last executing test programs:

1m11.76456867s ago: executing program 0 (id=1656):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdir(&(0x7f00000000c0)='./bus\x00', 0x0)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mkdir(&(0x7f0000000440)='./file1\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
rmdir(&(0x7f0000000380)='./file0/../file0\x00')
mkdir(&(0x7f00000003c0)='./file0\x00', 0x0)

1m10.555324568s ago: executing program 0 (id=1660):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r0)
sendmsg$TIPC_NL_LINK_RESET_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x40188}, 0x44090)

1m10.442821462s ago: executing program 0 (id=1662):
syz_mount_image$xfs(&(0x7f00000002c0), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000180)={[{@pquota}, {@bsdgroups}, {@prjquota}, {@gquota}, {@pquota}, {@bsdgroups}, {@inode32}, {@quota}]}, 0xff, 0x9838, &(0x7f0000009780)="$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")
lgetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)=@known='trusted.overlay.upper\x00', 0x0, 0x4000)

1m9.957491959s ago: executing program 0 (id=1664):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@shortname_winnt}, {@shortname_winnt}, {@rodir}, {@fat=@quiet}, {@fat=@flush}, {@shortname_winnt}, {@fat=@showexec}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@tz_utc}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x27f, &(0x7f0000000e00)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

1m9.651991809s ago: executing program 0 (id=1666):
r0 = gettid()
timer_create(0x2, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000400)={[0xfffffffffffffff5]}, 0x8, 0x80000)
ppoll(&(0x7f00000000c0)=[{r1, 0x200}, {r1, 0x10}], 0x2, 0x0, 0x0, 0x0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0)

1m9.476752781s ago: executing program 0 (id=1667):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @dev}}}, @ip_tos_u8={{0x11, 0x110}}], 0x38}, 0x0)

1m9.333137294s ago: executing program 32 (id=1667):
r0 = socket$kcm(0x21, 0x2, 0x2)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @loopback=0x7f000300, @dev}}}, @ip_tos_u8={{0x11, 0x110}}], 0x38}, 0x0)

2.741142568s ago: executing program 3 (id=2349):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00f14b033cf178b83cad2fbc7b3d3219638693ba046d223863ca830350e29ed0ede95a83eb4437c13c4ab31d7581239c8c9a13f73340b4b0c51883830aa6c75037c6a1d307fc02ad014879701cf1f62cc23f47e450cb2d20e83ec3d5ad1385f6826de4ee17358d23a560ed2e7a8253df4c8eff0cd5e9fb357723f470860a0a633fffcb34c448b8f363bef776a15fe79d45da9baa8ba1cafa94f9037ea8375cccecbde864e40387409caa"], 0x1, 0x231, &(0x7f0000000680)="$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")

2.68701732s ago: executing program 1 (id=2350):
setgroups(0xffffffffffffff5d, 0x0)

2.628543437s ago: executing program 3 (id=2351):
r0 = socket$key(0xf, 0x3, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
syz_emit_vhci(&(0x7f0000000040)=@HCI_VENDOR_PKT={0xff, 0x1}, 0x2)
io_uring_enter(0xffffffffffffffff, 0x33ec, 0x3242, 0x10, &(0x7f0000000080)={[0x3]}, 0x8)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_TCP_QUEUE_SEQ(r1, 0x6, 0x15, &(0x7f00000000c0)=0x9, 0x4)
getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100), 0x10)
ioctl$BTRFS_IOC_START_SYNC(r1, 0x80089418, &(0x7f0000000140))
syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_pkt_type_change={{0x1d, 0x5}, {0x3, 0xc9, 0x6}}}, 0x8)
syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @hci_ev_io_capa_request={{0x31, 0x6}, {@none}}}, 0x9)
bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r0}, 0x8)
socket$inet_udp(0x2, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e80), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_SCHED_SCAN(r2, &(0x7f00000010c0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x3eeb38bbe1e9afc5}, 0xc, &(0x7f0000001080)={&(0x7f0000000ec0)={0x20, r3, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8b, 0x5c}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x4048090}, 0x20004000)
ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0x4)
sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x20008010)
ioctl$CEC_S_MODE(0xffffffffffffffff, 0x40046109, 0x0)

2.628275693s ago: executing program 1 (id=2352):
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804)

2.522556472s ago: executing program 1 (id=2353):
syz_mount_image$ext4(0x0, &(0x7f0000000140)='./file0\x00', 0x1080000, 0x0, 0x0, 0x0, &(0x7f0000000000))
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
r2 = dup(r1)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
epoll_create1(0x80000)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r4 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10)
read$msr(0xffffffffffffffff, 0x0, 0x0)
gettid()
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
clock_nanosleep(0x2, 0x0, &(0x7f0000000040)={0x0, 0x989680}, 0x0)
read$char_usb(0xffffffffffffffff, &(0x7f0000001980)=""/179, 0xb3)
sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}, 0xb8}}, 0x0)
syz_emit_ethernet(0x2a, &(0x7f0000000380)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @empty, @val, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14}}}}}, 0x0)
mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYRESHEX=r2])

2.522022965s ago: executing program 3 (id=2354):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0x0, 0x0)

2.5216347s ago: executing program 3 (id=2355):
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000780)={0x0, 0xaee2, 0x80, 0x2, 0x8b6}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, r0, 0x0, &(0x7f0000000040)='./file0\x00', 0x64, 0x183000, 0x23456})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
io_uring_enter(r0, 0x4047f6, 0x0, 0x0, 0x0, 0x0)

1.695320378s ago: executing program 2 (id=2357):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x50, r1, 0x917, 0x70bd2d, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e23}, @L2TP_ATTR_ENCAP_TYPE={0x6}]}, 0x50}}, 0x0)

1.536770244s ago: executing program 1 (id=2358):
r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/netfilter\x00')
r1 = fanotify_init(0x40, 0x40000)
readv(r1, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1)
fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)
getdents64(r0, 0x0, 0x0)

1.47372715s ago: executing program 2 (id=2359):
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x0, 0x0)
inotify_add_watch(r0, 0x0, 0x4000874)

1.356468986s ago: executing program 2 (id=2360):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
writev(r0, &(0x7f00000006c0)=[{&(0x7f0000000300)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e912272f8db0049d90491ceaebfd26d4eef23248000000f858dbb8a19052343f", 0x35}, {&(0x7f0000000100)="051a00000e80006558", 0x2c}], 0x2)

1.14786629s ago: executing program 2 (id=2361):
sched_setscheduler(0x0, 0x1, 0x0)
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000140)=ANY=[@ANYRES16=0x0], 0x11, 0xb0d, &(0x7f0000000d80)="$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")
creat(&(0x7f0000000000)='./file2\x00', 0x8)

976.4279ms ago: executing program 3 (id=2362):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f00000001c0)=0x1, 0x4)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10)
sendmmsg$inet(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10, &(0x7f0000000100)=[{&(0x7f00000002c0)="e044", 0x2}], 0x1}}], 0x1, 0x2000c000)
sendmsg$IPVS_CMD_GET_CONFIG(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)={0x14, 0x0, 0x10, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x8004}, 0x880)

858.775723ms ago: executing program 2 (id=2363):
r0 = socket$tipc(0x1e, 0x2, 0x0)
setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000080)={0x42, 0x80000009, 0x2}, 0x10)
r1 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2, 0xffffffff}}, 0x10)
r2 = socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(r2, &(0x7f0000000540)=@name={0x1e, 0x2, 0x0, {{0x42, 0x4}, 0x3}}, 0x10)
r3 = socket$tipc(0x1e, 0x5, 0x0)
setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10)
sendmsg$tipc(r3, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x3, 0x4}}, 0x10, 0x0}, 0x0)

750.157628ms ago: executing program 2 (id=2364):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r0, r1, 0x0, 0x20fffe82)
truncate(&(0x7f0000000900)='./file1\x00', 0x3000000)

125.648827ms ago: executing program 3 (id=2365):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r2 = socket$inet6(0xa, 0x1, 0x8010000000000084)
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301)
ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522)
ioctl$USBDEVFS_CONTROL(r3, 0xc0105500, &(0x7f0000000040)={0x0, 0xe, 0x1, 0x7, 0x0, 0x7, 0x0})
bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[], 0x140}}, 0x0)
r4 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
mbind(&(0x7f00005b4000/0x4000)=nil, 0x100000000004000, 0x0, 0x0, 0x0, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, 0x0)
mmap(&(0x7f0000fed000/0x12000)=nil, 0x12000, 0x2, 0x11, 0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r5 = request_key(&(0x7f0000000340)='id_legacy\x00', &(0x7f0000000380)={'syz', 0x0}, &(0x7f00000003c0)='/dev/vsock\x00', 0xfffffffffffffffe)
request_key(&(0x7f00000008c0)='id_legacy\x00', &(0x7f0000000900)={'syz', 0x0}, 0x0, r5)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x317, 0x1, 0x34, 0x9}, 0x9c)

125.524629ms ago: executing program 1 (id=2366):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0xfffffffffbfffffe)
connect$vsock_stream(r0, &(0x7f0000000280)={0x28, 0x0, 0x0, @local}, 0x10)
shutdown(r0, 0x1)
ppoll(&(0x7f0000000480)=[{r0, 0x281}], 0x1, 0x0, 0x0, 0x0)

0s ago: executing program 1 (id=2367):
r0 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0xf)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b00)=""/77, 0x4d}], 0x1}, 0x4c2003a0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
prctl$PR_SET_SECUREBITS(0x1c, 0x14)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)

kernel console output (not intermixed with test programs):

alect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  148.581878][ T7827] CIFS mount error: No usable UNC path provided in device string!
[  148.581878][ T7827] 
[  148.587323][ T7827] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  148.612050][ T7126] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.710744][ T7839] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  148.729399][   T33] audit: type=1326 audit(1756522690.870:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7840 comm="syz.0.832" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd699f8ebe9 code=0x0
[  148.771626][ T7845] loop0: detected capacity change from 0 to 1024
[  148.797978][ T7845] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  148.808355][ T7845] EXT4-fs error (device loop0): ext4_generic_delete_entry:2668: inode #2: block 16: comm syz.0.834: bad entry in directory: inode out of bounds - offset=12, inode=129, rec_len=12, size=1024 fake=1
[  148.821490][ T7845] EXT4-fs error (device loop0) in ext4_delete_entry:2739: Corrupt filesystem
[  148.825160][ T7845] EXT4-fs warning (device loop0): ext4_rename_delete:3731: inode #2: comm syz.0.834: Deleting old file: nlink 4, error=-117
[  148.846089][ T6042] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.902447][ T7852] loop0: detected capacity change from 0 to 128
[  149.333443][  T792] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  149.486000][  T792] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  149.492770][  T792] usb 1-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=74.72
[  149.500730][  T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.503462][  T792] usb 1-1: Product: syz
[  149.504870][  T792] usb 1-1: Manufacturer: syz
[  149.506358][  T792] usb 1-1: SerialNumber: syz
[  149.509495][  T792] usb 1-1: config 0 descriptor??
[  149.514423][  T792] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state.
[  149.517445][  T792] dvb-usb: bulk message failed: -22 (3/0)
[  149.539043][  T792] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  149.546584][  T792] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19)
[  149.550067][  T792] dvb_usb_umt_010 1-1:0.0: probe with driver dvb_usb_umt_010 failed with error -22
[  149.714875][  T792] usb 1-1: USB disconnect, device number 15
[  149.806024][ T7878] overlayfs: failed to resolve './file0': -2
[  150.051869][ T7881] netlink: 20 bytes leftover after parsing attributes in process `syz.2.849'.
[  150.454473][  T792] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  150.608972][  T792] usb 3-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  150.612621][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.623105][  T792] usb 3-1: Product: syz
[  150.624803][  T792] usb 3-1: Manufacturer: syz
[  150.626632][  T792] usb 3-1: SerialNumber: syz
[  150.633319][  T792] usb 3-1: config 0 descriptor??
[  150.722559][ T7919] loop0: detected capacity change from 0 to 24
[  150.726954][ T7919] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  150.736544][ T7919] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  150.797518][ T7921] loop0: detected capacity change from 0 to 256
[  150.809305][ T7921] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  150.842827][  T792] usb 3-1: f81604_read: reg: 105 failed: -EPROTO
[  150.845986][  T792] f81604 3-1:0.0: Setting termination of CH#0 failed: -EPROTO
[  150.848191][  T792] f81604 3-1:0.0: probe with driver f81604 failed with error -71
[  150.852041][  T792] usb 3-1: USB disconnect, device number 12
[  151.116458][ T7927] loop0: detected capacity change from 0 to 32768
[  151.129233][ T7927] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  151.160295][ T7927] OCFS2: ERROR (device loop0): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature 
[  151.166603][ T7927] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  151.170129][ T7927] OCFS2: File system is now read-only.
[  151.171917][ T7927] (syz.0.871,7927,0):ocfs2_search_chain:1852 ERROR: status = -30
[  151.176618][ T7927] (syz.0.871,7927,0):ocfs2_search_chain:1940 ERROR: status = -30
[  151.179009][ T7927] (syz.0.871,7927,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  151.181728][ T7927] (syz.0.871,7927,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  151.184685][ T7927] (syz.0.871,7927,0):__ocfs2_claim_clusters:2438 ERROR: status = -30
[  151.187169][ T7927] (syz.0.871,7927,0):__ocfs2_claim_clusters:2446 ERROR: status = -30
[  151.190135][ T7927] (syz.0.871,7927,0):ocfs2_local_alloc_new_window:1199 ERROR: status = -30
[  151.193188][ T7927] (syz.0.871,7927,0):ocfs2_local_alloc_new_window:1224 ERROR: status = -30
[  151.195836][ T7927] (syz.0.871,7927,0):ocfs2_local_alloc_slide_window:1298 ERROR: status = -30
[  151.198946][ T7927] (syz.0.871,7927,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30
[  151.203381][ T7927] (syz.0.871,7927,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30
[  151.206337][ T7927] (syz.0.871,7927,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[  151.210013][ T7927] (syz.0.871,7927,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30
[  151.216984][ T7927] (syz.0.871,7927,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30
[  151.219895][ T7927] (syz.0.871,7927,0):ocfs2_expand_inline_dir:2864 ERROR: status = -30
[  151.222529][ T7927] (syz.0.871,7927,0):ocfs2_extend_dir:3211 ERROR: status = -30
[  151.225059][ T7927] (syz.0.871,7927,0):ocfs2_prepare_dir_for_insert:4316 ERROR: status = -30
[  151.227580][ T7927] (syz.0.871,7927,0):ocfs2_rename:1486 ERROR: status = -30
[  151.229761][ T7927] (syz.0.871,7927,0):ocfs2_rename:1702 ERROR: status = -30
[  151.247137][ T6042] (syz-executor,6042,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  151.256424][ T6042] ocfs2: Unmounting device (7,0) on (node local)
[  151.753200][  T792] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  151.903174][  T792] usb 3-1: Using ep0 maxpacket: 16
[  151.910489][  T792] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  151.915311][  T792] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  151.921939][  T792] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  151.925683][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.928786][  T792] usb 3-1: Product: syz
[  151.930529][  T792] usb 3-1: Manufacturer: syz
[  151.932353][  T792] usb 3-1: SerialNumber: syz
[  151.942061][  T792] usb 3-1: config 0 descriptor??
[  151.947449][  T792] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  151.951228][  T792] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  152.449349][ T7968] binder: 7967:7968 ioctl c0306201 200000000080 returned -14
[  152.556994][ T7974] batadv_slave_1: entered promiscuous mode
[  152.560204][  T792] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  152.567777][  T792] em28xx 3-1:0.0: Config register raw data: 0xfa
[  152.570406][  T792] em28xx 3-1:0.0: I2S Audio (3 sample rate(s))
[  152.574120][ T7973] batadv_slave_1: left promiscuous mode
[  152.577871][  T792] em28xx 3-1:0.0: No AC97 audio processor
[  153.282648][  T792] usb 3-1: USB disconnect, device number 13
[  153.681250][ T7989] loop0: detected capacity change from 0 to 4096
[  153.762829][   T33] audit: type=1326 audit(1756522695.900:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.0.899" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd699f8ebe9 code=0x7ffc0000
[  153.771352][   T33] audit: type=1326 audit(1756522695.910:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.0.899" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd699f8ebe9 code=0x7ffc0000
[  153.778491][   T33] audit: type=1326 audit(1756522695.910:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.0.899" exe="/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7fd699f8ebe9 code=0x7ffc0000
[  153.787954][   T33] audit: type=1326 audit(1756522695.910:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.0.899" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd699f8ebe9 code=0x7ffc0000
[  153.797024][   T33] audit: type=1326 audit(1756522695.910:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7995 comm="syz.0.899" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd699f8ebe9 code=0x7ffc0000
[  153.841907][ T8000] netlink: 209588 bytes leftover after parsing attributes in process `syz.2.901'.
[  153.924051][ T8004] syzkaller1: entered promiscuous mode
[  153.926350][ T8004] syzkaller1: entered allmulticast mode
[  154.116883][ T8018] gre0: entered allmulticast mode
[  154.124484][ T8017] gre0: left allmulticast mode
[  154.465539][ T8036] loop0: detected capacity change from 0 to 256
[  154.469879][ T8036] exfat: Unknown parameter '0x0000000000000000'
[  154.630627][ T8036] loop0: detected capacity change from 0 to 4096
[  154.771188][ T8036] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  154.780067][ T8036] ntfs3(loop0): ino=1a, mi_enum_attr
[  154.781994][ T8036] ntfs3(loop0): ino=1a, mi_enum_attr
[  154.783927][ T8036] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  154.949047][ T8047] netlink: 'syz.2.923': attribute type 3 has an invalid length.
[  155.219868][ T8061] loop0: detected capacity change from 0 to 764
[  155.448318][ T8072] openvswitch: netlink: IP tunnel TTL not specified.
[  155.515193][ T8070] 8021q: adding VLAN 0 to HW filter on device batadv1
[  155.522574][ T8070] team0: Port device batadv1 added
[  156.377944][ T8096] loop2: detected capacity change from 0 to 512
[  156.393631][ T8096] EXT4-fs: Ignoring removed i_version option
[  156.397947][ T8096] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  156.448422][ T8096] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  156.456613][ T8096] EXT4-fs (loop2): 1 truncate cleaned up
[  156.465643][ T8096] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.560448][ T7126] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.645079][ T8114] loop0: detected capacity change from 0 to 1024
[  156.647979][ T8114] EXT4-fs: Ignoring removed nobh option
[  156.649763][ T8114] EXT4-fs: Ignoring removed bh option
[  156.668083][ T8114] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.690855][ T8114] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.954: Allocating blocks 497-513 which overlap fs metadata
[  156.700328][ T8113] EXT4-fs (loop0): pa ffff8881080bcae0: logic 80, phys. 209, len 19
[  156.703911][ T8113] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  156.746102][ T6042] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.780014][ T8120] loop0: detected capacity change from 0 to 164
[  156.933309][  T792] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  156.974959][ T8128] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551613)
[  156.978848][ T8128] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647
[  157.094793][  T792] usb 3-1: Using ep0 maxpacket: 8
[  157.101802][  T792] usb 3-1: config 162 has an invalid interface number: 97 but max is 0
[  157.107047][  T792] usb 3-1: config 162 has no interface number 0
[  157.109479][  T792] usb 3-1: config 162 interface 97 has no altsetting 0
[  157.116978][  T792] usb 3-1: New USB device found, idVendor=0c2e, idProduct=0700, bcdDevice=e1.3b
[  157.120466][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.125006][  T792] usb 3-1: Product: syz
[  157.126604][  T792] usb 3-1: Manufacturer: syz
[  157.128161][  T792] usb 3-1: SerialNumber: syz
[  157.182071][ T8136] loop0: detected capacity change from 0 to 4096
[  157.186848][ T8136] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  157.191132][ T8136] ntfs3(loop0): ino=3, mi_enum_attr
[  157.296426][ T8138] netlink: 276 bytes leftover after parsing attributes in process `syz.0.965'.
[  157.342431][  T792] metro_usb 3-1:162.97: Metrologic USB to Serial converter detected
[  157.350064][  T792] usb 3-1: Metrologic USB to Serial converter now attached to ttyUSB0
[  157.357459][  T792] usb 3-1: USB disconnect, device number 14
[  157.364880][  T792] metro-usb ttyUSB0: Metrologic USB to Serial converter now disconnected from ttyUSB0
[  157.369033][  T792] metro_usb 3-1:162.97: device disconnected
[  157.927124][ T8173] loop2: detected capacity change from 0 to 256
[  157.943747][ T8173] FAT-fs (loop2): Directory bread(block 64) failed
[  157.946061][ T8173] FAT-fs (loop2): Directory bread(block 65) failed
[  157.948468][ T8173] FAT-fs (loop2): Directory bread(block 66) failed
[  157.950843][ T8173] FAT-fs (loop2): Directory bread(block 67) failed
[  157.955672][ T8173] FAT-fs (loop2): Directory bread(block 68) failed
[  157.957877][ T8173] FAT-fs (loop2): Directory bread(block 69) failed
[  157.960417][ T8173] FAT-fs (loop2): Directory bread(block 70) failed
[  157.962739][ T8173] FAT-fs (loop2): Directory bread(block 71) failed
[  157.967214][ T8173] FAT-fs (loop2): Directory bread(block 72) failed
[  157.969667][ T8173] FAT-fs (loop2): Directory bread(block 73) failed
[  158.231447][ T8177] loop2: detected capacity change from 0 to 40427
[  158.238283][ T8177] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  158.243162][ T8177] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  158.250238][ T8177] F2FS-fs (loop2): invalid crc value
[  158.309329][ T8177] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  158.321277][ T8177] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  158.324394][ T8177] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  158.629512][ T8205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.995'.
[  158.854396][ T6044] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  159.017683][ T6044] usb 3-1: New USB device found, idVendor=090a, idProduct=1200, bcdDevice=24.87
[  159.021114][ T6044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.035540][ T6044] usb 3-1: config 0 descriptor??
[  159.042056][ T6044] usb-storage 3-1:0.0: USB Mass Storage device detected
[  159.054201][ T6044] usb-storage 3-1:0.0: This device (090a,1200,2487 S 01 P 00) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller)
[  159.054201][ T6044]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[  159.261334][   T24] usb 3-1: USB disconnect, device number 15
[  159.418130][ T8222] Driver unsupported XDP return value 0 on prog  (id 89) dev N/A, expect packet loss!
[  159.585436][ T8228] loop0: detected capacity change from 0 to 2048
[  159.588637][ T8228] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=4096, location=4096
[  159.592360][ T8228] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  159.597272][ T8228] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[  159.600512][ T8228] UDF-fs: Scanning with blocksize 512 failed
[  159.605968][ T8228] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  159.609484][ T8228] UDF-fs: Scanning with blocksize 1024 failed
[  159.614660][ T8228] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  159.617763][ T8228] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  159.620333][ T8228] UDF-fs: Scanning with blocksize 2048 failed
[  159.623455][ T8228] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  159.629704][ T8228] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  159.632974][ T8228] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  159.635357][ T8228] UDF-fs: Scanning with blocksize 4096 failed
[  159.637496][ T8228] UDF-fs: warning (device loop0): udf_fill_super: No partition found (1)
[  160.466266][ T8244] loop2: detected capacity change from 0 to 32768
[  160.488036][   T33] audit: type=1800 audit(1756522701.632:35): pid=8244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1011" name="file1" dev="loop2" ino=4 res=0 errno=0
[  161.629399][ T8287] loop0: detected capacity change from 0 to 4096
[  161.635976][ T8287] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  161.654929][ T8287] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  161.950629][ T8295] loop0: detected capacity change from 0 to 4096
[  162.379709][ T8301] loop0: detected capacity change from 0 to 32768
[  162.431897][ T8301] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  162.472988][ T8301] XFS (loop0): Ending clean mount
[  162.484035][ T8301] XFS (loop0): Quotacheck needed: Please wait.
[  162.526720][ T8301] XFS (loop0): Quotacheck: Done.
[  162.644574][ T6107] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  162.803514][ T6107] usb 3-1: Using ep0 maxpacket: 8
[  162.886465][ T6107] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  162.905715][ T6107] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  162.926248][ T6107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.105133][ T6107] usb 3-1: config 0 descriptor??
[  163.135459][ T6107] gspca_main: vc032x-2.14.0 probing 046d:0892
[  163.148867][ T6042] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  163.204522][ T8342] IPVS: Error connecting to the multicast addr
[  163.242829][ T8344] fuse: Bad value for 'fd'
[  163.542728][ T6107] gspca_vc032x: reg_w err -71
[  163.547183][ T6107] vc032x 3-1:0.0: probe with driver vc032x failed with error -71
[  163.553392][ T6107] usb 3-1: USB disconnect, device number 16
[  163.686660][ T8373] xt_HMARK: spi-set and port-set can't be combined
[  163.765804][ T8379] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1068'.
[  163.777778][ T8379] bridge1: entered promiscuous mode
[  163.779910][ T8379] bridge1: entered allmulticast mode
[  163.937373][ T8391] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1074'.
[  164.296411][ T8393] loop0: detected capacity change from 0 to 32768
[  164.300531][ T8393] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1075 (8393)
[  164.323497][ T8393] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  164.327456][ T8393] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  164.457872][ T8393] BTRFS info (device loop0): enabling ssd optimizations
[  164.460584][ T8393] BTRFS info (device loop0): enabling free space tree
[  164.556740][ T6042] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  164.663809][ T8433] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1087'.
[  164.680577][ T8435] IPVS: length: 139 != 8
[  164.861774][ T8444] cgroup: none used incorrectly
[  165.088228][ T8456] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  165.187769][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1092'.
[  165.191982][ T8458] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1092'.
[  165.979194][   T33] audit: type=1326 audit(1756522707.122:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8464 comm="syz.1.1100" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8196d8ebe9 code=0x0
[  166.911860][ T8470] loop2: detected capacity change from 0 to 32768
[  166.920102][ T8470] JBD2: Ignoring recovery information on journal
[  166.953520][ T8470] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  166.986337][ T8470] (syz.2.1102,8470,1):ocfs2_get_suballoc_slot_bit:2819 ERROR: invalid inode 8192 requested
[  166.990422][ T8470] (syz.2.1102,8470,1):ocfs2_get_suballoc_slot_bit:2844 ERROR: status = -22
[  166.998064][ T8470] (syz.2.1102,8470,0):ocfs2_test_inode_bit:2926 ERROR: get alloc slot and bit failed -22
[  167.003397][ T8470] (syz.2.1102,8470,0):ocfs2_test_inode_bit:2967 ERROR: status = -22
[  167.048213][ T7126] ocfs2: Unmounting device (7,2) on (node local)
[  168.446378][ T8535] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1131'.
[  168.452794][ T8535] (unnamed net_device) (uninitialized): option broadcast_neighbor: mode dependency failed, not supported in mode balance-rr(0)
[  168.535448][ T8544] loop2: detected capacity change from 0 to 1764
[  168.550748][ T8544] iso9660: Corrupted directory entry in block 2 of inode 1920
[  169.083281][ T6101] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  169.095842][ T8572] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem
[  169.254059][ T6101] usb 3-1: Using ep0 maxpacket: 32
[  169.363288][ T6101] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  169.375138][ T6101] usb 3-1: config 0 has no interface number 0
[  169.421974][ T6101] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  169.428585][ T6101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.432026][ T6101] usb 3-1: Product: syz
[  169.435019][ T6101] usb 3-1: Manufacturer: syz
[  169.437074][ T6101] usb 3-1: SerialNumber: syz
[  169.444201][ T6101] usb 3-1: config 0 descriptor??
[  169.448688][ T6101] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  169.452409][ T6101] usb 3-1: selecting invalid altsetting 1
[  169.455318][ T6101] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  169.463841][ T6101] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  169.468272][ T6101] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  169.471743][ T6101] usb 3-1: media controller created
[  169.493177][ T6101] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  169.654505][ T6101] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  169.658351][ T6101] zl10353_read_register: readreg error (reg=127, ret==-71)
[  169.859162][ T6101] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  169.971100][ T6101] usb 3-1: USB disconnect, device number 17
[  170.336312][ T8584] loop2: detected capacity change from 0 to 16
[  170.346952][ T8584] erofs (device loop2): mounted with root inode @ nid 36.
[  171.069929][ T8607] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  171.074734][ T8607] PKCS7: Only support pkcs7_signedData type
[  171.166687][ T8612] loop0: detected capacity change from 0 to 8
[  171.484736][ T8638] loop2: detected capacity change from 0 to 512
[  171.489435][ T8638] EXT4-fs: Ignoring removed bh option
[  171.502180][ T8638] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  171.510521][ T8638] EXT4-fs (loop2): invalid journal inode
[  171.513182][ T8638] EXT4-fs (loop2): can't get journal size
[  171.532706][ T8638] EXT4-fs (loop2): 1 truncate cleaned up
[  171.541866][ T8638] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  171.551371][ T8638] Device name not specified.
[  171.551371][ T8638] 
[  171.608285][ T7126] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.942286][ T8661] loop0: detected capacity change from 0 to 4096
[  171.947378][ T8661] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  171.960646][ T8661] ntfs3(loop0): Inode r=19 is not in use!
[  171.963996][ T8661] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  171.967290][ T8661] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  171.979631][ T8661] ntfs3(loop0): ino=1b, mi_enum_attr
[  171.981936][ T8661] ntfs3(loop0): ino=1b, mi_enum_attr
[  172.070879][ T8659] loop2: detected capacity change from 0 to 40427
[  172.077978][ T8659] F2FS-fs (loop2): invalid crc value
[  172.134480][ T8659] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  172.138572][ T8659] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  172.202879][ T8666] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1189'.
[  172.293397][ T6101] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  172.465638][ T6101] usb 1-1: unable to get BOS descriptor or descriptor too short
[  172.471823][ T6101] usb 1-1: config 250 has an invalid interface number: 222 but max is 1
[  172.481430][ T6101] usb 1-1: config 250 has an invalid descriptor of length 0, skipping remainder of the config
[  172.485592][ T6101] usb 1-1: config 250 has no interface number 1
[  172.488130][ T6101] usb 1-1: config 250 interface 222 altsetting 22 has an invalid descriptor for endpoint zero, skipping
[  172.492366][ T6101] usb 1-1: config 250 interface 222 altsetting 22 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  172.497371][ T6101] usb 1-1: config 250 interface 222 altsetting 22 endpoint 0x8 has invalid maxpacket 983, setting to 64
[  172.502103][ T6101] usb 1-1: config 250 interface 222 altsetting 22 has an invalid descriptor for endpoint zero, skipping
[  172.507228][ T6101] usb 1-1: config 250 interface 222 altsetting 22 has a duplicate endpoint with address 0x6, skipping
[  172.510893][ T6101] usb 1-1: config 250 interface 222 has no altsetting 0
[  172.518573][ T6101] usb 1-1: New USB device found, idVendor=0b49, idProduct=064f, bcdDevice=d4.fd
[  172.521931][ T6101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.525052][ T6101] usb 1-1: Product: syz
[  172.526467][ T6101] usb 1-1: Manufacturer: syz
[  172.528328][ T6101] usb 1-1: SerialNumber: syz
[  172.532925][ T8663] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  172.759223][ T6101] usb 1-1: USB disconnect, device number 16
[  172.767439][ T8689] loop2: detected capacity change from 0 to 128
[  172.771625][ T8689] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  173.656052][ T8697] loop2: detected capacity change from 0 to 32768
[  173.665718][ T8697] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  173.690227][ T8697] XFS (loop2): Ending clean mount
[  173.696347][ T8697] XFS (loop2): Quotacheck needed: Please wait.
[  173.729432][ T8697] XFS (loop2): Quotacheck: Done.
[  173.747840][ T8697] XFS (loop2): User initiated shutdown received.
[  173.750439][ T8697] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  173.755601][ T8697] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  173.796415][ T7126] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  173.812837][ T8717] loop0: detected capacity change from 0 to 256
[  173.833686][ T8717] exfat: Deprecated parameter 'utf8'
[  173.863939][ T8717] exFAT-fs (loop0): error, data size is invalid(34359738378)
[  174.174546][ T8733] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  174.202992][ T8733] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1216'.
[  174.247225][   T33] audit: type=1326 audit(1756522715.392:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz.0.1221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd699f8ebe9 code=0x7ffc0000
[  174.267384][   T33] audit: type=1326 audit(1756522715.392:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz.0.1221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd699f8ebe9 code=0x7ffc0000
[  174.278479][   T33] audit: type=1326 audit(1756522715.402:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz.0.1221" exe="/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7fd699f8ebe9 code=0x7ffc0000
[  174.288381][   T33] audit: type=1326 audit(1756522715.402:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz.0.1221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd699f8ebe9 code=0x7ffc0000
[  174.298357][   T33] audit: type=1326 audit(1756522715.402:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8742 comm="syz.0.1221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd699f8ebe9 code=0x7ffc0000
[  175.188342][ T8761] loop2: detected capacity change from 0 to 4096
[  175.195282][ T8761] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  175.217941][ T8761] ntfs3(loop2): Failed to load $MFT (-22).
[  175.801677][ T8776] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  175.953151][ T8780] geneve2: entered promiscuous mode
[  175.963176][ T8780] geneve2: entered allmulticast mode
[  176.185359][ T8778] loop2: detected capacity change from 0 to 32768
[  176.198087][ T8778] XFS (loop2): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  176.222686][ T8778] XFS (loop2): Ending clean mount
[  176.307147][ T7126] XFS (loop2): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  176.566564][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1248'.
[  176.790056][ T8820] loop2: detected capacity change from 0 to 512
[  176.794993][ T8820] EXT4-fs: Conflicting test_dummy_encryption options
[  176.853315][ T6044] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  176.933935][ T8826] loop2: detected capacity change from 0 to 256
[  176.944746][ T8826] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f50, chksum : 0xa6aae999, utbl_chksum : 0xe619d30d)
[  177.003265][ T6044] usb 1-1: Using ep0 maxpacket: 8
[  177.008665][ T6044] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  177.015108][ T6044] usb 1-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=d2.54
[  177.018328][ T6044] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.021081][ T6044] usb 1-1: Product: syz
[  177.022447][ T6044] usb 1-1: Manufacturer: syz
[  177.027876][ T6044] usb 1-1: SerialNumber: syz
[  177.031955][ T6044] usb 1-1: config 0 descriptor??
[  177.042140][ T6044] usb 1-1: invalid MIDI EP
[  177.045369][ T6044] usb 1-1: snd-bcd2000: error during probing
[  177.051962][ T6044] snd-bcd2000 1-1:0.0: probe with driver snd-bcd2000 failed with error -22
[  177.166266][ T8835] tipc: Started in network mode
[  177.168376][ T8835] tipc: Node identity ac1414aa, cluster identity 4711
[  177.174599][ T8835] tipc: Enabled bearer <udp:syz2>, priority 10
[  177.249015][ T6044] usb 1-1: USB disconnect, device number 17
[  178.113552][ T8889] netlink: 'syz.2.1286': attribute type 64 has an invalid length.
[  178.116756][ T8889] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1286'.
[  178.296082][   T24] tipc: Node number set to 2886997162
[  179.498626][ T8925] binder: 8920:8925 ioctl c0306201 0 returned -14
[  179.663158][    T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  179.784370][ T5236] Bluetooth: hci1: command tx timeout
[  179.823332][    T9] usb 1-1: Using ep0 maxpacket: 32
[  179.830807][    T9] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c
[  179.834759][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.838183][    T9] usb 1-1: Product: syz
[  179.840081][    T9] usb 1-1: Manufacturer: syz
[  179.842111][    T9] usb 1-1: SerialNumber: syz
[  179.847743][    T9] usb 1-1: config 0 descriptor??
[  179.853543][    T9] gspca_main: gspca_topro-2.14.0 probing 06a2:0003
[  180.596405][ T8946] loop2: detected capacity change from 0 to 32768
[  180.631339][ T8946] JBD2: Ignoring recovery information on journal
[  180.682555][ T8946] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  180.731413][ T8952] overlayfs: failed to clone upperpath
[  180.750399][ T7126] ocfs2: Unmounting device (7,2) on (node local)
[  180.957083][ T8958] netlink: 'syz.2.1316': attribute type 1 has an invalid length.
[  181.065427][    T9] gspca_topro: reg_w err -71
[  181.095231][    T9] gspca_topro: Sensor soi763a
[  181.103358][    T9] usb 1-1: USB disconnect, device number 18
[  181.208597][ T8960] loop2: detected capacity change from 0 to 32768
[  181.391225][ T8964] overlayfs: failed to clone upperpath
[  181.466417][ T8968] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1321'.
[  181.558212][ T8962] loop2: detected capacity change from 0 to 32768
[  181.561131][ T8962] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1318 (8962)
[  181.568135][ T8962] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  181.571426][ T8962] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  181.602310][ T8962] BTRFS info (device loop2): enabling ssd optimizations
[  181.607193][ T8962] BTRFS info (device loop2): enabling free space tree
[  181.612364][ T8992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1325'.
[  182.307933][ T7126] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  182.533778][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1334'.
[  182.573141][ T9015] bridge1: port 1(veth3) entered blocking state
[  182.577650][ T9015] bridge1: port 1(veth3) entered disabled state
[  182.580692][ T9015] veth3: entered allmulticast mode
[  182.588806][ T9015] veth3: entered promiscuous mode
[  182.623335][ T9015] bridge1: port 2(veth0_to_bond) entered blocking state
[  182.633340][ T9015] bridge1: port 2(veth0_to_bond) entered disabled state
[  182.635779][ T9015] veth0_to_bond: entered allmulticast mode
[  182.638741][ T9015] veth0_to_bond: entered promiscuous mode
[  182.729795][ T9030] tipc: Started in network mode
[  182.731617][ T9030] tipc: Node identity ae887f873d28, cluster identity 4711
[  182.735492][ T9030] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  182.739469][ T9030] syzkaller0: entered promiscuous mode
[  182.741674][ T9030] syzkaller0: entered allmulticast mode
[  182.804570][ T9030] tipc: Resetting bearer <eth:syzkaller0>
[  182.818444][ T9029] tipc: Resetting bearer <eth:syzkaller0>
[  182.847788][ T9029] tipc: Disabling bearer <eth:syzkaller0>
[  183.765453][ T9047] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1350'.
[  183.771801][ T9047] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1350'.
[  183.775649][ T9047] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  184.739401][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1357'.
[  185.676652][ T9109] program syz.0.1377 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  185.808145][ T9115] ALSA: mixer_oss: invalid OSS volume ''
[  186.018348][ T9127] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.058117][ T9127] bridge_slave_0 (unregistering): left allmulticast mode
[  186.060982][ T9127] bridge_slave_0 (unregistering): left promiscuous mode
[  186.064029][ T9127] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.191041][ T9131] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  186.193561][ T9131] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  186.231141][ T9133] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1388'.
[  186.811931][ T9139] lo speed is unknown, defaulting to 1000
[  187.246458][ T9154] binder: 9153:9154 ioctl 400c620e 9999999999999999 returned -14
[  187.322789][ T9160] netlink: 'syz.0.1400': attribute type 3 has an invalid length.
[  187.518574][ T5236] Bluetooth: hci1: Malformed LE Event: 0x1b
[  188.332159][ T9185] bond_slave_0: entered promiscuous mode
[  188.335066][ T9185] bond_slave_1: entered promiscuous mode
[  188.349761][ T9185] macvlan0: entered allmulticast mode
[  188.351517][ T9185] bond0: entered allmulticast mode
[  188.353228][ T9185] bond_slave_0: entered allmulticast mode
[  188.355016][ T9185] bond_slave_1: entered allmulticast mode
[  188.357613][ T9185] 8021q: adding VLAN 0 to HW filter on device macvlan0
[  188.361359][ T9185] bridge0: port 3(macvlan0) entered blocking state
[  188.363559][ T9185] bridge0: port 3(macvlan0) entered disabled state
[  188.367637][ T9185] macvlan0: entered promiscuous mode
[  188.369379][ T9185] bond0: entered promiscuous mode
[  188.372094][ T9185] bridge0: port 3(macvlan0) entered blocking state
[  188.374761][ T9185] bridge0: port 3(macvlan0) entered forwarding state
[  188.521926][ T9195] loop2: detected capacity change from 0 to 2048
[  188.549788][ T9195] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  188.587070][ T9201] loop0: detected capacity change from 0 to 2048
[  188.632290][ T9203] bridge2: entered allmulticast mode
[  188.679308][ T9201] Alternate GPT is invalid, using primary GPT.
[  188.681441][ T9201]  loop0: p2 p3 p7
[  189.219773][ T9222] loop2: detected capacity change from 0 to 32768
[  189.223775][ T9222] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 5, max 64)
[  189.223775][ T9222] members_v2 (size 152):
[  189.223775][ T9222] Device:                        0
[  189.223775][ T9222]   Label:                       (none)
[  189.223775][ T9222]   UUID:                        9b24efed-6a70-49cb-9057-2c46291a785d
[  189.223775][ T9222]   Size:                        655360
[  189.223775][ T9222]   read errors:                 0
[  189.223775][ T9222]   write errors:                0
[  189.223775][ T9222]   checksum errors:             0
[  189.223775][ T9222]   seqread iops:                0
[  189.223775][ T9222]   seqwrite iops:               0
[  189.223775][ T9222]   randread iops:               0
[  189.223775][ T9222]   randwrite iops:              0
[  189.223775][ T9222]   Bucket size:                 131072
[  189.223775][ T9222]   First bucket:                0
[  189.223775][ T9222]   Buckets:                     5
[  189.223775][ T9222]   Last mount:                  1714681272
[  189.223775][ T9222]   Last superblock write:       41
[  189.223775][ T9222]   State:                       rw
[  189.223775][ T9222]   Data allowed:                journal,btree,user
[  189.223775][ T9222]   Has data:                    (none)
[  189.223775][ T9222]   Btree allocated bitmap blocksize:256
[  189.223775][ T9222]   Btree allocated bitmap:      0000000000000000000000010001000010011000000000000000000000000000
[  189.223775][ T9222]   Durability:    
[  189.223883][ T9222] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  189.272052][    C1] vkms_vblank_simulate: vblank timer overrun
[  189.334705][ T6107] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  189.493288][ T6107] usb 1-1: Using ep0 maxpacket: 32
[  189.504563][ T6107] usb 1-1: config 4 has an invalid interface number: 128 but max is 0
[  189.507922][ T6107] usb 1-1: config 4 has no interface number 0
[  189.510633][ T6107] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.901573][ T6107] usb 1-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.905781][ T6107] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  189.909415][ T6107] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.930059][ T6107] hub 1-1:4.128: USB hub found
[  190.135185][ T6107] hub 1-1:4.128: 2 ports detected
[  190.137310][ T6107] hub 1-1:4.128: Using single TT (err -22)
[  190.336831][ T6107] hub 1-1:4.128: hub_hub_status failed (err = -71)
[  190.339275][ T6107] hub 1-1:4.128: config failed, can't get hub status (err -71)
[  190.373634][ T6107] usb 1-1: USB disconnect, device number 19
[  190.881849][ T9252] loop2: detected capacity change from 0 to 1024
[  190.888212][ T9252] EXT4-fs: Ignoring removed oldalloc option
[  190.901626][ T9252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.942058][ T7126] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.113294][ T6101] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  191.265039][ T6101] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  191.267903][ T6101] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.276972][ T6101] usb 1-1: config 0 descriptor??
[  191.283718][ T6101] cp210x 1-1:0.0: cp210x converter detected
[  191.691270][ T6101] usb 1-1: cp210x converter now attached to ttyUSB0
[  191.892313][    T9] usb 1-1: USB disconnect, device number 20
[  191.897631][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  191.903260][    T9] cp210x 1-1:0.0: device disconnected
[  192.739240][ T9300] loop2: detected capacity change from 0 to 512
[  192.744136][ T9300] EXT4-fs: Ignoring removed orlov option
[  192.750256][ T9300] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c119, mo2=0002]
[  192.760316][ T9300] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1459: corrupted in-inode xattr: e_value size too large
[  192.773118][ T9300] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1459: couldn't read orphan inode 15 (err -117)
[  192.781637][ T9300] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.712090][   T47] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  193.982754][ T7126] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.098754][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  194.101296][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.133716][   T47] usb 1-1: Using ep0 maxpacket: 32
[  194.139445][   T47] usb 1-1: config 0 has an invalid interface number: 98 but max is 0
[  194.142730][   T47] usb 1-1: config 0 has no interface number 0
[  194.148371][   T47] usb 1-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01
[  194.151952][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  194.159167][   T47] usb 1-1: config 0 descriptor??
[  194.269204][ T9321] loop2: detected capacity change from 0 to 32768
[  194.273857][ T9321] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1466 (9321)
[  194.284517][ T9321] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  194.291525][ T9321] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  194.338981][ T9321] BTRFS info (device loop2): rebuilding free space tree
[  194.351736][ T9321] BTRFS info (device loop2): allowing degraded mounts
[  194.354842][ T9321] BTRFS info (device loop2): enabling ssd optimizations
[  194.357621][ T9321] BTRFS info (device loop2): enabling free space tree
[  194.359832][ T9321] BTRFS info (device loop2): force clearing of disk cache
[  194.362309][ T9321] BTRFS info (device loop2): use zstd compression, level 3
[  194.365621][ T9321] BTRFS info (device loop2): max_inline set to 0
[  194.389340][ T6101] usb 1-1: USB disconnect, device number 21
[  194.476241][ T7126] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  195.107656][ T9349] loop2: detected capacity change from 0 to 512
[  195.110614][ T9349] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  195.129069][   T33] audit: type=1800 audit(1756522736.272:42): pid=9349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1471" name="file1" dev="loop2" ino=1048633 res=0 errno=0
[  195.330967][ T9358] loop0: detected capacity change from 0 to 4096
[  195.401136][ T9358] ntfs3(loop0): failed to convert "0080" to koi8-r
[  195.412764][ T9358] ntfs3(loop0): failed to convert name for inode 1e.
[  195.415829][ T9358] ntfs3(loop0): ino=1f, mi_enum_attr
[  195.418226][ T9358] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  195.608751][ T9372] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  195.713598][ T9380] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1486'.
[  195.914957][ T9393] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1490'.
[  195.970248][ T9378] loop2: detected capacity change from 0 to 40427
[  195.994708][ T9378] F2FS-fs (loop2): Image doesn't support compression
[  195.999927][ T9378] F2FS-fs (loop2): journaled quota format not specified
[  196.251211][ T6048] Bluetooth: hci1: command 0x0406 tx timeout
[  196.255634][ T6041] Bluetooth: hci0: command 0x0406 tx timeout
[  196.416346][ T9405] 9p: Unknown access argument c: -22
[  196.568313][ T9411] sctp: [Deprecated]: syz.0.1498 (pid 9411) Use of struct sctp_assoc_value in delayed_ack socket option.
[  196.568313][ T9411] Use struct sctp_sack_info instead
[  196.653323][ T6101] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  196.726888][ T9413] netlink: 4528 bytes leftover after parsing attributes in process `syz.1.1499'.
[  196.730496][ T9413] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1499'.
[  196.734476][ T9413] netlink: 4528 bytes leftover after parsing attributes in process `syz.1.1499'.
[  196.812130][ T6101] usb 3-1: unable to get BOS descriptor or descriptor too short
[  196.816746][ T6101] usb 3-1: not running at top speed; connect to a high speed hub
[  196.822069][ T6101] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  196.827956][ T6101] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  196.832622][ T6101] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  196.843638][ T6101] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  196.848404][ T6101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.852937][ T6101] usb 3-1: Product: syz
[  196.855006][ T6101] usb 3-1: Manufacturer: syz
[  196.856955][ T6101] usb 3-1: SerialNumber: syz
[  197.098512][ T6101] usb 3-1: USB disconnect, device number 18
[  197.108914][   T56] Bluetooth: hci0: unexpected event for opcode 0x0c1c
[  197.776977][ T9445] openvswitch: netlink: IP tunnel dst address not specified
[  197.829750][ T9451] loop2: detected capacity change from 0 to 512
[  197.829898][ T9449] loop0: detected capacity change from 0 to 1024
[  197.835833][ T9449] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945)
[  197.838976][ T9451] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1517: casefold flag without casefold feature
[  197.840920][ T9449] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  197.849791][ T9451] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1517: couldn't read orphan inode 15 (err -117)
[  197.856521][ T9449] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  197.856652][ T9451] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.860086][ T9449] EXT4-fs (loop0): orphan cleanup on readonly fs
[  197.870668][ T9449] EXT4-fs error (device loop0): ext4_read_inode_bitmap:167: comm syz.0.1516: Inode bitmap for bg 0 marked uninitialized
[  197.878096][ T9449] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  197.882182][ T9451] EXT4-fs warning (device loop2): ext4_empty_dir:3089: inode #2: comm syz.2.1517: directory missing '.'
[  197.910033][ T7126] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.927065][ T6042] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.046454][ T9464] loop0: detected capacity change from 0 to 24
[  198.049523][ T9464] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  198.050153][ T9466] autofs: Unknown parameter 'no9 PG!8E	'
[  198.057146][ T9464] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  199.113363][    T9] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  199.234489][   T47] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  199.553343][   T47] usb 3-1: Using ep0 maxpacket: 8
[  199.604731][   T47] usb 3-1: config 0 interface 0 has no altsetting 0
[  199.624739][   T47] usb 3-1: New USB device found, idVendor=0e41, idProduct=4142, bcdDevice=d4.6e
[  199.628527][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.631643][   T47] usb 3-1: Product: syz
[  199.634640][   T47] usb 3-1: Manufacturer: syz
[  199.636410][   T47] usb 3-1: SerialNumber: syz
[  199.644205][   T47] usb 3-1: config 0 descriptor??
[  199.650374][   T47] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 found
[  199.663378][    T9] usb 1-1: Using ep0 maxpacket: 32
[  199.672203][    T9] usb 1-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77
[  199.677274][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.680607][    T9] usb 1-1: Product: syz
[  199.682342][    T9] usb 1-1: Manufacturer: syz
[  199.685506][    T9] usb 1-1: SerialNumber: syz
[  199.689828][    T9] usb 1-1: config 0 descriptor??
[  199.695539][    T9] hdpvr 1-1:0.0: Could not find bulk-in endpoint
[  199.698150][    T9] hdpvr 1-1:0.0: probe with driver hdpvr failed with error -12
[  199.856298][   T47] snd_usb_toneport 3-1:0.0: Line 6 TonePort UX2 now disconnected
[  199.861605][   T47] snd_usb_toneport 3-1:0.0: probe with driver snd_usb_toneport failed with error -22
[  199.905732][    T9] usb 1-1: USB disconnect, device number 22
[  200.055200][ T6101] usb 3-1: USB disconnect, device number 19
[  200.560353][ T9507] loop0: detected capacity change from 0 to 1764
[  200.640660][ T9510] vcan0: tx drop: invalid da for name 0x0000000000000002
[  202.890916][ T9536] loop0: detected capacity change from 0 to 1024
[  202.914150][ T9536] EXT4-fs: Ignoring removed bh option
[  202.956649][ T9528] loop2: detected capacity change from 0 to 40427
[  202.960189][ T9528] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  202.963142][ T9528] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  202.971556][ T9536] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.005075][ T6042] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.048471][ T9528] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  203.071209][ T9528] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  203.075004][ T9528] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  203.129692][ T9547] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1555'.
[  204.147444][ T9568] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5)
[  204.149857][ T9568] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  204.154270][ T9568] vhci_hcd vhci_hcd.0: Device attached
[  204.157832][ T9568] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  204.164938][ T9568] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  204.170401][ T9568] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  204.176516][ T9568] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  204.183345][ T9568] loop0: detected capacity change from 0 to 256
[  204.204603][ T9568] FAT-fs (loop0): Directory bread(block 64) failed
[  204.207188][ T9568] FAT-fs (loop0): Directory bread(block 65) failed
[  204.210034][ T9568] FAT-fs (loop0): Directory bread(block 66) failed
[  204.212652][ T9568] FAT-fs (loop0): Directory bread(block 67) failed
[  204.216157][ T9568] FAT-fs (loop0): Directory bread(block 68) failed
[  204.220026][ T9568] FAT-fs (loop0): Directory bread(block 69) failed
[  204.222741][ T9568] FAT-fs (loop0): Directory bread(block 70) failed
[  204.225749][ T9568] FAT-fs (loop0): Directory bread(block 71) failed
[  204.228474][ T9568] FAT-fs (loop0): Directory bread(block 72) failed
[  204.231091][ T9568] FAT-fs (loop0): Directory bread(block 73) failed
[  204.257317][ T9568] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  204.263342][ T9568] vhci_hcd vhci_hcd.0: pdev(0) rhport(6) sockfd(19)
[  204.266038][ T9568] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  204.269147][ T9568] vhci_hcd vhci_hcd.0: Device attached
[  204.278633][ T9568] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  204.282443][ T9568] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  204.292550][ T9573] vhci_hcd: connection closed
[  204.292899][   T12] vhci_hcd: stop threads
[  204.293943][ T9569] vhci_hcd: connection closed
[  204.295207][   T12] vhci_hcd: release socket
[  204.303774][   T12] vhci_hcd: disconnect device
[  204.306039][   T12] vhci_hcd: stop threads
[  204.307829][   T12] vhci_hcd: release socket
[  204.309730][   T12] vhci_hcd: disconnect device
[  204.351724][ T6101] vhci_hcd: vhci_device speed not set
[  204.768190][ T9580] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  204.951394][ T9589] program syz.0.1570 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  205.068920][ T9594] netlink: 'syz.0.1572': attribute type 1 has an invalid length.
[  205.247531][ T9603] loop0: detected capacity change from 0 to 512
[  205.282848][ T9603] EXT4-fs error (device loop0): ext4_get_branch:178: inode #11: block 4294967295: comm syz.0.1577: invalid block
[  205.292767][ T9603] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1577: invalid indirect mapped block 4294967295 (level 1)
[  205.300396][ T9603] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.1577: invalid indirect mapped block 4294967295 (level 1)
[  205.307990][ T9603] EXT4-fs (loop0): 2 truncates cleaned up
[  205.311757][ T9603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.320594][ T9603] EXT4-fs error (device loop0): empty_inline_dir:1760: inode #12: block 7: comm syz.0.1577: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0
[  205.335412][ T9603] EXT4-fs warning (device loop0): empty_inline_dir:1767: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[  205.637292][ T6042] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.740562][ T9616] loop0: detected capacity change from 0 to 512
[  205.743880][ T9616] EXT4-fs: Ignoring removed bh option
[  205.746082][ T9616] EXT4-fs: Ignoring removed mblk_io_submit option
[  205.749983][ T9616] EXT4-fs (loop0): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  205.756679][ T9616] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  205.760124][ T9616] EXT4-fs (loop0): orphan cleanup on readonly fs
[  205.763286][   T47] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  205.769121][ T9616] Quota error (device loop0): do_insert_tree: Free block already used in tree: block 4
[  205.774568][ T9616] Quota error (device loop0): qtree_write_dquot: Error -5 occurred while creating quota
[  205.778392][ T9616] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1581: Failed to acquire dquot type 1
[  205.784133][ T9616] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1581: Invalid block bitmap block 0 in block_group 0
[  205.794475][ T9616] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1581: Invalid block bitmap block 0 in block_group 0
[  205.802887][ T9616] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1581: Invalid block bitmap block 0 in block_group 0
[  205.810756][ T9616] Quota error (device loop0): write_blk: dquota write failed
[  205.814041][ T9616] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  205.818023][ T9616] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1581: Failed to acquire dquot type 1
[  205.823843][ T9616] Quota error (device loop0): write_blk: dquota write failed
[  205.827315][ T9616] Quota error (device loop0): qtree_write_dquot: Error -28 occurred while creating quota
[  205.831216][ T9616] EXT4-fs error (device loop0): ext4_acquire_dquot:6937: comm syz.0.1581: Failed to acquire dquot type 1
[  205.840747][ T9616] EXT4-fs (loop0): 1 orphan inode deleted
[  205.849447][ T9616] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  205.874754][ T6042] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.916011][   T47] usb 3-1: unable to get BOS descriptor or descriptor too short
[  205.920868][   T47] usb 3-1: not running at top speed; connect to a high speed hub
[  205.929865][   T47] usb 3-1: config 12 has an invalid interface number: 173 but max is 1
[  205.933387][   T47] usb 3-1: config 12 has an invalid interface number: 173 but max is 1
[  205.936809][   T47] usb 3-1: config 12 has 1 interface, different from the descriptor's value: 2
[  205.940411][   T47] usb 3-1: config 12 has no interface number 0
[  205.944130][   T47] usb 3-1: config 12 interface 173 has no altsetting 0
[  205.950300][   T47] usb 3-1: config 12 interface 173 has no altsetting 1
[  205.957992][   T47] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=33.b7
[  205.962187][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.967826][   T47] usb 3-1: Product: syz
[  205.969795][   T47] usb 3-1: Manufacturer: syz
[  205.971770][   T47] usb 3-1: SerialNumber: syz
[  206.192176][   T47] usb 3-1: USB disconnect, device number 20
[  206.323276][ T6107] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  206.473314][ T6107] usb 1-1: Using ep0 maxpacket: 8
[  206.481288][ T6107] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=44.b2
[  206.484262][ T6107] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.487263][ T6107] usb 1-1: Product: syz
[  206.488772][ T6107] usb 1-1: Manufacturer: syz
[  206.490595][ T6107] usb 1-1: SerialNumber: syz
[  206.497903][ T6107] usb 1-1: config 0 descriptor??
[  206.712350][ T6107] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  207.203197][ T6102] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  207.387156][ T6102] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  207.390565][ T6102] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.398023][ T6102] usb 3-1: config 0 descriptor??
[  207.517179][ T6107] gspca_sunplus: reg_w_riv err -71
[  207.519276][ T6107] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  207.531238][ T6107] usb 1-1: USB disconnect, device number 23
[  207.607424][ T6102] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  207.811617][ T6102] [drm:udl_init] *ERROR* Selecting channel failed
[  207.827996][ T6102] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 3
[  207.830288][ T6102] [drm] Initialized udl on minor 3
[  207.835139][ T6102] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  207.839199][ T6102] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  207.845400][ T6107] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  207.851191][ T6107] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  207.857008][ T6102] usb 3-1: USB disconnect, device number 21
[  207.870303][ T6107] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  208.613251][ T6044] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  208.618454][ T6101] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  208.766302][ T6044] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  208.770982][ T6044] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.775350][ T6101] usb 1-1: unable to get BOS descriptor or descriptor too short
[  208.780894][ T6044] usb 3-1: config 0 descriptor??
[  208.785024][ T6101] usb 1-1: no configurations
[  208.788355][ T6044] gspca_main: sunplus-2.14.0 probing 055f:c420
[  208.793092][ T6101] usb 1-1: can't read configurations, error -22
[  209.306970][ T9676] vlan2: entered allmulticast mode
[  209.308719][ T9676] bridge0: port 3(vlan2) entered blocking state
[  209.312768][ T9676] bridge0: port 3(vlan2) entered disabled state
[  209.318399][ T9676] vlan2: entered promiscuous mode
[  209.590310][ T6044] gspca_sunplus: reg_w_riv err -71
[  209.592043][ T6044] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  209.596052][ T6044] usb 3-1: USB disconnect, device number 22
[  209.673486][ T6101] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  209.823228][ T6101] usb 1-1: Using ep0 maxpacket: 32
[  209.827314][ T6101] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.835013][ T6101] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95
[  209.838731][ T6101] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.841886][ T6101] usb 1-1: Product: syz
[  209.843934][ T6101] usb 1-1: Manufacturer: syz
[  209.845749][ T6101] usb 1-1: SerialNumber: syz
[  209.851496][ T6101] usb 1-1: config 0 descriptor??
[  209.858748][ T6101] microtek usb (rev 0.4.3): expecting 3 got 0 endpoints! Bailing out.
[  209.957223][ T9689] netlink: 'syz.1.1615': attribute type 1 has an invalid length.
[  209.959623][ T9689] netlink: 1 bytes leftover after parsing attributes in process `syz.1.1615'.
[  210.064966][   T47] usb 1-1: USB disconnect, device number 25
[  210.196701][ T9708] netlink: 19 bytes leftover after parsing attributes in process `syz.2.1624'.
[  210.653385][ T6102] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  210.804942][ T6102] usb 3-1: config 0 has no interfaces?
[  210.809309][ T6102] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  210.812354][ T6102] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.817458][ T6102] usb 3-1: Product: syz
[  210.819382][ T6102] usb 3-1: Manufacturer: syz
[  210.820954][ T6102] usb 3-1: SerialNumber: syz
[  210.825281][ T6102] usb 3-1: config 0 descriptor??
[  211.031679][ T6044] usb 3-1: USB disconnect, device number 23
[  211.582100][ T9735] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1635'.
[  212.196532][ T9757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1645'.
[  212.234566][ T9757] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1645'.
[  214.982029][ T9804] loop2: detected capacity change from 0 to 256
[  214.989685][ T9804] FAT-fs (loop2): bogus sectors per cluster 0
[  214.994602][ T9804] FAT-fs (loop2): Can't find a valid FAT filesystem
[  215.323148][ T6107] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  215.361476][ T9807] loop0: detected capacity change from 0 to 32768
[  215.377547][ T9807] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  215.405764][ T9807] XFS (loop0): Ending clean mount
[  215.434235][ T9807] XFS (loop0): Quotacheck needed: Please wait.
[  215.474923][ T9807] XFS (loop0): Quotacheck: Done.
[  215.512516][ T6107] usb 3-1: config 3 has an invalid interface number: 56 but max is 0
[  215.513236][ T6042] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  215.515828][ T6107] usb 3-1: config 3 has no interface number 0
[  215.521175][ T6107] usb 3-1: config 3 interface 56 has no altsetting 0
[  215.535427][ T6107] usb 3-1: New USB device found, idVendor=03f0, idProduct=2101, bcdDevice=80.cc
[  215.539072][ T6107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.542183][ T6107] usb 3-1: Product: syz
[  215.544134][ T6107] usb 3-1: Manufacturer: syz
[  215.546085][ T6107] usb 3-1: SerialNumber: syz
[  215.744973][ T9818] loop0: detected capacity change from 0 to 128
[  215.764835][ T6107] safe_serial 3-1:3.56: safe_serial converter detected
[  215.767758][ T6107] safe_serial 3-1:3.56: probe with driver safe_serial failed with error -22
[  215.777890][ T6107] usb 3-1: USB disconnect, device number 24
[  216.350123][ T9825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1670'.
[  216.389423][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  216.401391][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  216.406975][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  216.410120][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  216.414612][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  216.482086][ T9826] lo speed is unknown, defaulting to 1000
[  216.652856][ T9832] loop2: detected capacity change from 0 to 40427
[  216.662413][ T9832] F2FS-fs (loop2): build fault injection type: 0x7
[  216.666943][ T9832] F2FS-fs (loop2): invalid crc value
[  216.728942][ T9826] chnl_net:caif_netlink_parms(): no params data found
[  216.786924][ T9832] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  216.790481][ T9832] F2FS-fs (loop2): Start checkpoint disabled!
[  216.799210][ T9832] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  216.890356][ T1089] kworker/u9:5: attempt to access beyond end of device
[  216.890356][ T1089] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  216.909186][ T1089] CPU: 1 UID: 0 PID: 1089 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  216.909207][ T1089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  216.909216][ T1089] Workqueue: writeback wb_workfn (flush-7:2)
[  216.909241][ T1089] Call Trace:
[  216.909261][ T1089]  <TASK>
[  216.909267][ T1089]  dump_stack_lvl+0x189/0x250
[  216.909286][ T1089]  ? preempt_schedule_thunk+0x16/0x30
[  216.909308][ T1089]  ? __pfx_dump_stack_lvl+0x10/0x10
[  216.909323][ T1089]  ? __pfx_queue_work_on+0x10/0x10
[  216.909338][ T1089]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  216.909357][ T1089]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  216.909381][ T1089]  f2fs_handle_critical_error+0x37c/0x540
[  216.909408][ T1089]  f2fs_write_end_io+0x886/0xb60
[  216.909436][ T1089]  __submit_merged_bio+0x27a/0x6a0
[  216.909460][ T1089]  __submit_merged_write_cond+0x255/0x530
[  216.909516][ T1089]  f2fs_write_data_pages+0x261d/0x3000
[  216.909563][ T1089]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  216.909594][ T1089]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  216.909636][ T1089]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  216.909665][ T1089]  ? trace_f2fs_writepages+0x7f/0x200
[  216.909684][ T1089]  ? f2fs_write_node_pages+0x478/0x6e0
[  216.909706][ T1089]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  216.909721][ T1089]  ? lock_list_lru_of_memcg+0x238/0x4c0
[  216.909747][ T1089]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  216.909768][ T1089]  do_writepages+0x32e/0x550
[  216.909790][ T1089]  ? reacquire_held_locks+0x127/0x1d0
[  216.909804][ T1089]  ? writeback_sb_inodes+0x384/0x1010
[  216.909828][ T1089]  __writeback_single_inode+0x145/0xff0
[  216.909846][ T1089]  ? do_raw_spin_unlock+0x4d/0x240
[  216.909865][ T1089]  writeback_sb_inodes+0x6c7/0x1010
[  216.909910][ T1089]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  216.909961][ T1089]  ? rcu_is_watching+0x15/0xb0
[  216.909984][ T1089]  wb_writeback+0x43b/0xaf0
[  216.910007][ T1089]  ? queue_io+0x3a1/0x590
[  216.910026][ T1089]  ? __pfx_wb_writeback+0x10/0x10
[  216.910050][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[  216.910070][ T1089]  wb_workfn+0x409/0xef0
[  216.910097][ T1089]  ? __pfx_wb_workfn+0x10/0x10
[  216.910114][ T1089]  ? __lock_acquire+0xab9/0xd20
[  216.910140][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[  216.910158][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[  216.910173][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[  216.910185][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[  216.910199][ T1089]  process_scheduled_works+0xae1/0x17b0
[  216.910235][ T1089]  ? __pfx_process_scheduled_works+0x10/0x10
[  216.910262][ T1089]  worker_thread+0x8a0/0xda0
[  216.910298][ T1089]  kthread+0x711/0x8a0
[  216.910317][ T1089]  ? __pfx_worker_thread+0x10/0x10
[  216.910329][ T1089]  ? __pfx_kthread+0x10/0x10
[  216.910347][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[  216.910362][ T1089]  ? lockdep_hardirqs_on+0x9c/0x150
[  216.910380][ T1089]  ? __pfx_kthread+0x10/0x10
[  216.910396][ T1089]  ret_from_fork+0x3fc/0x770
[  216.910413][ T1089]  ? __pfx_ret_from_fork+0x10/0x10
[  216.910432][ T1089]  ? __switch_to_asm+0x39/0x70
[  216.910447][ T1089]  ? __switch_to_asm+0x33/0x70
[  216.910462][ T1089]  ? __pfx_kthread+0x10/0x10
[  216.910505][ T1089]  ret_from_fork_asm+0x1a/0x30
[  216.910536][ T1089]  </TASK>
[  216.910542][ T1089] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  217.041921][ T9826] bridge0: port 1(bridge_slave_0) entered blocking state
[  217.044888][ T1089] CPU: 1 UID: 0 PID: 1089 Comm: kworker/u9:5 Not tainted syzkaller #0 PREEMPT(full) 
[  217.044907][ T1089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  217.044917][ T1089] Workqueue: writeback wb_workfn (flush-7:2)
[  217.044938][ T1089] Call Trace:
[  217.044944][ T1089]  <TASK>
[  217.044951][ T1089]  dump_stack_lvl+0x189/0x250
[  217.044973][ T1089]  ? __pfx_dump_stack_lvl+0x10/0x10
[  217.044989][ T1089]  ? __pfx_queue_work_on+0x10/0x10
[  217.045002][ T1089]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  217.045021][ T1089]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  217.045049][ T1089]  f2fs_handle_critical_error+0x37c/0x540
[  217.045076][ T1089]  f2fs_write_end_io+0x886/0xb60
[  217.045106][ T1089]  __submit_merged_bio+0x27a/0x6a0
[  217.045139][ T1089]  __submit_merged_write_cond+0x255/0x530
[  217.045164][ T1089]  f2fs_write_data_pages+0x261d/0x3000
[  217.045212][ T1089]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  217.045243][ T1089]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  217.045288][ T1089]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  217.045319][ T1089]  ? trace_f2fs_writepages+0x7f/0x200
[  217.045339][ T1089]  ? f2fs_write_node_pages+0x478/0x6e0
[  217.045362][ T1089]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  217.045377][ T1089]  ? lock_list_lru_of_memcg+0x238/0x4c0
[  217.045406][ T1089]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  217.045427][ T1089]  do_writepages+0x32e/0x550
[  217.045451][ T1089]  ? reacquire_held_locks+0x127/0x1d0
[  217.045497][ T1089]  ? writeback_sb_inodes+0x384/0x1010
[  217.045523][ T1089]  __writeback_single_inode+0x145/0xff0
[  217.045541][ T1089]  ? do_raw_spin_unlock+0x4d/0x240
[  217.045562][ T1089]  writeback_sb_inodes+0x6c7/0x1010
[  217.045604][ T1089]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  217.045660][ T1089]  ? rcu_is_watching+0x15/0xb0
[  217.045684][ T1089]  wb_writeback+0x43b/0xaf0
[  217.045709][ T1089]  ? queue_io+0x3a1/0x590
[  217.045729][ T1089]  ? __pfx_wb_writeback+0x10/0x10
[  217.045754][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[  217.045776][ T1089]  wb_workfn+0x409/0xef0
[  217.045805][ T1089]  ? __pfx_wb_workfn+0x10/0x10
[  217.045825][ T1089]  ? __lock_acquire+0xab9/0xd20
[  217.045844][ T9826] bridge0: port 1(bridge_slave_0) entered disabled state
[  217.045854][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[  217.045874][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[  217.045890][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[  217.045902][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[  217.045918][ T1089]  process_scheduled_works+0xae1/0x17b0
[  217.045959][ T1089]  ? __pfx_process_scheduled_works+0x10/0x10
[  217.045989][ T1089]  worker_thread+0x8a0/0xda0
[  217.046030][ T1089]  kthread+0x711/0x8a0
[  217.046051][ T1089]  ? __pfx_worker_thread+0x10/0x10
[  217.046064][ T1089]  ? __pfx_kthread+0x10/0x10
[  217.046083][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[  217.046099][ T1089]  ? lockdep_hardirqs_on+0x9c/0x150
[  217.046121][ T1089]  ? __pfx_kthread+0x10/0x10
[  217.046139][ T1089]  ret_from_fork+0x3fc/0x770
[  217.046157][ T1089]  ? __pfx_ret_from_fork+0x10/0x10
[  217.046177][ T1089]  ? __switch_to_asm+0x39/0x70
[  217.046193][ T1089]  ? __switch_to_asm+0x33/0x70
[  217.046208][ T1089]  ? __pfx_kthread+0x10/0x10
[  217.046226][ T1089]  ret_from_fork_asm+0x1a/0x30
[  217.046258][ T1089]  </TASK>
[  217.046265][ T1089] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  217.049014][ T9826] bridge_slave_0: entered allmulticast mode
[  217.167305][ T9826] bridge_slave_0: entered promiscuous mode
[  217.172034][ T9826] bridge0: port 2(bridge_slave_1) entered blocking state
[  217.180782][ T9826] bridge0: port 2(bridge_slave_1) entered disabled state
[  217.186492][ T9826] bridge_slave_1: entered allmulticast mode
[  217.190636][ T9826] bridge_slave_1: entered promiscuous mode
[  217.255324][ T9826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  217.260051][ T9826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  217.298245][ T9826] team0: Port device team_slave_0 added
[  217.302022][ T9826] team0: Port device team_slave_1 added
[  217.337620][ T9826] batman_adv: batadv0: Adding interface: batadv_slave_0
[  217.340026][ T9826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.349633][ T9826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  217.355326][ T9826] batman_adv: batadv0: Adding interface: batadv_slave_1
[  217.358129][ T9826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  217.367470][ T9826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  217.422551][ T9826] hsr_slave_0: entered promiscuous mode
[  217.426797][ T9826] hsr_slave_1: entered promiscuous mode
[  217.430892][ T9826] debugfs: 'hsr0' already exists in 'hsr'
[  217.435548][ T9826] Cannot create hsr debugfs directory
[  217.462500][ T9859] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1682'.
[  217.819176][ T9873] program syz.2.1685 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  217.867533][ T9826] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  217.873500][ T9826] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  217.878499][ T9826] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  217.896570][ T9826] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  217.970777][ T9826] 8021q: adding VLAN 0 to HW filter on device bond0
[  217.997117][ T9826] 8021q: adding VLAN 0 to HW filter on device team0
[  217.997653][ T9885] kernel profiling enabled (shift: 17)
[  218.019305][  T277] bridge0: port 1(bridge_slave_0) entered blocking state
[  218.022088][  T277] bridge0: port 1(bridge_slave_0) entered forwarding state
[  218.036750][  T277] bridge0: port 2(bridge_slave_1) entered blocking state
[  218.039527][  T277] bridge0: port 2(bridge_slave_1) entered forwarding state
[  218.232916][ T9826] 8021q: adding VLAN 0 to HW filter on device batadv0
[  218.279333][ T9826] veth0_vlan: entered promiscuous mode
[  218.285937][ T9826] veth1_vlan: entered promiscuous mode
[  218.306284][ T9826] veth0_macvtap: entered promiscuous mode
[  218.310564][ T9826] veth1_macvtap: entered promiscuous mode
[  218.322914][ T9826] batman_adv: batadv0: Interface activated: batadv_slave_0
[  218.330468][ T9826] batman_adv: batadv0: Interface activated: batadv_slave_1
[  218.344647][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  218.348151][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  218.367979][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  218.396302][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  218.495842][ T5236] Bluetooth: hci1: command tx timeout
[  218.511461][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.520646][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  218.566964][  T277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  218.570307][  T277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  219.376004][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1699'.
[  219.435109][ T9923] overlay: Bad value for 'workdir'
[  219.691869][ T6107] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  219.948858][ T6107] usb 3-1: config 0 has an invalid interface number: 128 but max is 0
[  219.965997][ T6107] usb 3-1: config 0 has no interface number 0
[  219.976880][ T6107] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  219.981414][ T6107] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.984964][ T6107] usb 3-1: Product: syz
[  219.988632][ T6107] usb 3-1: Manufacturer: syz
[  219.991513][ T6107] usb 3-1: SerialNumber: syz
[  219.996805][ T6107] usb 3-1: config 0 descriptor??
[  220.575682][ T5236] Bluetooth: hci1: command tx timeout
[  220.605069][ T6107] usb 3-1: Firmware version (0.0) predates our first public release.
[  220.607644][ T6107] usb 3-1: Please update to version 0.2 or newer
[  220.634405][ T6107] usb 3-1: USB disconnect, device number 25
[  220.987284][ T9953] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1712'.
[  221.181051][ T9965] loop2: detected capacity change from 0 to 256
[  221.188477][ T9965] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  221.203464][ T6107] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  221.356142][ T6107] usb 4-1: Using ep0 maxpacket: 16
[  221.360333][ T6107] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  221.365091][ T6107] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  221.369336][ T6107] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  221.373418][ T6107] usb 4-1: config 0 interface 0 has no altsetting 0
[  221.376277][ T6107] usb 4-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[  221.379689][ T6107] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  221.384952][ T6107] usb 4-1: config 0 descriptor??
[  221.563221][  T792] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  221.809449][ T6107] kye 0003:0458:0153.0006: unknown main item tag 0x0
[  221.812153][ T6107] kye 0003:0458:0153.0006: unknown main item tag 0x0
[  221.819576][ T6107] kye 0003:0458:0153.0006: unknown main item tag 0x0
[  221.822338][ T6107] kye 0003:0458:0153.0006: unknown main item tag 0x0
[  221.825173][ T6107] kye 0003:0458:0153.0006: unknown main item tag 0x0
[  221.828161][ T6107] kye 0003:0458:0153.0006: unknown main item tag 0x0
[  221.831704][ T6107] kye 0003:0458:0153.0006: unknown main item tag 0x0
[  221.837792][ T6107] kye 0003:0458:0153.0006: unknown main item tag 0x0
[  221.840829][ T6107] kye 0003:0458:0153.0006: unknown main item tag 0x0
[  221.843649][ T6107] kye 0003:0458:0153.0006: unknown main item tag 0x0
[  221.868228][ T6107] kye 0003:0458:0153.0006: hidraw0: USB HID v0.00 Device [HID 0458:0153] on usb-dummy_hcd.3-1/input0
[  221.885820][  T792] usb 3-1: Using ep0 maxpacket: 16
[  221.893899][  T792] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  221.896406][  T792] usb 3-1: config 0 has no interface number 0
[  221.898282][  T792] usb 3-1: config 0 interface 51 has no altsetting 0
[  221.902048][  T792] usb 3-1: New USB device found, idVendor=1004, idProduct=61aa, bcdDevice=4f.d5
[  221.905456][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.908503][  T792] usb 3-1: Product: syz
[  221.909797][  T792] usb 3-1: Manufacturer: syz
[  221.911248][  T792] usb 3-1: SerialNumber: syz
[  221.915352][  T792] usb 3-1: config 0 descriptor??
[  221.919468][  T792] usb 3-1: bad CDC descriptors
[  221.971703][ T9975] 9pnet_fd: Insufficient options for proto=fd
[  222.020933][ T6107] usb 4-1: USB disconnect, device number 2
[  222.131312][   T24] usb 3-1: USB disconnect, device number 26
[  222.653652][ T5236] Bluetooth: hci1: command tx timeout
[  222.883212][   T24] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  223.046875][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  223.052974][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  223.062826][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  223.081100][   T24] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  223.089501][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  223.100825][   T24] usb 4-1: config 0 descriptor??
[  223.520269][   T24] plantronics 0003:047F:FFFF.0007: reserved main item tag 0xe
[  223.550334][   T24] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0
[  223.667573][T10018] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1744'.
[  223.721263][   T24] usb 4-1: USB disconnect, device number 3
[  224.006710][T10037] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1751'.
[  224.011555][T10035] delete_channel: no stack
[  224.091751][T10039] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  224.703345][   T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  224.743273][ T5236] Bluetooth: hci1: command tx timeout
[  224.856024][   T24] usb 4-1: unable to get BOS descriptor or descriptor too short
[  224.872936][   T24] usb 4-1: config 3 has an invalid interface number: 51 but max is 0
[  224.880416][   T24] usb 4-1: config 3 has no interface number 0
[  224.918482][   T24] usb 4-1: New USB device found, idVendor=0b57, idProduct=2c68, bcdDevice=6e.32
[  224.921938][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.937703][   T24] usb 4-1: Product: syz
[  224.939705][   T24] usb 4-1: Manufacturer: syz
[  224.947104][   T24] usb 4-1: SerialNumber: syz
[  224.957137][ T6057] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.967875][   T24] usbhid 4-1:3.51: couldn't find an input interrupt endpoint
[  225.128950][ T6057] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.177422][   T24] usb 4-1: USB disconnect, device number 4
[  225.237349][ T6057] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.309134][ T6057] bond0: (slave netdevsim0): Releasing backup interface
[  225.315503][ T6057] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  225.462491][ T6057] vlan2: left promiscuous mode
[  225.468929][ T6057] bridge0: port 3(vlan2) entered disabled state
[  225.474957][ T6057] bridge_slave_1: left promiscuous mode
[  225.477405][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state
[  225.491244][T10070] loop2: detected capacity change from 0 to 32768
[  225.495443][ T6057] bridge_slave_0: left promiscuous mode
[  225.497773][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state
[  225.528316][T10070] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  225.574939][T10070] XFS (loop2): Ending clean mount
[  225.803885][ T7126] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  225.998070][T10089] loop3: detected capacity change from 0 to 16
[  226.017322][T10089] erofs (device loop3): rootino(nid 36) is not a directory(i_mode 25144)
[  226.335716][ T6057] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  226.351539][ T6057] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  226.360046][ T6057] bond0 (unregistering): Released all slaves
[  226.590290][ T6057] tipc: Left network mode
[  226.752762][T10108] netlink: 'syz.1.1781': attribute type 1 has an invalid length.
[  226.759023][T10108] netlink: 'syz.1.1781': attribute type 1 has an invalid length.
[  226.766300][T10108] netlink: 'syz.1.1781': attribute type 1 has an invalid length.
[  226.772392][T10108] netlink: 'syz.1.1781': attribute type 1 has an invalid length.
[  226.775881][T10108] netlink: 'syz.1.1781': attribute type 1 has an invalid length.
[  226.778851][T10108] netlink: 'syz.1.1781': attribute type 1 has an invalid length.
[  226.781849][T10108] netlink: 'syz.1.1781': attribute type 1 has an invalid length.
[  226.785030][T10108] netlink: 'syz.1.1781': attribute type 1 has an invalid length.
[  226.787896][T10108] netlink: 'syz.1.1781': attribute type 1 has an invalid length.
[  226.790932][T10108] netlink: 'syz.1.1781': attribute type 1 has an invalid length.
[  226.945437][ T6057] hsr_slave_0: left promiscuous mode
[  226.948184][ T6057] hsr_slave_1: left promiscuous mode
[  226.955900][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  226.958767][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_0
[  226.973870][ T6057] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  226.976717][ T6057] batman_adv: batadv0: Removing interface: batadv_slave_1
[  227.009901][ T6057] veth1_macvtap: left promiscuous mode
[  227.012150][ T6057] veth0_macvtap: left promiscuous mode
[  227.023306][ T6057] veth1_vlan: left promiscuous mode
[  227.025397][ T6057] veth0_vlan: left promiscuous mode
[  227.477916][T10123] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1788'.
[  228.169708][T10131] overlayfs: failed to clone lowerpath
[  229.371658][ T6057] team0 (unregistering): Port device team_slave_1 removed
[  229.426385][ T6057] team0 (unregistering): Port device team_slave_0 removed
[  229.689116][T10164] loop3: detected capacity change from 0 to 256
[  229.693424][T10164] vfat: Unknown parameter 'uni_xl'
[  230.308302][T10125] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1788'.
[  230.515362][T10177] loop2: detected capacity change from 0 to 32768
[  230.550687][T10177] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  230.594554][T10177] XFS (loop2): Ending clean mount
[  231.290916][T10209] loop3: detected capacity change from 0 to 512
[  231.294644][T10209] msdos: Unknown parameter 'noca]e'
[  231.310912][ T7126] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  232.988177][T10223] loop3: detected capacity change from 0 to 32768
[  233.002513][T10223] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  233.063727][ T9826] ocfs2: Unmounting device (7,3) on (node local)
[  233.162148][T10225] loop2: detected capacity change from 0 to 32768
[  233.162513][T10229] syzkaller1: entered promiscuous mode
[  233.169150][T10229] syzkaller1: entered allmulticast mode
[  233.172917][T10225] ERROR: (device loop2): diRead: i_ino != di_number
[  233.172917][T10225] 
[  233.352532][T10238] loop3: detected capacity change from 0 to 164
[  233.356529][T10238] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[  234.007452][T10250] overlayfs: failed to clone upperpath
[  234.855773][   T33] audit: type=1326 audit(1756522775.942:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10256 comm="syz.2.1838" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fccf2f8ebe9 code=0x0
[  235.708775][T10284] loop2: detected capacity change from 0 to 256
[  236.008998][T10299] netlink: 13 bytes leftover after parsing attributes in process `syz.2.1853'.
[  236.145294][T10307] cgroup: fork rejected by pids controller in /syz2
[  236.369763][   T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.460151][   T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.527074][   T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.599347][   T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  236.646560][T10317] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1862'.
[  236.706840][   T56] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  236.714950][   T56] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  236.718514][   T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  236.724107][   T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  236.728845][   T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  236.778482][T10318] lo speed is unknown, defaulting to 1000
[  236.913995][   T12] bridge_slave_1: left allmulticast mode
[  236.916258][   T12] bridge_slave_1: left promiscuous mode
[  236.918525][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  236.940031][   T12] veth0_to_bond: left allmulticast mode
[  236.952649][   T12] veth0_to_bond: left promiscuous mode
[  236.958046][   T12] bridge1: port 2(veth0_to_bond) entered disabled state
[  236.966141][   T12] veth3: left allmulticast mode
[  236.969339][   T12] veth3: left promiscuous mode
[  236.971707][   T12] bridge1: port 1(veth3) entered disabled state
[  237.278203][   T12] dvmrp5 (unregistering): left allmulticast mode
[  237.552652][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  237.558782][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  237.565090][   T12] bond0 (unregistering): Released all slaves
[  237.677069][   T12] tipc: Disabling bearer <udp:syz2>
[  237.689642][   T12] tipc: Left network mode
[  237.768637][   T12] IPVS: stopping backup sync thread 8776 ...
[  237.777023][   T56] Bluetooth: hci1: command tx timeout
[  237.850139][T10318] chnl_net:caif_netlink_parms(): no params data found
[  238.077353][   T12] hsr_slave_0: left promiscuous mode
[  238.081916][   T12] hsr_slave_1: left promiscuous mode
[  238.093958][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  238.097167][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  238.105606][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  238.108159][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  238.124650][   T12] veth1_macvtap: left promiscuous mode
[  238.126349][   T12] veth0_macvtap: left promiscuous mode
[  238.128129][   T12] veth1_vlan: left promiscuous mode
[  238.129772][   T12] veth0_vlan: left promiscuous mode
[  238.206671][   T12] pimreg (unregistering): left allmulticast mode
[  238.813489][   T56] Bluetooth: hci2: command tx timeout
[  238.834656][   T12] team0 (unregistering): Port device team_slave_1 removed
[  238.875497][   T12] team0 (unregistering): Port device team_slave_0 removed
[  239.452812][T10318] bridge0: port 1(bridge_slave_0) entered blocking state
[  239.461644][T10318] bridge0: port 1(bridge_slave_0) entered disabled state
[  239.464837][T10318] bridge_slave_0: entered allmulticast mode
[  239.468599][T10318] bridge_slave_0: entered promiscuous mode
[  239.476208][T10318] bridge0: port 2(bridge_slave_1) entered blocking state
[  239.483746][T10318] bridge0: port 2(bridge_slave_1) entered disabled state
[  239.486543][T10318] bridge_slave_1: entered allmulticast mode
[  239.496385][T10318] bridge_slave_1: entered promiscuous mode
[  239.535602][T10387] overlayfs: failed to clone upperpath
[  239.567705][T10318] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  239.599541][T10318] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  239.640753][T10390] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1892'.
[  239.649770][T10318] team0: Port device team_slave_0 added
[  239.664469][T10318] team0: Port device team_slave_1 added
[  239.722027][T10318] batman_adv: batadv0: Adding interface: batadv_slave_0
[  239.727842][T10318] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.738831][T10318] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  239.748508][T10318] batman_adv: batadv0: Adding interface: batadv_slave_1
[  239.751512][T10318] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  239.762789][T10318] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  239.881259][T10318] hsr_slave_0: entered promiscuous mode
[  239.885486][T10318] hsr_slave_1: entered promiscuous mode
[  239.888732][T10318] debugfs: 'hsr0' already exists in 'hsr'
[  239.890945][T10318] Cannot create hsr debugfs directory
[  240.615871][T10406] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1897'.
[  240.671070][T10318] netdevsim netdevsim2 netdevsim0: renamed from eth0
[  240.681555][T10318] netdevsim netdevsim2 netdevsim1: renamed from eth1
[  240.699806][T10318] netdevsim netdevsim2 netdevsim2: renamed from eth2
[  240.707357][T10318] netdevsim netdevsim2 netdevsim3: renamed from eth3
[  240.724561][ T6101] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  240.790220][T10318] 8021q: adding VLAN 0 to HW filter on device bond0
[  240.801725][T10318] 8021q: adding VLAN 0 to HW filter on device team0
[  240.808723][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[  240.810973][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[  240.826925][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[  240.829522][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[  240.884692][ T6101] usb 4-1: Using ep0 maxpacket: 8
[  240.890020][ T6101] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  240.894983][ T6101] usb 4-1: config 179 has no interface number 0
[  240.895633][   T56] Bluetooth: hci2: command tx timeout
[  240.896896][ T6101] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10
[  240.902977][ T6101] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024
[  240.913191][ T6101] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 102, changing to 10
[  240.916924][ T6101] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 24624, setting to 1024
[  240.920960][ T6101] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  240.937387][ T6101] usb 4-1: config 179 interface 65 has no altsetting 0
[  240.939925][ T6101] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[  240.949020][ T6101] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.956646][T10404] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  240.985576][ T6101] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input9
[  241.090464][T10318] 8021q: adding VLAN 0 to HW filter on device batadv0
[  241.170942][T10318] veth0_vlan: entered promiscuous mode
[  241.199758][T10318] veth1_vlan: entered promiscuous mode
[  241.206680][ T6102] usb 4-1: USB disconnect, device number 5
[  241.206782][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  241.253344][T10318] veth0_macvtap: entered promiscuous mode
[  241.266057][T10318] veth1_macvtap: entered promiscuous mode
[  241.290446][T10318] batman_adv: batadv0: Interface activated: batadv_slave_0
[  241.304788][T10318] batman_adv: batadv0: Interface activated: batadv_slave_1
[  241.324583][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  241.328027][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  241.331715][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  241.344939][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  241.459323][ T1183] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.462336][ T1183] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  241.504079][ T1183] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  241.508099][ T1183] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  242.130264][T10456] serio: Serial port ptm0
[  242.240322][T10459] loop3: detected capacity change from 0 to 128
[  242.396385][T10463] loop3: detected capacity change from 0 to 8192
[  243.031514][   T56] Bluetooth: hci2: command tx timeout
[  244.208729][T10506] validate_nla: 36 callbacks suppressed
[  244.208758][T10506] netlink: 'syz.1.1934': attribute type 10 has an invalid length.
[  244.751236][   T33] audit: type=1326 audit(1756522785.892:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1944" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8196d8ebe9 code=0x7ffc0000
[  244.783175][   T33] audit: type=1326 audit(1756522785.892:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1944" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8196d8ebe9 code=0x7ffc0000
[  244.800238][   T33] audit: type=1326 audit(1756522785.892:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1944" exe="/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7f8196d8ebe9 code=0x7ffc0000
[  244.820838][   T33] audit: type=1326 audit(1756522785.892:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1944" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8196d8ebe9 code=0x7ffc0000
[  244.860749][   T33] audit: type=1326 audit(1756522785.892:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10525 comm="syz.1.1944" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8196d8ebe9 code=0x7ffc0000
[  245.053165][   T56] Bluetooth: hci2: command tx timeout
[  246.023771][   T10] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  246.254458][   T10] usb 4-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  246.258935][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  246.261687][   T10] usb 4-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00
[  246.266158][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  246.275103][   T10] usb 4-1: config 0 descriptor??
[  246.284631][T10541] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  246.651055][T10561] vivid-000: disconnect
[  246.666949][T10558] vivid-000: reconnect
[  246.702913][   T10] hid_parser_main: 1236 callbacks suppressed
[  246.702938][   T10] thrustmaster 0003:044F:B323.0008: unknown main item tag 0x2
[  246.711208][   T10] thrustmaster 0003:044F:B323.0008: item fetching failed at offset 4/5
[  246.716453][   T10] thrustmaster 0003:044F:B323.0008: parse failed
[  246.719118][   T10] thrustmaster 0003:044F:B323.0008: probe with driver thrustmaster failed with error -22
[  246.856946][T10567] netlink: 'syz.1.1961': attribute type 1 has an invalid length.
[  246.915340][ T6102] usb 4-1: USB disconnect, device number 6
[  248.115204][ T6102] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  248.313193][ T6102] usb 4-1: Using ep0 maxpacket: 32
[  248.317929][ T6102] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  248.322222][ T6102] usb 4-1: New USB device found, idVendor=04b4, idProduct=ed81, bcdDevice= 0.00
[  248.326311][ T6102] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  248.340428][ T6102] usb 4-1: config 0 descriptor??
[  248.814994][ T6102] cypress 0003:04B4:ED81.0009: unknown main item tag 0x0
[  248.828116][ T6102] cypress 0003:04B4:ED81.0009: item fetching failed at offset 3/5
[  248.842935][ T6102] cypress 0003:04B4:ED81.0009: parse failed
[  248.852571][ T6102] cypress 0003:04B4:ED81.0009: probe with driver cypress failed with error -22
[  249.046883][ T6102] usb 4-1: USB disconnect, device number 7
[  250.055580][   T33] audit: type=1326 audit(1756522791.202:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10614 comm="syz.3.1982" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa8bf58ebe9 code=0x0
[  250.866270][T10628] loop3: detected capacity change from 0 to 8
[  250.877585][T10628] SQUASHFS error: xz decompression failed, data probably corrupt
[  250.879991][T10628] SQUASHFS error: Failed to read block 0x108: -5
[  250.881928][T10628] SQUASHFS error: Unable to read metadata cache entry [106]
[  250.884693][T10628] SQUASHFS error: Unable to read inode 0x11f
[  250.888556][T10613] loop2: detected capacity change from 0 to 32768
[  250.919164][T10613] ERROR: (device loop2): dbAllocNext: Corrupt dmap page
[  250.919164][T10613] 
[  251.077970][T10641] loop3: detected capacity change from 0 to 512
[  251.095682][T10641] EXT4-fs (loop3): invalid first ino: 0
[  251.526885][T10650] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=io+mem:owns=io+mem
[  251.708681][   T33] audit: type=1800 audit(1756522792.852:50): pid=10656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1999" name="/" dev="fuse" ino=1 res=0 errno=0
[  251.782173][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2004'.
[  252.057086][T10680] loop3: detected capacity change from 0 to 2048
[  252.057562][T10666] loop2: detected capacity change from 0 to 32768
[  252.087497][T10666] ERROR: (device loop2): jfs_readdir: JFS:Dtree error: ino = 2, bn=44, index = 4
[  252.087497][T10666] 
[  252.090825][T10680] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  252.097543][T10666] ERROR: (device loop2): remounting filesystem as read-only
[  252.118889][   T33] audit: type=1800 audit(1756522793.262:51): pid=10680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2010" name="bus" dev="loop3" ino=18 res=0 errno=0
[  252.169420][ T9826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.339058][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2016'.
[  252.392553][T10699] loop3: detected capacity change from 0 to 1024
[  252.417513][T10699] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  252.460061][ T9826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  252.845672][T10731] netlink: 892 bytes leftover after parsing attributes in process `syz.1.2032'.
[  252.971730][T10734] cifs: Unknown parameter 'mode'
[  253.306105][T10738] comedi comedi0: adq12b: I/O port conflict (0xee,16)
[  253.460562][T10744] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.2038'.
[  253.807163][T10757] loop2: detected capacity change from 0 to 64
[  253.836573][T10757] syz.2.2042: attempt to access beyond end of device
[  253.836573][T10757] loop2: rw=0, sector=1024, nr_sectors = 2 limit=64
[  253.841690][T10757] Buffer I/O error on dev loop2, logical block 512, async page read
[  253.882662][T10757] syz.2.2042: attempt to access beyond end of device
[  253.882662][T10757] loop2: rw=0, sector=113152, nr_sectors = 2 limit=64
[  253.923181][T10757] Buffer I/O error on dev loop2, logical block 56576, async page read
[  254.397222][T10755] loop3: detected capacity change from 0 to 32768
[  254.407178][T10755] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  254.418603][T10755] XFS (loop3): Ending clean mount
[  254.451348][ T9826] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  254.643262][ T6101] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  254.863205][ T6101] usb 3-1: Using ep0 maxpacket: 16
[  254.867836][ T6101] usb 3-1: config 0 has an invalid interface number: 48 but max is 0
[  254.871082][ T6101] usb 3-1: config 0 has no interface number 0
[  254.873940][ T6101] usb 3-1: config 0 interface 48 has no altsetting 0
[  254.880622][ T6101] usb 3-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98
[  254.884540][ T6101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  254.888009][ T6101] usb 3-1: Product: syz
[  254.889799][ T6101] usb 3-1: Manufacturer: syz
[  254.891728][ T6101] usb 3-1: SerialNumber: syz
[  254.898367][ T6101] usb 3-1: config 0 descriptor??
[  254.973355][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  255.164023][    T9] usb 4-1: Using ep0 maxpacket: 32
[  255.190333][    T9] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  255.205217][    T9] usb 4-1: config 0 has no interface number 0
[  255.233794][    T9] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  255.245808][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.256575][    T9] usb 4-1: Product: syz
[  255.263501][    T9] usb 4-1: Manufacturer: syz
[  255.271176][    T9] usb 4-1: SerialNumber: syz
[  255.280488][ T6101] usb 3-1: USB disconnect, device number 27
[  255.329153][    T9] usb 4-1: config 0 descriptor??
[  255.336450][    T9] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  255.535989][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  255.539014][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  255.549747][    T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  255.560295][    T9] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  255.957897][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  255.958395][ T6102] usb 4-1: USB disconnect, device number 8
[  255.973973][ T6102] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  255.979760][ T6102] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  255.984682][ T6102] quatech2 4-1:0.51: device disconnected
[  256.113253][   T24] usb 3-1: new full-speed USB device number 28 using dummy_hcd
[  256.265758][   T24] usb 3-1: config 11 has an invalid interface number: 62 but max is 0
[  256.268716][   T24] usb 3-1: config 11 has no interface number 0
[  256.272945][   T24] usb 3-1: New USB device found, idVendor=22b8, idProduct=2d9a, bcdDevice=bf.dc
[  256.276577][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.279489][   T24] usb 3-1: Product: syz
[  256.281082][   T24] usb 3-1: Manufacturer: syz
[  256.282747][   T24] usb 3-1: SerialNumber: syz
[  256.503532][   T24] hub 3-1:11.62: bad descriptor, ignoring hub
[  256.506015][   T24] hub 3-1:11.62: probe with driver hub failed with error -5
[  256.506407][T10803] loop3: detected capacity change from 0 to 1024
[  256.524133][   T24] usb 3-1: USB disconnect, device number 28
[  256.530690][T10803] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  256.535408][T10803] ext4 filesystem being mounted at /83/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  256.555267][ T9826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  256.883456][ T6102] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  257.364146][ T6102] usb 4-1: Using ep0 maxpacket: 16
[  257.369332][ T6102] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0
[  257.373653][ T6102] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 75, changing to 10
[  257.378102][ T6102] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 25344, setting to 1024
[  257.382516][ T6102] usb 4-1: config 0 interface 0 has no altsetting 0
[  257.388119][ T6102] usb 4-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb
[  257.391866][ T6102] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  257.395370][ T6102] usb 4-1: Product: syz
[  257.397156][ T6102] usb 4-1: Manufacturer: syz
[  257.399110][ T6102] usb 4-1: SerialNumber: syz
[  257.404565][ T6102] usb 4-1: config 0 descriptor??
[  257.617311][ T6102] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input10
[  257.818683][ T6101] usb 4-1: USB disconnect, device number 9
[  258.455332][ T6101] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  258.550882][T10870] loop3: detected capacity change from 0 to 256
[  258.554376][T10870] exfat: Deprecated parameter 'namecase'
[  258.556934][T10870] exfat: Deprecated parameter 'utf8'
[  258.571402][T10870] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x3f800a9b, utbl_chksum : 0xe619d30d)
[  258.603953][ T6101] usb 3-1: Using ep0 maxpacket: 8
[  258.607791][ T6101] usb 3-1: config 2 has an invalid interface number: 241 but max is 0
[  258.611126][ T6101] usb 3-1: config 2 has no interface number 0
[  258.614142][ T6101] usb 3-1: config 2 interface 241 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  258.618432][ T6101] usb 3-1: config 2 interface 241 has no altsetting 0
[  258.628299][ T6101] usb 3-1: New USB device found, idVendor=110a, idProduct=1130, bcdDevice=b3.a3
[  258.632208][ T6101] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.636372][ T6101] usb 3-1: Product: syz
[  258.638630][ T6101] usb 3-1: Manufacturer: syz
[  258.640645][ T6101] usb 3-1: SerialNumber: syz
[  258.650454][ T6101] ti_usb_3410_5052 3-1:2.241: TI USB 3410 1 port adapter converter detected
[  258.654320][ T6101] ti_usb_3410_5052 3-1:2.241: missing endpoints
[  258.883995][ T6107] usb 3-1: USB disconnect, device number 29
[  260.335055][T10895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2097'.
[  260.339369][T10895] tc_dump_action: action bad kind
[  261.262807][T10904] loop3: detected capacity change from 0 to 40427
[  261.267365][T10904] f2fs: Unknown parameter 'nodi_gc'
[  261.423260][    T9] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  261.590114][    T9] usb 3-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55
[  261.593940][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.597051][    T9] usb 3-1: Product: syz
[  261.598674][    T9] usb 3-1: Manufacturer: syz
[  261.600649][    T9] usb 3-1: SerialNumber: syz
[  261.607150][    T9] usb 3-1: config 0 descriptor??
[  261.611803][    T9] gspca_main: sonixb-2.14.0 probing 0c45:60a8
[  262.020123][    T9] input: sonixb as /devices/platform/dummy_hcd.2/usb3/3-1/input/input11
[  262.226055][ T6107] usb 3-1: USB disconnect, device number 30
[  263.090797][T10939] loop2: detected capacity change from 0 to 512
[  263.102775][T10939] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  263.159914][ T1199] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  263.476490][T10949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2119'.
[  263.603490][   T24] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  263.761798][   T24] usb 4-1: config 0 has an invalid interface number: 176 but max is 2
[  263.765238][   T24] usb 4-1: config 0 has an invalid interface number: 255 but max is 2
[  263.768467][   T24] usb 4-1: config 0 has no interface number 0
[  263.770949][   T24] usb 4-1: config 0 has no interface number 1
[  263.773483][   T24] usb 4-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  263.777879][   T24] usb 4-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  263.787351][   T24] usb 4-1: config 0 interface 255 has no altsetting 0
[  263.791714][   T24] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  263.797119][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  263.803323][   T24] usb 4-1: config 0 descriptor??
[  264.017623][   T24] usb 4-1: Could not set interface, error -71
[  264.026032][   T24] usb 4-1: selecting invalid altsetting 0
[  264.052693][   T24] usb 4-1: Could not set interface, error -22
[  264.138179][   T24] usb 4-1: USB disconnect, device number 10
[  265.098126][T10979] loop3: detected capacity change from 0 to 128
[  265.121450][T10979] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  265.141525][T10979] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  266.116544][T10988] loop2: detected capacity change from 0 to 2048
[  266.124175][T10988] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  266.151342][T10990] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2138'.
[  266.342017][T11005] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2145'.
[  266.593191][ T6107] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  266.773152][ T6107] usb 4-1: Using ep0 maxpacket: 16
[  266.777672][ T6107] usb 4-1: config 0 has an invalid interface number: 104 but max is 1
[  266.781056][ T6107] usb 4-1: config 0 has an invalid interface number: 104 but max is 1
[  266.784670][ T6107] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  266.788660][ T6107] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  266.792237][ T6107] usb 4-1: config 0 has no interface number 0
[  266.797470][ T6107] usb 4-1: config 0 interface 104 has no altsetting 1
[  266.803004][ T6107] usb 4-1: New USB device found, idVendor=1189, idProduct=0893, bcdDevice= 0.00
[  266.806589][ T6107] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  266.809911][ T6107] usb 4-1: Product: syz
[  266.811837][ T6107] usb 4-1: Manufacturer: syz
[  266.813949][ T6107] usb 4-1: SerialNumber: syz
[  266.819568][ T6107] usb 4-1: config 0 descriptor??
[  267.036534][ T6107] asix 4-1:0.104 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  267.041064][ T6107] asix 4-1:0.104: probe with driver asix failed with error -71
[  267.050914][ T6107] usb 4-1: USB disconnect, device number 11
[  267.363169][    T9] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  267.523136][    T9] usb 3-1: Using ep0 maxpacket: 16
[  267.528568][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  267.533899][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  267.542223][    T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  267.547146][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.550658][    T9] usb 3-1: Product: syz
[  267.552540][    T9] usb 3-1: Manufacturer: syz
[  267.554625][    T9] usb 3-1: SerialNumber: syz
[  267.559376][    T9] usb 3-1: config 0 descriptor??
[  267.571003][    T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  267.574881][    T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  267.703931][T11025] loop3: detected capacity change from 0 to 4096
[  267.708168][T11025] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  267.712502][T11025] ntfs3(loop3): ino=3, mi_enum_attr
[  267.719745][T11025] ntfs3(loop3): MFT: r=0, expect seq=1 instead of 0!
[  267.722900][T11025] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  267.725994][T11025] ntfs3(loop3): Failed to load $MFT (-22).
[  267.927550][T11035] loop3: detected capacity change from 0 to 256
[  268.176510][    T9] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  268.184191][    T9] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  269.007324][    T9] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[  269.032165][    T9] em28xx 3-1:0.0: couldn't setup AC97 register 2
[  269.054792][    T9] em28xx 3-1:0.0: couldn't setup AC97 register 4
[  269.064733][    T9] em28xx 3-1:0.0: couldn't setup AC97 register 6
[  269.068384][    T9] em28xx 3-1:0.0: couldn't setup AC97 register 54
[  269.081050][    T9] em28xx 3-1:0.0: couldn't setup AC97 register 56
[  269.095928][    T9] usb 3-1: USB disconnect, device number 31
[  269.797373][T11095] netlink: 9280 bytes leftover after parsing attributes in process `syz.1.2186'.
[  270.431160][T11113] loop3: detected capacity change from 0 to 512
[  270.441023][T11113] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.2193: casefold flag without casefold feature
[  270.451046][T11113] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2193: couldn't read orphan inode 15 (err -117)
[  270.459349][T11113] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  270.548713][ T9826] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.447499][T11154] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  271.464204][T11154] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  271.800943][T11175] loop3: detected capacity change from 0 to 2048
[  271.807123][T11175] udf: Bad value for 'anchor'
[  271.923710][T11182] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2226'.
[  272.045158][T11188] loop2: detected capacity change from 0 to 1024
[  272.048233][T11188] EXT4-fs: Ignoring removed nobh option
[  272.050072][T11188] EXT4-fs: Ignoring removed bh option
[  272.132836][T11188] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.515632][T10318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  272.741446][T11219] loop2: detected capacity change from 0 to 512
[  272.746373][T11221] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2242'.
[  272.751895][T11219] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  272.757777][T11219] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  272.761537][T11219] System zones: 0-1, 15-15, 18-18, 34-34
[  272.763724][T11219] EXT4-fs (loop2): orphan cleanup on readonly fs
[  272.766334][T11219] Quota error (device loop2): v2_read_header: Failed header read: expected=8 got=0
[  272.769997][T11219] EXT4-fs warning (device loop2): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  272.775091][T11219] EXT4-fs (loop2): Cannot turn on quotas: error -22
[  272.782846][T11219] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.2241: bg 0: block 40: padding at end of block bitmap is not set
[  272.789379][T11219] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  272.792425][T11219] EXT4-fs (loop2): 1 truncate cleaned up
[  272.795731][T11219] EXT4-fs (loop2): mounted filesystem 00000000-0000-5000-0000-000000000000 ro without journal. Quota mode: writeback.
[  272.807194][T11219] EXT4-fs (loop2): shut down requested (1)
[  272.856254][T10318] EXT4-fs (loop2): unmounting filesystem 00000000-0000-5000-0000-000000000000.
[  272.997757][T11230] netlink: 'syz.3.2246': attribute type 1 has an invalid length.
[  273.051420][T11230] 8021q: adding VLAN 0 to HW filter on device bond1
[  273.086860][T11233] bond1: (slave geneve2): making interface the new active one
[  273.096626][T11233] bond1: (slave geneve2): Enslaving as an active interface with an up link
[  274.170927][T11262] evm: overlay not supported
[  274.568109][T11272] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2265'.
[  274.865629][T11282] loop3: detected capacity change from 0 to 128
[  274.895372][T11282] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  274.901368][T11282] ext4 filesystem being mounted at /140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  275.940729][ T9826] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  276.438231][T11344] loop3: detected capacity change from 0 to 4096
[  276.442184][T11344] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  278.531661][T11396] loop2: detected capacity change from 0 to 128
[  278.542544][T11396] omfs: sysblock number (f784317bf884317b) is out of range
[  278.589201][T11401] [U] ^G
[  278.591185][T11400] [U] ^G
[  278.773219][   T10] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  278.946956][   T10] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  278.950608][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.954152][   T10] usb 4-1: Product: syz
[  278.955858][   T10] usb 4-1: Manufacturer: syz
[  278.957684][   T10] usb 4-1: SerialNumber: syz
[  278.968006][   T10] usb 4-1: config 0 descriptor??
[  279.181226][   T10] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  280.907646][   T10] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  280.930649][   T10] usb 4-1: USB disconnect, device number 12
[  282.788211][T11474] loop3: detected capacity change from 0 to 8
[  284.352626][T11504] loop2: detected capacity change from 0 to 2048
[  284.372750][T11505] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  284.400426][T11504] CPU: 0 UID: 0 PID: 11504 Comm: syz.2.2361 Not tainted syzkaller #0 PREEMPT(full) 
[  284.400452][T11504] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  284.400468][T11504] Call Trace:
[  284.400475][T11504]  <TASK>
[  284.400483][T11504]  dump_stack_lvl+0x189/0x250
[  284.400509][T11504]  ? rcu_is_watching+0x15/0xb0
[  284.400526][T11504]  ? __pfx_dump_stack_lvl+0x10/0x10
[  284.400543][T11504]  ? kmem_cache_alloc_noprof+0x21a/0x3c0
[  284.400567][T11504]  ? __asan_memset+0x22/0x50
[  284.400582][T11504]  ? nilfs_btree_alloc_path+0x5e5/0x610
[  284.400606][T11504]  nilfs_btree_last_key+0x491/0x620
[  284.400628][T11504]  nilfs_bmap_last_key+0x7a/0x130
[  284.400655][T11504]  nilfs_truncate_bmap+0xfe/0x340
[  284.400677][T11504]  ? __pfx_nilfs_truncate_bmap+0x10/0x10
[  284.400723][T11504]  ? nilfs_transaction_begin+0x52a/0x710
[  284.400739][T11504]  ? __pfx_nilfs_get_block+0x10/0x10
[  284.400759][T11504]  nilfs_truncate+0x279/0x4e0
[  284.400782][T11504]  ? __pfx_nilfs_truncate+0x10/0x10
[  284.400817][T11504]  ? truncate_setsize+0xcf/0xf0
[  284.400842][T11504]  nilfs_setattr+0x206/0x2b0
[  284.400863][T11504]  ? __pfx_nilfs_setattr+0x10/0x10
[  284.400890][T11504]  ? try_break_deleg+0x79/0x130
[  284.400905][T11504]  ? __pfx_nilfs_setattr+0x10/0x10
[  284.400925][T11504]  notify_change+0xb36/0xe40
[  284.400958][T11504]  do_truncate+0x1a4/0x220
[  284.400983][T11504]  ? __pfx_do_truncate+0x10/0x10
[  284.401001][T11504]  ? apparmor_file_truncate+0x23e/0x2d0
[  284.401037][T11504]  path_openat+0x306c/0x3830
[  284.401056][T11504]  ? arch_stack_walk+0xfc/0x150
[  284.401102][T11504]  ? __pfx_path_openat+0x10/0x10
[  284.401117][T11504]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.401177][T11504]  do_filp_open+0x1fa/0x410
[  284.401194][T11504]  ? __lock_acquire+0xab9/0xd20
[  284.401219][T11504]  ? __pfx_do_filp_open+0x10/0x10
[  284.401254][T11504]  ? _raw_spin_unlock+0x28/0x50
[  284.401274][T11504]  ? alloc_fd+0x64c/0x6c0
[  284.401303][T11504]  do_sys_openat2+0x121/0x1c0
[  284.401320][T11504]  ? __se_sys_futex+0x36f/0x400
[  284.401338][T11504]  ? __pfx_do_sys_openat2+0x10/0x10
[  284.401360][T11504]  ? rcu_is_watching+0x15/0xb0
[  284.401378][T11504]  __x64_sys_creat+0x8f/0xc0
[  284.401394][T11504]  do_syscall_64+0xfa/0x3b0
[  284.401414][T11504]  ? lockdep_hardirqs_on+0x9c/0x150
[  284.401431][T11504]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.401442][T11504]  ? exc_page_fault+0x9f/0xf0
[  284.401462][T11504]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.401476][T11504] RIP: 0033:0x7f321078ebe9
[  284.401489][T11504] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  284.401505][T11504] RSP: 002b:00007f32115d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000055
[  284.401522][T11504] RAX: ffffffffffffffda RBX: 00007f32109c5fa0 RCX: 00007f321078ebe9
[  284.401532][T11504] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000200000000000
[  284.401543][T11504] RBP: 00007f3210811e19 R08: 0000000000000000 R09: 0000000000000000
[  284.401553][T11504] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  284.401561][T11504] R13: 00007f32109c6038 R14: 00007f32109c5fa0 R15: 00007ffc763df668
[  284.401587][T11504]  </TASK>
[  284.402273][T11504] NILFS (loop2): btree level mismatch (ino=16): 1 != 7
[  284.543142][T11504] NILFS error (device loop2): nilfs_bmap_last_key: broken bmap (inode number=16)
[  284.558466][T11504] Remounting filesystem read-only
[  284.560882][T11504] NILFS (loop2): error -5 truncating bmap (ino=16)
[  284.614407][T10318] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  284.919408][T11512] loop2: detected capacity change from 0 to 32768
[  284.928339][   T33] audit: type=1800 audit(1756522826.072:52): pid=11512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2364" name="file1" dev="loop2" ino=4 res=0 errno=0
[  285.235898][T11512] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root
[  285.235898][T11512] 
[  285.240174][T11512] ERROR: (device loop2): remounting filesystem as read-only
[  285.779784][T10318] ------------[ cut here ]------------
[  285.782663][T10318] kernel BUG at fs/jfs/inode.c:169!
[  285.803353][T10318] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  285.805925][T10318] CPU: 0 UID: 0 PID: 10318 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  285.809505][T10318] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  285.813355][T10318] RIP: 0010:jfs_evict_inode+0x438/0x440
[  285.815547][T10318] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 c3 6f e8 fe e9 16 fe ff ff e8 b9 01 85 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  285.822623][T10318] RSP: 0000:ffffc90003057ae0 EFLAGS: 00010293
[  285.824943][T10318] RAX: ffffffff833aa9d7 RBX: ffff8881036dc4b8 RCX: ffff8881072db980
[  285.827923][T10318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881036dc4b8
[  285.831030][T10318] RBP: 0000000000000001 R08: ffffffff8fa38a37 R09: 1ffffffff1f47146
[  285.834046][T10318] R10: dffffc0000000000 R11: ffffffff833a86d0 R12: dffffc0000000000
[  285.837150][T10318] R13: dffffc0000000000 R14: ffff8881036dc140 R15: ffffffff833aa5a0
[  285.840318][T10318] FS:  0000555567583500(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  285.843835][T10318] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  285.846400][T10318] CR2: 00007f7840c6e000 CR3: 0000000128148000 CR4: 00000000000006f0
[  285.849604][T10318] Call Trace:
[  285.850889][T10318]  <TASK>
[  285.852011][T10318]  ? evict+0x4f8/0x9c0
[  285.853590][T10318]  ? __pfx_jfs_evict_inode+0x10/0x10
[  285.855691][T10318]  evict+0x504/0x9c0
[  285.857286][T10318]  ? __pfx_evict+0x10/0x10
[  285.859093][T10318]  ? do_raw_spin_unlock+0x4d/0x240
[  285.860876][T10318]  evict_inodes+0x64c/0x6d0
[  285.862171][T10318]  ? __pfx_evict_inodes+0x10/0x10
[  285.863611][T10318]  generic_shutdown_super+0x9a/0x2c0
[  285.865263][T10318]  kill_block_super+0x44/0x90
[  285.867044][T10318]  deactivate_locked_super+0xbc/0x130
[  285.869150][T10318]  cleanup_mnt+0x425/0x4c0
[  285.870872][T10318]  ? lockdep_hardirqs_on+0x9c/0x150
[  285.872938][T10318]  task_work_run+0x1d4/0x260
[  285.874787][T10318]  ? __pfx_task_work_run+0x10/0x10
[  285.876835][T10318]  ? __x64_sys_umount+0x122/0x160
[  285.878879][T10318]  ? exit_to_user_mode_loop+0x40/0x110
[  285.881065][T10318]  exit_to_user_mode_loop+0xec/0x110
[  285.883166][T10318]  do_syscall_64+0x2bd/0x3b0
[  285.885022][T10318]  ? lockdep_hardirqs_on+0x9c/0x150
[  285.887124][T10318]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.889444][T10318]  ? exc_page_fault+0x9f/0xf0
[  285.891291][T10318]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  285.893578][T10318] RIP: 0033:0x7f321078ff17
[  285.895307][T10318] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  285.902475][T10318] RSP: 002b:00007ffc763de8f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  285.906010][T10318] RAX: 0000000000000000 RBX: 00007f3210811c05 RCX: 00007f321078ff17
[  285.909044][T10318] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc763de9b0
[  285.912104][T10318] RBP: 00007ffc763de9b0 R08: 0000000000000000 R09: 0000000000000000
[  285.915011][T10318] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc763dfa40
[  285.918055][T10318] R13: 00007f3210811c05 R14: 0000000000045b9c R15: 00007ffc763dfa80
[  285.921063][T10318]  </TASK>
[  285.922300][T10318] Modules linked in:
[  285.925436][T10318] ---[ end trace 0000000000000000 ]---
[  285.945127][T10318] RIP: 0010:jfs_evict_inode+0x438/0x440
[  285.947616][T10318] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 c3 6f e8 fe e9 16 fe ff ff e8 b9 01 85 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[  285.956207][T10318] RSP: 0000:ffffc90003057ae0 EFLAGS: 00010293
[  285.958790][T10318] RAX: ffffffff833aa9d7 RBX: ffff8881036dc4b8 RCX: ffff8881072db980
[  285.961903][T10318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881036dc4b8
[  285.965357][T10318] RBP: 0000000000000001 R08: ffffffff8fa38a37 R09: 1ffffffff1f47146
[  285.968541][T10318] R10: dffffc0000000000 R11: ffffffff833a86d0 R12: dffffc0000000000
[  285.971731][T10318] R13: dffffc0000000000 R14: ffff8881036dc140 R15: ffffffff833aa5a0
[  285.975843][T10318] FS:  0000555567583500(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  285.979501][T10318] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  285.982162][T10318] CR2: 000055e9b1a0d9a8 CR3: 0000000128148000 CR4: 00000000000006f0
[  285.985368][T10318] Kernel panic - not syncing: Fatal exception
[  285.988509][T10318] Kernel Offset: disabled
[  285.990260][T10318] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:00:28  Registers:
info registers vcpu 0

CPU#0
RAX=00007fa8be90e860 RBX=00007fa8be90b340 RCX=ffffffff84d0f9b7 RDX=ffffffff84d0f84c
RSI=ffffffff84d0fa47 RDI=00007fa8be90eb00 RBP=00007fa8be90b160 RSP=00007ffcefdeb910
R8 =00007fa8be90ce28 R9 =00007fa8bf7b2000 R10=00007fa8be7fb008 R11=0000000000000011
R12=00007fa8be90b158 R13=0000000000000018 R14=0000000000045b99 R15=00007fa8be7fb008
RIP=00007fa8bf467ff4 RFL=00000287 [--S--PC] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555fcba500 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055556759e5c8 CR3=00000000283db000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff84d0f9ec ffffffff84d0fa47 XMM01=ffffffff84d0fa47 ffffffff84d0f9ec
XMM02=00007fa8bf797498 ffffffff84d0f9ec XMM03=00007fa8bf7974a8 00007fa8bf7974a0
XMM04=00007fa8c02fd100 00007fa8bf797460 XMM05=00007fa8bf797478 00007fa8bf7974c0
XMM06=00007fa8bf7974b8 00007fa8bf7974b0 XMM07=00007fa8bf7974a8 00007fa8bf7974a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fa8bf612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000e619 RBX=ffff888136623900 RCX=0000000000000838 RDX=0000000000000000
RSI=000000000000e619 RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc900001e0e50
R8 =0000000000000000 R9 =ffffffff81ae022e R10=0000000000000003 R11=ffffffff81703490
R12=000000001000573d R13=dffffc0000000000 R14=000000000000e619 R15=0000000000000020
RIP=ffffffff81716179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000003000 CR3=00000000283da000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=2488030202002486 0300000000000000
XMM02=248e030401e08080 8400248c03180400 XMM03=030210b880840024 8e030010b0808400
XMM04=0200249803020400 2494030a04002490 XMM05=0100100002800401 000000080606015b
XMM06=9000080002e00300 100002d003001000 XMM07=02c00302100002b0 0301a01000039003
XMM08=0002002498030204 002494030a040024 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
