last executing test programs:

2m11.303445438s ago: executing program 1 (id=59):
bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-ce\x00'}, 0x58)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1900000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB], 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff})
r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="120000000b0000000800000002"], 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r5, <r6=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r4}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r6, &(0x7f0000000040)="e09485f2be1ad1dabe6558fcbce602b6047630530be3410b987ab42f5ec88c28099dff91e62d8495dabe44db330eb7eaff546cd7e1d1e37de0dbb93a3765b6a632acb360a98f2ca87f2ba344facce81865688deaafb4ac56f8fef67c9c1bb74a3d63018a05e22e045e0d194fccd8c43bda5609c2cea6", 0x0}, 0x20)
r7 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt(r7, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8)
setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r7, 0x84, 0x5, &(0x7f0000000140)={0x0, @in={{0x2, 0x4e20, @local}}}, 0x84)
r8 = openat$nvram(0xffffffffffffff9c, 0x0, 0x101000, 0x0)
connect$qrtr(r8, 0x0, 0x0)
r9 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x8801, 0x0)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000100)='GPL\x00')
write$UHID_INPUT(r9, 0x0, 0x0)
bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r0, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000b40)={r0, 0x0, 0x0}, 0x20)

2m10.417866395s ago: executing program 1 (id=71):
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000300)={0x52, 0x0, 0x8, {0x0, 0x1}, {0x74, 0x2}, @period={0x59, 0x5, 0x2, 0x2, 0x4, {0x5, 0x800, 0x5, 0x80}, 0x0, 0x0}})
r0 = syz_open_dev$evdev(&(0x7f00000000c0), 0x0, 0x822b01)
write$char_usb(r0, &(0x7f0000000040)="e2", 0xff0f)

2m10.339033531s ago: executing program 1 (id=72):
r0 = socket$caif_seqpacket(0x25, 0x5, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
r2 = openat$dsp1(0xffffffffffffff9c, 0x0, 0x2000, 0x0)
ioctl$SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000040))
read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000)
pipe2$watch_queue(0x0, 0x80)
unshare(0x8000000)
setresuid(0xee01, 0xee00, 0x0)
add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xffffffffffffffff)
keyctl$setperm(0x5, 0x0, 0xd26237a4afdd0f18)
request_key(&(0x7f0000000240)='dns_resolver\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='\x00', 0xfffffffffffffffc)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), 0x0)
socket$inet6_icmp(0xa, 0x2, 0x3a)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
r4 = socket$inet6(0xa, 0x3, 0x7)
connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8)
sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000600)=@newsa={0xf0, 0x12, 0x633, 0x0, 0x80000000, {{@in6=@mcast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@broadcast, 0x4d2, 0x32}, @in6=@loopback, {}, {0x5, 0xffffffffffffffff, 0x0, 0x5}, {0x4, 0x2}, 0x6, 0x3501, 0xa, 0x4, 0x18, 0x19}}, 0xf0}, 0x1, 0x0, 0x0, 0x4040000}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000440)={{0x1, 0x1, 0x18, r1, {0xee01, 0xffffffffffffffff}}, './file0\x00'})
read$watch_queue(0xffffffffffffffff, 0x0, 0x0)
openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0)

2m8.774319688s ago: executing program 1 (id=79):
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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")
creat(&(0x7f0000000040)='./bus\x00', 0x122dfb579e447c7a)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x6000, 0x69)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x3, 0x0, 0x0, 0x4, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7326736181c208220fffff2ff00000000000000000e00", [0x4]})
open(&(0x7f0000000140)='./file1\x00', 0x141042, 0x0)

2m8.679385708s ago: executing program 1 (id=83):
r0 = fanotify_init(0x10, 0x2)
sendmmsg$inet(0xffffffffffffffff, &(0x7f00000017c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @multicast1}}}], 0x20}}], 0x1, 0x9880)
r1 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1)
writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1)
r3 = socket$inet(0x2, 0x2, 0x0)
setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000080)={@multicast2, @loopback}, 0xc)
setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a0101"], 0x57)
setsockopt$inet_mreqsrc(r1, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc)
setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000008c0)={0x1, {{0x2, 0x0, @multicast2}}}, 0x88)
close_range(r0, 0xffffffffffffffff, 0x0)

2m8.014013076s ago: executing program 1 (id=87):
syz_mount_image$squashfs(&(0x7f00000003c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="6d616e642c0042742d8d5224fcca151088a9b7d046700700005700ad775f9ee1ae34b796a23373b3e00423b045d36ecccd4c1eaec2f3490d0000000000002c10025111e6b245d3564424ccdd6aa0a2d64ff8205926329ad3a32794c60c193afe8024cab7e5f4353fab45117b679e7bac6d", @ANYRES16=0x0, @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES8], 0x0, 0x184, &(0x7f00000004c0)="$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")

2m7.947160526s ago: executing program 32 (id=87):
syz_mount_image$squashfs(&(0x7f00000003c0), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="6d616e642c0042742d8d5224fcca151088a9b7d046700700005700ad775f9ee1ae34b796a23373b3e00423b045d36ecccd4c1eaec2f3490d0000000000002c10025111e6b245d3564424ccdd6aa0a2d64ff8205926329ad3a32794c60c193afe8024cab7e5f4353fab45117b679e7bac6d", @ANYRES16=0x0, @ANYRES32, @ANYRES16, @ANYRES32, @ANYRES8], 0x0, 0x184, &(0x7f00000004c0)="$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")

1m16.63640137s ago: executing program 0 (id=660):
r0 = socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x2000000000903, 0x1}, 0x20)
close(0x3)
socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000300)={@loopback={0xffffffffffffc0fe, 0x7ffffffff000}, 0x800, 0x0, 0x3, 0x0, 0x2000, 0xffff}, 0x20)

1m16.63228165s ago: executing program 0 (id=662):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x20101)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE(r0, 0xc2604110, 0x0)

1m16.533639056s ago: executing program 0 (id=664):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1eaa000000000000791073000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

1m16.46052695s ago: executing program 0 (id=665):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000500)='./file0\x00', 0x2200810, &(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYRESHEX, @ANYRESOCT, @ANYRES8, @ANYRES16, @ANYRES64], 0x5, 0x25d, &(0x7f0000000f40)="$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")
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='ramfs\x00', 0x10010, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f0000000700)=ANY=[], 0x1, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000680), 0x0, &(0x7f00000009c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@xino_auto}, {@uuid_null}]})

1m16.389619699s ago: executing program 0 (id=667):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0)
r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0)
dup2(r0, r1)

1m16.060637705s ago: executing program 0 (id=668):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff7ffb, 0x8300)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000300)={0x0, 0x4, 0x2})

1m16.049225721s ago: executing program 33 (id=668):
r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x7fff7ffb, 0x8300)
ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f0000000300)={0x0, 0x4, 0x2})

1.104776406s ago: executing program 3 (id=1529):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x0, &(0x7f0000000180)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@jqfmt_vfsv1}, {@noload}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x1}}, {@nouid32}]}, 0xff, 0x47b, &(0x7f0000000540)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61)
fallocate(r0, 0x3, 0x2, 0x8000c61)

1.06196561s ago: executing program 3 (id=1530):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0)
r1 = gettid()
fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0)
readv(r0, &(0x7f0000000e80)=[{&(0x7f0000000500)=""/232, 0xe8}], 0x1)
fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000880)='\xf5\xfc\xd2\xec]\x95zx8*\xa2d\x11\xb5\xb1\x01\x00\x00\x00\xe49{\x8a{\x81s\xea$\xdfg\xb1\x03DY!\x97\xadM\xd7\xff\x8a\xcd[>\x12e\xc3]d8\xba\x8ec\x00\x00\x00\x00\x00\x00\x00\xa0\xe2\xd5y\xec\x90\x00\x98Y\x91\x19\x16\x89\xd0\x1a\xad\xcd\xd6\xd0\xc6\xb9\xeb\x95\xd3\x9cl\x9cu#\xb4\xee\xe5\x9d\t\fV\xd4\xda\xfc`2?\x15P\xba\x14b\x1c\xcc\xd5\xb9jA$s\xb9g3\x15M\xd9\xb9 \xca[\xc7\xec\xa9;\xee\x01\xc9\xc4\x1f\xc3\xe4\xfa\xd3fU\x0e\x86\xc8\xa7\xaf\xaf\x04p\xa3\x8bb\xbf\\\xdb\x83\x00\x96sy\x14\x1eo\xcc9&\x946\xf9\xf5v\xee\xb5m$;\x01\xb8\xeau\x00\xd1S=\x920H\xc2z\xb5\xbe\x95\xef\xeb\xd1\xc8\xa1\xba\xach\xbef\xa8\x86\xc2\x18\x9cC\x15\x9c^\xcf\xe9\xbcp\xb4Ff\x00\x9d>p\"\x19\xd8}|~\xae\xdb\a59f\xb8?\xba\xf2\x8e\xa5y\\\xf0\fkd??-\x983\xf3\x19\xc7\xc0/\xe9\x1a\x80=\xa72)\xd2\x00'/277, &(0x7f00000002c0)='/\x00\x01\x00H\x98', 0x0)
tkill(r1, 0xb)

770.015515ms ago: executing program 3 (id=1534):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r1, 0x80, 0xba, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x44}, 0x4040000)
mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269bb, 0x8031, 0xffffffffffffffff, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r3=>0x0})
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@bridge_newneigh={0x28, 0x1c, 0x1, 0x70bd29, 0x25dfdbfe, {0x7, 0x0, 0x0, r3, 0x80, 0x1e, 0x6}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}, 0x1, 0x0, 0x0, 0x240008d5}, 0x0)

698.625306ms ago: executing program 3 (id=1536):
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x0, 0x0)
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f0000009780)='./file1\x00', 0x0, &(0x7f00000006c0)={[{@gquota}, {@nolargeio}, {@uqnoenforce}]}, 0x1, 0x9793, &(0x7f0000012f40)="$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")
r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x90)
sched_setscheduler(r0, 0x6, 0x0)
ioctl$EXT4_IOC_GROUP_ADD(r1, 0x8040587f, &(0x7f0000000100)={0x8a0, 0x800800000000000a, 0x4})

605.162074ms ago: executing program 2 (id=1539):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c)
listen(r0, 0x10040)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
syz_emit_ethernet(0x42, &(0x7f00000002c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0xc2, 0x5, 0x0, 0x6, {[@timestamp={0x8, 0xa, 0x401, 0x6}]}}}}}}}, 0x0)
syz_emit_ethernet(0x42, &(0x7f0000000180)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x34, 0x67, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010001, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x8, 0x10, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xffffa888, 0x5}]}}}}}}}, 0x0)

532.300499ms ago: executing program 4 (id=1541):
syz_init_net_socket$ax25(0x3, 0x5, 0x1)

526.015481ms ago: executing program 2 (id=1542):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x1, 0x4, 0x2, @vifc_lcl_addr=@loopback, @remote}, 0x10)

437.919711ms ago: executing program 4 (id=1543):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x2, &(0x7f0000000080)='\a', 0x1)
sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0)

437.733236ms ago: executing program 2 (id=1544):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x5)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
r1 = eventfd2(0x8, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
write$eventfd(r1, &(0x7f0000000140)=0xfffffffffffffffc, 0x8)
read(r1, &(0x7f0000000480)=""/82, 0x52)

329.732934ms ago: executing program 3 (id=1545):
syz_mount_image$jfs(&(0x7f0000000240), &(0x7f0000000000)='./file1\x00', 0x1010006, &(0x7f0000000080)={[{@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@nointegrity}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp775'}}, {@errors_remount}, {}, {@noquota}, {}, {@errors_continue}, {@grpquota}]}, 0x24, 0x628f, &(0x7f00000065c0)="$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")
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')

329.570663ms ago: executing program 4 (id=1546):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$unix(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000440)="c4", 0x1}], 0x1, &(0x7f00000002c0)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0xc800)
setsockopt$sock_int(r1, 0x1, 0x2a, &(0x7f0000000000), 0x4)
syz_open_dev$sndmidi(0x0, 0x2, 0x141101)
getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000080), 0x0)
recvmmsg(r1, &(0x7f0000001140), 0x700, 0x2, 0x0)

185.807271ms ago: executing program 2 (id=1547):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50)
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18)
syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r0, &(0x7f00000063c0)="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", 0x2000, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)={0x1b0, 0x0, 0x3, [{{0x3, 0x2, 0x6, 0x5, 0x7, 0x6ac, {0x4, 0x0, 0x9, 0x5, 0x80000000, 0xfffffffffffff134, 0x9, 0x7, 0x7, 0x1000, 0x8, r2, r3, 0x5, 0xffffffff}}, {0x0, 0x3, 0x103, 0x7, '&{&%\xb2\xd9w\xedO=\x96e\xf9\xabZ\xb20\x83\x1f\xdd\xe9\x190\xa7B\x00\x17U\xdf\x0e\x97\xc1=\x94\xf2]r\xfes\x147\xfcf,\x8c\x04&\x97\xa2\x0e\x90b\xfa\xdf\x93bV\x8b\xc7\x87\xeb\xdcf\x19\xac\x14\xc8\xd89\x88\xae[\x9a\xb2\x87H\x81\xf0t\xc0$\\\x05jJ\xe4\xc7\x8dw\xfc|\n\x0e\xd4\x80\xb1\xfe\x16\t\xc8\xe8\xd6\xec\"P\xab\xd6\xa5\xe2\x1e-\xad\r\xc6\xf6!\xd5\xb7x)\xa9y\xa41\xea\x9c\xda\xc9f\xb0dy\x8b\xff\xe7\x90]=\t\x91O\xb4kZ\xf6\x8d\xdd1\xb2G\xe7\xc0k\xb9 \x03\xd2\xe5\xcd\xac\x9f\\\x04@gbK\x9f\xf0\x13\x8b\x00{\x97\v\x11\xa4\x06\xa5Y\xe7\xf2\xe2U\xf1\xef4\xed\xf3n8\xf9\x83JVb[\xbf7\xc4eM:/\xde\x91T\xe5?<\xd9\xc9\xf4\xcai.\x01G\xa3d`?\x85\xdaC\x106\xb0\xfc\xcbv\xae\xd7\xd8\xc1|\xd3\x7fo\x9c\xa4~]\xf6\xd6\xf6\xfdT\x1c\v\x02\xf3\x96\x1f\xbc\xb6\xf2k\xec'}}]}, 0x0, 0x0, 0x0})
getdents64(r4, 0x0, 0x0)

169.165095ms ago: executing program 4 (id=1548):
r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0xb, 0x101a00)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000840)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x2, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})

65.467891ms ago: executing program 2 (id=1549):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001400190f26bd6200f5dbdf250a08fe00", @ANYRES32=r1, @ANYBLOB="1400010000000000000000000000000000000001"], 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004)

65.314401ms ago: executing program 4 (id=1550):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/zoneinfo\x00', 0x0, 0x0)
lseek(r0, 0x4000000007, 0x1)

386.961µs ago: executing program 4 (id=1551):
madvise(&(0x7f0000003000/0x1000)=nil, 0x7f7884acbfff, 0x8)

148.85µs ago: executing program 3 (id=1552):
syz_mount_image$exfat(&(0x7f0000000000), &(0x7f00000002c0)='./file0\x00', 0x1200082, &(0x7f0000000500)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c6572726f72733d636f6e74696e75652c757466382c756d61736b3d30303030303030303030303030303030303032313632362c696f636861727365743d63703935302c646973636172642c616c6c6f775f7574696d653d3030303030303030352c6572726f72733d72656d6f756e742d726f2c646973636172642c00d50194377d24b5953951fbb0e6d2204f459a2129e54509e955e3ac3e9dd76061aeb341a8ae53564e806289fad8cab1be25d1de2b9d46be57d2e9c2ded432413ab147de643c400dba4f15a90c962bcd8d805d7d5f57"], 0x5, 0x1531, &(0x7f0000002f80)="$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")
mount$cgroup(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0), 0x2010042, &(0x7f00000004c0)={[{@nofavordynmods}]})

0s ago: executing program 2 (id=1553):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000003c0)={'veth0_to_hsr\x00', 0x2dbd854266873d48})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r1)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'})

kernel console output (not intermixed with test programs):

ed directory (invalid entries)
[  123.068289][ T5812] syz_tun (unregistering): left allmulticast mode
[  123.091194][  T884] usb 3-1: 0:1 : does not exist
[  123.127867][  T884] usb 3-1: USB disconnect, device number 12
[  123.280545][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.356261][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.403712][ T5197] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  123.408938][ T5197] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  123.412784][ T5197] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  123.419427][ T5197] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  123.430450][ T5197] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  123.435902][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.509421][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.604097][ T7676] cifs: Unknown parameter 'IT&:"1:ӭ'4,Zz-#F<]%gC
[  123.604097][ T7676] SȘȞZ6'
[  123.684739][ T7671] chnl_net:caif_netlink_parms(): no params data found
[  123.801427][ T7679] loop2: detected capacity change from 0 to 32768
[  123.811483][ T7679] XFS (loop2): device supports 512 byte sectors (not 256)
[  123.840886][   T12] bridge_slave_1: left allmulticast mode
[  123.843276][   T12] bridge_slave_1: left promiscuous mode
[  123.845772][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.929042][   T12] bridge_slave_0: left allmulticast mode
[  123.931396][   T12] bridge_slave_0: left promiscuous mode
[  123.935051][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.998887][ T5841] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  124.132045][  T884] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  124.141410][ T5841] usb 4-1: Using ep0 maxpacket: 8
[  124.145919][ T5841] usb 4-1: config 2 has an invalid interface number: 31 but max is 0
[  124.149060][ T5841] usb 4-1: config 2 has no interface number 0
[  124.151740][ T5841] usb 4-1: config 2 interface 31 has no altsetting 0
[  124.156331][ T5841] usb 4-1: New USB device found, idVendor=1a86, idProduct=e092, bcdDevice=53.3f
[  124.159831][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.163319][ T5841] usb 4-1: Product: syz
[  124.165092][ T5841] usb 4-1: Manufacturer: syz
[  124.166973][ T5841] usb 4-1: SerialNumber: syz
[  124.172282][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  124.182863][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  124.187532][   T12] bond0 (unregistering): Released all slaves
[  124.196464][   T12] bond1 (unregistering): (slave dummy0): Releasing active interface
[  124.204026][   T12] bond1 (unregistering): Released all slaves
[  124.245949][ T7671] bridge0: port 1(bridge_slave_0) entered blocking state
[  124.248502][ T7671] bridge0: port 1(bridge_slave_0) entered disabled state
[  124.250825][ T7671] bridge_slave_0: entered allmulticast mode
[  124.254725][ T7671] bridge_slave_0: entered promiscuous mode
[  124.259947][ T7671] bridge0: port 2(bridge_slave_1) entered blocking state
[  124.262263][ T7671] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.264435][ T7671] bridge_slave_1: entered allmulticast mode
[  124.273547][ T7671] bridge_slave_1: entered promiscuous mode
[  124.298510][  T884] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  124.311668][  T884] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  124.316982][  T884] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.320181][  T884] usb 3-1: Product: syz
[  124.321722][  T884] usb 3-1: Manufacturer: syz
[  124.323260][ T7671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  124.336752][  T884] usb 3-1: SerialNumber: syz
[  124.347479][  T884] usb 3-1: config 0 descriptor??
[  124.387883][ T5841] ch9200 4-1:2.31: probe with driver ch9200 failed with error -71
[  124.395457][ T5841] usb 4-1: USB disconnect, device number 7
[  124.401242][ T7671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  124.440381][ T7671] team0: Port device team_slave_0 added
[  124.468983][ T7671] team0: Port device team_slave_1 added
[  124.515483][ T7671] batman_adv: batadv0: Adding interface: batadv_slave_0
[  124.518492][ T7671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  124.531532][ T7671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  124.537549][ T7671] batman_adv: batadv0: Adding interface: batadv_slave_1
[  124.540384][ T7671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  124.550395][ T7671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  124.552989][ T5815] usb 3-1: USB disconnect, device number 13
[  124.577830][   T12] hsr_slave_0: left promiscuous mode
[  124.580138][   T12] hsr_slave_1: left promiscuous mode
[  124.583360][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.585696][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.588355][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.591028][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  124.594819][   T12] veth1_macvtap: left promiscuous mode
[  124.596751][   T12] veth0_macvtap: left promiscuous mode
[  124.598525][   T12] veth1_vlan: left promiscuous mode
[  124.602384][   T12] veth0_vlan: left promiscuous mode
[  124.743090][   T12] team0 (unregistering): Port device team_slave_1 removed
[  124.750046][   T12] team0 (unregistering): Port device team_slave_0 removed
[  124.855186][ T7671] hsr_slave_0: entered promiscuous mode
[  124.866692][ T7671] hsr_slave_1: entered promiscuous mode
[  124.868892][ T7671] debugfs: 'hsr0' already exists in 'hsr'
[  124.875019][ T7671] Cannot create hsr debugfs directory
[  125.234367][ T7671] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  125.253070][ T7671] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  125.263382][ T7671] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  125.282599][ T7671] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  125.385324][ T7723] netlink: 'syz.2.676': attribute type 21 has an invalid length.
[  125.392023][ T7723] netlink: 132 bytes leftover after parsing attributes in process `syz.2.676'.
[  125.401497][ T5810] Bluetooth: hci1: command tx timeout
[  125.477181][ T7671] 8021q: adding VLAN 0 to HW filter on device bond0
[  125.513238][ T7671] 8021q: adding VLAN 0 to HW filter on device team0
[  125.538577][   T65] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.540916][   T65] bridge0: port 1(bridge_slave_0) entered forwarding state
[  125.565241][   T65] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.567875][   T65] bridge0: port 2(bridge_slave_1) entered forwarding state
[  125.861056][ T7706] loop3: detected capacity change from 0 to 262144
[  125.936706][ T7706] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  125.942738][ T7706] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  126.456456][ T7671] 8021q: adding VLAN 0 to HW filter on device batadv0
[  126.554867][ T5810] Bluetooth: hci0: ACL packet too small
[  126.555070][ T7804] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  126.908654][ T7671] veth0_vlan: entered promiscuous mode
[  126.940388][ T7671] veth1_vlan: entered promiscuous mode
[  127.025400][ T7671] veth0_macvtap: entered promiscuous mode
[  127.038936][ T7671] veth1_macvtap: entered promiscuous mode
[  127.076925][ T7671] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.118334][ T7671] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.140892][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.144820][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.149829][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.157100][ T7816] netlink: 64 bytes leftover after parsing attributes in process `syz.2.680'.
[  127.158086][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.204983][ T7816] netlink: 64 bytes leftover after parsing attributes in process `syz.2.680'.
[  127.362848][   T41] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.372235][   T41] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.391581][ T5810] Bluetooth: hci1: command tx timeout
[  127.433603][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.436227][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.608781][ T5815] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  127.692385][ T7822] loop4: detected capacity change from 0 to 4096
[  127.734127][ T7822] ntfs3(loop4): ino=4, mi_enum_attr
[  127.736000][ T7822] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  127.739089][ T7822] ntfs3(loop4): Failed to load $AttrDef (-22)
[  127.760949][ T5815] usb 3-1: Using ep0 maxpacket: 16
[  127.783924][ T5815] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  127.787277][ T5815] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.808442][ T5815] usb 3-1: Product: syz
[  127.817223][ T5815] usb 3-1: Manufacturer: syz
[  127.832581][ T5815] usb 3-1: SerialNumber: syz
[  127.857826][ T5815] usb 3-1: config 0 descriptor??
[  127.864309][ T5815] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  128.127648][ T7837] netlink: 'syz.3.689': attribute type 10 has an invalid length.
[  128.130683][ T7837] netlink: 40 bytes leftover after parsing attributes in process `syz.3.689'.
[  128.134360][ T7837] dummy0: entered promiscuous mode
[  128.136939][ T7837] dummy0: entered allmulticast mode
[  128.140978][ T7837] bridge0: port 3(dummy0) entered blocking state
[  128.145436][ T7837] bridge0: port 3(dummy0) entered disabled state
[  128.179760][  T884] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  128.186922][ T7839] GUP no longer grows the stack in syz.3.690 (7839): 200000004000-200000008000 (200000002000)
[  128.190843][ T7839] CPU: 1 UID: 0 PID: 7839 Comm: syz.3.690 Not tainted syzkaller #0 PREEMPT(full) 
[  128.190864][ T7839] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  128.190874][ T7839] Call Trace:
[  128.190882][ T7839]  <TASK>
[  128.190888][ T7839]  dump_stack_lvl+0xe8/0x150
[  128.190909][ T7839]  __get_user_pages+0x2453/0x29d0
[  128.190949][ T7839]  get_user_pages_remote+0x2f6/0xab0
[  128.190965][ T7839]  ? __pfx_mtree_load+0x10/0x10
[  128.190982][ T7839]  ? __pfx_get_user_pages_remote+0x10/0x10
[  128.190998][ T7839]  ? __access_remote_vm+0xa3/0x7f0
[  128.191015][ T7839]  ? __access_remote_vm+0x44d/0x7f0
[  128.191036][ T7839]  __access_remote_vm+0x226/0x7f0
[  128.191061][ T7839]  ? __pfx___access_remote_vm+0x10/0x10
[  128.191080][ T7839]  ? alloc_pages_noprof+0xbd/0x190
[  128.191130][ T7839]  proc_pid_cmdline_read+0x419/0x7f0
[  128.191152][ T7839]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  128.191170][ T7839]  ? rw_verify_area+0x2a6/0x4d0
[  128.191186][ T7839]  vfs_readv+0x587/0x840
[  128.191202][ T7839]  ? __pfx_proc_pid_cmdline_read+0x10/0x10
[  128.191219][ T7839]  ? __pfx_vfs_readv+0x10/0x10
[  128.191243][ T7839]  ? __fget_files+0x2a/0x420
[  128.191261][ T7839]  ? __fget_files+0x3a0/0x420
[  128.191277][ T7839]  ? __fget_files+0x2a/0x420
[  128.191298][ T7839]  __x64_sys_preadv+0x19f/0x2a0
[  128.191313][ T7839]  ? __pfx___se_sys_futex+0x10/0x10
[  128.191329][ T7839]  ? __pfx___x64_sys_preadv+0x10/0x10
[  128.191352][ T7839]  do_syscall_64+0x14d/0xf80
[  128.191366][ T7839]  ? trace_irq_disable+0x3b/0x150
[  128.191383][ T7839]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.191397][ T7839]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  128.191409][ T7839] RIP: 0033:0x7f9bc759c799
[  128.191422][ T7839] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  128.191432][ T7839] RSP: 002b:00007f9bc84b4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127
[  128.191446][ T7839] RAX: ffffffffffffffda RBX: 00007f9bc7815fa0 RCX: 00007f9bc759c799
[  128.191455][ T7839] RDX: 0000000000000001 RSI: 0000200000000d00 RDI: 0000000000000003
[  128.191462][ T7839] RBP: 00007f9bc7632c99 R08: 0000000000000200 R09: 0000000000000000
[  128.191469][ T7839] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000
[  128.191476][ T7839] R13: 00007f9bc7816038 R14: 00007f9bc7815fa0 R15: 00007ffcec154fb8
[  128.191496][ T7839]  </TASK>
[  128.334662][  T884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  128.338660][  T884] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  128.343207][  T884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  128.347325][  T884] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  128.354731][  T884] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  128.358715][  T884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.371037][  T884] usb 5-1: config 0 descriptor??
[  128.463480][ T7841] loop3: detected capacity change from 0 to 40427
[  128.473773][ T7841] F2FS-fs (loop3): invalid crc value
[  128.515061][ T7841] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  128.519335][ T7841] F2FS-fs (loop3): Start checkpoint disabled!
[  128.532522][ T7841] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0
[  128.536309][ T7841] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  128.570818][  T884] hdpvr 5-1:0.0: firmware version 0xbf dated Vk&yeIFKHdcߜ`{[
[  128.577532][ T7779] kworker/u10:8: attempt to access beyond end of device
[  128.577532][ T7779] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  128.579348][  T884] hdpvr 5-1:0.0: untested firmware, the driver might not work.
[  128.588053][ T7779] CPU: 1 UID: 0 PID: 7779 Comm: kworker/u10:8 Not tainted syzkaller #0 PREEMPT(full) 
[  128.588070][ T7779] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  128.588079][ T7779] Workqueue: writeback wb_workfn (flush-7:3)
[  128.588134][ T7779] Call Trace:
[  128.588140][ T7779]  <TASK>
[  128.588146][ T7779]  dump_stack_lvl+0xe8/0x150
[  128.588166][ T7779]  f2fs_handle_critical_error+0x37c/0x540
[  128.588187][ T7779]  f2fs_write_end_io+0xcdb/0xff0
[  128.588218][ T7779]  __submit_merged_bio+0x256/0x700
[  128.588238][ T7779]  __submit_merged_write_cond+0x3c9/0x4e0
[  128.588260][ T7779]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  128.588292][ T7779]  f2fs_write_data_pages+0x2975/0x35e0
[  128.588307][ T7779]  ? unwind_next_frame+0xa5/0x23c0
[  128.588324][ T7779]  ? lock_release+0x4b/0x3d0
[  128.588362][ T7779]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  128.588389][ T7779]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  128.588427][ T7779]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  128.588460][ T7779]  ? __lock_acquire+0x6b5/0x2cf0
[  128.588486][ T7779]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  128.588520][ T7779]  do_writepages+0x32e/0x550
[  128.588541][ T7779]  ? reacquire_held_locks+0x104/0x190
[  128.588557][ T7779]  ? writeback_sb_inodes+0x477/0x1a20
[  128.588577][ T7779]  __writeback_single_inode+0x133/0x11a0
[  128.588595][ T7779]  ? do_raw_spin_unlock+0x4d/0x210
[  128.588611][ T7779]  writeback_sb_inodes+0x992/0x1a20
[  128.588649][ T7779]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  128.588663][ T7779]  ? do_raw_spin_lock+0x12b/0x2f0
[  128.588705][ T7779]  ? rcu_is_watching+0x15/0xb0
[  128.588728][ T7779]  wb_writeback+0x456/0xb70
[  128.588747][ T7779]  ? queue_io+0x2c1/0x4a0
[  128.588769][ T7779]  ? __pfx_wb_writeback+0x10/0x10
[  128.588790][ T7779]  ? do_raw_spin_lock+0x12b/0x2f0
[  128.588814][ T7779]  wb_workfn+0x414/0xf50
[  128.588830][ T7779]  ? look_up_lock_class+0x57/0x110
[  128.588854][ T7779]  ? __pfx_wb_workfn+0x10/0x10
[  128.588869][ T7779]  ? do_raw_spin_lock+0x12b/0x2f0
[  128.588884][ T7779]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  128.588910][ T7779]  ? process_scheduled_works+0xa8d/0x18c0
[  128.588924][ T7779]  ? process_scheduled_works+0xa8d/0x18c0
[  128.588941][ T7779]  process_scheduled_works+0xb6e/0x18c0
[  128.588981][ T7779]  ? __pfx_process_scheduled_works+0x10/0x10
[  128.589001][ T7779]  ? assign_work+0x3d5/0x5e0
[  128.589020][ T7779]  worker_thread+0xa53/0xfc0
[  128.589057][ T7779]  kthread+0x388/0x470
[  128.589069][ T7779]  ? __pfx_worker_thread+0x10/0x10
[  128.589081][ T7779]  ? __pfx_kthread+0x10/0x10
[  128.589124][ T7779]  ret_from_fork+0x51e/0xb90
[  128.589143][ T7779]  ? __pfx_ret_from_fork+0x10/0x10
[  128.589156][ T7779]  ? __switch_to+0xc7d/0x1450
[  128.589173][ T7779]  ? __pfx_kthread+0x10/0x10
[  128.589186][ T7779]  ret_from_fork_asm+0x1a/0x30
[  128.589215][ T7779]  </TASK>
[  128.589221][ T7779] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  128.925664][ T7849] loop3: detected capacity change from 0 to 1024
[  128.946684][   T41] hfsplus: b-tree write err: -5, ino 25
[  128.948715][   T41] hfsplus: b-tree write err: -5, ino 4
[  128.950626][   T41] hfsplus: b-tree write err: -5, ino 2
[  129.003808][ T7854] loop3: detected capacity change from 0 to 512
[  129.006833][  T884] hdpvr 5-1:0.0: Could not setup controls
[  129.010806][ T7854] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  129.013459][ T7854] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  129.015277][  T884] hdpvr 5-1:0.0: registering videodev failed
[  129.027652][ T7854] EXT4-fs (loop3): orphan cleanup on readonly fs
[  129.030266][ T5815] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71
[  129.031135][ T7854] EXT4-fs error (device loop3): ext4_orphan_get:1391: inode #13: comm syz.3.696: iget: bad i_size value: 12154761577498
[  129.043719][ T7854] fserror_report: 4 callbacks suppressed
[  129.043726][ T7854] loop3: lost file I/O error report for ino 13 type 5 pos 0x0 len 0x0 error -117
[  129.046895][    C0] EXT4-fs (loop3): error count since last fsck: 1
[  129.052802][    C0] EXT4-fs (loop3): initial error at time 1774151283: ext4_orphan_get:1391: inode 13
[  129.056429][    C0] EXT4-fs (loop3): last error at time 1774151283: ext4_orphan_get:1391: inode 13
[  129.067397][ T5815] usb 3-1: USB disconnect, device number 14
[  129.079949][ T7854] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.696: couldn't read orphan inode 13 (err -117)
[  129.086833][  T884] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -71
[  129.100400][ T7854] loop3: lost filesystem error report for type 5 error -117
[  129.101288][ T7854] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  129.107903][  T884] usb 5-1: USB disconnect, device number 2
[  129.121950][ T7854] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  129.125474][ T7854] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c01c, mo2=0002]
[  129.138774][ T6115] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.206472][ T7857] loop3: detected capacity change from 0 to 4096
[  129.227825][ T7858] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  129.272152][ T7860] bridge0: entered promiscuous mode
[  129.301226][ T7862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.699'.
[  129.306967][ T7862] netlink: 28 bytes leftover after parsing attributes in process `syz.3.699'.
[  129.363177][ T5810] Bluetooth: hci1: command tx timeout
[  129.379632][ T7866] loop3: detected capacity change from 0 to 1024
[  129.384259][ T7866] hfsplus: type requires a 4 character value
[  129.446425][ T7870] loop3: detected capacity change from 0 to 256
[  129.467472][ T7870] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  129.482584][ T7870] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=512, location=512
[  129.487251][ T7870] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  129.490109][ T7870] UDF-fs: Scanning with blocksize 512 failed
[  129.502891][ T7870] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  129.508844][ T7870] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  129.577713][ T7874] netlink: 14 bytes leftover after parsing attributes in process `syz.4.704'.
[  129.614674][ T7877] loop2: detected capacity change from 0 to 128
[  129.632781][ T7874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  129.649580][ T7874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  129.654056][ T7874] bond0 (unregistering): Released all slaves
[  129.853311][ T7890] netlink: 4 bytes leftover after parsing attributes in process `syz.3.711'.
[  130.421483][ T7894] loop2: detected capacity change from 0 to 32768
[  130.431422][ T7894] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.715 (7894)
[  130.472022][ T7894] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  130.476890][ T7894] BTRFS info (device loop2): using sha256 checksum algorithm
[  130.582420][ T7894] BTRFS info (device loop2): enabling ssd optimizations
[  130.585207][ T7894] BTRFS info (device loop2): turning on async discard
[  130.587601][ T7894] BTRFS info (device loop2): enabling free space tree
[  130.638726][ T5808] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  130.941336][ T7923] Cannot find set identified by id 0 to match
[  131.097721][ T7928] loop3: detected capacity change from 0 to 8
[  131.173103][ T7928] SQUASHFS error: Failed to read block 0x2d7: -5
[  131.175694][ T7928] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  131.409410][ T5810] Bluetooth: hci1: command tx timeout
[  131.443643][ T7940] ceph: No mds server is up or the cluster is laggy
[  131.451125][ T5815] libceph: connect (1)[c::]:6789 error -101
[  131.453726][ T5815] libceph: mon0 (1)[c::]:6789 connect error
[  131.508775][ T7938] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  131.565135][ T7938] ntfs3(loop2): It is recommended to use chkdsk.
[  131.681402][ T7938] ntfs3(loop2): failed to convert "076c" to iso8859-5
[  131.693249][ T7938] ntfs3(loop2): ino=5, "/" ntfs_readdir
[  131.774709][ T5822] Dev loop3: RDB in block 1 has bad checksum
[  131.783380][ T7947] Dev loop3: RDB in block 1 has bad checksum
[  131.783999][ T7950] trusted_key: encrypted_key: insufficient parameters specified
[  131.796651][ T5256] Dev loop3: RDB in block 1 has bad checksum
[  131.850348][ T7952] netlink: 10 bytes leftover after parsing attributes in process `syz.2.730'.
[  132.068815][ T7968] netlink: 'syz.2.737': attribute type 1 has an invalid length.
[  132.071289][ T7968] netlink: 'syz.2.737': attribute type 2 has an invalid length.
[  132.324748][ T7977] trusted_key: syz.2.738 sent an empty control message without MSG_MORE.
[  132.814846][ T8000] set_capacity_and_notify: 2 callbacks suppressed
[  132.814859][ T8000] loop4: detected capacity change from 0 to 1024
[  132.821542][ T8000] EXT4-fs: Ignoring removed orlov option
[  132.842219][ T8000] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.865182][ T7671] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.952868][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.4.752'.
[  133.018597][   T33] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  133.062593][ T8015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.758'.
[  133.065352][ T8015] netlink: 28 bytes leftover after parsing attributes in process `syz.4.758'.
[  133.116595][ T8019] netlink: 4 bytes leftover after parsing attributes in process `syz.4.759'.
[  133.171192][   T33] usb 4-1: Using ep0 maxpacket: 32
[  133.214704][ T5810] Bluetooth: hci0: SCO packet for unknown connection handle 0
[  133.215237][ T5810] Bluetooth: hci0: connection err: -111
[  133.294190][   T33] usb 4-1: config 0 has an invalid interface number: 119 but max is 0
[  133.297550][   T33] usb 4-1: config 0 has no interface number 0
[  133.299988][   T33] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  133.304506][   T33] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  133.309115][   T33] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  133.313143][   T33] usb 4-1: config 0 interface 119 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0
[  133.317197][   T33] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  133.328174][   T33] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73
[  133.331644][   T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.334868][   T33] usb 4-1: Product: syz
[  133.336464][   T33] usb 4-1: Manufacturer: syz
[  133.338614][   T33] usb 4-1: SerialNumber: syz
[  133.342577][   T33] usb 4-1: config 0 descriptor??
[  133.350549][   T33] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input11
[  133.587220][   T33] usb 4-1: USB disconnect, device number 8
[  133.917527][ T8036] Bluetooth: MGMT ver 1.23
[  134.361173][ T5815] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  134.504371][ T5815] usb 5-1: Using ep0 maxpacket: 16
[  134.507991][ T5815] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  134.511156][ T5815] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.523484][ T5815] usb 5-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.531466][ T5815] usb 5-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  134.540062][ T5815] usb 5-1: config 7 interface 0 has no altsetting 0
[  134.545131][ T5815] usb 5-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  134.552886][ T5815] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.974304][ T5815] input: HID 0458:5010 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.0/0003:0458:5010.0005/input/input12
[  135.063515][ T5815] kye 0003:0458:5010.0005: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.4-1/input0
[  135.158963][ T8063] bond1: entered promiscuous mode
[  135.162723][ T8063] 8021q: adding VLAN 0 to HW filter on device bond1
[  135.167436][ T5815] usb 5-1: USB disconnect, device number 3
[  135.314079][ T8066] loop3: detected capacity change from 0 to 32768
[  135.572425][ T8085] netlink: 28 bytes leftover after parsing attributes in process `syz.3.786'.
[  135.701344][ T8095] loop3: detected capacity change from 0 to 512
[  135.707207][ T8095] EXT4-fs (loop3): blocks per group (95) and clusters per group (32768) inconsistent
[  135.879617][   T34] audit: type=1326 audit(1774153869.526:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.4.792" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741b9c799 code=0x7ffc0000
[  135.891049][   T34] audit: type=1326 audit(1774153869.536:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.4.792" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741b9c799 code=0x7ffc0000
[  135.900530][   T34] audit: type=1326 audit(1774153869.536:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.4.792" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f3741b9c799 code=0x7ffc0000
[  135.911048][   T34] audit: type=1326 audit(1774153869.536:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.4.792" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741b9c799 code=0x7ffc0000
[  135.937035][   T34] audit: type=1326 audit(1774153869.536:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.4.792" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741b9c799 code=0x7ffc0000
[  135.946788][   T34] audit: type=1326 audit(1774153869.536:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.4.792" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3741b9c799 code=0x7ffc0000
[  135.962279][   T34] audit: type=1326 audit(1774153869.536:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.4.792" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741b9c799 code=0x7ffc0000
[  136.005657][   T34] audit: type=1326 audit(1774153869.536:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.4.792" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741b9c799 code=0x7ffc0000
[  136.176218][   T34] audit: type=1326 audit(1774153869.547:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.4.792" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f3741b9c799 code=0x7ffc0000
[  136.183204][   T34] audit: type=1326 audit(1774153869.547:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8100 comm="syz.4.792" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3741b9c799 code=0x7ffc0000
[  136.449332][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  136.451591][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  136.639309][  T884] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  136.658596][ T8120] loop3: detected capacity change from 0 to 256
[  136.739028][ T8124] netlink: 27 bytes leftover after parsing attributes in process `syz.4.798'.
[  136.800231][  T884] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[  136.809411][  T884] usb 3-1: config 0 has no interface number 0
[  136.811930][  T884] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  136.835395][  T884] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  136.844241][  T884] usb 3-1: config 0 interface 255 has no altsetting 0
[  136.847108][  T884] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  136.851014][  T884] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.862425][  T884] usb 3-1: config 0 descriptor??
[  136.868592][  T884] ums-realtek 3-1:0.255: USB Mass Storage device detected
[  137.007586][ T8145] loop4: detected capacity change from 0 to 64
[  137.084949][   T33] usb 3-1: USB disconnect, device number 15
[  137.129317][ T8148] minix-fs error (device loop4): minix_rename:227: inode #2: comm syz.4.806: inode has corrupted nlink
[  138.631396][ T8191] loop4: detected capacity change from 0 to 256
[  138.726109][ T8185] loop2: detected capacity change from 0 to 32768
[  138.749479][ T8185] JBD2: Ignoring recovery information on journal
[  138.794921][ T8185] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  138.888054][ T5808] ocfs2: Unmounting device (7,2) on (node local)
[  139.009672][ T8195] loop4: detected capacity change from 0 to 32768
[  139.075813][ T8195] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  139.080784][ T8195] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  139.092686][ T8195] XFS (loop4): Ending clean mount
[  139.107015][ T8195] XFS (loop4): Quotacheck needed: Please wait.
[  139.148900][ T8195] XFS (loop4): Quotacheck: Done.
[  139.217362][ T7671] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  139.252658][ T8217] loop3: detected capacity change from 0 to 32768
[  139.273910][ T8217] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  139.279430][ T8217] JBD2: Ignoring recovery information on journal
[  139.312473][ T8217] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  139.373044][ T8217] sctp: [Deprecated]: syz.3.829 (pid 8217) Use of int in max_burst socket option.
[  139.373044][ T8217] Use struct sctp_assoc_value instead
[  139.725104][ T8230] netlink: 'syz.4.831': attribute type 12 has an invalid length.
[  140.697222][ T8217] syz.3.829 (8217) used greatest stack depth: 19616 bytes left
[  140.705501][ T8247] loop4: detected capacity change from 0 to 32768
[  140.741419][ T6115] ocfs2: Unmounting device (7,3) on (node local)
[  140.749067][ T8247] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  140.759544][ T8247] XFS (loop4): Ending clean mount
[  140.777419][ T8247] XFS (loop4): Quotacheck needed: Please wait.
[  140.804919][ T8247] XFS (loop4): Quotacheck: Done.
[  140.843312][ T7671] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  141.122309][ T8269] loop3: detected capacity change from 0 to 256
[  142.240003][ T8292] loop4: detected capacity change from 0 to 256
[  142.250754][ T8292] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  142.304605][ T8294] loop4: detected capacity change from 0 to 512
[  142.311072][ T8294] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.857: Invalid inode bitmap blk 4 in block_group 0
[  142.315411][ T8294] loop4: lost filesystem error report for type 5 error -117
[  142.316895][ T8294] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  142.332454][ T8294] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1315: group 0, block bitmap and bg descriptor inconsistent: 7969 vs 220 free clusters
[  142.343848][ T8294] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.857: Invalid inode bitmap blk 4 in block_group 0
[  142.356549][ T8294] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  142.375578][ T7671] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.410649][ T8276] delete_channel: no stack
[  143.260492][ T8330] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  143.275930][  T884] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  143.296861][ T8332] netlink: 8 bytes leftover after parsing attributes in process `syz.2.874'.
[  143.299609][ T8332] A link change request failed with some changes committed already. Interface veth1_to_bond may have been left with an inconsistent configuration, please check.
[  143.440138][  T884] usb 5-1: unable to get BOS descriptor or descriptor too short
[  143.451077][  T884] usb 5-1: New USB device found, idVendor=1c9e, idProduct=9603, bcdDevice=f3.0a
[  143.453827][  T884] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.456155][  T884] usb 5-1: Product: syz
[  143.464124][  T884] usb 5-1: Manufacturer: syz
[  143.465584][  T884] usb 5-1: SerialNumber: syz
[  143.516280][ T8343] netlink: 24 bytes leftover after parsing attributes in process `syz.3.879'.
[  143.529224][ T8343] netlink: 4 bytes leftover after parsing attributes in process `syz.3.879'.
[  143.572793][ T5875] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  143.682242][  T884] option 5-1:4.0: GSM modem (1-port) converter detected
[  143.693257][  T884] usb 5-1: USB disconnect, device number 4
[  143.698605][  T884] option 5-1:4.0: device disconnected
[  143.734061][ T5875] usb 3-1: Using ep0 maxpacket: 16
[  143.743627][ T5875] usb 3-1: config 0 has an invalid interface number: 214 but max is 0
[  143.746165][ T5875] usb 3-1: config 0 has no interface number 0
[  143.748088][ T5875] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  143.764366][ T5875] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  143.767162][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.769615][ T5875] usb 3-1: Product: syz
[  143.770933][ T5875] usb 3-1: Manufacturer: syz
[  143.773471][ T5875] usb 3-1: SerialNumber: syz
[  143.776472][ T5875] usb 3-1: config 0 descriptor??
[  143.975011][ T5875] usbtouchscreen 3-1:0.214: Failed to read FW rev: -71
[  143.977389][ T5875] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71
[  143.985328][ T5875] usb 3-1: USB disconnect, device number 16
[  144.726115][ T8360] 9pnet: p9_errstr2errno: server reported unknown error 0x000
[  145.040626][ T8366] loop3: detected capacity change from 0 to 512
[  145.044054][ T8366] EXT4-fs: Ignoring removed nobh option
[  145.046837][ T8366] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  145.055498][ T8366] EXT4-fs (loop3): 1 truncate cleaned up
[  145.066978][ T8366] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  145.632614][ T5875] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  145.781205][ T5875] usb 5-1: Using ep0 maxpacket: 8
[  145.787575][ T5875] usb 5-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  145.793282][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.796597][ T5875] usb 5-1: Product: syz
[  145.798288][ T5875] usb 5-1: Manufacturer: syz
[  145.800360][ T5875] usb 5-1: SerialNumber: syz
[  145.803799][ T5875] usb 5-1: config 0 descriptor??
[  145.808839][ T5875] gspca_main: se401-2.14.0 probing 047d:5003
[  145.907117][ T6115] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.010030][ T8384] loop2: detected capacity change from 0 to 32768
[  146.012883][ T8384] BTRFS error: failed to parse compression option 'lzo:nobarrier'
[  146.195633][ T5875] gspca_se401: ExtraFeatures: 255
[  146.198354][ T5875] gspca_se401: Too many frame sizes
[  146.232902][ T8403] bond2: Removing last arp target with arp_interval on
[  146.241105][ T8403] bond2: entered allmulticast mode
[  146.243579][ T8403] 8021q: adding VLAN 0 to HW filter on device bond2
[  146.394353][   T24] usb 5-1: USB disconnect, device number 5
[  146.473490][ T8419] syzkaller0: entered promiscuous mode
[  146.475555][ T8419] syzkaller0: entered allmulticast mode
[  147.051745][ T8422] loop4: detected capacity change from 0 to 32768
[  147.117297][ T8422] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  147.138738][ T8422] XFS (loop4): Ending clean mount
[  147.252345][ T7671] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  147.280712][ T8432] loop3: detected capacity change from 0 to 256
[  147.666300][  T884] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  147.849614][  T884] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  147.853518][  T884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.861075][  T884] usb 5-1: config 0 descriptor??
[  147.865747][  T884] cp210x 5-1:0.0: cp210x converter detected
[  148.071071][  T884] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -71
[  148.075137][  T884] cp210x 5-1:0.0: querying part number failed
[  148.083235][  T884] usb 5-1: cp210x converter now attached to ttyUSB0
[  148.089418][  T884] usb 5-1: USB disconnect, device number 6
[  148.105328][  T884] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  148.109674][  T884] cp210x 5-1:0.0: device disconnected
[  148.933026][   T24] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  149.134576][   T24] usb 5-1: Using ep0 maxpacket: 32
[  149.149654][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  149.158300][   T24] usb 5-1: config 39 has an invalid interface number: 39 but max is 0
[  149.171366][   T24] usb 5-1: config 39 has no interface number 0
[  149.173599][   T24] usb 5-1: config 39 interface 39 altsetting 5 bulk endpoint 0x2 has invalid maxpacket 8
[  149.176865][   T24] usb 5-1: config 39 interface 39 has no altsetting 0
[  149.181768][   T24] usb 5-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=2f.47
[  149.185288][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.188346][   T24] usb 5-1: Product: syz
[  149.189975][   T24] usb 5-1: Manufacturer: syz
[  149.200017][   T24] usb 5-1: SerialNumber: syz
[  149.212551][ T8452] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  149.227678][ T8458] loop3: detected capacity change from 0 to 512
[  149.253011][ T8458] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  149.273633][ T8458] EXT4-fs (loop3): 1 orphan inode deleted
[  149.275629][ T8458] EXT4-fs (loop3): 1 truncate cleaned up
[  149.297505][ T8458] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.356653][ T6115] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.419562][   T24] usb 5-1: BOGUS urb xfer, pipe 1 != type 3
[  149.425670][   T24]  (null): radio-mr800 - initialization failed
[  149.430143][   T24] radio-mr800 5-1:39.39: probe with driver radio-mr800 failed with error -71
[  149.433500][   T24] usbhid 5-1:39.39: couldn't find an input interrupt endpoint
[  149.459243][   T24] usb 5-1: USB disconnect, device number 7
[  149.549169][ T8474] netlink: 16 bytes leftover after parsing attributes in process `syz.2.925'.
[  149.583136][ T8478] loop2: detected capacity change from 0 to 512
[  149.588157][ T8478] EXT4-fs (loop2): Test dummy encryption mode enabled
[  149.597905][ T8478] EXT4-fs error (device loop2): ext4_iget_extra_inode:5025: inode #15: comm syz.2.927: corrupted in-inode xattr: invalid ea_ino
[  149.603859][ T8478] loop2: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[  149.604153][ T8478] EXT4-fs error (device loop2): ext4_orphan_get:1396: comm syz.2.927: couldn't read orphan inode 15 (err -117)
[  149.611164][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  149.611177][    C1] EXT4-fs (loop2): initial error at time 1774153883: ext4_iget_extra_inode:5025: inode 15
[  149.611190][    C1] EXT4-fs (loop2): last error at time 1774153883: ext4_iget_extra_inode:5025: inode 15
[  149.620444][ T8478] loop2: lost filesystem error report for type 5 error -117
[  149.621365][ T8478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  149.633613][ T8478] EXT4-fs (loop2): shut down requested (2)
[  149.652943][ T5808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.708012][ T8485] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.929'.
[  149.720472][ T8487] loop3: detected capacity change from 0 to 256
[  149.724897][ T8487] exfat: Deprecated parameter 'namecase'
[  149.732462][ T8487] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc534f927, utbl_chksum : 0xe619d30d)
[  149.974973][ T8497] 8021q: adding VLAN 0 to HW filter on device bond1
[  150.136913][ T8511] netlink: 80 bytes leftover after parsing attributes in process `syz.3.942'.
[  150.317926][ T8507] loop2: detected capacity change from 0 to 32768
[  150.327385][ T8507] *** Log Is Dirty ! ***
[  150.329830][ T8507] lmLogInit: exit(-22)
[  150.331517][ T8507] lmLogOpen: exit(-22)
[  150.333549][ T8507] jfs_mount_rw failed, return code = -22
[  150.389385][ T8513] loop3: detected capacity change from 0 to 32768
[  150.396223][ T8513] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.943 (8513)
[  150.430039][ T8513] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  150.433268][ T8513] BTRFS info (device loop3): using sha256 checksum algorithm
[  150.465745][ T8513] BTRFS info (device loop3): enabling ssd optimizations
[  150.469227][ T8513] BTRFS info (device loop3): turning on async discard
[  150.476479][ T8513] BTRFS info (device loop3): enabling free space tree
[  150.559315][ T6115] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  150.768768][ T8529] loop2: detected capacity change from 0 to 40427
[  150.803356][ T8529] F2FS-fs (loop2): Image doesn't support compression
[  150.806159][ T8529] F2FS-fs (loop2): build fault injection rate: 1
[  150.809172][ T8529] F2FS-fs (loop2): build fault injection type: 0x5
[  150.812161][ T8529] F2FS-fs (loop2): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x306b/0x7740
[  151.002593][ T8549] netlink: 72 bytes leftover after parsing attributes in process `syz.4.953'.
[  151.113667][ T8543] loop3: detected capacity change from 0 to 40427
[  151.123102][ T8543] F2FS-fs (loop3): invalid crc value
[  151.211097][ T8561] loop4: detected capacity change from 0 to 1024
[  151.237229][ T8543] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  151.237306][ T8561] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  151.246684][ T8543] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  151.246781][ T8561] ext4 filesystem being mounted at /76/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.269068][   T34] kauditd_printk_skb: 39 callbacks suppressed
[  151.269082][   T34] audit: type=1800 audit(1774153885.685:56): pid=8543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.947" name="file2" dev="loop3" ino=10 res=0 errno=0
[  151.307052][ T7671] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  151.315712][ T6115] syz-executor: attempt to access beyond end of device
[  151.315712][ T6115] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  151.321330][ T6115] CPU: 0 UID: 0 PID: 6115 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  151.321352][ T6115] Tainted: [L]=SOFTLOCKUP
[  151.321357][ T6115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  151.321363][ T6115] Call Trace:
[  151.321369][ T6115]  <TASK>
[  151.321374][ T6115]  dump_stack_lvl+0xe8/0x150
[  151.321399][ T6115]  f2fs_handle_critical_error+0x37c/0x540
[  151.321420][ T6115]  f2fs_write_end_io+0xcdb/0xff0
[  151.321450][ T6115]  __submit_merged_bio+0x256/0x700
[  151.321471][ T6115]  __submit_merged_write_cond+0x3c9/0x4e0
[  151.321493][ T6115]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  151.321524][ T6115]  f2fs_write_data_pages+0x2975/0x35e0
[  151.321565][ T6115]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  151.321611][ T6115]  ? arch_stack_walk+0xfb/0x150
[  151.321655][ T6115]  ? __lock_acquire+0x6b5/0x2cf0
[  151.321682][ T6115]  ? __lock_acquire+0x6b5/0x2cf0
[  151.321701][ T6115]  ? do_raw_spin_lock+0x12b/0x2f0
[  151.321722][ T6115]  ? do_raw_spin_unlock+0x4d/0x210
[  151.321735][ T6115]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  151.321753][ T6115]  do_writepages+0x32e/0x550
[  151.321776][ T6115]  ? do_raw_spin_unlock+0x4d/0x210
[  151.321819][ T6115]  filemap_fdatawrite+0x1e9/0x2f0
[  151.321839][ T6115]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  151.321888][ T6115]  ? do_raw_spin_unlock+0x4d/0x210
[  151.321905][ T6115]  f2fs_sync_dirty_inodes+0x30e/0x860
[  151.321934][ T6115]  f2fs_write_checkpoint+0x9df/0x26a0
[  151.321975][ T6115]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  151.322030][ T6115]  kill_f2fs_super+0x314/0x720
[  151.322052][ T6115]  ? __pfx_kill_f2fs_super+0x10/0x10
[  151.322078][ T6115]  ? lockdep_hardirqs_on+0x7a/0x110
[  151.322103][ T6115]  deactivate_locked_super+0xbc/0x130
[  151.322123][ T6115]  cleanup_mnt+0x437/0x4d0
[  151.322136][ T6115]  ? _raw_spin_unlock_irq+0x23/0x50
[  151.322151][ T6115]  task_work_run+0x1d9/0x270
[  151.322168][ T6115]  ? __pfx_task_work_run+0x10/0x10
[  151.322188][ T6115]  exit_to_user_mode_loop+0xed/0x480
[  151.322203][ T6115]  ? rcu_is_watching+0x15/0xb0
[  151.322223][ T6115]  do_syscall_64+0x32d/0xf80
[  151.322238][ T6115]  ? trace_irq_disable+0x3b/0x150
[  151.322253][ T6115]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.322270][ T6115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  151.322283][ T6115] RIP: 0033:0x7f9bc759d9d7
[  151.322295][ T6115] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  151.322313][ T6115] RSP: 002b:00007ffcec154228 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  151.322325][ T6115] RAX: 0000000000000000 RBX: 00007f9bc7632050 RCX: 00007f9bc759d9d7
[  151.322332][ T6115] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcec1542e0
[  151.322339][ T6115] RBP: 00007ffcec1542e0 R08: 00007ffcec1552e0 R09: 00000000ffffffff
[  151.322347][ T6115] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcec155370
[  151.322355][ T6115] R13: 00007f9bc7632050 R14: 0000000000025748 R15: 00007ffcec1553b0
[  151.322377][ T6115]  </TASK>
[  151.345196][ T6115] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  151.452805][ T8573] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
[  151.456649][ T8572] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff)
[  152.333138][ T5875] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  152.488082][ T5875] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.491707][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  152.496448][ T5875] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  152.503912][ T5875] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  152.508072][ T5875] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.511452][ T5875] usb 5-1: Product: syz
[  152.513749][ T5875] usb 5-1: Manufacturer: syz
[  152.516593][ T5875] usb 5-1: SerialNumber: syz
[  152.527131][ T5875] cdc_mbim 5-1:1.0: skipping garbage
[  152.582870][ T8617] loop3: detected capacity change from 0 to 16
[  152.596340][ T8617] erofs (device loop3): mounted with root inode @ nid 36.
[  152.692304][ T8619] loop3: detected capacity change from 0 to 256
[  152.742193][ T8619] FAT-fs (loop3): Directory bread(block 64) failed
[  152.752336][ T8619] FAT-fs (loop3): Directory bread(block 65) failed
[  152.756674][ T8619] FAT-fs (loop3): Directory bread(block 66) failed
[  152.759003][ T8619] FAT-fs (loop3): Directory bread(block 67) failed
[  152.761548][ T8619] FAT-fs (loop3): Directory bread(block 68) failed
[  152.764648][ T8619] FAT-fs (loop3): Directory bread(block 69) failed
[  152.766902][ T8619] FAT-fs (loop3): Directory bread(block 70) failed
[  152.769361][ T8619] FAT-fs (loop3): Directory bread(block 71) failed
[  152.771945][ T8619] FAT-fs (loop3): Directory bread(block 72) failed
[  152.777087][ T8619] FAT-fs (loop3): Directory bread(block 73) failed
[  153.043217][ T8634] loop3: detected capacity change from 0 to 4096
[  153.049749][ T8634] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  153.345578][ T8650] netlink: 132 bytes leftover after parsing attributes in process `syz.3.995'.
[  153.549019][ T8652] loop3: detected capacity change from 0 to 32768
[  153.555627][ T8652] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.996 (8652)
[  153.563202][ T8652] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  153.567158][ T8652] BTRFS info (device loop3): using crc32c checksum algorithm
[  153.570865][ T8652] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  153.583524][ T5875] cdc_mbim 5-1:1.0: bind() failure
[  153.600483][ T5875] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  153.604777][ T5875] cdc_ncm 5-1:1.1: bind() failure
[  153.612709][ T5875] usb 5-1: USB disconnect, device number 8
[  153.633236][ T8652] BTRFS info (device loop3): rebuilding free space tree
[  153.963727][ T8652] BTRFS info (device loop3): disabling free space tree
[  153.966724][ T8652] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  153.970773][ T8652] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  153.979801][ T8652] BTRFS info (device loop3): enabling ssd optimizations
[  153.982806][ T8652] BTRFS info (device loop3): turning on async discard
[  153.985479][ T8652] BTRFS info (device loop3): enabling disk space caching
[  153.988405][ T8652] BTRFS info (device loop3): force clearing of disk cache
[  153.991377][ T8652] BTRFS info (device loop3): use zstd compression, level 3
[  154.011318][   T34] audit: type=1800 audit(1774153888.562:57): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.996" name="bus" dev="loop3" ino=263 res=0 errno=0
[  154.259222][ T6115] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  154.324555][ T8677] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1000'.
[  154.483701][ T8681] loop4: detected capacity change from 0 to 4096
[  154.548276][ T8681] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  154.551108][ T8681] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  154.602256][ T8680] ntfs3(loop4): ino=1e, attr_set_size_ex
[  154.813485][ T8701] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1010'.
[  155.247542][ T5875] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  155.336713][ T8730] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  155.370162][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'.
[  155.373111][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1024'.
[  155.428550][ T5875] usb 4-1: Using ep0 maxpacket: 16
[  155.432705][ T5875] usb 4-1: config index 0 descriptor too short (expected 16456, got 72)
[  155.435991][ T5875] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  155.440701][ T5875] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  155.444512][ T5875] usb 4-1: config 0 has an invalid interface number: 125 but max is 1
[  155.450088][ T5875] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  155.455572][ T5875] usb 4-1: config 0 has no interface number 0
[  155.462717][ T5875] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64
[  155.467893][ T5875] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0
[  155.472227][ T5875] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0
[  155.476230][ T5875] usb 4-1: config 0 interface 125 has no altsetting 1
[  155.486003][ T5875] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27
[  155.489714][ T5875] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.493155][ T5875] usb 4-1: Product: syz
[  155.494588][ T5875] usb 4-1: Manufacturer: syz
[  155.502472][ T5875] usb 4-1: SerialNumber: syz
[  155.508573][ T5875] usb 4-1: config 0 descriptor??
[  155.523909][ T8738] loop4: detected capacity change from 0 to 512
[  155.528076][ T8738] EXT4-fs: Ignoring removed nobh option
[  155.536519][ T8738] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  155.544686][ T8738] EXT4-fs (loop4): 1 truncate cleaned up
[  155.548271][ T8738] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.576477][ T7671] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.708594][ T5875] usb 4-1: USB disconnect, device number 9
[  156.273285][ T8766] loop3: detected capacity change from 0 to 1024
[  156.721156][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'.
[  156.836343][ T8774] batman_adv: batadv0: Removing interface: batadv_slave_0
[  157.106369][ T8785] loop4: detected capacity change from 0 to 8
[  157.121579][ T8785] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  157.336974][ T8792] fuse: root generation should be zero
[  157.638308][ T5848] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  157.785153][ T5848] usb 5-1: config 0 has an invalid interface number: 11 but max is 0
[  157.788816][ T5848] usb 5-1: config 0 has no interface number 0
[  157.792164][ T5848] usb 5-1: config 0 interface 11 altsetting 245 endpoint 0x7 has an invalid bInterval 129, changing to 11
[  157.798684][ T5848] usb 5-1: config 0 interface 11 altsetting 245 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  157.808247][ T5848] usb 5-1: config 0 interface 11 altsetting 245 endpoint 0x87 has invalid wMaxPacketSize 0
[  157.813428][ T5848] usb 5-1: config 0 interface 11 has no altsetting 0
[  157.816592][ T5848] usb 5-1: New USB device found, idVendor=06cd, idProduct=010f, bcdDevice=d5.1b
[  157.822747][ T5848] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.834838][ T5848] usb 5-1: config 0 descriptor??
[  157.844581][ T5848] keyspan 5-1:0.11: Keyspan 2 port adapter converter detected
[  157.853489][ T5848] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 81
[  157.856362][ T5848] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 82
[  157.859911][ T5848] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 1
[  157.863138][ T5848] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 2
[  157.866222][ T5848] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 85
[  157.870683][ T5848] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 5
[  157.884280][ T5848] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  157.901829][ T5848] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 83
[  157.910522][ T5848] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 84
[  157.913673][ T5848] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 3
[  157.919733][ T5848] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 4
[  157.922842][ T5848] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 86
[  157.926161][ T5848] keyspan 5-1:0.11: found no endpoint descriptor for endpoint 6
[  157.945255][ T5848] usb 5-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  158.001079][ T8802] loop2: detected capacity change from 0 to 256
[  158.028595][ T8802] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012c80, chksum : 0x0ff561db, utbl_chksum : 0xe619d30d)
[  158.036871][ T5848] usb 5-1: USB disconnect, device number 9
[  158.049639][ T5848] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  158.058819][ T5848] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  158.067367][ T5848] keyspan 5-1:0.11: device disconnected
[  158.154316][ T8804] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1055'.
[  158.205509][ T8806] Cannot find map_set index 65503 as target
[  158.764758][ T8824] loop3: detected capacity change from 0 to 2048
[  158.769975][ T8824] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  158.776874][ T7564] udevd[7564]: incorrect nilfs2 checksum on /dev/loop3
[  158.780489][ T8824] NILFS (loop3): mounting unchecked fs
[  158.784349][ T7564] udevd[7564]: incorrect nilfs2 checksum on /dev/loop3
[  158.796284][ T8824] NILFS (loop3): recovery complete
[  158.799059][ T8825] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  158.933401][ T5875] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  158.937513][   T34] audit: type=1326 audit(1774153893.738:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.3.1067" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc759c799 code=0x7ffc0000
[  158.952926][   T34] audit: type=1326 audit(1774153893.738:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.3.1067" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f9bc759c799 code=0x7ffc0000
[  158.961833][   T34] audit: type=1326 audit(1774153893.738:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.3.1067" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc759c799 code=0x7ffc0000
[  158.969194][   T34] audit: type=1326 audit(1774153893.738:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.3.1067" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f9bc759c799 code=0x7ffc0000
[  158.978138][   T34] audit: type=1326 audit(1774153893.738:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.3.1067" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc759c799 code=0x7ffc0000
[  158.987200][   T34] audit: type=1326 audit(1774153893.738:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.3.1067" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bc759c799 code=0x7ffc0000
[  158.996353][   T34] audit: type=1326 audit(1774153893.738:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.3.1067" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc759c799 code=0x7ffc0000
[  159.005220][   T34] audit: type=1326 audit(1774153893.738:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.3.1067" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc759c799 code=0x7ffc0000
[  159.013769][   T34] audit: type=1326 audit(1774153893.738:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.3.1067" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f9bc759c799 code=0x7ffc0000
[  159.022995][   T34] audit: type=1326 audit(1774153893.738:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8830 comm="syz.3.1067" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9bc759c799 code=0x7ffc0000
[  159.076283][ T5875] usb 5-1: Using ep0 maxpacket: 16
[  159.090093][ T5875] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  159.094053][ T5875] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  159.099669][ T5875] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  159.102824][ T5875] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  159.106852][ T5875] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 255
[  159.111958][ T5875] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  159.115566][ T5875] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  159.121808][ T5875] usb 5-1: SerialNumber: syz
[  159.131747][ T5875] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[  159.138906][ T5875] cdc_acm 5-1:1.0: This needs exactly 3 endpoints
[  159.141083][ T5875] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -22
[  159.397965][ T5875] usb 5-1: USB disconnect, device number 10
[  159.590460][ T5848] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  159.772990][ T5848] usb 4-1: config index 0 descriptor too short (expected 149, got 148)
[  159.775737][ T5848] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  159.778834][ T5848] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  159.783725][ T5848] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  159.787015][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  159.789805][ T5848] usb 4-1: SerialNumber: syz
[  159.797817][ T5848] usb 4-1: 0:2 : does not exist
[  159.998342][ T5848] usb 4-1: USB disconnect, device number 10
[  160.205013][   T24] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  160.352804][   T24] usb 5-1: Using ep0 maxpacket: 8
[  160.356763][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  160.360833][   T24] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  160.365160][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.370439][   T24] usb 5-1: config 0 descriptor??
[  160.377560][   T24] gspca_main: vc032x-2.14.0 probing 046d:0892
[  161.644636][ T8863] loop3: detected capacity change from 0 to 256
[  161.652807][ T8863] exfat: Deprecated parameter 'namecase'
[  161.669972][ T8863] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  161.862451][ T8868] loop3: detected capacity change from 0 to 4096
[  161.875538][ T8868] ntfs3(loop3): Different NTFS sector size (2048) and media sector size (512).
[  162.034820][   T24] gspca_vc032x: reg_w err -71
[  162.039185][   T24] vc032x 5-1:0.0: probe with driver vc032x failed with error -71
[  162.045439][   T24] usb 5-1: USB disconnect, device number 11
[  163.849433][ T8902] loop3: detected capacity change from 0 to 32768
[  163.859266][ T8902] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1096 (8902)
[  163.878774][ T8902] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  163.884812][ T8902] BTRFS info (device loop3): using sha256 checksum algorithm
[  163.924458][ T8902] BTRFS info (device loop3): enabling ssd optimizations
[  163.926764][ T8902] BTRFS info (device loop3): turning on async discard
[  163.929251][ T8902] BTRFS info (device loop3): enabling free space tree
[  164.021912][ T6115] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  164.604891][ T8931] loop2: detected capacity change from 0 to 131072
[  164.609796][ T8931] F2FS-fs (loop2): invalid crc value
[  164.666455][ T8931] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  164.671459][ T8931] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  164.946892][ T8955] loop3: detected capacity change from 0 to 164
[  164.960015][ T8955] Unable to read rock-ridge attributes
[  164.967962][ T8953] loop4: detected capacity change from 0 to 32768
[  164.982054][ T8955] Unable to read rock-ridge attributes
[  164.997588][ T8953] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  165.018571][ T8953] XFS (loop4): Ending clean mount
[  165.033376][ T8953] XFS (loop4): Quotacheck needed: Please wait.
[  165.091629][ T8953] XFS (loop4): Quotacheck: Done.
[  165.145426][ T7671] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  165.675418][ T8976] loop2: detected capacity change from 0 to 32768
[  165.715428][ T8976] XFS (loop2): alignment check failed: sunit/swidth vs. blocksize(4096)
[  165.976646][ T8993] loop2: detected capacity change from 0 to 1024
[  166.000001][ T8993] hfsplus: Filesystem is marked locked, mounting read-only.
[  166.013079][ T8993] hfsplus: invalid catalog entry type in lookup
[  166.131206][ T8995] loop4: detected capacity change from 0 to 512
[  166.161160][ T8995] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  166.170619][ T8995] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  166.179920][ T8995] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  166.190433][ T8995] System zones: 0-2, 18-18, 34-35
[  166.194553][ T8995] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  166.321453][ T7671] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.547906][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1124'.
[  166.580032][ T7701] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  166.580165][ T9002] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1124'.
[  166.585301][ T7701] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  166.610093][ T7701] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  166.612833][ T7701] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  166.630462][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1124'.
[  166.659940][ T9002] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1124'.
[  166.889082][ T9006] loop2: detected capacity change from 0 to 32768
[  166.893213][ T9006] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1127 (9006)
[  166.923792][ T9006] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  166.936142][ T9006] BTRFS info (device loop2): using sha256 checksum algorithm
[  166.990692][ T9006] BTRFS info (device loop2): enabling ssd optimizations
[  166.993512][ T9006] BTRFS info (device loop2): turning on async discard
[  166.996257][ T9006] BTRFS info (device loop2): enabling free space tree
[  167.219365][ T5875] usb 4-1: new full-speed USB device number 11 using dummy_hcd
[  167.392744][ T5875] usb 4-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  167.395656][ T5875] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.401172][ T5875] usb 4-1: config 0 descriptor??
[  167.610198][ T5875] udl 4-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  167.719613][ T5808] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  167.804021][ T5875] [drm:udl_init] *ERROR* Selecting channel failed
[  167.828472][ T5875] [drm] Initialized udl 0.0.1 for 4-1:0.0 on minor 3
[  167.844716][ T5875] [drm] Initialized udl on minor 3
[  167.854087][ T5875] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  167.870886][ T5875] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  167.884468][ T5815] udl 4-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  167.900950][ T9039] netlink: 'syz.2.1135': attribute type 10 has an invalid length.
[  167.904001][ T9039] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1135'.
[  167.910019][ T5875] usb 4-1: USB disconnect, device number 11
[  167.916550][ T5815] udl 4-1:0.0: [drm] Cannot find any crtc or sizes
[  167.918454][ T9039] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  168.110785][ T9056] loop4: detected capacity change from 0 to 512
[  168.138858][ T9056] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  168.142160][ T9056] EXT4-fs (loop4): orphan cleanup on readonly fs
[  168.157448][ T9056] __quota_error: 23 callbacks suppressed
[  168.157458][ T9056] Quota error (device loop4): dq_insert_tree: Quota tree root isn't allocated!
[  168.162791][ T9056] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota
[  168.166517][ T9056] EXT4-fs error (device loop4): ext4_acquire_dquot:7001: comm syz.4.1143: Failed to acquire dquot type 1
[  168.170122][ T9056] loop4: lost filesystem error report for type 5 error -5
[  168.171980][    C0] EXT4-fs (loop4): error count since last fsck: 1
[  168.176363][    C0] EXT4-fs (loop4): initial error at time 1774153903: ext4_acquire_dquot:7001
[  168.179058][    C0] EXT4-fs (loop4): last error at time 1774153903: ext4_acquire_dquot:7001
[  168.192419][ T9056] EXT4-fs (loop4): Remounting filesystem read-only
[  168.194760][ T9056] EXT4-fs (loop4): 1 truncate cleaned up
[  168.204389][ T9056] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  168.255906][ T7671] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.485910][ T9083] netlink: 'syz.3.1154': attribute type 6 has an invalid length.
[  168.491393][ T9083] netlink: 'syz.3.1154': attribute type 6 has an invalid length.
[  168.602192][ T9089] [U] v3f"S/4:XTzWtlW=
[  168.604987][ T9089] [U] J"e:"
[  169.204807][ T9111] loop3: detected capacity change from 0 to 1024
[  169.211893][ T9111] hfsplus: failed to load catalog file
[  169.333890][   T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  169.479477][   T24] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  169.482703][   T24] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  169.489382][   T24] usb 5-1: New USB device found, idVendor=2a39, idProduct=3f8c, bcdDevice=94.24
[  169.492406][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.494867][   T24] usb 5-1: Product: syz
[  169.497231][   T24] usb 5-1: Manufacturer: syz
[  169.499778][   T24] usb 5-1: SerialNumber: syz
[  169.518883][   T24] usb 5-1: config 0 descriptor??
[  169.553496][ T5848] usb 4-1: new full-speed USB device number 12 using dummy_hcd
[  169.697134][ T5848] usb 4-1: config 1 has an invalid interface number: 236 but max is 0
[  169.705170][ T5848] usb 4-1: config 1 has no interface number 0
[  169.707486][ T5848] usb 4-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=53.4b
[  169.714709][ T5848] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  169.725958][ T5848] rndis_host 4-1:1.236: skipping garbage
[  169.727765][ T5848] rndis_host 4-1:1.236: More than one union descriptor, skipping ...
[  169.740626][ T5848] usb 4-1: bad CDC descriptors
[  169.742807][ T5848] cdc_acm 4-1:1.236: skipping garbage
[  169.745106][ T5848] cdc_acm 4-1:1.236: More than one union descriptor, skipping ...
[  169.767687][ T9106] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1162'.
[  169.918507][   T24] usb 4-1: USB disconnect, device number 12
[  169.938183][ T5875] usb 5-1: USB disconnect, device number 12
[  170.132451][ T9117] loop2: detected capacity change from 0 to 32768
[  170.150486][ T9117] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  170.168191][ T9117] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  170.177659][ T9117] XFS (loop2): Starting recovery (logdev: internal)
[  170.192079][ T9117] XFS (loop2): Ending recovery (logdev: internal)
[  170.217200][ T5808] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  170.413861][ T9131] loop2: detected capacity change from 0 to 512
[  170.439615][ T9131] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.451327][ T9131] ext4 filesystem being mounted at /413/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.509138][ T9131] EXT4-fs error (device loop2): __ext4_remount:6804: comm syz.2.1171: Abort forced by user
[  170.513187][ T9131] EXT4-fs (loop2): Remounting filesystem read-only
[  170.522803][ T9131] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  170.564713][ T5808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.670940][ T9146] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1178'.
[  170.736950][ T5810] Bluetooth: hci1: command tx timeout
[  171.003171][ T9166] syzkaller0: entered promiscuous mode
[  171.004851][ T9166] syzkaller0: entered allmulticast mode
[  171.131301][ T9168] bridge0: port 3(dummy0) entered blocking state
[  171.133577][ T9168] bridge0: port 3(dummy0) entered forwarding state
[  171.138273][ T9168] team0: Port device bridge0 added
[  171.412069][ T9178] input: syz1 as /devices/virtual/input/input14
[  171.819888][ T9195] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  171.825263][ T9195] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior.
[  171.855578][ T9195] overlayfs: conflicting lowerdir path
[  172.090818][ T9205] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  172.278961][ T9214] loop2: detected capacity change from 0 to 32768
[  172.284586][ T9214] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  172.301943][ T9214] XFS (loop2): Ending clean mount
[  172.306175][ T9214] XFS (loop2): Quotacheck needed: Please wait.
[  172.330228][ T9214] XFS (loop2): Quotacheck: Done.
[  172.384340][ T5808] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  172.426948][ T9212] loop4: detected capacity change from 0 to 32768
[  172.443784][ T9212] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  172.481980][ T9212] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[  172.498204][ T9212] XFS (loop4): Starting recovery (logdev: internal)
[  172.524383][ T9212] XFS (loop4): Ending recovery (logdev: internal)
[  172.548062][ T7671] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  172.955970][ T9258] loop3: detected capacity change from 0 to 512
[  172.970713][ T9258] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  173.018062][ T6115] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.314833][   T24] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  173.322266][ T9264] loop2: detected capacity change from 0 to 32768
[  173.380113][ T9264] jbd2_journal_init_inode: Cannot locate journal superblock
[  173.385610][ T9264] (syz.2.1221,9264,0):ocfs2_journal_init:963 ERROR: Linux journal layer error
[  173.389158][ T9264] (syz.2.1221,9264,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  173.409728][ T9264] (syz.2.1221,9264,0):ocfs2_check_volume:2432 ERROR: status = -22
[  173.413578][ T9264] (syz.2.1221,9264,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  173.418147][ T9264] (syz.2.1221,9264,0):ocfs2_fill_super:1177 ERROR: status = -22
[  173.457547][   T24] usb 4-1: Using ep0 maxpacket: 8
[  173.460554][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[  173.463335][   T24] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB3, changing to 0x83
[  173.471674][   T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  173.480801][   T24] usb 4-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.01
[  173.492082][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.505312][   T24] usb 4-1: Product: syz
[  173.508591][   T24] usb 4-1: Manufacturer: syz
[  173.510922][   T24] usb 4-1: SerialNumber: syz
[  173.521457][   T24] usb 4-1: config 0 descriptor??
[  173.530802][   T24] radioshark 4-1:0.0: Invalid radioSHARK device
[  173.533300][   T24] radioshark 4-1:0.0: probe with driver radioshark failed with error -22
[  173.538439][ T9276] loop4: detected capacity change from 0 to 4096
[  173.538541][   T24] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  173.582331][ T9277] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  173.611338][   T34] audit: type=1800 audit(1774153909.141:91): pid=9276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1226" name="file2" dev="loop4" ino=16 res=0 errno=0
[  173.733242][   T33] usb 4-1: USB disconnect, device number 13
[  173.821988][ T9288] loop4: detected capacity change from 0 to 64
[  173.967526][ T9294] sctp: [Deprecated]: syz.4.1233 (pid 9294) Use of struct sctp_assoc_value in delayed_ack socket option.
[  173.967526][ T9294] Use struct sctp_sack_info instead
[  174.994106][ T9340] loop3: detected capacity change from 0 to 256
[  175.009207][ T9340] FAT-fs (loop3): bogus sectors per cluster 0
[  175.025741][ T9340] FAT-fs (loop3): Can't find a valid FAT filesystem
[  177.069877][ T9384] loop2: detected capacity change from 0 to 32768
[  177.091707][ T9384] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1272 (9384)
[  177.103025][ T9384] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  177.115950][ T9384] BTRFS info (device loop2): using crc32c checksum algorithm
[  177.151303][ T9384] BTRFS info (device loop2): enabling ssd optimizations
[  177.161302][ T9415] hugetlbfs: Bad value '%' for mount option 'size'
[  177.161302][ T9415] 
[  177.164254][ T9384] BTRFS info (device loop2): turning on flush-on-commit
[  177.166508][ T9384] BTRFS info (device loop2): enabling free space tree
[  177.168808][ T9384] BTRFS info (device loop2): enabling auto defrag
[  177.177020][ T9384] BTRFS info (device loop2): use lzo compression, level 1
[  177.183208][ T9384] BTRFS info (device loop2): max_inline set to 4096
[  177.377907][ T5808] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  177.501278][ T9431] netlink: set zone limit has 4 unknown bytes
[  177.800606][ T5815] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  177.917174][ T9447] loop2: detected capacity change from 0 to 32768
[  177.921223][ T9447] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1295 (9447)
[  177.939336][ T9447] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  177.947097][ T9447] BTRFS info (device loop2): using sha256 checksum algorithm
[  177.972630][ T5815] usb 4-1: Using ep0 maxpacket: 32
[  177.984136][ T5815] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  177.988226][ T5815] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  177.998373][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.000938][ T9449] loop4: detected capacity change from 0 to 32768
[  178.005525][ T5815] usb 4-1: config 0 descriptor??
[  178.018925][ T5815] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  178.043028][ T9447] BTRFS info (device loop2): enabling ssd optimizations
[  178.045500][ T9447] BTRFS info (device loop2): turning on async discard
[  178.053187][ T9447] BTRFS info (device loop2): enabling free space tree
[  178.148698][ T7701] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  178.181536][ T5808] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  178.223129][   T33] usb 4-1: USB disconnect, device number 14
[  178.812941][ T9481] loop4: detected capacity change from 0 to 40427
[  178.816740][ T9481] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  178.821825][ T9481] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  178.825755][ T9481] F2FS-fs (loop4): invalid crc value
[  178.899135][ T9481] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  178.909069][ T9481] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  178.914978][ T9481] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  178.955404][ T5875] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  178.961930][ T7671] syz-executor: attempt to access beyond end of device
[  178.961930][ T7671] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  178.970607][ T7671] CPU: 0 UID: 0 PID: 7671 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  178.970647][ T7671] Tainted: [L]=SOFTLOCKUP
[  178.970652][ T7671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.970659][ T7671] Call Trace:
[  178.970665][ T7671]  <TASK>
[  178.970670][ T7671]  dump_stack_lvl+0xe8/0x150
[  178.970692][ T7671]  f2fs_handle_critical_error+0x37c/0x540
[  178.970713][ T7671]  f2fs_write_end_io+0xcdb/0xff0
[  178.970744][ T7671]  __submit_merged_bio+0x256/0x700
[  178.970764][ T7671]  __submit_merged_write_cond+0x3c9/0x4e0
[  178.970785][ T7671]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  178.970818][ T7671]  f2fs_write_data_pages+0x2975/0x35e0
[  178.970861][ T7671]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  178.970887][ T7671]  ? css_rstat_updated+0x23a/0x530
[  178.970918][ T7671]  ? rcu_is_watching+0x15/0xb0
[  178.970936][ T7671]  ? mod_memcg_lruvec_state+0x1a7/0x360
[  178.970956][ T7671]  ? lru_gen_update_size+0x7c9/0xd10
[  178.970985][ T7671]  ? __lock_acquire+0x6b5/0x2cf0
[  178.971017][ T7671]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  178.971035][ T7671]  do_writepages+0x32e/0x550
[  178.971060][ T7671]  ? do_raw_spin_unlock+0x4d/0x210
[  178.971076][ T7671]  filemap_fdatawrite+0x1e9/0x2f0
[  178.971096][ T7671]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  178.971147][ T7671]  ? do_raw_spin_unlock+0x4d/0x210
[  178.971169][ T7671]  f2fs_sync_dirty_inodes+0x30e/0x860
[  178.971199][ T7671]  f2fs_write_checkpoint+0x9df/0x26a0
[  178.971241][ T7671]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  178.971289][ T7671]  ? kfree+0x1c1/0x630
[  178.971300][ T7671]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  178.971319][ T7671]  kill_f2fs_super+0x314/0x720
[  178.971341][ T7671]  ? __pfx_kill_f2fs_super+0x10/0x10
[  178.971368][ T7671]  ? lockdep_hardirqs_on+0x7a/0x110
[  178.971393][ T7671]  deactivate_locked_super+0xbc/0x130
[  178.971437][ T7671]  cleanup_mnt+0x437/0x4d0
[  178.971452][ T7671]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.971466][ T7671]  task_work_run+0x1d9/0x270
[  178.971482][ T7671]  ? __pfx_task_work_run+0x10/0x10
[  178.971503][ T7671]  exit_to_user_mode_loop+0xed/0x480
[  178.971516][ T7671]  ? rcu_is_watching+0x15/0xb0
[  178.971536][ T7671]  do_syscall_64+0x32d/0xf80
[  178.971548][ T7671]  ? trace_irq_disable+0x3b/0x150
[  178.971564][ T7671]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.971581][ T7671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.971593][ T7671] RIP: 0033:0x7f3741b9d9d7
[  178.971605][ T7671] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  178.971615][ T7671] RSP: 002b:00007fff39128088 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  178.971629][ T7671] RAX: 0000000000000000 RBX: 00007f3741c32050 RCX: 00007f3741b9d9d7
[  178.971638][ T7671] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff39128140
[  178.971645][ T7671] RBP: 00007fff39128140 R08: 00007fff39129140 R09: 00000000ffffffff
[  178.971652][ T7671] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff391291d0
[  178.971660][ T7671] R13: 00007f3741c32050 R14: 000000000002c8be R15: 00007fff39129210
[  178.971681][ T7671]  </TASK>
[  179.078760][ T7671] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  179.234701][ T5875] usb 3-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  179.238788][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.241704][ T5875] usb 3-1: Product: syz
[  179.243324][ T5875] usb 3-1: Manufacturer: syz
[  179.244800][ T5875] usb 3-1: SerialNumber: syz
[  179.247452][ T5875] usb 3-1: config 0 descriptor??
[  179.252685][ T5875] gspca_main: sq905c-2.14.0 probing 2770:9052
[  179.343289][ T5815] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  179.457548][  T884] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  179.496499][ T5815] usb 4-1: Using ep0 maxpacket: 32
[  179.501369][ T5815] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  179.509865][ T5815] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  179.514260][ T5815] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  179.518157][ T5815] usb 4-1: Product: syz
[  179.522201][ T5815] usb 4-1: Manufacturer: syz
[  179.525138][ T5815] usb 4-1: SerialNumber: syz
[  179.531154][ T5815] usb 4-1: config 0 descriptor??
[  179.619556][  T884] usb 5-1: Using ep0 maxpacket: 32
[  179.625753][  T884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.630118][  T884] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.634052][  T884] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  179.637476][  T884] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.642498][  T884] usb 5-1: config 0 descriptor??
[  179.646550][  T884] hub 5-1:0.0: USB hub found
[  179.729817][   T33] usb 4-1: USB disconnect, device number 15
[  179.831963][ T5875] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  179.835239][ T5875] sq905c 3-1:0.0: probe with driver sq905c failed with error -71
[  179.842662][  T884] hub 5-1:0.0: 9 ports detected
[  179.849503][ T5875] usb 3-1: USB disconnect, device number 17
[  179.852110][  T884] hub 5-1:0.0: insufficient power available to use all downstream ports
[  180.033914][  T884] hub 5-1:0.0: hub_hub_status failed (err = -71)
[  180.036482][  T884] hub 5-1:0.0: config failed, can't get hub status (err -71)
[  180.041442][  T884] usbhid 5-1:0.0: can't add hid device: -71
[  180.043335][  T884] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  180.067633][  T884] usb 5-1: USB disconnect, device number 13
[  180.677091][ T5875] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  180.816101][ T9527] loop4: detected capacity change from 0 to 40427
[  180.824691][ T9527] F2FS-fs: heap/no_heap options were deprecated
[  180.827199][ T9527] F2FS-fs (loop4): build fault injection rate: 19
[  180.829498][ T9527] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  180.832075][ T5875] usb 3-1: config 0 has an invalid interface number: 255 but max is 0
[  180.834821][ T5875] usb 3-1: config 0 has no interface number 0
[  180.836931][ T5875] usb 3-1: too many endpoints for config 0 interface 255 altsetting 255: 255, using maximum allowed: 30
[  180.841025][ T9527] F2FS-fs (loop4): invalid crc value
[  180.843106][ T5875] usb 3-1: config 0 interface 255 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255
[  180.847850][ T5875] usb 3-1: config 0 interface 255 has no altsetting 0
[  180.850982][ T5875] usb 3-1: New USB device found, idVendor=0bda, idProduct=0177, bcdDevice=7d.0b
[  180.858433][ T9527] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_build_free_nids+0x9d8/0x1810
[  180.863480][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.877632][ T5875] usb 3-1: config 0 descriptor??
[  180.881607][ T5875] ums-realtek 3-1:0.255: USB Mass Storage device detected
[  180.904499][ T9527] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x221/0x410
[  180.910151][ T9527] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  180.913574][ T9527] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  180.939510][ T9527] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_get_dnode_of_data+0x911/0x2060
[  180.945580][ T9527] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3ad/0xd80
[  180.951156][ T9527] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x3ad/0xd80
[  180.957958][ T9527] F2FS-fs (loop4): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8b5/0xe90
[  180.963778][ T9527] F2FS-fs (loop4): inconsistent node block, node_type:3, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0]
[  180.998494][ T7671] F2FS-fs (loop4): inject inconsistent footer in f2fs_sanity_check_node_footer of __get_node_folio+0x8b5/0xe90
[  181.003522][ T7671] F2FS-fs (loop4): inconsistent node block, node_type:1, nid:17, node_footer[nid:17,ino:17,ofs:0,cpver:0,blkaddr:0]
[  181.010759][ T7671] CPU: 0 UID: 0 PID: 7671 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  181.010774][ T7671] Tainted: [L]=SOFTLOCKUP
[  181.010776][ T7671] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  181.010782][ T7671] Call Trace:
[  181.010785][ T7671]  <TASK>
[  181.010789][ T7671]  dump_stack_lvl+0xe8/0x150
[  181.010803][ T7671]  f2fs_handle_critical_error+0x37c/0x540
[  181.010815][ T7671]  f2fs_write_inode+0x3ba/0x5f0
[  181.010825][ T7671]  __writeback_single_inode+0x75a/0x11a0
[  181.010838][ T7671]  writeback_single_inode+0x4ac/0xdc0
[  181.010848][ T7671]  sync_inode_metadata+0x122/0x1d0
[  181.010857][ T7671]  ? __pfx_sync_inode_metadata+0x10/0x10
[  181.010880][ T7671]  ? do_raw_spin_unlock+0x4d/0x210
[  181.010890][ T7671]  f2fs_write_checkpoint+0xb93/0x26a0
[  181.010913][ T7671]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  181.010940][ T7671]  kill_f2fs_super+0x314/0x720
[  181.010953][ T7671]  ? __pfx_kill_f2fs_super+0x10/0x10
[  181.010967][ T7671]  ? lockdep_hardirqs_on+0x7a/0x110
[  181.010980][ T7671]  deactivate_locked_super+0xbc/0x130
[  181.010991][ T7671]  cleanup_mnt+0x437/0x4d0
[  181.010999][ T7671]  ? _raw_spin_unlock_irq+0x23/0x50
[  181.011007][ T7671]  task_work_run+0x1d9/0x270
[  181.011016][ T7671]  ? __pfx_task_work_run+0x10/0x10
[  181.011028][ T7671]  exit_to_user_mode_loop+0xed/0x480
[  181.011040][ T7671]  ? rcu_is_watching+0x15/0xb0
[  181.011056][ T7671]  do_syscall_64+0x32d/0xf80
[  181.011067][ T7671]  ? trace_irq_disable+0x3b/0x150
[  181.011080][ T7671]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.011093][ T7671]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  181.011103][ T7671] RIP: 0033:0x7f3741b9d9d7
[  181.011113][ T7671] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  181.011122][ T7671] RSP: 002b:00007fff39128088 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  181.011135][ T7671] RAX: 0000000000000000 RBX: 00007f3741c32050 RCX: 00007f3741b9d9d7
[  181.011141][ T7671] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff39128140
[  181.011154][ T7671] RBP: 00007fff39128140 R08: 00007fff39129140 R09: 00000000ffffffff
[  181.011161][ T7671] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff391291d0
[  181.011167][ T7671] R13: 00007f3741c32050 R14: 000000000002d10b R15: 00007fff39129210
[  181.011184][ T7671]  </TASK>
[  181.011189][ T7671] F2FS-fs (loop4): Stopped filesystem due to reason: 5
[  181.085369][   T33] usb 3-1: USB disconnect, device number 18
[  181.247887][ T9535] loop4: detected capacity change from 0 to 1024
[  181.272079][ T1095] hfsplus: b-tree write err: -5, ino 25
[  181.274814][ T1095] hfsplus: b-tree write err: -5, ino 4
[  181.277068][ T1095] hfsplus: b-tree write err: -5, ino 2
[  181.279535][ T1095] hfsplus: b-tree write err: -5, ino 17
[  181.300365][ T9537] program syz.4.1324 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  182.315859][ T5197] Bluetooth: hci0: command 0x0406 tx timeout
[  183.120331][ T9578] syz.2.1341 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[  183.288760][ T9513] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  183.521608][ T9588] loop4: detected capacity change from 0 to 32768
[  183.569849][ T9599] loop3: detected capacity change from 0 to 2048
[  183.608165][ T9599] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.617018][ T9599] ext4 filesystem being mounted at /445/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  183.684381][ T6115] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.785543][ T9612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1355'.
[  183.957992][ T9624] netlink: 200 bytes leftover after parsing attributes in process `syz.4.1362'.
[  184.036374][ T9616] loop3: detected capacity change from 0 to 32768
[  184.045075][ T9616] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  184.055157][ T9616] XFS (loop3): Ending clean mount
[  184.107762][ T6115] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  184.812394][   T24] libceph: connect (1)[c::]:6789 error -101
[  184.817139][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  184.919570][   T33] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  185.057896][   T33] usb 4-1: Using ep0 maxpacket: 32
[  185.064590][   T33] usb 4-1: unable to get BOS descriptor or descriptor too short
[  185.068771][ T5848] libceph: connect (1)[c::]:6789 error -101
[  185.071700][   T33] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 1536, setting to 1024
[  185.076877][ T5848] libceph: mon0 (1)[c::]:6789 connect error
[  185.085196][   T33] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8C has invalid maxpacket 1024
[  185.090928][   T33] usb 4-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  185.094500][   T33] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.105706][   T33] usb 4-1: Product: syz
[  185.107483][   T33] usb 4-1: Manufacturer: syz
[  185.109415][   T33] usb 4-1: SerialNumber: syz
[  185.117611][ T9669] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  185.290865][ T9671] ceph: No mds server is up or the cluster is laggy
[  185.378577][   T33] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  185.381384][   T33] usb 4-1: MIDIStreaming interface descriptor not found
[  185.423169][ T9678] loop4: detected capacity change from 0 to 4096
[  185.426430][ T9678] EXT4-fs: inline encryption not supported
[  185.430109][ T9678] EXT4-fs (loop4): Test dummy encryption mode enabled
[  185.433734][   T33] usb 4-1: USB disconnect, device number 16
[  185.438028][ T9678] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  185.443769][ T9678] System zones: 0-5
[  185.447454][ T9678] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.472213][   T34] audit: type=1800 audit(1774153921.594:92): pid=9678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1378" name="file1" dev="loop4" ino=15 res=0 errno=0
[  185.511232][ T7563] udevd[7563]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  185.545577][ T7671] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.680534][ T9689] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1383'.
[  186.279257][ T9712] syz.3.1393 uses obsolete (PF_INET,SOCK_PACKET)
[  186.457075][ T9720] loop2: detected capacity change from 0 to 512
[  186.468579][ T9720] EXT4-fs (loop2): Invalid log block size: 32
[  186.604823][ T9727] tipc: Failed to remove unknown binding: 66,1,1/0:1669013212/1669013214
[  186.609938][ T9727] tipc: Failed to remove unknown binding: 66,1,1/0:1669013212/1669013214
[  186.614148][ T9727] tipc: Failed to remove unknown binding: 66,1,1/0:1669013212/1669013214
[  186.661979][ T9729] loop3: detected capacity change from 0 to 256
[  186.680569][ T9729] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x246dc941, utbl_chksum : 0xe619d30d)
[  186.763908][   T33] usb 3-1: new full-speed USB device number 19 using dummy_hcd
[  186.779691][ T9731] loop4: detected capacity change from 0 to 512
[  186.787454][ T9731] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  186.789910][ T9731] EXT4-fs (loop4): orphan cleanup on readonly fs
[  186.795124][ T9731] EXT4-fs warning (device loop4): ext4_enable_quotas:7236: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  186.805178][ T9731] EXT4-fs (loop4): Cannot turn on quotas: error -22
[  186.807727][ T9731] EXT4-fs error (device loop4): ext4_orphan_get:1391: inode #16: comm syz.4.1402: inode has both inline data and extents flags
[  186.814389][ T9731] loop4: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117
[  186.814651][ T9731] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.1402: couldn't read orphan inode 16 (err -117)
[  186.821464][    C1] EXT4-fs (loop4): error count since last fsck: 1
[  186.821476][    C1] EXT4-fs (loop4): initial error at time 1774153923: ext4_orphan_get:1391: inode 16
[  186.821489][    C1] EXT4-fs (loop4): last error at time 1774153923: ext4_orphan_get:1391: inode 16
[  186.831933][ T9731] loop4: lost filesystem error report for type 5 error -117
[  186.833004][ T9731] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  186.870077][ T9731] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  186.890035][ T7671] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.918457][   T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 10
[  186.923465][   T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  186.927447][   T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 10
[  186.931717][   T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  186.956403][   T33] usb 3-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13
[  186.960030][   T33] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.981635][   T33] usb 3-1: Product: syz
[  186.987049][   T33] usb 3-1: Manufacturer: syz
[  186.992030][   T33] usb 3-1: SerialNumber: syz
[  186.999926][   T33] usb 3-1: config 0 descriptor??
[  187.152253][ T9744] geneve2: entered allmulticast mode
[  187.200750][   T33] adutux 3-1:0.0: Could not retrieve serial number
[  187.203520][   T33] adutux 3-1:0.0: probe with driver adutux failed with error -5
[  187.392853][ T5875] usb 3-1: USB disconnect, device number 19
[  187.454418][ T9759] rtc_cmos 00:04: Alarms can be up to one day in the future
[  187.545747][ T9766] loop4: detected capacity change from 0 to 64
[  187.557090][ T9766] syz.4.1418: attempt to access beyond end of device
[  187.557090][ T9766] loop4: rw=8388608, sector=16777216, nr_sectors = 2 limit=64
[  187.565924][ T9766] Buffer I/O error on dev loop4, logical block 8388608, async page read
[  187.568724][ T9766] syz.4.1418: attempt to access beyond end of device
[  187.568724][ T9766] loop4: rw=8388608, sector=16777216, nr_sectors = 2 limit=64
[  187.575204][ T9766] Buffer I/O error on dev loop4, logical block 8388608, async page read
[  187.764409][ T9779] netlink: 'syz.4.1424': attribute type 62 has an invalid length.
[  187.902640][ T9790] loop3: detected capacity change from 0 to 164
[  187.990449][ T9797] loop2: detected capacity change from 0 to 512
[  187.993924][ T9797] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  187.999333][ T9797] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[  188.006566][ T9797] EXT4-fs (loop2): orphan cleanup on readonly fs
[  188.009560][ T9797] EXT4-fs error (device loop2): ext4_orphan_get:1417: comm syz.2.1432: bad orphan inode 3
[  188.014845][ T9797] loop2: lost filesystem error report for type 5 error -117
[  188.015169][ T9797] EXT4-fs (loop2): Remounting filesystem read-only
[  188.021207][    C0] EXT4-fs (loop2): error count since last fsck: 1
[  188.021223][    C0] EXT4-fs (loop2): initial error at time 1774153924: ext4_orphan_get:1417
[  188.021237][    C0] EXT4-fs (loop2): last error at time 1774153924: ext4_orphan_get:1417
[  188.031558][ T9797] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  188.056418][ T5808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  188.118246][   T33] rtc_cmos 00:04: Alarms can be up to one day in the future
[  188.126827][   T33] rtc_cmos 00:04: Alarms can be up to one day in the future
[  188.133832][   T33] rtc_cmos 00:04: Alarms can be up to one day in the future
[  188.142946][   T33] rtc_cmos 00:04: Alarms can be up to one day in the future
[  188.149417][   T33] rtc rtc0: __rtc_set_alarm: err=-22
[  188.393968][ T9805] loop2: detected capacity change from 0 to 40427
[  188.400275][ T9805] F2FS-fs (loop2): invalid crc value
[  188.431799][ T9805] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  188.435097][ T9805] F2FS-fs (loop2): Start checkpoint disabled!
[  188.440599][ T9805] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0
[  188.444248][ T9805] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  188.470007][ T9805] syz.2.1435: attempt to access beyond end of device
[  188.470007][ T9805] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  188.501399][ T7792] kworker/u10:11: attempt to access beyond end of device
[  188.501399][ T7792] loop2: rw=1, sector=45104, nr_sectors = 8 limit=40427
[  188.509659][ T7792] kworker/u10:11: attempt to access beyond end of device
[  188.509659][ T7792] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  188.515399][ T7792] CPU: 1 UID: 0 PID: 7792 Comm: kworker/u10:11 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  188.515422][ T7792] Tainted: [L]=SOFTLOCKUP
[  188.515427][ T7792] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  188.515435][ T7792] Workqueue: writeback wb_workfn (flush-7:2)
[  188.515455][ T7792] Call Trace:
[  188.515459][ T7792]  <TASK>
[  188.515463][ T7792]  dump_stack_lvl+0xe8/0x150
[  188.515475][ T7792]  f2fs_handle_critical_error+0x37c/0x540
[  188.515487][ T7792]  f2fs_write_end_io+0xcdb/0xff0
[  188.515504][ T7792]  __submit_merged_bio+0x256/0x700
[  188.515515][ T7792]  __submit_merged_write_cond+0x3c9/0x4e0
[  188.515526][ T7792]  ? __pfx___submit_merged_write_cond+0x10/0x10
[  188.515543][ T7792]  f2fs_write_data_pages+0x2975/0x35e0
[  188.515564][ T7792]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  188.515578][ T7792]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  188.515596][ T7792]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  188.515613][ T7792]  ? __lock_acquire+0x6b5/0x2cf0
[  188.515626][ T7792]  ? __pfx_f2fs_inode_chksum_set+0x10/0x10
[  188.515635][ T7792]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  188.515645][ T7792]  do_writepages+0x32e/0x550
[  188.515658][ T7792]  ? reacquire_held_locks+0x104/0x190
[  188.515667][ T7792]  ? writeback_sb_inodes+0x477/0x1a20
[  188.515678][ T7792]  __writeback_single_inode+0x133/0x11a0
[  188.515688][ T7792]  ? do_raw_spin_unlock+0x4d/0x210
[  188.515697][ T7792]  writeback_sb_inodes+0x992/0x1a20
[  188.515712][ T7792]  ? __lock_acquire+0x6b5/0x2cf0
[  188.515723][ T7792]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  188.515731][ T7792]  ? do_raw_spin_lock+0x12b/0x2f0
[  188.515751][ T7792]  ? rcu_is_watching+0x15/0xb0
[  188.515764][ T7792]  wb_writeback+0x456/0xb70
[  188.515774][ T7792]  ? queue_io+0x2c1/0x4a0
[  188.515787][ T7792]  ? __pfx_wb_writeback+0x10/0x10
[  188.515797][ T7792]  ? do_raw_spin_lock+0x12b/0x2f0
[  188.515827][ T7792]  wb_workfn+0x414/0xf50
[  188.515838][ T7792]  ? look_up_lock_class+0x57/0x110
[  188.515854][ T7792]  ? __pfx_wb_workfn+0x10/0x10
[  188.515863][ T7792]  ? do_raw_spin_lock+0x12b/0x2f0
[  188.515871][ T7792]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  188.515884][ T7792]  ? process_scheduled_works+0xa8d/0x18c0
[  188.515893][ T7792]  ? process_scheduled_works+0xa8d/0x18c0
[  188.515902][ T7792]  process_scheduled_works+0xb6e/0x18c0
[  188.515922][ T7792]  ? __pfx_process_scheduled_works+0x10/0x10
[  188.515933][ T7792]  ? assign_work+0x3d5/0x5e0
[  188.515943][ T7792]  worker_thread+0xa53/0xfc0
[  188.515962][ T7792]  kthread+0x388/0x470
[  188.515969][ T7792]  ? __pfx_worker_thread+0x10/0x10
[  188.515977][ T7792]  ? __pfx_kthread+0x10/0x10
[  188.515985][ T7792]  ret_from_fork+0x51e/0xb90
[  188.515995][ T7792]  ? __pfx_ret_from_fork+0x10/0x10
[  188.516003][ T7792]  ? __switch_to+0xc7d/0x1450
[  188.516012][ T7792]  ? __pfx_kthread+0x10/0x10
[  188.516019][ T7792]  ret_from_fork_asm+0x1a/0x30
[  188.516035][ T7792]  </TASK>
[  188.516381][ T7792] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  188.736726][   T34] audit: type=1326 audit(1774153925.027:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9812 comm="syz.2.1439" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd7e019c799 code=0x0
[  188.905744][ T9825] loop4: detected capacity change from 0 to 64
[  188.931988][ T9825] syz.4.1443: attempt to access beyond end of device
[  188.931988][ T9825] loop4: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[  188.978104][ T9823] loop3: detected capacity change from 0 to 40427
[  188.980860][ T9823] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  188.983423][ T9823] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  188.986628][ T9823] F2FS-fs (loop3): invalid crc value
[  189.020602][ T9823] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  189.026339][ T9823] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  189.029114][ T9823] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  189.277504][ T9823] syz.3.1442: attempt to access beyond end of device
[  189.277504][ T9823] loop3: rw=2049, sector=45096, nr_sectors = 8152 limit=40427
[  189.284946][ T9823] syz.3.1442: attempt to access beyond end of device
[  189.284946][ T9823] loop3: rw=2049, sector=45056, nr_sectors = 8 limit=40427
[  189.333646][ T9823] syz.3.1442: attempt to access beyond end of device
[  189.333646][ T9823] loop3: rw=2049, sector=57344, nr_sectors = 20480 limit=40427
[  189.350618][ T9823] syz.3.1442: attempt to access beyond end of device
[  189.350618][ T9823] loop3: rw=2049, sector=81920, nr_sectors = 3992 limit=40427
[  189.421382][ T6115] CPU: 1 UID: 0 PID: 6115 Comm: syz-executor Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  189.421397][ T6115] Tainted: [L]=SOFTLOCKUP
[  189.421400][ T6115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.421404][ T6115] Call Trace:
[  189.421408][ T6115]  <TASK>
[  189.421412][ T6115]  dump_stack_lvl+0xe8/0x150
[  189.421426][ T6115]  f2fs_handle_critical_error+0x37c/0x540
[  189.421439][ T6115]  f2fs_write_end_io+0xcdb/0xff0
[  189.421456][ T6115]  __submit_merged_bio+0x256/0x700
[  189.421468][ T6115]  f2fs_submit_merged_write+0x284/0x390
[  189.421479][ T6115]  ? __pfx_f2fs_submit_merged_write+0x10/0x10
[  189.421493][ T6115]  f2fs_sync_node_pages+0x14bf/0x1680
[  189.421508][ T6115]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  189.421532][ T6115]  f2fs_write_checkpoint+0xeb8/0x26a0
[  189.421554][ T6115]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  189.421582][ T6115]  kill_f2fs_super+0x314/0x720
[  189.421594][ T6115]  ? __pfx_kill_f2fs_super+0x10/0x10
[  189.421609][ T6115]  ? lockdep_hardirqs_on+0x7a/0x110
[  189.421622][ T6115]  deactivate_locked_super+0xbc/0x130
[  189.421633][ T6115]  cleanup_mnt+0x437/0x4d0
[  189.421641][ T6115]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.421649][ T6115]  task_work_run+0x1d9/0x270
[  189.421659][ T6115]  ? __pfx_task_work_run+0x10/0x10
[  189.421670][ T6115]  exit_to_user_mode_loop+0xed/0x480
[  189.421685][ T6115]  ? rcu_is_watching+0x15/0xb0
[  189.421696][ T6115]  do_syscall_64+0x32d/0xf80
[  189.421704][ T6115]  ? trace_irq_disable+0x3b/0x150
[  189.421713][ T6115]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.421722][ T6115]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  189.421729][ T6115] RIP: 0033:0x7f9bc759d9d7
[  189.421737][ T6115] Code: a2 c7 05 1c fd 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  189.421743][ T6115] RSP: 002b:00007ffcec154228 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  189.421752][ T6115] RAX: 0000000000000000 RBX: 00007f9bc7632050 RCX: 00007f9bc759d9d7
[  189.421757][ T6115] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcec1542e0
[  189.421761][ T6115] RBP: 00007ffcec1542e0 R08: 00007ffcec1552e0 R09: 00000000ffffffff
[  189.421766][ T6115] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffcec155370
[  189.421770][ T6115] R13: 00007f9bc7632050 R14: 000000000002f37b R15: 00007ffcec1553b0
[  189.421781][ T6115]  </TASK>
[  189.421784][ T6115] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  189.846423][ T9844] loop3: detected capacity change from 0 to 1024
[  189.892222][  T188] hfsplus: b-tree write err: -5, ino 25
[  189.894158][  T188] hfsplus: b-tree write err: -5, ino 4
[  189.896347][  T188] hfsplus: b-tree write err: -5, ino 2
[  189.898243][  T188] hfsplus: b-tree write err: -5, ino 22
[  192.036307][ T9887] loop2: detected capacity change from 0 to 1024
[  192.515109][   T33] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  192.657977][   T33] usb 3-1: Using ep0 maxpacket: 16
[  192.661615][   T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  192.666015][   T33] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.670549][   T33] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  192.674376][   T33] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.682460][   T33] usb 3-1: config 0 descriptor??
[  192.913582][ T9898] loop4: detected capacity change from 0 to 32768
[  192.920606][ T9898] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  192.938863][ T9898] XFS (loop4): Ending clean mount
[  192.993155][ T7671] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  193.085312][   T33] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0
[  193.094619][   T33] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0
[  193.104656][   T33] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0
[  193.108041][   T33] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0
[  193.110723][   T33] corsair 0003:1B1C:1B02.0006: unknown main item tag 0x0
[  193.129454][   T33] corsair 0003:1B1C:1B02.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0
[  193.254498][ T9917] loop3: detected capacity change from 0 to 1024
[  193.277906][   T33] corsair 0003:1B1C:1B02.0006: Failed to get K90 initial state (error -71).
[  193.284633][   T33] usb 3-1: USB disconnect, device number 20
[  193.313993][ T9917] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  193.353175][ T6115] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  193.465330][ T9928] loop4: detected capacity change from 0 to 4096
[  193.476414][ T9928] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  193.484045][ T9928] ntfs3(loop4): ino=1a, mi_enum_attr
[  193.485901][ T9928] ntfs3(loop4): ino=1a, mi_enum_attr
[  193.490731][ T9928] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  193.507716][ T9928] ntfs3(loop4): ino=1a, mi_enum_attr
[  193.511296][ T9928] ntfs3(loop4): ino=1a, mi_enum_attr
[  193.705734][   T33] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  193.848461][   T33] usb 4-1: Using ep0 maxpacket: 32
[  193.864318][   T33] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  193.867703][   T33] usb 4-1: config 1 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[  193.871797][   T33] usb 4-1: config 1 interface 0 has no altsetting 0
[  193.879191][   T33] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  193.882006][   T33] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  193.884717][   T33] usb 4-1: SerialNumber: syz
[  193.890131][   T33] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  193.893065][   T33] cdc_acm 4-1:1.0: This needs exactly 3 endpoints
[  193.895413][   T33] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22
[  194.090019][   T33] usb 4-1: USB disconnect, device number 17
[  194.629665][ T9954] loop3: detected capacity change from 0 to 128
[  194.642182][ T9954] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  194.646722][ T9954] ext4 filesystem being mounted at /489/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  194.684652][ T6115] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  194.745777][ T9957] loop3: detected capacity change from 0 to 1764
[  194.754019][ T9957] iso9660: Corrupted directory entry in block 0 of inode 1920
[  194.930517][ T9967] netlink: 65039 bytes leftover after parsing attributes in process `syz.3.1499'.
[  194.976850][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.979563][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  195.181066][ T9985] loop4: detected capacity change from 0 to 128
[  195.196830][ T9985] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  195.208670][ T9985] hpfs: filesystem error: improperly stopped
[  195.210839][ T5815] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  195.216240][ T9985] hpfs: You really don't want any checks? You are crazy...
[  195.220497][ T9985] hpfs: hpfs_map_sector(): read error
[  195.222169][ T9985] hpfs: code page support is disabled
[  195.229768][ T9985] hpfs: hpfs_map_4sectors(): unaligned read
[  195.232093][ T9985] hpfs: hpfs_map_4sectors(): unaligned read
[  195.234131][ T9985] hpfs: filesystem error: unable to find root dir
[  195.401655][ T5815] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  195.405487][ T5815] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  195.420426][ T5815] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  195.430385][ T5815] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.610648][   T33] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  195.645654][ T5815] usb 4-1: usb_control_msg returned -32
[  195.647710][T10001] loop2: detected capacity change from 0 to 32768
[  195.647959][ T5815] usbtmc 4-1:16.0: can't read capabilities
[  195.661471][T10001] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  195.672727][T10001] XFS (loop2): Ending clean mount
[  195.678081][T10001] XFS (loop2): Quotacheck needed: Please wait.
[  195.702815][T10001] XFS (loop2): Quotacheck: Done.
[  195.736751][ T5808] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  195.769081][   T33] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  195.773135][   T33] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.784103][   T33] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  195.787557][   T33] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.790079][   T33] usb 5-1: Product: syz
[  195.791699][   T33] usb 5-1: Manufacturer: syz
[  195.793337][   T33] usb 5-1: SerialNumber: syz
[  195.817488][   T33] cdc_mbim 5-1:1.0: skipping garbage
[  195.819309][   T33] usb 5-1: selecting invalid altsetting 1
[  195.880383][T10011] loop2: detected capacity change from 0 to 256
[  195.887805][T10011] exFAT-fs (loop2): failed to test first cluster bit of root dir(5)
[  195.931912][T10013] loop2: detected capacity change from 0 to 1024
[  195.936523][T10013] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (51269!=20869)
[  195.940022][T10013] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  195.944842][T10013] EXT4-fs error (device loop2): ext4_get_journal_inode:5863: inode #32: comm syz.2.1518: iget: special inode unallocated
[  195.949682][T10013] loop2: lost file I/O error report for ino 32 type 5 pos 0x0 len 0x0 error -117
[  195.950079][T10013] EXT4-fs (loop2): Remounting filesystem read-only
[  195.953256][    C1] EXT4-fs (loop2): error count since last fsck: 1
[  195.953273][    C1] EXT4-fs (loop2): initial error at time 1774153932: ext4_get_journal_inode:5863: inode 32
[  195.953292][    C1] EXT4-fs (loop2): last error at time 1774153932: ext4_get_journal_inode:5863: inode 32
[  195.966513][T10013] EXT4-fs (loop2): no journal found
[  195.968329][T10013] EXT4-fs (loop2): can't get journal size
[  195.971332][T10013] EXT4-fs (loop2): filesystem is read-only
[  195.974733][T10013] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  196.013526][   T33] cdc_mbim 5-1:1.0: bind() failure
[  196.020107][   T33] usb 5-1: USB disconnect, device number 14
[  196.229428][ T5815] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  196.372356][ T5815] usb 3-1: Using ep0 maxpacket: 16
[  196.376519][ T5815] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  196.379825][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  196.384031][ T5815] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  196.387370][ T5815] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  196.390816][ T5815] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  196.396509][ T5815] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  196.399605][ T5815] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  196.402874][ T5815] usb 3-1: Manufacturer: syz
[  196.407325][ T5815] usb 3-1: config 0 descriptor??
[  196.658352][ T5815] rc_core: IR keymap rc-hauppauge not found
[  196.660834][ T5815] Registered IR keymap rc-empty
[  196.663059][ T5815] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.677158][ T5815] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.697488][ T5815] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  196.702590][ T5815] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input15
[  196.710030][ T5815] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.724898][ T5815] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.753374][ T5815] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.781847][ T5815] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.801028][ T5815] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.820133][ T5815] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.838964][ T5841] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  196.839093][ T5815] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.858662][ T5815] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.877251][ T5815] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.896216][ T5815] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  196.917524][ T5815] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  196.920789][ T5815] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  196.982301][ T5841] usb 5-1: Using ep0 maxpacket: 32
[  196.986450][ T5841] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  196.989698][ T5841] usb 5-1: config 0 has no interface number 0
[  196.997231][ T5841] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  197.000800][ T5841] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.004435][ T5841] usb 5-1: Product: syz
[  197.006139][ T5841] usb 5-1: Manufacturer: syz
[  197.008069][ T5841] usb 5-1: SerialNumber: syz
[  197.013548][ T5841] usb 5-1: config 0 descriptor??
[  197.042614][ T5815] usb 3-1: USB disconnect, device number 21
[  197.564027][ T5808] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.784225][ T5841] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  197.863709][   T33] usb 4-1: USB disconnect, device number 18
[  197.980209][ T5841] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  198.000474][ T5841] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  198.008602][ T5841] usb 5-1: USB disconnect, device number 15
[  198.080176][T10037] loop3: detected capacity change from 0 to 4096
[  198.105279][T10038] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  198.121735][   T34] audit: type=1800 audit(1774153934.876:94): pid=10037 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1527" name="file2" dev="loop3" ino=16 res=0 errno=0
[  198.249561][T10042] loop3: detected capacity change from 0 to 512
[  198.262644][T10042] EXT4-fs (loop3): 1 truncate cleaned up
[  198.272891][T10042] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.315846][ T6115] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.364222][  T884] libceph: connect (1)[c::]:6789 error -101
[  198.366405][  T884] libceph: mon0 (1)[c::]:6789 connect error
[  198.489720][T10052] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1531'.
[  198.492762][T10052] IPv6: NLM_F_CREATE should be specified when creating new route
[  198.498672][T10046] ceph: No mds server is up or the cluster is laggy
[  198.621707][T10059] overlayfs: failed to clone upperpath
[  198.805998][T10069] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  198.874887][T10063] loop3: detected capacity change from 0 to 32768
[  198.884904][T10075] dvmrp1: entered allmulticast mode
[  198.919945][T10063] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  198.943362][T10063] XFS (loop3): Ending clean mount
[  198.951100][T10063] XFS (loop3): Quotacheck needed: Please wait.
[  198.983244][T10063] XFS (loop3): Quotacheck: Done.
[  199.000978][ T6115] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  199.274082][T10094] loop3: detected capacity change from 0 to 32768
[  199.316015][T10099] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1549'.
[  199.321781][T10094] read_mapping_page failed!
[  199.329107][T10094] ERROR: (device loop3): txCommit: 
[  199.329107][T10094] 
[  199.376907][  T117] BUG at fs/jfs/jfs_txnmgr.c:932 assert(mp->nohomeok > 0)
[  199.379992][  T117] ------------[ cut here ]------------
[  199.383668][  T117] kernel BUG at fs/jfs/jfs_txnmgr.c:932!
[  199.399891][  T117] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  199.401923][  T117] CPU: 1 UID: 0 PID: 117 Comm: jfsCommit Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  199.405223][  T117] Tainted: [L]=SOFTLOCKUP
[  199.406581][  T117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  199.409707][  T117] RIP: 0010:txUnlock+0xdaf/0xdf0
[  199.411362][  T117] Code: c8 fd 90 0f 0b e8 11 62 66 fe 48 c7 c7 e0 63 0b 8c 48 c7 c6 d9 5f 0b 8c ba a4 03 00 00 48 c7 c1 e0 70 0b 8c e8 f2 7b c8 fd 90 <0f> 0b e8 ea 61 66 fe 48 c7 c7 e0 63 0b 8c 48 c7 c6 d9 5f 0b 8c ba
[  199.417251][  T117] RSP: 0018:ffffc900031b7c48 EFLAGS: 00010246
[  199.419218][  T117] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 21f975ce14688400
[  199.421856][  T117] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  199.424292][  T117] RBP: ffffc90002d0a0d8 R08: ffffc900031b79c7 R09: 1ffff92000636f38
[  199.426977][  T117] R10: dffffc0000000000 R11: fffff52000636f39 R12: dffffc0000000000
[  199.429688][  T117] R13: 1ffff1102f1f636a R14: ffff888178fb1b50 R15: 0000000000000000
[  199.432246][  T117] FS:  0000000000000000(0000) GS:ffff8882a9460000(0000) knlGS:0000000000000000
[  199.434990][  T117] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  199.436945][  T117] CR2: 00007ffcec153bd0 CR3: 00000001793a6000 CR4: 00000000000006f0
[  199.439608][  T117] Call Trace:
[  199.440911][  T117]  <TASK>
[  199.441872][  T117]  jfs_lazycommit+0x582/0xaa0
[  199.443464][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[  199.445091][  T117]  ? __pfx_default_wake_function+0x10/0x10
[  199.446930][  T117]  ? __kthread_parkme+0x7a/0x1f0
[  199.448495][  T117]  kthread+0x388/0x470
[  199.449773][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[  199.451558][  T117]  ? __pfx_kthread+0x10/0x10
[  199.453339][  T117]  ret_from_fork+0x51e/0xb90
[  199.455304][  T117]  ? __pfx_ret_from_fork+0x10/0x10
[  199.456915][  T117]  ? __switch_to+0xc7d/0x1450
[  199.458665][  T117]  ? __pfx_kthread+0x10/0x10
[  199.460427][  T117]  ret_from_fork_asm+0x1a/0x30
[  199.462259][  T117]  </TASK>
[  199.463288][  T117] Modules linked in:
[  199.465088][  T117] ---[ end trace 0000000000000000 ]---
[  199.470794][  T117] RIP: 0010:txUnlock+0xdaf/0xdf0
[  199.473204][  T117] Code: c8 fd 90 0f 0b e8 11 62 66 fe 48 c7 c7 e0 63 0b 8c 48 c7 c6 d9 5f 0b 8c ba a4 03 00 00 48 c7 c1 e0 70 0b 8c e8 f2 7b c8 fd 90 <0f> 0b e8 ea 61 66 fe 48 c7 c7 e0 63 0b 8c 48 c7 c6 d9 5f 0b 8c ba
[  199.481229][  T117] RSP: 0018:ffffc900031b7c48 EFLAGS: 00010246
[  199.483557][  T117] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 21f975ce14688400
[  199.486619][  T117] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  199.489985][  T117] RBP: ffffc90002d0a0d8 R08: ffffc900031b79c7 R09: 1ffff92000636f38
[  199.493100][  T117] R10: dffffc0000000000 R11: fffff52000636f39 R12: dffffc0000000000
[  199.495970][  T117] R13: 1ffff1102f1f636a R14: ffff888178fb1b50 R15: 0000000000000000
[  199.498896][  T117] FS:  0000000000000000(0000) GS:ffff8882a9460000(0000) knlGS:0000000000000000
[  199.501746][  T117] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  199.504321][  T117] CR2: 00007f3741c4eddd CR3: 00000001790d0000 CR4: 00000000000006f0
[  199.507382][  T117] Kernel panic - not syncing: Fatal exception
[  199.510242][  T117] Kernel Offset: disabled
[  199.511799][  T117] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:36:24  Registers:
info registers vcpu 0

CPU#0
RAX=000000000001d699 RBX=ffff888121023e40 RCX=0000000000000838 RDX=0000000000000000
RSI=000000000001d699 RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc90000007e48
R8 =ffffffff81b2cdd5 R9 =ffffffff9a2ba508 R10=0000000000000003 R11=ffffffff8173caf0
R12=0000000010000a10 R13=dffffc0000000000 R14=000000000001d699 R15=0000000000000020
RIP=ffffffff8174f8f9 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558640c500 ffffffff 00c00000
GS =0000 ffff88818de60000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555586427a28 CR3=00000001a5a26000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff93c543c8 RBX=00000000000003fd RCX=ffffffff93c54330 RDX=ffffffff96abdaa8
RSI=ffff8881779c6458 RDI=00000000000003fd RBP=b8cabe2dd40f98c9 RSP=ffffc9000652ee78
R8 =ffffc9000652ee40 R9 =0000000000000020 R10=ffff88816a0fd858 R11=ffffffff81a1f800
R12=ffffffff96a79c58 R13=ffff8881779c6458 R14=ffff8881779c57c0 R15=00000000000004c5
RIP=ffffffff81a1a5a1 RFL=00000082 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555558d8d500 ffffffff 00c00000
GS =0000 ffff8882a9460000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffcec153bd0 CR3=00000001793a6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
