last executing test programs:

1m22.019462753s ago: executing program 1 (id=289):
syz_mount_image$iso9660(&(0x7f0000000200), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000d00)={[{@check_strict}, {@map_off}, {@iocharset={'iocharset', 0x3d, 'iso8859-9'}}]}, 0x1, 0xaa5, &(0x7f0000000240)="$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")
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)

1m21.921411731s ago: executing program 1 (id=290):
r0 = socket(0x10, 0x3, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x0, 0x0, 0xfffffffc}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, {0x3}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x4040004}, 0x0)

1m21.868322162s ago: executing program 1 (id=291):
r0 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000100), &(0x7f0000000180)=0x4)

1m21.800972503s ago: executing program 1 (id=292):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

1m21.67416861s ago: executing program 1 (id=293):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c)
setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000180)=0x3, 0x4)
syz_emit_ethernet(0xbe, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"adbafb04f3adaa00010000008000", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0)

1m21.363470389s ago: executing program 1 (id=294):
syz_read_part_table(0x105a, &(0x7f0000000000)="$eJzsz7GNwkAQBdC/9q1lX3QlXBsX+UQP0A6Qk9EFAS3QGAhkgSUqAIL3gtVf6Y9GE96qb7Kb8znJNtlf0pQkq5rU2ib98S9j2q+cyjD1xjq9XTLOk7/X9SN9Z5Hk/ivZzIWfdPlPhufVJVkeXnAiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHy8WwAAAP//PdgK3w==")

1m21.215191307s ago: executing program 32 (id=294):
syz_read_part_table(0x105a, &(0x7f0000000000)="$eJzsz7GNwkAQBdC/9q1lX3QlXBsX+UQP0A6Qk9EFAS3QGAhkgSUqAIL3gtVf6Y9GE96qb7Kb8znJNtlf0pQkq5rU2ib98S9j2q+cyjD1xjq9XTLOk7/X9SN9Z5Hk/ivZzIWfdPlPhufVJVkeXnAiAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHy8WwAAAP//PdgK3w==")

1m17.938931386s ago: executing program 0 (id=305):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000002080)={0x1f, 0x5, @any, 0x0, 0x1}, 0xe)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4)
listen(r0, 0x601)

1m17.890609829s ago: executing program 0 (id=306):
r0 = memfd_create(&(0x7f00000005c0)=' \xc76\xbe\x91\x8d\x182)!\x9a%\xa2\xd28\xd6\x06\a\x0e\xfc\xfe\x12\x8f&\x13\xae%@T\xa3\xb0>\\\xec\xa9\xf9Q@6A\x10\x8cn|\x00\x00\x00\x00\x00\x00\x00\x00r\xbb\xdd\xe8\x87\x05=\xfb\x8b}\xfc\x1d\x03\xe1\xfcm\x9b\xf7fo\"i\xa1hk\x1f\xf5z\xc1\x7f\xa4\\]\xc4\xbe3\xf9\xa8\t?:\xd8\xda\x84\xeepI[\x1c\x00\x00\x00\x00\xf9v\x00\x00\x00\x00\x00T\xb6\xbe\x0f~\xc0\x92\xe9O{\xa8\x81(\x01\x14\xfc\x83\xf9\xfb\x05\x94T\x81@Lq]\xf9\x15zj\x87\xc4\x8e\xe8/\xb9-&R\x8e\xb2\xb3bBx\x1e1\x18\x8f\x19\xf7]#\xed,\xc7\x11\tp\xf4\xa3\xee\x00\x00\x00\x00\'}\x18\xe8O\xa8#K\xb6\xe4U\x92\xd2\x9d\xb8<X\xfa\xdd\x8a6\xa1\x82\xf7r\xd8z\x85\x8do\xa5\xed\xd4\xbc8U\x1e\xf2tl8\xfe\xd0\x94\xfe\xf5\x1c+\x00U\te\xfa6\xca\xb9\xb4Q\xd9\xee\r6\x861h{\xc7z\'F\xc7\x91\x06x\xe1`\xf1:\xcf+\xd5\f\xb2\xce\xa4\x06\x90\x90\x9b\x1d\xcaa\xf7\x8f\x9e\x80\x93\xafT\xdfl\xec\xc6\x8e\x96\r[n\xc6\x99\x1fr<\x06\xb3\xbcT\x00\xda6\x18/\x18l\xc1\x81\x8e8L\xcb*S_\xd0:\xa4V\xbd\xf1\xa4\x955\xa9\x9d\xe0\x9b\xd3\x95\xc88n:\x89>?2\xc8\xe7kovd\xa4\x1bl+\x14\x17\x14\x17C2! U\x04:\xd93F\xb9\xfc\x1b\xfd}\x05\xf9\x11\xf3)>q\x10\xd3\xf0\xaf>\xf8t(bX\xe3g\x05\xfe\b\xbcy\x95*\xca\a\xaf\xbb\xf9\xc3Y\xa2\x91\x90.\xc8\xbe\xb0\xa6\xbd\xbd\xfd\xfaf*\xb2&\x82\xa0\x17\xe7)\xf5\xa2\xccv\n\x1b\xd4\xf4\x11*\xc9\xc6*\xa4.\x94[$\xb8\xb3Q\xde\xd8A\xa4~c,`\x02\xb8\x01r\x89\x82\x13\xd0}C7\xfb\xf2\tM\x1e\xe9\xa5\v\xc5\xba(\x89\xb0l\x92H\x1cR\x1f>\xc4ie\xe0B\xf0[\xe2\xe1\x12\x1d\x8fR&\xd1\xa6#\xda.\x0f\xd7\xd7\xa4\x90\x14\x92I\xf82&\x16<\xf2RR\xc2\x02.Q\xef\x85\xef\xf9\xe5\x00\xe9\xca\xb1\x8c\x11\x11l\x9f\xc8\b\xf7A\xa6\x81\xad\xdc\x95\xc8\xef\x102\xa8\x87\x01\x00\\\xfee \n0F\xbc\x85\xc5C\xd0\x99\xe4\t\xab`\'t\xc2\xe9\x13\xcag\xea\xb3\xb5\x92\x00J\xc6y\x05\xcc\xde\xa0\xf6\xb9 \xe5\xdd\f\x18\xfc\xe0\xc3(\xd8\xeb\x1a6\xe6\xfa\x93\xc07R\x0f-\x9e\xf3\x87E\xa3\xd5o\x1bA\x88L/\xe7>45Q?\be\x7f\xa9\x9a\xcae\xd8Y\xdf]\x1bS\x825\xcb\x00\xa4}\x97\x84T\xad\x9b\x1e!\x8a\xbc\x02+#Q\xa9 \xe9\x05r\xe1\xec\x0f\xa7\xe6Of\x95\x02{', 0x4)
sched_setscheduler(0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x400000bde)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
ftruncate(r0, 0x400000)
finit_module(r0, 0x0, 0x0)

1m15.603781827s ago: executing program 0 (id=311):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
prctl$PR_SET_SECUREBITS(0x1c, 0x2c)
setuid(0xee00)
r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
fchdir(r4)
mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0)
r5 = syz_open_procfs(r3, &(0x7f0000000000)='map_files\x00')
fchdir(r5)
getdents(0xffffffffffffffff, 0x0, 0x58)
creat(&(0x7f0000000040)='./file0\x00', 0x0)

1m14.639655479s ago: executing program 0 (id=319):
syz_mount_image$nilfs2(&(0x7f0000000080), &(0x7f0000000040)='./file2\x00', 0x3200400, &(0x7f0000000c00)=ANY=[], 0x1, 0xa76, &(0x7f00000000c0)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0xa37e, 0x0)
r1 = open(&(0x7f0000000040)='./bus\x00', 0x46342, 0x0)
ftruncate(r1, 0x2008000)
r2 = open(&(0x7f0000000000)='./bus\x00', 0x64942, 0x0)
r3 = open(&(0x7f00000000c0)='./bus\x00', 0x0, 0x0)
sendfile(r2, r3, 0x0, 0x1000200201005)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r4 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r4, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
ftruncate(r0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
syz_pidfd_open(0x0, 0x0)

1m13.614414588s ago: executing program 0 (id=330):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, 0x0, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000300)={@initdev, @remote}, &(0x7f00000003c0)=0xc)
bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)
mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0x40806685, 0x0)
syz_open_procfs$userns(0xffffffffffffffff, &(0x7f0000000200))
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r2, &(0x7f0000004200)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f}}, 0x50)
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, 0x0, 0x0)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000340), &(0x7f0000000380)=0x8)
syz_fuse_handle_req(r2, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x20, 0x0, 0x4000000000009, {0x0, 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
acct(&(0x7f00000001c0)='./file0\x00')
acct(0x0)
umount2(&(0x7f00000002c0)='./file0\x00', 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x0, 0x0})
acct(&(0x7f0000000240)='./file0\x00')
close_range(r5, 0xffffffffffffffff, 0x0)

1m12.220361979s ago: executing program 0 (id=332):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

1m12.103181307s ago: executing program 33 (id=332):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4)
setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4)
sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0)
recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25)

1.768063912s ago: executing program 3 (id=1081):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x18, 0x2)
ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f0000000280)={0x1, @win={{0xfffffe01, 0x8, 0x7, 0x7}, 0x6, 0xce7d, 0x0, 0x6, 0x0, 0xd4}})

1.658975224s ago: executing program 3 (id=1082):
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800)
syz_open_dev$sndpcmp(&(0x7f0000000000), 0x3, 0x4000)
syz_usb_disconnect(r0)

391.41134ms ago: executing program 2 (id=1101):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newtaction={0x6c, 0x30, 0xcac229faa96ee65b, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_DMAC={0xa, 0x3, @dev}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x1, 0x0, 0x6, 0x1, 0x8}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}, 0x1, 0x500}, 0x0)

391.13506ms ago: executing program 4 (id=1102):
r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f0000000300)={0x15, 0xfeb8, &(0x7f0000000200)="952bb3e006ae9a4c3a"})

390.957831ms ago: executing program 4 (id=1103):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff, 0x0, 0x1c42}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0)

338.997305ms ago: executing program 2 (id=1104):
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0x19f}, 0x48)

338.593106ms ago: executing program 4 (id=1105):
syz_mount_image$vfat(&(0x7f0000000100), &(0x7f0000000340)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="6e6f636173652c73686f72746e616d653d6c6f7765722c7379735f696d6d757461626c652c005fd4d4a26c00fef84db3f9c1970cf0e0d2f3180798a2e5bca3aafe7b4503065948881fe3f9b29d92f1f404118d12a9533540f52f159dc5784f7e1953"], 0x1, 0x330, &(0x7f0000000900)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000500)='mounts\x00')
syz_fuse_handle_req(r0, &(0x7f0000000cc0)="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", 0x2000, &(0x7f0000003ec0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

278.571003ms ago: executing program 2 (id=1106):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x802, 0x0)
ioctl$VIDIOC_LOG_STATUS(r0, 0x5646, 0x0)

278.196934ms ago: executing program 4 (id=1107):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="ff0012bb9e"], 0x48)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e0000000400000008"], 0x48)

187.327731ms ago: executing program 2 (id=1108):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'das16m1\x00', [0x4f27, 0x3, 0x10002, 0x10000, 0x5, 0xcc7, 0x8, 0x4, 0xa, 0x101, 0x2, 0x1, 0xbf, 0x18000, 0x6, 0x101, 0x80000, 0x1a449, 0xffffffff, 0x1000007f, 0x89, 0xcaa3, 0x2, 0x73, 0x6, 0xfffffff9, 0xfffffffa, 0x8, 0x4088, 0x80, 0x4]})
ioctl$TUNSETIFF(r0, 0x6410, 0x0)

187.21574ms ago: executing program 3 (id=1109):
socketpair(0x2b, 0x1, 0x0, &(0x7f0000000000))

125.446825ms ago: executing program 2 (id=1110):
r0 = syz_io_uring_setup(0x45, &(0x7f0000000300)={0x0, 0x0, 0x40, 0x2, 0x1b}, &(0x7f0000000100), &(0x7f00000000c0))
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000f1ffffff0000000000100000850000007b00000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000340)='io_uring_register\x00', r1}, 0x10)
io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x22, &(0x7f0000000380)={&(0x7f0000003000)}, 0x1)

125.291843ms ago: executing program 3 (id=1111):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000380)={0x0, 0x4000, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000100050005000700000000000800090000003f0014002000ff200100100000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0)

67.689198ms ago: executing program 2 (id=1112):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x20008d0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000)
ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000080)={0xffa1, 0x81, 0xff8b})

67.533839ms ago: executing program 3 (id=1113):
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000020000000c0000000014"], 0x48)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r0, &(0x7f00000020c0)={0x2020}, 0x2020)

67.214316ms ago: executing program 4 (id=1114):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000008880)={&(0x7f0000007800)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x3, [@decl_tag={0x1, 0x0, 0x0, 0x11, 0x4, 0x80000001}]}, {0x0, [0x2e]}}, 0x0, 0x2b, 0x0, 0x1, 0xea0d}, 0x28)

179.425µs ago: executing program 3 (id=1115):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000000)='./file3\x00', 0x8c0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0xfd, 0x4442, &(0x7f0000004480)="$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")
setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', 0x0, 0x0, 0x0)

0s ago: executing program 4 (id=1116):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$can_j1939(0x1d, 0x2, 0x7)
ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', <r2=>0x0})
recvmmsg(r1, &(0x7f0000004280)=[{{0x0, 0x0, 0x0}, 0x5073}], 0x1, 0x10000, &(0x7f0000004380))
bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x2, 0x1, 0x4}, 0xfe}, 0x18)
sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850)

kernel console output (not intermixed with test programs):

overy information on journal
[   72.637243][ T6373] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[   72.654542][ T6362] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   72.707832][ T5853] ocfs2: Unmounting device (7,2) on (node local)
[   72.762371][ T5896] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   72.813734][ T6380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.171'.
[   72.875133][ T6382] loop2: detected capacity change from 0 to 8192
[   72.885120][ T6382] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   72.905561][ T6382] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   72.910086][ T6382] ntfs3(loop2): Failed to load $Extend (-2).
[   72.912618][ T6382] ntfs3(loop2): Failed to initialize $Extend.
[   72.942855][ T5896] usb 2-1: Using ep0 maxpacket: 8
[   72.946559][ T5896] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[   72.949891][ T5896] usb 2-1: config 179 has no interface number 0
[   72.953137][ T5896] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   72.957502][ T5896] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[   72.962427][ T5896] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   72.966920][ T5896] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[   72.971355][ T5896] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   72.977873][ T5896] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[   72.980962][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.998478][ T6368] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   73.434359][ T5879] usb 2-1: USB disconnect, device number 4
[   73.434508][    C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[   73.441701][    C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending?
[   73.920506][ T6402] loop0: detected capacity change from 0 to 512
[   73.932977][ T6402] EXT4-fs: Ignoring removed nomblk_io_submit option
[   73.942793][ T6402] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   73.946026][ T6402] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e128, mo2=0002]
[   73.949647][ T6402] EXT4-fs (loop0): orphan cleanup on readonly fs
[   73.955293][ T6402] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[   73.959408][ T6402] EXT4-fs warning (device loop0): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[   73.972083][ T6402] EXT4-fs (loop0): Cannot turn on quotas: error -22
[   73.976939][ T6402] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.179: bg 0: block 40: padding at end of block bitmap is not set
[   73.990119][ T6405] netlink: 356 bytes leftover after parsing attributes in process `syz.1.180'.
[   73.991184][ T6402] EXT4-fs (loop0): Remounting filesystem read-only
[   73.996421][ T6402] EXT4-fs (loop0): 1 truncate cleaned up
[   73.999076][ T6402] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   74.035554][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.691559][ T6420] loop2: detected capacity change from 0 to 512
[   74.747060][ T6420] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.756042][ T6420] ext4 filesystem being mounted at /58/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   75.054454][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.707565][ T6429] loop1: detected capacity change from 0 to 32768
[   75.747367][ T6429] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   75.823769][ T6429] XFS (loop1): Ending clean mount
[   75.829124][ T6436] loop2: detected capacity change from 0 to 1024
[   75.830605][ T6429] XFS (loop1): Quotacheck needed: Please wait.
[   75.833691][ T6436] hfsplus: Unknown parameter 'nodecompose'
[   75.913783][ T6429] XFS (loop1): Quotacheck: Done.
[   76.096489][ T5849] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   76.451611][ T6453] loop1: detected capacity change from 0 to 1024
[   76.511611][ T6453] hfsplus: bad catalog folder entry
[   77.299397][ T6459] loop0: detected capacity change from 0 to 32768
[   77.324016][ T6459] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.196 (6459)
[   77.339799][ T6459] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   77.345466][ T6459] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   77.348914][ T6477] Invalid logical block size (-2147483648)
[   77.351406][ T6459] BTRFS info (device loop0): using free-space-tree
[   77.427509][ T6459] BTRFS info (device loop0): rebuilding free space tree
[   77.536445][ T5845] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   77.636032][   T10] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   77.792334][   T10] usb 2-1: Using ep0 maxpacket: 16
[   77.795481][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[   77.804220][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 0
[   77.807679][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   77.821244][   T10] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0
[   77.830516][   T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[   77.841377][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.844226][   T10] usb 2-1: Product: syz
[   77.846051][   T10] usb 2-1: Manufacturer: syz
[   77.847566][   T10] usb 2-1: SerialNumber: syz
[   77.850981][   T10] usb 2-1: config 0 descriptor??
[   77.856124][   T10] mcba_usb 2-1:0.0: Can't find endpoints
[   77.994650][ T6517] loop2: detected capacity change from 0 to 32768
[   77.999542][ T6517] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.212 (6517)
[   78.008823][ T6517] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   78.013349][ T6517] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   78.017000][ T6517] BTRFS info (device loop2): using free-space-tree
[   78.063959][ T5315] usb 2-1: USB disconnect, device number 5
[   78.189195][ T5853] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   78.424211][ T6549] binder: 6548:6549 ioctl 400c620e 200000000000 returned -22
[   78.896333][ T5875] nci: nci_rf_discover_ntf_packet: unsupported rf_tech_and_mode 0x9
[   79.020292][ T6585] loop1: detected capacity change from 0 to 16
[   79.034051][ T6585] erofs (device loop1): mounted with root inode @ nid 36.
[   79.319781][   T33] audit: type=1800 audit(1755280911.779:7): pid=6587 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.234" name="file1" dev="loop1" ino=86 res=0 errno=0
[   79.897513][ T6597] netlink: 28 bytes leftover after parsing attributes in process `syz.2.238'.
[   80.222099][ T5879] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   80.382111][ T5879] usb 3-1: Using ep0 maxpacket: 32
[   80.388332][ T5879] usb 3-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[   80.391682][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.401418][ T5879] usb 3-1: config 0 descriptor??
[   80.408896][ T5879] gspca_main: sq930x-2.14.0 probing 041e:403c
[   80.595813][ T6603] loop1: detected capacity change from 0 to 32768
[   80.616128][ T6603] BTRFS warning: excessive commit interval 2147483647, use with care
[   80.633317][ T6603] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.241 (6603)
[   80.664198][ T6603] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   80.667824][ T6603] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[   80.670865][ T6603] BTRFS info (device loop1): disk space caching is enabled
[   80.675502][ T6603] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   80.796205][ T6603] BTRFS info (device loop1): rebuilding free space tree
[   80.840604][ T6603] BTRFS info (device loop1): disabling free space tree
[   80.844391][ T6603] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   80.847895][ T6603] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   80.938517][ T5849] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   81.347431][  T793] cfg80211: failed to load regulatory.db
[   81.438906][ T5879] gspca_sq930x: ucbus_write failed -71
[   81.440914][ T5879] sq930x 3-1:0.0: probe with driver sq930x failed with error -71
[   81.453285][ T5879] usb 3-1: USB disconnect, device number 4
[   81.508346][ T6633] loop0: detected capacity change from 0 to 65536
[   81.549952][ T6633] XFS (loop0): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   81.579044][ T6633] XFS (loop0): Ending clean mount
[   81.585139][ T6633] XFS (loop0): Quotacheck needed: Please wait.
[   81.604166][ T6633] XFS (loop0): Quotacheck: Done.
[   81.634172][ T5845] XFS (loop0): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[   81.642199][   T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   81.792085][   T10] usb 2-1: Using ep0 maxpacket: 16
[   81.796066][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   81.800428][   T10] usb 2-1: New USB device found, idVendor=0c70, idProduct=f00e, bcdDevice= 0.00
[   81.806530][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   81.817886][   T10] usb 2-1: config 0 descriptor??
[   81.980446][ T6651] netlink: 'syz.2.253': attribute type 1 has an invalid length.
[   81.983864][ T6651] netlink: 20 bytes leftover after parsing attributes in process `syz.2.253'.
[   82.162115][ T5879] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   82.210269][ T6656] netlink: 40 bytes leftover after parsing attributes in process `syz.2.255'.
[   82.255263][   T10] aquacomputer_d5next 0003:0C70:F00E.0003: hidraw0: USB HID v0.83 Device [HID 0c70:f00e] on usb-dummy_hcd.1-1/input0
[   82.312340][ T5879] usb 1-1: Using ep0 maxpacket: 16
[   82.315562][ T5879] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   82.319271][ T5879] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   82.329474][ T5879] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   82.351161][ T5879] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   82.358593][ T5879] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   82.363750][ T5879] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   82.367053][ T5879] usb 1-1: Manufacturer: syz
[   82.377796][ T5879] usb 1-1: config 0 descriptor??
[   82.457249][   T10] usb 2-1: USB disconnect, device number 6
[   82.598787][ T5896] usb 1-1: USB disconnect, device number 3
[   82.663648][ T6672] loop2: detected capacity change from 0 to 4096
[   82.666701][ T6672] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   82.683699][ T6672] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   82.687877][ T6672] ntfs3(loop2): Failed to load $Extend (-22).
[   82.690431][ T6672] ntfs3(loop2): Failed to initialize $Extend.
[   83.396960][ T6698] loop0: detected capacity change from 0 to 4096
[   83.642102][   T10] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   83.760124][ T6702] loop0: detected capacity change from 0 to 32768
[   83.764428][ T6702] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.278 (6702)
[   83.826446][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[   83.830820][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[   83.843330][ T6702] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[   83.847142][ T6702] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   83.850357][ T6702] BTRFS info (device loop0): using free-space-tree
[   83.855044][   T10] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[   83.858347][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   83.864177][   T10] usb 2-1: config 0 descriptor??
[   83.933406][ T6709] IPVS: Error joining to the multicast group
[   84.290607][   T10] ath6kl: Failed to submit usb control message: -71
[   84.295985][   T10] ath6kl: unable to send the bmi data to the device: -71
[   84.301378][   T10] ath6kl: Unable to send get target info: -71
[   84.314087][   T10] ath6kl: Failed to init ath6kl core: -71
[   84.325307][   T10] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[   84.345205][   T10] usb 2-1: USB disconnect, device number 7
[   84.396383][ T5845] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[   84.680937][ T6726] loop0: detected capacity change from 0 to 32768
[   84.716617][ T6731] netlink: 20 bytes leftover after parsing attributes in process `syz.1.282'.
[   84.729078][ T6729] loop2: detected capacity change from 0 to 40427
[   84.735712][ T6729] F2FS-fs (loop2): build fault injection rate: 771
[   84.752103][ T6726]  loop0: p1 p3 < >
[   84.752246][ T6729] F2FS-fs (loop2): invalid crc value
[   84.779511][ T5296]  loop0: p1 p3 < >
[   84.810258][ T6729] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   84.815444][ T6729] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   84.919785][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   84.920090][ T6112] udevd[6112]: inotify_add_watch(7, /dev/loop0p3, 10) failed: No such file or directory
[   84.961160][ T6738] loop1: detected capacity change from 0 to 256
[   84.999706][ T6738] FAT-fs (loop1): Directory bread(block 64) failed
[   85.010442][ T6738] FAT-fs (loop1): Directory bread(block 65) failed
[   85.013845][ T6738] FAT-fs (loop1): Directory bread(block 66) failed
[   85.016084][ T6738] FAT-fs (loop1): Directory bread(block 67) failed
[   85.018338][ T6738] FAT-fs (loop1): Directory bread(block 68) failed
[   85.020764][ T6738] FAT-fs (loop1): Directory bread(block 69) failed
[   85.023285][ T6738] FAT-fs (loop1): Directory bread(block 70) failed
[   85.025867][ T6738] FAT-fs (loop1): Directory bread(block 71) failed
[   85.028365][ T6738] FAT-fs (loop1): Directory bread(block 72) failed
[   85.030705][ T6738] FAT-fs (loop1): Directory bread(block 73) failed
[   85.072339][   T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   85.224201][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   85.228406][   T10] usb 1-1: New USB device found, idVendor=04b4, idProduct=07b1, bcdDevice= 0.00
[   85.238292][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   85.249045][   T10] usb 1-1: config 0 descriptor??
[   85.272446][ T6748] loop1: detected capacity change from 0 to 1764
[   85.420775][ T6752] sctp: [Deprecated]: syz.1.291 (pid 6752) Use of int in maxseg socket option.
[   85.420775][ T6752] Use struct sctp_assoc_value instead
[   85.437265][ T5879] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   85.511159][ T6754] loop1: detected capacity change from 0 to 4096
[   85.534558][ T6754] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   85.546594][ T6754] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   85.586780][ T6754] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[   85.594065][ T5879] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[   85.597398][ T5879] usb 3-1: config 0 has no interface number 0
[   85.604019][ T5879] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   85.609344][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.615497][ T5879] usb 3-1: Product: syz
[   85.617347][ T5879] usb 3-1: Manufacturer: syz
[   85.619381][ T5879] usb 3-1: SerialNumber: syz
[   85.633218][ T5879] usb 3-1: config 0 descriptor??
[   85.649914][ T5849] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109
[   85.664838][   T10] cypress 0003:04B4:07B1.0004: unknown main item tag 0x0
[   85.669739][ T5849] EXT4-fs error (device loop1): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109
[   85.679798][   T10] cypress 0003:04B4:07B1.0004: hidraw0: USB HID v0.00 Device [HID 04b4:07b1] on usb-dummy_hcd.0-1/input0
[   85.871157][   T10] usb 1-1: USB disconnect, device number 4
[   85.953844][ T5718] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.048051][ T5718] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.138105][ T5718] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.230156][ T5718] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.294000][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   86.298294][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   86.301762][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   86.307553][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   86.312752][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   86.455202][ T5879] asix 3-1:0.251 (unnamed net_device) (uninitialized): Invalid PHY address 0xd7
[   86.461714][ T5718] bridge_slave_1: left allmulticast mode
[   86.468923][ T5718] bridge_slave_1: left promiscuous mode
[   86.472576][ T5718] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.503755][ T5718] bridge_slave_0: left allmulticast mode
[   86.506041][ T5718] bridge_slave_0: left promiscuous mode
[   86.508436][ T5718] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.666121][   T10] usb 3-1: USB disconnect, device number 5
[   86.834533][ T5718] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.840025][ T5718] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.844688][ T5718] bond0 (unregistering): Released all slaves
[   87.124316][ T6759] chnl_net:caif_netlink_parms(): no params data found
[   87.496489][ T5718] batman_adv: batadv0: Interface deactivated: wlan0
[   87.530895][ T5718] batman_adv: batadv0: Removing interface: wlan0
[   87.643172][ T6782] loop2: detected capacity change from 0 to 32768
[   87.648444][ T6782] 
[   87.648444][ T6782]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   87.648444][ T6782] 
[   87.659853][ T6782] 
[   87.659853][ T6782]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   87.659853][ T6782] 
[   87.667205][ T6782] 
[   87.667205][ T6782]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   87.667205][ T6782] 
[   87.671151][ T6782] 
[   87.671151][ T6782]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   87.671151][ T6782] 
[   87.676220][ T6782] 
[   87.676220][ T6782]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   87.676220][ T6782] 
[   87.688953][ T5718] hsr_slave_0: left promiscuous mode
[   87.690182][  T116] 
[   87.690182][  T116]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   87.690182][  T116] 
[   87.696061][ T5718] hsr_slave_1: left promiscuous mode
[   87.698064][ T6782] ialloc: diAlloc returned -5!
[   87.702528][ T5718] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.712159][ T5718] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.715701][ T5718] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.716781][ T5853] 
[   87.716781][ T5853]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   87.716781][ T5853] 
[   87.718399][ T5718] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.728000][ T5853] 
[   87.728000][ T5853]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[   87.728000][ T5853] 
[   87.738553][ T5718] veth1_macvtap: left promiscuous mode
[   87.741160][ T5718] veth0_macvtap: left promiscuous mode
[   87.754276][ T5718] veth1_vlan: left promiscuous mode
[   87.756315][ T5718] veth0_vlan: left promiscuous mode
[   87.956815][ T6788] netlink: 4 bytes leftover after parsing attributes in process `syz.0.303'.
[   88.186305][ T5879] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   88.223384][ T5718] team0 (unregistering): Port device team_slave_1 removed
[   88.257390][ T5718] team0 (unregistering): Port device team_slave_0 removed
[   88.332303][ T5879] usb 3-1: Using ep0 maxpacket: 8
[   88.350276][ T5879] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   88.354868][ T5879] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[   88.358474][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.373530][ T5879] usb 3-1: config 0 descriptor??
[   88.385754][ T5879] gspca_main: vc032x-2.14.0 probing 046d:0892
[   88.388900][ T5852] Bluetooth: hci1: command tx timeout
[   88.600205][ T6759] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.604546][ T6759] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.607212][ T6759] bridge_slave_0: entered allmulticast mode
[   88.610537][ T6759] bridge_slave_0: entered promiscuous mode
[   88.628683][ T6759] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.633794][ T6759] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.636410][ T6759] bridge_slave_1: entered allmulticast mode
[   88.640948][ T6759] bridge_slave_1: entered promiscuous mode
[   88.705675][ T6759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.711657][ T6759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.799644][ T6759] team0: Port device team_slave_0 added
[   88.809940][ T6759] team0: Port device team_slave_1 added
[   88.863966][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.866840][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.880022][ T6759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.890278][ T6759] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.894652][ T6759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.905009][ T6759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.999407][ T6759] hsr_slave_0: entered promiscuous mode
[   89.004025][ T6759] hsr_slave_1: entered promiscuous mode
[   89.006802][ T6759] debugfs: 'hsr0' already exists in 'hsr'
[   89.009105][ T6759] Cannot create hsr debugfs directory
[   89.172131][ T6759] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   89.178881][ T6759] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   89.186411][ T6759] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   89.193143][ T6759] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.291547][ T6759] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.337954][ T6759] 8021q: adding VLAN 0 to HW filter on device team0
[   89.356258][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.358949][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.396835][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.399633][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.604458][ T5879] gspca_vc032x: reg_w err -71
[   89.607032][ T5879] vc032x 3-1:0.0: probe with driver vc032x failed with error -71
[   89.621250][ T5879] usb 3-1: USB disconnect, device number 6
[   89.786771][ T6759] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.791729][ T6820] Invalid ELF header magic: != ELF
[   89.879865][ T6759] veth0_vlan: entered promiscuous mode
[   89.891469][ T6759] veth1_vlan: entered promiscuous mode
[   90.003459][ T6759] veth0_macvtap: entered promiscuous mode
[   90.079890][ T6759] veth1_macvtap: entered promiscuous mode
[   90.140942][ T6759] batman_adv: batadv0: Interface activated: batadv_slave_0
[   90.171765][ T6759] batman_adv: batadv0: Interface activated: batadv_slave_1
[   90.216718][ T5889] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   90.220526][ T5889] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   90.254199][ T5889] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   90.265466][ T5875] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   90.442744][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.445854][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.452526][ T5852] Bluetooth: hci1: command tx timeout
[   90.466824][  T794] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   90.524498][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   90.530039][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   90.639388][  T794] usb 3-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=2d.62
[   90.650622][  T794] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.669563][  T794] usb 3-1: config 0 descriptor??
[   90.687654][  T794] usb 3-1: selecting invalid altsetting 1
[   90.690036][  T794] flexcop_usb: set interface failed.
[   90.700951][  T794] b2c2_flexcop_usb 3-1:0.0: probe with driver b2c2_flexcop_usb failed with error -22
[   90.840092][ T6839] loop3: detected capacity change from 0 to 2048
[   90.849835][ T6839] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[   90.854878][ T6839] EXT4-fs (loop3): group descriptors corrupted!
[   90.896656][ T5879] usb 3-1: USB disconnect, device number 7
[   91.366539][ T6852] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[   92.015767][ T6871] loop3: detected capacity change from 0 to 2048
[   92.066175][ T5946]  loop3: p3 < > p4 < >
[   92.067643][ T5946] loop3: partition table partially beyond EOD, truncated
[   92.070459][ T6875] netlink: 'syz.2.315': attribute type 15 has an invalid length.
[   92.075206][ T5946] loop3: p3 start 4284289 is beyond EOD, truncated
[   92.083755][ T6871]  loop3: p3 < > p4 < >
[   92.087411][ T6871] loop3: partition table partially beyond EOD, truncated
[   92.094843][ T6871] loop3: p3 start 4284289 is beyond EOD, truncated
[   92.186715][ T5946] udevd[5946]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[   92.562542][ T5852] Bluetooth: hci1: command tx timeout
[   92.712530][ T6894] loop0: detected capacity change from 0 to 2048
[   92.772854][ T5852] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[   92.778316][ T5852] Bluetooth: hci0: Injecting HCI hardware error event
[   92.782709][ T5852] Bluetooth: hci0: hardware error 0x00
[   92.791584][ T6896] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   92.836427][   T33] audit: type=1804 audit(1755280925.339:8): pid=6894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.319" name="/newroot/104/file2/bus" dev="loop0" ino=2097152 res=1 errno=0
[   92.963060][ T6897] loop0: detected capacity change from 2048 to 0
[   93.005317][ T6894] syz.0.319: attempt to access beyond end of device
[   93.005317][ T6894] loop0: rw=2049, sector=426, nr_sectors = 22 limit=0
[   93.010938][ T6894] NILFS (loop0): I/O error writing log (start-blocknr=213, block-count=11) in segment 13
[   93.163743][ T6900] loop3: detected capacity change from 0 to 2048
[   93.171367][ T6900] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   93.205949][ T6880] syz.2.317 (6880): drop_caches: 2
[   93.673482][ T5879] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   93.674509][ T5845] syz-executor: attempt to access beyond end of device
[   93.674509][ T5845] loop0: rw=0, sector=72, nr_sectors = 2 limit=0
[   93.681590][ T5845] NILFS (loop0): I/O error reading meta-data file (ino=6, block-offset=1)
[   93.687253][ T5845] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12
[   93.691146][ T5845] syz-executor: attempt to access beyond end of device
[   93.691146][ T5845] loop0: rw=395265, sector=2040, nr_sectors = 2 limit=0
[   93.699466][ T5845] Buffer I/O error on dev loop0, logical block 1020, lost sync page write
[   93.703519][ T5845] NILFS (loop0): unable to write superblock: err=-5
[   93.706309][ T5845] syz-executor: attempt to access beyond end of device
[   93.706309][ T5845] loop0: rw=395265, sector=2, nr_sectors = 2 limit=0
[   93.712288][ T5845] Buffer I/O error on dev loop0, logical block 1, lost sync page write
[   93.716083][ T5845] NILFS (loop0): unable to write superblock: err=-5
[   93.718948][ T5845] Remounting filesystem read-only
[   93.722301][  T794] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   93.725911][ T5845] NILFS error (device loop0): nilfs_lookup: deleted inode referenced: 12
[   93.834730][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.839060][ T5879] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.843165][ T5879] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00
[   93.845975][ T5879] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.849940][ T5879] usb 3-1: config 0 descriptor??
[   93.877965][  T794] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[   93.881042][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.884008][  T794] usb 4-1: Product: syz
[   93.885342][  T794] usb 4-1: Manufacturer: syz
[   93.887294][  T794] usb 4-1: SerialNumber: syz
[   93.892364][  T794] usb 4-1: config 0 descriptor??
[   93.897441][  T794] gspca_main: sunplus-2.14.0 probing 055f:c230
[   94.461889][ T5879] hid-led 0003:27B8:01ED.0005: probe with driver hid-led failed with error -71
[   94.469211][ T5879] usb 3-1: USB disconnect, device number 8
[   94.612107][ T5236] Bluetooth: hci1: command tx timeout
[   94.852396][ T5852] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[   94.906128][  T793] usb 4-1: USB disconnect, device number 2
[   95.021647][ T5845] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[   95.027399][ T5845] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[   95.069427][ T5875] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.132796][ T5875] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.189346][ T5875] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.241332][ T6930] loop2: detected capacity change from 0 to 2048
[   95.265595][ T5875] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.288885][ T6930] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.307869][ T6929] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[   95.319014][ T6929] EXT4-fs (loop2): Remounting filesystem read-only
[   95.321906][ T6929] EXT4-fs (loop2): error restoring inline_data for inode -- potential data loss! (inode 18, error -30)
[   95.385558][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   95.448591][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   95.464862][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   95.469798][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   95.485417][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   95.495824][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   95.519400][ T5875] bridge_slave_1: left allmulticast mode
[   95.536725][ T5875] bridge_slave_1: left promiscuous mode
[   95.549931][ T5875] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.583265][ T5875] bridge_slave_0: left allmulticast mode
[   95.586599][ T5875] bridge_slave_0: left promiscuous mode
[   95.597483][ T5875] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.883498][  T793] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[   96.044022][  T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   96.048440][  T793] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   96.056019][  T793] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=69.cf
[   96.059818][  T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   96.063375][  T793] usb 3-1: Product: syz
[   96.064908][  T793] usb 3-1: Manufacturer: syz
[   96.066739][  T793] usb 3-1: SerialNumber: syz
[   96.071500][  T793] usb 3-1: config 0 descriptor??
[   96.076154][  T793] usb 3-1: Found UVC 0.00 device syz (18ec:3288)
[   96.078382][  T793] usb 3-1: No valid video chain found.
[   96.222503][ T5875] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   96.228786][ T5875] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   96.234758][ T5875] bond0 (unregistering): Released all slaves
[   96.279337][ T5315] usb 3-1: USB disconnect, device number 9
[   96.450467][ T6951] erspan0: entered promiscuous mode
[   96.459424][ T6951] erspan0: left promiscuous mode
[   96.690072][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.339'.
[   96.714847][ T5875] hsr_slave_0: left promiscuous mode
[   96.717906][ T5875] hsr_slave_1: left promiscuous mode
[   96.724572][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.727616][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.745036][ T5875] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.747643][ T5875] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.767369][ T5875] veth1_macvtap: left promiscuous mode
[   96.770474][ T5875] veth0_macvtap: left promiscuous mode
[   96.777636][ T5875] veth1_vlan: left promiscuous mode
[   96.780218][ T5875] veth0_vlan: left promiscuous mode
[   97.311765][ T5875] team0 (unregistering): Port device team_slave_1 removed
[   97.342685][ T5875] team0 (unregistering): Port device team_slave_0 removed
[   97.576810][ T5236] Bluetooth: hci0: command tx timeout
[   97.933882][ T6934] chnl_net:caif_netlink_parms(): no params data found
[   98.078491][ T6996] loop3: detected capacity change from 0 to 8
[   98.101038][ T6996] SQUASHFS error: xz decompression failed, data probably corrupt
[   98.109161][ T6996] SQUASHFS error: Failed to read block 0x108: -5
[   98.111701][ T6996] SQUASHFS error: Unable to read metadata cache entry [106]
[   98.121824][ T6996] SQUASHFS error: Unable to read inode 0x0
[   98.250767][ T7003] loop2: detected capacity change from 0 to 2048
[   98.267169][ T7003] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.286892][ T6934] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.302391][ T6934] bridge0: port 1(bridge_slave_0) entered disabled state
[   98.307417][ T6934] bridge_slave_0: entered allmulticast mode
[   98.311127][ T6934] bridge_slave_0: entered promiscuous mode
[   98.320528][ T5875] IPVS: stop unused estimator thread 0...
[   98.325332][ T6934] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.329291][ T6934] bridge0: port 2(bridge_slave_1) entered disabled state
[   98.339923][ T6934] bridge_slave_1: entered allmulticast mode
[   98.344349][ T6934] bridge_slave_1: entered promiscuous mode
[   98.446752][ T6934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   98.455123][ T6934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   98.531206][ T7013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.355'.
[   98.538487][ T7013] netlink: 28 bytes leftover after parsing attributes in process `syz.2.355'.
[   98.541914][ T7013] netlink: 24 bytes leftover after parsing attributes in process `syz.2.355'.
[   98.548545][ T6934] team0: Port device team_slave_0 added
[   98.555559][ T7017] loop3: detected capacity change from 0 to 512
[   98.567710][ T6934] team0: Port device team_slave_1 added
[   98.579924][ T7017] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[   98.598814][ T7017] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   98.684219][ T6934] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.686916][ T6934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.718897][ T6934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.742127][ T6759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[   98.748234][ T6934] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.762372][ T6934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.772675][ T6934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.970145][ T7047] loop2: detected capacity change from 0 to 512
[   98.979315][ T7047] EXT4-fs: Ignoring removed orlov option
[   98.984818][ T6934] hsr_slave_0: entered promiscuous mode
[   98.988062][ T6934] hsr_slave_1: entered promiscuous mode
[   99.017583][ T7047] EXT4-fs (loop2): VFS: Can't find ext4 filesystem
[   99.049029][ T7046] loop3: detected capacity change from 0 to 4096
[   99.062225][ T7046] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[   99.085081][ T7046] ntfs3(loop3): ino=19, mi_enum_attr
[   99.091259][ T7046] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[   99.535032][ T6934] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   99.545622][ T6934] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   99.563916][ T6934] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   99.573919][ T6934] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   99.662477][ T5236] Bluetooth: hci0: command tx timeout
[   99.696966][ T6934] 8021q: adding VLAN 0 to HW filter on device bond0
[   99.720618][ T6934] 8021q: adding VLAN 0 to HW filter on device team0
[   99.726902][ T3628] bridge0: port 1(bridge_slave_0) entered blocking state
[   99.729897][ T3628] bridge0: port 1(bridge_slave_0) entered forwarding state
[   99.748458][ T3628] bridge0: port 2(bridge_slave_1) entered blocking state
[   99.751132][ T3628] bridge0: port 2(bridge_slave_1) entered forwarding state
[   99.863880][ T7101] raw_sendmsg: syz.2.382 forgot to set AF_INET. Fix it!
[   99.980572][ T6934] 8021q: adding VLAN 0 to HW filter on device batadv0
[  100.161423][ T6934] veth0_vlan: entered promiscuous mode
[  100.168240][ T6934] veth1_vlan: entered promiscuous mode
[  100.182106][  T794] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  100.190191][ T6934] veth0_macvtap: entered promiscuous mode
[  100.197118][ T6934] veth1_macvtap: entered promiscuous mode
[  100.206593][ T6934] batman_adv: batadv0: Interface activated: batadv_slave_0
[  100.215971][ T6934] batman_adv: batadv0: Interface activated: batadv_slave_1
[  100.227128][ T5889] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  100.235441][ T5889] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  100.239031][ T5889] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  100.248250][ T5889] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  100.314595][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.321021][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.332501][  T794] usb 3-1: Using ep0 maxpacket: 8
[  100.336818][  T794] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  100.348128][  T794] usb 3-1: New USB device found, idVendor=0b48, idProduct=1006, bcdDevice=c0.0a
[  100.354932][  T794] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.362512][  T794] usb 3-1: Product: syz
[  100.365182][  T794] usb 3-1: Manufacturer: syz
[  100.368255][  T794] usb 3-1: SerialNumber: syz
[  100.374143][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  100.377394][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  100.381260][  T794] usb 3-1: config 0 descriptor??
[  100.395790][  T794] ttusb_dec_send_command: command bulk message failed: error -22
[  100.401223][  T794] ttusb-dec 3-1:0.0: probe with driver ttusb-dec failed with error -22
[  100.594976][ T6829] usb 3-1: USB disconnect, device number 10
[  100.784327][  T794] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[  101.262949][ T7158] loop3: detected capacity change from 0 to 32768
[  101.400403][ T7158] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  101.400500][ T7158]   allowing incompatible features above 0.0: (unknown version)
[  101.400509][ T7158]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  101.416843][ T7158] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  101.420189][ T7158] bcachefs (loop3): initializing new filesystem
[  101.439620][ T7158] bcachefs (loop3): going read-write
[  101.460916][ T7158] bcachefs (loop3): marking superblocks
[  101.473501][ T7158] bcachefs (loop3): initializing freespace
[  101.483871][ T7158] bcachefs (loop3): done initializing freespace
[  101.491793][ T7158] bcachefs (loop3): reading snapshots table
[  101.494964][ T7158] bcachefs (loop3): reading snapshots done
[  101.536880][ T7158] bcachefs (loop3): done starting filesystem
[  101.703304][   T33] audit: type=1800 audit(1755280934.209:9): pid=7158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.392" name="file1" dev="loop3" ino=4098 res=0 errno=0
[  101.742393][ T5236] Bluetooth: hci0: command tx timeout
[  101.761054][ T7176] netlink: 16 bytes leftover after parsing attributes in process `syz.4.395'.
[  101.767039][ T7176] netlink: 16 bytes leftover after parsing attributes in process `syz.4.395'.
[  102.816619][ T7158] syz.3.392 (7158) used greatest stack depth: 15304 bytes left
[  102.838838][ T6759] bcachefs (loop3): shutting down
[  102.840631][ T6759] bcachefs (loop3): going read-only
[  102.842622][ T6759] bcachefs (loop3): finished waiting for writes to stop
[  102.851714][ T6759] bcachefs (loop3): flushing journal and stopping allocators, journal seq 247
[  102.994279][ T6759] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 250
[  103.003180][ T6759] bcachefs (loop3): clean shutdown complete, journal seq 251
[  103.008316][ T6759] bcachefs (loop3): marking filesystem clean
[  103.106673][ T7199] UHID_CREATE from different security context by process 299 (syz.2.399), this is not allowed.
[  103.115598][ T6759] bcachefs (loop3): shutdown complete
[  103.440791][ T7205] loop2: detected capacity change from 0 to 32768
[  103.461240][ T7205] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.401 (7205)
[  103.481478][ T7205] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  103.495867][ T7205] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  103.499778][ T7205] BTRFS info (device loop2): using free-space-tree
[  103.730055][ T7233] netlink: 12 bytes leftover after parsing attributes in process `syz.4.403'.
[  103.832184][ T5236] Bluetooth: hci0: command tx timeout
[  104.098083][ T5853] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  104.359531][ T7249] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  104.651377][ T7257] loop4: detected capacity change from 0 to 32768
[  104.752476][ T7280] netlink: 8 bytes leftover after parsing attributes in process `syz.2.411'.
[  104.797968][ T7257] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,background_target=invalid device 79,nojournal_transaction_names
[  104.797981][ T7257]   allowing incompatible features above 0.0: (unknown version)
[  104.797986][ T7257]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  104.850596][ T7257] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  104.897302][ T7257] bcachefs (loop4): initializing new filesystem
[  104.927412][ T7257] bcachefs (loop4): going read-write
[  104.945378][ T7257] bcachefs (loop4): marking superblocks
[  104.969400][ T7257] bcachefs (loop4): initializing freespace
[  104.985903][ T7257] bcachefs (loop4): done initializing freespace
[  104.996184][ T7257] bcachefs (loop4): reading snapshots table
[  104.998525][ T7257] bcachefs (loop4): reading snapshots done
[  105.031377][ T7257] bcachefs (loop4): done starting filesystem
[  105.153029][ T6934] bcachefs (loop4): shutting down
[  105.155219][ T6934] bcachefs (loop4): going read-only
[  105.157899][ T6934] bcachefs (loop4): finished waiting for writes to stop
[  105.165675][ T6934] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[  105.172991][ T6829] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  105.194528][ T6934] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  105.198486][ T6934] bcachefs (loop4): clean shutdown complete, journal seq 4
[  105.201378][ T6934] bcachefs (loop4): marking filesystem clean
[  105.219687][ T6934] bcachefs (loop4): shutdown complete
[  105.347458][ T6829] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  105.350975][ T6829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.356531][ T6829] usb 3-1: config 0 descriptor??
[  105.412078][  T794] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  105.582762][  T794] usb 4-1: Using ep0 maxpacket: 32
[  105.588721][  T794] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  105.593608][  T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  105.598142][  T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  105.602914][  T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  105.607874][  T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  105.615240][  T794] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  105.619033][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.623029][  T794] usb 4-1: Product: syz
[  105.625010][  T794] usb 4-1: Manufacturer: syz
[  105.627101][  T794] usb 4-1: SerialNumber: syz
[  105.632620][  T794] usb 4-1: config 0 descriptor??
[  106.041620][  T794] input input7: Device does not respond to id packet M
[  106.242370][  T794] iforce 4-1:0.0: usb_submit_urb failed: -71
[  106.256463][  T794] input input7: Device does not respond to id packet P
[  106.259772][  T794] iforce 4-1:0.0: usb_submit_urb failed: -71
[  106.263131][  T794] input input7: Device does not respond to id packet B
[  106.267746][  T794] iforce 4-1:0.0: usb_submit_urb failed: -71
[  106.270432][  T794] input input7: Device does not respond to id packet N
[  106.276852][  T794] iforce 4-1:0.0: usb_submit_urb failed: -71
[  106.282563][  T794] iforce 4-1:0.0: usb_submit_urb failed: -71
[  106.286267][  T794] iforce 4-1:0.0: usb_submit_urb failed: -71
[  106.299615][  T794] iforce 4-1:0.0: usb_submit_urb failed: -71
[  106.308048][  T794] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7
[  106.335100][  T794] usb 4-1: USB disconnect, device number 3
[  106.578634][ T6829] usb 3-1: Cannot set autoneg
[  106.584166][ T6829] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  106.591130][ T6829] usb 3-1: USB disconnect, device number 11
[  106.817269][ T7329] loop3: detected capacity change from 0 to 2048
[  106.828087][ T7329] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  107.067199][ T7339] loop3: detected capacity change from 0 to 4096
[  107.098313][ T7340] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  107.116733][ T7339] NILFS error (device loop3): nilfs_find_entry: dir 2 size 34359742464 exceeds block count 1
[  107.125960][ T7339] Remounting filesystem read-only
[  107.243769][ T7351] loop2: detected capacity change from 0 to 128
[  107.879800][ T7384] netlink: 'syz.2.445': attribute type 1 has an invalid length.
[  107.882906][ T7384] netlink: 40 bytes leftover after parsing attributes in process `syz.2.445'.
[  108.192234][  T793] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[  108.364138][  T793] usb 4-1: config index 0 descriptor too short (expected 35577, got 27)
[  108.367666][  T793] usb 4-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  108.382295][  T793] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 92
[  108.385947][  T793] usb 4-1: config 1 has no interface number 0
[  108.388587][  T793] usb 4-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  108.402033][  T793] usb 4-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  108.407304][  T793] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  108.410826][  T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.426011][  T793] snd_usb_pod 4-1:1.1: Line 6 Pocket POD found
[  108.532264][ T5852] Bluetooth: hci3: command 0x1003 tx timeout
[  108.535951][ T5236] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  108.804702][ T7396] netlink: 28 bytes leftover after parsing attributes in process `syz.2.450'.
[  108.807947][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'.
[  108.818637][ T7396] Zero length message leads to an empty skb
[  108.982810][  T793] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now attached
[  109.032211][ T5315] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  109.198052][ T5315] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  109.207051][ T5315] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  109.211623][ T5315] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  109.215640][  T793] usb 4-1: USB disconnect, device number 4
[  109.218484][  T793] snd_usb_pod 4-1:1.1: Line 6 Pocket POD now disconnected
[  109.228795][ T5315] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.239800][ T5315] usb 5-1: config 0 descriptor??
[  109.251774][ T5315] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  109.263663][ T5315] dvb-usb: bulk message failed: -22 (3/0)
[  109.276642][ T5315] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  109.277619][ T7415] sg_read: process 369 (syz.2.458) changed security contexts after opening file descriptor, this is not allowed.
[  109.281466][ T5315] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  109.287878][ T5315] usb 5-1: media controller created
[  109.294798][ T5315] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  109.311621][ T5315] dvb-usb: bulk message failed: -22 (6/0)
[  109.315870][ T5315] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  109.324357][ T5315] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8
[  109.336600][ T5315] dvb-usb: schedule remote query interval to 150 msecs.
[  109.339246][ T5315] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  109.494350][  T793] dvb-usb: bulk message failed: -22 (1/0)
[  109.496951][  T793] dvb-usb: error while querying for an remote control event.
[  109.542944][ T6829] usb 5-1: USB disconnect, device number 3
[  109.578468][ T6829] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  109.580096][ T7426] binder: 7425:7426 ioctl c0306201 2000000003c0 returned -14
[  109.596520][ T7426] binder_alloc: 7425: binder_alloc_buf size 4120 failed, no address space
[  109.601255][ T7426] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096)
[  109.683688][ T7430] netlink: 24 bytes leftover after parsing attributes in process `syz.2.465'.
[  109.777159][ T7434] loop3: detected capacity change from 0 to 8
[  109.795560][ T7434] SQUASHFS error: zlib decompression failed, data probably corrupt
[  109.798799][ T7434] SQUASHFS error: Failed to read block 0x9b: -5
[  109.802442][ T7434] SQUASHFS error: Unable to read metadata cache entry [99]
[  109.810690][ T7434] SQUASHFS error: Unable to read inode 0x127
[  109.844073][ T7438] netlink: 8 bytes leftover after parsing attributes in process `syz.2.469'.
[  110.024967][ T7448] syz.2.474 uses obsolete (PF_INET,SOCK_PACKET)
[  110.552399][ T5315] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  110.712248][ T5315] usb 5-1: Using ep0 maxpacket: 16
[  110.723897][ T5315] usb 5-1: config 0 has an invalid interface number: 101 but max is 0
[  110.727294][ T5315] usb 5-1: config 0 has no interface number 0
[  110.730052][ T5315] usb 5-1: config 0 interface 101 has no altsetting 0
[  110.737770][ T5315] usb 5-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  110.741619][ T5315] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.745759][ T5315] usb 5-1: Product: syz
[  110.748070][ T5315] usb 5-1: Manufacturer: syz
[  110.750169][ T5315] usb 5-1: SerialNumber: syz
[  110.761040][ T5315] usb 5-1: config 0 descriptor??
[  110.774026][  T793] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  110.813547][ T5315] ums-onetouch 5-1:0.101: USB Mass Storage device detected
[  110.977275][  T793] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea
[  110.994302][  T793] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.037691][  T793] usb 3-1: config 0 descriptor??
[  111.045725][ T5315] usb 5-1: USB disconnect, device number 4
[  111.113015][  T793] usb 3-1: Invalid firmware size=18.
[  111.285508][    T9] usb 3-1: USB disconnect, device number 12
[  112.129992][ T7524] tipc: Started in network mode
[  112.131759][ T7524] tipc: Node identity fc02, cluster identity 4711
[  112.135223][ T7524] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  112.182179][   T51] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  112.369957][   T51] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  112.376673][ T7527] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  112.380391][   T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  112.394655][ T7527] batman_adv: batadv0: Removing interface: batadv_slave_0
[  112.397916][   T51] usb 3-1: config 0 descriptor??
[  112.404741][   T51] gspca_main: sunplus-2.14.0 probing 055f:c420
[  112.411876][ T7527] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  112.976913][ T7551] loop3: detected capacity change from 0 to 512
[  112.982922][ T7551] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 18)!
[  112.987276][ T7551] EXT4-fs (loop3): group descriptors corrupted!
[  113.095947][ T7557] netlink: 'syz.3.504': attribute type 1 has an invalid length.
[  113.098306][ T7557] netlink: 'syz.3.504': attribute type 2 has an invalid length.
[  113.170983][ T7559] loop3: detected capacity change from 0 to 512
[  113.193461][ T7559] EXT4-fs (loop3): orphan cleanup on readonly fs
[  113.202489][ T7559] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.505: bad orphan inode 13
[  113.207704][ T7559] ext4_test_bit(bit=12, block=18) = 1
[  113.209840][ T7559] is_bad_inode(inode)=0
[  113.211554][ T7559] NEXT_ORPHAN(inode)=2130706432
[  113.214080][ T7559] max_ino=32
[  113.215533][ T7559] i_nlink=1
[  113.218404][ T7559] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  113.227275][   T51] gspca_sunplus: reg_w_riv err -71
[  113.229201][   T51] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  113.243216][   T51] usb 3-1: USB disconnect, device number 13
[  113.245857][ T7559] EXT4-fs (loop3): warning: mounting fs with errors, running e2fsck is recommended
[  113.267546][ T7559] EXT4-fs (loop3): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  113.293735][ T6759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.501233][ T7568] Bluetooth: MGMT ver 1.23
[  113.552145][  T793] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  113.621554][ T7578] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  113.624199][ T7578] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  113.703197][  T793] usb 4-1: Using ep0 maxpacket: 8
[  113.715094][  T793] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  113.717766][  T793] usb 4-1: config 0 has no interface number 0
[  113.719828][  T793] usb 4-1: config 0 interface 1 has no altsetting 0
[  113.729205][  T793] usb 4-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f
[  113.734484][  T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.737414][  T793] usb 4-1: Product: syz
[  113.738985][  T793] usb 4-1: Manufacturer: syz
[  113.740682][  T793] usb 4-1: SerialNumber: syz
[  113.798094][  T793] usb 4-1: config 0 descriptor??
[  114.008085][  T793] i2c-cp2615 4-1:0.1: probe with driver i2c-cp2615 failed with error -22
[  114.098790][ T7590] loop2: detected capacity change from 0 to 32768
[  114.128693][ T7590] JBD2: Ignoring recovery information on journal
[  114.170054][ T7590] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  114.191436][   T33] audit: type=1800 audit(1755280946.689:10): pid=7590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.517" name="file1" dev="loop2" ino=17058 res=0 errno=0
[  114.221053][    T9] usb 4-1: USB disconnect, device number 5
[  114.250692][ T5853] ocfs2: Unmounting device (7,2) on (node local)
[  114.264624][ T7602] loop4: detected capacity change from 0 to 32768
[  114.290170][ T7602] ERROR: (device loop4): xtTruncate: xt_getpage: xtree page corrupt
[  114.290170][ T7602] 
[  114.298030][ T7602] ERROR: (device loop4): remounting filesystem as read-only
[  114.861261][ T7622] loop3: detected capacity change from 0 to 128
[  114.867878][ T7622] befs: (loop3): No write support. Marking filesystem read-only
[  114.880211][ T7622] befs: (loop3): invalid magic header
[  115.298984][ T7632] loop2: detected capacity change from 0 to 2048
[  115.322566][ T7632] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  115.329106][ T7630] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  115.355174][ T5946] udevd[5946]: incorrect nilfs2 checksum on /dev/loop2
[  115.355526][ T7634] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  115.438763][ T7633] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  115.658685][ T7639] netlink: 248 bytes leftover after parsing attributes in process `syz.2.535'.
[  115.919169][ T7643] netlink: 'syz.3.538': attribute type 10 has an invalid length.
[  115.955617][ T7643] 8021q: adding VLAN 0 to HW filter on device batadv0
[  116.116236][ T7659] loop3: detected capacity change from 0 to 16
[  116.152683][ T7659] erofs (device loop3): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  116.158931][ T7659] erofs (device loop3): mounted with root inode @ nid 36.
[  116.178853][ T7659] erofs (device loop3): corrupted dir block 0 @ nid 36
[  116.342391][ T6829] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  116.513734][ T6829] usb 5-1: Using ep0 maxpacket: 8
[  116.522238][ T6829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  116.526130][ T6829] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  116.543385][ T6829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  116.547640][ T6829] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  116.563158][ T6829] usb 5-1: New USB device found, idVendor=0586, idProduct=1000, bcdDevice= 5.2a
[  116.566695][ T6829] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.570189][ T6829] usb 5-1: Product: syz
[  116.582790][ T6829] usb 5-1: Manufacturer: syz
[  116.584689][ T6829] usb 5-1: SerialNumber: syz
[  116.596467][ T6829] usb 5-1: config 0 descriptor??
[  116.616904][ T6829] omninet 5-1:0.0: ZyXEL - omni.net usb converter detected
[  116.628235][ T7687] loop2: detected capacity change from 0 to 512
[  116.635227][ T7687] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  116.642953][ T6829] usb 5-1: ZyXEL - omni.net usb converter now attached to ttyUSB0
[  116.680736][ T7687] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  116.701235][ T7687] EXT4-fs (loop2): 1 truncate cleaned up
[  116.705213][ T7687] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  116.791906][ T7682] loop3: detected capacity change from 0 to 32768
[  116.828874][ T6829] usb 5-1: USB disconnect, device number 5
[  116.844744][ T6829] omninet ttyUSB0: ZyXEL - omni.net usb converter now disconnected from ttyUSB0
[  116.855518][ T6829] omninet 5-1:0.0: device disconnected
[  116.887106][ T7682] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  116.947087][ T7682] XFS (loop3): Ending clean mount
[  116.956379][ T7682] XFS (loop3): Quotacheck needed: Please wait.
[  117.364873][ T7682] XFS (loop3): Quotacheck: Done.
[  117.403121][ T6759] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  117.623110][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.745636][ T6829] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  117.912318][ T6829] usb 5-1: Using ep0 maxpacket: 16
[  117.926386][ T6829] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  117.930675][ T6829] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  117.946993][ T6829] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  117.950736][ T6829] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  117.960330][ T6829] usb 5-1: config 0 descriptor??
[  118.289881][ T6829] usbhid 5-1:0.0: can't add hid device: -71
[  118.293965][ T6829] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  118.301705][ T6829] usb 5-1: USB disconnect, device number 6
[  118.332339][  T793] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  118.482186][  T793] usb 3-1: Using ep0 maxpacket: 32
[  118.485798][  T793] usb 3-1: config 0 has an invalid interface number: 12 but max is 0
[  118.488949][  T793] usb 3-1: config 0 has no interface number 0
[  118.491471][  T793] usb 3-1: config 0 interface 12 has no altsetting 0
[  118.498621][  T793] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  118.502412][  T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.505563][  T793] usb 3-1: Product: syz
[  118.507263][  T793] usb 3-1: Manufacturer: syz
[  118.509154][  T793] usb 3-1: SerialNumber: syz
[  118.517008][  T793] usb 3-1: config 0 descriptor??
[  118.642833][    T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  118.794580][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  118.800630][    T9] usb 4-1: config 9 has an invalid interface number: 64 but max is 0
[  118.804061][    T9] usb 4-1: config 9 has no interface number 0
[  118.806095][    T9] usb 4-1: config 9 interface 64 has no altsetting 0
[  118.813057][    T9] usb 4-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=1e.21
[  118.820848][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.824179][    T9] usb 4-1: Product: syz
[  118.825635][    T9] usb 4-1: Manufacturer: syz
[  118.827681][    T9] usb 4-1: SerialNumber: syz
[  119.042920][    T9] cxacru 4-1:9.64: cxacru_bind: interface has incorrect endpoints
[  119.045496][    T9] cxacru 4-1:9.64: usbatm_usb_probe: bind failed: -19!
[  119.053944][    T9] usb 4-1: USB disconnect, device number 6
[  119.179181][ T7770] loop4: detected capacity change from 0 to 32768
[  119.187747][ T7770] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.582 (7770)
[  119.200265][ T7770] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  119.205745][ T7770] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  119.209608][ T7770] BTRFS info (device loop4): using free-space-tree
[  119.351614][ T5875] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  119.444032][ T6934] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  119.635573][ T7788] netlink: 24 bytes leftover after parsing attributes in process `syz.3.584'.
[  119.639374][ T7788] netlink: 56 bytes leftover after parsing attributes in process `syz.3.584'.
[  119.651787][ T7788] netlink: 'syz.3.584': attribute type 10 has an invalid length.
[  120.344057][  T793] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  120.347139][  T793] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71
[  120.350107][  T793] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  120.355242][  T793] f81534 3-1:0.12: probe with driver f81534 failed with error -71
[  120.361872][  T793] usb 3-1: USB disconnect, device number 14
[  120.370587][ T5946] udevd[5946]: setting mode of /dev/bus/usb/003/014 to 020664 failed: No such file or directory
[  120.378311][ T5946] udevd[5946]: setting owner of /dev/bus/usb/003/014 to uid=0, gid=0 failed: No such file or directory
[  120.648342][ T7809] usb usb6: usbfs: process 7809 (syz.3.591) did not claim interface 46 before use
[  120.699354][ T7811] loop3: detected capacity change from 0 to 512
[  120.755315][ T7807] loop4: detected capacity change from 0 to 32768
[  120.758477][ T7807] XFS: noikeep mount option is deprecated.
[  120.790795][ T7807] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  120.823704][ T7807] XFS (loop4): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  120.837356][ T7807] XFS (loop4): Starting recovery (logdev: internal)
[  120.865578][ T7807] XFS (loop4): Ending recovery (logdev: internal)
[  120.905900][ T6934] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  121.020133][ T7820] loop2: detected capacity change from 0 to 32768
[  121.057605][ T7820] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  121.087403][ T5853] (syz-executor,5853,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 76
[  121.094547][ T5853] ocfs2: Unmounting device (7,2) on (node local)
[  121.277694][ T7839] loop4: detected capacity change from 0 to 64
[  121.470642][ T7849] tmpfs: Bad value for 'mpol'
[  121.558797][ T7851] loop4: detected capacity change from 0 to 8192
[  121.590281][ T7843] loop2: detected capacity change from 0 to 32768
[  121.604930][ T5946] Dev loop4: unable to read partition block 838860800
[  121.608027][ T5946]  loop4: RDSK (419430400) unable to read partition table
[  121.611540][ T5946] loop4: partition table beyond EOD, truncated
[  121.619837][ T7851] Dev loop4: unable to read partition block 838860800
[  121.626852][ T7843] XFS (loop2): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  121.631141][ T7851]  loop4: RDSK (419430400) unable to read partition table
[  121.635823][ T7851] loop4: partition table beyond EOD, truncated
[  121.638953][ T7851] loop_reread_partitions: partition scan of loop4 () failed (rc=-5)
[  121.679060][ T7843] XFS (loop2): Ending clean mount
[  121.685389][ T7843] XFS (loop2): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x20 
[  121.704285][ T7843] XFS (loop2): Unmount and run xfs_repair
[  121.706821][ T7843] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[  121.710114][ T7843] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  121.733049][ T7843] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[  121.736758][ T7843] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  121.740354][ T7843] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[  121.770750][ T7843] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  121.771469][   T33] audit: type=1326 audit(1755280954.269:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.4.607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff19858ebe9 code=0x50000
[  121.781007][ T7843] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[  121.790305][   T33] audit: type=1326 audit(1755280954.289:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.4.607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff19858ebe9 code=0x50000
[  121.800284][ T7843] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  121.804139][ T7843] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  121.807969][ T7843] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x20 len 8 error 74
[  121.810830][   T33] audit: type=1326 audit(1755280954.289:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.4.607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff19858ebe9 code=0x50000
[  121.829876][   T33] audit: type=1326 audit(1755280954.289:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.4.607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff19858ebe9 code=0x50000
[  121.831807][ T7843] XFS (loop2): Failed to initialize disk quotas, err -117.
[  121.839271][   T33] audit: type=1326 audit(1755280954.289:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.4.607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff19858ebe9 code=0x50000
[  121.851291][   T33] audit: type=1326 audit(1755280954.289:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.4.607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff19858ebe9 code=0x50000
[  121.867210][   T33] audit: type=1326 audit(1755280954.289:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.4.607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff19858ebe9 code=0x50000
[  121.879833][   T33] audit: type=1326 audit(1755280954.289:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.4.607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff19858ebe9 code=0x50000
[  121.888946][   T33] audit: type=1326 audit(1755280954.289:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.4.607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff19858ebe9 code=0x50000
[  121.898549][   T33] audit: type=1326 audit(1755280954.289:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7862 comm="syz.4.607" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff19858ebe9 code=0x50000
[  121.909752][ T5853] XFS (loop2): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  121.916039][ T5853] XFS (loop2): Uncorrected metadata errors detected; please run xfs_repair.
[  122.265749][ T7873] loop3: detected capacity change from 0 to 1024
[  122.302759][ T7875] loop2: detected capacity change from 0 to 2048
[  122.318645][ T7875] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  122.330496][ T7873] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  122.343695][ T7873] ext4 filesystem being mounted at /112/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.346868][ T7879] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  122.364564][ T7873] EXT4-fs error (device loop3): ext4_map_blocks:814: inode #15: comm syz.3.613: lblock 0 mapped to illegal pblock 0 (length 1)
[  122.389197][ T7873] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  122.401661][ T7873] EXT4-fs (loop3): This should not happen!! Data will be lost
[  122.401661][ T7873] 
[  122.407987][ T7873] EXT4-fs error (device loop3): ext4_map_blocks:778: inode #15: comm syz.3.613: lblock 0 mapped to illegal pblock 0 (length 1)
[  122.440538][ T6759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  122.560658][ T7884] loop3: detected capacity change from 0 to 128
[  122.708295][ T7888] loop3: detected capacity change from 0 to 4096
[  122.720057][ T7888] ntfs3(loop3): ino=3, Correct links count -> 2.
[  123.662611][ T5879] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  123.815582][ T5879] usb 3-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  123.818660][ T5879] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.821786][ T5879] usb 3-1: Product: syz
[  123.825567][ T5879] usb 3-1: Manufacturer: syz
[  123.827154][ T5879] usb 3-1: SerialNumber: syz
[  123.973259][ T5879] usb 3-1: config 0 descriptor??
[  124.116423][ T7912] overlayfs: missing 'lowerdir'
[  124.329518][ T5879] usb 3-1: Firmware version (0.0) predates our first public release.
[  124.335743][ T5879] usb 3-1: Please update to version 0.2 or newer
[  124.417035][ T5879] usb 3-1: USB disconnect, device number 15
[  124.985683][ T7924] loop2: detected capacity change from 0 to 64
[  125.064148][  T794] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  125.134761][ T7936] loop2: detected capacity change from 0 to 1024
[  125.140947][ T7936] EXT4-fs: Ignoring removed nobh option
[  125.146512][ T7936] EXT4-fs: Ignoring removed bh option
[  125.171824][ T7936] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.210401][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.214479][  T794] usb 5-1: Using ep0 maxpacket: 8
[  125.224275][  T794] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a
[  125.228256][  T794] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.232602][  T794] usb 5-1: Product: syz
[  125.234435][  T794] usb 5-1: Manufacturer: syz
[  125.237730][  T794] usb 5-1: SerialNumber: syz
[  125.241717][  T794] usb 5-1: config 0 descriptor??
[  125.268543][ T7934] loop3: detected capacity change from 0 to 32768
[  125.269271][  T794] gspca_main: sn9c2028-2.14.0 probing 0458:7003
[  125.271329][ T7934] XFS (loop3): invalid logbufs value: 1 [not 2-8]
[  125.614190][ T7945] loop3: detected capacity change from 0 to 32768
[  125.618350][ T7945] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.642 (7945)
[  125.630693][ T7945] BTRFS info (device loop3): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  125.642254][ T7945] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  125.646355][ T7945] BTRFS info (device loop3): using free-space-tree
[  125.675878][  T794] gspca_sn9c2028: read1 error -71
[  125.678344][  T794] gspca_sn9c2028: read1 error -71
[  125.688925][  T794] sn9c2028 5-1:0.0: probe with driver sn9c2028 failed with error -71
[  125.702861][  T794] usb 5-1: USB disconnect, device number 7
[  125.807004][ T6759] BTRFS info (device loop3): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  125.815154][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.646'.
[  126.292313][ T7977] loop3: detected capacity change from 0 to 32768
[  126.314380][ T7977] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  126.343622][ T7977] XFS (loop3): Ending clean mount
[  126.404718][ T6759] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  126.851434][ T8007] netlink: 'syz.3.658': attribute type 2 has an invalid length.
[  126.909159][ T8007] : entered promiscuous mode
[  127.059691][ T8009] loop2: detected capacity change from 0 to 128
[  127.189507][ T8011] xt_limit: Overflow, try lower: 604147548/4200216962
[  128.555854][ T8040] loop4: detected capacity change from 0 to 64
[  128.706532][ T8048] netlink: 4 bytes leftover after parsing attributes in process `syz.3.672'.
[  128.760668][ T8050] netlink: 9 bytes leftover after parsing attributes in process `syz.2.674'.
[  129.046583][ T8050] 0: renamed from hsr_slave_1
[  129.067729][ T8050] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  130.061481][ T8061] loop2: detected capacity change from 0 to 32768
[  130.087188][ T8061] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  130.108657][ T8061] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  130.369187][ T5853] ocfs2: Unmounting device (7,2) on (node local)
[  130.554460][ T8080] loop4: detected capacity change from 0 to 256
[  130.568320][ T8080] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  130.655132][ T8086] netlink: 28 bytes leftover after parsing attributes in process `syz.4.687'.
[  130.724312][ T8088] loop4: detected capacity change from 0 to 1024
[  130.774829][ T8088] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.798636][ T8088] ext4 filesystem being mounted at /85/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.807033][ T8095] loop2: detected capacity change from 0 to 128
[  130.831127][ T8097] loop3: detected capacity change from 0 to 22
[  130.838249][ T8097] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  130.851795][ T8097] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  130.859203][ T8088] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.689: bg 0: block 480: padding at end of block bitmap is not set
[  130.877611][ T8088] EXT4-fs (loop4): Remounting filesystem read-only
[  130.881274][ T3628] EXT4-fs warning (device loop4): ext4_convert_unwritten_extents:4984: inode #15: block 1: len 3: ext4_ext_map_blocks returned -30
[  131.014133][ T6934] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.631405][ T8111] : entered promiscuous mode
[  131.697831][ T8114] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  131.713604][ T8114] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  131.868534][ T8116] loop2: detected capacity change from 0 to 4096
[  131.930213][ T8116] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  131.941371][ T8123] Bluetooth: hci0: invalid length 0, exp 2 for type 10
[  132.064728][ T8129] loop4: detected capacity change from 0 to 512
[  132.104172][ T8131] loop2: detected capacity change from 0 to 256
[  132.135854][ T8131] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb5f96684, utbl_chksum : 0xe619d30d)
[  132.320191][ T8133] loop4: detected capacity change from 0 to 32768
[  132.325575][ T8133] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.709 (8133)
[  132.334167][ T8133] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  132.338342][ T8133] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  132.341717][ T8133] BTRFS info (device loop4): using free-space-tree
[  132.412261][ T6829] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  132.441741][ T6934] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  132.498347][ T8157] loop2: detected capacity change from 0 to 16
[  132.515344][ T8157] erofs (device loop2): mounted with root inode @ nid 36.
[  132.535626][   T33] kauditd_printk_skb: 13294 callbacks suppressed
[  132.535640][   T33] audit: type=1800 audit(1755280965.039:13315): pid=8157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.712" name="file1" dev="loop2" ino=86 res=0 errno=0
[  132.550254][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.552945][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.567817][ T6829] usb 4-1: Using ep0 maxpacket: 16
[  132.581162][ T6829] usb 4-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  132.604683][ T6829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.612200][ T6829] usb 4-1: Product: syz
[  132.614163][ T6829] usb 4-1: Manufacturer: syz
[  132.616155][ T6829] usb 4-1: SerialNumber: syz
[  132.652745][ T6829] usb 4-1: config 0 descriptor??
[  132.669103][ T6829] ums-onetouch 4-1:0.0: USB Mass Storage device detected
[  132.685620][ T8159] loop4: detected capacity change from 0 to 4096
[  132.693568][ T8161] netlink: 'syz.2.714': attribute type 1 has an invalid length.
[  132.749272][ T8159] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  132.766627][ T8159] ntfs3(loop4): Failed to load $Extend (-22).
[  132.774311][ T8159] ntfs3(loop4): Failed to initialize $Extend.
[  132.877078][ T6829] usb 4-1: USB disconnect, device number 7
[  133.169783][ T8184] warning: `syz.4.723' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  133.939852][ T8192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.726'.
[  134.186391][ T8204] loop3: detected capacity change from 0 to 256
[  134.198813][ T8204] exfat: Deprecated parameter 'namecase'
[  134.205424][ T8204] exfat: Deprecated parameter 'namecase'
[  134.249622][ T8204] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xec4b13f1, utbl_chksum : 0xe619d30d)
[  134.650398][ T8222] loop4: detected capacity change from 0 to 736
[  134.657438][ T8222] iso9660: Bad value for 'mode'
[  134.798430][ T8212] loop3: detected capacity change from 0 to 32768
[  135.036521][ T8228] loop4: detected capacity change from 0 to 32768
[  135.462643][ T8239] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  135.467342][ T8239] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  135.474481][ T8239] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  135.480044][ T8239] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  135.482623][ T8239] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  135.486847][ T8239] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  135.492940][ T8239] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  135.495538][ T8239] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  135.500346][ T8239] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  135.694653][ T6829] IPVS: starting estimator thread 0...
[  135.792081][ T8249] IPVS: using max 77 ests per chain, 184800 per kthread
[  137.497764][ T5236] Bluetooth: hci1: command 0x0c1a tx timeout
[  137.497792][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout
[  137.582193][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout
[  137.685540][ T8308] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'.
[  137.869139][ T8320] loop2: detected capacity change from 0 to 512
[  137.873307][ T8320] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  137.886515][ T8320] EXT4-fs (loop2): 1 truncate cleaned up
[  137.908887][ T8320] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.958734][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.093359][ T8338] loop3: detected capacity change from 0 to 512
[  138.110484][ T8338] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.139509][ T6759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.376625][ T8345] loop2: detected capacity change from 0 to 32768
[  138.391736][ T8345] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.792 (8345)
[  138.401370][ T8345] BTRFS info (device loop2): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  138.405307][ T8345] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  138.408602][ T8345] BTRFS info (device loop2): using free-space-tree
[  139.139163][ T5853] BTRFS info (device loop2): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  139.308165][ T8366] netlink: 'syz.3.794': attribute type 3 has an invalid length.
[  139.311563][ T8366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.794'.
[  139.486646][   T33] audit: type=1326 audit(1755280971.989:13316): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8373 comm="syz.3.796" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f5c5ad8ebe9 code=0x0
[  139.572249][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout
[  139.583309][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout
[  139.652174][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout
[  139.710937][ T8380] netlink: 28 bytes leftover after parsing attributes in process `syz.3.799'.
[  140.376575][ T8409] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  140.532108][    T9] usb 5-1: new full-speed USB device number 8 using dummy_hcd
[  140.701369][    T9] usb 5-1: config 7 has an invalid interface number: 34 but max is 0
[  140.714779][    T9] usb 5-1: config 7 has no interface number 0
[  140.719919][    T9] usb 5-1: New USB device found, idVendor=0fe9, idProduct=db51, bcdDevice=5e.35
[  140.726221][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.729661][    T9] usb 5-1: Product: syz
[  140.731069][    T9] usb 5-1: Manufacturer: syz
[  140.733410][    T9] usb 5-1: SerialNumber: syz
[  140.948858][    T9] dvb-usb: found a 'DViCO FusionHDTV DVB-T Dual USB' in warm state.
[  140.963789][    T9] dvb-usb: bulk message failed: -22 (2/0)
[  140.979764][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  140.996631][    T9] dvb-usb: DViCO FusionHDTV DVB-T Dual USB error while loading driver (-19)
[  141.003668][    T9] dvb_usb_cxusb 5-1:7.34: probe with driver dvb_usb_cxusb failed with error -22
[  141.016583][    T9] usb 5-1: USB disconnect, device number 8
[  141.063718][ T8454] syz.2.835: attempt to access beyond end of device
[  141.063718][ T8454] loop2: rw=0, sector=64, nr_sectors = 2 limit=0
[  141.082621][ T8454] isofs_fill_super: bread failed, dev=loop2, iso_blknum=16, block=32
[  141.256093][ T8464] gfs2: gfs2 mount does not exist
[  141.499847][ T8476] loop4: detected capacity change from 0 to 128
[  141.508679][ T8476] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  141.524148][ T8476] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  141.538816][ T8476] overlayfs: upper fs needs to support d_type.
[  141.545351][ T8476] overlayfs: upper fs does not support tmpfile.
[  141.610079][ T8472] loop2: detected capacity change from 0 to 32768
[  141.626149][ T8472] XFS: noikeep mount option is deprecated.
[  141.652244][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout
[  141.652328][ T5236] Bluetooth: hci1: command 0x0c1a tx timeout
[  141.657537][ T8472] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  141.687805][ T8472] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  141.696723][ T8472] XFS (loop2): Starting recovery (logdev: internal)
[  141.719142][ T8472] XFS (loop2): Ending recovery (logdev: internal)
[  141.732150][ T5236] Bluetooth: hci0: command 0x0c1a tx timeout
[  141.761523][ T5853] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  142.172078][    T9] psmouse serio2: Failed to reset mouse on : -5
[  142.185645][ T8502] loop3: detected capacity change from 0 to 32768
[  142.192186][ T6829] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  142.209433][ T8502] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  142.291103][ T6759] ocfs2: Unmounting device (7,3) on (node local)
[  142.343455][ T6829] usb 3-1: Using ep0 maxpacket: 16
[  142.346777][ T6829] usb 3-1: config 15 has an invalid interface number: 107 but max is 0
[  142.349473][ T6829] usb 3-1: config 15 has no interface number 0
[  142.351426][ T6829] usb 3-1: config 15 interface 107 altsetting 8 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  142.356930][ T6829] usb 3-1: config 15 interface 107 altsetting 8 endpoint 0xB has invalid maxpacket 512, setting to 64
[  142.361377][ T6829] usb 3-1: config 15 interface 107 has no altsetting 0
[  142.368467][ T6829] usb 3-1: New USB device found, idVendor=0424, idProduct=7800, bcdDevice= d.c3
[  142.373325][ T6829] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.375972][ T6829] usb 3-1: Product: syz
[  142.377352][ T6829] usb 3-1: Manufacturer: syz
[  142.378871][ T6829] usb 3-1: SerialNumber: syz
[  142.622461][ T6829] usb 3-1: USB disconnect, device number 16
[  143.279135][ T8520] /dev/nullb0: Can't open blockdev
[  143.326411][ T8522] dvmrp1: entered allmulticast mode
[  143.915630][ T8528] loop3: detected capacity change from 0 to 4096
[  143.921212][ T8528] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  143.945032][ T8528] ntfs3(loop3): ino=19, mi_enum_attr
[  143.947414][ T8528] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  144.195347][ T5236] Bluetooth: hci1: Malformed Event: 0x2f
[  144.326713][ T8539] openvswitch: netlink: Tunnel attr 171 out of range max 16
[  144.652728][   T51] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  144.782168][  T793] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  144.802110][   T51] usb 3-1: Using ep0 maxpacket: 32
[  144.806152][   T51] usb 3-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  144.811441][   T51] usb 3-1: config 0 interface 0 has no altsetting 0
[  144.814304][   T51] usb 3-1: New USB device found, idVendor=6666, idProduct=8801, bcdDevice= 0.00
[  144.818119][   T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.823601][   T51] usb 3-1: config 0 descriptor??
[  144.934387][  T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  144.939148][  T793] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  144.944138][  T793] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  144.949792][  T793] usb 4-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00
[  144.956476][  T793] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.963813][  T793] usb 4-1: config 0 descriptor??
[  144.967037][ T8554] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  145.236204][   T51] smartjoyplus 0003:6666:8801.0006: unknown main item tag 0x2
[  145.243479][   T51] smartjoyplus 0003:6666:8801.0006: hidraw0: USB HID vf.fe Device [HID 6666:8801] on usb-dummy_hcd.2-1/input0
[  145.248415][   T51] smartjoyplus 0003:6666:8801.0006: no output reports found
[  145.380722][  T793] aureal 0003:0755:2626.0007: fixing Aureal Cy se W-01RN USB_V3.1 report descriptor.
[  145.385647][  T793] aureal 0003:0755:2626.0007: unknown main item tag 0x6
[  145.388551][  T793] aureal 0003:0755:2626.0007: report_id 29495 is invalid
[  145.391448][  T793] aureal 0003:0755:2626.0007: item 0 2 1 8 parsing failed
[  145.395653][  T793] aureal 0003:0755:2626.0007: probe with driver aureal failed with error -22
[  145.437958][  T793] usb 3-1: USB disconnect, device number 17
[  145.583569][ T5896] usb 4-1: USB disconnect, device number 8
[  146.023317][    T9] misc userio: Buffer overflowed, userio client isn't keeping up
[  146.392148][ T6829] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  146.497719][ T8574] loop2: detected capacity change from 0 to 32768
[  146.501233][ T8574] XFS: noikeep mount option is deprecated.
[  146.513967][ T8574] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  146.550085][ T8574] XFS (loop2): Ending clean mount
[  146.559234][ T6829] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  146.569175][ T6829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.573311][ T8574] XFS (loop2): Quotacheck needed: Please wait.
[  146.576942][ T6829] usb 4-1: Product: syz
[  146.578635][ T6829] usb 4-1: Manufacturer: syz
[  146.585764][ T6829] usb 4-1: SerialNumber: syz
[  146.590784][ T6829] usb 4-1: config 0 descriptor??
[  146.595960][ T6829] gspca_main: sunplus-2.14.0 probing 055f:c230
[  146.614231][ T8574] XFS (loop2): Quotacheck: Done.
[  146.667196][ T5853] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  146.967441][ T8593] loop2: detected capacity change from 0 to 128
[  146.976407][ T8593] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  146.981555][ T8593] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  146.988755][ T8593] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  146.993300][ T8593] UDF-fs: Scanning with blocksize 512 failed
[  146.998105][ T8593] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  147.005554][ T8593] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  147.009787][ T8593] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  147.013244][ T8593] UDF-fs: Scanning with blocksize 1024 failed
[  147.017006][ T8593] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  147.021602][ T8593] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  147.026667][ T8593] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  147.030020][ T8593] UDF-fs: Scanning with blocksize 2048 failed
[  147.035673][ T8593] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  147.040273][ T8593] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=512, location=512
[  147.044508][ T8593] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  147.047717][ T8593] UDF-fs: Scanning with blocksize 4096 failed
[  147.050310][ T8593] UDF-fs: warning (device loop2): udf_fill_super: No partition found (1)
[  147.083109][    T9] input: PS/2 Generic Mouse as /devices/serio2/input/input10
[  147.125630][ T8595] loop2: detected capacity change from 0 to 512
[  147.129949][ T8595] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  147.136665][ T8595] UDF-fs: Scanning with blocksize 512 failed
[  147.139796][ T8595] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  147.145125][ T8595] UDF-fs: Scanning with blocksize 1024 failed
[  147.148038][ T8595] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  147.151015][ T8595] UDF-fs: Scanning with blocksize 2048 failed
[  147.159400][ T8595] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  147.168350][ T8595] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  147.313259][    T9] psmouse serio2: Failed to enable mouse on 
[  147.331357][ T8601] loop2: detected capacity change from 0 to 256
[  147.722636][    T9] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  147.902177][    T9] usb 5-1: Using ep0 maxpacket: 16
[  147.906105][    T9] usb 5-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30
[  147.909731][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  147.914205][    T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  147.918197][    T9] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023
[  147.922325][    T9] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255
[  147.928239][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  147.931252][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  147.934003][    T9] usb 5-1: SerialNumber: syz
[  147.940141][ T8608] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  148.152879][    T9] cdc_acm 5-1:1.0: Control and data interfaces are not separated!
[  148.157325][    T9] cdc_acm 5-1:1.0: probe with driver cdc_acm failed with error -12
[  148.163779][    T9] usb 5-1: USB disconnect, device number 9
[  148.412869][ T6829] gspca_sunplus: reg_r err -71
[  148.416874][ T6829] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  148.421921][ T6829] usb 4-1: USB disconnect, device number 9
[  148.842413][ T8622] loop4: detected capacity change from 0 to 512
[  148.861744][ T8622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.866466][ T8622] ext4 filesystem being mounted at /128/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  149.003699][ T8622] Quota error (device loop4): do_check_range: Getting block 589828 out of range 1-5
[  149.007506][ T8622] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  149.010716][ T8622] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.905: Failed to acquire dquot type 0
[  149.045917][ T6934] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.590484][ T8641] loop3: detected capacity change from 0 to 32768
[  149.657863][ T8639] loop4: detected capacity change from 0 to 32768
[  149.674684][ T8639] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  149.740000][ T8639] XFS (loop4): Ending clean mount
[  149.745617][ T8639] XFS (loop4): Quotacheck needed: Please wait.
[  149.769370][ T8639] XFS (loop4): Quotacheck: Done.
[  149.844836][ T6934] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  150.072932][ T8661] loop4: detected capacity change from 0 to 64
[  150.076732][ T8661] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  150.112384][    T9] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  150.171131][ T8663] loop4: detected capacity change from 0 to 8192
[  150.243091][ T6829] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  150.266308][    T9] usb 3-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41
[  150.269489][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.273389][    T9] usb 3-1: Product: syz
[  150.275143][    T9] usb 3-1: Manufacturer: syz
[  150.277054][    T9] usb 3-1: SerialNumber: syz
[  150.286979][    T9] usb 3-1: config 0 descriptor??
[  150.290802][    T9] gspca_main: kinect-2.14.0 probing 045e:02bf
[  150.392487][ T6829] usb 4-1: Using ep0 maxpacket: 16
[  150.406783][ T6829] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87
[  150.411568][ T6829] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7
[  150.431291][ T6829] usb 4-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89
[  150.444852][ T6829] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.448254][ T6829] usb 4-1: Product: syz
[  150.450059][ T6829] usb 4-1: Manufacturer: syz
[  150.460372][ T6829] usb 4-1: SerialNumber: syz
[  150.474399][ T6829] usb 4-1: config 0 descriptor??
[  150.503667][   T51] usb 3-1: USB disconnect, device number 18
[  150.686644][ T6829] appledisplay: Apple Cinema Display connected
[  150.772106][ T5236] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  150.772238][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout
[  150.895764][   T51] usb 4-1: USB disconnect, device number 10
[  150.895904][    C0] usb 4-1: appledisplay_complete - usb_submit_urb failed with result -19
[  150.907404][   T51] appledisplay: Apple Cinema Display disconnected
[  151.282307][ T6829] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  151.447465][ T6829] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  151.452582][ T6829] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.460754][ T6829] usb 3-1: config 0 descriptor??
[  151.469551][ T6829] cp210x 3-1:0.0: cp210x converter detected
[  151.640964][ T8688] loop3: detected capacity change from 0 to 32768
[  151.646591][ T8688] (syz.3.930,8688,1):ocfs2_verify_volume:2303 ERROR: found superblock with bad version: found 9.0, should be 0.90
[  151.651279][ T8688] (syz.3.930,8688,1):ocfs2_verify_volume:2331 ERROR: status = -22
[  151.662451][ T8688] (syz.3.930,8688,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  151.666053][ T8688] (syz.3.930,8688,1):ocfs2_fill_super:1177 ERROR: status = -22
[  151.890700][ T6829] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  152.112786][ T6829] usb 3-1: cp210x converter now attached to ttyUSB0
[  152.290865][ T8712] loop4: detected capacity change from 0 to 4096
[  152.294667][ T8712] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  152.300200][ T6829] usb 3-1: USB disconnect, device number 19
[  152.326996][ T6829] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  152.348227][ T6829] cp210x 3-1:0.0: device disconnected
[  152.350873][ T8712] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.380637][ T8712] EXT4-fs (loop4): shut down requested (2)
[  152.404319][ T6934] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.488155][ T8721] netlink: 'syz.4.944': attribute type 10 has an invalid length.
[  152.576235][ T8725] loop3: detected capacity change from 0 to 1024
[  152.615803][ T8725] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  152.704364][ T6759] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.799190][ T8736] loop3: detected capacity change from 0 to 4096
[  152.809758][ T8736] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  152.942252][    T9] usb 5-1: new full-speed USB device number 10 using dummy_hcd
[  153.099031][    T9] usb 5-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  153.103307][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  153.110641][    T9] usb 5-1: config 0 descriptor??
[  153.451156][    T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  153.459511][    T9] gp8psk: usb in 128 operation failed.
[  153.561062][ T8750] loop3: detected capacity change from 0 to 1024
[  153.571450][ T8750] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  153.669328][    T9] gp8psk: usb in 146 operation failed.
[  153.671080][    T9] gp8psk: failed to get FW version
[  153.684234][    T9] gp8psk: usb in 149 operation failed.
[  153.686400][    T9] gp8psk: failed to get FPGA version
[  153.939169][    T9] gp8psk: usb out operation failed.
[  153.941459][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  153.965562][    T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  153.976805][ T8757] loop2: detected capacity change from 0 to 256
[  153.988512][ T8755] loop3: detected capacity change from 0 to 32768
[  153.993125][    T9] usb 5-1: USB disconnect, device number 10
[  154.029506][ T8757] exfat: Deprecated parameter 'namecase'
[  154.055659][ T8757] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  154.100530][ T8755] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  154.100549][ T8755]   allowing incompatible features above 0.0: (unknown version)
[  154.100556][ T8755]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  154.115825][ T8755] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  154.119099][ T8755] bcachefs (loop3): initializing new filesystem
[  154.125313][ T8755] bcachefs (loop3): going read-write
[  154.140966][ T8755] bcachefs (loop3): marking superblocks
[  154.147650][ T8755] bcachefs (loop3): initializing freespace
[  154.152211][ T8755] bcachefs (loop3): done initializing freespace
[  154.157496][ T8755] bcachefs (loop3): reading snapshots table
[  154.159781][ T8755] bcachefs (loop3): reading snapshots done
[  154.185399][ T8755] bcachefs (loop3): done starting filesystem
[  154.289505][ T6759] bcachefs (loop3): shutting down
[  154.291683][ T6759] bcachefs (loop3): going read-only
[  154.295220][ T6759] bcachefs (loop3): finished waiting for writes to stop
[  154.298344][ T6759] bcachefs (loop3): flushing journal and stopping allocators, journal seq 3
[  154.322610][ T6759] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 4
[  154.328335][ T6759] bcachefs (loop3): clean shutdown complete, journal seq 5
[  154.331501][ T6759] bcachefs (loop3): marking filesystem clean
[  154.348820][ T6759] bcachefs (loop3): shutdown complete
[  154.373491][ T8772] loop2: detected capacity change from 0 to 32768
[  154.671011][ T8789] loop4: detected capacity change from 0 to 1024
[  154.704464][ T8789] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.709654][ T8789] ext4 filesystem being mounted at /153/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  154.733698][ T8789] EXT4-fs (loop4): shut down requested (1)
[  154.755699][ T6934] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.879574][ T8787] loop2: detected capacity change from 0 to 32768
[  154.887793][ T8787] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.968 (8787)
[  154.981458][ T8787] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  154.988442][ T8787] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  154.994202][ T8787] BTRFS info (device loop2): using free-space-tree
[  155.275114][ T5853] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  155.371338][ T8821] loop2: detected capacity change from 0 to 128
[  155.385312][ T8821] EXT4-fs: Ignoring removed nobh option
[  155.405387][ T8821] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  155.417643][ T8821] ext4 filesystem being mounted at /354/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  155.645359][ T5853] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  156.541003][ T8857] loop4: detected capacity change from 0 to 1024
[  156.544640][ T8857] EXT4-fs: Ignoring removed nobh option
[  156.561623][ T8857] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.603231][ T6934] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.882401][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  157.034584][    T9] usb 5-1: config 0 has an invalid interface number: 220 but max is 0
[  157.038159][    T9] usb 5-1: config 0 has an invalid interface descriptor of length 2, skipping
[  157.043029][    T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  157.046235][    T9] usb 5-1: config 0 has no interface number 0
[  157.048522][    T9] usb 5-1: config 0 interface 220 altsetting 0 endpoint 0xB has an invalid bInterval 218, changing to 11
[  157.053478][    T9] usb 5-1: config 0 interface 220 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  157.058765][    T9] usb 5-1: New USB device found, idVendor=08ca, idProduct=0010, bcdDevice=48.e3
[  157.063016][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  157.070890][    T9] usb 5-1: config 0 descriptor??
[  157.079643][    T9] aiptek 5-1:0.220: interface has no int in endpoints, but must have minimum 1
[  157.155384][ T8875] loop2: detected capacity change from 0 to 2048
[  157.199550][ T8875] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  157.271504][ T8875] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.992: bg 0: block 234: padding at end of block bitmap is not set
[  157.277593][ T8875] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 790 with error 117
[  157.282168][ T8875] EXT4-fs (loop2): This should not happen!! Data will be lost
[  157.282168][ T8875] 
[  157.285608][  T793] usb 5-1: USB disconnect, device number 11
[  157.407464][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.476397][ T8882] loop2: detected capacity change from 0 to 256
[  157.489699][ T8882] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  157.698538][ T8884] loop2: detected capacity change from 0 to 32768
[  157.782947][ T8884] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  157.782969][ T8884]   allowing incompatible features above 0.0: (unknown version)
[  157.782977][ T8884]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  157.802218][ T8884] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  157.806963][ T8884] bcachefs (loop2): initializing new filesystem
[  157.817289][ T8884] bcachefs (loop2): going read-write
[  157.828624][ T8884] bcachefs (loop2): marking superblocks
[  157.837997][ T8884] bcachefs (loop2): initializing freespace
[  157.841487][ T8884] bcachefs (loop2): done initializing freespace
[  157.845356][ T8884] bcachefs (loop2): reading snapshots table
[  157.847545][ T8884] bcachefs (loop2): reading snapshots done
[  157.868476][ T8884] bcachefs (loop2): done starting filesystem
[  159.194346][ T8916] loop3: detected capacity change from 0 to 4096
[  159.216705][ T8916] NILFS (loop3): invalid segment: Checksum error in segment payload
[  159.219464][ T8916] NILFS (loop3): trying rollback from an earlier position
[  159.250706][ T8916] NILFS (loop3): recovery complete
[  159.255446][ T8918] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  159.308376][ T5853] bcachefs (loop2): shutting down
[  159.310997][ T5853] bcachefs (loop2): going read-only
[  159.314757][ T5853] bcachefs (loop2): finished waiting for writes to stop
[  159.318534][ T5853] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  159.336045][ T5853] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[  159.340563][ T5853] bcachefs (loop2): clean shutdown complete, journal seq 5
[  159.346112][ T5853] bcachefs (loop2): marking filesystem clean
[  159.406299][ T5853] bcachefs (loop2): shutdown complete
[  159.591916][ T8931] proc: Bad value for 'gid'
[  160.083974][ T8952] loop3: detected capacity change from 0 to 32768
[  160.087814][ T8952] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  160.537729][ T8980] loop3: detected capacity change from 0 to 256
[  160.594651][ T8980] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xecfd5def, utbl_chksum : 0xe619d30d)
[  160.611184][ T8986] loop4: detected capacity change from 0 to 16
[  160.620180][   T33] audit: type=1800 audit(1755280993.119:13317): pid=8980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1034" name="file1" dev="loop3" ino=1048616 res=0 errno=0
[  160.622353][ T8986] erofs (device loop4): mounted with root inode @ nid 36.
[  160.673960][ T8986] erofs (device loop4): readahead error at folio 26 @ nid 36
[  160.676515][ T8986] erofs (device loop4): readahead error at folio 25 @ nid 36
[  160.693297][ T8986] erofs (device loop4): readahead error at folio 24 @ nid 36
[  160.706327][ T8986] erofs (device loop4): readahead error at folio 23 @ nid 36
[  160.709365][ T8986] erofs (device loop4): readahead error at folio 22 @ nid 36
[  160.726356][ T8986] erofs (device loop4): readahead error at folio 21 @ nid 36
[  160.728885][ T8986] erofs (device loop4): readahead error at folio 20 @ nid 36
[  160.745189][ T8986] erofs (device loop4): readahead error at folio 18 @ nid 36
[  160.750064][ T8986] erofs (device loop4): readahead error at folio 16 @ nid 36
[  160.753436][ T8986] erofs (device loop4): readahead error at folio 12 @ nid 36
[  160.756565][ T8986] syz.4.1035: attempt to access beyond end of device
[  160.756565][ T8986] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16
[  160.761797][ T8986] syz.4.1035: attempt to access beyond end of device
[  160.761797][ T8986] loop4: rw=524288, sector=525144, nr_sectors = 16 limit=16
[  160.768682][ T8986] syz.4.1035: attempt to access beyond end of device
[  160.768682][ T8986] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16
[  160.776722][ T8986] syz.4.1035: attempt to access beyond end of device
[  160.776722][ T8986] loop4: rw=524288, sector=13716630376, nr_sectors = 8 limit=16
[  160.900418][ T8984] loop2: detected capacity change from 0 to 32768
[  160.977096][ T8997] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1038'.
[  161.023517][ T8998] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1039'.
[  161.143688][ T8984] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  161.160736][ T8984] XFS (loop2): Ending clean mount
[  161.176335][   T33] audit: type=1800 audit(1755280993.679:13318): pid=8984 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1036" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  161.204230][ T5853] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  161.461254][ T9015] loop2: detected capacity change from 0 to 4096
[  161.465317][ T9015] EXT4-fs: Ignoring removed mblk_io_submit option
[  161.469248][ T9015] EXT4-fs (loop2): Test dummy encryption mode enabled
[  161.481050][ T9015] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.511714][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.663713][ T9023] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1046'.
[  161.827918][ T9021] loop2: detected capacity change from 0 to 32768
[  161.837438][ T9021] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1045 (9021)
[  161.872185][ T9021] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  161.876501][ T9021] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  161.880183][ T9021] BTRFS info (device loop2): using free-space-tree
[  161.938898][ T9026] loop3: detected capacity change from 0 to 32768
[  161.983657][ T9026] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  162.022101][ T9026] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #17056 has an invalid fs_generation of #0
[  162.042346][ T9026] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  162.047133][ T9026] OCFS2: File system is now read-only.
[  162.049515][ T9026] (syz.3.1047,9026,1):ocfs2_search_chain:1817 ERROR: status = -30
[  162.057154][ T5853] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  162.063722][ T9026] (syz.3.1047,9026,1):ocfs2_search_chain:1940 ERROR: status = -30
[  162.067130][ T9026] (syz.3.1047,9026,1):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  162.078302][ T9026] (syz.3.1047,9026,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  162.082075][ T9026] (syz.3.1047,9026,1):ocfs2_claim_new_inode:2298 ERROR: status = -30
[  162.085466][ T9026] (syz.3.1047,9026,1):ocfs2_claim_new_inode:2313 ERROR: status = -30
[  162.093100][ T9026] (syz.3.1047,9026,0):ocfs2_mknod_locked:641 ERROR: status = -30
[  162.095708][ T9026] (syz.3.1047,9026,0):ocfs2_mknod:388 ERROR: status = -30
[  162.116246][ T9026] (syz.3.1047,9026,0):ocfs2_mknod:505 ERROR: status = -30
[  162.122617][ T9026] (syz.3.1047,9026,0):ocfs2_create:678 ERROR: status = -30
[  162.165641][ T6759] ocfs2: Unmounting device (7,3) on (node local)
[  162.384406][ T9050] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1048'.
[  162.557237][ T9058] netlink: 'syz.4.1054': attribute type 39 has an invalid length.
[  162.576955][ T9050] tipc: Disabling bearer <eth:vlan0>
[  162.725110][  T794] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  162.882266][  T794] usb 4-1: Using ep0 maxpacket: 32
[  162.886219][  T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  162.890672][  T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  162.900788][  T794] usb 4-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  162.904981][  T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.917153][ T9061] loop2: detected capacity change from 0 to 32768
[  162.920099][  T794] usb 4-1: config 0 descriptor??
[  162.931445][ T9061] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  162.976103][ T9061] XFS (loop2): Ending clean mount
[  162.985881][ T9061] XFS (loop2): Quotacheck needed: Please wait.
[  163.029782][ T9061] XFS (loop2): Quotacheck: Done.
[  163.058346][ T5853] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  163.348740][  T794] ft260 0003:0403:6030.0008: unknown main item tag 0x7
[  163.402137][  T793] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[  163.546704][  T794] ft260 0003:0403:6030.0008: chip code: 6424 8183
[  163.553924][  T793] usb 5-1: config 0 has an invalid interface number: 128 but max is 0
[  163.556918][  T793] usb 5-1: config 0 has no interface number 0
[  163.561387][  T793] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  163.565465][  T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.568274][  T793] usb 5-1: Product: syz
[  163.569784][  T793] usb 5-1: Manufacturer: syz
[  163.571355][  T793] usb 5-1: SerialNumber: syz
[  163.579108][  T793] usb 5-1: config 0 descriptor??
[  163.955664][    T9] usb 4-1: USB disconnect, device number 11
[  164.185680][  T793] usb 5-1: Firmware version (0.0) predates our first public release.
[  164.192076][  T793] usb 5-1: Please update to version 0.2 or newer
[  164.236635][  T793] usb 5-1: USB disconnect, device number 12
[  164.986628][ T9113] loop4: detected capacity change from 0 to 128
[  165.008472][ T9113] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: writeback.
[  165.222739][ T6934] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  165.862246][    T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  165.891806][ T9135] loop2: detected capacity change from 0 to 40427
[  165.897524][ T9135] F2FS-fs (loop2): Fix alignment : internally, start(4096) end(16896) block(12288)
[  165.905887][ T9135] F2FS-fs (loop2): invalid crc value
[  165.909218][ T9135] F2FS-fs (loop2): Current segment's next free block offset is inconsistent with bitmap, logtype:5, segno:2, type:0, next_blkoff:0, blkofs:1
[  165.923204][ T9135] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117)
[  165.952895][ T9140] loop4: detected capacity change from 0 to 32768
[  165.958665][ T9140] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1087 (9140)
[  165.987953][ T9140] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  165.996350][ T9140] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  166.007084][ T9140] BTRFS info (device loop4): using free-space-tree
[  166.017684][    T9] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  166.021817][    T9] usb 4-1: config 0 interface 0 has no altsetting 0
[  166.037920][    T9] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  166.052430][    T9] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  166.057076][    T9] usb 4-1: Product: syz
[  166.058640][    T9] usb 4-1: Manufacturer: syz
[  166.060734][    T9] usb 4-1: SerialNumber: syz
[  166.068626][    T9] usb 4-1: config 0 descriptor??
[  166.079802][    T9] usb 4-1: selecting invalid altsetting 0
[  166.223571][ T6934] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  166.280686][ T9158] netlink: 'syz.2.1089': attribute type 2 has an invalid length.
[  166.336641][    T9] usb 4-1: USB disconnect, device number 12
[  166.549438][ T9171] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1
[  166.553050][ T9171] ref_ctr increment failed for inode: 0x414 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff888024688000
[  166.674379][ T9179] loop4: detected capacity change from 0 to 512
[  166.678608][ T9179] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  166.685457][ T9179] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002]
[  166.689268][ T9179] System zones: 1-12
[  166.691100][ T9179] EXT4-fs (loop4): orphan cleanup on readonly fs
[  166.703132][ T9179] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1097: invalid indirect mapped block 12 (level 1)
[  166.724969][ T9179] EXT4-fs (loop4): Remounting filesystem read-only
[  166.728179][ T9179] EXT4-fs (loop4): 1 truncate cleaned up
[  166.731749][ T9179] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  166.741307][ T9179] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.1097: error -117 reading directory block
[  166.747324][ T9179] EXT4-fs warning (device loop4): dx_probe:791: inode #2: lblock 0: comm syz.4.1097: error -117 reading directory block
[  166.773278][ T6934] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  166.830848][ T9187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1099'.
[  166.960854][ T9197] loop4: detected capacity change from 0 to 512
[  166.994675][ T9199] Sensor A: =================  START STATUS  =================
[  166.997747][ T9199] Sensor A: Test Pattern: 75% Colorbar
[  167.001265][ T9199] Sensor A: Show Information: All
[  167.007175][ T9199] Sensor A: Vertical Flip: false
[  167.009274][ T9199] Sensor A: Horizontal Flip: false
[  167.011509][ T9199] Sensor A: Brightness: 128
[  167.019256][ T9199] Sensor A: Contrast: 128
[  167.021094][ T9199] Sensor A: Hue: 0
[  167.026073][ T9199] Sensor A: Saturation: 128
[  167.028896][ T9199] Sensor A: ==================  END STATUS  ==================
[  167.447559][ T9211] loop2: detected capacity change from 0 to 32768
[  167.453213][ T9217] loop3: detected capacity change from 0 to 32768
[  167.456426][ T9219] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1116'.
[  167.462360][ T9217] JBD2: Ignoring recovery information on journal
[  167.489009][ T9217] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  167.497361][ T9211] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2'
[  167.506480][ T9217] 
[  167.507529][ T9217] ======================================================
[  167.510061][ T9217] WARNING: possible circular locking dependency detected
[  167.512929][ T9217] 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 Not tainted
[  167.516796][ T9217] ------------------------------------------------------
[  167.519292][ T9217] syz.3.1115/9217 is trying to acquire lock:
[  167.521817][ T9217] ffff88801dccc060 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x320
[  167.526134][ T9217] 
[  167.526134][ T9217] but task is already holding lock:
[  167.528450][ T9217] ffff88801dccc0f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[  167.532077][ T9217] 
[  167.532077][ T9217] which lock already depends on the new lock.
[  167.532077][ T9217] 
[  167.535561][ T9217] 
[  167.535561][ T9217] the existing dependency chain (in reverse order) is:
[  167.538563][ T9217] 
[  167.538563][ T9217] -> #3 (&oi->ip_xattr_sem){++++}-{4:4}:
[  167.541264][ T9217]        lock_acquire+0x120/0x360
[  167.543353][ T9217]        down_read+0x46/0x2e0
[  167.545230][ T9217]        ocfs2_init_acl+0x2f9/0x720
[  167.546998][ T9217]        ocfs2_mknod+0x1321/0x2050
[  167.548717][ T9217]        ocfs2_create+0x1a5/0x440
[  167.550426][ T9217]        path_openat+0x14f4/0x3830
[  167.552417][ T9217]        do_filp_open+0x1fa/0x410
[  167.554468][ T9217]        do_sys_openat2+0x121/0x1c0
[  167.556716][ T9217]        __x64_sys_openat+0x138/0x170
[  167.559017][ T9217]        do_syscall_64+0xfa/0x3b0
[  167.561179][ T9217]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.563835][ T9217] 
[  167.563835][ T9217] -> #2 (jbd2_handle){++++}-{0:0}:
[  167.566812][ T9217]        lock_acquire+0x120/0x360
[  167.568890][ T9217]        jbd2_journal_lock_updates+0xaa/0x360
[  167.571402][ T9217]        __ocfs2_flush_truncate_log+0x2ba/0x10e0
[  167.573991][ T9217]        ocfs2_flush_truncate_log+0x4f/0x70
[  167.576501][ T9217]        ocfs2_sync_fs+0x116/0x310
[  167.578657][ T9217]        sync_filesystem+0x1cf/0x230
[  167.580932][ T9217]        generic_shutdown_super+0x6f/0x2c0
[  167.583329][ T9217]        kill_block_super+0x44/0x90
[  167.585457][ T9217]        deactivate_locked_super+0xbc/0x130
[  167.587920][ T9217]        cleanup_mnt+0x425/0x4c0
[  167.590016][ T9217]        task_work_run+0x1d4/0x260
[  167.592223][ T9217]        exit_to_user_mode_loop+0xec/0x110
[  167.594692][ T9217]        do_syscall_64+0x2bd/0x3b0
[  167.596894][ T9217]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.599606][ T9217] 
[  167.599606][ T9217] -> #1 (&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]){+.+.}-{4:4}:
[  167.604058][ T9217]        lock_acquire+0x120/0x360
[  167.606195][ T9217]        down_write+0x96/0x1f0
[  167.608182][ T9217]        ocfs2_run_deallocs+0xdce/0x14d0
[  167.610609][ T9217]        ocfs2_commit_truncate+0x1c58/0x21d0
[  167.613002][ T9217]        ocfs2_truncate_file+0xca2/0x1420
[  167.615427][ T9217]        ocfs2_setattr+0x1520/0x1b40
[  167.617684][ T9217]        notify_change+0xb36/0xe40
[  167.619827][ T9217]        do_truncate+0x1a4/0x220
[  167.621981][ T9217]        vfs_truncate+0x493/0x520
[  167.624062][ T9217]        do_sys_truncate+0xdb/0x190
[  167.626318][ T9217]        __x64_sys_truncate+0x5b/0x70
[  167.628461][ T9217]        do_syscall_64+0xfa/0x3b0
[  167.630520][ T9217]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.633256][ T9217] 
[  167.633256][ T9217] -> #0 (&ocfs2_file_ip_alloc_sem_key){++++}-{4:4}:
[  167.636863][ T9217]        validate_chain+0xb9b/0x2140
[  167.639043][ T9217]        __lock_acquire+0xab9/0xd20
[  167.641222][ T9217]        lock_acquire+0x120/0x360
[  167.643250][ T9217]        down_write+0x96/0x1f0
[  167.645231][ T9217]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[  167.647717][ T9217]        ocfs2_xattr_set+0x595/0x11f0
[  167.649814][ T9217]        ocfs2_set_acl+0x701/0x7b0
[  167.651838][ T9217]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  167.654013][ T9217]        vfs_set_acl+0x887/0xb00
[  167.656015][ T9217]        filename_setxattr+0x2e0/0x600
[  167.658357][ T9217]        path_setxattrat+0x364/0x3a0
[  167.660559][ T9217]        __x64_sys_setxattr+0xbc/0xe0
[  167.662781][ T9217]        do_syscall_64+0xfa/0x3b0
[  167.664878][ T9217]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.667529][ T9217] 
[  167.667529][ T9217] other info that might help us debug this:
[  167.667529][ T9217] 
[  167.671406][ T9217] Chain exists of:
[  167.671406][ T9217]   &ocfs2_file_ip_alloc_sem_key --> jbd2_handle --> &oi->ip_xattr_sem
[  167.671406][ T9217] 
[  167.676490][ T9217]  Possible unsafe locking scenario:
[  167.676490][ T9217] 
[  167.679480][ T9217]        CPU0                    CPU1
[  167.681654][ T9217]        ----                    ----
[  167.683656][ T9217]   lock(&oi->ip_xattr_sem);
[  167.685223][ T9217]                                lock(jbd2_handle);
[  167.687680][ T9217]                                lock(&oi->ip_xattr_sem);
[  167.690607][ T9217]   lock(&ocfs2_file_ip_alloc_sem_key);
[  167.692501][ T9217] 
[  167.692501][ T9217]  *** DEADLOCK ***
[  167.692501][ T9217] 
[  167.695343][ T9217] 3 locks held by syz.3.1115/9217:
[  167.697432][ T9217]  #0: ffff888038b38428 (sb_writers#14){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  167.700570][ T9217]  #1: ffff88801dccc3c0 (&type->i_mutex_dir_key#8){+.+.}-{4:4}, at: vfs_set_acl+0x3cd/0xb00
[  167.703833][ T9217]  #2: ffff88801dccc0f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[  167.707409][ T9217] 
[  167.707409][ T9217] stack backtrace:
[  167.709584][ T9217] CPU: 0 UID: 0 PID: 9217 Comm: syz.3.1115 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  167.709596][ T9217] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  167.709601][ T9217] Call Trace:
[  167.709606][ T9217]  <TASK>
[  167.709611][ T9217]  dump_stack_lvl+0x189/0x250
[  167.709623][ T9217]  ? __pfx_dump_stack_lvl+0x10/0x10
[  167.709632][ T9217]  ? __pfx__printk+0x10/0x10
[  167.709643][ T9217]  ? print_lock_name+0xde/0x100
[  167.709653][ T9217]  print_circular_bug+0x2ee/0x310
[  167.709663][ T9217]  check_noncircular+0x134/0x160
[  167.709673][ T9217]  validate_chain+0xb9b/0x2140
[  167.709681][ T9217]  ? check_path+0x21/0x40
[  167.709689][ T9217]  ? look_up_lock_class+0x74/0x170
[  167.709699][ T9217]  ? register_lock_class+0x51/0x320
[  167.709709][ T9217]  __lock_acquire+0xab9/0xd20
[  167.709720][ T9217]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  167.709728][ T9217]  lock_acquire+0x120/0x360
[  167.709738][ T9217]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  167.709746][ T9217]  ? __lock_acquire+0xab9/0xd20
[  167.709778][ T9217]  down_write+0x96/0x1f0
[  167.709784][ T9217]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[  167.709794][ T9217]  ? __pfx_down_write+0x10/0x10
[  167.709803][ T9217]  ocfs2_try_remove_refcount_tree+0xb6/0x320
[  167.709811][ T9217]  ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10
[  167.709821][ T9217]  ? up_write+0x1c4/0x420
[  167.709828][ T9217]  ? ocfs2_xattr_set+0x334/0x11f0
[  167.709837][ T9217]  ocfs2_xattr_set+0x595/0x11f0
[  167.709849][ T9217]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  167.709857][ T9217]  ? do_raw_spin_unlock+0x4d/0x240
[  167.709867][ T9217]  ? __lock_acquire+0xab9/0xd20
[  167.709880][ T9217]  ? do_raw_spin_unlock+0x4d/0x240
[  167.709888][ T9217]  ? _raw_spin_unlock+0x28/0x50
[  167.709896][ T9217]  ? ocfs2_inode_lock_tracker+0x3ec/0x660
[  167.709906][ T9217]  ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10
[  167.709915][ T9217]  ocfs2_set_acl+0x701/0x7b0
[  167.709924][ T9217]  ? __lock_acquire+0xab9/0xd20
[  167.709936][ T9217]  ocfs2_iop_set_acl+0x1aa/0x2a0
[  167.709944][ T9217]  ? vfs_set_acl+0x3cd/0xb00
[  167.709953][ T9217]  ? __pfx_ocfs2_iop_set_acl+0x10/0x10
[  167.709960][ T9217]  ? evm_inode_set_acl+0xba/0x410
[  167.709968][ T9217]  ? __pfx_evm_inode_set_acl+0x10/0x10
[  167.709977][ T9217]  ? down_write+0x162/0x1f0
[  167.709983][ T9217]  ? __pfx_down_write+0x10/0x10
[  167.709988][ T9217]  ? evm_revalidate_status+0x4f/0xb0
[  167.709995][ T9217]  ? make_vfsuid+0x49/0xa0
[  167.710003][ T9217]  ? inode_owner_or_capable+0xf1/0x1c0
[  167.710012][ T9217]  vfs_set_acl+0x887/0xb00
[  167.710022][ T9217]  filename_setxattr+0x2e0/0x600
[  167.710030][ T9217]  ? __pfx_filename_setxattr+0x10/0x10
[  167.710036][ T9217]  ? getname_flags+0x1e5/0x540
[  167.710044][ T9217]  path_setxattrat+0x364/0x3a0
[  167.710054][ T9217]  ? __pfx_path_setxattrat+0x10/0x10
[  167.710061][ T9217]  ? do_futex+0x395/0x420
[  167.710077][ T9217]  ? rcu_is_watching+0x15/0xb0
[  167.710085][ T9217]  __x64_sys_setxattr+0xbc/0xe0
[  167.710092][ T9217]  do_syscall_64+0xfa/0x3b0
[  167.710102][ T9217]  ? lockdep_hardirqs_on+0x9c/0x150
[  167.710111][ T9217]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.710118][ T9217]  ? exc_page_fault+0x9f/0xf0
[  167.710127][ T9217]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  167.710134][ T9217] RIP: 0033:0x7f5c5ad8ebe9
[  167.710141][ T9217] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  167.710148][ T9217] RSP: 002b:00007f5c5bcb0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  167.710157][ T9217] RAX: ffffffffffffffda RBX: 00007f5c5afb5fa0 RCX: 00007f5c5ad8ebe9
[  167.710163][ T9217] RDX: 0000000000000000 RSI: 0000200000002a40 RDI: 0000200000002a00
[  167.710167][ T9217] RBP: 00007f5c5ae11e19 R08: 0000000000000000 R09: 0000000000000000
[  167.710172][ T9217] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  167.710176][ T9217] R13: 00007f5c5afb6038 R14: 00007f5c5afb5fa0 R15: 00007ffffbdf9cf8
[  167.710184][ T9217]  </TASK>
[  167.710293][    C0] vkms_vblank_simulate: vblank timer overrun
[  167.851097][    C0] vkms_vblank_simulate: vblank timer overrun
[  167.854553][ T9211] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  167.869587][ T6759] ocfs2: Unmounting device (7,3) on (node local)
[  167.918524][ T5853] ocfs2: Unmounting device (7,2) on (node local)

VM DIAGNOSIS:
18:03:20  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000010e0 RDI=00000000000010e1 RBP=00000000000003f8 RSP=ffffc900038feab0
R8 =ffff888020a10237 R9 =1ffff11004142046 R10=dffffc0000000000 R11=ffffffff854f0370
R12=dffffc0000000000 R13=ffffffff99af98fd R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f03ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f5c5bcb06c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002a00 CR3=0000000119b8e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffff0000000000 XMM01=0101010101010101 0101010000000000
XMM02=695f746e756f6d5f 7a79730032736667 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=1360034e5d53002c 74696d6d6f635f63 XMM05=5cf3945eb98408b4 4938eecd7e6e9eec
XMM06=0000000000000000 00b0be19cd0096ec XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 000000000006df45 XMM09=0000000000000000 00007f5c5ae12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=05af07f25b60b300 RBX=ffffffff81968308 RCX=05af07f25b60b300 RDX=0000000000000001
RSI=ffffffff8be333e0 RDI=ffffffff81968308 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020007000
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000056491d124000 CR3=0000000029ebe000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f5c5ae12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
