last executing test programs:

1m33.329899496s ago: executing program 1 (id=733):
syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000080)='./file1\x00', 0x800200, &(0x7f0000000140)={[{@nodecompose}, {@nls={'nls', 0x3d, 'cp932'}}, {@nodecompose}]}, 0x1, 0x5f7, &(0x7f0000000640)="$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")

1m33.260159435s ago: executing program 1 (id=734):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000640), 0x68000)
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r0, 0x40a85323, &(0x7f0000000680)={{0x2, 0x3}, 'port0\x00', 0x60, 0x0, 0x78, 0x2, 0x4, 0x5, 0xc165, 0x0, 0x4, 0x1})

1m33.259931832s ago: executing program 1 (id=735):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newtaction={0x68, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x3, 0xef, 0x10000000, 0x8000, 0x2}}, @TCA_ACT_BPF_OPS={0x4}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4081}, 0x2400c800)

1m33.189434436s ago: executing program 1 (id=736):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0, 0x0, 0x0, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', r1, &(0x7f0000000100)='./file0\x00', 0x126)

1m33.159014008s ago: executing program 1 (id=738):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x17}, 0x48)
r1 = socket(0x10, 0x800000000080002, 0x6)
setsockopt$sock_attach_bpf(r1, 0x1, 0x34, &(0x7f00000000c0)=r0, 0x4)

1m32.76899401s ago: executing program 1 (id=744):
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
close(0x3)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8)

1m32.577162044s ago: executing program 32 (id=744):
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
close(0x3)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000000400)='espintcp', 0x8)

29.750345246s ago: executing program 3 (id=1614):
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/rt_cache\x00')
preadv2(r0, &(0x7f0000000240)=[{&(0x7f00000000c0)=""/50, 0x32}, {0x0}], 0x2, 0x10000, 0x8, 0x1)
lseek(r0, 0x80, 0x0)
setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="2d59aeabfd5ed263b44add4572b23fe4", 0x10)

29.700133601s ago: executing program 3 (id=1616):
r0 = syz_open_dev$MSR(&(0x7f0000000880), 0x1, 0x0)
ioctl$X86_IOC_RDMSR_REGS(r0, 0xc02063a0, &(0x7f00000008c0)=[0x9, 0x1, 0x5, 0x2174, 0x1000, 0x4, 0x9, 0x9])

29.699923082s ago: executing program 3 (id=1617):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63)
write$P9_RLERRORu(r0, &(0x7f0000000300)=ANY=[@ANYRESHEX], 0x10)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0xf8, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)=[0x9], 0x0, 0x0, 0x1, 0x1}}, 0x40)
write$P9_RREAD(r0, &(0x7f0000000100)={0x81, 0x75, 0x1, {0x76, "400d435fab4d609502b2934497090503f01b5f966a71dcd8bd00dade9817c821dd1aa2f3166d5a94715f927bcaf6429d16d2a3191959dffb75974d0f20ee765eef30c8e88cb481437b27f7570bd158c6e9ce07d2491b1dddf66e90510f6de05a5ab17b38a7384d48ac5637ae1d61b0257ab81d9294e9"}}, 0x81)
mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10012, r0, 0x0)

29.591122464s ago: executing program 3 (id=1618):
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x1860, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}]})
chdir(&(0x7f0000000000)='./file0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0)
write(r0, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0', 0x1b)
write(r0, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x2', 0x1d)

29.588280902s ago: executing program 3 (id=1619):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x303}, "77b40400", "bb6710bc8150e4a1a117d7b27caf00", "8c7628fd", "3d8efa05fdffffff"}, 0x28)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x303}, "b7a41f2300", "d21b0e8a0e000000000000000600", "1d1cbe23", "ecba06893bcdc493"}, 0x28)
recvfrom(r0, &(0x7f00000015c0)=""/4071, 0xfe7, 0x10020, 0x0, 0x0)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r0)
setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4)

29.301342923s ago: executing program 3 (id=1624):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0xdc74, 0x3d4e17})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

29.243117429s ago: executing program 33 (id=1624):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000040)={0x28, 0x7, r1, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000})
ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r1, 0x0, <r2=>0xffffffffffffffff, 0x1})
ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r0, 0x3ba0, &(0x7f0000000080)={0x48, 0x7, r2, 0x0, 0x10000, 0x0, 0x8, 0xdc74, 0x3d4e17})
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

1.56085634s ago: executing program 0 (id=2018):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000007c0)={0x4c, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20020800}, 0x0)

1.483368072s ago: executing program 0 (id=2019):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
getgroups(0x0, 0x0)

1.39974347s ago: executing program 0 (id=2021):
socket$nl_sock_diag(0x10, 0x3, 0x4)
r0 = socket$l2tp(0x2, 0x2, 0x73)
mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10)
connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0)
syz_80211_inject_frame(0x0, 0x0, 0x3a)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'})
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', <r5=>0x0})
sendmsg$NL80211_CMD_ABORT_SCAN(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x1c, r1, 0xd9b2794f6a139537, 0x0, 0xe7030000, {{}, {@val={0x8, 0x3, r5}, @void}}}, 0x1c}}, 0x0)

999.930796ms ago: executing program 2 (id=2027):
r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0xfffffffe, 0x400, 0x3, 0x1e5}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000080)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f00000004c0)=@IORING_OP_FILES_UPDATE={0x14, 0x44, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {0x0, r4}})
syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f00000003c0)={0x2e, 0x5, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@any_dev={0x4, 0xd74, 0x0, 0x0, 0x1000, 0x68ba, 0x0, 0x0, 0x31}}}, &(0x7f0000000440))

940.754418ms ago: executing program 2 (id=2028):
syz_mount_image$ufs(&(0x7f0000009e00), &(0x7f0000009e40)='./file0\x00', 0x8008, &(0x7f0000009e80)=ANY=[@ANYBLOB='ufstype=openstep\x00'], 0xfd, 0x9deb, &(0x7f0000013cc0)="$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")

940.603247ms ago: executing program 4 (id=2029):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0xe9, r2, 0x1, 0x81}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)

850.082177ms ago: executing program 2 (id=2030):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0)
sendmsg$ETHTOOL_MSG_WOL_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}}, 0x200000c0)

849.819161ms ago: executing program 4 (id=2031):
epoll_create(0x402)
epoll_create1(0x80000)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0x10000, 0x6, 0xc, 0x1000000, 0x7, 0xe, 0x5, 0x1, 0x8000009654, 0x1, 0x7fffffff, 0x0, 0x10, 0xb, 0xffff, 0x200cc0, 0x1, 0x5, 0x0, 0xfffffffffffffffc, 0x0, 0x809, 0x0, 0x5, 0x6, 0x9})

839.691687ms ago: executing program 4 (id=2032):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={<r1=>0x0}, &(0x7f0000000000)=0x8)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000003c0)={r1}, 0x8)

810.416413ms ago: executing program 2 (id=2033):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a50000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc0c0009800800014000000002080008400000000114000000110001"], 0x78}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a400000000e"], 0x68}, 0x1, 0x0, 0x0, 0x4004850}, 0x20000004)

801.792553ms ago: executing program 0 (id=2034):
syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="1201000005d0d3087d07aa04d85b0102030109021b000f000000000904"], 0x0)

727.953366ms ago: executing program 4 (id=2035):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', <r2=>0x0})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x94, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0}, 0x48)
sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0)

727.674877ms ago: executing program 2 (id=2036):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000680)={0x1f, 0xffff}, 0x6)
write(r0, &(0x7f0000000100)='#\x00\x00\x00', 0x4)

727.021998ms ago: executing program 4 (id=2037):
unshare(0x22020600)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
vmsplice(r0, &(0x7f00000013c0)=[{&(0x7f0000000080)='4', 0xfee1}, {&(0x7f0000000100)="a7", 0x1}, {&(0x7f0000000240)="9f", 0x1}, {&(0x7f0000000300)='b', 0x1}], 0x10000000000000e0, 0x1)

648.480205ms ago: executing program 2 (id=2038):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
sched_setaffinity(r2, 0x8, &(0x7f00000002c0)=0x80000000000003)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
r4 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000340)=0x21be, 0x4)
setsockopt$inet6_int(r4, 0x29, 0x2, &(0x7f0000000100)=0x4, 0x4)
recvmmsg(r4, 0x0, 0x0, 0x40002142, 0x0)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000300)={<r6=>0xffffffffffffffff}, 0x111}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r5, &(0x7f0000000100)={0x7, 0x8, 0xfa00, {r6, 0x4734}}, 0x10)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f00000000c0)={0x1, 0x10, 0xfa00, {&(0x7f0000000080), r6}}, 0x18)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000cc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r7, 0x0, 0x29, 0x0, @void}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[], 0x20)

648.352621ms ago: executing program 4 (id=2039):
bpf$MAP_CREATE(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
syz_open_dev$loop(0x0, 0x7, 0x10c062)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/platform/devices/snd_aloop.0/driver/unbind\x00', 0x1, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
write(r0, &(0x7f00000002c0)='snd_aloop.0', 0xb)

107.860876ms ago: executing program 0 (id=2040):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmmsg$inet(r0, &(0x7f0000000d00)=[{{&(0x7f0000000040)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10, &(0x7f0000000700)=[{&(0x7f0000000080)="88", 0x1}], 0x1}}], 0x1, 0x4000)
shutdown(r0, 0x1)
getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x84, &(0x7f0000000440)={0x0, @in={{0x2, 0x4e21, @empty}}, 0xfffc, 0x86}, &(0x7f0000000500)=0x90)

0s ago: executing program 0 (id=2041):
syz_80211_inject_frame(0x0, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xfd3c, 0x26, &(0x7f00000011c0)="b9ffddc1ddcccdf175537d53888edfcef6e296510cff24fc83423368", 0x0, 0x600, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50)

kernel console output (not intermixed with test programs):

scriptors, different from the interface descriptor's value: 64
[  126.975071][   T24] usb 3-1: config 2 interface 171 has no altsetting 0
[  126.977820][   T24] usb 3-1: config 2 interface 0 has no altsetting 0
[  126.977902][ T8044] loop3: detected capacity change from 0 to 256
[  126.982467][   T24] usb 3-1: New USB device found, idVendor=0c52, idProduct=2833, bcdDevice=d2.c0
[  126.985636][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.988391][   T24] usb 3-1: Product: syz
[  126.989700][   T24] usb 3-1: Manufacturer: syz
[  126.995576][ T8044] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e7e, chksum : 0x04bede55, utbl_chksum : 0xe619d30d)
[  126.998057][   T24] usb 3-1: SerialNumber: syz
[  127.020658][ T8044] exFAT-fs (loop3): error, data valid size is invalid(-281474976706560)
[  127.146897][ T8048] trusted_key: encrypted_key: master key parameter 'user:' is invalid
[  127.229171][   T24] cdc_ether 3-1:2.171: bogus CDC Union
[  127.236779][   T24] ftdi_sio 3-1:2.171: FTDI USB Serial Device converter detected
[  127.243289][   T24] ftdi_sio ttyUSB0: unknown device type: 0xd2c0
[  127.252416][   T24] ftdi_sio 3-1:2.0: FTDI USB Serial Device converter detected
[  127.258524][   T24] ftdi_sio ttyUSB1: unknown device type: 0xd2c0
[  127.268154][   T24] usb 3-1: USB disconnect, device number 16
[  127.285319][   T24] ftdi_sio 3-1:2.171: device disconnected
[  127.292276][   T24] ftdi_sio 3-1:2.0: device disconnected
[  127.407400][ T8061] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  127.410053][ T8061] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  127.415887][ T8061] vhci_hcd vhci_hcd.0: Device attached
[  127.420310][ T8062] vhci_hcd: connection closed
[  127.430072][   T12] vhci_hcd vhci_hcd.3: stop threads
[  127.435198][   T12] vhci_hcd vhci_hcd.3: release socket
[  127.437543][   T12] vhci_hcd vhci_hcd.3: disconnect device
[  128.217389][ T8090] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.224261][ T8089] netlink: 8 bytes leftover after parsing attributes in process `syz.3.961'.
[  128.225688][ T8090] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  128.230334][ T8089] netlink: 24 bytes leftover after parsing attributes in process `syz.3.961'.
[  128.233129][ T8089] netlink: 24 bytes leftover after parsing attributes in process `syz.3.961'.
[  128.233696][ T8071] loop2: detected capacity change from 0 to 32768
[  128.246341][ T8071] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  128.266481][ T8071] XFS (loop2): Ending clean mount
[  128.285858][ T8071] XFS (loop2): Quotacheck needed: Please wait.
[  128.315526][ T8071] XFS (loop2): Quotacheck: Done.
[  128.370473][ T5591] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  128.491648][ T8108] netlink: 92 bytes leftover after parsing attributes in process `syz.3.968'.
[  128.548321][ T8110] loop3: detected capacity change from 0 to 4096
[  128.551628][ T8110] EXT4-fs (loop3): Test dummy encryption mode enabled
[  128.565808][ T8110] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.587784][ T8110] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))"
[  128.605506][ T8110] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  128.622894][ T7509] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.726861][ T8120] loop3: detected capacity change from 0 to 136
[  128.773554][ T8123] netlink: 'syz.0.973': attribute type 1 has an invalid length.
[  128.817052][ T8123] 8021q: adding VLAN 0 to HW filter on device bond1
[  128.828982][ T5701] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  128.864228][ T8123] vlan2: entered allmulticast mode
[  128.873167][ T8123] bond1: entered allmulticast mode
[  128.929397][ T8123] bond1: (slave geneve2): making interface the new active one
[  128.940257][ T8123] geneve2: entered allmulticast mode
[  128.949105][ T4983] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  128.971466][ T8123] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  128.972678][ T4983] Bluetooth: hci1: Injecting HCI hardware error event
[  128.985383][   T53] Bluetooth: hci1: hardware error 0x00
[  129.004029][ T5701] usb 3-1: config 6 has an invalid interface number: 145 but max is 0
[  129.016328][ T5701] usb 3-1: config 6 has no interface number 0
[  129.024200][ T5701] usb 3-1: config 6 interface 145 has no altsetting 0
[  129.036199][ T5701] usb 3-1: New USB device found, idVendor=f99c, idProduct=aea0, bcdDevice=b7.18
[  129.040806][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.048024][ T5701] usb 3-1: Product: syz
[  129.051155][ T5701] usb 3-1: Manufacturer: syz
[  129.054809][ T5701] usb 3-1: SerialNumber: syz
[  129.284474][ T5701] usb-storage 3-1:6.145: USB Mass Storage device detected
[  129.352894][ T5701] usb 3-1: USB disconnect, device number 17
[  129.909879][ T8157] netlink: 92 bytes leftover after parsing attributes in process `syz.3.985'.
[  129.927224][ T8160] loop0: detected capacity change from 0 to 512
[  129.933572][ T8160] EXT4-fs: Ignoring removed i_version option
[  129.942090][ T8160] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  129.948059][ T8160] EXT4-fs (loop0): blocks per group (64) and clusters per group (32768) inconsistent
[  129.989863][ T8160] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.005761][ T8160] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.237254][   T24] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  130.259085][ T8166] loop2: detected capacity change from 0 to 8
[  130.272956][ T8166] SQUASHFS error: Unable to read directory block [26067d:ffff]
[  130.301893][ T8168] netlink: 'syz.2.988': attribute type 3 has an invalid length.
[  130.313472][ T8168] netlink: 224 bytes leftover after parsing attributes in process `syz.2.988'.
[  130.387819][   T24] usb 4-1: config 127 has an invalid interface number: 192 but max is 0
[  130.391079][   T24] usb 4-1: config 127 has no interface number 0
[  130.395590][   T24] usb 4-1: New USB device found, idVendor=093a, idProduct=2600, bcdDevice=1a.06
[  130.399224][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.402163][   T24] usb 4-1: Product: syz
[  130.403436][   T24] usb 4-1: Manufacturer: syz
[  130.405126][   T24] usb 4-1: SerialNumber: syz
[  130.581176][ T8174] loop0: detected capacity change from 0 to 128
[  130.586616][ T8174] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  130.589918][ T8170] loop2: detected capacity change from 0 to 32768
[  130.608776][ T8174] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  130.613103][ T8170] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  130.619903][   T24] gspca_main: pac7311-2.14.0 probing 093a:2600
[  130.626970][   T24] gspca_pac7311: reg_w() failed index 0xff, value 0x01, error -71
[  130.629522][   T24] pac7311 4-1:127.192: probe with driver pac7311 failed with error -71
[  130.635649][   T24] usb 4-1: USB disconnect, device number 4
[  130.649336][ T8170] XFS (loop2): Ending clean mount
[  130.658690][   T34] audit: type=1800 audit(1788202350.739:29): pid=8170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.989" name="file1" dev="loop2" ino=4422 res=0 errno=0
[  130.689416][ T8184] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  130.693032][ T8184] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  130.996454][   T53] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  131.261266][ T8189] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  131.268712][ T8189] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  131.311013][ T5591] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  131.650927][ T8200] sch_tbf: burst 240 is lower than device lo mtu (32783) !
[  131.681198][ T8203] netlink: 'syz.2.1000': attribute type 64 has an invalid length.
[  131.683816][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1000'.
[  131.686737][ T8203] net_ratelimit: 31 callbacks suppressed
[  131.686743][ T8203] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  131.746665][ T8205] loop2: detected capacity change from 0 to 4096
[  131.751545][ T8205] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  131.761696][ T8205] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  131.769612][ T8205] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  132.105342][ T8213] loop3: detected capacity change from 0 to 32768
[  132.215294][   T24] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  132.378175][   T24] usb 3-1: Using ep0 maxpacket: 16
[  132.384803][   T24] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  132.387622][   T24] usb 3-1: config 0 has no interface number 0
[  132.390045][   T24] usb 3-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[  132.392842][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.414502][   T24] usb 3-1: config 0 descriptor??
[  132.501075][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  132.503635][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  133.013273][   T24] uclogic 0003:28BD:0071.0005: pen parameters not found
[  133.020153][   T24] uclogic 0003:28BD:0071.0005: interface is invalid, ignoring
[  133.030995][   T24] usb 3-1: USB disconnect, device number 18
[  133.186628][ T8253] loop3: detected capacity change from 0 to 8
[  133.192758][ T8253] SQUASHFS error: lzo decompression failed, data probably corrupt
[  133.196586][ T8253] SQUASHFS error: Failed to read block 0x1c6: -5
[  133.202888][ T8253] SQUASHFS error: Unable to read metadata cache entry [1c4]
[  133.205400][ T8253] SQUASHFS error: Unable to read inode 0x11f
[  133.443131][ T8266] loop3: detected capacity change from 0 to 512
[  133.448716][ T8266] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  133.519360][ T8268] input: syz1 as /devices/virtual/input/input11
[  133.779200][ T8274] loop2: detected capacity change from 0 to 40427
[  133.783815][ T8274] F2FS-fs (loop2): Wrong CP boundary, start(512) end(2048) blocks(1024)
[  133.789686][ T8274] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  133.796898][ T8274] F2FS-fs (loop2): invalid crc value
[  133.843431][ T8274] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  133.854201][ T8274] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  133.856446][ T8274] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  133.985212][ T8281] loop0: detected capacity change from 0 to 16
[  134.104542][ T8287] input: syz1 as /devices/virtual/input/input12
[  134.209462][   T34] audit: type=1326 audit(1788202354.344:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8291 comm="syz.2.1038" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f3bd5f9e0d9 code=0x0
[  134.652482][ T8303] loop3: detected capacity change from 0 to 32768
[  134.674144][ T8303] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  134.685608][ T8303] XFS (loop3): Ending clean mount
[  134.706140][ T7509] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  134.947199][ T8322] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1046'.
[  134.950340][ T8322] netlink: 'syz.3.1046': attribute type 2 has an invalid length.
[  135.177516][ T8334] netlink: 'syz.0.1051': attribute type 4 has an invalid length.
[  135.203117][ T8334] netlink: 'syz.0.1051': attribute type 4 has an invalid length.
[  135.355184][ T8344] loop2: detected capacity change from 0 to 512
[  135.361791][ T8344] EXT4-fs (loop2): Test dummy encryption mode enabled
[  135.369585][ T8344] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  135.381651][ T8344] EXT4-fs (loop2): 1 truncate cleaned up
[  135.384838][ T8344] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  135.430487][ T8350] vivid-000: disconnect
[  135.438286][ T8350] vivid-000: reconnect
[  135.458200][ T5591] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  135.568904][ T8356] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1061'.
[  135.644070][ T8352] loop0: detected capacity change from 0 to 32768
[  135.669379][ T8352] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  135.702821][ T8352] XFS (loop0): Ending clean mount
[  135.712636][ T8356] netlink: 'syz.2.1061': attribute type 10 has an invalid length.
[  135.714292][ T8356] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  135.716814][ T8352] XFS (loop0): Quotacheck needed: Please wait.
[  135.719463][ T8356] bond0: (slave netdevsim1): Enslaving as an active interface with an up link
[  135.735414][ T8356] binder: 8355:8356 ioctl c0306201 0 returned -14
[  135.768540][ T8352] XFS (loop0): Quotacheck: Done.
[  135.788311][ T8357] binder: 8355:8357 ioctl c0306201 0 returned -14
[  135.810331][ T5596] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  136.138732][ T8372] loop3: detected capacity change from 0 to 40427
[  136.141850][ T8372] f2fs: Unknown parameter 'whint_mode'
[  136.288446][ T8381] loop3: detected capacity change from 0 to 164
[  136.292507][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1067'.
[  136.295417][ T8381] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  136.304108][ T8381] batman_adv: batadv0: Removing interface: batadv_slave_1
[  136.631045][   T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  136.747724][ T8402] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1077'.
[  136.799796][   T24] usb 4-1: Using ep0 maxpacket: 32
[  136.804100][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.808558][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.815063][   T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  136.819465][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.825436][   T24] usb 4-1: config 0 descriptor??
[  137.072362][ T8410] loop0: detected capacity change from 0 to 32768
[  137.215161][   T34] audit: type=1326 audit(1788202357.375:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8413 comm="syz.0.1083" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f932039e0d9 code=0x0
[  137.251590][   T24] kone 0003:1E7D:2CED.0006: hidraw0: USB HID v0.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.3-1/input0
[  137.435797][   T24] usb 4-1: USB disconnect, device number 5
[  137.614447][ T8422] loop2: detected capacity change from 0 to 512
[  137.622676][ T8422] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  137.637796][ T8422] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.1086: invalid indirect mapped block 9 (level 0)
[  137.645824][ T8422] loop2: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  137.651276][ T8422] EXT4-fs (loop2): 1 truncate cleaned up
[  137.654959][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  137.654973][    C0] EXT4-fs (loop2): initial error at time 1788202357: ext4_free_branches:1023: inode 11
[  137.654995][    C0] EXT4-fs (loop2): last error at time 1788202357: ext4_free_branches:1023: inode 11
[  137.667379][ T8422] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.701671][ T5591] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.014859][ T8435] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  138.019402][ T8435] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  138.093816][ T8439] loop0: detected capacity change from 0 to 1024
[  138.156196][ T8439] hfsplus: request for non-existent node 33423360 in B*Tree
[  138.159642][ T8439] hfsplus: request for non-existent node 33423360 in B*Tree
[  138.166264][ T8439] hfsplus: request for non-existent node 33423360 in B*Tree
[  138.171202][ T8439] hfsplus: request for non-existent node 33423360 in B*Tree
[  138.227691][ T5655] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  138.318252][ T8443] syz_tun: entered allmulticast mode
[  138.392202][ T5655] usb 4-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.a1
[  138.399757][ T5655] usb 4-1: New USB device strings: Mfr=0, Product=229, SerialNumber=0
[  138.406110][ T5655] usb 4-1: Product: syz
[  138.421555][ T5655] usb 4-1: config 0 descriptor??
[  138.430290][ T5655] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  138.441287][ T5655] ftdi_sio ttyUSB0: unknown device type: 0xc6a1
[  138.480149][ T8447] kernel read not supported for file /per_cpu/cpu0/trace_pipe (pid: 8447 comm: syz.0.1097)
[  138.489570][   T34] audit: type=1800 audit(1788202358.666:32): pid=8447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1097" name="trace_pipe" dev="tracefs" ino=1095 res=0 errno=0
[  138.634746][ T5655] usb 4-1: USB disconnect, device number 6
[  138.642637][ T5655] ftdi_sio 4-1:0.0: device disconnected
[  138.950089][ T8467] loop0: detected capacity change from 0 to 256
[  138.955004][ T8467] exfat: Deprecated parameter 'utf8'
[  138.957375][ T8467] exfat: Deprecated parameter 'namecase'
[  138.959659][ T8467] exfat: Deprecated parameter 'namecase'
[  138.962009][ T8467] exfat: Deprecated parameter 'utf8'
[  138.976161][ T8467] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[  138.981048][ T8467] exFAT-fs (loop0): failed to test first cluster bit of root dir(5)
[  139.099243][ T5701] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  139.205136][ T8477] loop0: detected capacity change from 0 to 256
[  139.261445][ T5701] usb 3-1: Using ep0 maxpacket: 16
[  139.266670][ T5701] usb 3-1: config 169 has an invalid interface number: 39 but max is 0
[  139.273618][ T5701] usb 3-1: config 169 has no interface number 0
[  139.277953][ T5701] usb 3-1: config 169 interface 39 has no altsetting 0
[  139.292101][ T5701] usb 3-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=8c.a2
[  139.305926][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.314413][ T5701] usb 3-1: Product: syz
[  139.315854][ T5701] usb 3-1: Manufacturer: syz
[  139.322240][ T5701] usb 3-1: SerialNumber: syz
[  139.509871][ T8491] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  139.516200][ T8491] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  139.531225][ T5701] gspca_main: jl2005bcd-2.14.0 probing 0979:0227
[  139.537767][ T5701] command write [95] error -22
[  139.549581][ T5701] usb 3-1: USB disconnect, device number 19
[  139.891482][ T8494] C: renamed from veth1_to_team (while UP)
[  139.898963][ T8494] netlink: 'syz.3.1120': attribute type 2 has an invalid length.
[  139.901894][ T8494] netlink: 116 bytes leftover after parsing attributes in process `syz.3.1120'.
[  139.906782][ T8494] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  140.276627][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1135'.
[  140.341515][ T8533] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1138'.
[  140.374087][ T8535] loop0: detected capacity change from 0 to 128
[  140.380762][ T8535] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  140.392342][ T8535] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  140.452795][ T8539] loop2: detected capacity change from 0 to 1024
[  140.649110][ T8552] loop3: detected capacity change from 0 to 4096
[  140.694624][ T8557] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  140.796007][ T8560] loop2: detected capacity change from 0 to 4096
[  140.801752][ T8560] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  140.826778][ T8560] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  140.830246][ T8560] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  140.878458][ T5701] libceph: mon0 (1)[c::]:6789 socket error on write
[  141.098767][ T8577] sctp: [Deprecated]: syz.3.1157 (pid 8577) Use of int in max_burst socket option deprecated.
[  141.098767][ T8577] Use struct sctp_assoc_value instead
[  141.144499][ T5701] libceph: mon0 (1)[c::]:6789 socket error on write
[  141.609700][ T8564] ceph: No mds server is up or the cluster is laggy
[  141.652570][ T8586] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1161'.
[  142.486115][ T8629] program syz.3.1170 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  142.543958][ T5700] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  142.693032][ T5700] usb 3-1: Using ep0 maxpacket: 32
[  142.696400][ T5700] usb 3-1: config index 0 descriptor too short (expected 156, got 27)
[  142.701477][ T5700] usb 3-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30
[  142.706911][ T5700] usb 3-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  142.710733][ T5700] usb 3-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144
[  142.720075][ T5700] usb 3-1: config 0 interface 0 has no altsetting 0
[  142.728634][ T5700] usb 3-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66
[  142.735650][ T5700] usb 3-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172
[  142.749279][ T5700] usb 3-1: Product: syz
[  142.755060][ T5700] usb 3-1: Manufacturer: syz
[  142.762555][ T5700] usb 3-1: SerialNumber: syz
[  142.788469][ T5700] usb 3-1: config 0 descriptor??
[  142.815793][ T5700] ldusb 3-1:0.0: Interrupt out endpoint not found (using control endpoint instead)
[  142.888267][ T5700] ldusb 3-1:0.0: LD USB Device #0 now attached to major 180 minor 0
[  142.998574][ T8685] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  143.002450][ T8685] bond2: (slave macvlan2): making interface the new active one
[  143.005485][ T8685] bond2: (slave macvlan2): Enslaving as an active interface with an up link
[  143.008663][   T24] bond_slave_0: entered promiscuous mode
[  143.012004][   T24] bond_slave_1: entered promiscuous mode
[  143.021754][ T8685] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1172'.
[  143.027509][ T8685] bond_slave_0: left promiscuous mode
[  143.030091][ T8685] bond_slave_1: left promiscuous mode
[  143.050050][ T8685] bond2: (slave macvlan2): Releasing backup interface
[  143.057656][ T8685] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  143.066884][ T8685] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  143.071938][ T8685] bond0 (unregistering): Released all slaves
[  143.093741][ T8615] ldusb 3-1:0.0: Couldn't submit HID_REQ_SET_REPORT -71
[  143.108599][    C0] ldusb 3-1:0.0: usb_submit_urb failed (-19)
[  143.111888][   T10] usb 3-1: USB disconnect, device number 20
[  143.126414][   T10] ldusb 3-1:0.0: LD USB Device #0 now disconnected
[  143.698231][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1174'.
[  143.702471][ T8694] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1174'.
[  143.797496][ T8698] ip_tables: iptables: counters copy to user failed while replacing table
[  143.896950][ T8706] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  143.903122][ T8706] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  144.079569][ T8710] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0
[  144.182643][ T8720] loop2: detected capacity change from 0 to 4096
[  144.188435][ T8720] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  144.200099][ T8720] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  144.203993][ T8720] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  144.225579][ T8720] ntfs3(loop2): ino=1e, mi_enum_attr
[  144.228125][ T8720] ntfs3(loop2): ino=1e, mi_enum_attr
[  144.230255][ T8720] ntfs3(loop2): ino=1e, "file1" mi_enum_attr
[  144.232484][ T8720] ntfs3(loop2): ino=1e, "file1" mi_enum_attr
[  144.239158][ T8720] ntfs3(loop2): ino=1e, "file1" mi_enum_attr
[  144.241260][ T8720] ntfs3(loop2): ino=1e, "file1" mi_enum_attr
[  144.243218][ T8720] ntfs3(loop2): ino=1e, "file1" ni_find_attr
[  144.737010][ T8740] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1195'.
[  144.740224][ T8740] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1195'.
[  144.845525][ T8746] loop0: detected capacity change from 0 to 4096
[  144.857212][ T8746] NILFS (loop0): invalid segment: Checksum error in segment payload
[  144.867100][ T8746] NILFS (loop0): trying rollback from an earlier position
[  144.900680][ T8746] NILFS (loop0): recovery complete
[  144.908458][ T8751] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  144.974045][ T8753] tipc: Enabled bearer <udp:syz1>, priority 10
[  145.103832][ T8759] loop0: detected capacity change from 0 to 16
[  145.115381][ T8759] erofs (device loop0): mounted with root inode @ nid 36.
[  145.119934][   T10] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  145.136041][ T8759] erofs (device loop0): not enough plain data on disk @ la 4096 of nid 89
[  145.144586][ T8759] erofs (device loop0): readahead error at folio 1 @ nid 89
[  145.148092][ T8759] syz.0.1203: attempt to access beyond end of device
[  145.148092][ T8759] loop0: rw=524288, sector=128, nr_sectors = 256 limit=16
[  145.155591][ T8759] syz.0.1203: attempt to access beyond end of device
[  145.155591][ T8759] loop0: rw=524288, sector=0, nr_sectors = 1024 limit=16
[  145.165593][ T8759] erofs (device loop0): not enough plain data on disk @ la 20480 of nid 89
[  145.169777][ T8759] erofs (device loop0): readahead error at folio 4 @ nid 89
[  145.174392][ T8759] erofs (device loop0): not enough plain data on disk @ la 4096 of nid 89
[  145.177806][ T8759] erofs (device loop0): not enough plain data on disk @ la 4096 of nid 89
[  145.182372][ T8760] syz.0.1203: attempt to access beyond end of device
[  145.182372][ T8760] loop0: rw=8912896, sector=1342177272, nr_sectors = 8 limit=16
[  145.182490][ T8759] erofs (device loop0): read error -117 @ 1 of nid 89
[  145.191589][   T34] audit: type=1800 audit(1788202365.412:33): pid=8759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1203" name="file2" dev="loop0" ino=89 res=0 errno=0
[  145.205582][ T8760] syz.0.1203: attempt to access beyond end of device
[  145.205582][ T8760] loop0: rw=8388608, sector=1342177272, nr_sectors = 8 limit=16
[  145.217530][   T34] audit: type=1800 audit(1788202365.432:34): pid=8760 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1203" name="file1" dev="loop0" ino=86 res=0 errno=0
[  145.264321][ T8762] loop0: detected capacity change from 0 to 128
[  145.269877][ T8762] FAT-fs (loop0): bogus number of reserved sectors
[  145.272492][ T8762] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  145.275978][ T8762] FAT-fs (loop0): Can't find a valid FAT filesystem
[  145.293952][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  145.303339][   T10] usb 3-1: config 63 has an invalid interface number: 66 but max is 0
[  145.310892][   T10] usb 3-1: config 63 has an invalid descriptor of length 55, skipping remainder of the config
[  145.318141][ T8764] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  145.320386][   T10] usb 3-1: config 63 has no interface number 0
[  145.322660][ T8764] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  145.328294][   T10] usb 3-1: config 63 interface 66 has no altsetting 0
[  145.334718][   T10] usb 3-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4
[  145.338196][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.341108][   T10] usb 3-1: Product: syz
[  145.342613][   T10] usb 3-1: Manufacturer: syz
[  145.344432][   T10] usb 3-1: SerialNumber: syz
[  145.566803][   T10] uvcvideo 3-1:63.66: Found UVC 0.07 device syz (174f:8acf)
[  145.569896][   T10] uvcvideo 3-1:63.66: No valid video chain found.
[  145.580936][   T10] usb 3-1: USB disconnect, device number 21
[  145.795948][ T8769] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1207'.
[  145.893685][ T8774] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1209'.
[  146.013034][ T8780] loop0: detected capacity change from 0 to 4096
[  146.056176][ T8781] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  146.129352][ T8786] dns_resolver: Unsupported content type (231)
[  146.291317][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1221'.
[  146.425873][ T8808] loop0: detected capacity change from 0 to 4096
[  146.447248][ T8806] i2c i2c-0: new_device: Instantiated device nb7vpq904m at 0x01
[  146.497658][ T8809] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  146.611061][ T8815] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  146.615480][ T8815] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  146.622645][ T8817] loop2: detected capacity change from 0 to 512
[  146.657648][ T8817] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.662801][ T8817] ext4 filesystem being mounted at /352/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  146.716325][ T5591] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.024764][ T8905] xt_l2tp: v2 doesn't support IP mode
[  148.206113][ T8913] loop0: detected capacity change from 0 to 256
[  148.296690][ T8920] netlink: 4804 bytes leftover after parsing attributes in process `syz.2.1245'.
[  148.448023][ T8928] loop0: detected capacity change from 0 to 256
[  148.456271][ T8928] exfat: Deprecated parameter 'utf8'
[  148.471518][ T8928] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  148.579392][ T8934] cgroup: noprefix used incorrectly
[  148.729003][ T8931] loop2: detected capacity change from 0 to 32768
[  148.758893][ T8931] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  148.772037][ T8931] JBD2: Ignoring recovery information on journal
[  148.819680][ T8931] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  148.934944][ T5591] ocfs2: Unmounting device (7,2) on (node local)
[  149.193042][ T8953] Driver unsupported XDP return value 0 on prog  (id 68) dev N/A, expect packet loss!
[  149.421793][ T8968] sd 0:0:0:0: PR command failed: 1026
[  149.424429][ T8968] sd 0:0:0:0: Sense Key : Illegal Request [current] 
[  149.429512][ T8968] sd 0:0:0:0: Add. Sense: Invalid command operation code
[  150.187337][ T9000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  150.192168][ T9000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  150.227684][ T9003] netlink: 'syz.3.1280': attribute type 2 has an invalid length.
[  150.420313][ T9013] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1285'.
[  150.433404][ T9015] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1286'.
[  150.567575][ T9025] netlink: 'syz.3.1291': attribute type 2 has an invalid length.
[  150.570015][ T9025] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1291'.
[  150.601440][ T9029] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  150.611801][ T9029] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  150.621861][ T9029] overlayfs: conflicting lowerdir path
[  150.747433][ T9038] loop3: detected capacity change from 0 to 64
[  150.752158][ T9038] BFS-fs: bfs_fill_super(): loop3 is unclean, continuing
[  151.112059][ T9045] loop0: detected capacity change from 0 to 4096
[  151.117062][ T9045] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  151.177304][ T9045] ntfs3(loop0): mft corrupted
[  151.179185][ T9045] ntfs3(loop0): Failed to load $Extend (-22).
[  151.182931][ T9045] ntfs3(loop0): Failed to initialize $Extend.
[  151.554073][ T9053] loop0: detected capacity change from 0 to 4096
[  151.634260][ T9053] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  152.146544][ T9078] loop2: detected capacity change from 0 to 256
[  152.248181][ T9082] loop2: detected capacity change from 0 to 128
[  152.262189][ T9082] EXT4-fs (loop2): Test dummy encryption mode enabled
[  152.285160][ T9082] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  152.313910][ T9082] ext4 filesystem being mounted at /374/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  152.350580][ T9091] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  152.354745][ T9091] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  153.075638][ T9100] loop0: detected capacity change from 0 to 40427
[  153.080276][ T9100] F2FS-fs (loop0): build fault injection rate: 174
[  153.084457][ T9100] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  153.092066][ T5591] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  153.095788][ T9100] F2FS-fs (loop0): invalid crc value
[  153.146601][ T9100] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  153.153010][ T9100] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  153.184064][ T5596] syz-executor: attempt to access beyond end of device
[  153.184064][ T5596] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  153.199812][ T5596] CPU: 1 UID: 0 PID: 5596 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  153.199826][ T5596] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  153.199831][ T5596] Call Trace:
[  153.199835][ T5596]  <TASK>
[  153.199838][ T5596]  dump_stack_lvl+0xe8/0x150
[  153.199852][ T5596]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  153.199865][ T5596]  f2fs_write_end_io+0x124b/0x1710
[  153.199880][ T5596]  __submit_merged_bio+0x258/0x6a0
[  153.199889][ T5596]  ? rcu_is_watching+0x15/0xb0
[  153.199902][ T5596]  __submit_merged_write_cond+0x3c9/0x4e0
[  153.199914][ T5596]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  153.199932][ T5596]  f2fs_write_data_pages+0x2a27/0x36f0
[  153.199942][ T5596]  ? is_bpf_text_address+0x26/0x2b0
[  153.199965][ T5596]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  153.199975][ T5596]  ? is_bpf_text_address+0x26/0x2b0
[  153.199988][ T5596]  ? arch_stack_walk+0xfb/0x150
[  153.200010][ T5596]  ? add_lock_to_list+0xc7/0x100
[  153.200021][ T5596]  ? lockdep_unlock+0x5d/0xd0
[  153.200028][ T5596]  ? __lock_acquire+0x14b9/0x2e50
[  153.200047][ T5596]  ? do_raw_spin_lock+0x12b/0x2f0
[  153.200058][ T5596]  ? do_raw_spin_unlock+0x4d/0x210
[  153.200065][ T5596]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  153.200076][ T5596]  do_writepages+0x338/0x560
[  153.200089][ T5596]  ? do_raw_spin_unlock+0x4d/0x210
[  153.200098][ T5596]  filemap_fdatawrite+0x1e9/0x2f0
[  153.200109][ T5596]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  153.200135][ T5596]  ? do_raw_spin_unlock+0x4d/0x210
[  153.200167][ T5596]  f2fs_sync_dirty_inodes+0x30e/0x830
[  153.200182][ T5596]  f2fs_write_checkpoint+0xa3d/0x2710
[  153.200189][ T5596]  ? __lock_acquire+0x6df/0x2e50
[  153.200235][ T5596]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  153.200264][ T5596]  kill_f2fs_super+0x2f6/0x700
[  153.200279][ T5596]  ? __pfx_kill_f2fs_super+0x10/0x10
[  153.200291][ T5596]  ? call_rcu+0x64b/0x8b0
[  153.200301][ T5596]  ? lockdep_hardirqs_on+0x7a/0x110
[  153.200315][ T5596]  deactivate_locked_super+0xbc/0x130
[  153.200325][ T5596]  cleanup_mnt+0x3d3/0x460
[  153.200336][ T5596]  task_work_run+0x1d9/0x270
[  153.200348][ T5596]  ? __pfx_task_work_run+0x10/0x10
[  153.200361][ T5596]  exit_to_user_mode_loop+0x1fa/0x730
[  153.200370][ T5596]  ? rcu_is_watching+0x15/0xb0
[  153.200379][ T5596]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.200387][ T5596]  do_syscall_64+0x353/0x580
[  153.200395][ T5596]  ? trace_irq_disable+0x3b/0x140
[  153.200406][ T5596]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  153.200412][ T5596] RIP: 0033:0x7f932039f317
[  153.200420][ T5596] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  153.200427][ T5596] RSP: 002b:00007ffd95158448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  153.200435][ T5596] RAX: 0000000000000000 RBX: 00007f9320434474 RCX: 00007f932039f317
[  153.200440][ T5596] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd95158500
[  153.200444][ T5596] RBP: 00007ffd95158500 R08: 00007ffd95159500 R09: 00000000ffffffff
[  153.200449][ T5596] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd95159590
[  153.200453][ T5596] R13: 00007f9320434474 R14: 0000000000025798 R15: 00007ffd951595d0
[  153.200465][ T5596]  </TASK>
[  153.203343][ T5596] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  154.499777][ T9130] loop3: detected capacity change from 0 to 64
[  154.816678][ T9144] loop2: detected capacity change from 0 to 32768
[  154.881061][ T9144] JBD2: Ignoring recovery information on journal
[  154.964715][ T9144] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  155.060689][   T34] audit: type=1804 audit(1788202375.312:35): pid=9144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1344" name="/newroot/381/file1/file1" dev="loop2" ino=17059 res=1 errno=0
[  155.200566][ T5591] ocfs2: Unmounting device (7,2) on (node local)
[  155.224091][ T9142] loop3: detected capacity change from 0 to 131072
[  155.227571][ T9142] F2FS-fs (loop3): Invalid log sectorsize (67108873)
[  155.229827][ T9142] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  155.232886][ T9142] F2FS-fs (loop3): invalid crc value
[  155.268546][ T9142] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  155.274970][ T9142] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  155.277825][ T9142] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4
[  155.324112][ T9160] loop2: detected capacity change from 0 to 1024
[  155.498929][ T9166] EXT4-fs: Ignoring removed oldalloc option
[  155.503585][ T9166] EXT4-fs: Ignoring removed orlov option
[  155.508104][ T9166] EXT4-fs: Ignoring removed nomblk_io_submit option
[  155.532311][ T9166] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.556972][ T5591] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.741452][ T9179] set_capacity_and_notify: 1 callbacks suppressed
[  155.741463][ T9179] loop3: detected capacity change from 0 to 128
[  155.760813][ T9179] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  155.766347][ T9179] hpfs: filesystem error: improperly stopped
[  155.768698][ T9179] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  155.771607][ T9179] hpfs: You really don't want any checks? You are crazy...
[  155.774246][ T9179] hpfs: Code page directory magic doesn't match (magic = 7b3184b5)
[  155.777508][ T9179] hpfs: code page support is disabled
[  155.780390][ T9179] hpfs: hpfs_map_4sectors(): unaligned read
[  155.782568][ T9179] hpfs: hpfs_map_4sectors(): unaligned read
[  155.784658][ T9179] hpfs: filesystem error: unable to find root dir
[  155.798533][ T9179] hpfs: hpfs_map_4sectors(): unaligned read
[  155.802944][ T9179] hpfs: filesystem error: invalid bitmap block pointer 00000000 -> 7b3184b5 at aib
[  155.825767][ T5700] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  155.975377][ T5700] usb 3-1: Using ep0 maxpacket: 32
[  155.983533][ T5700] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  155.990059][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.006424][ T5700] gspca_main: nw80x-2.14.0 probing 055f:d001
[  156.319338][ T9200] loop0: detected capacity change from 0 to 32768
[  156.326853][ T9200] (syz.0.1363,9200,1):ocfs2_validate_inode_block:1483 ERROR: Invalid dinode #68: Corrupt state (nlink = 0 or mode = 0) detected!
[  156.332035][ T9200] (syz.0.1363,9200,1):ocfs2_read_locked_inode:633 ERROR: status = -117
[  156.335163][ T9200] (syz.0.1363,9200,1):_ocfs2_get_system_file_inode:141 ERROR: status = -117
[  156.337955][ T9200] (syz.0.1363,9200,1):ocfs2_init_global_system_inodes:465 ERROR: status = -22
[  156.340671][ T9200] (syz.0.1363,9200,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 1, possibly corrupt fs?
[  156.340683][ T9200] (syz.0.1363,9200,1):ocfs2_init_global_system_inodes:476 ERROR: status = -22
[  156.348313][ T9200] (syz.0.1363,9200,1):ocfs2_initialize_super:2195 ERROR: status = -22
[  156.350912][ T9200] (syz.0.1363,9200,1):ocfs2_fill_super:1177 ERROR: status = -22
[  157.328095][ T5700] gspca_nw80x: reg_w err -71
[  157.330605][ T5700] nw80x 3-1:3.0: probe with driver nw80x failed with error -71
[  157.337282][ T5700] usb 3-1: USB disconnect, device number 22
[  157.998877][ T9218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.005112][ T9218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.494458][ T9222] smc: net device vlan1 applied user defined pnetid SYZ2
[  158.532285][ T9224] loop3: detected capacity change from 0 to 2048
[  158.546679][ T9224] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  158.558514][ T9224] EXT4-fs error (device loop3): ext4_ext_precache:648: inode #2: comm syz.3.1371: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  158.580257][ T7509] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.986824][ T9241] bond2: option min_links: invalid value (18446744073709551613)
[  158.990929][ T9241] bond2: option min_links: allowed values 0 - 2147483647
[  158.995845][ T9241] bond2 (unregistering): Released all slaves
[  159.020027][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1378'.
[  159.055336][ T9246] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1379'.
[  159.063870][ T9246] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1379'.
[  159.081083][ T9246] netlink: 'syz.0.1379': attribute type 5 has an invalid length.
[  159.087397][ T9246] netlink: 43 bytes leftover after parsing attributes in process `syz.0.1379'.
[  159.118416][ T9248] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  159.121888][ T9248] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  159.186078][ T9252] loop2: detected capacity change from 0 to 128
[  159.372985][   T53] Bluetooth: hci0: unexpected event for opcode 0x0c26
[  159.434073][ T9268] netlink: 'syz.2.1390': attribute type 4 has an invalid length.
[  159.436607][ T9268] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1390'.
[  159.826200][   T24] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  159.834847][ T9291] loop0: detected capacity change from 0 to 2048
[  159.888097][ T9291]  loop0: p1 < > p4
[  159.888097][ T9291]  p4: <solaris: [s0] p5 [s1] p6 [s2] p7 >
[  159.912158][ T9291] loop0: p4 size 722688 extends beyond EOD, truncated
[  159.925237][ T9291] loop0: p6 start 262464109 is beyond EOD, truncated
[  159.929432][ T9291] loop0: p7 size 2304 extends beyond EOD, truncated
[  159.976236][   T24] usb 4-1: Using ep0 maxpacket: 16
[  159.989298][   T24] usb 4-1: too many configurations: 112, using maximum allowed: 8
[  160.028419][   T24] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  160.036228][   T24] usb 4-1: New USB device strings: Mfr=144, Product=246, SerialNumber=0
[  160.045362][   T24] usb 4-1: Product: syz
[  160.050688][   T24] usb 4-1: Manufacturer: syz
[  160.059044][ T9293] netlink: 'syz.0.1400': attribute type 1 has an invalid length.
[  160.066448][ T9293] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1400'.
[  160.071778][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[  160.076258][ T5777] udevd[5777]: inotify_add_watch(7, /dev/loop0p5, 10) failed: No such file or directory
[  160.079997][ T5597] udevd[5597]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[  160.087934][ T5762] udevd[5762]: inotify_add_watch(7, /dev/loop0p7, 10) failed: No such file or directory
[  160.089864][   T24] r8152-cfgselector 4-1: Unknown version 0x0000
[  160.100951][   T24] r8152-cfgselector 4-1: config 0 descriptor??
[  160.179873][ T9297] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1402'.
[  160.225229][ T9299] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.229738][ T9299] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.310461][   T24] r8152-cfgselector 4-1: USB disconnect, device number 7
[  160.769458][ T9303] loop2: detected capacity change from 0 to 40427
[  160.777304][ T9303] F2FS-fs (loop2): Insane cp_payload (553648128 >= 504)
[  160.785013][ T9303] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  160.797220][ T9303] F2FS-fs (loop2): invalid crc value
[  160.804210][ T9303] F2FS-fs (loop2): Ignore s_resuid=0, s_resgid=65535 w/o reserve_root and reserve_node
[  160.870488][ T9310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  160.879612][ T9310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  160.909747][ T9303] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  160.925101][ T9303] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  160.928740][ T9303] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  160.957819][ T5591] syz-executor: attempt to access beyond end of device
[  160.957819][ T5591] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  160.968761][ T5591] CPU: 1 UID: 0 PID: 5591 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  160.968788][ T5591] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  160.968795][ T5591] Call Trace:
[  160.968800][ T5591]  <TASK>
[  160.968806][ T5591]  dump_stack_lvl+0xe8/0x150
[  160.968828][ T5591]  f2fs_stop_checkpoint+0x3f6/0x5d0
[  160.968848][ T5591]  f2fs_write_end_io+0x124b/0x1710
[  160.968873][ T5591]  __submit_merged_bio+0x258/0x6a0
[  160.968889][ T5591]  ? rcu_is_watching+0x15/0xb0
[  160.968909][ T5591]  __submit_merged_write_cond+0x3c9/0x4e0
[  160.968932][ T5591]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  160.968960][ T5591]  f2fs_write_data_pages+0x2a27/0x36f0
[  160.968977][ T5591]  ? __lock_acquire+0x6df/0x2e50
[  160.969014][ T5591]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  160.969028][ T5591]  ? is_bpf_text_address+0x26/0x2b0
[  160.969051][ T5591]  ? arch_stack_walk+0xfb/0x150
[  160.969086][ T5591]  ? add_lock_to_list+0xc7/0x100
[  160.969103][ T5591]  ? lockdep_unlock+0x5d/0xd0
[  160.969114][ T5591]  ? __lock_acquire+0x14b9/0x2e50
[  160.969189][ T5591]  ? do_raw_spin_lock+0x12b/0x2f0
[  160.969208][ T5591]  ? do_raw_spin_unlock+0x4d/0x210
[  160.969222][ T5591]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  160.969239][ T5591]  do_writepages+0x338/0x560
[  160.969261][ T5591]  ? do_raw_spin_unlock+0x4d/0x210
[  160.969275][ T5591]  filemap_fdatawrite+0x1e9/0x2f0
[  160.969293][ T5591]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  160.969335][ T5591]  ? do_raw_spin_unlock+0x4d/0x210
[  160.969351][ T5591]  f2fs_sync_dirty_inodes+0x30e/0x830
[  160.969373][ T5591]  f2fs_write_checkpoint+0xa3d/0x2710
[  160.969384][ T5591]  ? __lock_acquire+0x6df/0x2e50
[  160.969418][ T5591]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  160.969463][ T5591]  kill_f2fs_super+0x2f6/0x700
[  160.969480][ T5591]  ? __pfx_kill_f2fs_super+0x10/0x10
[  160.969501][ T5591]  ? call_rcu+0x64b/0x8b0
[  160.969516][ T5591]  ? lockdep_hardirqs_on+0x7a/0x110
[  160.969538][ T5591]  deactivate_locked_super+0xbc/0x130
[  160.969555][ T5591]  cleanup_mnt+0x3d3/0x460
[  160.969572][ T5591]  task_work_run+0x1d9/0x270
[  160.969591][ T5591]  ? __pfx_task_work_run+0x10/0x10
[  160.969614][ T5591]  exit_to_user_mode_loop+0x1fa/0x730
[  160.969627][ T5591]  ? rcu_is_watching+0x15/0xb0
[  160.969644][ T5591]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.969658][ T5591]  do_syscall_64+0x353/0x580
[  160.969672][ T5591]  ? trace_irq_disable+0x3b/0x140
[  160.969688][ T5591]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  160.969699][ T5591] RIP: 0033:0x7f3bd5f9f317
[  160.969713][ T5591] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  160.969722][ T5591] RSP: 002b:00007ffdb95c4268 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  160.969735][ T5591] RAX: 0000000000000000 RBX: 00007f3bd6034474 RCX: 00007f3bd5f9f317
[  160.969742][ T5591] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb95c4320
[  160.969749][ T5591] RBP: 00007ffdb95c4320 R08: 00007ffdb95c5320 R09: 00000000ffffffff
[  160.969756][ T5591] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdb95c53b0
[  160.969763][ T5591] R13: 00007f3bd6034474 R14: 00000000000275fd R15: 00007ffdb95c53f0
[  160.969790][ T5591]  </TASK>
[  160.969841][ T5591] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  161.062378][ T9312] loop3: detected capacity change from 0 to 32768
[  161.124843][   T34] audit: type=1800 audit(1788202381.407:36): pid=9312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1408" name="file1" dev="loop3" ino=7 res=0 errno=0
[  161.192683][ T9312] Bad index:0 in slot in dtroot
[  161.192683][ T9312] 
[  161.195562][ T9312] ERROR: (device loop3): copy_from_dinode: Corrupt dtroot
[  161.195562][ T9312] 
[  161.203562][ T9312] ERROR: (device loop3): remounting filesystem as read-only
[  161.213564][ T9312] jfs_lookup: iget failed on inum 32
[  161.369266][ T9322] loop3: detected capacity change from 0 to 1024
[  161.385504][ T9322] syz.3.1412: attempt to access beyond end of device
[  161.385504][ T9322] loop3: rw=8390665, sector=262, nr_sectors = 65274 limit=1024
[  161.720778][ T9340] loop2: detected capacity change from 0 to 512
[  161.756043][ T9340] EXT4-fs: Ignoring removed i_version option
[  161.756712][ T9330] loop0: detected capacity change from 0 to 32768
[  161.761176][ T9340] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  161.762716][ T9330] BTRFS: device fsid 3a375e4e-b156-4d76-a2ad-16e198ce1409 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1416 (9330)
[  161.791067][ T9340] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.800398][ T9330] BTRFS info (device loop0): first mount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  161.805937][ T9340] ext4 filesystem being mounted at /411/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.815219][ T9330] BTRFS info (device loop0): using xxhash64 checksum algorithm
[  161.874722][ T5591] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.901046][ T9330] BTRFS info (device loop0): enabling ssd optimizations
[  161.905321][ T9330] BTRFS info (device loop0): turning on async discard
[  161.909406][ T9330] BTRFS info (device loop0): enabling free space tree
[  161.970388][   T34] audit: type=1800 audit(1788202382.239:37): pid=9330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1416" name="bus" dev="loop0" ino=263 res=0 errno=0
[  162.044553][ T5596] BTRFS info (device loop0): last unmount of filesystem 3a375e4e-b156-4d76-a2ad-16e198ce1409
[  162.061618][ T5669] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  162.136592][ T9366] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1427'.
[  162.153639][ T9366] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1427'.
[  162.212213][ T5669] usb 4-1: Using ep0 maxpacket: 32
[  162.219635][ T5669] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  162.236212][ T5669] usb 4-1: config 0 has no interface number 0
[  162.246393][ T5669] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  162.257836][ T5669] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.265879][ T5669] usb 4-1: Product: syz
[  162.269536][ T5669] usb 4-1: Manufacturer: syz
[  162.273174][ T5669] usb 4-1: SerialNumber: syz
[  162.287893][ T5669] usb 4-1: config 0 descriptor??
[  162.298295][ T5669] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  162.418792][ T9370] loop2: detected capacity change from 0 to 32768
[  162.433907][ T9370] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1429 (9370)
[  162.442297][ T9370] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  162.450386][ T9370] BTRFS info (device loop2): using crc32c checksum algorithm
[  162.512930][ T5669] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  162.528164][ T9370] BTRFS info (device loop2): enabling ssd optimizations
[  162.529007][ T5669] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  162.537881][ T9370] BTRFS info (device loop2): turning on flush-on-commit
[  162.547975][ T9370] BTRFS info (device loop2): enabling free space tree
[  162.559555][ T9370] BTRFS info (device loop2): enabling auto defrag
[  162.571709][ T9370] BTRFS info (device loop2): use lzo compression, level 1
[  162.586328][ T9370] BTRFS info (device loop2): max_inline set to 4096
[  162.632084][ T9370] BTRFS error (device loop2): target device  is invalid!
[  162.691637][ T5591] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  162.775262][ T9396] loop0: detected capacity change from 0 to 4096
[  162.812058][ T9396] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  162.816089][ T9396] ntfs3(loop0): It is recommended to use chkdsk.
[  162.822962][ T9396] ntfs3(loop0): ino=0, mi_enum_attr
[  162.835639][ T9396] ntfs3(loop0): Failed to load $MFT (-22).
[  162.904838][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  162.906951][ T5701] usb 4-1: USB disconnect, device number 8
[  162.930425][ T5701] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  162.953041][ T5701] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  162.967728][ T5701] quatech2 4-1:0.51: device disconnected
[  163.121296][ T9401] loop0: detected capacity change from 0 to 32768
[  163.359308][ T5700] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  163.512024][ T5700] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  163.519098][ T5700] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.531391][ T5700] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[  163.545040][ T5700] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice= 0.00
[  163.552198][ T5700] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.557051][ T5700] usb 3-1: Product: syz
[  163.560566][ T5700] usb 3-1: Manufacturer: syz
[  163.565327][ T5700] usb 3-1: SerialNumber: syz
[  163.571755][ T9409] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  163.582123][ T5700] dln2 3-1:1.0: failed to submit RX URB: -90
[  163.588658][ T5700] dln2 3-1:1.0: probe with driver dln2 failed with error -90
[  163.747212][ T9429] loop0: detected capacity change from 0 to 16
[  163.770816][ T9429] erofs (device loop0): mounted with root inode @ nid 36.
[  163.785525][ T5700] usb 3-1: USB disconnect, device number 23
[  163.919647][ T9438] loop0: detected capacity change from 0 to 2048
[  163.944764][ T9440] iso9660: Corrupted directory entry in block 2 of inode 1920
[  164.002718][ T9442] EXT4-fs: Ignoring removed nobh option
[  164.005078][ T9442] EXT4-fs: Ignoring removed nobh option
[  164.011290][ T9442] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  164.026083][ T9438] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry where CRC length (2) does not match entry length (24)
[  164.026925][ T9442] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002]
[  164.034423][ T9442] System zones: 1-12
[  164.036758][ T9442] EXT4-fs (loop3): orphan cleanup on readonly fs
[  164.045909][ T9442] EXT4-fs error (device loop3): ext4_clear_blocks:876: inode #11: comm syz.3.1454: attempt to clear invalid blocks 1024 len 1
[  164.059827][ T9442] loop3: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  164.062775][ T9442] EXT4-fs (loop3): Remounting filesystem read-only
[  164.069860][    C1] EXT4-fs (loop3): error count since last fsck: 1
[  164.069875][    C1] EXT4-fs (loop3): initial error at time 1788202384: ext4_clear_blocks:876: inode 11
[  164.069895][    C1] EXT4-fs (loop3): last error at time 1788202384: ext4_clear_blocks:876: inode 11
[  164.094511][ T9442] EXT4-fs (loop3): 1 truncate cleaned up
[  164.100581][ T9442] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  164.137032][ T9442] EXT4-fs warning (device loop3): dx_probe:791: inode #2: lblock 0: comm syz.3.1454: error -EUCLEAN reading directory block
[  164.156058][ T9449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.165600][ T9449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  164.189294][ T7509] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  164.419733][ T9462] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  164.427653][ T9462] ntfs3(loop3): ino=3, mi_enum_attr
[  164.432399][ T9462] ntfs3(loop3): Failed to load $Volume (-22).
[  164.480556][ T9466] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  164.516037][ T9466] hfsplus: filesystem is marked journaled, leaving read-only.
[  164.736142][ T9480] i2c i2c-0: delete_device: Extra parameters
[  164.795287][ T9483] EXT4-fs: Ignoring removed orlov option
[  164.808196][   T34] audit: type=1326 audit(1788202385.083:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.0.1475" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  164.824146][ T9483] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  164.829560][   T34] audit: type=1326 audit(1788202385.093:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.0.1475" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  164.838429][ T9483] ext4 filesystem being mounted at /428/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  164.844578][   T34] audit: type=1326 audit(1788202385.093:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.0.1475" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  164.863307][   T34] audit: type=1326 audit(1788202385.093:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.0.1475" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  164.876871][   T34] audit: type=1326 audit(1788202385.093:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.0.1475" exe="/syz-executor" sig=0 arch=c000003e syscall=325 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  164.892730][   T34] audit: type=1326 audit(1788202385.093:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.0.1475" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  164.909850][   T34] audit: type=1326 audit(1788202385.093:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.0.1475" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  164.924674][ T5591] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  164.930895][   T34] audit: type=1326 audit(1788202385.093:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9485 comm="syz.0.1475" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  165.026900][ T9499] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1480'.
[  165.140408][ T9505] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1483'.
[  165.158158][ T9505] hsr_slave_1 (unregistering): left promiscuous mode
[  165.783438][ T9521] set_capacity_and_notify: 6 callbacks suppressed
[  165.783448][ T9521] loop2: detected capacity change from 0 to 65536
[  165.857807][ T9521] XFS (loop2): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  165.886367][ T9521] XFS (loop2): Metadata corruption detected at xfs_buf_ioend+0x31b/0x750, xfs_inode block 0x40 xfs_inode_buf_verify
[  165.890176][ T9521] XFS (loop2): Unmount and run xfs_repair
[  165.892060][ T9521] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  165.894611][ T9521] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  165.897534][ T9521] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  165.900318][ T9521] 00000020: 34 f7 58 68 a7 8d ff 64 34 f7 58 68 a7 8d ff 64  4.Xh...d4.Xh...d
[  165.903272][ T9521] 00000030: 34 f7 58 68 a7 8d ff 64 00 00 00 00 00 00 04 1a  4.Xh...d........
[  165.906387][ T9521] 00000040: 00 00 00 00 00 00 00 02 00 00 00 00 00 00 00 01  ................
[  165.909323][ T9521] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 4c 3b ce 39  ............L;.9
[  165.912521][ T9521] 00000060: ff b8 00 00 00 29 b4 d3 00 00 00 00 00 00 00 05  .....)..........
[  165.915267][ T9521] 00000070: 00 00 00 01 00 00 00 10 00 00 00 00 00 00 00 08  ................
[  165.918198][ T9521] XFS (loop2): metadata I/O error in "xfs_read_icluster+0x218/0x3e0" at daddr 0x40 len 32 error 117
[  165.921554][ T9521] loop2: lost filesystem error report for type 5 error -117
[  165.921591][ T9521] XFS (loop2): Failed to read root inode 0x40, error 117
[  165.926144][ T9521] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_mountfs+0x132e/0x2380 (fs/xfs/xfs_mount.c:1261).  Shutting down filesystem.
[  165.930264][ T9521] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  165.932830][ T9521] loop2: lost filesystem error report for type 5 error -108
[  166.350705][ T9541] loop3: detected capacity change from 0 to 8
[  166.422807][ T9541] squashfs image failed sanity check
[  166.628429][ T9553] loop4: detected capacity change from 0 to 7
[  166.643500][ T9553] Dev loop4: unable to read RDB block 7
[  166.655258][ T9553]  loop4: unable to read partition table
[  166.657875][ T9555] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  166.661982][ T9553] loop4: partition table beyond EOD, truncated
[  166.665833][ T9555] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  166.670071][ T9553] loop_reread_partitions: partition scan of loop4 (被x ) failed (rc=-5)
[  166.780326][ T9560] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1504'.
[  166.829885][ T9562] random: crng reseeded on system resumption
[  167.304561][ T9569] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  167.307961][ T9569] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  167.508914][ T9577] Mass Storage Function, version: 2009/09/11
[  167.513216][ T9577] LUN: removable file: (no medium)
[  167.859365][ T9579] openvswitch: netlink: Tunnel attr 157 out of range max 16
[  168.636779][ T9608] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  168.823636][ T9607] loop2: detected capacity change from 0 to 32768
[  168.830411][ T9617] loop3: detected capacity change from 0 to 2048
[  168.879866][ T9617]  loop3: p2 p3 p4 < p5 p6 p7 p8 p9 p10 p11 p12 p13 p14 p15 p16 p17 p18 p19 p20 p21 p22 p23 p24 p25 p26 p27 p28 p29 p30 p31 p32 p33 p34 p35 p36 p37 p38 p39 p40 p41 p42 p43 p44 p45 p46 p47 p48 p49 p50 p51 p52 p53 p54 p55 p56 p57 p58 p59 p60 p61 p62 p63 p64 p65 p66 p67 p68 p69 p70 p71 p72 p73 p74 p75 p76 p77 p78 p79 p80 p81 p82 p83 p84 p85 p86 p87 p88 p89 p90 p91 p92 p93 p94 p95 p96 p97 p98 p99 p100 p101 p102 p103 p104 p105 p106 p107 p108 p109 p110 p111 p112 p113 p114 p115 p116 p117 p118 p119 p120 p121 p122 p123 p124 p125 p126 p127 p128 p129 p130 p131 p132 p133 p134 p135 p136 p137 p138 p139 p140 p141 p142 p143 p144 p145 p146 p147 p148 p149 p150 p151 p152 p153 p154 p155 p156 p157 p158 p159 p160 p161 p162 p163 p164 p165 p166 p167 p168 p169 p170 p171 p172 p173 p174 p175 p176 p177 p178 p179 p180 p181 p182 p183 p184 p185 p186 p187 p188 p189 p190 p191 p192 p193 p194 p195 p196 p197 p198 p199 p200 p201 p202 p203 p204 p205 p206 p207 p208 p209 p210 p211 p212 p213 p214 p215 p216 p217 p218 p219 p220 p221 p222 p223 p224 p2
[  168.884937][ T9617] loop3: p3 start 4225 is beyond EOD, 
[  168.887249][ T9607]  loop2: p1 p3 < >
[  168.916948][ T9617] truncated
[  169.010137][ T5597] udevd[5597]: inotify_add_watch(7, /dev/loop2p1, 10) failed: No such file or directory
[  169.017919][ T5777] udevd[5777]: inotify_add_watch(7, /dev/loop2p3, 10) failed: No such file or directory
[  169.191035][ T9623] loop0: detected capacity change from 0 to 1024
[  169.239533][ T9623] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.306678][ T5596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.497359][ T9644] bridge0: port 3(ipvlan2) entered blocking state
[  169.499497][ T9644] bridge0: port 3(ipvlan2) entered disabled state
[  169.502158][ T9644] ipvlan2: entered allmulticast mode
[  169.504178][ T9644] bridge0: entered allmulticast mode
[  169.513389][ T9644] ipvlan2: left allmulticast mode
[  169.515428][ T9644] bridge0: left allmulticast mode
[  170.242283][ T9658] udevd[9658]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory
[  170.244920][ T9656] udevd[9656]: inotify_add_watch(7, /dev/loop3p10, 10) failed: No such file or directory
[  170.249191][ T5595] udevd[5595]: inotify_add_watch(7, /dev/loop3p18, 10) failed: No such file or directory
[  170.252298][ T9651] udevd[9651]: inotify_add_watch(7, /dev/loop3p8, 10) failed: No such file or directory
[  170.253885][ T9653] udevd[9653]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory
[  170.267083][ T5597] udevd[5597]: inotify_add_watch(7, /dev/loop3p15, 10) failed: No such file or directory
[  170.268442][ T5736] udevd[5736]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory
[  170.273596][ T5762] udevd[5762]: inotify_add_watch(7, /dev/loop3p17, 10) failed: No such file or directory
[  170.342735][ T9668] xt_hashlimit: size too large, truncated to 1048576
[  170.365253][   T24] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  170.505357][ T9674] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  170.511523][ T9674] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  170.559845][   T24] usb 3-1: Using ep0 maxpacket: 32
[  170.571013][   T24] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  170.584461][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.611983][   T24] usb 3-1: config 0 descriptor??
[  170.647115][   T24] gspca_main: nw80x-2.14.0 probing 055f:d001
[  171.098862][ T9680] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.114119][ T9680] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  171.357018][ T9682] loop3: detected capacity change from 0 to 1756
[  171.364784][ T9682] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  171.367878][ T9682] UDF-fs: Scanning with blocksize 512 failed
[  171.384230][ T9682] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  171.387413][ T9682] UDF-fs: Scanning with blocksize 1024 failed
[  171.393635][ T9682] UDF-fs: warning (device loop3): udf_verify_domain_identifier: Descriptor for logical volume marked write protected. Forcing read only mount.
[  171.448229][   T24] gspca_nw80x: reg_r err -71
[  171.454856][   T24] nw80x 3-1:0.0: probe with driver nw80x failed with error -71
[  171.468404][   T24] usb 3-1: USB disconnect, device number 24
[  171.655201][ T9698] Bluetooth: hci0: unsupported parameter 5135
[  171.657063][ T9698] Bluetooth: hci0: unsupported parameter 8192
[  171.663269][ T9698] Bluetooth: hci0: unsupported parameter 5135
[  171.665442][ T9698] Bluetooth: hci0: unsupported parameter 8192
[  171.691733][ T9700] loop3: detected capacity change from 0 to 16
[  171.695318][ T9700] erofs (device loop3): rootino(nid 36) is not a directory(i_mode 27700)
[  171.921123][ T9713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  171.926671][ T9713] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.016103][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1570'.
[  172.290849][ T9732] loop2: detected capacity change from 0 to 32768
[  172.301128][ T9732] syz.2.1576: attempt to access beyond end of device
[  172.301128][ T9732] loop2: rw=8388608, sector=17179869440, nr_sectors = 8 limit=32768
[  172.305945][ T9732] Read error 10 at 0x0
[  172.312097][ T9732] read_mapping_page failed!
[  172.314353][ T9732] jfs_mount: diMount failed w/rc = -5
[  172.318479][   T24] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  172.318648][ T9732] Mount JFS Failure: -5
[  172.326361][ T9732] jfs_mount failed w/return code = -5
[  172.489522][   T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[  172.498090][   T24] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  172.508121][   T24] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[  172.514462][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.519095][   T24] usb 4-1: Product: syz
[  172.520824][   T24] usb 4-1: Manufacturer: syz
[  172.522670][   T24] usb 4-1: SerialNumber: syz
[  172.526625][   T24] usb 4-1: config 0 descriptor??
[  172.532093][ T9726] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  172.536586][ T9726] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  172.746192][ T9726] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  172.750384][ T9726] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  173.156099][   T24] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[  173.196972][   T32] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  173.346946][   T32] usb 3-1: Using ep0 maxpacket: 16
[  173.354438][   T32] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  173.358349][   T32] usb 3-1: config 0 interface 0 altsetting 1 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  173.362064][   T32] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  173.362224][ T9760] netlink: 'syz.0.1589': attribute type 2 has an invalid length.
[  173.365427][   T32] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  173.372730][   T32] usb 3-1: config 0 interface 0 has no altsetting 0
[  173.378684][   T32] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  173.381690][   T32] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.384515][   T32] usb 3-1: Product: syz
[  173.385955][   T32] usb 3-1: Manufacturer: syz
[  173.387975][   T32] usb 3-1: SerialNumber: syz
[  173.394837][   T32] usb 3-1: config 0 descriptor??
[  173.399925][ T9758] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  173.563974][   T24] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): Error reading chip ID
[  173.583647][   T24] usb 4-1: USB disconnect, device number 9
[  173.610686][ T9758] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  173.618249][   T32] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input14
[  173.784905][ T9768] loop0: detected capacity change from 0 to 32768
[  173.803369][ T9768] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  173.824633][   T10] usb 3-1: USB disconnect, device number 25
[  173.842515][ T9768] XFS (loop0): Ending clean mount
[  173.912838][ T5596] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  174.194413][ T9786] netlink: 'syz.3.1597': attribute type 10 has an invalid length.
[  174.259740][ T9788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1598'.
[  174.275676][ T9790] tmpfs: Bad value for 'mpol'
[  174.546948][ T9811] x_tables: ip6_tables: DSCP target: only valid in mangle table, not syz1
[  174.797815][ T9826] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.804389][ T9826] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.985528][ T7509] overlayfs: failed lookup in lower (newroot/268, name='file0', err=-40): overlapping layers
[  174.989565][ T7509] overlayfs: failed lookup in lower (newroot/268, name='file0', err=-40): overlapping layers
[  175.359305][ T5648] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.365461][ T4983] Bluetooth: hci0: command 0x0c1a tx timeout
[  175.447902][ T4983] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  175.452217][ T4983] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  175.456648][ T4983] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  175.468101][ T4983] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  175.471426][ T4983] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  175.523729][ T9860] loop0: detected capacity change from 0 to 2048
[  175.562634][ T9860] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.573735][ T9860] ext4 filesystem being mounted at /584/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.573794][ T5648] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.616654][ T5596] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.684553][   T34] kauditd_printk_skb: 1 callbacks suppressed
[  175.684563][   T34] audit: type=1804 audit(1788202395.975:47): pid=9871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1633" name="/newroot/585/file0" dev="tmpfs" ino=3078 res=1 errno=0
[  175.698328][ T5648] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.735343][   T32] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  175.778800][ T5648] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.886108][   T32] usb 3-1: Using ep0 maxpacket: 8
[  175.892544][   T32] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  175.899140][   T32] usb 3-1: config 179 has no interface number 0
[  175.904898][   T32] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[  175.913283][   T32] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[  175.922640][   T32] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  175.928656][   T32] usb 3-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[  175.939232][   T32] usb 3-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  175.944497][   T32] usb 3-1: config 179 interface 65 has no altsetting 0
[  175.948773][   T32] usb 3-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  175.951606][   T32] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.020777][   T32] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input15
[  176.148556][ T5648] bridge_slave_1: left allmulticast mode
[  176.150986][ T5648] bridge_slave_1: left promiscuous mode
[  176.153433][ T5648] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.160179][ T5648] bridge_slave_0: left allmulticast mode
[  176.162592][ T5648] bridge_slave_0: left promiscuous mode
[  176.165611][ T5648] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.170434][   T32] usb 3-1: USB disconnect, device number 26
[  176.403450][ T5648] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.409567][ T5648] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.413296][ T5648] bond0 (unregistering): Released all slaves
[  176.430724][ T5339] 8021q: adding VLAN 0 to HW filter on device eth5
[  176.452182][ T9851] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.463858][ T9851] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.469233][ T9851] bridge_slave_0: entered allmulticast mode
[  176.485555][ T9851] bridge_slave_0: entered promiscuous mode
[  176.492039][ T9851] bridge0: port 2(bridge_slave_1) entered blocking state
[  176.496407][ T9851] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.498973][ T9851] bridge_slave_1: entered allmulticast mode
[  176.501632][ T9851] bridge_slave_1: entered promiscuous mode
[  176.528576][ T9851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  176.544527][ T9851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  176.559212][ T9851] team0: Port device team_slave_0 added
[  176.562514][ T9851] team0: Port device team_slave_1 added
[  176.580620][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_0
[  176.587238][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  176.595533][ T9851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  176.611098][ T9851] batman_adv: batadv0: Adding interface: batadv_slave_1
[  176.619145][ T9851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  176.627217][ T9851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  176.658521][ T9851] hsr_slave_0: entered promiscuous mode
[  176.660663][ T9851] hsr_slave_1: entered promiscuous mode
[  176.662597][ T9851] debugfs: 'hsr0' already exists in 'hsr'
[  176.667604][ T9851] Cannot create hsr debugfs directory
[  176.671698][ T5339] 8021q: adding VLAN 0 to HW filter on device eth6
[  176.757797][ T9901] loop2: detected capacity change from 0 to 2048
[  176.769138][ T9901] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  176.775877][ T5736] udevd[5736]: incorrect nilfs2 checksum on /dev/loop2
[  176.775891][ T9901] NILFS (loop2): mounting unchecked fs
[  176.793441][ T5597] udevd[5597]: incorrect nilfs2 checksum on /dev/loop2
[  176.799361][ T9901] NILFS (loop2): recovery complete
[  176.804866][ T9906] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  176.814144][ T5648] hsr_slave_0: left promiscuous mode
[  176.816230][ T5648] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.818774][ T5648] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.853015][ T5648] veth1_macvtap: left promiscuous mode
[  176.855200][ T5648] veth0_macvtap: left promiscuous mode
[  176.859172][ T5648] veth1_vlan: left promiscuous mode
[  176.871309][ T5648] veth0_vlan: left promiscuous mode
[  177.018479][ T9910] loop2: detected capacity change from 0 to 32768
[  177.022794][ T9910] XFS (loop2): Invalid device [./file0], error=-15
[  177.048497][ T5648] smc: removing net device vlan1 with user defined pnetid SYZ2
[  177.084507][ T9915] loop2: detected capacity change from 0 to 512
[  177.118719][ T9915] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.127212][ T5648] team0 (unregistering): Port device team_slave_1 removed
[  177.128790][ T9915] ext4 filesystem being mounted at /480/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  177.135420][ T5648] team0 (unregistering): Port device team_slave_0 removed
[  177.183201][ T5591] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.470735][ T9934] loop0: detected capacity change from 0 to 1024
[  177.514825][   T53] Bluetooth: hci2: command tx timeout
[  177.626049][ T5339] 8021q: adding VLAN 0 to HW filter on device eth7
[  177.633079][ T9851] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  177.637682][ T9851] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[  177.640343][ T9851] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  177.654097][ T9851] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[  177.656777][ T9851] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  177.669946][ T9851] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[  177.677309][ T9851] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  177.686409][ T9851] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[  177.759841][ T9851] 8021q: adding VLAN 0 to HW filter on device bond0
[  177.774256][ T9851] 8021q: adding VLAN 0 to HW filter on device team0
[  177.779376][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.781611][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state
[  177.789957][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.792204][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state
[  177.857557][ T5339] 8021q: adding VLAN 0 to HW filter on device eth8
[  177.995673][ T9851] 8021q: adding VLAN 0 to HW filter on device batadv0
[  178.102939][ T9851] veth0_vlan: entered promiscuous mode
[  178.107750][ T9851] veth1_vlan: entered promiscuous mode
[  178.122952][ T9851] veth0_macvtap: entered promiscuous mode
[  178.127178][ T9851] veth1_macvtap: entered promiscuous mode
[  178.135938][ T9851] batman_adv: batadv0: Interface activated: batadv_slave_0
[  178.141856][ T9851] batman_adv: batadv0: Interface activated: batadv_slave_1
[  178.152934][ T5648] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  178.158201][ T5648] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  178.162711][ T5648] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  178.166185][ T5648] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  178.295694][ T8674] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.304391][ T8674] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  178.321023][ T8670] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  178.323783][ T8670] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  179.051470][T10026] loop4: detected capacity change from 0 to 1024
[  179.061582][T10026] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  179.071582][T10026] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  179.077851][T10028] loop2: detected capacity change from 0 to 164
[  179.082282][T10026] EXT4-fs (loop4): invalid journal inode
[  179.100343][T10028] iso9660: Corrupted directory entry in block 4 of inode 1792
[  179.130331][T10016] loop0: detected capacity change from 0 to 32768
[  179.155913][T10016] (syz.0.1671,10016,1):ocfs2_find_slot:490 ERROR: no free slots available!
[  179.164162][T10016] (syz.0.1671,10016,1):ocfs2_mount_volume:1750 ERROR: status = -22
[  179.188315][T10016] (syz.0.1671,10016,1):ocfs2_fill_super:1177 ERROR: status = -22
[  179.398898][T10054] PKCS7: Unsupported SignerInfo version
[  179.435376][T10055] loop4: detected capacity change from 0 to 4096
[  179.447041][T10055] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  179.461081][T10055] UDF-fs: Scanning with blocksize 512 failed
[  179.475265][T10058] netlink: 'syz.2.1690': attribute type 1 has an invalid length.
[  179.483235][T10055] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.528632][T10058] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1690'.
[  179.545415][T10058] 8021q: adding VLAN 0 to HW filter on device bond2
[  179.580623][T10058] 8021q: adding VLAN 0 to HW filter on device bond2
[  179.591191][T10058] bond2: (slave geneve2): making interface the new active one
[  179.594595][   T53] Bluetooth: hci2: command tx timeout
[  179.600692][T10058] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  179.601306][T10065] loop4: detected capacity change from 0 to 2048
[  179.605192][ T5648] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20004 - 0
[  179.649474][ T5648] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20004 - 0
[  179.665129][ T5648] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20004 - 0
[  179.685774][ T5648] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20004 - 0
[  179.776329][T10078] netlink: 1288 bytes leftover after parsing attributes in process `syz.2.1698'.
[  179.825092][T10081] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1700'.
[  179.899018][T10084] loop2: detected capacity change from 0 to 8192
[  179.925816][T10093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  179.936313][T10093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.965726][T10095] EXT4-fs: Ignoring removed bh option
[  179.979230][T10095] EXT4-fs error (device loop4): ext4_iget_extra_inode:5180: inode #15: comm syz.4.1707: corrupted in-inode xattr: e_value size too large
[  179.993369][T10095] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  179.993592][T10095] EXT4-fs error (device loop4): ext4_orphan_get:1404: comm syz.4.1707: couldn't read orphan inode 15 (err -117)
[  180.002666][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  180.005174][    C0] EXT4-fs (loop4): initial error at time 1788202400: ext4_iget_extra_inode:5180: inode 15
[  180.008979][    C0] EXT4-fs (loop4): last error at time 1788202400: ext4_iget_extra_inode:5180: inode 15
[  180.015562][T10095] loop4: lost filesystem error report for type 5 error -117
[  180.022632][T10095] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.318019][   T24] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  180.503039][   T24] usb 3-1: Using ep0 maxpacket: 8
[  180.509122][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  180.517927][   T24] usb 3-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  180.523068][   T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  180.528776][   T24] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  180.533556][   T24] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  180.541335][   T24] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40
[  180.545494][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.548874][   T24] usb 3-1: Product: syz
[  180.550743][   T24] usb 3-1: Manufacturer: syz
[  180.554065][   T24] usb 3-1: SerialNumber: syz
[  180.559386][T10101] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  180.566140][   T24] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  180.570273][   T24] usbtest 3-1:1.0: couldn't get endpoints, -22
[  180.573724][   T24] usbtest 3-1:1.0: probe with driver usbtest failed with error -22
[  180.577108][T10107] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1711'.
[  180.586876][T10107] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1711'.
[  180.637114][T10109] syzkaller1: entered promiscuous mode
[  180.639085][T10109] syzkaller1: entered allmulticast mode
[  180.773725][   T24] usb 3-1: USB disconnect, device number 27
[  180.863258][ T9851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.935815][T10117] ieee802154 phy0 wpan0: encryption failed: -90
[  181.017103][T10121] input: syz0 as /devices/virtual/input/input16
[  181.328011][T10127] binder: BINDER_SET_CONTEXT_MGR already set
[  181.333875][T10127] binder: 10126:10127 ioctl 4018620d 200000000480 returned -16
[  181.463463][T10133] tun0: tun_chr_ioctl cmd 2147767507
[  181.671786][   T53] Bluetooth: hci2: command tx timeout
[  181.691393][T10142] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  181.723433][T10139] syz.0.1727: attempt to access beyond end of device
[  181.723433][T10139] loop0: rw=8388608, sector=281474976710722, nr_sectors = 2 limit=2048
[  181.737420][T10125] xfs: Deprecated parameter 'ikeep'
[  181.739766][T10125] XFS: ikeep mount option is deprecated.
[  181.752254][T10139] NILFS (loop0): I/O error reading b-tree node block (ino=16, blocknr=15)
[  181.759116][T10125] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  181.768498][T10139] NILFS (loop0): error -5 truncating bmap (ino=16)
[  181.806938][T10125] XFS (loop4): Starting recovery (logdev: internal)
[  181.842722][T10125] XFS (loop4): Ending recovery (logdev: internal)
[  182.092600][ T9851] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  182.373731][T10172] set_capacity_and_notify: 3 callbacks suppressed
[  182.373743][T10172] loop2: detected capacity change from 0 to 512
[  182.392708][T10172] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  182.438102][T10172] EXT4-fs (loop2): 1 truncate cleaned up
[  182.445348][T10172] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  182.624245][T10178] loop4: detected capacity change from 0 to 128
[  182.637740][T10178] hpfs: hpfs_map_sector(): read error
[  182.652240][T10178] tmpfs: Bad value for 'mpol'
[  182.893128][   T34] audit: type=1326 audit(1788202403.190:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.0.1743" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  182.912971][   T34] audit: type=1326 audit(1788202403.190:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.0.1743" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  182.931278][   T34] audit: type=1326 audit(1788202403.200:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.0.1743" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  182.950562][   T34] audit: type=1326 audit(1788202403.200:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.0.1743" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  182.965305][   T34] audit: type=1326 audit(1788202403.200:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.0.1743" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  182.983045][   T34] audit: type=1326 audit(1788202403.200:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.0.1743" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  183.006833][   T34] audit: type=1326 audit(1788202403.200:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.0.1743" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  183.020926][   T34] audit: type=1326 audit(1788202403.200:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.0.1743" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  183.034540][   T34] audit: type=1326 audit(1788202403.200:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.0.1743" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  183.042854][   T34] audit: type=1326 audit(1788202403.200:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10187 comm="syz.0.1743" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  183.053609][ T5591] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.192663][T10202] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.201524][T10202] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.306632][T10203] loop4: detected capacity change from 0 to 32768
[  183.311744][T10203] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1749 (10203)
[  183.329458][T10203] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  183.337181][T10203] BTRFS info (device loop4): using crc32c checksum algorithm
[  183.391445][T10203] BTRFS info (device loop4): enabling ssd optimizations
[  183.394278][T10203] BTRFS info (device loop4): turning on flush-on-commit
[  183.397068][T10203] BTRFS info (device loop4): enabling free space tree
[  183.400009][T10203] BTRFS info (device loop4): enabling auto defrag
[  183.403581][T10203] BTRFS info (device loop4): use lzo compression, level 1
[  183.406545][T10203] BTRFS info (device loop4): max_inline set to 0
[  183.444791][ T9851] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  183.738459][T10223] loop4: detected capacity change from 0 to 2048
[  183.746483][T10223] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[  183.750388][   T53] Bluetooth: hci2: command tx timeout
[  183.755806][T10223] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  183.815458][T10228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  183.818658][T10228] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.019400][T10221] loop2: detected capacity change from 0 to 32768
[  184.445571][T10254] loop0: detected capacity change from 0 to 1764
[  184.449391][T10256] loop2: detected capacity change from 0 to 16
[  184.462198][T10256] erofs (device loop2): mounted with root inode @ nid 36.
[  184.483361][ T7184] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  184.504334][T10256] erofs (device loop2): failed to decompress (lz4) corrupted compressed data @ pa 4096 size 4096 => 9000
[  184.510398][T10256] erofs (device loop2): read error -117 @ 2 of nid 89
[  184.553310][T10260] binder: BINDER_SET_CONTEXT_MGR already set
[  184.555691][T10260] binder: 10259:10260 ioctl 4018620d 200000000100 returned -16
[  185.133579][T10289] loop0: detected capacity change from 0 to 512
[  185.137622][T10289] EXT4-fs (loop0): Test dummy encryption mode enabled
[  185.143939][   T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  185.147125][T10289] EXT4-fs (loop0): can't mount with journal_async_commit, fs mounted w/o journal
[  185.175733][T10291] program syz.0.1782 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  185.299730][   T24] usb 5-1: Using ep0 maxpacket: 32
[  185.305690][   T24] usb 5-1: config 0 has an invalid interface number: 184 but max is 0
[  185.313875][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  185.322698][   T24] usb 5-1: config 0 has no interface number 0
[  185.330054][   T24] usb 5-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  185.339365][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.348441][   T24] usb 5-1: Product: syz
[  185.354103][   T24] usb 5-1: Manufacturer: syz
[  185.356087][   T24] usb 5-1: SerialNumber: syz
[  185.361455][   T24] usb 5-1: config 0 descriptor??
[  185.367722][   T24] smsc75xx 5-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[  185.372182][   T24] smsc75xx 5-1:0.184: probe with driver smsc75xx failed with error -22
[  185.587277][ T5592] usb 5-1: USB disconnect, device number 2
[  185.769432][   T10] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  185.929193][   T10] usb 3-1: Using ep0 maxpacket: 8
[  185.933319][   T10] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  185.936781][   T10] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  185.941116][   T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  185.945042][   T10] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  185.948247][   T10] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  185.952892][   T10] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  185.956122][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  186.072267][T10303] loop0: detected capacity change from 0 to 131072
[  186.076545][T10303] F2FS-fs (loop0): Wrong secs_per_zone / total_sections (512, 24)
[  186.079672][T10303] F2FS-fs (loop0): Can't find valid F2FS filesystem in 2th superblock
[  186.082831][T10303] F2FS-fs (loop0): Test dummy encryption mode enabled
[  186.087290][T10303] F2FS-fs (loop0): invalid crc value
[  186.131986][T10303] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=80000000, run fsck to fix.
[  186.137558][T10303] loop0: lost filesystem error report for type 5 error -117
[  186.173522][T10303] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  186.183422][T10303] F2FS-fs (loop0): f2fs_disable_checkpoint starts, unusable: 0
[  186.183869][   T10] usb 3-1: usb_control_msg returned -32
[  186.186366][T10303] F2FS-fs (loop0): f2fs_disable_checkpoint: call f2fs_write_checkpoint(), meta: 0, node: 0, data: 0
[  186.192792][T10303] F2FS-fs (loop0): Start checkpoint disabled!
[  186.194288][   T10] usbtmc 3-1:16.0: can't read capabilities
[  186.202568][T10303] F2FS-fs (loop0): f2fs_disable_checkpoint finishes, err:0
[  186.209549][T10303] F2FS-fs (loop0): Try to recover 2th superblock, ret: 0
[  186.212736][T10303] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  186.285539][T10303] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix.
[  186.409812][T10318] IPv4: Oversized IP packet from 127.202.26.0
[  186.718881][ T5669] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  186.748965][T10334] loop0: detected capacity change from 0 to 256
[  186.878877][ T5669] usb 5-1: Using ep0 maxpacket: 16
[  186.885987][ T5669] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  186.889864][ T5669] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.893197][ T5669] usb 5-1: Product: syz
[  186.895450][ T5669] usb 5-1: Manufacturer: syz
[  186.900497][ T5669] usb 5-1: SerialNumber: syz
[  186.928156][T10335] usbtmc 3-1:16.0: usb_clear_halt returned -32
[  187.122812][   T24] usb 3-1: USB disconnect, device number 28
[  187.326092][T10352] device-mapper: ioctl: Invalid ioctl structure: name m, dev f800
[  187.714712][T10373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  187.933934][ T5669] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -71
[  187.937795][ T5669] usb 5-1: USB disconnect, device number 3
[  187.964644][T10389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.969741][T10389] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.986671][T10390] tipc: Failed to remove unknown binding: 66,0,0/0:4021225684/4021225686
[  187.992959][T10387] tipc: Failed to remove unknown binding: 66,0,0/0:3548516048/3548516049
[  187.996783][T10387] tipc: Failed to remove unknown binding: 66,0,0/0:3548516048/3548516049
[  188.338253][   T24] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  188.501797][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[  188.507434][   T24] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  188.518363][   T24] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  188.523055][   T24] usb 3-1: New USB device found, idVendor=1235, idProduct=8010, bcdDevice= 0.40
[  188.526127][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.530131][   T24] usb 3-1: Product: syz
[  188.531482][   T24] usb 3-1: Manufacturer: syz
[  188.532853][   T24] usb 3-1: SerialNumber: syz
[  188.653097][   T34] kauditd_printk_skb: 10 callbacks suppressed
[  188.653106][   T34] audit: type=1326 audit(1788202408.952:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.4.1837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95ed9e0d9 code=0x50000
[  188.662761][   T34] audit: type=1326 audit(1788202408.952:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.4.1837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95ed9e0d9 code=0x50000
[  188.670605][   T34] audit: type=1326 audit(1788202408.952:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.4.1837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95ed9e0d9 code=0x50000
[  188.678411][   T34] audit: type=1326 audit(1788202408.952:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.4.1837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95ed9e0d9 code=0x50000
[  188.684831][   T34] audit: type=1326 audit(1788202408.952:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.4.1837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95ed9e0d9 code=0x50000
[  188.692042][   T34] audit: type=1326 audit(1788202408.952:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.4.1837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95ed9e0d9 code=0x50000
[  188.699037][   T34] audit: type=1326 audit(1788202408.952:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.4.1837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95ed9e0d9 code=0x50000
[  188.707252][   T34] audit: type=1326 audit(1788202408.952:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.4.1837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95ed9e0d9 code=0x50000
[  188.713946][   T34] audit: type=1326 audit(1788202408.952:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.4.1837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95ed9e0d9 code=0x50000
[  188.720395][   T34] audit: type=1326 audit(1788202408.952:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10416 comm="syz.4.1837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff95ed9e0d9 code=0x50000
[  188.799425][   T24] usb 3-1: USB disconnect, device number 29
[  188.902060][ T5597] udevd[5597]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  188.931689][T10427] loop4: detected capacity change from 0 to 256
[  188.934216][T10427] exfat: Deprecated parameter 'namecase'
[  188.937766][T10427] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  188.940940][T10427] exFAT-fs (loop4): Invalid exboot-signature(sector = 1): 0xaa000000
[  188.943686][T10427] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x1219aba6)
[  188.946916][T10427] exFAT-fs (loop4): invalid boot region
[  188.948818][T10427] exFAT-fs (loop4): failed to recognize exfat type
[  189.093650][T10435] Bluetooth: (null): Too short H5 packet
[  189.336943][T10441] loop2: detected capacity change from 0 to 128
[  189.354613][T10439] loop4: detected capacity change from 0 to 32768
[  189.362734][T10441] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  189.370070][T10439] ea_get: invalid extended attribute
[  189.383353][T10439] ffff8881addedb88: 04 00 00 00                                      ....
[  189.384269][T10441] ext4 filesystem being mounted at /539/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  189.491480][ T5591] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  189.525762][T10450] netlink: 'syz.4.1850': attribute type 2 has an invalid length.
[  189.599338][T10454] loop0: detected capacity change from 0 to 1024
[  189.601854][T10454] EXT4-fs: Ignoring removed mblk_io_submit option
[  189.604030][T10454] EXT4-fs: Ignoring removed oldalloc option
[  189.630683][T10454] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  189.641345][T10454] ext4 filesystem being mounted at /674/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  189.662392][T10454] EXT4-fs error (device loop0): ext4_map_blocks:833: inode #15: comm syz.0.1852: lblock 0 mapped to illegal pblock 0 (length 1)
[  189.671586][T10454] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  189.676700][T10454] EXT4-fs (loop0): This should not happen!! Data will be lost
[  189.676700][T10454] 
[  189.681700][T10454] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1852: bg 0: block 112: padding at end of block bitmap is not set
[  189.714181][  T769] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 7 with max blocks 1 with error 28
[  189.732677][  T769] EXT4-fs (loop0): This should not happen!! Data will be lost
[  189.732677][  T769] 
[  189.747210][  T769] EXT4-fs (loop0): Total free blocks count 0
[  189.758918][  T769] EXT4-fs (loop0): Free/Dirty block details
[  189.766645][  T769] EXT4-fs (loop0): free_blocks=0
[  189.774611][  T769] EXT4-fs (loop0): dirty_blocks=64
[  189.782315][  T769] EXT4-fs (loop0): Block reservation details
[  189.804524][ T5596] EXT4-fs warning (device loop0): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  190.015531][T10470] loop0: detected capacity change from 0 to 32768
[  190.029666][T10470] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  190.052895][T10470] JBD2: Ignoring recovery information on journal
[  190.126250][T10470] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  190.212564][ T5596] ocfs2: Unmounting device (7,0) on (node local)
[  190.599064][T10483] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.608027][T10483] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.638797][ T5669] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  191.834312][T10507] netlink: 3 bytes leftover after parsing attributes in process `syz.0.1868'.
[  191.846505][ T5669] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[  191.861425][ T5669] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[  191.868886][ T5669] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 180, changing to 11
[  191.873284][ T5669] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 41877, setting to 1024
[  191.881924][ T5669] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice= 1.00
[  191.885758][ T5669] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.915682][T10503] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  191.935022][T10503] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  191.978019][ T5669] pl2303 3-1:1.0: pl2303 converter detected
[  192.055761][ T5669] usb 3-1: pl2303 converter now attached to ttyUSB0
[  192.378893][T10503] pl2303 ttyUSB0: pl2303_get_line_request - failed: -110
[  192.390938][T10503] pl2303 ttyUSB0: pl2303_set_line_request - failed: -32
[  192.395352][T10503] pl2303 3-1:1.0: pl2303_vendor_read - failed to read [000a]: -32
[  192.402436][T10503] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -32
[  192.478994][ T5669] usb 3-1: USB disconnect, device number 30
[  192.479069][    C0] pl2303 ttyUSB0: pl2303_read_int_callback - usb_submit_urb failed with result -19
[  192.569396][T10528] loop0: detected capacity change from 0 to 64
[  192.614743][T10528] MINIX-fs: mounting file system with errors, running fsck is recommended
[  192.787396][T10502] pl2303 ttyUSB0: pl2303_set_control_lines - failed: -19
[  192.789966][T10502] pl2303 ttyUSB0: error sending break = -19
[  192.834120][ T5669] pl2303 ttyUSB0: pl2303 converter now disconnected from ttyUSB0
[  192.836715][ T5669] pl2303 3-1:1.0: device disconnected
[  193.050162][T10537] device-mapper: ioctl: Unable to rename non-existent device,  to <A[
[  193.787754][ T1372] ieee802154 phy0 wpan0: encryption failed: -22
[  193.882582][ T1372] ieee802154 phy1 wpan1: encryption failed: -22
[  194.228112][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  194.772207][   T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  194.779249][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.791781][   T10] usb 5-1: Product: syz
[  194.795064][   T10] usb 5-1: Manufacturer: syz
[  194.801944][   T10] usb 5-1: SerialNumber: syz
[  194.991686][ T5592] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  195.094382][T10565] loop2: detected capacity change from 0 to 1764
[  195.430396][   T10] usb 5-1: USB disconnect, device number 4
[  195.452485][T10588] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1906'.
[  195.632948][T10594] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1909'.
[  195.636867][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1909'.
[  195.829137][T10606] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  195.853279][T10606] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  195.993253][T10614] dlm: plock device version mismatch: kernel (1.2.0), user (1.131072.0)
[  196.020728][T10616] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.025904][T10616] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.068286][ T5592] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  196.074888][ T5592] ath9k_htc: Failed to initialize the device
[  196.086584][   T10] usb 5-1: ath9k_htc: USB layer deinitialized
[  196.568943][T10645] loop2: detected capacity change from 0 to 1024
[  196.922733][T10659] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1938'.
[  196.948666][T10659] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1938'.
[  196.997026][T10625] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  197.355376][T10678] i801_smbus 0000:00:1f.3: SMBus is busy, can't use it!
[  197.384487][T10678] i2c i2c-0: new_device: Instantiated device tps6598x at 0x03
[  197.402651][T10680] Bluetooth: hci0: invalid length 0, exp 2 for type 8
[  197.781983][T10700] loop2: detected capacity change from 0 to 1024
[  197.816699][T10700] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  197.833781][T10700] EXT4-fs error (device loop2): ext4_empty_dir:3114: inode #11: block 449: comm syz.2.1957: Attempting to read directory block (449) that is past i_size (460032)
[  197.875020][ T5591] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.939873][   T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  198.097457][   T10] usb 5-1: New USB device found, idVendor=093a, idProduct=2460, bcdDevice= 0.00
[  198.100646][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.110196][   T10] gspca_main: pac207-2.14.0 probing 093a:2460
[  198.135075][T10718] loop2: detected capacity change from 0 to 1024
[  198.141736][T10718] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  198.164593][T10718] EXT4-fs error (device loop2): ext4_map_blocks:833: inode #3: block 1: comm syz.2.1963: lblock 1 mapped to illegal pblock 1 (length 1)
[  198.170398][T10718] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  198.175709][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  198.181082][    C1] EXT4-fs (loop2): initial error at time 1788202418: ext4_map_blocks:833: inode 3: block 1
[  198.184174][    C1] EXT4-fs (loop2): last error at time 1788202418: ext4_map_blocks:833: inode 3: block 1
[  198.190599][T10718] __quota_error: 238 callbacks suppressed
[  198.190607][T10718] Quota error (device loop2): write_blk: dquota write failed
[  198.197542][T10718] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  198.216766][T10718] EXT4-fs error (device loop2): ext4_acquire_dquot:7041: comm syz.2.1963: Failed to acquire dquot type 0
[  198.221023][T10718] loop2: lost filesystem error report for type 5 error -117
[  198.221492][T10718] EXT4-fs error (device loop2): ext4_free_blocks:6718: comm syz.2.1963: Freeing blocks not in datazone - block = 0, count = 4096
[  198.228625][T10718] loop2: lost filesystem error report for type 5 error -117
[  198.233021][T10718] EXT4-fs error (device loop2): ext4_read_inode_bitmap:141: comm syz.2.1963: Invalid inode bitmap blk 0 in block_group 0
[  198.236515][   T10] gspca_pac207: Failed to read a register (index 0x0000, error -110)
[  198.250837][T10718] loop2: lost filesystem error report for type 5 error -117
[  198.254730][ T8664] EXT4-fs error (device loop2): ext4_map_blocks:791: inode #3: block 1: comm kworker/u10:9: lblock 1 mapped to illegal pblock 1 (length 1)
[  198.271201][ T8664] loop2: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117
[  198.276156][T10718] EXT4-fs error (device loop2) in ext4_free_inode:363: Corrupt filesystem
[  198.290793][ T8664] Quota error (device loop2): remove_tree: Can't read quota data block 1
[  198.294561][T10718] loop2: lost filesystem error report for type 5 error -117
[  198.294903][T10718] EXT4-fs (loop2): 1 orphan inode deleted
[  198.299778][ T8664] EXT4-fs error (device loop2): ext4_release_dquot:7077: comm kworker/u10:9: Failed to release dquot type 0
[  198.308241][T10718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.322691][ T8664] loop2: lost filesystem error report for type 5 error -117
[  198.396707][T10718] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  198.427189][ T5591] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.463603][T10733] usb usb8: usbfs: process 10733 (syz.0.1969) did not claim interface 0 before use
[  198.549830][T10737] loop0: detected capacity change from 0 to 4096
[  198.579998][T10737] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  198.597411][T10737] ntfs3(loop0): ino=5, "/" The size of extended attributes must not exceed 64KiB
[  198.735100][T10747] loop0: detected capacity change from 0 to 64
[  198.778176][T10747] syz.0.1976: attempt to access beyond end of device
[  198.778176][T10747] loop0: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  198.788626][T10747] minix-fs error (device loop0): minix_unlink:149: inode #9: comm syz.0.1976: inode has corrupted nlink
[  198.846986][   T24] usb 3-1: new full-speed USB device number 31 using dummy_hcd
[  198.971777][T10755] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1980'.
[  198.998938][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  199.009134][   T24] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  199.016997][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10
[  199.023136][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  199.030126][   T24] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  199.038190][   T24] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  199.045426][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  199.055693][   T24] usb 3-1: Product: syz
[  199.057400][   T24] usb 3-1: Manufacturer: syz
[  199.059317][   T24] usb 3-1: SerialNumber: syz
[  199.064234][   T24] usb 3-1: config 0 descriptor??
[  199.255084][T10765] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  199.275617][   T24] radio-si470x 3-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  199.279848][   T24] radio-si470x 3-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  199.322121][T10767] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1986'.
[  199.480717][   T24] radio-si470x 3-1:0.0: software version 0, hardware version 0
[  199.484667][   T24] radio-si470x 3-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0.
[  199.537135][   T24] radio-si470x 3-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org
[  199.676413][T10771] bridge0: port 1(bridge_slave_0) entered disabled state
[  199.691629][T10771] bridge0: port 2(bridge_slave_1) entered disabled state
[  199.797656][   T24] radio-si470x 3-1:0.0: submitting int urb failed (-90)
[  200.461353][   T24] radio-si470x 3-1:0.0: si470x_set_report: usb_control_msg returned -71
[  200.466429][   T24] radio-si470x 3-1:0.0: probe with driver radio-si470x failed with error -22
[  200.472893][   T24] usb 3-1: USB disconnect, device number 31
[  200.703984][   T24] usb 5-1: USB disconnect, device number 5
[  201.369967][T10784] syzkaller0: entered promiscuous mode
[  201.372931][T10784] syzkaller0: entered allmulticast mode
[  201.858303][T10796] netlink: 'syz.4.1997': attribute type 11 has an invalid length.
[  202.085398][T10802] netlink: 'syz.4.2000': attribute type 1 has an invalid length.
[  202.216263][T10808] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2003'.
[  202.223735][T10808] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2003'.
[  202.236212][T10808] iwpm_parse_nlmsg: Invalid NULL attribute (msg type Mapping Error Msg ret = -22)
[  202.375069][T10814] loop2: detected capacity change from 0 to 1024
[  202.377732][T10814] EXT4-fs: Ignoring removed bh option
[  202.413522][T10818] loop4: detected capacity change from 0 to 512
[  202.416894][T10814] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.417004][T10818] EXT4-fs: Ignoring removed orlov option
[  202.422718][T10818] EXT4-fs: Ignoring removed mblk_io_submit option
[  202.441969][T10818] EXT4-fs (loop4): orphan cleanup on readonly fs
[  202.453128][T10818] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -13
[  202.487493][T10818] EXT4-fs error (device loop4): ext4_clear_blocks:876: inode #13: comm syz.4.2004: attempt to clear invalid blocks 2 len 1
[  202.489252][ T5591] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.496559][T10818] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  202.505106][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  202.511249][    C1] EXT4-fs (loop4): initial error at time 1788202422: ext4_clear_blocks:876: inode 13
[  202.514674][    C1] EXT4-fs (loop4): last error at time 1788202422: ext4_clear_blocks:876: inode 13
[  202.541410][T10818] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters
[  202.555926][T10818] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2004: invalid indirect mapped block 1819239214 (level 0)
[  202.565554][T10818] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  202.566002][T10818] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.2004: invalid indirect mapped block 1819239214 (level 1)
[  202.574648][T10818] loop4: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  202.579593][T10818] EXT4-fs (loop4): 1 truncate cleaned up
[  202.588084][T10818] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  202.640385][ T9851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.807225][T10835] netlink: 292 bytes leftover after parsing attributes in process `syz.0.2008'.
[  202.911746][T10839] loop0: detected capacity change from 0 to 2048
[  202.921887][T10839] EXT4-fs (loop0): #clusters per group too big: 16384
[  203.086479][   T34] audit: type=1326 audit(1788202423.395:316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.0.2019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  203.098307][   T34] audit: type=1326 audit(1788202423.395:317): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.0.2019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  203.108743][   T34] audit: type=1326 audit(1788202423.405:318): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.0.2019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  203.120611][   T34] audit: type=1326 audit(1788202423.405:319): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.0.2019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  203.130922][   T34] audit: type=1326 audit(1788202423.405:320): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.0.2019" exe="/syz-executor" sig=0 arch=c000003e syscall=115 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  203.143466][T10843] loop4: detected capacity change from 0 to 32768
[  203.147365][   T34] audit: type=1326 audit(1788202423.405:321): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.0.2019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  203.152023][T10853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  203.174566][   T34] audit: type=1326 audit(1788202423.405:322): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10848 comm="syz.0.2019" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f932039e0d9 code=0x7ffc0000
[  203.186517][T10843] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  203.220343][T10843] XFS (loop4): Ending clean mount
[  203.261565][T10843] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[  203.266571][T10843] XFS (loop4): Unmount and run xfs_repair
[  203.269836][T10843] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  203.272443][T10843] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  203.281567][T10843] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[  203.290536][T10843] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  203.297205][T10843] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  203.305599][T10843] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  203.313050][T10843] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  203.319291][T10843] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  203.322641][T10843] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  203.326248][T10843] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x2ae/0x4a0" at daddr 0x14 len 4 error 74
[  203.341298][T10843] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x47f/0x820 (fs/xfs/xfs_trans_buf.c:280).  Shutting down filesystem.
[  203.353781][T10843] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  203.387559][T10868] loop2: detected capacity change from 0 to 128
[  203.392514][T10868] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  203.398775][T10868] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  203.415030][   T34] kauditd_printk_skb: 2 callbacks suppressed
[  203.415041][   T34] audit: type=1800 audit(1788202423.715:325): pid=10868 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2024" name="file1" dev="loop2" ino=104 res=0 errno=0
[  203.421048][ T9851] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  203.438653][T10868] [syz.2.2024/10868] FS: loop2 File: /file1 would truncate fibmap result
[  203.619705][T10876] loop2: detected capacity change from 0 to 128
[  203.782653][T10886] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  203.794710][T10886] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.997152][T10897] ==================================================================
[  204.999709][T10897] BUG: KASAN: use-after-free in release_card_device+0x1ab/0x1b0
[  205.002088][T10897] Read of size 1 at addr ffff88816f524909 by task syz.4.2039/10897
[  205.005776][T10897] 
[  205.006716][T10897] CPU: 1 UID: 0 PID: 10897 Comm: syz.4.2039 Not tainted syzkaller #0 PREEMPT(full) 
[  205.006727][T10897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  205.006734][T10897] Call Trace:
[  205.006761][T10897]  <TASK>
[  205.006767][T10897]  dump_stack_lvl+0xe8/0x150
[  205.006786][T10897]  print_address_description+0x55/0x1e0
[  205.006800][T10897]  ? release_card_device+0x1ab/0x1b0
[  205.006810][T10897]  print_report+0x58/0x70
[  205.006818][T10897]  kasan_report+0x117/0x150
[  205.006829][T10897]  ? release_card_device+0x1ab/0x1b0
[  205.006841][T10897]  release_card_device+0x1ab/0x1b0
[  205.006852][T10897]  ? __pfx_release_card_device+0x10/0x10
[  205.006862][T10897]  device_release+0xc4/0x1f0
[  205.006877][T10897]  kobject_put+0x222/0x550
[  205.006894][T10897]  snd_card_file_remove+0x331/0x390
[  205.006906][T10897]  snd_pcm_release+0x12c/0x160
[  205.006921][T10897]  ? __pfx_snd_disconnect_release+0x10/0x10
[  205.006932][T10897]  __fput+0x418/0xa50
[  205.006942][T10897]  task_work_run+0x1d9/0x270
[  205.006955][T10897]  ? __pfx_task_work_run+0x10/0x10
[  205.006971][T10897]  exit_to_user_mode_loop+0x1fa/0x730
[  205.006983][T10897]  ? rcu_is_watching+0x15/0xb0
[  205.006998][T10897]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.007009][T10897]  do_syscall_64+0x353/0x580
[  205.007022][T10897]  ? trace_irq_disable+0x3b/0x140
[  205.007034][T10897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.007041][T10897] RIP: 0033:0x7ff95ed9e0d9
[  205.007051][T10897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.007060][T10897] RSP: 002b:00007ffc99473248 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  205.007072][T10897] RAX: 0000000000000000 RBX: 00007ff95f027da0 RCX: 00007ff95ed9e0d9
[  205.007080][T10897] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  205.007086][T10897] RBP: 00007ff95f027da0 R08: 0000000000000006 R09: 0000000000000000
[  205.007093][T10897] R10: 00007ff95f027cb0 R11: 0000000000000246 R12: 0000000000032130
[  205.007100][T10897] R13: 00007ff95f025fac R14: 0000000000031e2c R15: 00007ffc99473350
[  205.007112][T10897]  </TASK>
[  205.007116][T10897] 
[  205.085640][T10897] The buggy address belongs to the physical page:
[  205.088134][T10897] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x16f524
[  205.091665][T10897] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[  205.094474][T10897] raw: 057ff00000000000 ffffea0005bef908 ffff88823c6414c0 0000000000000000
[  205.097715][T10897] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[  205.101115][T10897] page dumped because: kasan: bad access detected
[  205.103624][T10897] page_owner tracks the page as freed
[  205.105796][T10897] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x40dc0(GFP_KERNEL|__GFP_ZERO|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 15522643149
[  205.111767][T10897]  post_alloc_hook+0x1f9/0x250
[  205.113619][T10897]  get_page_from_freelist+0x2205/0x2280
[  205.115873][T10897]  __alloc_frozen_pages_noprof+0x217/0x5a0
[  205.118103][T10897]  alloc_pages_mpol+0x21e/0x390
[  205.119939][T10897]  ___kmalloc_large_node+0x4f/0x120
[  205.121888][T10897]  __kmalloc_large_node_noprof+0x18/0x90
[  205.123679][T10897]  __kmalloc_node_track_caller_noprof+0x164/0x730
[  205.125733][T10897]  __devres_alloc_node+0x4c/0x160
[  205.127603][T10897]  snd_devm_card_new+0x84/0x160
[  205.129399][T10897]  loopback_probe+0x150/0x13d0
[  205.131198][T10897]  platform_probe+0xf9/0x190
[  205.132946][T10897]  really_probe+0x254/0xae0
[  205.134669][T10897]  __driver_probe_device+0x1e8/0x360
[  205.136460][T10897]  driver_probe_device+0x4f/0x240
[  205.138108][T10897]  __device_attach_driver+0x270/0x410
[  205.140141][T10897]  bus_for_each_drv+0x258/0x2f0
[  205.141941][T10897] page last free pid 10898 tgid 10897 ts 204990101946 stack trace:
[  205.144798][T10897]  __free_frozen_pages+0xc8f/0xd80
[  205.146608][T10897]  devres_release_all+0x1ce/0x260
[  205.148517][T10897]  device_release_driver_internal+0x5d9/0x880
[  205.150874][T10897]  unbind_store+0x1a1/0x1d0
[  205.152651][T10897]  kernfs_fop_write_iter+0x3a4/0x540
[  205.154609][T10897]  vfs_write+0x612/0xba0
[  205.155990][T10897]  ksys_write+0x150/0x270
[  205.157555][T10897]  do_syscall_64+0x174/0x580
[  205.159252][T10897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.161091][T10897] 
[  205.161894][T10897] Memory state around the buggy address:
[  205.163621][T10897]  ffff88816f524800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  205.166210][T10897]  ffff88816f524880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  205.168687][T10897] >ffff88816f524900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  205.171194][T10897]                       ^
[  205.172552][T10897]  ffff88816f524980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  205.175066][T10897]  ffff88816f524a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  205.177555][T10897] ==================================================================
[  205.305445][T10897] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  205.308478][T10897] CPU: 1 UID: 0 PID: 10897 Comm: syz.4.2039 Not tainted syzkaller #0 PREEMPT(full) 
[  205.312080][T10897] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  205.315943][T10897] Call Trace:
[  205.317190][T10897]  <TASK>
[  205.318264][T10897]  vpanic+0x56c/0xa60
[  205.319664][T10897]  ? __pfx_vpanic+0x10/0x10
[  205.321359][T10897]  panic+0xc5/0xd0
[  205.322874][T10897]  ? __pfx_panic+0x10/0x10
[  205.324680][T10897]  ? preempt_schedule_thunk+0x16/0x40
[  205.326876][T10897]  ? release_card_device+0x1ab/0x1b0
[  205.328965][T10897]  ? preempt_schedule_thunk+0x16/0x40
[  205.331063][T10897]  ? release_card_device+0x1ab/0x1b0
[  205.333190][T10897]  check_panic_on_warn+0x89/0xb0
[  205.335153][T10897]  ? release_card_device+0x1ab/0x1b0
[  205.337242][T10897]  end_report+0x73/0x170
[  205.338966][T10897]  ? release_card_device+0x1ab/0x1b0
[  205.341034][T10897]  kasan_report+0x128/0x150
[  205.342902][T10897]  ? release_card_device+0x1ab/0x1b0
[  205.344923][T10897]  release_card_device+0x1ab/0x1b0
[  205.346590][T10897]  ? __pfx_release_card_device+0x10/0x10
[  205.348378][T10897]  device_release+0xc4/0x1f0
[  205.349884][T10897]  kobject_put+0x222/0x550
[  205.351549][T10897]  snd_card_file_remove+0x331/0x390
[  205.353521][T10897]  snd_pcm_release+0x12c/0x160
[  205.355142][T10897]  ? __pfx_snd_disconnect_release+0x10/0x10
[  205.357063][T10897]  __fput+0x418/0xa50
[  205.358343][T10897]  task_work_run+0x1d9/0x270
[  205.359692][T10897]  ? __pfx_task_work_run+0x10/0x10
[  205.361336][T10897]  exit_to_user_mode_loop+0x1fa/0x730
[  205.363038][T10897]  ? rcu_is_watching+0x15/0xb0
[  205.364585][T10897]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.366610][T10897]  do_syscall_64+0x353/0x580
[  205.368144][T10897]  ? trace_irq_disable+0x3b/0x140
[  205.369692][T10897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  205.371764][T10897] RIP: 0033:0x7ff95ed9e0d9
[  205.373367][T10897] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  205.380656][T10897] RSP: 002b:00007ffc99473248 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[  205.384011][T10897] RAX: 0000000000000000 RBX: 00007ff95f027da0 RCX: 00007ff95ed9e0d9
[  205.387193][T10897] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[  205.390393][T10897] RBP: 00007ff95f027da0 R08: 0000000000000006 R09: 0000000000000000
[  205.393528][T10897] R10: 00007ff95f027cb0 R11: 0000000000000246 R12: 0000000000032130
[  205.396703][T10897] R13: 00007ff95f025fac R14: 0000000000031e2c R15: 00007ffc99473350
[  205.399906][T10897]  </TASK>
[  205.401912][T10897] Kernel Offset: disabled
[  205.403610][T10897] Rebooting in 86400 seconds..

VM DIAGNOSIS:
17:15:36  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000246 RBX=0000000000000000 RCX=0000000000000046 RDX=0000000000000000
RSI=ffffffff8e4ad1fd RDI=ffffffff8c4bd580 RBP=dffffc0000000000 RSP=ffffc9000755e528
R8 =4d00000000000000 R9 =0000000000000000 R10=0000000000000000 R11=ffffffff8ec9b1a0
R12=ffff88810a9b04c4 R13=0000000000000000 R14=ffff88810a9b0000 R15=1ffff11021536098
RIP=ffffffff8195f997 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f3bd6e4a6c0 ffffffff 00c00000
GS =0000 ffff88818d956000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2c0bc2 CR3=0000000116394000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=2e6682b60a05ae20 91e1a8296ebcf437 XMM03=f4c0533a12a93cb6 62ba4a3a26c32c9b
XMM04=c29faef00a8a05bf 894c14b863443cbf XMM05=1a058e35cb0c675f 2e72d9e9c61e79e4
XMM06=7a4f52930fc1f5c7 4038aeda43766593 XMM07=70a30d094676d97f 7d6393c1dd7c263e
XMM08=701748fccdb7c29f aef00a8a05bf894c XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900043ef610
R8 =ffff8881099e0237 R9 =1ffff1102133c046 R10=dffffc0000000000 R11=ffffffff8567e1e0
R12=dffffc0000000000 R13=ffffffff9aad5140 R14=ffffffff9aad5180 R15=0000000000000000
RIP=ffffffff8567e25c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558b663500 ffffffff 00c00000
GS =0000 ffff8882a8f56000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b34618ff8 CR3=00000001abf76000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=68334283fc24ff0c 5196e2f6cedf8e88
XMM02=67d8bf9ec730bb27 b15aef729e01a832 XMM03=9a38ea66a1409c44 39fb056354831044
XMM04=940bc58f6b720658 bfe8667fc8b7776b XMM05=0000003eda52f810 0ace2d31332ca103
XMM06=48312736940bc58f 6b720658bfe8667f XMM07=c8b7776b9a38ea66 a1409c4439fb0563
XMM08=5483104467d8bf9e c730bb27b15aef72 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
