last executing test programs:

1m23.102868942s ago: executing program 2 (id=63):
io_getevents(0x0, 0x0, 0x0, &(0x7f0000000000), 0x0)

1m23.10277112s ago: executing program 2 (id=65):
epoll_pwait(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000000), 0x0)

1m15.731871629s ago: executing program 2 (id=68):
r0 = socket(0x10, 0x803, 0x0)
r1 = socket(0x200000100000011, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x500, &(0x7f0000000580)={&(0x7f00000002c0)=@ipv6_newaddr={0x54, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r2}, [@IFA_LOCAL={0x14, 0x2, @local}, @IFA_CACHEINFO={0x14, 0x6, {0x0, 0xfffff001}}, @IFA_ADDRESS={0x14, 0x1, @remote}]}, 0x54}}, 0x0)

1m15.630874851s ago: executing program 2 (id=70):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

1m15.427785678s ago: executing program 2 (id=73):
r0 = openat$comedi(0xffffff9c, &(0x7f0000000040)='/dev/comedi2\x00', 0xa400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000140)={'dt2814\x00', [0xb013, 0x5, 0x0, 0x2, 0x8a3, 0x8f, 0x1007, 0x10, 0x1002, 0xffffffff, 0x200, 0x8, 0x10000009, 0x1, 0x5, 0x1, 0x8, 0x3, 0x9, 0x8e, 0x108, 0x3, 0x7, 0xa, 0x5, 0x1, 0xb0c4, 0xc, 0x8, 0x400002, 0x2]})
syz_open_dev$usbfs(0x0, 0x76, 0x103381)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
io_setup(0x8, &(0x7f0000004200)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])

1m14.413245536s ago: executing program 2 (id=90):
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
mbind(&(0x7f0000bda000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x9, 0xf21, 0x0)
mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x103e, 0x5, 0x0)
mlock(&(0x7f0000bda000/0x4000)=nil, 0x4000)

1m14.409816235s ago: executing program 0 (id=92):
r0 = socket(0x400000000010, 0x3, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
fcntl$setflags(r0, 0x2, 0x0)

1m14.19666944s ago: executing program 32 (id=90):
munmap(&(0x7f0000001000/0x4000)=nil, 0x4000)
mbind(&(0x7f0000bda000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000000)=0x9, 0xf21, 0x0)
mbind(&(0x7f0000bdb000/0x3000)=nil, 0x3000, 0x1, &(0x7f0000000080)=0x103e, 0x5, 0x0)
mlock(&(0x7f0000bda000/0x4000)=nil, 0x4000)

1m14.150950478s ago: executing program 0 (id=94):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback, 0x7ff}], 0x2c)
sendto$inet6(r0, &(0x7f00000009c0)='\\', 0x1, 0x20000081, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback, 0x5}, 0x1c)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000580)={0x41, 0x80, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x8}, 0xe)
recvmmsg(r0, &(0x7f0000009d40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000006000)=""/164, 0xa4}, 0x7}], 0x1, 0x92, 0x0)

1m14.04039765s ago: executing program 0 (id=97):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff000, 0x81, 0x7f, 0x1}, 0x48)
bpf$MAP_DELETE_ELEM(0x4, &(0x7f0000000100)={r0, &(0x7f0000002240), 0x20000000}, 0x20)

1m13.883185946s ago: executing program 0 (id=99):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000300)={[{@init_itable_val}, {@jqfmt_vfsold}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@minixdf}, {@quota}]}, 0x3, 0x43b, &(0x7f0000000440)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x91)

1m13.697060738s ago: executing program 0 (id=105):
r0 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x5c}}, 0x0)

1m11.191250209s ago: executing program 0 (id=112):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r3, r3, 0x0, 0x800000009)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000004cc0)=@newtfilter={0x24, 0x2c, 0x2, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0x10, 0xffe0}, {0x8, 0xfff1}}}, 0x24}}, 0xc0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0), 0x4)
close(r6)

1m11.003509395s ago: executing program 33 (id=112):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r3, r3, 0x0, 0x800000009)
write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10)
sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000004b40)={&(0x7f0000004cc0)=@newtfilter={0x24, 0x2c, 0x2, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x2, 0xf}, {0x10, 0xffe0}, {0x8, 0xfff1}}}, 0x24}}, 0xc0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
r6 = socket(0x40000000015, 0x5, 0x0)
setsockopt$SO_RDS_TRANSPORT(r6, 0x114, 0x8, &(0x7f00000008c0), 0x4)
close(r6)

32.895719019s ago: executing program 1 (id=423):
r0 = syz_open_procfs(0x0, &(0x7f0000000340)='fd\x00')
getdents64(r0, 0x0, 0x0)

32.829962435s ago: executing program 1 (id=425):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0)
syz_genetlink_get_family_id$ieee802154(0x0, 0xffffffffffffffff)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x2)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
syz_open_dev$dri(0x0, 0x1, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x20, 0x40, 0x107, 0x0, 0x25dfdbfd, {0x4, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x6, 0x0, 0x0, @pid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x50}, 0x8004)

31.347594445s ago: executing program 1 (id=430):
syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000002c0)='./bus\x00', 0x1800840, &(0x7f0000008c40)={[{@utf8}, {@shortname_winnt}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp860'}}, {@shortname_mixed}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@shortname_lower}, {@iocharset={'iocharset', 0x3d, 'iso8859-5'}}, {@fat=@codepage={'codepage', 0x3d, '950'}}, {@fat=@codepage={'codepage', 0x3d, '737'}}, {@utf8no}, {@shortname_win95}]}, 0x1, 0x362, &(0x7f00000088c0)="$eJzs3U9oXFUXAPAzfUkmKfRLFh8UBeHpTtDQP7jQVUpJoTgblaHqQhxsqpKJhQwOpotO40ZcCi515UZc6MJF1yIo4s6FWytIVVxodwWLV2bmTeZNZpKmwrQWf7/FcHLuPe/eO3nJvLxkbl5eifXzs3Hhxo3rMT9fiZmV0ytxsxJLkcXAlRg3NyEHANwfbqYUf6S+A5ZUpjwlAGDKeq//rx4pZd7+ar/+yas/ANz3ip//F/brM79Xw8WpTAkAmLKx+/+PjDTPjf6qf6b0VwEAwP3quRdefPpULeLZPJ+P2HinXW/X46lh+6kL8Xo0Yy2OxWLciuhfKHQfKr3HM2drq8fyPO/Ez0tR71a06xEbnXa9f6VwKuvVV+N4LMZSUV9cbaSUsjOf11aP5z0RcaXTGz82Ku36bBwuxv/hcKzFicjj/2P1EWdrqyfy4gD1jUF9J2J7eN+iO//lWIzvXomL0YzzC+cipcFlTW318vE8P51qI/XtejXO7zwLe94BAQAAAAAAAAAAAAAAAAAAAACAf2Q537G0s/9NGu7fs7w8ob23P06/vtgfaLu/P1Cqpkjp97cer7+bxcj+QLv352nXZ+LQvV06AAAAAAAAAAAAAAAAAAAA/Gu0tuai0Wyubba2Lq2Xg85ma+tQRHQzb3zz6ZcLMd7nNsFMMUapKS9Sl9YbKRt0TtlInyLIuoMPMp9c3ZlxuU91ZxUTp1Hdu6nZPPLwTx8MMw9lgyP/NeyTxeQFZrumUQ42/tef0p08UZdOFsGJ23S+llLa6ziXXxqvikrEzJ1/4vYPUjf4+vprD5xsHX2il/ki9T362OK5a+9/9Ot6o9kduav58dxm61ZabxQfTz7Z9g6y0vlTiX5QKZ8JM/uVb49mGtn3vz3/4HvfHmz0VM68OaFP1l/OZ5utrUrxldJrmusH3dyuqoXm2Sxi13FmJ5z8UwiOfrjSuHr5x18OWlX6JmGjDgAAAAAAAAAAAAAAAAAAuCtK7xUvFG/2nd2v6slnpj8zAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALh7hv//vxRsj2UOEvzZifGm6tpmK2LuXi8TAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID/uL8DAAD//2Kpa7U=")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84242, 0x1fb)

31.178609634s ago: executing program 1 (id=432):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x8002, &(0x7f00000000c0), 0x1, 0x4b4, &(0x7f0000000c80)="$eJzs3E9sFNUfAPDvbHdpgR8/KiIKoi6isdHYQkHh4AWjiQdMjHjQY9MWghRqaE2EECmJwaMh8W48evXgVb0ZTyZe8WhiSIjhAnhaM7sz7e52t//Y7oL7+SRL35t9s+99982bfTNvlwD6Vjn9J4n4X0TcjIidtWxjgXLtz707Vybv37kyGQuVyqm/k2q5u2k+k++3PcuMFCIKXyRNL1gzd+nyuYmZmemLWX5s/vwnY3OXLr969vzEmekz0xfGjx8/euTwsdfHX1t/UC3qS+O6u+/z2f173/noxruTxXz7UPa3Po5OKUe5VVOqXux0ZT22oy6dFHvYENZlICLS7ipVx//OGAidB/2iUqlUBts/vVBpdm3ZFuCRlUSvWwD0Rv5Bn17/5o8uTT0eCrdP1C6A0rjvZY/aM8UoZGVKTde3nTQUER8u/PNN+ohNug8BAFDvpxP5TLB5/leIPXXl/p+toQxHxGMRsSsiHo+I3RHxRES17JMR8VTT65cjorJC/eWm/PL5T+HWAwW4inT+90a2ttU4/8tnfzE8kOV2ROQT5ulD2XsyEqXB02dnpg+vUMfPb/3+VbvnynXzv/SR1p/PBbN23Co23aCbmpif2HDATW5fi9hXbI4/KUYkiysBSUTsjYh963jd4br02Ze/27+YKTWWWz3+qkrLdbQOLFVUvo14qdb/C9HQ/0s1JiuvT44Nxcz0obH0KDjUso5ff7v+Xrv6V43/hz+bd3n72I+nHjTsRWn/b6s7/iNfv12KfziJSBbXa+fWX8f1P75se02ztuP/asM+6fG/Jfmgmt6SbftsYn7+4uGILcnJ5dvHl/bN83n5NP6Rg63H/65sn/SdeDoi0oP4mYh4NiKey9p+ICKej4iDK8T/y5svfLzx+DdXGv9Uy/NfQ/8vrdfPncwTl9aaGDh34Ob9NiePtfX/0WpqJNvS+vyXNJwi1trADryFAAAA8NArRPW7/4XRxXShMDpauwe0O7YVZmbn5l85PfvphanabwSGo1TI73TV7geXkvz+53BdfrwpfyS7b/z1wNZqfnRydmaq18FDn9teHfPJsvGf+mug160DNp2f/ED/Wm3877nRpYYAXefzH/pX3fhfaFNkwTdl4L+p9ed/qevtALqv1fi/uoF9gEdLxViGvmb8Q/8qxvuL6UJPWwJ0m89/6Etr/xX/RhKVwdZPDcXywjG0Oc3Y2qKuniTSmVVPat+6kb3y/02hbZkorPY6xYZjbDCWlxmInvTFmT0dP/gr2XflO93U71cep/l0fRPeqO6ehwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADbLvwEAAP//cdfX0w==")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000000c0), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000180)='./file0\x00', 0xd2023, &(0x7f00000001c0)={{}, 0x2c, {}, 0x2c, {'user_id', 0x3d, 0xee01}, 0x2c, {'group_id', 0x3d, 0xffffffffffffffff}}, 0x1, 0x0, 0x0)

31.067779133s ago: executing program 1 (id=434):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000540)='module_load\x00', r0, 0x0, 0xd}, 0x18)
sched_setscheduler(0x0, 0x2, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48)
r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
r6 = io_uring_setup(0x7d2e, &(0x7f0000002380)={0x0, 0xffffffff, 0x1046})
io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x12, 0x0, 0x0)
r7 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14)
socket$nl_route(0x10, 0x3, 0x0)

30.72257679s ago: executing program 1 (id=440):
close(0xffffffffffffffff)
unshare(0xa020400)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f00000000c0)=0xf)

30.513589796s ago: executing program 34 (id=440):
close(0xffffffffffffffff)
unshare(0xa020400)
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f00000000c0)=0xf)

2.24536017s ago: executing program 3 (id=671):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000c00)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x7f}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.086849913s ago: executing program 3 (id=675):
syz_usb_connect$uac1(0x5, 0x9c, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000406b1d010140000102030109028a0003018040080904000000010100000a240107005002010208240803ff00fab008240403cd82ab090c2402030502058102000c81090401000001020000090401010101020000090501090800037c090725010700addc09040200000102000009040201010102000008240201060308050724010412011009058209ff"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})

1.426084816s ago: executing program 4 (id=685):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000001400)=0x7)
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000480)={[{@jqfmt_vfsold}, {@abort}, {@debug}, {@noload}, {@grpid}, {@noblock_validity}, {@noquota}, {@lazytime}, {@usrjquota}]}, 0xff, 0x46c, &(0x7f0000000940)="$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")
io_setup(0x9, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="02142000110000000040000000000000030005000000000002000000ffffffff0000000000000000080012000000010000000000000000000600000000000027b20e97a6a9ecae000000ee00000000000000000000000000fc020000000000000000000000000000030006000000000002000000e00000010000000000000000010018"], 0x88}}, 0x0)
r4 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r4, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x2, 0xf, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @broadcast}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x1, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@empty, @in6=@private2}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0)
write$binfmt_script(0xffffffffffffffff, 0x0, 0x0)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
io_submit(0x0, 0x0, &(0x7f0000000280))
sendto$inet(r5, 0x0, 0x0, 0x200047ee, 0x0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
getdents64(r6, &(0x7f0000001f80)=""/4096, 0x1000)

847.742804ms ago: executing program 5 (id=690):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000080)={0xfffc, 0x0, 0x4, 0x4, 0x4, 0xfffe})

757.760077ms ago: executing program 5 (id=691):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "d5a1d50399459b68"}, 0x28)
recvfrom$inet6(r0, &(0x7f0000000300)=""/218, 0xda, 0x120, 0x0, 0x0)
shutdown(r0, 0x0)

638.438089ms ago: executing program 5 (id=692):
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xd, 0xd1, 0x1, 0x2, 0x404c0, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x3}, 0x50)

637.918807ms ago: executing program 5 (id=693):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x0, &(0x7f00000002c0), 0x0, 0x235, &(0x7f0000000300)="$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")

523.444046ms ago: executing program 4 (id=694):
r0 = socket$xdp(0x2c, 0x3, 0x0)
mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010218000000000000000c0000cb1d53cbdc9f557c5b1323e6"], &(0x7f0000001f80)=""/226, 0x26, 0x81, 0x2}, 0x20)

517.370382ms ago: executing program 3 (id=695):
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='uid_map\x00')

514.580909ms ago: executing program 5 (id=696):
r0 = syz_open_dev$ttys(0xc, 0x2, 0x0)
ioctl$TIOCGPGRP(r0, 0x540f, 0xfffffffffffffffe)

407.044303ms ago: executing program 3 (id=697):
r0 = syz_io_uring_setup(0x45d1, &(0x7f0000000100)={0x0, 0x0, 0x10100, 0x3, 0x27c}, &(0x7f0000000180)=<r1=>0x0, &(0x7f0000000240)=<r2=>0x0)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_SPLICE={0x1e, 0x10, 0x0, @fd=r0, 0x1, {}, 0x9, 0xb, 0x1, {0x0, r3, r0}})
io_uring_enter(r0, 0x1f82, 0x0, 0x0, 0x0, 0x0)

406.610279ms ago: executing program 5 (id=698):
r0 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x128000, 0x800}, 0x20)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000240)=0x4, 0x4)
setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000140)=0x20, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00', <r2=>0x0})
setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000100)=0x20, 0x4)
bind$xdp(r0, &(0x7f00000002c0)={0x2c, 0x0, r2}, 0x10)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0)

294.224094ms ago: executing program 4 (id=699):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000, 0x0)
preadv2(r0, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0x1fee00}], 0x2, 0x0, 0x0, 0x0)

293.692423ms ago: executing program 3 (id=700):
sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0)
sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000800)=ANY=[@ANYBLOB="84"], 0x184}}, 0x0)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000200), 0x0)
r0 = socket$inet6(0xa, 0x3, 0x3c)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
writev(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f00000000c0)="5fa1cc6475604fc77e0ce3f7125b35d9060da80bbb8d5985dfa34fdba59faf7671723318fffc7bb6e42dcac65ab15bdd30a6c8461cc5dc69178e1697e18cd2c6a0bb", 0x42}], 0x1)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff274140000"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4000, 0x0, @remote, 0x5}, 0x1c)
writev(r0, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1)

195.109696ms ago: executing program 3 (id=701):
syz_usb_connect(0x0, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0)
r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x10000)
writev(r0, &(0x7f00000006c0)=[{0x0}, {&(0x7f0000000440)='Y', 0x1}], 0x2)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0)

194.783763ms ago: executing program 4 (id=702):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a8064", 0xc}], 0x1}, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b595000000000000000002000000", @ANYRES32=r0, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[], 0x6c}, 0x1, 0x0, 0x0, 0x20008824}, 0x4800)

107.618321ms ago: executing program 4 (id=703):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./bus\x00', 0x4010, &(0x7f0000000a40)=ANY=[@ANYBLOB="00e789da34e04a1ffbc2f05cefeb4ee6d5ae1071124b2c2fb684f5c7ac05000000c7880f67e775c748f6381a3e01e7f93330b30b90bbb4d2b697899a16f2df4fa2a8f06ac2c5352ddcae2b83672ef3d9f532e55f4e798924ac6332751e737383f6890d2dcfcbdbd41940a64c7b4374674e7bb6dd0d1b8d3d62f6d77b0282e166e2ce4c353d2d4d315a81146bf46a1508ef0d2ddc7d0b447fe17b85b292d13cea2256a16cab12d75a852bc680da7ea837480feb2e1e0000000000003bc18c52d0351cd285197b0641569048b5b416ba1c570000000000100083794afff0a9eed63b1226b18c4b455ab222d7ae1be52a22e8ec8bf2c0c7d99770415863f50aa18bcb66061a29bc55105f3482ed752f882d224a386b51836c1b437036b677156e22e174ff516dbab0b2cdf52bee43c4ffffffffffffffffd9487b8663a339b98df63b4bf3e97f02d6f1e7e65f968dd90841506355d9ac40f1b434c8a9b5bd91a70c53a5aadbebd9ed9d0a55bd47a967163e0c02753f8895bfbf1b41b5490667c241068d59983ae1d0f03e650f5357425284b76d793e25a2558fa437e38b8200000000630000000000000000000000000000000000000000000000e911000000000066e073c14bb74617079e0b6ecfc830db14244567fd8f4e4e5903eaf983786e28295783f130b95dc37f59a658000e88047db7783ce8a9cba6c255902cfb83946ea3f5f7a8cee911b2b37ae4b01e65ea86d5ea7ae17b2a9bc250c9b8fc9fbc04617939bdd13457954172d18701768f8a461bee740f2d82ae566d2e30a93ad2b201a6d16a93c75a950cc437e7f25d3aadddb8edd028d84490b6bafd636aa4fb482a8a4b3987dafe58e742448c4b36b03790090198145dee533257bb9050554f8cace210a5bc5c768f83e99019f7c00ff9ca679768dbba3f7d21c545c99c2f7688f7030fe37121d625d1f81018feb74c9d48eebdf1702550b097271ab9bd38c62f4b31fd9482c05ba064dfa60bd7fafb3c22dc057e6f9e2a5eb144290afe5369110a71d4b7fc5937a32e213c443f3b9e506b25cf9e2520999b330fc9e86bde8c8ec78f67c0c7f24db0000000", @ANYRES16], 0x1, 0x11ee, &(0x7f0000002480)="$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")
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000e00000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x31)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x18)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$sndctrl(0x0, 0x0, 0x0)
r1 = open(&(0x7f00000003c0)='.\x00', 0x100, 0x97)
getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8)

0s ago: executing program 4 (id=704):
r0 = syz_open_procfs$pagemap(0x0, &(0x7f0000001080))
pipe(&(0x7f0000000480)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
write(r1, &(0x7f0000000340), 0x11000)
ioctl$PAGEMAP_SCAN(r0, 0xc0606610, &(0x7f00000001c0)={0x60, 0x0, &(0x7f0000001000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, 0x0, 0x0, 0xcbfb, 0x8, 0x0, 0xc, 0x5c})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:54915' (ED25519) to the list of known hosts.
syzkaller login: [   56.347743][ T5769] cgroup: Unknown subsys name 'net'
[   56.437342][ T5769] cgroup: Unknown subsys name 'cpuset'
[   56.441757][ T5769] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   58.489688][ T5769] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   71.041204][ T5887] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   71.646567][ T5871] syz.0.20 (5871) used greatest stack depth: 20808 bytes left
[   75.873643][ T5233] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   75.877272][ T5233] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   75.880350][ T5233] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   75.889963][ T5233] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   75.893142][ T5233] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   75.947736][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   75.954298][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   75.957718][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   75.963992][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   75.967387][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   75.992424][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   75.996004][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   76.000312][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   76.004563][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   76.008211][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   76.289826][ T5923] chnl_net:caif_netlink_parms(): no params data found
[   76.330470][ T5926] chnl_net:caif_netlink_parms(): no params data found
[   76.393419][ T5928] chnl_net:caif_netlink_parms(): no params data found
[   76.436288][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.440698][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.443697][ T5923] bridge_slave_0: entered allmulticast mode
[   76.446914][ T5923] bridge_slave_0: entered promiscuous mode
[   76.451973][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.452263][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   76.454976][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.456622][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   76.458968][ T5923] bridge_slave_1: entered allmulticast mode
[   76.463452][ T5923] bridge_slave_1: entered promiscuous mode
[   76.472544][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.474673][ T5926] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.476824][ T5926] bridge_slave_0: entered allmulticast mode
[   76.479898][ T5926] bridge_slave_0: entered promiscuous mode
[   76.483036][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.485136][ T5926] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.487273][ T5926] bridge_slave_1: entered allmulticast mode
[   76.490643][ T5926] bridge_slave_1: entered promiscuous mode
[   76.563618][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.571214][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.603550][ T5926] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.611694][ T5926] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.629244][ T5928] bridge0: port 1(bridge_slave_0) entered blocking state
[   76.631884][ T5928] bridge0: port 1(bridge_slave_0) entered disabled state
[   76.634233][ T5928] bridge_slave_0: entered allmulticast mode
[   76.636857][ T5928] bridge_slave_0: entered promiscuous mode
[   76.640169][ T5928] bridge0: port 2(bridge_slave_1) entered blocking state
[   76.642504][ T5928] bridge0: port 2(bridge_slave_1) entered disabled state
[   76.644660][ T5928] bridge_slave_1: entered allmulticast mode
[   76.647228][ T5928] bridge_slave_1: entered promiscuous mode
[   76.688400][ T5926] team0: Port device team_slave_0 added
[   76.693622][ T5926] team0: Port device team_slave_1 added
[   76.711515][ T5923] team0: Port device team_slave_0 added
[   76.730031][ T5923] team0: Port device team_slave_1 added
[   76.735315][ T5928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   76.762385][ T5928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   76.777002][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.780236][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.789970][ T5926] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.812513][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.814640][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.823093][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.827173][ T5926] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.829940][ T5926] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.837824][ T5926] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.856651][ T5928] team0: Port device team_slave_0 added
[   76.859536][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.861895][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.870688][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.875155][ T5928] team0: Port device team_slave_1 added
[   76.907762][ T5926] hsr_slave_0: entered promiscuous mode
[   76.910272][ T5926] hsr_slave_1: entered promiscuous mode
[   76.913506][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_0
[   76.915819][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.923757][ T5928] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   76.929616][ T5928] batman_adv: batadv0: Adding interface: batadv_slave_1
[   76.931972][ T5928] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   76.939891][ T5928] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   76.998003][ T5923] hsr_slave_0: entered promiscuous mode
[   77.001058][ T5923] hsr_slave_1: entered promiscuous mode
[   77.003699][ T5923] debugfs: 'hsr0' already exists in 'hsr'
[   77.005494][ T5923] Cannot create hsr debugfs directory
[   77.040018][ T5928] hsr_slave_0: entered promiscuous mode
[   77.042346][ T5928] hsr_slave_1: entered promiscuous mode
[   77.044570][ T5928] debugfs: 'hsr0' already exists in 'hsr'
[   77.046262][ T5928] Cannot create hsr debugfs directory
[   77.292134][ T5926] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   77.307685][ T5926] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   77.322437][ T5926] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   77.334052][ T5926] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   77.370492][ T5923] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   77.375959][ T5923] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   77.381895][ T5923] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   77.389605][ T5923] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   77.436540][ T5928] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   77.444012][ T5928] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   77.451404][ T5928] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   77.462008][ T5928] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   77.568315][ T5926] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.577809][ T5928] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.592510][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.602904][ T5928] 8021q: adding VLAN 0 to HW filter on device team0
[   77.611564][ T5926] 8021q: adding VLAN 0 to HW filter on device team0
[   77.621636][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.623921][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.642393][ T2273] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.644871][ T2273] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.648308][ T2273] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.650576][ T2273] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.656029][ T2273] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.658212][ T2273] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.664379][ T5923] 8021q: adding VLAN 0 to HW filter on device team0
[   77.680324][ T2273] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.683144][ T2273] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.713521][ T1087] bridge0: port 2(bridge_slave_1) entered blocking state
[   77.715815][ T1087] bridge0: port 2(bridge_slave_1) entered forwarding state
[   77.970037][ T5233] Bluetooth: hci0: command tx timeout
[   77.996625][ T5926] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.007529][ T5928] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.033311][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0
[   78.039794][ T5233] Bluetooth: hci2: command tx timeout
[   78.041794][ T5233] Bluetooth: hci1: command tx timeout
[   78.087216][ T5928] veth0_vlan: entered promiscuous mode
[   78.107217][ T5926] veth0_vlan: entered promiscuous mode
[   78.112609][ T5928] veth1_vlan: entered promiscuous mode
[   78.137133][ T5926] veth1_vlan: entered promiscuous mode
[   78.155840][ T5923] veth0_vlan: entered promiscuous mode
[   78.175234][ T5923] veth1_vlan: entered promiscuous mode
[   78.187472][ T5928] veth0_macvtap: entered promiscuous mode
[   78.202737][ T5928] veth1_macvtap: entered promiscuous mode
[   78.228105][ T5926] veth0_macvtap: entered promiscuous mode
[   78.236754][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.240735][ T5926] veth1_macvtap: entered promiscuous mode
[   78.252532][ T5928] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.259760][ T5923] veth0_macvtap: entered promiscuous mode
[   78.274460][ T5933] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.282505][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.285379][ T5933] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.294888][ T5926] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.302810][ T5923] veth1_macvtap: entered promiscuous mode
[   78.312422][ T5933] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.315842][ T5933] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.324610][ T5933] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.338429][ T5933] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.343490][ T5933] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.354143][ T5933] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.380366][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0
[   78.403482][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1
[   78.462956][ T5920] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   78.468798][ T5920] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   78.472982][ T5920] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   78.481470][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.484519][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.492226][ T5920] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   78.533581][   T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.537561][   T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.599846][ T1087] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.603990][ T1087] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.669119][   T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.672129][   T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.689817][ T5928] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   78.729748][   T85] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.732705][   T85] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.765757][   T85] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   78.768171][   T85] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   78.876180][ T5993] loop2: detected capacity change from 0 to 16
[   78.905137][ T5993] erofs (device loop2): mounted with root inode @ nid 36.
[   79.504050][ T6010] IPVS: Scheduler module ip_vs_sip not found
[   79.541158][ T6013] loop1: detected capacity change from 0 to 128
[   79.579381][ T6013] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   79.585794][ T6013] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   79.999186][ T6032] ALSA: mixer_oss: invalid OSS volume 'u'
[   80.039868][ T5233] Bluetooth: hci0: command tx timeout
[   80.055641][ T5926] syz-executor (5926) used greatest stack depth: 20792 bytes left
[   80.119472][ T5233] Bluetooth: hci2: command tx timeout
[   80.223872][ T5933] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   80.625448][ T6056] loop0: detected capacity change from 0 to 512
[   80.646951][ T6056] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   80.656817][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   80.660496][ T6056] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   80.661942][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   80.666271][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   80.673129][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   80.674352][ T6056] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   80.675793][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   80.682485][ T6056] EXT4-fs (loop0): 1 truncate cleaned up
[   80.685138][ T6056] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.739823][ T6056] loop0: detected capacity change from 512 to 64
[   80.777184][ T5928] EXT4-fs warning (device loop0): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[   80.782697][ T5928] EXT4-fs warning (device loop0): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[   80.787098][ T5928] EXT4-fs warning (device loop0): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[   80.798252][ T5928] EXT4-fs warning (device loop0): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[   80.806172][ T5928] EXT4-fs warning (device loop0): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[   80.811934][ T5928] EXT4-fs warning (device loop0): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[   80.816417][ T5928] EXT4-fs warning (device loop0): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[   80.821372][ T5928] EXT4-fs warning (device loop0): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[   80.825764][ T5928] EXT4-fs warning (device loop0): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[   80.830647][ T5928] EXT4-fs warning (device loop0): ext4_empty_dir:3113: inode #11: lblock 5: comm syz-executor: error -12 reading directory block
[   80.865937][ T6057] chnl_net:caif_netlink_parms(): no params data found
[   80.944518][ T6057] bridge0: port 1(bridge_slave_0) entered blocking state
[   80.946969][ T6057] bridge0: port 1(bridge_slave_0) entered disabled state
[   80.951194][ T6057] bridge_slave_0: entered allmulticast mode
[   80.955213][ T6057] bridge_slave_0: entered promiscuous mode
[   80.958475][ T6057] bridge0: port 2(bridge_slave_1) entered blocking state
[   80.961014][ T6057] bridge0: port 2(bridge_slave_1) entered disabled state
[   80.963508][ T6057] bridge_slave_1: entered allmulticast mode
[   80.966694][ T6057] bridge_slave_1: entered promiscuous mode
[   80.987815][ T6057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   80.993543][ T6057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   81.009106][ T5970] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   81.023714][ T5933] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.043093][ T6057] team0: Port device team_slave_0 added
[   81.046601][ T6057] team0: Port device team_slave_1 added
[   81.070448][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_0
[   81.072684][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.082243][ T6057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   81.086734][ T6057] batman_adv: batadv0: Adding interface: batadv_slave_1
[   81.089266][ T6057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.098079][ T6057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   81.127622][ T6057] hsr_slave_0: entered promiscuous mode
[   81.130155][ T6057] hsr_slave_1: entered promiscuous mode
[   81.132279][ T6057] debugfs: 'hsr0' already exists in 'hsr'
[   81.133983][ T6057] Cannot create hsr debugfs directory
[   81.147265][ T5933] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.167285][ T5970] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.178969][ T5970] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   81.183012][ T5970] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00
[   81.185936][ T5970] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.200244][ T5970] usb 2-1: config 0 descriptor??
[   81.223748][ T5933] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   81.434136][ T5933] bridge_slave_1: left allmulticast mode
[   81.436071][ T5933] bridge_slave_1: left promiscuous mode
[   81.438285][ T5933] bridge0: port 2(bridge_slave_1) entered disabled state
[   81.444434][ T5933] bridge_slave_0: left allmulticast mode
[   81.446201][ T5933] bridge_slave_0: left promiscuous mode
[   81.448045][ T5933] bridge0: port 1(bridge_slave_0) entered disabled state
[   81.618377][ T5970] ortek 0003:1223:3F07.0001: Fixing up logical maximum in report descriptor (Skycable)
[   81.623679][ T5970] ortek 0003:1223:3F07.0001: unknown main item tag 0x6
[   81.626198][ T5970] ortek 0003:1223:3F07.0001: report_id 29495 is invalid
[   81.628774][ T5970] ortek 0003:1223:3F07.0001: item 0 2 1 8 parsing failed
[   81.632188][ T5970] ortek 0003:1223:3F07.0001: probe with driver ortek failed with error -22
[   81.700222][ T5933] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   81.705555][ T5933] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   81.711350][ T5933] bond0 (unregistering): Released all slaves
[   81.753308][ T6057] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   81.758661][ T6057] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   81.763265][ T6057] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   81.767847][ T6057] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   81.838350][ T5984] usb 2-1: USB disconnect, device number 2
[   82.000796][ T6057] 8021q: adding VLAN 0 to HW filter on device bond0
[   82.011270][ T5933] hsr_slave_0: left promiscuous mode
[   82.015022][ T5933] hsr_slave_1: left promiscuous mode
[   82.017888][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   82.020962][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_0
[   82.024815][ T5933] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   82.027644][ T5933] batman_adv: batadv0: Removing interface: batadv_slave_1
[   82.046427][ T5933] veth1_macvtap: left promiscuous mode
[   82.048339][ T5933] veth0_macvtap: left promiscuous mode
[   82.050498][ T5933] veth1_vlan: left promiscuous mode
[   82.052684][ T5933] veth0_vlan: left promiscuous mode
[   82.119227][ T5233] Bluetooth: hci0: command tx timeout
[   82.453992][ T5933] team0 (unregistering): Port device team_slave_1 removed
[   82.484637][ T5933] team0 (unregistering): Port device team_slave_0 removed
[   82.674235][ T6101] binder: 6100:6101 ioctl 4018620d 0 returned -22
[   82.727654][ T6102] binder: 6100:6102 ioctl c018620c 0 returned -14
[   82.759377][ T5233] Bluetooth: hci1: command tx timeout
[   82.892108][ T6057] 8021q: adding VLAN 0 to HW filter on device team0
[   82.903919][ T2273] bridge0: port 1(bridge_slave_0) entered blocking state
[   82.906235][ T2273] bridge0: port 1(bridge_slave_0) entered forwarding state
[   82.914820][ T2273] bridge0: port 2(bridge_slave_1) entered blocking state
[   82.917240][ T2273] bridge0: port 2(bridge_slave_1) entered forwarding state
[   83.121891][ T6057] 8021q: adding VLAN 0 to HW filter on device batadv0
[   83.187056][ T6057] veth0_vlan: entered promiscuous mode
[   83.195901][ T6057] veth1_vlan: entered promiscuous mode
[   83.233819][ T5928] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.263033][ T5983] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.277416][ T6057] veth0_macvtap: entered promiscuous mode
[   83.307071][ T6057] veth1_macvtap: entered promiscuous mode
[   83.325985][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_0
[   83.344913][ T6057] batman_adv: batadv0: Interface activated: batadv_slave_1
[   83.357581][ T5983] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.370593][ T5920] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   83.373413][ T5920] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   83.376084][ T5920] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   83.380216][ T5920] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   83.435380][ T5983] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.484437][ T1094] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.490472][ T1094] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.515278][ T5983] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   83.587302][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   83.590490][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   83.732201][ T6126] loop1: detected capacity change from 0 to 512
[   83.740965][ T6126] EXT4-fs (loop1): Test dummy encryption mode enabled
[   83.744472][ T6126] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   83.770678][ T6126] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.115: bad orphan inode 131083
[   83.774453][ T5983] bridge_slave_1: left allmulticast mode
[   83.776319][ T5983] bridge_slave_1: left promiscuous mode
[   83.778632][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state
[   83.784826][ T6126] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   83.826678][ T5983] bridge_slave_0: left allmulticast mode
[   83.842296][ T5983] bridge_slave_0: left promiscuous mode
[   83.844292][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state
[   83.873400][ T5923] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.915691][ T6134] netlink: 'syz.1.117': attribute type 39 has an invalid length.
[   83.993375][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   83.996982][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   84.000450][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   84.009409][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   84.012813][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   84.199714][ T5233] Bluetooth: hci0: command tx timeout
[   84.250857][ T5983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   84.255453][ T5983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   84.259581][ T5983] bond0 (unregistering): Released all slaves
[   84.764587][ T5983] hsr_slave_0: left promiscuous mode
[   84.771514][ T5983] hsr_slave_1: left promiscuous mode
[   84.776372][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   84.780320][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0
[   84.785520][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   84.788587][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1
[   84.839354][ T5233] Bluetooth: hci1: command tx timeout
[   84.847064][ T5983] veth1_macvtap: left promiscuous mode
[   84.852477][ T5983] veth0_macvtap: left promiscuous mode
[   84.860591][ T5983] veth1_vlan: left promiscuous mode
[   84.866766][ T5983] veth0_vlan: left promiscuous mode
[   85.668293][ T6166] hugetlbfs: syz.1.127 (6166): Using mlock ulimits for SHM_HUGETLB is obsolete
[   86.050924][ T5233] Bluetooth: hci2: command tx timeout
[   86.487952][ T5983] team0 (unregistering): Port device team_slave_1 removed
[   86.497956][ T6171] syz.3.129 uses obsolete (PF_INET,SOCK_PACKET)
[   86.604084][ T5983] team0 (unregistering): Port device team_slave_0 removed
[   86.692385][    T9] cfg80211: failed to load regulatory.db
[   86.920447][ T5233] Bluetooth: hci1: command tx timeout
[   87.511144][ T6138] chnl_net:caif_netlink_parms(): no params data found
[   87.760283][ T6138] bridge0: port 1(bridge_slave_0) entered blocking state
[   87.763389][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state
[   87.766326][ T6138] bridge_slave_0: entered allmulticast mode
[   87.786746][ T6138] bridge_slave_0: entered promiscuous mode
[   87.797532][ T6138] bridge0: port 2(bridge_slave_1) entered blocking state
[   87.819179][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state
[   87.822834][ T6138] bridge_slave_1: entered allmulticast mode
[   87.855107][ T6138] bridge_slave_1: entered promiscuous mode
[   87.870254][ T6197] loop3: detected capacity change from 0 to 512
[   87.912227][ T6197] =======================================================
[   87.912227][ T6197] WARNING: The mand mount option has been deprecated and
[   87.912227][ T6197]          and is ignored by this kernel. Remove the mand
[   87.912227][ T6197]          option from the mount to silence this warning.
[   87.912227][ T6197] =======================================================
[   87.934354][ T6197] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[   87.984473][ T6138] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   87.998470][ T6138] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.083433][ T6138] team0: Port device team_slave_0 added
[   88.088593][ T6138] team0: Port device team_slave_1 added
[   88.124279][ T5233] Bluetooth: hci2: command tx timeout
[   88.139027][  T971] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   88.216435][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.234967][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.278641][ T6138] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.297643][ T6138] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.302203][  T971] usb 2-1: Using ep0 maxpacket: 16
[   88.307635][  T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.314415][  T971] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.317449][ T6138] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.331688][  T971] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[   88.334486][  T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.343015][ T6138] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.352120][  T971] usb 2-1: config 0 descriptor??
[   88.465631][ T6138] hsr_slave_0: entered promiscuous mode
[   88.471510][ T6138] hsr_slave_1: entered promiscuous mode
[   88.689931][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   88.701642][ T6138] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   88.711405][ T6138] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   88.718420][ T6138] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   88.724361][ T6138] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   88.781397][  T971] hid-multitouch 0003:1FD2:6007.0002: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0
[   88.822783][ T6138] 8021q: adding VLAN 0 to HW filter on device bond0
[   88.841192][ T6138] 8021q: adding VLAN 0 to HW filter on device team0
[   88.846826][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.849186][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[   88.852684][    T9] usb 4-1: Using ep0 maxpacket: 32
[   88.859513][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.866908][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.871623][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.874744][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[   88.877830][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[   88.882476][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.893972][    T9] usb 4-1: config 0 descriptor??
[   88.987658][  T971] usb 2-1: USB disconnect, device number 3
[   89.000075][ T5233] Bluetooth: hci1: command tx timeout
[   89.181067][ T6138] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.364913][    T9] magicmouse 0003:05AC:0265.0003: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.3-1/input0
[   89.376797][    T9] magicmouse 0003:05AC:0265.0003: magicmouse input not registered
[   89.392478][    T9] magicmouse 0003:05AC:0265.0003: probe with driver magicmouse failed with error -12
[   89.452344][ T6138] veth0_vlan: entered promiscuous mode
[   89.459152][ T6138] veth1_vlan: entered promiscuous mode
[   89.477025][ T6138] veth0_macvtap: entered promiscuous mode
[   89.482564][ T6138] veth1_macvtap: entered promiscuous mode
[   89.493346][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.502308][ T6138] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.523531][ T6156] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.527474][ T6156] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.556698][    T9] usb 4-1: USB disconnect, device number 2
[   89.559848][ T6156] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.563056][ T6156] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.713253][ T6000] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.716573][ T6000] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.792424][ T2273] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.795789][ T2273] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.023119][ T6268] overlayfs: failed to decode file handle (len=6, type=251, flags=0, err=-22)
[   90.081984][ T6271] capability: warning: `syz.4.146' uses deprecated v2 capabilities in a way that may be insecure
[   90.206143][ T5233] Bluetooth: hci2: command tx timeout
[   90.460067][ T6290] loop4: detected capacity change from 0 to 8
[   90.513169][ T6290] SQUASHFS error: xz decompression failed, data probably corrupt
[   90.537809][ T6290] SQUASHFS error: Failed to read block 0x108: -5
[   90.542385][ T6290] SQUASHFS error: Unable to read metadata cache entry [106]
[   90.545340][ T6290] SQUASHFS error: Unable to read inode 0x11f
[   90.978375][ T6315] loop4: detected capacity change from 0 to 2048
[   91.014475][ T6069]  loop4: p1 < > p4
[   91.021076][ T6069] loop4: p4 size 8388608 extends beyond EOD, truncated
[   91.044894][ T6315]  loop4: p1 < > p4
[   91.055979][ T6315] loop4: p4 size 8388608 extends beyond EOD, truncated
[   91.215806][ T6069] udevd[6069]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[   91.218665][ T6076] udevd[6076]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   91.276231][ T6069] udevd[6069]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[   91.887741][ T6342] loop1: detected capacity change from 0 to 64
[   92.309403][ T5233] Bluetooth: hci2: command tx timeout
[   92.923184][ T5984] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   93.159179][ T5984] usb 5-1: Using ep0 maxpacket: 16
[   93.169775][ T5984] usb 5-1: unable to get BOS descriptor or descriptor too short
[   93.182849][ T5984] usb 5-1: config 5 has an invalid interface number: 118 but max is 0
[   93.196429][ T5984] usb 5-1: config 5 has no interface number 0
[   93.200748][ T5984] usb 5-1: config 5 interface 118 has no altsetting 0
[   93.202107][ T6362] hub 1-0:1.0: USB hub found
[   93.208142][ T5984] usb 5-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=1c.96
[   93.219470][ T5984] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.225345][ T5984] usb 5-1: Product: syz
[   93.226852][ T5984] usb 5-1: Manufacturer: syz
[   93.228231][ T5984] usb 5-1: SerialNumber: syz
[   93.237433][ T6362] hub 1-0:1.0: 1 port detected
[   93.298754][ T6368] loop1: detected capacity change from 0 to 256
[   93.490779][ T5984] imon_raw 5-1:5.118: IR endpoint missing
[   93.523438][ T5984] usb 5-1: USB disconnect, device number 2
[   93.792880][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.170'.
[   93.796438][ T6373] netlink: 'syz.1.170': attribute type 15 has an invalid length.
[   93.838076][ T6373] netlink: 12 bytes leftover after parsing attributes in process `syz.1.170'.
[   93.938656][   T12] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   93.938705][ T6373] Zero length message leads to an empty skb
[   93.949913][   T12] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   93.952780][   T12] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   93.956087][   T12] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   94.742087][ T6404] loop3: detected capacity change from 0 to 2048
[   94.751222][ T6404] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[   94.763430][ T6069] udevd[6069]: incorrect nilfs2 checksum on /dev/loop3
[   94.778565][ T6408] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   94.784124][ T6404] syz.3.180: attempt to access beyond end of device
[   94.784124][ T6404] loop3: rw=524288, sector=65534, nr_sectors = 2 limit=2048
[   94.797407][ T6069] udevd[6069]: incorrect nilfs2 checksum on /dev/loop3
[   94.994909][ T6417] netlink: 12 bytes leftover after parsing attributes in process `syz.3.185'.
[   95.870959][ T6419] Falling back ldisc for ptm1.
[   96.281876][  T971] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   96.439743][  T971] usb 5-1: Using ep0 maxpacket: 16
[   96.466393][  T971] usb 5-1: config 1 interface 0 altsetting 36 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   96.481093][  T971] usb 5-1: config 1 interface 0 has no altsetting 0
[   96.487235][  T971] usb 5-1: New USB device found, idVendor=056a, idProduct=0045, bcdDevice= 0.40
[   96.505100][  T971] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.508452][  T971] usb 5-1: Product: syz
[   96.510493][  T971] usb 5-1: Manufacturer: syz
[   96.512721][  T971] usb 5-1: SerialNumber: syz
[   96.751750][  T971] usbhid 5-1:1.0: can't add hid device: -71
[   96.759179][  T971] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[   96.793344][  T971] usb 5-1: USB disconnect, device number 3
[   96.838466][ T6455] delete_channel: no stack
[   97.224692][ T6471] loop3: detected capacity change from 0 to 2048
[   97.242860][ T6471] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   97.384292][ T6475] loop4: detected capacity change from 0 to 2048
[   97.387297][ T6461] loop1: detected capacity change from 0 to 32768
[   97.425457][ T6475] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[   97.443082][   T33] audit: type=1800 audit(1755040565.537:2): pid=6461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.200" name="file1" dev="loop1" ino=4 res=0 errno=0
[   97.463690][ T6475] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   97.760540][ T6489] overlayfs: conflicting options: nfs_export=on,index=off
[   97.844325][ T6487] loop3: detected capacity change from 0 to 8192
[   97.851281][ T6491] loop4: detected capacity change from 0 to 128
[   97.863703][ T6487] FAT-fs (loop3): bogus logical sector size 0
[   97.866079][ T6487] FAT-fs (loop3): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   97.892160][ T6491] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   97.899149][ T6487] FAT-fs (loop3): Can't find a valid FAT filesystem
[   97.920782][ T6491] ext4 filesystem being mounted at /22/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[   98.023480][ T6138] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   98.116117][ T6498] loop1: detected capacity change from 0 to 2048
[   98.171179][ T6501] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   98.220496][ T6498] syz.1.207 (6498) used greatest stack depth: 19624 bytes left
[   98.303405][ T6511] netlink: 'syz.1.219': attribute type 1 has an invalid length.
[   98.307424][ T6511] netlink: 'syz.1.219': attribute type 1 has an invalid length.
[   98.311631][ T6511] netlink: 216 bytes leftover after parsing attributes in process `syz.1.219'.
[   98.892197][ T6527] loop1: detected capacity change from 0 to 2048
[   98.902295][ T6527] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2)
[   99.175451][ T6536] warning: `syz.3.227' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   99.415220][ T6540] loop3: detected capacity change from 0 to 4096
[   99.460676][ T6532] loop4: detected capacity change from 0 to 32768
[   99.472490][ T6532] jfs_mount: Mount Failure: File System Dirty.
[   99.474892][ T6532] Mount JFS Failure: -22
[   99.476375][ T6532] jfs_mount failed w/return code = -22
[   99.542480][   T26] ntfs3(loop3): ino=5, mi_enum_attr
[   99.770656][ T6555] loop6: detected capacity change from 0 to 63
[   99.810558][ T5922] Buffer I/O error on dev loop6, logical block 0, async page read
[   99.813855][ T5922] Buffer I/O error on dev loop6, logical block 0, async page read
[   99.835486][ T6558] Buffer I/O error on dev loop6, logical block 0, lost async page write
[   99.859504][ T6558] Buffer I/O error on dev loop6, logical block 1, lost async page write
[   99.863540][ T5922]  loop6: unable to read partition table
[   99.885183][ T6555] Buffer I/O error on dev loop6, logical block 2, lost async page write
[   99.904287][ T6555] Buffer I/O error on dev loop6, logical block 3, lost async page write
[   99.918388][ T6558] Buffer I/O error on dev loop6, logical block 4, lost async page write
[   99.930044][ T6558] Buffer I/O error on dev loop6, logical block 5, lost async page write
[   99.932796][ T6555] Buffer I/O error on dev loop6, logical block 6, lost async page write
[   99.937029][ T6555] Buffer I/O error on dev loop6, logical block 0, async page read
[   99.940189][ T6555] ldm_validate_partition_table(): Disk read failed.
[   99.942518][ T6555] Dev loop6: unable to read RDB block 0
[   99.944549][ T6555]  loop6: unable to read partition table
[   99.946726][ T6555] loop_reread_partitions: partition scan of loop6 (3) failed (rc=-5)
[   99.978454][ T6561] loop1: detected capacity change from 0 to 4096
[  100.019921][ T6563] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  100.161934][   T33] audit: type=1800 audit(1755040568.267:3): pid=6547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.232" name="file1" dev="loop1" ino=15 res=0 errno=0
[  100.167255][ T6547] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  100.327190][ T6574] loop4: detected capacity change from 0 to 8192
[  100.363921][ T6069]  loop4: AHDI p1 p2
[  100.365746][ T6069] loop4: p1 size 65535 extends beyond EOD, truncated
[  100.391316][ T6574]  loop4: AHDI p1 p2
[  100.393023][ T6574] loop4: p1 size 65535 extends beyond EOD, truncated
[  100.542175][ T6069] udevd[6069]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  100.604562][ T6069] udevd[6069]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  100.664956][ T6594] kernel read not supported for file /ٓ㎀Dg@]eh (pid: 6594 comm: syz.4.246)
[  100.669944][   T33] audit: type=1800 audit(1755040568.777:4): pid=6594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.246" name=D99310E38E804467405DA6A29A65F1CE1868 dev="mqueue" ino=9759 res=0 errno=0
[  100.691098][    T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  100.838972][    T9] usb 4-1: Using ep0 maxpacket: 16
[  100.844963][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.851704][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.856478][    T9] usb 4-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00
[  100.862555][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.868424][    T9] usb 4-1: config 0 descriptor??
[  100.966068][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.4.251'.
[  101.177524][ T6609] netlink: 'syz.3.242': attribute type 1 has an invalid length.
[  101.899039][ T6620] loop4: detected capacity change from 0 to 4096
[  101.904669][ T6620] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  102.250164][ T6629] loop1: detected capacity change from 0 to 512
[  102.273762][ T6629] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  102.534395][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  102.536943][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  102.580748][    T9] usb 4-1: USB disconnect, device number 3
[  102.616995][ T6643] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(8)
[  102.619437][ T6643] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  102.641087][ T6642] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(4)
[  102.643388][ T6642] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  102.647371][ T6643] vhci_hcd vhci_hcd.0: Device attached
[  102.657323][ T6642] vhci_hcd vhci_hcd.0: Device attached
[  102.890480][ T6077] usb 41-1: new high-speed USB device number 2 using vhci_hcd
[  102.899174][  T971] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  102.902340][ T5984] usb 35-1: new low-speed USB device number 2 using vhci_hcd
[  103.059118][  T971] usb 2-1: Using ep0 maxpacket: 16
[  103.075714][  T971] usb 2-1: config 0 has no interfaces?
[  103.087005][  T971] usb 2-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[  103.102783][  T971] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.131798][  T971] usb 2-1: config 0 descriptor??
[  103.350731][  T971] usb 2-1: USB disconnect, device number 4
[  103.360942][ T6646] vhci_hcd: connection closed
[  103.368177][   T12] vhci_hcd: stop threads
[  103.728550][   T12] vhci_hcd: release socket
[  103.729571][ T5984] usb 35-1: device descriptor read/64, error -71
[  103.733008][ T6644] vhci_hcd: connection reset by peer
[  103.738199][   T12] vhci_hcd: disconnect device
[  103.746179][ T6156] vhci_hcd: stop threads
[  103.748020][ T6156] vhci_hcd: release socket
[  103.750917][ T6156] vhci_hcd: disconnect device
[  103.919075][ T5984] vhci_hcd: vhci_device speed not set
[  104.137634][ T6664] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  104.295572][ T6670] loop1: detected capacity change from 0 to 1024
[  104.533960][ T6666] loop3: detected capacity change from 0 to 32768
[  104.615211][ T6666] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  104.661416][ T6666] XFS (loop3): Ending clean mount
[  104.674325][ T6666] XFS (loop3): Quotacheck needed: Please wait.
[  104.707691][ T6666] XFS (loop3): Quotacheck: Done.
[  104.768449][ T6689] loop1: detected capacity change from 0 to 1024
[  104.771488][ T6057] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  104.792813][ T6689] hfsplus: catalog searching failed
[  104.808229][   T53] hfsplus: bad catalog file entry
[  104.813697][   T53] hfsplus: b-tree write err: -5, ino 3
[  105.059191][   T47] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  105.192435][ T6694] loop1: detected capacity change from 0 to 40427
[  105.204834][ T6694] F2FS-fs (loop1): build fault injection rate: 14
[  105.211121][   T47] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  105.214375][   T47] usb 5-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  105.217577][   T47] usb 5-1: config 220 has an invalid descriptor of length 184, skipping remainder of the config
[  105.222627][ T6694] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  105.245872][ T6694] F2FS-fs (loop1): invalid crc value
[  105.248449][   T47] usb 5-1: config 220 has no interface number 2
[  105.259062][   T47] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  105.263944][   T47] usb 5-1: config 220 interface 0 has no altsetting 0
[  105.274576][   T47] usb 5-1: config 220 interface 76 has no altsetting 0
[  105.277219][   T47] usb 5-1: config 220 interface 1 has no altsetting 0
[  105.282942][    C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  105.288763][   T47] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  105.292277][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.295497][   T47] usb 5-1: Product: syz
[  105.297226][   T47] usb 5-1: Manufacturer: syz
[  105.299420][   T47] usb 5-1: SerialNumber: syz
[  105.314170][    C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  105.362059][ T6696] loop3: detected capacity change from 0 to 32768
[  105.364897][ T6696] btrfs: Bad value for 'thread_pool'
[  105.401802][ T6694] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  105.405198][ T6694] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  105.422820][ T6694] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  105.452291][ T6694] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  105.460497][ T6694] F2FS-fs (loop1): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x509/0x1050
[  105.468397][ T6694] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of __vfs_getxattr+0x3f4/0x430
[  105.488592][ T5923] syz-executor: attempt to access beyond end of device
[  105.488592][ T5923] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  105.500908][ T5923] CPU: 0 UID: 0 PID: 5923 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  105.500923][ T5923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  105.500929][ T5923] Call Trace:
[  105.500933][ T5923]  <TASK>
[  105.500938][ T5923]  dump_stack_lvl+0x189/0x250
[  105.500957][ T5923]  ? __pfx_dump_stack_lvl+0x10/0x10
[  105.500966][ T5923]  ? __pfx_queue_work_on+0x10/0x10
[  105.500976][ T5923]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  105.500987][ T5923]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  105.501002][ T5923]  f2fs_handle_critical_error+0x37c/0x540
[  105.501018][ T5923]  f2fs_write_end_io+0x886/0xb60
[  105.501040][ T5923]  __submit_merged_bio+0x27a/0x6a0
[  105.501053][ T5923]  __submit_merged_write_cond+0x255/0x530
[  105.501067][ T5923]  f2fs_write_data_pages+0x261d/0x3000
[  105.501095][ T5923]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  105.501112][ T5923]  ? rcu_is_watching+0x15/0xb0
[  105.501138][ T5923]  ? check_path+0x21/0x40
[  105.501147][ T5923]  ? check_noncircular+0xe0/0x160
[  105.501181][ T5923]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  105.501192][ T5923]  do_writepages+0x32e/0x550
[  105.501210][ T5923]  ? do_raw_spin_unlock+0x4d/0x240
[  105.501223][ T5923]  filemap_fdatawrite+0x199/0x240
[  105.501235][ T5923]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  105.501271][ T5923]  ? do_raw_spin_unlock+0x4d/0x240
[  105.501282][ T5923]  f2fs_sync_dirty_inodes+0x31f/0x830
[  105.501307][ T5923]  f2fs_write_checkpoint+0x95a/0x1df0
[  105.501340][ T5923]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  105.501387][ T5923]  ? kill_f2fs_super+0x298/0x6c0
[  105.501408][ T5923]  kill_f2fs_super+0x2c3/0x6c0
[  105.501432][ T5923]  ? __pfx_kill_f2fs_super+0x10/0x10
[  105.501447][ T5923]  ? radix_tree_delete_item+0x2b6/0x400
[  105.501485][ T5923]  ? shrinker_free+0x2ce/0x3e0
[  105.501501][ T5923]  deactivate_locked_super+0xbc/0x130
[  105.501521][ T5923]  cleanup_mnt+0x425/0x4c0
[  105.501537][ T5923]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.501555][ T5923]  task_work_run+0x1d4/0x260
[  105.501574][ T5923]  ? __pfx_task_work_run+0x10/0x10
[  105.501587][ T5923]  ? __x64_sys_umount+0x122/0x160
[  105.501607][ T5923]  ? exit_to_user_mode_loop+0x40/0x110
[  105.501631][ T5923]  exit_to_user_mode_loop+0xec/0x110
[  105.501651][ T5923]  do_syscall_64+0x2bd/0x3b0
[  105.501667][ T5923]  ? lockdep_hardirqs_on+0x9c/0x150
[  105.501723][ T5923]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.501737][ T5923]  ? exc_page_fault+0x9f/0xf0
[  105.501755][ T5923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  105.501768][ T5923] RIP: 0033:0x7fb14018ff17
[  105.501816][ T5923] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  105.501828][ T5923] RSP: 002b:00007ffd8a35f968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  105.501844][ T5923] RAX: 0000000000000000 RBX: 00007fb140211c05 RCX: 00007fb14018ff17
[  105.501853][ T5923] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8a35fa20
[  105.501861][ T5923] RBP: 00007ffd8a35fa20 R08: 0000000000000000 R09: 0000000000000000
[  105.501869][ T5923] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd8a360ab0
[  105.501877][ T5923] R13: 00007fb140211c05 R14: 0000000000019b7a R15: 00007ffd8a360af0
[  105.501904][ T5923]  </TASK>
[  105.501911][ T5923] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  105.551152][   T47] usb 5-1: selecting invalid altsetting 0
[  105.661993][   T47] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  105.664842][   T47] usb 5-1: No valid video chain found.
[  105.677953][   T47] usb 5-1: selecting invalid altsetting 0
[  105.689798][   T47] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  105.716458][   T47] usb 5-1: USB disconnect, device number 4
[  105.967119][ T6719] loop1: detected capacity change from 0 to 512
[  105.991213][ T6719] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  106.005892][ T6719] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #17: comm syz.1.286: iget: bad extra_isize 1568 (inode size 256)
[  106.011814][ T6719] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.286: couldn't read orphan inode 17 (err -117)
[  106.018364][ T6719] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.037067][   T33] audit: type=1326 audit(1755040574.137:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.1.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14018ebe9 code=0x7ffc0000
[  106.069255][   T33] audit: type=1326 audit(1755040574.167:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.1.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14018ebe9 code=0x7ffc0000
[  106.091948][ T5923] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  106.137658][   T33] audit: type=1326 audit(1755040574.167:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.1.286" exe="/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7fb14018ebe9 code=0x7ffc0000
[  106.162758][   T33] audit: type=1326 audit(1755040574.167:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.1.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14018ebe9 code=0x7ffc0000
[  106.191688][   T33] audit: type=1326 audit(1755040574.167:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.1.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14018ebe9 code=0x7ffc0000
[  106.229757][   T33] audit: type=1326 audit(1755040574.167:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.1.286" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fb14018ebe9 code=0x7ffc0000
[  106.268592][   T33] audit: type=1326 audit(1755040574.167:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.1.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14018ebe9 code=0x7ffc0000
[  106.291521][   T33] audit: type=1326 audit(1755040574.167:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6717 comm="syz.1.286" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb14018ebe9 code=0x7ffc0000
[  106.312501][   T33] audit: type=1326 audit(1755040574.237:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.287" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1ba478ebe9 code=0x7ffc0000
[  106.366603][   T33] audit: type=1326 audit(1755040574.237:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6716 comm="syz.3.287" exe="/syz-executor" sig=0 arch=c000003e syscall=261 compat=0 ip=0x7f1ba478ebe9 code=0x7ffc0000
[  106.985110][ T6734] loop4: detected capacity change from 0 to 2048
[  107.380262][ T6734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  107.526260][ T6138] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.050058][ T6077] vhci_hcd: vhci_device speed not set
[  108.209786][ T6751] loop1: detected capacity change from 0 to 40427
[  108.219509][ T6751] F2FS-fs (loop1): build fault injection rate: 771
[  108.235693][ T6775] netlink: 4 bytes leftover after parsing attributes in process `syz.4.301'.
[  108.266189][ T6751] F2FS-fs (loop1): invalid crc value
[  108.533245][ T6751] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  108.548147][ T6751] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  108.659786][ T5923] syz-executor: attempt to access beyond end of device
[  108.659786][ T5923] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  108.665219][ T5923] CPU: 0 UID: 0 PID: 5923 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  108.665240][ T5923] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  108.665249][ T5923] Call Trace:
[  108.665255][ T5923]  <TASK>
[  108.665261][ T5923]  dump_stack_lvl+0x189/0x250
[  108.665286][ T5923]  ? __pfx_dump_stack_lvl+0x10/0x10
[  108.665303][ T5923]  ? __pfx_queue_work_on+0x10/0x10
[  108.665316][ T5923]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  108.665331][ T5923]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  108.665355][ T5923]  f2fs_handle_critical_error+0x37c/0x540
[  108.665381][ T5923]  f2fs_write_end_io+0x886/0xb60
[  108.665413][ T5923]  __submit_merged_bio+0x27a/0x6a0
[  108.665436][ T5923]  __submit_merged_write_cond+0x255/0x530
[  108.665489][ T5923]  f2fs_write_data_pages+0x261d/0x3000
[  108.665540][ T5923]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  108.665598][ T5923]  ? stack_depot_save_flags+0x41b/0x860
[  108.665635][ T5923]  ? __lock_acquire+0xab9/0xd20
[  108.665662][ T5923]  ? do_raw_spin_lock+0x121/0x290
[  108.665689][ T5923]  ? do_raw_spin_unlock+0x4d/0x240
[  108.665706][ T5923]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  108.665725][ T5923]  do_writepages+0x32e/0x550
[  108.665752][ T5923]  ? do_raw_spin_unlock+0x4d/0x240
[  108.665772][ T5923]  filemap_fdatawrite+0x199/0x240
[  108.665791][ T5923]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  108.665851][ T5923]  ? do_raw_spin_unlock+0x4d/0x240
[  108.665871][ T5923]  f2fs_sync_dirty_inodes+0x31f/0x830
[  108.665904][ T5923]  f2fs_write_checkpoint+0x95a/0x1df0
[  108.665943][ T5923]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  108.665997][ T5923]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  108.666015][ T5923]  ? kfree+0x18e/0x440
[  108.666035][ T5923]  ? kill_f2fs_super+0x298/0x6c0
[  108.666060][ T5923]  kill_f2fs_super+0x2c3/0x6c0
[  108.666085][ T5923]  ? __pfx_kill_f2fs_super+0x10/0x10
[  108.666103][ T5923]  ? radix_tree_delete_item+0x2b6/0x400
[  108.666126][ T5923]  ? shrinker_free+0x2ce/0x3e0
[  108.666144][ T5923]  deactivate_locked_super+0xbc/0x130
[  108.666162][ T5923]  cleanup_mnt+0x425/0x4c0
[  108.666178][ T5923]  ? lockdep_hardirqs_on+0x9c/0x150
[  108.666197][ T5923]  task_work_run+0x1d4/0x260
[  108.666228][ T5923]  ? __pfx_task_work_run+0x10/0x10
[  108.666244][ T5923]  ? __x64_sys_umount+0x122/0x160
[  108.666266][ T5923]  ? exit_to_user_mode_loop+0x40/0x110
[  108.666290][ T5923]  exit_to_user_mode_loop+0xec/0x110
[  108.666310][ T5923]  do_syscall_64+0x2bd/0x3b0
[  108.666326][ T5923]  ? lockdep_hardirqs_on+0x9c/0x150
[  108.666342][ T5923]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.666355][ T5923]  ? exc_page_fault+0x9f/0xf0
[  108.666374][ T5923]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  108.666386][ T5923] RIP: 0033:0x7fb14018ff17
[  108.666401][ T5923] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  108.666412][ T5923] RSP: 002b:00007ffd8a35f968 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  108.666427][ T5923] RAX: 0000000000000000 RBX: 00007fb140211c05 RCX: 00007fb14018ff17
[  108.666437][ T5923] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd8a35fa20
[  108.666478][ T5923] RBP: 00007ffd8a35fa20 R08: 0000000000000000 R09: 0000000000000000
[  108.666487][ T5923] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd8a360ab0
[  108.666495][ T5923] R13: 00007fb140211c05 R14: 000000000001a7bd R15: 00007ffd8a360af0
[  108.666520][ T5923]  </TASK>
[  108.701357][ T5923] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  109.984949][ T6826] loop4: detected capacity change from 0 to 128
[  110.036068][ T6828] Failed to get privilege flags for destination (handle=0x2:0x0)
[  110.239819][ T6838] loop1: detected capacity change from 0 to 8192
[  110.331606][ T5950] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  110.511737][ T5950] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  110.515140][ T5950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.517592][ T5950] usb 4-1: Product: syz
[  110.519249][ T5950] usb 4-1: Manufacturer: syz
[  110.525237][ T5950] usb 4-1: SerialNumber: syz
[  110.563369][ T5950] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  110.582640][ T6860] netlink: 8 bytes leftover after parsing attributes in process `syz.4.326'.
[  110.614078][ T5950] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  110.826112][    C1] usb 4-1: ath: unknown panic pattern!
[  111.004208][ T6886] loop1: detected capacity change from 0 to 128
[  111.026794][ T6886] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  111.059724][   T24] usb 4-1: USB disconnect, device number 4
[  111.104951][ T6886] UDF-fs: error (device loop1): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  111.313677][ T6900] netlink: 40 bytes leftover after parsing attributes in process `syz.1.338'.
[  111.454010][ T6077] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  111.480034][ T6077] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  111.643474][ T5950] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive
[  111.646781][ T5950] ath9k_htc: Failed to initialize the device
[  111.677995][   T24] usb 4-1: ath9k_htc: USB layer deinitialized
[  111.873627][ T6929] netlink: 12 bytes leftover after parsing attributes in process `syz.3.345'.
[  111.968391][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  111.979977][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  111.984776][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  111.988464][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  111.992678][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  111.996321][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  112.000384][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  112.004312][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  112.008741][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  112.014765][    C1] IPv4: Oversized IP packet from 172.20.20.170
[  112.099086][   T47] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  112.249006][   T47] usb 5-1: Using ep0 maxpacket: 32
[  112.262571][   T47] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  112.266589][   T47] usb 5-1: config 0 has no interface number 0
[  112.270635][   T47] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  112.281796][   T47] usb 5-1: config 0 interface 85 has no altsetting 0
[  112.293778][   T47] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  112.298117][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  112.305425][   T47] usb 5-1: Product: syz
[  112.307281][   T47] usb 5-1: Manufacturer: syz
[  112.318384][   T47] usb 5-1: SerialNumber: syz
[  112.328636][   T47] usb 5-1: config 0 descriptor??
[  112.962522][   T47] appletouch 5-1:0.85: Geyser mode initialized.
[  112.966602][   T47] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input4
[  112.994798][ T6962] loop3: detected capacity change from 0 to 64
[  113.027244][ T6962] Trying to free block not in datazone
[  113.125881][ T6964] loop3: detected capacity change from 0 to 128
[  113.137623][ T6964] EXT4-fs (loop3): Test dummy encryption mode enabled
[  113.147668][ T6964] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0082]
[  113.152381][ T6964] System zones: 1-3, 19-19, 35-36
[  113.165222][ T6964] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  113.176255][ T6077] usb 5-1: USB disconnect, device number 5
[  113.181662][ T6964] ext4 filesystem being mounted at /92/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  113.231845][ T6077] appletouch 5-1:0.85: input: appletouch disconnected
[  113.301146][ T6943] syz.1.348 (6943): drop_caches: 2
[  113.359036][ T6964] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  113.382511][ T6057] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  113.579354][ T5970] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  113.749153][ T5970] usb 2-1: Using ep0 maxpacket: 8
[  113.778791][ T5970] usb 2-1: unable to get BOS descriptor or descriptor too short
[  113.797046][ T5970] usb 2-1: config 8 has an invalid interface number: 141 but max is 0
[  113.801283][ T5970] usb 2-1: config 8 has no interface number 0
[  113.804136][ T5970] usb 2-1: config 8 interface 141 altsetting 11 endpoint 0x5 has invalid maxpacket 1023, setting to 64
[  113.812588][ T5970] usb 2-1: config 8 interface 141 has no altsetting 0
[  113.826306][ T5970] usb 2-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=c1.47
[  113.841121][ T5970] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.848291][ T5970] usb 2-1: Product: syz
[  113.854316][ T5970] usb 2-1: Manufacturer: syz
[  113.860852][ T5970] usb 2-1: SerialNumber: syz
[  114.133586][ T5970] ir_toy 2-1:8.141: required endpoints not found
[  114.157185][ T5970] usb 2-1: USB disconnect, device number 5
[  114.853826][ T7000] @: renamed from bond_slave_0 (while UP)
[  115.078596][ T7006] vlan2: entered allmulticast mode
[  115.084662][ T7006] macvlan0: entered allmulticast mode
[  115.090013][ T7006] veth1_vlan: entered allmulticast mode
[  115.399721][ T7012] loop3: detected capacity change from 0 to 32768
[  115.435554][ T7012] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  115.477250][ T7012] XFS (loop3): Ending clean mount
[  115.482945][ T7012] XFS (loop3): Quotacheck needed: Please wait.
[  115.502934][ T7012] XFS (loop3): Quotacheck: Done.
[  115.542318][   T33] kauditd_printk_skb: 3 callbacks suppressed
[  115.542335][   T33] audit: type=1800 audit(1755040583.647:18): pid=7012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.369" name="bus" dev="loop3" ino=9291 res=0 errno=0
[  115.559165][ T5970] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  115.586864][ T6057] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  115.724050][ T5970] usb 5-1: config 220 has an invalid interface number: 76 but max is 2
[  115.726635][ T5970] usb 5-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  115.731081][ T5970] usb 5-1: config 220 has no interface number 2
[  115.733204][ T5970] usb 5-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  115.737813][ T5970] usb 5-1: config 220 interface 0 has no altsetting 0
[  115.740447][ T7041] loop3: detected capacity change from 0 to 512
[  115.741215][ T5970] usb 5-1: config 220 interface 76 has no altsetting 0
[  115.744502][ T7041] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  115.750132][ T5970] usb 5-1: config 220 interface 1 has no altsetting 0
[  115.758081][ T5970] usb 5-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  115.763296][ T5970] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.765830][ T5970] usb 5-1: Product: syz
[  115.767173][ T5970] usb 5-1: Manufacturer: syz
[  115.770100][ T5970] usb 5-1: SerialNumber: syz
[  115.775607][ T7041] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  115.780602][ T7041] ext4 filesystem being mounted at /100/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  115.789629][ T5984] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  115.798655][ T7041] Quota error (device loop3): do_check_range: Getting dqdh_next_free 4294967294 out of range 0-8
[  115.805417][ T7041] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  115.809392][ T7041] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.380: Failed to acquire dquot type 0
[  115.837339][ T6057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  116.034222][ T5984] usb 2-1: Using ep0 maxpacket: 32
[  116.040893][ T5970] usb 5-1: selecting invalid altsetting 0
[  116.045507][ T5970] usb 5-1: selecting invalid altsetting 0
[  116.054070][ T5970] usb 5-1: Found UVC 7.01 device syz (8086:0b07)
[  116.056241][ T5970] usb 5-1: No valid video chain found.
[  116.062769][ T5970] usb 5-1: selecting invalid altsetting 0
[  116.064793][ T5984] usb 2-1: config 0 has an invalid interface number: 247 but max is 0
[  116.067441][ T5984] usb 2-1: config 0 has no interface number 0
[  116.069587][ T5984] usb 2-1: config 0 interface 247 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  116.072692][ T5984] usb 2-1: config 0 interface 247 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  116.076534][ T5970] usbtest 5-1:220.1: probe with driver usbtest failed with error -22
[  116.081014][ T5970] usb 5-1: USB disconnect, device number 6
[  116.084827][ T6967] udevd[6967]: setting mode of /dev/bus/usb/005/006 to 020664 failed: No such file or directory
[  116.108171][ T6967] udevd[6967]: setting owner of /dev/bus/usb/005/006 to uid=0, gid=0 failed: No such file or directory
[  116.310062][ T5984] usb 2-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice=62.9b
[  116.313000][ T5984] usb 2-1: New USB device strings: Mfr=1, Product=3, SerialNumber=0
[  116.315528][ T5984] usb 2-1: Product: syz
[  116.316922][ T5984] usb 2-1: Manufacturer: syz
[  116.320788][ T5984] usb 2-1: config 0 descriptor??
[  116.537310][   T47] usb 2-1: USB disconnect, device number 6
[  116.866206][ T7053] loop3: detected capacity change from 0 to 512
[  116.898242][ T7053] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.904521][ T7053] ext4 filesystem being mounted at /103/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  116.949634][ T6057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.161753][ T7064] loop3: detected capacity change from 0 to 512
[  117.229472][ T7064] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.234610][ T7064] ext4 filesystem being mounted at /105/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.359864][ T7069] (syz.1.387,7069,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  117.363377][ T7069] (syz.1.387,7069,1):ocfs2_fill_super:1177 ERROR: status = -22
[  117.412109][ T6057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  118.069823][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.396'.
[  118.603319][ T5984] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  118.762756][ T5984] usb 4-1: Using ep0 maxpacket: 16
[  118.784768][ T5984] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  118.791751][ T5984] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  118.796792][ T5984] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  118.801466][ T5984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.821747][ T5984] usb 4-1: config 0 descriptor??
[  119.308828][ T7089] raw-gadget.0 gadget.3: fail, usb_ep_set_halt returned -11
[  119.347944][ T5984] usbhid 4-1:0.0: can't add hid device: -71
[  119.360706][ T5984] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  119.373539][ T5984] usb 4-1: USB disconnect, device number 5
[  120.125743][ T7120] hsr0: entered promiscuous mode
[  120.134062][ T7120] macsec1: entered allmulticast mode
[  120.136252][ T7120] hsr0: entered allmulticast mode
[  120.138296][ T7120] hsr_slave_0: entered allmulticast mode
[  120.140945][ T7120] hsr_slave_1: entered allmulticast mode
[  120.154700][ T7120] hsr0: left allmulticast mode
[  120.156764][ T7120] hsr_slave_0: left allmulticast mode
[  120.162159][ T7120] hsr_slave_1: left allmulticast mode
[  121.273648][ T7128] loop3: detected capacity change from 0 to 4096
[  122.166831][   T47] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  122.330131][   T47] usb 5-1: Using ep0 maxpacket: 32
[  122.345055][   T47] usb 5-1: config 0 interface 0 has no altsetting 0
[  122.392032][   T47] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  122.402919][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.406950][   T47] usb 5-1: Product: syz
[  122.411338][   T47] usb 5-1: Manufacturer: syz
[  122.413532][   T47] usb 5-1: SerialNumber: syz
[  122.457557][   T47] usb 5-1: config 0 descriptor??
[  122.821358][ T7157] loop3: detected capacity change from 0 to 8192
[  122.825333][ T7157] FAT-fs (loop3): bogus sectors per cluster 0
[  122.827699][ T7157] FAT-fs (loop3): Can't find a valid FAT filesystem
[  123.016045][   T47] gs_usb 5-1:0.0: Configuring for 84 interfaces
[  123.018738][   T47] gs_usb 5-1:0.0: Driver cannot handle more that 3 CAN interfaces
[  123.022063][   T47] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -22
[  123.144030][ T7165] loop1: detected capacity change from 0 to 256
[  123.166936][ T7165] FAT-fs (loop1): Directory bread(block 64) failed
[  123.170097][ T7165] FAT-fs (loop1): Directory bread(block 65) failed
[  123.175073][ T7165] FAT-fs (loop1): Directory bread(block 66) failed
[  123.177771][ T7165] FAT-fs (loop1): Directory bread(block 67) failed
[  123.181038][ T7165] FAT-fs (loop1): Directory bread(block 68) failed
[  123.183534][ T7165] FAT-fs (loop1): Directory bread(block 69) failed
[  123.186382][ T7165] FAT-fs (loop1): Directory bread(block 70) failed
[  123.189163][ T7165] FAT-fs (loop1): Directory bread(block 71) failed
[  123.192061][ T7165] FAT-fs (loop1): Directory bread(block 72) failed
[  123.194619][ T7165] FAT-fs (loop1): Directory bread(block 73) failed
[  123.230344][   T47] usb 5-1: USB disconnect, device number 7
[  123.232359][   T33] audit: type=1800 audit(1755040591.337:19): pid=7165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.430" name="file1" dev="loop1" ino=1048622 res=0 errno=0
[  123.252988][ T7169] loop3: detected capacity change from 0 to 1024
[  123.314709][ T7171] loop1: detected capacity change from 0 to 512
[  123.346571][ T6749] hfsplus: b-tree write err: -5, ino 4
[  123.354952][ T7171] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.432: bg 0: block 393: padding at end of block bitmap is not set
[  123.364455][ T7171] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  123.368757][ T7171] EXT4-fs (loop1): 2 truncates cleaned up
[  123.372761][ T7171] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  123.743711][ T5923] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.914225][ T7188] loop3: detected capacity change from 0 to 512
[  124.021761][ T6156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.027508][ T7185] loop4: detected capacity change from 0 to 32768
[  124.051707][ T6156] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.061483][ T7187] loop3: detected capacity change from 0 to 512
[  124.079963][ T7187] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  124.090220][ T7187] EXT4-fs (loop3): orphan cleanup on readonly fs
[  124.095492][ T7187] EXT4-fs warning (device loop3): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-22, ino=15). Please run e2fsck to fix.
[  124.114051][ T7187] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  124.122825][ T7187] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #13: comm syz.3.441: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  124.131035][ T7187] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.441: couldn't read orphan inode 13 (err -117)
[  124.147305][ T6156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.156684][ T6156] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.192186][ T7187] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  124.230647][ T7185] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  124.230662][ T7185]   allowing incompatible features above 0.0: (unknown version)
[  124.230667][ T7185]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  124.247052][ T7185] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  124.250364][ T7185] bcachefs (loop4): initializing new filesystem
[  124.260081][ T7185] bcachefs (loop4): going read-write
[  124.283685][ T7185] bcachefs (loop4): marking superblocks
[  124.294635][ T7185] bcachefs (loop4): initializing freespace
[  124.299992][ T7185] bcachefs (loop4): done initializing freespace
[  124.304079][ T7185] bcachefs (loop4): reading snapshots table
[  124.306051][ T7185] bcachefs (loop4): reading snapshots done
[  124.335387][ T7185] bcachefs (loop4): done starting filesystem
[  124.351375][ T6057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.362440][ T6156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.365719][ T6156] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.531381][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  124.535557][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  124.539189][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  124.543200][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  124.546488][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  124.591223][ T6156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  124.596799][ T6156] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  124.635702][ T7185] syz.4.439 (7185) used greatest stack depth: 15896 bytes left
[  124.687635][ T6138] bcachefs (loop4): shutting down
[  124.694766][ T6138] bcachefs (loop4): going read-only
[  124.697634][ T6138] bcachefs (loop4): finished waiting for writes to stop
[  124.715196][ T6138] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[  124.801054][ T6138] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  124.820225][ T6138] bcachefs (loop4): clean shutdown complete, journal seq 4
[  124.825889][ T6138] bcachefs (loop4): marking filesystem clean
[  124.872667][ T6156] bridge_slave_1: left allmulticast mode
[  124.874980][ T6156] bridge_slave_1: left promiscuous mode
[  124.878704][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[  124.889829][ T6156] bridge_slave_0: left allmulticast mode
[  124.891678][ T6156] bridge_slave_0: left promiscuous mode
[  124.893986][ T6138] bcachefs (loop4): shutdown complete
[  124.895910][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.246314][ T6156] bond0 (unregistering): (slave 1@): Releasing backup interface
[  125.251973][ T6156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  125.256762][ T6156] bond0 (unregistering): Released all slaves
[  125.269127][ T7218] netlink: 'syz.3.448': attribute type 29 has an invalid length.
[  125.282636][ T7220] netlink: 'syz.3.448': attribute type 29 has an invalid length.
[  125.393752][ T7206] chnl_net:caif_netlink_parms(): no params data found
[  125.469938][ T7226] loop3: detected capacity change from 0 to 1024
[  125.525822][ T7226] syz.3.449: attempt to access beyond end of device
[  125.525822][ T7226] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024
[  125.542554][ T7226] buffer_io_error: 22 callbacks suppressed
[  125.542569][ T7226] Buffer I/O error on dev loop3, logical block 458752, async page read
[  125.548576][ T7226] syz.3.449: attempt to access beyond end of device
[  125.548576][ T7226] loop3: rw=0, sector=917504, nr_sectors = 2 limit=1024
[  125.557906][ T7226] Buffer I/O error on dev loop3, logical block 458752, async page read
[  125.742162][ T7206] bridge0: port 1(bridge_slave_0) entered blocking state
[  125.747358][ T7206] bridge0: port 1(bridge_slave_0) entered disabled state
[  125.755811][ T7206] bridge_slave_0: entered allmulticast mode
[  125.761905][ T7206] bridge_slave_0: entered promiscuous mode
[  125.793421][ T7206] bridge0: port 2(bridge_slave_1) entered blocking state
[  125.799726][ T7206] bridge0: port 2(bridge_slave_1) entered disabled state
[  125.802642][ T7206] bridge_slave_1: entered allmulticast mode
[  125.807355][ T7206] bridge_slave_1: entered promiscuous mode
[  125.856173][ T6156] hsr_slave_0: left promiscuous mode
[  125.876671][ T6156] hsr_slave_1: left promiscuous mode
[  125.883395][ T6156] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  125.886380][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  125.893537][ T6156] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  125.896437][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.916349][ T6156] veth1_macvtap: left promiscuous mode
[  125.918639][ T6156] veth0_macvtap: left promiscuous mode
[  125.923395][ T6156] veth1_vlan: left promiscuous mode
[  125.925450][ T6156] veth0_vlan: left promiscuous mode
[  126.103172][ T7245] netlink: 'syz.3.455': attribute type 1 has an invalid length.
[  126.115041][ T7245] netlink: 'syz.3.455': attribute type 2 has an invalid length.
[  126.123693][ T7245] netlink: 4 bytes leftover after parsing attributes in process `syz.3.455'.
[  126.373007][ T7252] vivid-000: disconnect
[  126.378031][ T7248] vivid-000: reconnect
[  126.608582][   T55] Bluetooth: hci0: command tx timeout
[  126.657493][ T7265] loop3: detected capacity change from 0 to 8
[  126.708200][ T7265] SQUASHFS error: Unable to read inode 0xa7
[  126.821712][ T6156] team0 (unregistering): Port device team_slave_1 removed
[  126.846950][ T6156] team0 (unregistering): Port device team_slave_0 removed
[  127.533210][ T7206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  127.538475][ T7206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  127.563281][ T7206] team0: Port device team_slave_0 added
[  127.566769][ T7206] team0: Port device team_slave_1 added
[  127.670896][ T7206] batman_adv: batadv0: Adding interface: batadv_slave_0
[  127.673170][ T7206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.025114][ T7206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  128.038346][ T7206] batman_adv: batadv0: Adding interface: batadv_slave_1
[  128.043281][ T7206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  128.053653][ T7206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  128.080671][ T7277] Falling back ldisc for ptm0.
[  128.183892][ T7206] hsr_slave_0: entered promiscuous mode
[  128.186163][ T7206] hsr_slave_1: entered promiscuous mode
[  128.188256][ T7206] debugfs: 'hsr0' already exists in 'hsr'
[  128.195446][ T7206] Cannot create hsr debugfs directory
[  128.618976][ T7206] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  128.626566][ T7206] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  128.636061][ T7293] loop4: detected capacity change from 0 to 4096
[  128.642540][ T7206] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  128.659351][ T7206] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  128.679239][   T55] Bluetooth: hci0: command tx timeout
[  128.704288][ T7293] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  128.717264][ T7293] ntfs3(loop4): Failed to load $Extend (-22).
[  128.728614][ T7293] ntfs3(loop4): Failed to initialize $Extend.
[  128.757611][ T7293] ntfs3(loop4): ino=1b, "file0" ntfs_readdir
[  128.918452][ T7206] 8021q: adding VLAN 0 to HW filter on device bond0
[  128.983947][ T7206] 8021q: adding VLAN 0 to HW filter on device team0
[  129.003120][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[  129.005428][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[  129.016341][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[  129.018801][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[  129.321162][ T7206] 8021q: adding VLAN 0 to HW filter on device batadv0
[  129.870460][ T7206] veth0_vlan: entered promiscuous mode
[  129.889379][ T7206] veth1_vlan: entered promiscuous mode
[  129.930194][ T7206] veth0_macvtap: entered promiscuous mode
[  129.935307][ T7206] veth1_macvtap: entered promiscuous mode
[  129.947415][ T7206] batman_adv: batadv0: Interface activated: batadv_slave_0
[  129.955534][ T7206] batman_adv: batadv0: Interface activated: batadv_slave_1
[  129.965739][ T5983] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  129.968463][ T5983] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  129.975160][ T5983] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  129.977982][ T5983] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  130.060727][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.067725][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  130.124102][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  130.139161][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  131.175662][   T55] Bluetooth: hci0: command tx timeout
[  131.719750][ T7414] loop3: detected capacity change from 0 to 1024
[  131.722511][ T7414] hfsplus: Unknown parameter ''
[  131.812484][ T7418] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma?
[  131.813046][ T7405] block device autoloading is deprecated and will be removed.
[  131.853155][ T7412] block device autoloading is deprecated and will be removed.
[  132.062282][ T7424] binder: 7423:7424 ioctl c0306201 200000000040 returned -14
[  132.404241][ T7433] netlink: 4 bytes leftover after parsing attributes in process `syz.4.501'.
[  132.417976][ T7433] netlink: 16 bytes leftover after parsing attributes in process `syz.4.501'.
[  132.522668][ T7437] netlink: 'syz.5.503': attribute type 63 has an invalid length.
[  133.134372][ T7442] loop4: detected capacity change from 0 to 32768
[  133.206116][ T7442] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  133.206135][ T7442]   allowing incompatible features above 0.0: (unknown version)
[  133.206144][ T7442]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  133.222592][ T7442] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  133.225371][ T7442] bcachefs (loop4): initializing new filesystem
[  133.237021][ T7442] bcachefs (loop4): going read-write
[  133.242398][ T7442] bcachefs (loop4): marking superblocks
[  133.249618][ T5233] Bluetooth: hci0: command tx timeout
[  133.263791][ T7442] bcachefs (loop4): initializing freespace
[  133.272601][ T7442] bcachefs (loop4): done initializing freespace
[  133.278275][ T7442] bcachefs (loop4): reading snapshots table
[  133.281294][ T7442] bcachefs (loop4): reading snapshots done
[  133.305630][ T7442] bcachefs (loop4):  loop4: Superblock write was silently dropped! (seq 0 expected 42)
[  133.309910][ T7442] bcachefs (loop4): done starting filesystem
[  133.622647][ T6138] bcachefs (loop4): shutting down
[  133.625081][ T6138] bcachefs (loop4): going read-only
[  133.627404][ T6138] bcachefs (loop4): finished waiting for writes to stop
[  133.633604][ T6138] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[  133.657411][ T6138] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  133.662542][ T6138] bcachefs (loop4): clean shutdown complete, journal seq 4
[  133.665212][ T6138] bcachefs (loop4): marking filesystem clean
[  133.684744][ T6138] bcachefs (loop4): shutdown complete
[  133.869099][ T5984] usb 6-1: new full-speed USB device number 2 using dummy_hcd
[  134.021987][ T5984] usb 6-1: config 0 has an invalid interface number: 93 but max is 0
[  134.025290][ T5984] usb 6-1: config 0 has no interface number 0
[  134.030139][   T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  134.036704][ T5984] usb 6-1: New USB device found, idVendor=10b8, idProduct=1bb4, bcdDevice=34.65
[  134.041970][ T5984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.045178][ T5984] usb 6-1: Product: syz
[  134.046920][ T5984] usb 6-1: Manufacturer: syz
[  134.048835][ T5984] usb 6-1: SerialNumber: syz
[  134.053306][ T5984] usb 6-1: config 0 descriptor??
[  134.179210][   T24] usb 4-1: Using ep0 maxpacket: 16
[  134.187292][   T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  134.192919][   T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  134.196386][   T24] usb 4-1: config 1 interface 0 altsetting 1 endpoint 0x4 has invalid wMaxPacketSize 0
[  134.201768][   T24] usb 4-1: config 1 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 8
[  134.206781][   T24] usb 4-1: config 1 interface 0 has no altsetting 0
[  134.215507][   T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0201, bcdDevice= 0.40
[  134.219394][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.222724][   T24] usb 4-1: Product: syz
[  134.224347][   T24] usb 4-1: Manufacturer: syz
[  134.226153][   T24] usb 4-1: SerialNumber: syz
[  134.272209][ T5984] dvb-usb: found a 'DiBcom TFE7090PVR reference design' in warm state.
[  134.284770][ T5984] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  134.294182][ T5984] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  134.298018][ T5984] usb 6-1: media controller created
[  134.308290][ T5984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  134.341504][ T5984] DVB: Unable to find symbol dib7000p_attach()
[  134.344106][ T5984] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  134.347709][ T5984] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  134.352010][ T5984] dvbdev: DVB: registering new adapter (DiBcom TFE7090PVR reference design)
[  134.355506][ T5984] usb 6-1: media controller created
[  134.362184][ T5984] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  134.374400][ T5984] dib0700: the master dib7090 has to be initialized first
[  134.377284][ T5984] dvb-usb: no frontend was attached by 'DiBcom TFE7090PVR reference design'
[  134.429125][ T5984] rc_core: IR keymap rc-dib0700-rc5 not found
[  134.431750][ T5984] Registered IR keymap rc-empty
[  134.434342][ T5984] dvb-usb: could not initialize remote control.
[  134.437097][ T5984] dvb-usb: DiBcom TFE7090PVR reference design successfully initialized and connected.
[  134.446904][   T24] usb 4-1: 0:2 : does not exist
[  134.450325][   T24] usb 4-1: unit 3 not found!
[  134.467528][   T24] usb 4-1: USB disconnect, device number 6
[  134.494152][ T6069] udevd[6069]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  134.512395][ T5984] usb 6-1: USB disconnect, device number 2
[  134.562242][ T5984] dvb-usb: DiBcom TFE7090PVR reference design successfully deinitialized and disconnected.
[  134.923746][ T7491] loop4: detected capacity change from 0 to 164
[  134.939900][ T7491] iso9660: Corrupted directory entry in block 4 of inode 1792
[  135.182205][ T7506] loop4: detected capacity change from 0 to 16
[  135.192873][ T7506] erofs (device loop4): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  135.214747][ T7506] erofs (device loop4): mounted with root inode @ nid 36.
[  135.240583][ T5233] Bluetooth: hci2: command 0x0406 tx timeout
[  135.276876][ T7511] netlink: 3 bytes leftover after parsing attributes in process `+}[@'.
[  135.436290][ T7517] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  135.625548][ T7523] loop3: detected capacity change from 0 to 2048
[  135.646601][ T7523] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  135.648306][ T7486] udevd[7486]: incorrect nilfs2 checksum on /dev/loop3
[  135.652870][ T7523] NILFS (loop3): mounting unchecked fs
[  135.654821][ T7523] NILFS (loop3): recovery required for readonly filesystem
[  135.657745][ T7523] NILFS (loop3): write access will be enabled during recovery
[  135.696497][ T7523] NILFS (loop3): norecovery option specified, skipping roll-forward recovery
[  135.759356][ T7523] NILFS (loop3): couldn't remount because the filesystem is in an incomplete recovery state
[  135.801249][ T7527] loop5: detected capacity change from 0 to 256
[  135.892253][ T7527] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  136.763600][ T7556] netlink: 'syz.5.542': attribute type 3 has an invalid length.
[  136.773053][ T7556] netlink: 'syz.5.542': attribute type 1 has an invalid length.
[  136.777607][ T7555] loop4: detected capacity change from 0 to 256
[  136.786063][ T7556] netlink: 193500 bytes leftover after parsing attributes in process `syz.5.542'.
[  136.792472][ T7555] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  136.795938][ T7555] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  136.804828][ T7555] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  136.876306][   T33] audit: type=1800 audit(1755040604.977:20): pid=7555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.543" name="file1" dev="loop4" ino=1048628 res=0 errno=0
[  136.902390][   T33] audit: type=1804 audit(1755040604.997:21): pid=7555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.543" name="/newroot/120/file1/file1" dev="loop4" ino=1048628 res=1 errno=0
[  137.273933][ T7566] netlink: 20 bytes leftover after parsing attributes in process `syz.5.548'.
[  137.320524][ T7570] netlink: 24 bytes leftover after parsing attributes in process `syz.4.550'.
[  137.398033][ T7573] loop4: detected capacity change from 0 to 2048
[  137.423863][ T7573] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  137.438348][ T7573] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  137.447803][ T7573] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 10 with max blocks 1 with error 28
[  137.453788][ T7573] EXT4-fs (loop4): This should not happen!! Data will be lost
[  137.453788][ T7573] 
[  137.456802][ T7573] EXT4-fs (loop4): Total free blocks count 0
[  137.458733][ T7573] EXT4-fs (loop4): Free/Dirty block details
[  137.462292][ T7573] EXT4-fs (loop4): free_blocks=2415919104
[  137.464192][ T7573] EXT4-fs (loop4): dirty_blocks=16
[  137.465794][ T7573] EXT4-fs (loop4): Block reservation details
[  137.467734][ T7573] EXT4-fs (loop4): i_reserved_data_blocks=1
[  137.474582][ T7573] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  137.669214][ T5950] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  137.884619][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  137.887886][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  138.169647][ T5950] usb 6-1: Using ep0 maxpacket: 16
[  138.177266][ T5950] usb 6-1: New USB device found, idVendor=0403, idProduct=b8d8, bcdDevice=30.bb
[  138.180506][ T5950] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.182961][ T5950] usb 6-1: Product: syz
[  138.184302][ T5950] usb 6-1: Manufacturer: syz
[  138.185828][ T5950] usb 6-1: SerialNumber: syz
[  138.272135][ T7591] loop3: detected capacity change from 0 to 256
[  138.276698][ T7591] exfat: Deprecated parameter 'namecase'
[  138.282679][ T7591] exfat: Deprecated parameter 'utf8'
[  138.295384][ T7591] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6d3f72e, utbl_chksum : 0xe619d30d)
[  138.388530][ T7593] loop3: detected capacity change from 0 to 512
[  138.547229][ T5950] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  138.564513][ T7593] EXT4-fs (loop3): 1 orphan inode deleted
[  138.572717][ T7593] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  138.578264][ T7593] ext4 filesystem being mounted at /183/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.581567][ T5950] snd-usb-audio 6-1:222.0: probe with driver snd-usb-audio failed with error -71
[  138.589914][   T85] Quota error (device loop3): do_check_range: Getting dqdh_entries 15 out of range 0-14
[  138.594220][   T85] EXT4-fs error (device loop3): ext4_release_dquot:6969: comm kworker/u9:3: Failed to release dquot type 1
[  138.604337][ T7593] netlink: 52 bytes leftover after parsing attributes in process `syz.3.558'.
[  138.607468][ T5950] usb 6-1: USB disconnect, device number 3
[  138.611386][ T7593] net_ratelimit: 22 callbacks suppressed
[  138.611429][ T7593] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  138.641759][ T7486] udevd[7486]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:222.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  138.675015][ T6057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.731148][   T55] Bluetooth: hci2: ISO packet too small
[  138.773019][ T7606] loop3: detected capacity change from 0 to 128
[  138.790382][ T7609] loop4: detected capacity change from 0 to 256
[  138.797692][ T7609] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  138.837085][ T7606] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  138.859471][ T7606] ext4 filesystem being mounted at /185/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  138.904128][ T6057] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  139.137787][ T7614] afs: Unknown parameter 'A~|vN'
[  139.501100][ T7629] loop5: detected capacity change from 0 to 1024
[  139.513406][ T7629] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  139.524588][ T7629] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  139.541037][   T33] audit: type=1800 audit(1755040607.647:22): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.571" name="bus" dev="loop5" ino=18 res=0 errno=0
[  139.551116][   T33] audit: type=1804 audit(1755040607.657:23): pid=7629 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.571" name="/newroot/31/bus/bus" dev="loop5" ino=18 res=1 errno=0
[  139.582505][ T7206] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.359586][ T7640] loop5: detected capacity change from 0 to 32768
[  140.391255][ T7640] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  140.486264][ T7206] ocfs2: Unmounting device (7,5) on (node local)
[  140.716629][ T7651] IPv6: Can't replace route, no match found
[  140.948997][ T5950] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  141.039270][   T24] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  141.103590][ T5950] usb 5-1: config index 0 descriptor too short (expected 35577, got 27)
[  141.107005][ T5950] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  141.111291][ T5950] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92
[  141.114912][ T5950] usb 5-1: config 1 has no interface number 0
[  141.118098][ T5950] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  141.124800][ T5950] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  141.130097][ T5950] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  141.133735][ T5950] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.146003][ T5950] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found
[  141.199013][   T24] usb 6-1: Using ep0 maxpacket: 32
[  141.203448][   T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  141.207359][   T24] usb 6-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  141.212328][   T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.219009][   T24] usb 6-1: config 0 descriptor??
[  141.346846][ T5950] snd_usb_pod 5-1:1.1: invalid control EP
[  141.348753][ T5950] snd_usb_pod 5-1:1.1: cannot start listening: -22
[  141.352132][ T5950] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected
[  141.354761][ T5950] snd_usb_pod 5-1:1.1: probe with driver snd_usb_pod failed with error -22
[  141.550790][ T5950] usb 5-1: USB disconnect, device number 8
[  141.636355][   T24] magicmouse 0003:05AC:0265.0005: hidraw0: USB HID v0.00 Device [HID 05ac:0265] on usb-dummy_hcd.5-1/input0
[  141.836722][ T5984] usb 6-1: USB disconnect, device number 4
[  142.487866][ T7684] loop4: detected capacity change from 0 to 256
[  142.792404][ T7703] loop3: detected capacity change from 0 to 8
[  142.800270][ T7703] SQUASHFS error: lzo decompression failed, data probably corrupt
[  142.804654][ T7703] SQUASHFS error: Failed to read block 0x91: -5
[  142.807335][ T7703] SQUASHFS error: Unable to read metadata cache entry [8f]
[  142.811335][ T7703] SQUASHFS error: Unable to read inode 0x11f
[  142.819341][   T24] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  142.971383][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  142.975648][   T24] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  142.979915][   T24] usb 5-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  142.985133][   T24] usb 5-1: config 1 interface 0 has no altsetting 1
[  142.991074][   T24] usb 5-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  142.994671][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.997960][   T24] usb 5-1: Product: syz
[  143.002604][   T24] usb 5-1: Manufacturer: syz
[  143.004556][   T24] usb 5-1: SerialNumber: syz
[  143.023252][   T24] smsusb:smsusb_probe: board id=8, interface number 0
[  143.119045][ T5984] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  143.226756][   T24] smsusb:smsusb_probe: Device initialized with return code -19
[  143.273303][ T5984] usb 4-1: config 0 has an invalid interface number: 173 but max is 0
[  143.277415][ T5984] usb 4-1: config 0 has no interface number 0
[  143.281689][ T5984] usb 4-1: New USB device found, idVendor=2040, idProduct=4982, bcdDevice=95.d3
[  143.285314][ T5984] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.295379][ T5984] usb 4-1: config 0 descriptor??
[  143.437939][ T5985] usb 5-1: USB disconnect, device number 9
[  143.504825][ T5984] hdpvr 4-1:0.173: unexpected answer of status request, len -71
[  143.510196][ T5984] hdpvr 4-1:0.173: device init failed
[  143.514196][ T5984] hdpvr 4-1:0.173: probe with driver hdpvr failed with error -12
[  143.521747][ T5984] usb 4-1: USB disconnect, device number 7
[  144.643560][ T7736] loop5: detected capacity change from 0 to 1024
[  144.721679][ T7730] loop3: detected capacity change from 0 to 32768
[  144.750766][ T7730] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  144.775413][ T7393] hfsplus: b-tree write err: -5, ino 4
[  144.815425][ T7730] XFS (loop3): Ending clean mount
[  144.840790][ T7730] XFS (loop3): Quotacheck needed: Please wait.
[  144.901204][ T7730] XFS (loop3): Quotacheck: Done.
[  145.324687][ T6057] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  145.516006][ T7761] loop4: detected capacity change from 0 to 512
[  145.540014][ T7761] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  145.564715][ T7761] EXT4-fs (loop4): 1 truncate cleaned up
[  145.574212][ T7761] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  145.582581][ T7761] EXT4-fs error (device loop4): ext4_ext_precache:632: inode #15: comm syz.4.609: pblk 0 bad header/extent: invalid magic - magic 7973, entries 27514, max 27745(0), depth 25964(25964)
[  145.623116][ T6138] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.259073][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  146.288495][ T7806] loop4: detected capacity change from 0 to 4096
[  146.411920][    T9] usb 4-1: Using ep0 maxpacket: 32
[  146.418479][    T9] usb 4-1: config 0 has an invalid interface number: 74 but max is 0
[  146.422979][    T9] usb 4-1: config 0 has no interface number 0
[  146.427700][    T9] usb 4-1: New USB device found, idVendor=07fd, idProduct=0004, bcdDevice=8e.fa
[  146.439181][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.445763][    T9] usb 4-1: Product: syz
[  146.447240][    T9] usb 4-1: Manufacturer: syz
[  146.448829][    T9] usb 4-1: SerialNumber: syz
[  146.457043][    T9] usb 4-1: config 0 descriptor??
[  146.701270][ T5984] usb 4-1: USB disconnect, device number 8
[  146.819734][    T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  146.969193][    T9] usb 5-1: Using ep0 maxpacket: 8
[  146.975495][    T9] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[  146.982016][    T9] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  146.985735][    T9] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  146.989030][    T9] usb 5-1: Product: syz
[  146.990863][    T9] usb 5-1: Manufacturer: syz
[  146.992872][    T9] usb 5-1: SerialNumber: syz
[  147.204751][    T9] usb 5-1: Handspring Visor / Palm OS: No valid connect info available
[  147.208459][    T9] usb 5-1: Handspring Visor / Palm OS: port 79, is for unknown use
[  147.211418][    T9] usb 5-1: Handspring Visor / Palm OS: port 0, is for Debugger use
[  147.214108][    T9] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2
[  147.270564][ T7825] loop3: detected capacity change from 0 to 512
[  147.278601][ T7825] EXT4-fs: Ignoring removed nobh option
[  147.293978][ T7825] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.628: iget: bad i_size value: 38620345925642
[  147.298195][ T7825] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.628: couldn't read orphan inode 15 (err -117)
[  147.305898][ T7825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  147.340425][ T6057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.406625][ T7828] loop3: detected capacity change from 0 to 256
[  147.425008][    T9] usb 5-1: palm_os_3_probe - error -71 getting bytes available request
[  147.437092][    T9] visor 5-1:1.0: Handspring Visor / Palm OS converter detected
[  147.444413][ T7828] FAT-fs (loop3): Directory bread(block 64) failed
[  147.447089][ T7828] FAT-fs (loop3): Directory bread(block 65) failed
[  147.449983][ T7828] FAT-fs (loop3): Directory bread(block 66) failed
[  147.452712][ T7828] FAT-fs (loop3): Directory bread(block 67) failed
[  147.455530][ T7828] FAT-fs (loop3): Directory bread(block 68) failed
[  147.458119][ T7828] FAT-fs (loop3): Directory bread(block 69) failed
[  147.458728][    T9] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  147.461239][ T7828] FAT-fs (loop3): Directory bread(block 70) failed
[  147.466637][ T7828] FAT-fs (loop3): Directory bread(block 71) failed
[  147.469533][ T7828] FAT-fs (loop3): Directory bread(block 72) failed
[  147.470257][    T9] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  147.472268][ T7828] FAT-fs (loop3): Directory bread(block 73) failed
[  147.490704][    T9] usb 5-1: USB disconnect, device number 10
[  147.561115][   T33] audit: type=1800 audit(1755040615.667:24): pid=7828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.629" name="bus" dev="loop3" ino=1048632 res=0 errno=0
[  147.567198][    T9] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  147.578235][    T9] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  147.582114][    T9] visor 5-1:1.0: device disconnected
[  147.704224][ T7832] loop5: detected capacity change from 0 to 128
[  147.714006][ T7832] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  147.728006][ T7832] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  147.863680][ T7837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.629'.
[  148.857044][ T7849] netlink: 28 bytes leftover after parsing attributes in process `syz.3.636'.
[  148.873090][ T7849] netlink: 32 bytes leftover after parsing attributes in process `syz.3.636'.
[  148.877391][ T7849] tipc: MTU too low for tipc bearer
[  148.923943][ T7856] loop4: detected capacity change from 0 to 1024
[  148.957667][ T7856] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.068471][ T7862] Driver unsupported XDP return value 0 on prog  (id 65) dev N/A, expect packet loss!
[  149.161474][ T6138] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.403827][ T7875] loop5: detected capacity change from 0 to 1024
[  149.424749][ T7875] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  149.709088][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  149.862083][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  149.870183][    T9] usb 4-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=57.66
[  149.873756][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.877063][    T9] usb 4-1: Product: syz
[  149.878849][    T9] usb 4-1: Manufacturer: syz
[  149.881131][    T9] usb 4-1: SerialNumber: syz
[  149.885858][    T9] usb 4-1: config 0 descriptor??
[  149.893224][    T9] belkin_sa 4-1:0.0: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  149.898515][    T9] usb 4-1: bcdDevice: 5766, bfc: 0
[  149.903868][    T9] usb 4-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  150.097900][ T6077] usb 4-1: USB disconnect, device number 9
[  150.104093][ T6077] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  150.111580][ T6077] belkin_sa 4-1:0.0: device disconnected
[  150.165737][ T7885] loop4: detected capacity change from 0 to 1024
[  150.224186][   T85] hfsplus: b-tree write err: -5, ino 4
[  150.489037][    T9] usb 5-1: new full-speed USB device number 11 using dummy_hcd
[  150.595565][ T7896] mmap: syz.5.656 (7896) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  150.661700][    T9] usb 5-1: config 8 has an invalid interface number: 177 but max is 0
[  150.665503][    T9] usb 5-1: config 8 has no interface number 0
[  150.667952][    T9] usb 5-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  150.684346][    T9] usb 5-1: config 8 interface 177 has no altsetting 0
[  150.700337][    T9] usb 5-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  150.708348][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  150.731150][ T7887] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  150.973831][    T9] usb 5-1: string descriptor 0 read error: -71
[  150.981470][    C0] ir_toy 5-1:8.177: out urb status: -71
[  151.393035][ T7900] loop5: detected capacity change from 0 to 32768
[  151.402825][ T7900] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.658 (7900)
[  151.433428][ T7900] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  151.437341][ T7900] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  151.476338][ T7900] BTRFS info (device loop5): rebuilding free space tree
[  151.489414][    T9] ir_toy 5-1:8.177: could not write reset command: -110
[  151.492147][    T9] ir_toy 5-1:8.177: probe with driver ir_toy failed with error -110
[  151.514900][    T9] usb 5-1: USB disconnect, device number 11
[  151.524768][ T7900] BTRFS info (device loop5): disabling free space tree
[  151.530496][ T7900] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  151.535223][ T7900] BTRFS info (device loop5): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  151.717416][   T33] audit: type=1804 audit(1755040619.817:25): pid=7924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.662" name="/newroot/214/bus" dev="tmpfs" ino=1147 res=1 errno=0
[  151.751188][ T7206] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  151.802304][ T7928] loop3: detected capacity change from 0 to 512
[  151.844198][ T7928] EXT4-fs error (device loop3): ext4_xattr_inode_iget:433: comm syz.3.664: Parent and EA inode have the same ino 15
[  151.882078][ T5233] Bluetooth: hci2: command 0x0406 tx timeout
[  151.887652][ T7928] EXT4-fs (loop3): 1 orphan inode deleted
[  151.898448][ T7928] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.051304][ T6057] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.396553][ T7956] loop5: detected capacity change from 0 to 256
[  152.465425][ T7960] loop5: detected capacity change from 0 to 256
[  152.471627][ T7960] exfat: Deprecated parameter 'namecase'
[  152.486522][ T7960] exfat: Deprecated parameter 'namecase'
[  152.493461][ T7960] exfat: Deprecated parameter 'namecase'
[  152.501220][ T7960] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  152.617188][ T5984] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  152.776190][ T5984] usb 4-1: unable to get BOS descriptor or descriptor too short
[  152.782665][ T5984] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  152.790333][ T5984] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  152.801894][ T5984] usb 4-1: config 1 interface 1 has no altsetting 0
[  152.812786][ T5984] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  152.816382][ T5984] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  152.836403][ T5984] usb 4-1: Product: syz
[  152.846960][ T5984] usb 4-1: Manufacturer: syz
[  152.848836][ T5984] usb 4-1: SerialNumber: syz
[  152.950644][ T7975] netlink: 8 bytes leftover after parsing attributes in process `syz.5.684'.
[  152.954111][ T7975] netlink: 12 bytes leftover after parsing attributes in process `syz.5.684'.
[  153.025976][ T7977] loop4: detected capacity change from 0 to 512
[  153.033028][ T7977] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem
[  153.062160][ T7977] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102]
[  153.068225][ T7977] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.685: corrupted in-inode xattr: e_value size too large
[  153.077167][ T7977] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.685: couldn't read orphan inode 15 (err -117)
[  153.084568][ T7977] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.142580][ T5984] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  153.147194][ T5984] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  153.160161][ T5984] usb 4-1: 2:1 : invalid UAC_FORMAT_TYPE desc
[  153.232461][ T5984] usb 4-1: USB disconnect, device number 10
[  153.518938][ T7983] netlink: 28 bytes leftover after parsing attributes in process `syz.5.687'.
[  153.531351][ T7983] netlink: 'syz.5.687': attribute type 7 has an invalid length.
[  153.534089][ T7983] netlink: 'syz.5.687': attribute type 8 has an invalid length.
[  153.536785][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.5.687'.
[  153.547176][ T7486] udevd[7486]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  153.884072][ T7997] loop5: detected capacity change from 0 to 128
[  153.898740][ T7997] EXT4-fs warning (device loop5): ext4_init_metadata_csum:4622: metadata_csum and uninit_bg are redundant flags; please run fsck.
[  153.908679][ T7997] EXT4-fs (loop5): Encoding requested by superblock is unknown
[  154.019283][ T6138] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.284611][ T8014] netlink: 'syz.4.702': attribute type 1 has an invalid length.
[  154.287524][ T8014] netlink: 'syz.4.702': attribute type 2 has an invalid length.
[  154.292386][ T8014] netlink: 'syz.4.702': attribute type 1 has an invalid length.
[  154.295146][ T8014] netlink: 'syz.4.702': attribute type 2 has an invalid length.
[  154.406286][ T8018] loop4: detected capacity change from 0 to 8192
[  154.578696][   T24] usb 4-1: new high-speed USB device number 11 using dummy_hcd
Connection to localhost closed by remote host.
[  154.729401][   T24] usb 4-1: Using ep0 maxpacket: 8
[  155.018578][ T6156] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.125891][ T6156] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.187913][   T24] usb 4-1: device descriptor read/all, error -71
[  155.250302][ T6156] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.313860][ T6156] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.455553][ T6156] bridge_slave_1: left allmulticast mode
[  155.457474][ T6156] bridge_slave_1: left promiscuous mode
[  155.460350][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.464656][ T6156] bridge_slave_0: left allmulticast mode
[  155.466770][ T6156] bridge_slave_0: left promiscuous mode
[  155.468795][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.945705][ T6156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.953111][ T6156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.957823][ T6156] bond0 (unregistering): Released all slaves
[  156.266475][ T6156] hsr_slave_0: left promiscuous mode
[  156.279955][ T6156] hsr_slave_1: left promiscuous mode
[  156.282875][ T6156] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.286152][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.300714][ T6156] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.303565][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.324562][ T6156] veth1_macvtap: left promiscuous mode
[  156.326853][ T6156] veth0_macvtap: left promiscuous mode
[  156.330088][ T6156] veth1_vlan: left allmulticast mode
[  156.332160][ T6156] veth1_vlan: left promiscuous mode
[  156.334256][ T6156] veth0_vlan: left promiscuous mode
[  156.857420][ T6156] team0 (unregistering): Port device team_slave_1 removed
[  156.897717][ T6156] team0 (unregistering): Port device team_slave_0 removed
[  157.679693][ T6156] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.764679][ T6156] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.847321][ T6156] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  157.949277][ T6156] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.143065][ T6156] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.233437][ T6156] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.305771][ T6156] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.366037][ T6156] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  158.510715][ T6156] bridge_slave_1: left allmulticast mode
[  158.512999][ T6156] bridge_slave_1: left promiscuous mode
[  158.515426][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.523510][ T6156] bridge_slave_0: left allmulticast mode
[  158.525377][ T6156] bridge_slave_0: left promiscuous mode
[  158.527609][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.535057][ T6156] bridge_slave_1: left allmulticast mode
[  158.537430][ T6156] bridge_slave_1: left promiscuous mode
[  158.541681][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.547592][ T6156] bridge_slave_0: left allmulticast mode
[  158.550630][ T6156] bridge_slave_0: left promiscuous mode
[  158.553194][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state
[  158.991397][ T6156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.997897][ T6156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.004692][ T6156] bond0 (unregistering): Released all slaves
[  159.375045][ T6156] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  159.381114][ T6156] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  159.385983][ T6156] bond0 (unregistering): Released all slaves
[  159.850339][ T6156] hsr_slave_0: left promiscuous mode
[  159.854636][ T6156] hsr_slave_1: left promiscuous mode
[  159.857294][ T6156] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.860903][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.864550][ T6156] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.867381][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.878739][ T6156] hsr_slave_0: left promiscuous mode
[  159.882038][ T6156] hsr_slave_1: left promiscuous mode
[  159.884719][ T6156] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.887525][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.896598][ T6156] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.900690][ T6156] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.940286][ T6156] veth1_macvtap: left promiscuous mode
[  159.942607][ T6156] veth0_macvtap: left promiscuous mode
[  159.944886][ T6156] veth1_vlan: left promiscuous mode
[  159.947038][ T6156] veth0_vlan: left promiscuous mode
[  159.952805][ T6156] veth1_macvtap: left promiscuous mode
[  159.955063][ T6156] veth0_macvtap: left promiscuous mode
[  159.957329][ T6156] veth1_vlan: left promiscuous mode
[  159.960222][ T6156] veth0_vlan: left promiscuous mode
[  160.522807][ T6156] team0 (unregistering): Port device team_slave_1 removed
[  160.566241][ T6156] team0 (unregistering): Port device team_slave_0 removed
[  161.752146][ T6156] team0 (unregistering): Port device team_slave_1 removed
[  161.814264][ T6156] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
23:17:12  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000a02 RCX=550e0bc5064fc700 RDX=0000000000000001
RSI=ffffffff8be325e0 RDI=ffffffff8be325a0 RBP=ffffc90000007a80 RSP=ffffc90000007998
R8 =0000000000000003 R9 =0000000000000004 R10=dffffc0000000000 R11=fffff52000000f30
R12=dffffc0000000000 R13=ffffffff84cf8d81 R14=ffffffff99d602c0 R15=ffff888021b78000
RIP=ffffffff819d6c9a RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa5c3689740 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055bb64fae008 CR3=0000000029794000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000ff00ff00 XMM05=0031313230382f65 65692f316968702f
XMM06=0000000000000000 0000000000000000 XMM07=000000000000ff00 0000ff00000000ff
XMM08=ff00000000000000 0000000000000000 XMM09=3435313230386565 65692f6d69737768
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=60e6c9a458a4bc00 RBX=ffffffff81968308 RCX=60e6c9a458a4bc00 RDX=0000000000000001
RSI=ffffffff8d9b4408 RDI=ffffffff8be32600 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34230 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055bb64f764e8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=0000000000000039 0000000031003230
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff00ff0000 XMM09=6c6c696b66722f39 7968702f31313230
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
