink: 'syz.6.2493': attribute type 6 has an invalid length.
[  299.041351][T10995] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  299.352139][T12708] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2499'.
[  299.668063][T12718] openvswitch: netlink: ufid size 17 bytes exceeds the range (1, 16)
[  299.671748][T12718] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  300.013526][    T9] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  300.215417][    T9] usb 8-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  300.219902][    T9] usb 8-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0
[  300.223427][    T9] usb 8-1: config 0 interface 0 has no altsetting 0
[  300.225925][    T9] usb 8-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00
[  300.228856][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  300.249704][    T9] usb 8-1: config 0 descriptor??
[  300.531287][T12722] loop6: detected capacity change from 0 to 128
[  300.535213][T12722] ufs: You didn't specify the type of your ufs filesystem
[  300.535213][T12722] 
[  300.535213][T12722] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  300.535213][T12722] 
[  300.535213][T12722] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  300.548954][T12722] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  300.633772][T12726] loop6: detected capacity change from 0 to 3
[  300.636471][T12726] bio_check_eod: 43 callbacks suppressed
[  300.636480][T12726] syz.6.2507: attempt to access beyond end of device
[  300.636480][T12726] loop6: rw=2048, sector=0, nr_sectors = 8 limit=3
[  300.642655][T12726] SQUASHFS error: Failed to read block 0x0: -5
[  300.651069][T12726] unable to read squashfs_super_block
[  300.668014][    T9] uclogic 0003:5543:0064.000E: hidraw0: USB HID v0.00 Device [HID 5543:0064] on usb-dummy_hcd.7-1/input0
[  300.694797][T12728] loop6: detected capacity change from 0 to 64
[  300.698504][T12728] BFS-fs: bfs_fill_super(): loop6 is unclean, continuing
[  300.777327][T12730] netlink: 132 bytes leftover after parsing attributes in process `syz.6.2509'.
[  300.863022][   T47] usb 8-1: USB disconnect, device number 7
[  302.407346][T12760] loop6: detected capacity change from 0 to 2048
[  302.418572][T12760] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  302.584403][   T33] audit: type=1326 audit(1755070453.156:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12763 comm="syz.6.2524" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc171f8ebe9 code=0x7ffc0000
[  302.591876][   T33] audit: type=1326 audit(1755070453.156:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12763 comm="syz.6.2524" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc171f8ebe9 code=0x7ffc0000
[  302.603400][   T33] audit: type=1326 audit(1755070453.166:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12763 comm="syz.6.2524" exe="/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7fc171f8ebe9 code=0x7ffc0000
[  302.616082][   T33] audit: type=1326 audit(1755070453.166:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12763 comm="syz.6.2524" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc171f8ebe9 code=0x7ffc0000
[  302.632970][   T33] audit: type=1326 audit(1755070453.176:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12763 comm="syz.6.2524" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc171f8ebe9 code=0x7ffc0000
[  302.909169][T12766] loop7: detected capacity change from 0 to 40427
[  302.912307][T12766] F2FS-fs (loop7): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[  302.915231][T12766] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[  302.918560][T12766] F2FS-fs (loop7): build fault injection type: 0x6
[  302.922022][T12766] F2FS-fs (loop7): invalid crc value
[  302.953207][T12766] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  302.956415][T12766] F2FS-fs (loop7): Start checkpoint disabled!
[  302.965587][T12766] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[  302.967856][T12766] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6
[  303.463326][   T24] usb 8-1: new high-speed USB device number 8 using dummy_hcd
[  303.613178][   T24] usb 8-1: Using ep0 maxpacket: 32
[  303.620597][ T5238] Bluetooth: hci3: Dropping invalid advertising data
[  303.627450][   T24] usb 8-1: unable to get BOS descriptor or descriptor too short
[  303.630593][   T24] usb 8-1: no configurations
[  303.632404][   T24] usb 8-1: can't read configurations, error -22
[  303.663101][    T9] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  303.813172][    T9] usb 7-1: Using ep0 maxpacket: 32
[  303.817157][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  303.820919][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  303.824249][    T9] usb 7-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  303.827281][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  303.831416][    T9] usb 7-1: config 0 descriptor??
[  303.835412][    T9] hub 7-1:0.0: USB hub found
[  304.037499][    T9] hub 7-1:0.0: 1 port detected
[  304.183482][T12791] loop7: detected capacity change from 0 to 16
[  304.186686][T12791] erofs (device loop7): rootino(nid 36) is not a directory(i_mode 125300)
[  304.647759][    T9] hub 7-1:0.0: activate --> -90
[  305.054597][   T10] usb 7-1: USB disconnect, device number 13
[  305.061232][    T9] hub 7-1:0.0: hub_ext_port_status failed (err = -71)
[  305.064310][    T9] usb 7-1-port1: connect-debounce failed
[  305.153937][T12808] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2544'.
[  305.297689][T12814] loop7: detected capacity change from 0 to 2048
[  305.310234][T12815] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  306.573763][T12835] fuse: Bad value for 'fd'
[  306.792790][T12846] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2560'.
[  307.520007][T12850] loop6: detected capacity change from 0 to 256
[  307.528080][T12850] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x18b10316, utbl_chksum : 0xe619d30d)
[  307.532341][T12850] exFAT-fs (loop6): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  307.544624][   T33] audit: type=1800 audit(1755070458.116:223): pid=12850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2562" name="file2" dev="loop6" ino=1048706 res=0 errno=0
[  308.503515][   T10] usb 8-1: new full-speed USB device number 10 using dummy_hcd
[  308.664656][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  308.669370][   T10] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  308.672496][   T10] usb 8-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  308.675353][   T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  308.679121][   T10] usb 8-1: config 0 descriptor??
[  308.688118][   T10] usbhid 8-1:0.0: can't add hid device: -22
[  308.690057][   T10] usbhid 8-1:0.0: probe with driver usbhid failed with error -22
[  308.889387][   T10] usb 8-1: USB disconnect, device number 10
[  308.977561][T12902] loop6: detected capacity change from 0 to 40427
[  308.980463][T12902] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  308.983035][T12902] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  308.987538][T12902] F2FS-fs (loop6): invalid crc value
[  309.023732][T12902] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  309.032201][T12902] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  309.035881][T12902] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  309.225094][T12921] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2594'.
[  309.228893][T12920] netlink: 60 bytes leftover after parsing attributes in process `syz.8.2594'.
[  309.516776][T12941] loop6: detected capacity change from 0 to 1024
[  309.519216][T12941] EXT4-fs: Ignoring removed bh option
[  309.520907][T12941] EXT4-fs: inline encryption not supported
[  309.534952][T12941] EXT4-fs (loop6): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  309.556017][T12941] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 2: comm syz.6.2603: lblock 2 mapped to illegal pblock 2 (length 1)
[  309.563080][T12941] Quota error (device loop6): qtree_write_dquot: dquota write failed
[  309.565957][T12941] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 48: comm syz.6.2603: lblock 0 mapped to illegal pblock 48 (length 1)
[  309.573761][T12941] Quota error (device loop6): v2_write_file_info: Can't write info structure
[  309.578187][T12941] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.2603: Failed to acquire dquot type 0
[  309.582228][T12941] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  309.585732][T12941] EXT4-fs error (device loop6): ext4_evict_inode:254: inode #11: comm syz.6.2603: mark_inode_dirty error
[  309.590065][T12941] EXT4-fs warning (device loop6): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  309.593833][T12941] EXT4-fs (loop6): 1 orphan inode deleted
[  309.596602][T12941] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  309.613098][  T155] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  309.628418][  T155] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  309.641739][T12941] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz.6.2603: Invalid inode table block 1 in block_group 0
[  309.647264][  T155] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u9:3: Failed to release dquot type 0
[  309.660174][T12941] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  309.712654][T10037] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  309.727902][  T155] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #3: block 1: comm kworker/u9:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  309.743754][  T155] Quota error (device loop6): remove_tree: Can't read quota data block 1
[  309.746397][  T155] EXT4-fs error (device loop6): ext4_release_dquot:6969: comm kworker/u9:3: Failed to release dquot type 0
[  309.769091][T10037] EXT4-fs error (device loop6): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  309.782949][T10037] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  309.790081][T10037] EXT4-fs error (device loop6): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[  309.799812][T12936] loop7: detected capacity change from 0 to 32768
[  310.477990][T12967] loop6: detected capacity change from 0 to 512
[  310.663405][T12969] Bluetooth: MGMT ver 1.23
[  310.770922][T12980] loop7: detected capacity change from 0 to 256
[  310.779684][T12980] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xb5fb52fc, utbl_chksum : 0xe619d30d)
[  311.535099][ T5880] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.631699][ T5880] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.735078][ T5880] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  311.857971][ T5880] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  312.012125][   T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  312.016892][   T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  312.020732][   T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  312.026697][   T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  312.030138][   T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  312.348894][ T5880] bridge_slave_1: left allmulticast mode
[  312.351409][ T5880] bridge_slave_1: left promiscuous mode
[  312.354011][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[  312.359699][ T5880] bridge_slave_0: left allmulticast mode
[  312.362096][ T5880] bridge_slave_0: left promiscuous mode
[  312.365819][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[  313.023939][ T5880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  313.040587][ T5880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  313.063571][ T5880] bond0 (unregistering): Released all slaves
[  313.408143][T13004] chnl_net:caif_netlink_parms(): no params data found
[  313.498530][ T5880] hsr_slave_0: left promiscuous mode
[  313.501547][ T5880] hsr_slave_1: left promiscuous mode
[  313.503748][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  313.506190][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_0
[  313.514543][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  313.516903][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_1
[  313.537916][ T5880] veth1_macvtap: left promiscuous mode
[  313.539632][ T5880] veth0_macvtap: left promiscuous mode
[  313.541664][ T5880] veth1_vlan: left promiscuous mode
[  313.546228][ T5880] veth0_vlan: left promiscuous mode
[  313.565973][T13020] loop6: detected capacity change from 0 to 4096
[  313.571119][T13020] ntfs3(loop6): try to read out of volume at offset 0x3fffffc0c00
[  313.574328][T13020] ntfs3(loop6): try to read out of volume at offset 0x3fffffc0c00
[  313.577341][T13020] ntfs3(loop6): try to read out of volume at offset 0x3fffffc0c00
[  313.580504][T13020] ntfs3(loop6): try to read out of volume at offset 0x3fffffc0c00
[  313.583818][T13020] ntfs3(loop6): try to read out of volume at offset 0x3fffffc1c00
[  313.586975][T13020] ntfs3(loop6): try to read out of volume at offset 0x3fffffc2c00
[  313.590126][T13020] ntfs3(loop6): try to read out of volume at offset 0x3fffffc4c00
[  313.593559][T13020] ntfs3(loop6): try to read out of volume at offset 0x3fffffc8c00
[  313.596939][T13020] ntfs3(loop6): try to read out of volume at offset 0x3fffffd0c00
[  313.600018][T13020] ntfs3(loop6): try to read out of volume at offset 0x3fffffe0c00
[  314.063602][ T5880] team0 (unregistering): Port device team_slave_1 removed
[  314.099737][ T5238] Bluetooth: hci3: command tx timeout
[  314.104723][ T5880] team0 (unregistering): Port device team_slave_0 removed
[  314.855303][T13004] bridge0: port 1(bridge_slave_0) entered blocking state
[  314.860315][T13004] bridge0: port 1(bridge_slave_0) entered disabled state
[  314.867587][T13004] bridge_slave_0: entered allmulticast mode
[  314.871740][T13004] bridge_slave_0: entered promiscuous mode
[  314.888210][T13004] bridge0: port 2(bridge_slave_1) entered blocking state
[  314.891008][T13004] bridge0: port 2(bridge_slave_1) entered disabled state
[  314.897114][T13004] bridge_slave_1: entered allmulticast mode
[  314.900973][T13004] bridge_slave_1: entered promiscuous mode
[  314.901263][T13041] loop6: detected capacity change from 0 to 2048
[  314.909397][T13041] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  314.959986][T13042] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  314.970163][T13004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  314.980608][T13004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  315.028420][T13004] team0: Port device team_slave_0 added
[  315.031742][T13042] NILFS (loop6): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  315.033942][T13004] team0: Port device team_slave_1 added
[  315.038121][T13042] NILFS error (device loop6): nilfs_bmap_propagate: broken bmap (inode number=4)
[  315.080719][T13042] Remounting filesystem read-only
[  315.085317][T10037] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer
[  315.110652][T13004] batman_adv: batadv0: Adding interface: batadv_slave_0
[  315.119573][T13004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.129885][T13004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  315.137867][T13004] batman_adv: batadv0: Adding interface: batadv_slave_1
[  315.140583][T13004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  315.151167][T13004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  315.160248][T13044] overlayfs: statfs failed on './file0'
[  315.207327][T13004] hsr_slave_0: entered promiscuous mode
[  315.210479][T13004] hsr_slave_1: entered promiscuous mode
[  315.214359][T13004] debugfs: 'hsr0' already exists in 'hsr'
[  315.216636][T13004] Cannot create hsr debugfs directory
[  315.338857][ T5880] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.418890][ T5880] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.487067][ T5880] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.559800][ T5880] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  315.616362][T13004] netdevsim netdevsim9 netdevsim0: renamed from eth0
[  315.631712][T13004] netdevsim netdevsim9 netdevsim1: renamed from eth1
[  315.649335][T13004] netdevsim netdevsim9 netdevsim2: renamed from eth2
[  315.662595][T13004] netdevsim netdevsim9 netdevsim3: renamed from eth3
[  315.758420][ T5880] bridge_slave_1: left allmulticast mode
[  315.764110][ T5880] bridge_slave_1: left promiscuous mode
[  315.766211][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[  315.777236][ T5880] bridge_slave_0: left allmulticast mode
[  315.779027][ T5880] bridge_slave_0: left promiscuous mode
[  315.780913][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[  315.903510][T13066] loop6: detected capacity change from 0 to 4096
[  315.959215][T13066] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  316.032316][T13066] ntfs3(loop6): ino=1f, "file2" attr_set_size
[  316.093139][T10037] ntfs3(loop6): ino=9, ntfs_sync_fs failed, -22.
[  316.173107][ T5238] Bluetooth: hci3: command tx timeout
[  316.348521][ T5880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  316.357442][ T5880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  316.362461][ T5880] bond0 (unregistering): Released all slaves
[  316.493724][ T5882] usb 7-1: new high-speed USB device number 14 using dummy_hcd
[  316.541988][T13004] 8021q: adding VLAN 0 to HW filter on device bond0
[  316.579904][T13004] 8021q: adding VLAN 0 to HW filter on device team0
[  316.632627][ T1101] bridge0: port 1(bridge_slave_0) entered blocking state
[  316.635671][ T1101] bridge0: port 1(bridge_slave_0) entered forwarding state
[  316.646284][ T5882] usb 7-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  316.649842][ T5882] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  316.656133][ T1101] bridge0: port 2(bridge_slave_1) entered blocking state
[  316.658972][ T1101] bridge0: port 2(bridge_slave_1) entered forwarding state
[  316.664367][ T5882] usb 7-1: config 0 descriptor??
[  316.804701][ T5880] hsr_slave_0: left promiscuous mode
[  316.807450][ T5880] hsr_slave_1: left promiscuous mode
[  316.810262][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  316.816471][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_0
[  316.820110][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  316.827723][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_1
[  316.844840][ T5880] veth1_macvtap: left promiscuous mode
[  316.846919][ T5880] veth0_macvtap: left promiscuous mode
[  316.848715][ T5880] veth1_vlan: left promiscuous mode
[  316.850397][ T5880] veth0_vlan: left promiscuous mode
[  316.874546][ T5882] udl 7-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  316.891390][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  316.894985][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  317.079036][ T5882] [drm:udl_init] *ERROR* Selecting channel failed
[  317.119446][ T5882] [drm] Initialized udl 0.0.1 for 7-1:0.0 on minor 3
[  317.122214][ T5882] [drm] Initialized udl on minor 3
[  317.144218][ T5882] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  317.173618][ T5882] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  317.196089][ T5882] usb 7-1: USB disconnect, device number 14
[  317.207841][   T47] udl 7-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  317.240205][   T47] udl 7-1:0.0: [drm] Cannot find any crtc or sizes
[  317.421458][ T5880] team0 (unregistering): Port device team_slave_1 removed
[  317.467403][ T5880] team0 (unregistering): Port device team_slave_0 removed
[  318.243390][ T5238] Bluetooth: hci3: command tx timeout
[  318.271128][T13004] 8021q: adding VLAN 0 to HW filter on device batadv0
[  318.469263][T13004] veth0_vlan: entered promiscuous mode
[  318.478237][T13004] veth1_vlan: entered promiscuous mode
[  318.507612][T13004] veth0_macvtap: entered promiscuous mode
[  318.512328][T13004] veth1_macvtap: entered promiscuous mode
[  318.523843][T13004] batman_adv: batadv0: Interface activated: batadv_slave_0
[  318.531919][T13004] batman_adv: batadv0: Interface activated: batadv_slave_1
[  318.540112][T13073] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  318.545709][T13073] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  318.549531][T13073] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  318.556984][T13073] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  318.649699][ T1101] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.652658][ T1101] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.677964][T12985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  318.680876][T12985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  318.917882][T13089] loop6: detected capacity change from 0 to 32768
[  319.270427][T13097] loop9: detected capacity change from 0 to 40427
[  319.278453][T13097] F2FS-fs (loop9): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  319.281315][T13097] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock
[  319.285981][T13097] F2FS-fs (loop9): invalid crc value
[  319.324251][T13097] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  319.334456][T13097] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0
[  319.337064][T13097] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4
[  319.355500][T13097] syz.9.2662: attempt to access beyond end of device
[  319.355500][T13097] loop9: rw=2051, sector=36912, nr_sectors = 8144 limit=40427
[  319.362686][T13097] syz.9.2662: attempt to access beyond end of device
[  319.362686][T13097] loop9: rw=2051, sector=45096, nr_sectors = 20440 limit=40427
[  319.383455][T13097] F2FS-fs (loop9): Issue discard(4614, 4614, 1018) failed, ret: -5
[  319.386857][T13097] F2FS-fs (loop9): Issue discard(5637, 5637, 2555) failed, ret: -5
[  320.330879][ T5238] Bluetooth: hci3: command tx timeout
[  321.300046][T13142] loop6: detected capacity change from 0 to 256
[  321.331674][T13142] FAT-fs (loop6): Directory bread(block 64) failed
[  321.337308][T13142] FAT-fs (loop6): Directory bread(block 65) failed
[  321.340098][T13142] FAT-fs (loop6): Directory bread(block 66) failed
[  321.342713][T13142] FAT-fs (loop6): Directory bread(block 67) failed
[  321.346272][T13142] FAT-fs (loop6): Directory bread(block 68) failed
[  321.348885][T13142] FAT-fs (loop6): Directory bread(block 69) failed
[  321.351669][T13142] FAT-fs (loop6): Directory bread(block 70) failed
[  321.359787][T13142] FAT-fs (loop6): Directory bread(block 71) failed
[  321.366889][T13142] FAT-fs (loop6): Directory bread(block 72) failed
[  321.369528][T13142] FAT-fs (loop6): Directory bread(block 73) failed
[  322.869107][T13164] loop6: detected capacity change from 0 to 128
[  322.911609][T13164] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  322.921544][T13164] ext4 filesystem being mounted at /430/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  323.002632][T10037] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  323.283743][   T34] INFO: task syz-executor:5848 blocked for more than 143 seconds.
[  323.286289][   T34]       Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0
[  323.288801][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  323.292697][   T34] task:syz-executor    state:D stack:21016 pid:5848  tgid:5848  ppid:1      task_flags:0x400140 flags:0x00004004
[  323.299721][   T34] Call Trace:
[  323.301066][   T34]  <TASK>
[  323.302268][   T34]  __schedule+0x1798/0x4cc0
[  323.304132][   T34]  ? do_raw_spin_lock+0x121/0x290
[  323.305906][   T34]  ? __lock_acquire+0xab9/0xd20
[  323.307665][   T34]  ? __pfx___schedule+0x10/0x10
[  323.309389][   T34]  ? schedule+0x91/0x360
[  323.310905][   T34]  schedule+0x165/0x360
[  323.312385][   T34]  v9fs_evict_inode+0x170/0x320
[  323.314152][   T34]  ? __pfx_v9fs_evict_inode+0x10/0x10
[  323.316250][   T34]  ? __pfx_var_wake_function+0x10/0x10
[  323.321156][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  323.323821][   T34]  ? __pfx_v9fs_evict_inode+0x10/0x10
[  323.325540][   T34]  evict+0x504/0x9c0
[  323.326819][   T34]  ? __pfx_evict+0x10/0x10
[  323.328279][   T34]  ? do_raw_spin_unlock+0x4d/0x240
[  323.329927][   T34]  ? _raw_spin_unlock+0x28/0x50
[  323.331498][   T34]  ? iput+0x6d8/0x9d0
[  323.332780][   T34]  __dentry_kill+0x209/0x660
[  323.334723][   T34]  ? dput+0x37/0x2b0
[  323.336721][   T34]  dput+0x19f/0x2b0
[  323.338276][   T34]  shrink_dcache_for_umount+0xa0/0x170
[  323.340494][   T34]  generic_shutdown_super+0x67/0x2c0
[  323.342725][   T34]  kill_anon_super+0x3b/0x70
[  323.345645][   T34]  v9fs_kill_super+0x4c/0x90
[  323.347528][   T34]  deactivate_locked_super+0xbc/0x130
[  323.349681][   T34]  cleanup_mnt+0x425/0x4c0
[  323.356778][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.358959][   T34]  task_work_run+0x1d4/0x260
[  323.360840][   T34]  ? __pfx_task_work_run+0x10/0x10
[  323.364869][   T34]  ? __x64_sys_umount+0x122/0x160
[  323.366918][   T34]  ? exit_to_user_mode_loop+0x40/0x110
[  323.369207][   T34]  exit_to_user_mode_loop+0xec/0x110
[  323.371298][   T34]  do_syscall_64+0x2bd/0x3b0
[  323.373309][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.375328][   T34]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.377770][   T34]  ? exc_page_fault+0x9f/0xf0
[  323.379721][   T34]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  323.382031][   T34] RIP: 0033:0x7efea898ff17
[  323.386191][   T34] RSP: 002b:00007ffde5ae3ec8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  323.389252][   T34] RAX: 0000000000000000 RBX: 00007efea8a11c05 RCX: 00007efea898ff17
[  323.391916][   T34] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffde5ae3f80
[  323.395398][   T34] RBP: 00007ffde5ae3f80 R08: 0000000000000000 R09: 0000000000000000
[  323.398174][   T34] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffde5ae5010
[  323.401018][   T34] R13: 00007efea8a11c05 R14: 0000000000029196 R15: 00007ffde5ae5050
[  323.406694][   T34]  </TASK>
[  323.408191][   T34] 
[  323.408191][   T34] Showing all locks held in the system:
[  323.411402][   T34] 1 lock held by khungtaskd/34:
[  323.414247][   T34]  #0: ffffffff8e13a220 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180
[  323.418178][   T34] 2 locks held by getty/5675:
[  323.420083][   T34]  #0: ffff88810640b0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70
[  323.424286][   T34]  #1: ffffc900029032f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400
[  323.428363][   T34] 1 lock held by syz-executor/5848:
[  323.430456][   T34]  #0: ffff8880235420e0 (&type->s_umount_key#77){++++}-{4:4}, at: deactivate_super+0xa9/0xe0
[  323.434905][   T34] 1 lock held by syz.1.1832/11022:
[  323.436906][   T34]  #0: ffff8880235420e0 (&type->s_umount_key#77){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
[  323.440755][   T34] 1 lock held by syz.8.2627/12993:
[  323.442773][   T34]  #0: ffff8880235420e0 (&type->s_umount_key#77){++++}-{4:4}, at: super_lock+0x2a9/0x3b0
[  323.447414][   T34] 
[  323.448408][   T34] =============================================
[  323.448408][   T34] 
[  323.451533][   T34] NMI backtrace for cpu 1
[  323.451548][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  323.451558][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  323.451579][   T34] Call Trace:
[  323.451585][   T34]  <TASK>
[  323.451590][   T34]  dump_stack_lvl+0x189/0x250
[  323.451607][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  323.451616][   T34]  ? __pfx__printk+0x10/0x10
[  323.451635][   T34]  nmi_cpu_backtrace+0x39e/0x3d0
[  323.451646][   T34]  ? __pfx_nmi_cpu_backtrace+0x10/0x10
[  323.451655][   T34]  ? __pfx__printk+0x10/0x10
[  323.451666][   T34]  ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10
[  323.451685][   T34]  nmi_trigger_cpumask_backtrace+0x17a/0x300
[  323.451695][   T34]  watchdog+0xf93/0xfe0
[  323.451709][   T34]  ? watchdog+0x1de/0xfe0
[  323.451721][   T34]  kthread+0x711/0x8a0
[  323.451734][   T34]  ? __pfx_watchdog+0x10/0x10
[  323.451751][   T34]  ? __pfx_kthread+0x10/0x10
[  323.451767][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  323.451782][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.451796][   T34]  ? __pfx_kthread+0x10/0x10
[  323.451809][   T34]  ret_from_fork+0x3fc/0x770
[  323.451819][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  323.451829][   T34]  ? __switch_to_asm+0x39/0x70
[  323.451839][   T34]  ? __switch_to_asm+0x33/0x70
[  323.451848][   T34]  ? __pfx_kthread+0x10/0x10
[  323.451858][   T34]  ret_from_fork_asm+0x1a/0x30
[  323.451873][   T34]  </TASK>
[  323.451896][   T34] Sending NMI from CPU 1 to CPUs 0:
[  323.507506][    C0] NMI backtrace for cpu 0
[  323.507525][    C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  323.507540][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  323.507548][    C0] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  323.507571][    C0] Code: 13 e8 02 00 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa eb 07 0f 00 2d 53 97 0f 00 f3 0f 1e fa fb f4 <c3> cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90
[  323.507582][    C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 00000282
[  323.507595][    C0] RAX: 4f2e38d06e385c00 RBX: ffffffff81968598 RCX: 4f2e38d06e385c00
[  323.507605][    C0] RDX: 0000000000000001 RSI: ffffffff8d9b4a14 RDI: ffffffff8be32b80
[  323.507613][    C0] RBP: ffffffff8de07eb8 R08: ffff88804b032f9b R09: 1ffff110096065f3
[  323.507623][    C0] R10: dffffc0000000000 R11: ffffed10096065f4 R12: ffffffff8fa34730
[  323.507632][    C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a20
[  323.507640][    C0] FS:  0000000000000000(0000) GS:ffff8880b8621000(0000) knlGS:0000000000000000
[  323.507650][    C0] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  323.507658][    C0] CR2: 00007fc172d6afc8 CR3: 000000012987a000 CR4: 00000000000006f0
[  323.507687][    C0] Call Trace:
[  323.507694][    C0]  <TASK>
[  323.507699][    C0]  default_idle+0x13/0x20
[  323.507716][    C0]  default_idle_call+0x74/0xb0
[  323.507734][    C0]  do_idle+0x1e8/0x510
[  323.507750][    C0]  ? __pfx_do_idle+0x10/0x10
[  323.507767][    C0]  cpu_startup_entry+0x44/0x60
[  323.507778][    C0]  rest_init+0x2de/0x300
[  323.507796][    C0]  start_kernel+0x3a9/0x410
[  323.507812][    C0]  x86_64_start_reservations+0x24/0x30
[  323.507831][    C0]  x86_64_start_kernel+0x143/0x1c0
[  323.507847][    C0]  common_startup_64+0x13e/0x147
[  323.507869][    C0]  </TASK>
[  323.508538][   T34] Kernel panic - not syncing: hung_task: blocked tasks
[  323.578686][   T34] CPU: 1 UID: 0 PID: 34 Comm: khungtaskd Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  323.583340][   T34] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  323.587321][   T34] Call Trace:
[  323.588671][   T34]  <TASK>
[  323.589885][   T34]  dump_stack_lvl+0x99/0x250
[  323.591778][   T34]  ? __asan_memcpy+0x40/0x70
[  323.593662][   T34]  ? __pfx_dump_stack_lvl+0x10/0x10
[  323.595750][   T34]  ? __pfx__printk+0x10/0x10
[  323.597593][   T34]  vpanic+0x281/0x750
[  323.599148][   T34]  ? __pfx_vpanic+0x10/0x10
[  323.600941][   T34]  ? preempt_schedule+0xae/0xc0
[  323.602885][   T34]  ? preempt_schedule_common+0x83/0xd0
[  323.605054][   T34]  panic+0xb9/0xc0
[  323.606560][   T34]  ? __pfx_panic+0x10/0x10
[  323.608368][   T34]  ? preempt_schedule_thunk+0x16/0x30
[  323.610488][   T34]  ? nmi_trigger_cpumask_backtrace+0x2bb/0x300
[  323.612879][   T34]  watchdog+0xfd2/0xfe0
[  323.614558][   T34]  ? watchdog+0x1de/0xfe0
[  323.616301][   T34]  kthread+0x711/0x8a0
[  323.617922][   T34]  ? __pfx_watchdog+0x10/0x10
[  323.619767][   T34]  ? __pfx_kthread+0x10/0x10
[  323.621614][   T34]  ? _raw_spin_unlock_irq+0x23/0x50
[  323.623691][   T34]  ? lockdep_hardirqs_on+0x9c/0x150
[  323.625761][   T34]  ? __pfx_kthread+0x10/0x10
[  323.627617][   T34]  ret_from_fork+0x3fc/0x770
[  323.629493][   T34]  ? __pfx_ret_from_fork+0x10/0x10
[  323.631526][   T34]  ? __switch_to_asm+0x39/0x70
[  323.633418][   T34]  ? __switch_to_asm+0x33/0x70
[  323.635293][   T34]  ? __pfx_kthread+0x10/0x10
[  323.637121][   T34]  ret_from_fork_asm+0x1a/0x30
[  323.639041][   T34]  </TASK>
[  323.641017][   T34] Kernel Offset: disabled
[  323.642740][   T34] Rebooting in 86400 seconds..

VM DIAGNOSIS:
07:34:34  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000006f RBX=000000000000006f RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff88801b718237 R9 =1ffff110036e3046 R10=dffffc0000000000 R11=ffffffff854e7aa0
R12=dffffc0000000000 R13=ffffffff99af48dc R14=ffffffff99de94e0 R15=0000000000000000
RIP=ffffffff854e7b1c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8621000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffe73c72e40 CR3=000000010666e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff1b7b9a3 RBX=ffff888136632f98 RCX=a26073d0a451bc00 RDX=ffffc9000617f201
RSI=ffffffff8be32b60 RDI=ffffffff8be32b20 RBP=dffffc0000000000 RSP=ffffc9000617f150
R8 =ffffc9000617fee0 R9 =0000000000000000 R10=ffffc9000617f2f8 R11=fffff52000c2fe61
R12=ffffc9000617fef0 R13=ffffffff8172c195 R14=ffffffff8dbdcd18 R15=dffffc0000000000
RIP=ffffffff81a6618e RFL=00000283 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555585efe500 ffffffff 00c00000
GS =0000 ffff8881a3c21000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fc172ce56c0 CR3=0000000028a08000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fc172012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
