last executing test programs:

1m29.169169933s ago: executing program 1 (id=818):
syz_mount_image$udf(&(0x7f0000000f00), &(0x7f00000000c0)='./file0\x00', 0x10000, &(0x7f0000000100)={[{@gid_ignore}, {@iocharset={'iocharset', 0x3d, 'cp1255'}}, {@utf8}, {@unhide}, {@longad}, {@iocharset={'iocharset', 0x3d, 'cp1250'}}, {@lastblock}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@adinicb}, {@undelete}, {@lastblock={'lastblock', 0x3d, 0xb}}, {@gid_forget}, {@uid}]}, 0x1, 0xc67, &(0x7f0000001dc0)="$eJzs3U9sHNd9B/DfG5LiSm5rJk4VJ42DTVuksmK5+hdTtgp3VdNsA8iyEIq5BeBKpNSFKZIgqUY23JbppYceAhRFDzkRaIUCKRoYTRH0yLQukFx8KHLqiWhhIyh6YIsAAVoEW8zsW3FFkZYskiIlfz429d2deW/mvZnxjCzozQsAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIOJ3Xj13/ETaZEXfHjQGAHgoLox99fjJzZ7/AMBj69JW//8PAAAAAAAAAAAAAADsFymKeCpSzF1YSxPV947a+dbAjZvjI6ObVzuYqpp9Vfnyp3bi5KnTX35h+Ew3z7dmPqT+TvtsvD526Vz9ldnrc/NTCwtTk/XxmdaV2cmp+97CdutvdLQ6APXrb9yYvHp1oX7y+VN3rL459MHgE4eHzg4/e+yZbtnxkdHRsfUitd7y/Q/ckI6tRngciCKORYrnvvuT1IyIIrZ/LGoP99xvdLDqxNGqE+Mjo1VHplvNmcVy5cXugSgi6j2VGt1jtPm5iP6Bh9qHrTUilsrmlw0+WnZvbK4537w8PVW/2JxfbC22Zmcupk5ry/7Uo4gzKWI5IlYH797cQBTRHym+/eRaupzf+lEdhy9VA4O3bkexi328D2U76wMRy8UjcM72scEo4rVI8dN3j8SVfJ+p7jVfjHitzO9H3Crz5YhUXhinI97f5Dri0dQfRfxZef7PrqXJ6n7Qva+c/1r9KzNXZ3vKdu8rH/H5cNedYo+eDwc35MOxz+9NtSiiWd3x19KD/2YHAAAAAAAAAAAAAAAAgJ12MIr4TKR49V//oBpXHNW49CfPDv/u0C/2jhl/+h7bKcs+HxFLxf2NyT2QBwZeTBdT2uOxxB9ntSjiD/P4v2/udWMAAAAAAAAAAAAAAAAAAAA+1or4caR46b0jaTl65xRvzVyrX2penu7MCtud+7c7Z3q73W7XUycbOSdyLuVczrmSczVnFLl+zkbOiZxLOZdzruRczRl9uX7ORs6JnEs5l3Ou5FzNGf25fs5GzomcSzmXc67kXM0Z+2TuXgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAx0kRRfw8UnzrG2spUkQ0IiaikyuDe906AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAKA0mIr4XqSo/17j9rL+iEjVvx1Hyl9OR+NAmZ+MxnCZL0fjXM5mlf2Nb+5B+9megVTEjyLFYO2d2yc8n/+Bzrfbl0Hcenv922f7O9nXXTn0weATh588Ozz6+ae3+pw2a8DR862ZGzfr4yOjo2M9i/vz3j/Zs2wo77fYma4TEQtvvvVGc3p6av7BP5SXwANW757Jbez9YX5I/Y9MU33YiQ/Rvy+asTd9v0NtL25O7Lry+f9+pPjN9/6t+8DvPP9r8Qudb7ef8PGzP1p//r+0cUP3+fzv31gvP//LJ8Fmz/+nepa9lH83MtAfUVu8PjdwOKK28OZbx1rXm9emrk3NnD5+/MXh4RdPHR84EFG72pqe6vm0I4cLAAAAAAAAAAAAAAAA4OFJRfx2pGj+aC3VI+JmNV5r6Ozws8ee6Yu+arzVHeO2Xx+7dK7+yuz1ufmphYWpyfr4TOvK7OTU/e6uVg33Gh8Z3ZXO3NPBXW7/wdors3Nvzreu/f7ipusP1c5dXlicb17ZfHUcjCKi0bvkaNXg8ZHRqtHTreZMVfXipoPpP7qBVMS/R4orp+vpC3lZHv+/cYR/3Hr7xdvXwtLGDe3g+P/PH1of//eJnqLlPlMq4meR4jf+/On4QtXOQ3HXMcvl/jpSHD3zuVwuDpTlum3ovFegMzKwLPvfkeLvf35n2e54yKfWy574SAf3EVCe/ycjxff+9Dvxq3nZne9/6D3/68fv0MYN7dL7Hz7Vs+zQHe8r2HbXyef/WKR4+al34teqJf/7oe//6L6x4Uin8Pr7OXbp/P9yz7KhvN9f36nOAwAAAAAAAAAAPMIGUhF/Eyl+MNqfXsjL7ufv/01u3NAu/f2vT/csm9yZ+Yru+WHbBxUAAAAA9omBVMSPI8W1xXduj6G+c/x3z/jP31of/zmSNqyt/pzvl6r3Buzkn//1Gsr7ndh+twEAAAAAAAAAAAAAAAAAAGBfSamIF/J86hPVeP7JLedTX4kUr/7nc7lcOlyW684DP1T9WrswO3Ps3PT0bC0Wm5enp+pjc80rU2XdT0WKtb/6XK5bVPOrd+eb78zxvj4X+3ykGP3bbtnOXOzduck784HX2u2IE2XZT0SK//i7O8vmqanz3NHVdk+WZf8yUnz9Hzcve3i97Kmy7HcixQ+/Xu+WPVSW7b4f9dPrZZ+/MlvswlkBAAAAAAAAAAAAAAAAAADg42YgFfEnkeK/ri/fHsuf5/8f6PlaufV2z3z/G9ys5vkfqub/3+rzg8z/X71XYGmrvQIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwOMpRRFvRYq5C2tpZbD83lE735q5cXN8ZHTzagdTVbOvKl/+1E6cPHX6yy8Mn+nmh9ffaZ+J18cunau/Mnt9bn5qYWFqsj4+07oyOzl131vYbv2NjlYHoH79jRuTV68u1E8+f+qO1TeHPhh84vDQ2eFnjz3TLTs+Mjo61lOmf+CB936XtMXyA1HEX0SK5777k/SDwYgitn8s7nHt7LaDVSeOVp0YHxmtOjLdas4slisvdg9EEVHvqdToHqN7nov/a7fbD6srm2hELJXNLxt8tOze2Fxzvnl5eqp+sTm/2Fpszc5cTJ3Wlv2pRxFnUsRyRKwO3r25gSjijUjx7SfX0j8NRvR1j8OXLox99fjJrdtR7GIf70PZzvpAxHJxP+eMrQxGEf8QKX767pH458GI/uj8xBcjXivz+xG3onO+U3lhnI54f5PriEdTfxTxP+X5P7uW3h0s7wfd+8r5r9W/MnN1tqds976yzedDu93+4zL37vnwMO3ze1MtivhhdcdfS//iv2sAAAAAAAAAAAAAAACAfaSIX4kUL713JFXjg2+PKW7NXKtfal6e7gzr6479646Zbrfb7XrqZCPnRM6lnMs5V3Ku5owi18/ZKLPWbk/k70s5l3Ou5FzNGX25fl81XLHdyN8nci7lXM65knM1Z/Tn+jkbOSdyLuVczrmSczVn7JOxewAAAAAAAAAAAAAAAAAAwOOlqP5J8a1vrKX2YGd+6Yno5Ir5QB97/x8AAP//Jhb4VQ==")

1m28.967488416s ago: executing program 1 (id=821):
r0 = syz_open_dev$ndb(&(0x7f0000000180), 0x0, 0x8000)
ioctl$NBD_DO_IT(r0, 0xab03)

1m28.886561611s ago: executing program 1 (id=823):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14, 0x10, 0x1, 0x2000000}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}, 0x1, 0x0, 0x0, 0x44}, 0x0)

1m28.884867366s ago: executing program 1 (id=825):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x22000b0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
pivot_root(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00')

1m28.816307761s ago: executing program 1 (id=828):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000200)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@gettaction={0xc0, 0x32, 0x1, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x84}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0xc0}}, 0x0)

1m28.44889461s ago: executing program 1 (id=833):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0)

1m28.012486448s ago: executing program 32 (id=833):
r0 = socket(0x840000000002, 0x3, 0xfa)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10)
sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0)
setsockopt$inet_int(r0, 0x0, 0x32, 0x0, 0x0)

26.605154559s ago: executing program 0 (id=1539):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a80)={0x18, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000018c0)='GPL\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01080000000000000000010000000900030073797a320000000014000480080002400000000008000140000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d657461000000001400028008000140000000120800024000000021140000001100"], 0xd8}}, 0x8090)

26.49419125s ago: executing program 0 (id=1541):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "c5"}]}], {0x14}}, 0x70}, 0x1, 0x0, 0x0, 0x20004049}, 0x0)

26.493881139s ago: executing program 0 (id=1543):
unshare(0x20000400)
bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0)

26.493461801s ago: executing program 0 (id=1544):
r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x0, 0x11dc, &(0x7f0000001280)="$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")
r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x30)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307202, &(0x7f0000000f00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

26.339437232s ago: executing program 0 (id=1548):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xa, 0x3, &(0x7f00000005c0)=ANY=[@ANYBLOB="89a000fe00000000691088000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)

25.489953033s ago: executing program 0 (id=1560):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x12, r0, 0x52534000)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000395000/0x3000)=nil, 0x3000})

25.37735319s ago: executing program 33 (id=1560):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = userfaultfd(0x801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0xc})
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000004, 0x12, r0, 0x52534000)
ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000395000/0x3000)=nil, 0x3000})

13.46577838s ago: executing program 4 (id=1672):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$inet6(r0, &(0x7f00000000c0)={&(0x7f0000000080)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x14}}, 0x1c, 0x0, 0x0, &(0x7f0000004540)=[@hopopts={{0x18, 0x29, 0x36, {0x1}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x40}, 0x40)

13.465606406s ago: executing program 4 (id=1673):
r0 = socket(0x10, 0x803, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000680)={'veth0_to_team\x00', &(0x7f0000000640)=@ethtool_channels={0x3d, 0x2000000, 0xffffffff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7}})

13.358461741s ago: executing program 4 (id=1675):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x98, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000300)={0x106, 0x33424752, 0x3, @stepwise={0x3, 0x0, 0x2, 0x8d6f, 0xc, 0x1}})

13.309249938s ago: executing program 4 (id=1676):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x48, &(0x7f00000003c0), 0x20, 0x51c, &(0x7f0000001e40)="$eJzs3d9vW1cdAPDvva2b9MeWDCYNELAyBgVVtRt3q6a9MF5AaJqEmHjioQuJG0W16yh2xhIqLf0fkJjEA4InnnlA4mHSnnhE8AZvexkPSAUq0DKJB6NrX6duY8ehcezV/nykW9/jc+LvOde650TftvcEMLMuRsRuRJyJiLciYiF/P8mPeK1zZO0+vn9nZe/+nZUkWq03/5m067P3oudnMufzz5yPiB98N+LHycG4je2dW8vVamUzL5eatY1SY3vnynptea2yVrldLl9fun71lWsvl0c21udrv733nfXXf/j+77/00Z93v/nTrFsX8rreccTZkYXMr0lhP07mdES8ProQE3UqH8+ZSXeEx5JGxGci4oX2/b8Qp9rf5tH0ua0BgCdAq7UQrYXeMgAw7dJ2DixJi3ku4EKkabHYyeE9G+fSar3RvHyzvnV7tZMrW4xCenO9Wrma5woXo5Bk5aV3s/MH5XI8XL4WEc9ExM/mzrbLxZWj5xkAgNE6/8j6/5+5zvoPAEy5+WENboynHwDA+Axd/wGAqWP9B4DZY/0HgNlj/QeA2WP9B4BZ82F3/T91oOr8+HsDAJy477/xRna09vLnX6++vb11q/72ldVK41axtrVSXKlvbhTX6vW1aqW4Uq8N+7xqvb6x9FJsvVNqVhrNUmN750atvnW7eaP9XO8blcJYRgUAHOaZ5z/4axIRu6+ebR/Rs5dDIX+GHzCd0kl3AJiYgzl/YFZ4CjfMLvl4YNhengP/ifB7jxGs9e5j/BAwapc+f3j+H5hew/P/l8bSD2D85P9hdsn/w+xqtZJBe/6n+00AgKkixw+M9e//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAYEpcaB+LPeU0LRYjnoqIxSgkN9erlasR8XRE/GWuMJeVlybaYwDg+NK/J/n+X5cWXrzwaO2Z5JO52Iw4ExE/+cWbP39nudncXMre/9dcuz4imu/l75cnMgAAYIjuOt1dx7s+vn9npXuMsz/3vt3ZXDSLu5cfnZrTcTp7+dN8FCLi3L+TTjmX/b5yagTxd+9GxOf6jT9p50YW851PH42fxX5qrPHTh+Kn7brOa3YtPnvgk+cGxhy21yvMig+y+ee1fvdfGhfbr/N9Nz+eb89Qx9ed//YOzH/d+32+Pdf0m/8uHjXGS3/4Xk/x7EN1dyO+cLpf/GQ/fjIg/ovDQ38r++PDL375hUENWr+KuBT94/fGKjVrG6XG9s6V9dryWmWtcrtcvr50/eor114ul9o56lI3U33QP169/PSg+Pd+E3FuQPz5IeP/2qFDb+1PwL/+71s/+kq/JoXO9f/GV/t//88eEj9bE79+aPwHls/9buD23Vn81c747/6/3//lI8b/6G87q0dsCgCMQWN759ZytVrZHOlJIUb8gT0nyQn12cmTevJJq2NI4+z38ePGei5PmfVt88dfvv9cVvkpuSzHPJnwxAScuAc3/aR7AgAAAAAAAAAAAAAADHLi/50onfQIAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAmGb/CwAA//8/uNC1")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)=ANY=[])

13.064012027s ago: executing program 4 (id=1679):
syz_emit_ethernet(0x86, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x1a}, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @cipso={0x86, 0x3f, 0x3, [{0x7, 0xe, "af9351c3612615628636d417"}, {0x5, 0x12, "02a0d1f245d21435f19870ab2659b98d"}, {0x1, 0xa, "70501b0bd1a78a14"}, {0x2, 0xf, "a00358e7c1ec183ae8b98ac073"}]}]}}}}}}}, 0x0)

12.696989118s ago: executing program 4 (id=1680):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000100)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000540)={r1})

12.503867917s ago: executing program 34 (id=1680):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000100)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETENCODER(r0, 0xc01464a6, &(0x7f0000000540)={r1})

2.934454977s ago: executing program 3 (id=1747):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x20, &(0x7f0000000000), 0x4)

2.858441578s ago: executing program 3 (id=1749):
r0 = socket(0xa, 0x3, 0x3a)
setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x3a, 0xd2, 0x0, 0x0)

2.856827327s ago: executing program 3 (id=1752):
syz_open_dev$tty1(0xc, 0x4, 0x1)
mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000640), 0x0})
ioctl$DRM_IOCTL_MODE_SETCRTC(0xffffffffffffffff, 0xc06864a2, &(0x7f0000000580)={&(0x7f0000000040), 0x0, 0x0, 0x0, 0x3, 0xdc, 0xffffffff, 0x804, {0xac7e, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x0, 0x800, 0x97d, 0xe150, 0x1000, 0x7f, 0x3, 0xffffffff, "fe1d0066341300000069a5d7ab2717e47f0000000000000400"}})
r3 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, 0x0)
modify_ldt$write(0x1, &(0x7f0000000280)={0x1003}, 0x10)
timer_settime(0x0, 0x0, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x20014}, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x0, r0, 0x2, &(0x7f0000000340))
r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2686dd4c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48)

1.859955753s ago: executing program 3 (id=1757):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0)

1.609681587s ago: executing program 5 (id=1761):
r0 = syz_open_dev$sndmidi(&(0x7f0000000380), 0x1ff, 0x181042)
ftruncate(r0, 0x1)

1.529553705s ago: executing program 2 (id=1762):
munmap(&(0x7f0000ff3000/0xd000)=nil, 0xd000)
mprotect(&(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x1)

1.529299865s ago: executing program 5 (id=1763):
bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={0x0, 0x0, 0x8}, 0x18)
ioctl$CEC_RECEIVE(0xffffffffffffffff, 0xc0386106, &(0x7f0000000180)={0x10, 0x1, 0x0, 0x6, 0x0, 0x0, "5dc9ca561a5fbf61048955f6f876b2ff", 0x0, 0x1})
r0 = add_key$user(&(0x7f00000003c0), &(0x7f0000000440), &(0x7f00000000c0), 0xc9, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000800)={r0, r0, r0}, 0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={'sha384\x00'}})

1.455815452s ago: executing program 2 (id=1764):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0xf, &(0x7f0000000500)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x11, 0x0, @val=@perf_event={0x9}}, 0x18)

1.455440717s ago: executing program 5 (id=1765):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
io_setup(0x6, &(0x7f0000001380)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x1000000, 0x0, 0x0, 0x5, 0xe, r0, 0x0}])

1.397669971s ago: executing program 2 (id=1766):
r0 = memfd_create(&(0x7f00000000c0)='\xfd\x0fm3#/\x00n\xaa\xaa\xe4\x01U\x8b\xc2\f\x03\x19\x9c\x8e\xcb\x90\x00\x00\xaegQ\x0e\x94\\y\x0fU2@\'\x8a\x80\x00$\x12\xfc\xe4.)\x9b\xf2@\xf0\xe0\xdb\x1f\xe6\xb4gc\x13\xda\xf9\xcd7el\xb7\xe6\b\x00\x00\x00\x00\xef\xff\x00vob/~\xc2\x00\b\x00\x00\x00\x00\x00\x00 \xff\xf1\xdem\x9c;%\xb5\"\xe4\xf1x2\x8a\x19p\x04\\\xaa-\x93\xd1\xc4 )\xbfK\xf7E\xf3\x05\xa0\xd0\xe6%\x97\x15\xf0\xab\x86\x90k\x10\xcer\x14\xe0a\xaf\xab\xfe\xd9V\x19\xa5d\x16\x8e]:3\xff\t\xe6\xf7\xb3\xbf\xa3\b[?\xb5\x14t\xd3\x8e\xc0\xe8\xefd\x88\xddz\xa25)\x17\xef\xfb4\xff\xdb\t\x8e\xeb\x1d\\\xf9\x14\xc7\v\xa8\x89\xdb A\xbaBAj\xfe\x18\xc3-+\xd6\xb0K\xee\x1b+\xc7lA\x84\xa6\xfe\x8bU<&\x1a\xe7m\x86\xb7\xa1A\xf9\x02S;C\x99\a.$K\x833\x82\x7f\x1b\'nj\x06\b\xb7\xe8] \x87A[y\xdc\x14\f\xcet\x00\x1f\x0f\xef\xca\xcfz\x7f\an0\xebB\xb8}&\xdd\xc9\xa7\x1dp\t\x9a\xceb \x81\xaaq{H\x88\xdf\xf8\x80\\\x1c8\xfe\xc4\xe3\xb0\x90\xcb\x8b1r\x94\x9f\x00\xce\xc8\xc3\x84\xa0\xc9\b\x00\x81Ks\xba\xbbC6\xd6\x13\xb5\xe086EzD\x18\xd5\x16\x88E\xc6\xf0A9\xf1u\xb3\x85\x02\x12\\Sp\xf4\x9a\xe8\x96^\xe6\xa8K\x12\b}\xff\xcb{\xc6\xf6\xb4\x8b\xb6\xa8Y\xf2\x91\xeeR\v#\xb5)\xb0\x99\x9b-p\xe3\x17\x04\xb0\xdc\x0fk\x11\xe1\x9a\a\x16\xb7\x9b\x88\xfa\x1e`\x84$\xfc\xd7\xf5^X\xd8[}\x032\xd0\x84\xdby\x94Vp\xa5\xcd(\xab\xb6\x95sR\xab\xfc\x8c\'\x9c\x16Q\xad\xbc\xb04%\xb7\xe5\x14\xb1`\x87#X\\W`;\'_4\xc5\xc9\x921<\xd9\xad\x9f\x12@!\xfaI\x88\xab\xef\x86\xe9\a>\xdd7\xb7\x8e\x9c0-o\xc9\xec_|\x02\xc8Ru\x95\xa8#U\xd6J\x87\xf6X\xb6{\x11$\x00\xc8\x14\xcb\xd1nK\xd8\xb9\x0e\x9bA\xed\xbcs\x1fS\r\x12O\x83\x15\xcb(\xdb\xb1S\x1f%\x04\x9a\xa0l\xa3}\xe7r\x02\x00\x00\x00\x8aeh;F[\xe2\x1c<L\xaa\x87A\xcdN#\xfb\xb0\xf2\x1e\x0e#J\xd0hB<\xc0\x82A0)p\xe7&J\x82\x83\x83\xd14\x01\xcf\x1b\xa9\x1d\x1ef\x0f\x86(1\xd6l\xd2\x8f\xb0\xad\t\x15\xdb|\x87\xf1\xc4\xb8\xb2\x9a\xd2A\x80\xbf\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd6\x80\x00\x00\x00\x00\x00\x00\x00\x88&}\xd1\x00\x00\x00\xe6\xaf\t\x9f\x96\rN\xc9\x90\xbe\xed\x1ad\x14\xe7\x84\t\'\x8b\x00\xdd\xc9\x0f\x14v\xb6\x04\xf2U\xb4\xf6\xbe\xddT\xcb\x00\x00\x00\x00\x00\x00\xe9\x00\x00\x00\x00\x00\x00o:}\xa7jmH\xedn\x11\xfe\xe2\x0fT\x00\x94\xbc\xc6\x7f\x93eE1xp\xa3\xdc\xd7K9J<\xeb\xd2!\xf4\x19\xbd#\xb8\x83\x858\n\xf8\x12Z\x1a\x12\xfa\xcc\x04\r\xf3\xf4;\v\x15b^\xea\xa2\x04 \xe8\x99\xb3\x97\x9e\r\xb0\x05\xbb(f\xd0\x85\xc5\x15\xae#\x12Q\xacF\xfb\xc8\xbd\xcc#\v\x00\x00\x00\x00\x00\x00\x8f\x9b\x00\x03\xc8}\x11\xbc\x01\x8fi\xf5\x7f\xaf\x11\xfb\x16\x95\xdfc\xc9\x8a/&\x81w\xdf]ao\\\x88\xf7\xce\xbd\xb0\xa6J~\x8d\xf1\xe9\x1c\xcfo\xb3\xdc\x04Y\x8e\r\xf5\xa0\xeft\x06G0\xe3D\xd6\xa3L\xedN\x0e\xdc@7\xd8^\xae\xea\x92\xbe\x9c\xf9~c\xc1|\xca\x8d\x93R\xe5\xceU\xa5\x0f\xbf\xd8l\x96`\x0f\x00e\x8aR{\x17Y\x15m>\xe26 \x19k&.\x7f\x1d~\xdaI\xd4\x99\a+\xdf]\xbc\xa6\xc3\x0f\x99W\x9c-t\v\xc7J\xfd\x91\x853\xd1j;\x19W\x96V\x8az+\xf9\x82#\xfaC\xa3YN:\xe8\xda\xbc\xb2h\x8f\xe0\xc6d\x96\xccy\xb3\xc2\x98\x1c\xca\xde\"\xaeW\x89\x83\xc2sB\xe7\b\x9b9~}\xc2\xb3\x1d\xcc?\xd1\x89\xef\xca\x00\x00\x00\x00\x00\x00\x00\x00\x00J[\xc4\x04\xc1\xa6\x10\xc2\x9d\x11\t|\xc0\t\xd9(\x80\xe6s\xaa\x88\x8a\xd6\xa2\x01\x10W]Z\x8d\xf7\xd1P\xf9d\x01|\xa3\x03hSq\x95\x8f\xe1J\xd3#/fcCz\xff\x80\xe2M\xa3-r\xf6\x1a\xd74\xdc\xe1\xe4\xc3\x9dU t}\x02\x9a{C|S\xf4\x98\x05\xb9\x15}\xfa\"\xdc\xc2r\xf9\a\xadnD\xb6\x06\xd3\'\x10\x9f|\x17\xd6\x89O\f\x98@\x85\xa5m\x9d\\&\x17o\x11Z=l\xfb\x93\x8exZ', 0x6)
ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x8010002})
mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x2000003, 0x97052, r0, 0x0)
syz_clone(0x8000, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x0, 0x0, 0x0, 0x0, 0x0)
futex(&(0x7f000000cffc), 0x1, 0x800001, 0x0, 0x0, 0x0)

1.319538267s ago: executing program 5 (id=1767):
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000780)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000000100), &(0x7f0000010600)='./bus\x00', 0x10, &(0x7f0000000140)=ANY=[@ANYBLOB="6e6f666c7573685f6d657267652c66617374626f6f742c746573745f64756d6d795f656e6372797074696f6e2c696e6c696e655f78617474725f73697a653d3078303030303030303030303030303030632c00e863cd59e1f6a329db71886ce3bac8c29075314f1d7afec0cd24ffcf74aa2b1c809f629d1ba3849699bffbda66cb78b431a5ddcd3c1086269413aa903a605e639fefe8d3b54bb838f236b49a869657fb097235d5fc303322a330a2890bcca6ca"], 0x1, 0x105ab, &(0x7f000003f380)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x84042, 0x1fb)
write$P9_RUNLINKAT(r0, &(0x7f00000000c0)={0x7, 0x4d, 0xfffc}, 0x7)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x40240, 0x0)

1.18881502s ago: executing program 2 (id=1768):
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
chdir(&(0x7f0000000540)='./cgroup\x00')
fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3)
mkdir(&(0x7f00000003c0)='./file0\x00', 0xffe9)

1.11931934s ago: executing program 2 (id=1769):
r0 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8905, &(0x7f0000000040)={'bridge0\x00', 0x0})

1.009519361s ago: executing program 2 (id=1770):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x6a, 0x1, 0x0, 0xffffffff, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r2}, 0x10)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r3}, 0x10)
bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001c40)={{r1}, &(0x7f0000001bc0), &(0x7f0000001c00)='%ps    \x00'}, 0x20)
r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
close(r4)
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b"], 0x0)

527.824869ms ago: executing program 5 (id=1771):
r0 = syz_open_dev$cec(&(0x7f0000002340), 0x0, 0x0)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x14})
ioctl$CEC_S_MODE(r0, 0x40046109, &(0x7f0000000140)=0xd0)

521.676573ms ago: executing program 3 (id=1772):
syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000009640)='./file2\x00', 0x200900, &(0x7f0000000180)={[{@inode64}]}, 0x5, 0x9680, &(0x7f000001c300)="$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")
r0 = open$dir(&(0x7f0000000000)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x1100, 0x402000})
mkdirat(0xffffffffffffff9c, &(0x7f0000001dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)

195.107µs ago: executing program 3 (id=1773):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
r1 = syz_io_uring_setup(0xeac, &(0x7f0000000480)={0x0, 0x40068, 0x1000, 0x3, 0x40314}, &(0x7f0000000240), &(0x7f0000000080))
io_uring_enter(r1, 0x0, 0x464f, 0x1, 0x0, 0x0)

0s ago: executing program 5 (id=1774):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000006b00000008000300", @ANYRES32=r2], 0x28}}, 0x0)

kernel console output (not intermixed with test programs):

LID (0x2)
[  131.432992][ T5965] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  131.480748][ T7914] netlink: 44 bytes leftover after parsing attributes in process `syz.0.839'.
[  131.532822][ T5954] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.550582][ T5954] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.564926][ T5954] bond0 (unregistering): Released all slaves
[  131.671714][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'.
[  131.674672][ T7920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.838'.
[  131.764197][ T5954] bond1 (unregistering): Released all slaves
[  131.894224][ T5954] bond2 (unregistering): (slave veth3): Releasing backup interface
[  131.897561][ T5954] bond2 (unregistering): Released all slaves
[  132.380974][ T5954] hsr_slave_0: left promiscuous mode
[  132.387447][ T5954] hsr_slave_1: left promiscuous mode
[  132.395381][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.403457][ T5954] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.408285][ T5954] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.420189][ T5954] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.442814][ T5954] veth0_macvtap: left promiscuous mode
[  132.445659][ T5954] veth1_vlan: left promiscuous mode
[  132.448089][ T5954] veth0_vlan: left promiscuous mode
[  132.534135][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.538443][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.564758][ T7944] loop0: detected capacity change from 0 to 32768
[  132.668730][ T7959] loop0: detected capacity change from 0 to 1024
[  133.091969][ T5238] Bluetooth: hci1: command tx timeout
[  133.181426][ T5954] team0 (unregistering): Port device team_slave_1 removed
[  133.211451][ T5954] team0 (unregistering): Port device team_slave_0 removed
[  133.519890][ T7963] bond0: option primary_reselect: invalid value (17)
[  133.676764][ T7886] chnl_net:caif_netlink_parms(): no params data found
[  133.805334][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.808475][ T7886] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.832187][ T7886] bridge_slave_0: entered allmulticast mode
[  133.836186][ T7886] bridge_slave_0: entered promiscuous mode
[  133.853133][ T5954] IPVS: stop unused estimator thread 0...
[  133.857748][ T7886] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.866770][ T7886] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.870816][ T7886] bridge_slave_1: entered allmulticast mode
[  133.873591][ T7886] bridge_slave_1: entered promiscuous mode
[  133.915099][ T7886] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  133.927091][ T7886] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  133.967569][ T7886] team0: Port device team_slave_0 added
[  133.973457][ T7886] team0: Port device team_slave_1 added
[  133.998769][ T7886] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.002419][ T7886] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.016544][ T7886] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.023117][ T7886] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.026277][ T7886] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.037966][ T7886] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.085483][ T7886] hsr_slave_0: entered promiscuous mode
[  134.088660][ T7886] hsr_slave_1: entered promiscuous mode
[  134.094886][ T7886] debugfs: 'hsr0' already exists in 'hsr'
[  134.097963][ T7886] Cannot create hsr debugfs directory
[  134.280018][ T8001] loop2: detected capacity change from 0 to 32768
[  134.342671][ T8001] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  134.370492][ T7886] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  134.378187][ T7886] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  134.398510][ T7886] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  134.410155][ T7886] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  134.480529][ T5965] ocfs2: Unmounting device (7,2) on (node local)
[  134.505229][ T7886] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.507992][ T7886] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.511321][ T7886] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.514515][ T7886] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.552446][ T1157] bridge0: port 1(bridge_slave_0) entered disabled state
[  134.559104][ T1157] bridge0: port 2(bridge_slave_1) entered disabled state
[  134.611531][ T7886] 8021q: adding VLAN 0 to HW filter on device bond0
[  134.638227][ T7886] 8021q: adding VLAN 0 to HW filter on device team0
[  134.655203][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[  134.658364][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[  134.687432][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[  134.690714][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[  134.839686][ T8032] loop0: detected capacity change from 0 to 128
[  135.013655][ T7886] 8021q: adding VLAN 0 to HW filter on device batadv0
[  135.031530][ T7886] veth0_vlan: entered promiscuous mode
[  135.038408][ T7886] veth1_vlan: entered promiscuous mode
[  135.073629][ T7886] veth0_macvtap: entered promiscuous mode
[  135.191094][ T5238] Bluetooth: hci1: command tx timeout
[  135.205415][ T7886] veth1_macvtap: entered promiscuous mode
[  135.384451][ T7886] batman_adv: batadv0: Interface activated: batadv_slave_0
[  135.396775][ T7886] batman_adv: batadv0: Interface activated: batadv_slave_1
[  135.414044][ T5954] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  135.418703][ T5954] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  135.428309][ T5954] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  135.448259][ T5954] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  135.547429][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.556122][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.587314][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  135.592832][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  135.961734][ T8069] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  136.325613][ T8059] loop0: detected capacity change from 0 to 32768
[  136.336119][ T8059] XFS: ikeep mount option is deprecated.
[  136.468792][ T8059] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  136.525047][ T8059] XFS (loop0): Ending clean mount
[  136.544176][ T8059] XFS (loop0): Quotacheck needed: Please wait.
[  136.607785][ T8059] XFS (loop0): Quotacheck: Done.
[  136.767707][ T5958] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  137.155854][ T8107] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.884'.
[  137.208158][ T8111] loop0: detected capacity change from 0 to 1024
[  137.250163][ T5238] Bluetooth: hci1: command tx timeout
[  137.278782][ T8111] hfsplus: request for non-existent node 62977 in B*Tree
[  137.286806][ T8111] hfsplus: request for non-existent node 62977 in B*Tree
[  137.316543][ T1097] hfsplus: b-tree write err: -5, ino 3
[  137.477730][ T8127] loop3: detected capacity change from 0 to 512
[  137.492334][ T8127] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  137.524736][ T8127] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #16: comm syz.3.895: invalid indirect mapped block 4294967295 (level 0)
[  137.547727][ T8127] EXT4-fs (loop3): Remounting filesystem read-only
[  137.551649][ T8127] EXT4-fs (loop3): 1 orphan inode deleted
[  137.554724][ T8127] EXT4-fs (loop3): 1 truncate cleaned up
[  137.558200][ T8127] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  137.581151][ T7886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.788413][ T8131] loop0: detected capacity change from 0 to 32768
[  137.818185][ T8131] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  137.831820][ T8131] XFS (loop0): Ending clean mount
[  137.852761][ T5958] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  137.999611][ T8157] loop0: detected capacity change from 0 to 512
[  138.003348][ T8157] EXT4-fs (loop0): Test dummy encryption mode enabled
[  138.006212][ T8157] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  138.015088][ T8157] EXT4-fs (loop0): 1 truncate cleaned up
[  138.018354][ T8157] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  138.051875][ T5958] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.063712][ T8149] loop3: detected capacity change from 0 to 40427
[  138.091415][ T8149] F2FS-fs (loop3): invalid crc value
[  138.143568][ T8149] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  138.148759][ T8149] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  138.709465][  T974] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  138.859426][  T974] usb 1-1: Using ep0 maxpacket: 32
[  138.867812][  T974] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  138.875594][  T974] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  138.884490][  T974] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  138.890174][  T974] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  138.899651][  T974] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  138.903111][  T974] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  138.908152][  T974] usb 1-1: Product: syz
[  138.909844][  T974] usb 1-1: Manufacturer: syz
[  138.913569][  T974] usb 1-1: SerialNumber: syz
[  138.919773][ T8181] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  138.928603][  T974] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input13
[  139.136168][ T6004] usb 1-1: USB disconnect, device number 15
[  139.147873][ T6004] appletouch 1-1:1.0: input: appletouch disconnected
[  139.278822][ T8199] loop2: detected capacity change from 0 to 128
[  139.303113][ T8199] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  139.318529][ T8199] ext4 filesystem being mounted at /237/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  139.329689][ T5238] Bluetooth: hci1: command tx timeout
[  139.332106][ T8199] EXT4-fs error (device loop2): ext4_validate_inode_bitmap:105: comm syz.2.919: Corrupt inode bitmap - block_group = 0, inode_bitmap = 19
[  139.363477][ T8204] program syz.3.921 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  139.368460][ T5965] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  139.408695][ T8206] netlink: 10 bytes leftover after parsing attributes in process `syz.3.923'.
[  139.488284][ T8214] netlink: 20 bytes leftover after parsing attributes in process `syz.3.926'.
[  139.670399][ T8226] loop2: detected capacity change from 0 to 2048
[  139.702583][ T8226] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  139.788380][ T8234] loop0: detected capacity change from 0 to 128
[  139.800385][ T8234] qnx6: unable to set blocksize
[  139.832021][ T8236] loop2: detected capacity change from 0 to 512
[  139.838950][ T8236] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  139.871929][ T8236] EXT4-fs (loop2): 1 truncate cleaned up
[  139.880296][ T8236] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.948692][ T5965] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.983602][ T8243] loop0: detected capacity change from 0 to 4096
[  139.994619][ T8243] ntfs3: Bad value for 'uid'
[  140.004435][ T8243] ntfs3: Bad value for 'uid'
[  140.097253][ T8253] loop2: detected capacity change from 0 to 512
[  140.117265][ T8253] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  140.123756][ T8253] ext4 filesystem being mounted at /247/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  140.149413][ T6890] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  140.154262][ T5965] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.300091][ T6890] usb 4-1: Using ep0 maxpacket: 16
[  140.307462][ T6890] usb 4-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  140.313015][ T6890] usb 4-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  140.318094][ T6890] usb 4-1: config 0 interface 0 has no altsetting 0
[  140.320874][ T6890] usb 4-1: New USB device found, idVendor=04b4, idProduct=bca1, bcdDevice= 0.00
[  140.324552][ T6890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.331671][ T6890] usb 4-1: config 0 descriptor??
[  140.342850][ T8264] loop2: detected capacity change from 0 to 164
[  140.381403][ T6392] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  140.549440][ T6392] usb 1-1: Using ep0 maxpacket: 32
[  140.564006][ T6392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  140.568829][ T6392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  140.593224][ T6392] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8 has invalid wMaxPacketSize 0
[  140.629557][ T6392] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=75.9e
[  140.648082][ T6392] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.660658][ T6392] usb 1-1: Product: syz
[  140.665012][ T6392] usb 1-1: Manufacturer: syz
[  140.681128][ T6392] usb 1-1: SerialNumber: syz
[  140.686219][ T6392] usb 1-1: config 0 descriptor??
[  140.696974][ T6392] iguanair 1-1:0.0: probe with driver iguanair failed with error -12
[  140.887861][ T6890] cypress 0003:04B4:BCA1.0009: item fetching failed at offset 4/5
[  140.892113][ T6890] cypress 0003:04B4:BCA1.0009: parse failed
[  140.894884][ T6890] cypress 0003:04B4:BCA1.0009: probe with driver cypress failed with error -22
[  140.910922][   T51] usb 1-1: USB disconnect, device number 16
[  141.093581][ T6890] usb 4-1: USB disconnect, device number 2
[  141.258131][ T8272] loop2: detected capacity change from 0 to 164
[  141.266338][ T8272] rock: directory entry would overflow storage
[  141.271695][ T8272] rock: sig=0x4543, size=28, remaining=18
[  141.403999][ T8280] comedi comedi0: adq12b: I/O port conflict (0xffffffffffffffff,16)
[  141.832268][ T8310] loop2: detected capacity change from 0 to 256
[  141.968125][ T8319] syz.2.975: attempt to access beyond end of device
[  141.968125][ T8319] nbd2: rw=0, sector=0, nr_sectors = 1 limit=0
[  141.972117][ T8318] loop0: detected capacity change from 0 to 256
[  141.977699][ T8318] exfat: Deprecated parameter 'utf8'
[  141.985253][ T8319] efs: cannot read volume header
[  141.997006][ T8318] exfat: Deprecated parameter 'utf8'
[  142.002985][ T8318] exfat: Deprecated parameter 'utf8'
[  142.017668][ T8318] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[  142.059485][   T33] audit: type=1800 audit(1755286848.082:39): pid=8318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.974" name="file2" dev="loop0" ino=1048654 res=0 errno=0
[  142.199950][ T8328] Driver unsupported XDP return value 0 on prog  (id 90) dev N/A, expect packet loss!
[  142.209084][ T8331] loop3: detected capacity change from 0 to 1024
[  142.614282][   T33] audit: type=1326 audit(1755286848.632:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.3.985" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdabd8ebe9 code=0x7ffc0000
[  142.624052][   T33] audit: type=1326 audit(1755286848.652:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.3.985" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdabd8ebe9 code=0x7ffc0000
[  142.644505][   T33] audit: type=1326 audit(1755286848.652:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.3.985" exe="/syz-executor" sig=0 arch=c000003e syscall=300 compat=0 ip=0x7fcdabd8ebe9 code=0x7ffc0000
[  142.666664][   T33] audit: type=1326 audit(1755286848.652:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.3.985" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdabd8ebe9 code=0x7ffc0000
[  142.679485][   T33] audit: type=1326 audit(1755286848.652:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8343 comm="syz.3.985" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdabd8ebe9 code=0x7ffc0000
[  142.706365][ T8350] loop0: detected capacity change from 0 to 1024
[  142.728800][ T8350] hfsplus: request for non-existent node 3 in B*Tree
[  142.732373][ T8350] hfsplus: request for non-existent node 3 in B*Tree
[  142.897785][ T8356] loop0: detected capacity change from 0 to 256
[  142.904630][ T8356] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  142.911685][ T8356] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  142.921446][ T8356] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xb62de5b7, utbl_chksum : 0xe619d30d)
[  143.094381][ T8369] loop3: detected capacity change from 0 to 1024
[  143.144136][ T1097] hfsplus: b-tree write err: -5, ino 4
[  143.208268][ T8378] binder_alloc: binder_alloc_mmap_handler: 8376 200000ffc000-200000ffd000 already mapped failed -16
[  143.345638][   T33] audit: type=1326 audit(1755286849.372:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.2.1002" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcb78ebe9 code=0x7fc00000
[  143.359066][   T33] audit: type=1326 audit(1755286849.382:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.2.1002" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcb78ebe9 code=0x7fc00000
[  143.370515][   T33] audit: type=1326 audit(1755286849.382:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.2.1002" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcb78ebe9 code=0x7fc00000
[  143.378375][   T33] audit: type=1326 audit(1755286849.382:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8382 comm="syz.2.1002" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcb78ebe9 code=0x7fc00000
[  143.414812][ T8389] netlink: 'syz.0.1004': attribute type 1 has an invalid length.
[  143.421797][ T8389] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1004'.
[  143.426922][ T8389] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1004'.
[  143.493062][ T8392] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1005'.
[  143.496957][ T8392] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1005'.
[  143.869467][ T6003] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  144.019331][ T6003] usb 1-1: Using ep0 maxpacket: 32
[  144.023228][ T6003] usb 1-1: config 0 has an invalid interface number: 126 but max is 0
[  144.026832][ T6003] usb 1-1: config 0 has no interface number 0
[  144.074005][ T6003] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  144.083131][ T6003] usb 1-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  144.086523][ T6003] usb 1-1: config 0 interface 126 has no altsetting 0
[  144.091611][ T6003] usb 1-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  144.094863][ T6003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.097683][ T6003] usb 1-1: Product: syz
[  144.099467][ T6003] usb 1-1: Manufacturer: syz
[  144.101176][ T6003] usb 1-1: SerialNumber: syz
[  144.104289][ T6003] usb 1-1: config 0 descriptor??
[  144.106652][ T8400] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  144.110783][ T8400] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  144.112207][ T8402] Zero length message leads to an empty skb
[  144.524116][ T8413] mmap: syz.3.1014 (8413) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  144.534864][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1014'.
[  144.985180][ T6003] ir_usb 1-1:0.126: IR Dongle converter detected
[  145.007450][ T6003] usb 1-1: IRDA class descriptor not found, device not bound
[  145.217626][ T6003] usb 1-1: USB disconnect, device number 17
[  145.695112][ T8429] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1023'.
[  146.004909][   T51] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  146.031521][ T8448] evm: overlay not supported
[  146.142638][ T8452] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1033'.
[  146.192962][   T51] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  146.196463][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.199717][   T51] usb 3-1: Product: syz
[  146.201393][   T51] usb 3-1: Manufacturer: syz
[  146.203184][   T51] usb 3-1: SerialNumber: syz
[  146.215364][   T51] usb 3-1: config 0 descriptor??
[  146.572001][   T51] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  146.779590][ T5939] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  146.952470][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  146.957562][ T5939] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  146.962423][ T5939] usb 4-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  146.966428][ T5939] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.978387][ T5939] usb 4-1: config 0 descriptor??
[  147.396215][ T5939] hid_parser_main: 5 callbacks suppressed
[  147.396232][ T5939] arvo 0003:1E7D:30D4.000A: unknown main item tag 0x0
[  147.430013][ T5939] arvo 0003:1E7D:30D4.000A: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.3-1/input0
[  147.804653][ T5939] usb 4-1: USB disconnect, device number 3
[  147.988969][   T51] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  148.000590][   T51] usb 3-1: USB disconnect, device number 12
[  148.303087][ T8473] loop0: detected capacity change from 0 to 512
[  148.335601][ T8473] EXT4-fs warning (device loop0): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  148.352329][ T8473] EXT4-fs warning (device loop0): dx_probe:849: Enable large directory feature to access it
[  148.356876][ T8473] EXT4-fs warning (device loop0): dx_probe:934: inode #2: comm syz.0.1041: Corrupt directory, running e2fsck is recommended
[  148.363010][ T8473] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -117
[  148.368107][ T8473] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1041: corrupted in-inode xattr: invalid ea_ino
[  148.375800][ T8473] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1041: couldn't read orphan inode 15 (err -117)
[  148.387212][ T8473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.423050][ T5958] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.040287][ T8507] 9pnet_virtio: no channels available for device syz
[  150.781034][ T8518] loop2: detected capacity change from 0 to 32768
[  150.811655][ T8518] JBD2: Ignoring recovery information on journal
[  150.822663][ T8518] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75
[  150.836441][ T8518] JBD2: bad block at offset 32
[  150.885368][ T8518] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  151.115573][ T5965] ocfs2: Unmounting device (7,2) on (node local)
[  151.733196][ T8571] loop3: detected capacity change from 0 to 1024
[  151.808443][ T1097] hfsplus: b-tree write err: -5, ino 4
[  151.866094][ T8581] loop2: detected capacity change from 0 to 256
[  151.876680][   T33] kauditd_printk_skb: 131 callbacks suppressed
[  151.876689][   T33] audit: type=1400 audit(1755286857.892:180): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=8585 comm="syz.0.1068"
[  151.886061][ T8581] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  151.951562][ T8591] loop3: detected capacity change from 0 to 136
[  151.961426][ T8591] Attempt to read inode for relocated directory
[  151.979544][ T8594] loop2: detected capacity change from 0 to 8
[  151.982790][ T8594] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  152.013957][ T8594] cramfs: Error -3 while decompressing!
[  152.016613][ T8594] cramfs: ffffffff99beb628(26)->ffff88811c3e4000(4096)
[  152.024660][ T8594] cramfs: Error -3 while decompressing!
[  152.027028][ T8594] cramfs: ffffffff99beb642(26)->ffff88811be6b000(4096)
[  152.031163][ T8594] cramfs: Error -3 while decompressing!
[  152.033505][ T8594] cramfs: ffffffff99beb65c(16)->ffff88811be67000(4096)
[  152.036467][ T8594] cramfs: Error -3 while decompressing!
[  152.038779][ T8594] cramfs: ffffffff99beb628(26)->ffff88811c3e4000(4096)
[  152.044097][   T33] audit: type=1800 audit(1755286858.072:181): pid=8594 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1071" name="file2" dev="loop2" ino=348 res=0 errno=0
[  152.095155][ T8600] tmpfs: Bad value for 'mpol'
[  152.127529][ T8604] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1074'.
[  152.140907][ T8604] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1074'.
[  152.147082][ T8604] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1074'.
[  152.153091][ T8604] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  153.096913][ T8630] loop2: detected capacity change from 0 to 2048
[  153.106652][ T8630] UDF-fs: warning (device loop2): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor.
[  153.129686][ T8630] UDF-fs: warning (device loop2): udf_fill_super: No fileset found
[  153.280174][ T6003] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  153.439346][ T6003] usb 4-1: Using ep0 maxpacket: 32
[  153.449356][ T6003] usb 4-1: config 0 has an invalid interface number: 229 but max is 0
[  153.452342][ T6003] usb 4-1: config 0 has no interface number 0
[  153.472305][ T6003] usb 4-1: New USB device found, idVendor=3b53, idProduct=a0d3, bcdDevice=e3.d4
[  153.476101][ T6003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.490956][ T6003] usb 4-1: Product: syz
[  153.492426][ T6003] usb 4-1: Manufacturer: syz
[  153.493949][ T6003] usb 4-1: SerialNumber: syz
[  153.511329][ T6003] usb 4-1: config 0 descriptor??
[  153.514632][ T6003] usb-storage 4-1:0.229: USB Mass Storage device detected
[  153.750464][ T6890] usb 4-1: USB disconnect, device number 4
[  154.879488][ T6890] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  154.959467][ T8666] loop3: detected capacity change from 0 to 8192
[  154.982483][ T8666] syz.3.1101: attempt to access beyond end of device
[  154.982483][ T8666] loop3: rw=0, sector=57847, nr_sectors = 1 limit=8192
[  154.993156][ T8666] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  154.996272][ T8666] FAT-fs (loop3): Filesystem has been set read-only
[  155.002975][ T8666] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  155.006155][ T8666] FAT-fs (loop3): error, invalid access to FAT (entry 0x0000e1b1)
[  155.050390][ T6890] usb 3-1: Using ep0 maxpacket: 16
[  155.058060][ T6890] usb 3-1: too many configurations: 60, using maximum allowed: 8
[  155.090863][ T6890] usb 3-1: New USB device found, idVendor=0471, idProduct=032c, bcdDevice=ba.e9
[  155.094740][ T6890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=204
[  155.101581][ T6890] usb 3-1: Product: syz
[  155.103353][ T6890] usb 3-1: Manufacturer: syz
[  155.109064][ T6890] usb 3-1: SerialNumber: syz
[  155.117671][ T6890] usb 3-1: config 0 descriptor??
[  155.123520][ T6890] pwc: Philips SPC 880NC USB webcam detected.
[  155.241376][   T33] audit: type=1326 audit(1755286861.272:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8683 comm="syz.3.1109" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdabd8ebe9 code=0x0
[  155.329007][ T8688] loop3: detected capacity change from 0 to 256
[  155.337931][ T8688] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  155.355355][ T6890] pwc: Warning: more than 1 configuration available.
[  155.362353][ T6890] pwc: Failed to set LED on/off time (-71)
[  155.367211][ T6890] pwc: send_video_command error -71
[  155.371692][ T6890] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  155.374780][ T6890] Philips webcam 3-1:0.0: probe with driver Philips webcam failed with error -71
[  155.381246][ T6890] usb 3-1: USB disconnect, device number 13
[  155.549679][ T6004] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  155.593116][ T8694] loop3: detected capacity change from 0 to 4096
[  155.619798][ T8694] ntfs3(loop3): $Secure::$SII is corrupted.
[  155.622414][ T8694] ntfs3(loop3): Failed to initialize $Secure (-22).
[  155.720181][ T6004] usb 1-1: Using ep0 maxpacket: 16
[  155.724024][ T6004] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  155.727603][ T6004] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  155.733224][ T6004] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  155.739037][ T6004] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  155.742972][ T6004] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.746396][ T6004] usb 1-1: Product: syz
[  155.748158][ T6004] usb 1-1: Manufacturer: syz
[  155.750674][ T6004] usb 1-1: SerialNumber: syz
[  155.870642][ T5238] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci1/hci1:201'
[  155.874866][ T5238] CPU: 0 UID: 0 PID: 5238 Comm: kworker/u11:1 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  155.874878][ T5238] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  155.874884][ T5238] Workqueue: hci1 hci_rx_work
[  155.874912][ T5238] Call Trace:
[  155.874916][ T5238]  <TASK>
[  155.874921][ T5238]  dump_stack_lvl+0x189/0x250
[  155.874934][ T5238]  ? __pfx_dump_stack_lvl+0x10/0x10
[  155.874942][ T5238]  ? __pfx__printk+0x10/0x10
[  155.874955][ T5238]  ? kernfs_path_from_node+0x250/0x290
[  155.874963][ T5238]  ? kernfs_path_from_node+0x2f/0x290
[  155.874973][ T5238]  sysfs_create_dir_ns+0x259/0x280
[  155.874982][ T5238]  ? __pfx_sysfs_create_dir_ns+0x10/0x10
[  155.874991][ T5238]  ? do_raw_spin_unlock+0x4d/0x240
[  155.875007][ T5238]  kobject_add_internal+0x59f/0xb40
[  155.875028][ T5238]  kobject_add+0x155/0x220
[  155.875046][ T5238]  ? __pfx_kobject_add+0x10/0x10
[  155.875062][ T5238]  ? _raw_spin_unlock+0x28/0x50
[  155.875079][ T5238]  ? get_device_parent+0x366/0x3a0
[  155.875093][ T5238]  device_add+0x408/0xb50
[  155.875110][ T5238]  hci_conn_add_sysfs+0xd5/0x1e0
[  155.875124][ T5238]  le_conn_complete_evt+0xc3a/0x1220
[  155.875151][ T5238]  ? __pfx_le_conn_complete_evt+0x10/0x10
[  155.875169][ T5238]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  155.875185][ T5238]  ? __asan_memcpy+0x40/0x70
[  155.875201][ T5238]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  155.875214][ T5238]  ? skb_pull_data+0xfb/0x200
[  155.875230][ T5238]  hci_le_conn_complete_evt+0x187/0x450
[  155.875252][ T5238]  hci_event_packet+0x78f/0x1200
[  155.875269][ T5238]  ? __pfx_hci_le_meta_evt+0x10/0x10
[  155.875286][ T5238]  ? __pfx_hci_event_packet+0x10/0x10
[  155.875301][ T5238]  ? kcov_remote_start+0x4d3/0x7f0
[  155.875316][ T5238]  ? lockdep_hardirqs_on+0x90/0x150
[  155.875332][ T5238]  ? hci_send_to_monitor+0xe2/0x570
[  155.875349][ T5238]  hci_rx_work+0x46a/0xe80
[  155.875366][ T5238]  ? process_scheduled_works+0x9ef/0x17b0
[  155.875381][ T5238]  process_scheduled_works+0xae1/0x17b0
[  155.875411][ T5238]  ? __pfx_process_scheduled_works+0x10/0x10
[  155.875434][ T5238]  worker_thread+0x8a0/0xda0
[  155.875448][ T5238]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  155.875468][ T5238]  ? __kthread_parkme+0x7b/0x200
[  155.875487][ T5238]  kthread+0x711/0x8a0
[  155.875505][ T5238]  ? __pfx_worker_thread+0x10/0x10
[  155.875516][ T5238]  ? __pfx_kthread+0x10/0x10
[  155.875528][ T5238]  ? _raw_spin_unlock_irq+0x23/0x50
[  155.875539][ T5238]  ? lockdep_hardirqs_on+0x9c/0x150
[  155.875551][ T5238]  ? __pfx_kthread+0x10/0x10
[  155.875565][ T5238]  ret_from_fork+0x3fc/0x770
[  155.875580][ T5238]  ? __pfx_ret_from_fork+0x10/0x10
[  155.875597][ T5238]  ? __switch_to_asm+0x39/0x70
[  155.875613][ T5238]  ? __switch_to_asm+0x33/0x70
[  155.875627][ T5238]  ? __pfx_kthread+0x10/0x10
[  155.875640][ T5238]  ret_from_fork_asm+0x1a/0x30
[  155.875666][ T5238]  </TASK>
[  155.875757][ T5238] kobject: kobject_add_internal failed for hci1:201 with -EEXIST, don't try to register things with the same name in the same directory.
[  155.940798][ T8702] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1117'.
[  155.942604][ T5238] Bluetooth: hci1: failed to register connection device
[  156.180583][ T6004] usb 1-1: 0:2 : does not exist
[  156.732785][ T8720] loop2: detected capacity change from 0 to 1024
[  156.761886][ T8720] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  156.766414][ T8720] ext4 filesystem being mounted at /301/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.813249][ T5965] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  156.887061][ T8725] dvmrp5: entered allmulticast mode
[  156.903091][ T8725] pimreg: entered allmulticast mode
[  156.988239][ T8727] loop2: detected capacity change from 0 to 128
[  157.002496][ T8727] qnx6: unable to set blocksize
[  157.097961][ T6004] usb 1-1: USB disconnect, device number 18
[  157.229389][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  157.315129][ T8731] loop2: detected capacity change from 0 to 1024
[  157.554662][ T8735] process 'syz.2.1130' launched './file0' with NULL argv: empty string added
[  157.776591][ T8747] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1137'.
[  157.789069][ T8751] loop0: detected capacity change from 0 to 256
[  157.798571][ T8751] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  157.814116][ T8751] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  157.833193][ T8751] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  157.878847][ T8741] loop3: detected capacity change from 0 to 32768
[  157.895049][ T8741] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1134 (8741)
[  157.904563][ T8741] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  157.907897][ T8741] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  157.933027][ T8741] BTRFS info (device loop3): using free-space-tree
[  158.050479][ T5238] Bluetooth: hci1: command tx timeout
[  158.066650][ T7886] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  158.204183][ T8758] loop2: detected capacity change from 0 to 32768
[  158.249111][ T8758] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  158.272854][   T33] audit: type=1800 audit(1755286864.302:183): pid=8758 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1142" name="file1" dev="loop2" ino=17059 res=0 errno=0
[  158.310760][ T6003] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  158.323106][ T5965] ocfs2: Unmounting device (7,2) on (node local)
[  158.459453][ T6890] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  158.462978][ T6003] usb 1-1: Using ep0 maxpacket: 16
[  158.472753][ T6003] usb 1-1: config 0 has an invalid interface number: 109 but max is 0
[  158.475582][ T6003] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  158.484509][ T6003] usb 1-1: config 0 has no interface number 0
[  158.492483][ T8788] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1148'.
[  158.496057][ T6003] usb 1-1: New USB device found, idVendor=0421, idProduct=0094, bcdDevice=28.8e
[  158.499031][ T6003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.502575][ T6003] usb 1-1: Product: syz
[  158.504273][ T6003] usb 1-1: Manufacturer: syz
[  158.506096][ T6003] usb 1-1: SerialNumber: syz
[  158.510568][ T6003] usb 1-1: config 0 descriptor??
[  158.620435][ T6890] usb 4-1: Using ep0 maxpacket: 32
[  158.624460][ T6890] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[  158.628490][ T6890] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  158.637971][ T6890] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  158.641933][ T6890] usb 4-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  158.645200][ T6890] usb 4-1: Product: syz
[  158.646770][ T6890] usb 4-1: Manufacturer: syz
[  158.648620][ T6890] usb 4-1: SerialNumber: syz
[  158.654214][ T6890] usb 4-1: config 0 descriptor??
[  158.668642][ T6890] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  158.726225][ T8777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  158.737642][ T8777] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  158.745442][ T6003] rndis_host 1-1:0.109: More than one union descriptor, skipping ...
[  158.758523][ T6003] usb 1-1: bad CDC descriptors
[  158.761575][ T6003] cdc_acm 1-1:0.109: More than one union descriptor, skipping ...
[  158.772881][ T6003] usb 1-1: USB disconnect, device number 19
[  158.878091][    T9] usb 4-1: USB disconnect, device number 5
[  158.880623][ T5954] usb 4-1: Failed to submit usb control message: -71
[  158.884797][ T5954] usb 4-1: unable to send the bmi data to the device: -71
[  158.889613][ T5954] usb 4-1: unable to get target info from device
[  158.892089][ T5954] usb 4-1: could not get target info (-71)
[  158.894400][ T5954] usb 4-1: could not probe fw (-71)
[  159.343616][ T8815] loop2: detected capacity change from 0 to 4096
[  160.259357][ T5939] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  160.411922][ T5939] usb 4-1: config 252 has an invalid interface number: 107 but max is 0
[  160.415598][ T5939] usb 4-1: config 252 has no interface number 0
[  160.420178][ T5939] usb 4-1: config 252 interface 107 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  160.424467][ T5939] usb 4-1: config 252 interface 107 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  160.432884][ T5939] usb 4-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=d7.67
[  160.436734][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.442215][ T5939] usb 4-1: Product: syz
[  160.444089][ T5939] usb 4-1: Manufacturer: syz
[  160.446164][ T5939] usb 4-1: SerialNumber: syz
[  160.665495][ T5939] usb 4-1: USB disconnect, device number 6
[  161.097504][ T8860] loop2: detected capacity change from 0 to 2048
[  161.148553][ T8860]  loop2: p2 p3 p7
[  161.223136][ T8864] netlink: 'syz.3.1179': attribute type 10 has an invalid length.
[  161.227906][ T8864] batman_adv: batadv0: Adding interface: wlan0
[  161.235699][ T8864] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.247865][ T8864] batman_adv: batadv0: Interface activated: wlan0
[  161.631824][ T8874] netlink: 'syz.2.1183': attribute type 1 has an invalid length.
[  162.090624][ T8883] loop2: detected capacity change from 0 to 128
[  162.100555][ T8883] EXT4-fs: Ignoring removed nobh option
[  162.136384][ T8883] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  162.151079][ T8883] ext4 filesystem being mounted at /342/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  162.303091][ T5965] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  162.690917][ T5939] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  162.840842][ T5939] usb 3-1: Using ep0 maxpacket: 32
[  162.845292][ T5939] usb 3-1: config 0 has an invalid interface number: 108 but max is 0
[  162.848563][ T5939] usb 3-1: config 0 has no interface number 0
[  162.859362][ T5939] usb 3-1: config 0 interface 108 altsetting 180 endpoint 0x2 has invalid wMaxPacketSize 0
[  162.864635][ T5939] usb 3-1: config 0 interface 108 has no altsetting 0
[  162.875959][ T5939] usb 3-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=97.c3
[  162.880004][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  162.883328][ T5939] usb 3-1: Product: syz
[  162.885128][ T5939] usb 3-1: Manufacturer: syz
[  162.887084][ T5939] usb 3-1: SerialNumber: syz
[  162.899867][ T5939] usb 3-1: config 0 descriptor??
[  162.908856][ T5939] ttusbir 3-1:0.108: cannot find expected altsetting
[  163.128960][ T5939] usb 3-1: USB disconnect, device number 14
[  163.823048][ T8919] loop2: detected capacity change from 0 to 2048
[  163.841601][ T8919] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.847071][ T8919] ext4 filesystem being mounted at /347/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  163.879862][ T5965] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  163.977280][   T33] audit: type=1326 audit(1755286870.002:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8924 comm="syz.2.1203" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcb78ebe9 code=0x7ffc0000
[  164.005846][   T33] audit: type=1326 audit(1755286870.002:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8924 comm="syz.2.1203" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcb78ebe9 code=0x7ffc0000
[  164.024923][   T33] audit: type=1326 audit(1755286870.022:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8924 comm="syz.2.1203" exe="/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7f5dcb78ebe9 code=0x7ffc0000
[  164.035386][   T33] audit: type=1326 audit(1755286870.022:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8924 comm="syz.2.1203" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcb78ebe9 code=0x7ffc0000
[  164.045927][   T33] audit: type=1326 audit(1755286870.022:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8924 comm="syz.2.1203" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcb78ebe9 code=0x7ffc0000
[  164.068948][   T33] audit: type=1326 audit(1755286870.022:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8924 comm="syz.2.1203" exe="/syz-executor" sig=0 arch=c000003e syscall=209 compat=0 ip=0x7f5dcb78ebe9 code=0x7ffc0000
[  164.077623][ T8929] loop3: detected capacity change from 0 to 2048
[  164.097070][   T33] audit: type=1326 audit(1755286870.022:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8924 comm="syz.2.1203" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcb78ebe9 code=0x7ffc0000
[  164.109019][ T8931] netlink: 'syz.0.1207': attribute type 10 has an invalid length.
[  164.119603][   T33] audit: type=1326 audit(1755286870.022:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8924 comm="syz.2.1203" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5dcb78ebe9 code=0x7ffc0000
[  164.124939][ T8934] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  164.136733][ T8929] NILFS error (device loop3): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  164.157162][ T8929] Remounting filesystem read-only
[  164.161179][ T8931] team0: Port device syz_tun added
[  164.222184][ T8936] loop2: detected capacity change from 0 to 512
[  164.230561][ T8936] EXT4-fs (loop2): bad s_want_extra_isize: 11962
[  164.321557][ T8943] loop2: detected capacity change from 0 to 512
[  164.355074][ T8943] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  164.368440][ T8943] ext4 filesystem being mounted at /351/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  164.438263][ T5965] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.447087][ T8948] IPVS: Error joining to the multicast group
[  164.598048][ T8956] loop3: detected capacity change from 0 to 4096
[  164.744724][ T8950] loop2: detected capacity change from 0 to 32768
[  164.750095][ T8950] XFS: ikeep mount option is deprecated.
[  164.757828][ T8950] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  164.773976][ T8950] XFS (loop2): Ending clean mount
[  164.777723][ T8950] XFS (loop2): Quotacheck needed: Please wait.
[  164.805273][ T8950] XFS (loop2): Quotacheck: Done.
[  164.820210][ T5965] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  165.080091][ T8978] loop2: detected capacity change from 0 to 1024
[  165.093509][ T8978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  165.133225][ T5965] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.642692][   T24] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  165.792939][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  165.804957][   T24] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  165.808883][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.813356][   T24] usb 1-1: Product: syz
[  165.815560][   T24] usb 1-1: Manufacturer: syz
[  165.818557][   T24] usb 1-1: SerialNumber: syz
[  165.829959][   T24] usb 1-1: config 0 descriptor??
[  166.419976][ T9017] loop2: detected capacity change from 0 to 4096
[  166.424571][ T9017] nilfs2: Bad value for 'cp'
[  166.710209][ T9021] loop0: detected capacity change from 0 to 256
[  166.743106][ T9021] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x467a0815, utbl_chksum : 0xe619d30d)
[  166.754419][ T9021] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  166.775487][   T24] usb 1-1: USB disconnect, device number 20
[  166.880953][ T9030] loop2: detected capacity change from 0 to 1024
[  166.919619][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  167.081128][ T9040] loop2: detected capacity change from 0 to 2048
[  167.093361][ T9040] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  167.102481][ T9040] UDF-fs: Scanning with blocksize 512 failed
[  167.121901][ T9040] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  167.175603][ T9042] loop0: detected capacity change from 0 to 2048
[  167.199210][ T9042] FAT-fs (loop0): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[  167.199408][   T51] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  167.205307][ T9042] FAT-fs (loop0): Filesystem has been set read-only
[  167.350467][   T51] usb 4-1: Using ep0 maxpacket: 32
[  167.360609][   T51] usb 4-1: config 0 interface 0 has no altsetting 0
[  167.367985][   T51] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  167.379382][   T51] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.382740][   T51] usb 4-1: Product: syz
[  167.384439][   T51] usb 4-1: Manufacturer: syz
[  167.396864][   T51] usb 4-1: SerialNumber: syz
[  167.407484][   T51] usb 4-1: config 0 descriptor??
[  167.434380][ T9053] loop0: detected capacity change from 0 to 8
[  167.446117][ T9054] loop2: detected capacity change from 0 to 512
[  167.452205][ T9053] SQUASHFS error: lzo decompression failed, data probably corrupt
[  167.455860][ T9053] SQUASHFS error: Failed to read block 0x144: -5
[  167.458507][ T9053] SQUASHFS error: Unable to read metadata cache entry [142]
[  167.465101][ T9053] SQUASHFS error: Unable to read inode 0x11f
[  167.477981][ T9054] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1258: casefold flag without casefold feature
[  167.488210][ T9054] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1258: couldn't read orphan inode 15 (err -117)
[  167.505708][ T9054] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.547078][ T9058] loop0: detected capacity change from 0 to 128
[  167.583839][ T5965] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.597073][   T33] audit: type=1800 audit(1755286873.622:192): pid=9058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1259" name="bus" dev="loop0" ino=1048660 res=0 errno=0
[  167.678274][ T9061] syz.0.1259: attempt to access beyond end of device
[  167.678274][ T9061] loop0: rw=2049, sector=929, nr_sectors = 112 limit=128
[  167.824790][   T51] gs_usb 4-1:0.0: Configuring for 2 interfaces
[  167.925820][ T9071] loop0: detected capacity change from 0 to 512
[  167.936590][ T9071] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1265: casefold flag without casefold feature
[  167.953546][ T9071] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1265: couldn't read orphan inode 15 (err -117)
[  167.962395][ T9071] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.999101][ T5958] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.029409][ T6003] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  168.196822][ T6003] usb 3-1: Using ep0 maxpacket: 32
[  168.211062][ T6003] usb 3-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.215637][ T6003] usb 3-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  168.224019][ T6003] usb 3-1: config 0 interface 0 has no altsetting 0
[  168.226935][ T6003] usb 3-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  168.232155][ T6003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.242425][   T51] gs_usb 4-1:0.0: Disabling termination support for channel 0 (-EPROTO)
[  168.250841][ T6003] usb 3-1: config 0 descriptor??
[  168.270390][   T51] gs_usb 4-1:0.0: Couldn't get bit timing const for channel 1 (-EPROTO)
[  168.341915][   T51] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -71
[  168.360210][   T51] usb 4-1: USB disconnect, device number 7
[  168.406198][ T9088] netlink: 248 bytes leftover after parsing attributes in process `syz.0.1272'.
[  168.412577][ T9088] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1272'.
[  168.611637][ T9096] loop0: detected capacity change from 0 to 512
[  168.615649][ T9096] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  168.664143][   T33] audit: type=1800 audit(1755286874.692:193): pid=9096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1276" name="file1" dev="loop0" ino=1048661 res=0 errno=0
[  168.673087][ T6003] betop 0003:20BC:5500.000B: unbalanced collection at end of report description
[  168.673575][ T6003] betop 0003:20BC:5500.000B: parse failed
[  168.693669][ T6003] betop 0003:20BC:5500.000B: probe with driver betop failed with error -22
[  168.749007][ T9098] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1277'.
[  168.875090][ T9100] loop0: detected capacity change from 0 to 4096
[  168.879086][ T6003] usb 3-1: USB disconnect, device number 15
[  168.937792][ T9100] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  168.954127][ T9100] ntfs3(loop0): Failed to load $Extend (-22).
[  168.956686][ T9100] ntfs3(loop0): Failed to initialize $Extend.
[  169.314974][ T9112] loop3: detected capacity change from 0 to 32768
[  169.343899][ T9112] OCFS2: ERROR (device loop3): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #65: i_blkno is 67108929
[  169.360038][ T9112] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  169.369362][ T9112] OCFS2: File system is now read-only.
[  169.374449][ T9112] (syz.3.1284,9112,1):ocfs2_read_locked_inode:597 ERROR: status = -30
[  169.377831][ T9112] (syz.3.1284,9112,1):ocfs2_init_global_system_inodes:444 ERROR: status = -30
[  169.383044][ T9112] (syz.3.1284,9112,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  169.386814][ T9112] (syz.3.1284,9112,1):ocfs2_initialize_super:2198 ERROR: status = -30
[  169.391126][ T9112] (syz.3.1284,9112,1):ocfs2_fill_super:1177 ERROR: status = -30
[  169.507697][ T9122] loop0: detected capacity change from 0 to 40427
[  169.512674][ T9122] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  169.516078][ T9122] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  169.521594][ T9122] F2FS-fs (loop0): invalid crc value
[  169.583436][ T9122] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  169.590961][ T9122] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  169.594049][ T9122] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  170.157363][   T33] audit: type=1800 audit(1755286875.912:194): pid=9140 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1289" name="file1" dev="loop0" ino=10 res=0 errno=0
[  170.209203][ T9142] loop2: detected capacity change from 0 to 512
[  170.214615][ T9142] EXT4-fs: Ignoring removed nobh option
[  170.231409][ T9142] EXT4-fs (loop2): Test dummy encryption mode enabled
[  170.244284][ T9142] EXT4-fs error (device loop2): ext4_orphan_get:1392: inode #15: comm syz.2.1296: iget: bad i_size value: 38620345925642
[  170.255403][ T9142] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1296: couldn't read orphan inode 15 (err -117)
[  170.269076][ T9142] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  170.362912][ T5965] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.461193][ T9148] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  170.829562][ T9159] loop2: detected capacity change from 0 to 256
[  170.833114][ T9159] exfat: Deprecated parameter 'namecase'
[  170.844900][ T9159] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  171.395522][ T9167] loop2: detected capacity change from 0 to 512
[  171.426011][ T9167] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.431878][ T9167] ext4 filesystem being mounted at /382/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  172.011580][ T5965] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.372448][ T5958] syz-executor: attempt to access beyond end of device
[  172.372448][ T5958] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  172.388557][ T5958] CPU: 0 UID: 0 PID: 5958 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  172.388577][ T5958] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  172.388585][ T5958] Call Trace:
[  172.388590][ T5958]  <TASK>
[  172.388595][ T5958]  dump_stack_lvl+0x189/0x250
[  172.388617][ T5958]  ? __pfx_dump_stack_lvl+0x10/0x10
[  172.388632][ T5958]  ? __pfx_queue_work_on+0x10/0x10
[  172.388643][ T5958]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  172.388658][ T5958]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  172.388682][ T5958]  f2fs_handle_critical_error+0x37c/0x540
[  172.388706][ T5958]  f2fs_write_end_io+0x886/0xb60
[  172.388757][ T5958]  __submit_merged_bio+0x27a/0x6a0
[  172.388773][ T5958]  ? up_write+0x1c4/0x420
[  172.388791][ T5958]  __submit_merged_write_cond+0x44c/0x530
[  172.388813][ T5958]  f2fs_sync_node_pages+0x1479/0x15e0
[  172.388845][ T5958]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  172.388885][ T5958]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  172.388907][ T5958]  ? up_write+0x1c4/0x420
[  172.388918][ T5958]  ? do_raw_spin_unlock+0x4d/0x240
[  172.388936][ T5958]  f2fs_write_checkpoint+0xe6f/0x1df0
[  172.388970][ T5958]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  172.389022][ T5958]  ? kill_f2fs_super+0x298/0x6c0
[  172.389038][ T5958]  kill_f2fs_super+0x2c3/0x6c0
[  172.389056][ T5958]  ? __pfx_kill_f2fs_super+0x10/0x10
[  172.389065][ T5958]  ? radix_tree_delete_item+0x2b6/0x400
[  172.389086][ T5958]  ? shrinker_free+0x2ce/0x3e0
[  172.389103][ T5958]  deactivate_locked_super+0xbc/0x130
[  172.389120][ T5958]  cleanup_mnt+0x425/0x4c0
[  172.389135][ T5958]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.389153][ T5958]  task_work_run+0x1d4/0x260
[  172.389172][ T5958]  ? __pfx_task_work_run+0x10/0x10
[  172.389185][ T5958]  ? __x64_sys_umount+0x122/0x160
[  172.389205][ T5958]  ? exit_to_user_mode_loop+0x40/0x110
[  172.389224][ T5958]  exit_to_user_mode_loop+0xec/0x110
[  172.389241][ T5958]  do_syscall_64+0x2bd/0x3b0
[  172.389276][ T5958]  ? lockdep_hardirqs_on+0x9c/0x150
[  172.389291][ T5958]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.389304][ T5958]  ? exc_page_fault+0x9f/0xf0
[  172.389320][ T5958]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  172.389330][ T5958] RIP: 0033:0x7f8d2d38ff17
[  172.389343][ T5958] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  172.389353][ T5958] RSP: 002b:00007ffe755f2368 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  172.389366][ T5958] RAX: 0000000000000000 RBX: 00007f8d2d411c05 RCX: 00007f8d2d38ff17
[  172.389374][ T5958] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe755f2420
[  172.389381][ T5958] RBP: 00007ffe755f2420 R08: 0000000000000000 R09: 0000000000000000
[  172.389389][ T5958] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe755f34b0
[  172.389396][ T5958] R13: 00007f8d2d411c05 R14: 0000000000029ab6 R15: 00007ffe755f34f0
[  172.389419][ T5958]  </TASK>
[  172.546297][ T5958] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  173.806674][ T9195] futex_wake_op: syz.2.1316 tries to shift op by 32; fix this program
[  174.961326][ T9215] loop0: detected capacity change from 0 to 32768
[  174.969700][ T9215] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1322 (9215)
[  174.981175][ T9215] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  174.985305][ T9215] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  174.989091][ T9215] BTRFS info (device loop0): using free-space-tree
[  175.023041][   T33] audit: type=1800 audit(1755286881.052:195): pid=9215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1322" name="file1" dev="loop0" ino=260 res=0 errno=0
[  175.078813][ T5958] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  175.149763][ T5939] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  175.319412][    T9] usb 4-1: new full-speed USB device number 8 using dummy_hcd
[  175.329477][ T5939] usb 3-1: Using ep0 maxpacket: 16
[  175.332800][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.336852][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.342484][ T5939] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00
[  175.346807][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.357141][ T5939] usb 3-1: config 0 descriptor??
[  175.429414][ T6003] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  175.474298][    T9] usb 4-1: config 1 interface 0 altsetting 93 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  175.480677][    T9] usb 4-1: config 1 interface 0 has no altsetting 0
[  175.484791][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  175.488566][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  175.493686][    T9] usb 4-1: SerialNumber: syz
[  175.579321][ T6003] usb 1-1: Using ep0 maxpacket: 16
[  175.584073][ T6003] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.588442][ T6003] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  175.595158][ T6003] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  175.599085][ T6003] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.602547][ T6003] usb 1-1: Product: syz
[  175.604400][ T6003] usb 1-1: Manufacturer: syz
[  175.606425][ T6003] usb 1-1: SerialNumber: syz
[  175.722618][ T9223] loop3: detected capacity change from 0 to 1024
[  175.756944][ T9223] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  175.761868][ T9223] ext4 filesystem being mounted at /161/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.770763][    T9] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71
[  175.776257][ T5939] corsair 0003:1B1C:1B02.000C: hidraw0: USB HID v0.00 Device [HID 1b1c:1b02] on usb-dummy_hcd.2-1/input0
[  175.797108][    T9] usb 4-1: USB disconnect, device number 8
[  175.832294][ T6003] usb 1-1: 0:2 : does not exist
[  175.838430][ T6003] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[  175.855500][ T6003] usb 1-1: USB disconnect, device number 21
[  175.871918][ T5875] udevd[5875]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  175.969398][ T5939] corsair 0003:1B1C:1B02.000C: Failed to get K90 initial state (error -71).
[  175.978690][ T5939] usb 3-1: USB disconnect, device number 16
[  176.294226][ T7886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  176.654619][ T9269] loop3: detected capacity change from 0 to 4096
[  176.906930][   T26] ntfs3(loop3): ino=5, mi_enum_attr
[  177.137889][ T9276] loop3: detected capacity change from 0 to 32768
[  177.147628][ T9276] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 0, max 64)
[  177.147628][ T9276] members_v2 (size 152):
[  177.147628][ T9276] nr_devices mismatch: have 17 entries, should be 1Device:0
[  177.147628][ T9276]   Label:                       (none)
[  177.147628][ T9276]   UUID:                        7af6772b-00de-4159-0000-000000000000
[  177.147628][ T9276]   Size:                        0
[  177.147628][ T9276]   read errors:                 0
[  177.147628][ T9276]   write errors:                0
[  177.147628][ T9276]   checksum errors:             0
[  177.147628][ T9276]   seqread iops:                0
[  177.147628][ T9276]   seqwrite iops:               0
[  177.147628][ T9276]   randread iops:               0
[  177.147628][ T9276]   randwrite iops:              0
[  177.147628][ T9276]   Bucket size:                 0
[  177.147628][ T9276]   First bucket:                0
[  177.147628][ T9276]   Buckets:                     0
[  177.147628][ T9276]   Last mount:                  (never)
[  177.147628][ T9276]   Last superblock write:       0
[  177.147628][ T9276]   State:                       rw
[  177.147628][ T9276]   Data allowed:                (none)
[  177.147628][ T9276]   Has data:                    (none)
[  177.147628][ T9276]   Btree allocated bitmap blocksize:1
[  177.147628][ T9276]   Btree allocated bitmap:      0000000000000000000000000000000000000000000000000000000000000000
[  177.147628][ T9276]   Durability:       
[  177.147790][ T9276] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  177.204888][    C0] vkms_vblank_simulate: vblank timer overrun
[  177.459253][ T9282] netlink: 76 bytes leftover after parsing attributes in process `syz.0.1344'.
[  177.587811][ T5939] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  177.702416][ T9290] loop2: detected capacity change from 0 to 4096
[  177.717672][ T9286] loop0: detected capacity change from 0 to 32768
[  177.727141][ T9286] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1346 (9286)
[  177.741620][ T5939] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  177.749005][ T5939] usb 4-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[  177.753005][ T9286] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  177.753053][ T9286] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  177.753118][ T9286] BTRFS info (device loop0): using free-space-tree
[  177.761250][ T5939] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.766521][ T5939] usb 4-1: Product: syz
[  177.768242][ T5939] usb 4-1: Manufacturer: syz
[  177.772846][ T5939] usb 4-1: SerialNumber: syz
[  177.777639][ T5939] usb 4-1: config 0 descriptor??
[  177.930948][ T9309] loop2: detected capacity change from 0 to 4096
[  177.939467][ T5958] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  177.951438][ T9309] NILFS (loop2): invalid segment: Checksum error in segment payload
[  177.954936][ T9309] NILFS (loop2): trying rollback from an earlier position
[  177.987271][ T9309] NILFS (loop2): recovery complete
[  178.002857][ T5939] usb 4-1: USB disconnect, device number 9
[  178.004342][ T9311] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  178.241614][ T9321] input: syz1 as /devices/virtual/input/input17
[  178.395586][ T9331] openvswitch: netlink: nsh attribute has 2 unknown bytes.
[  178.464263][ T9337] trusted_key: encrypted_key: master key parameter is missing
[  178.541241][ T5939] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  178.617856][   T51] kernel write not supported for file /sequencer (pid: 51 comm: kworker/1:1)
[  178.723418][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  178.728333][ T5939] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  178.745759][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.760021][ T5939] usb 3-1: config 0 descriptor??
[  178.764290][ T9325] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  178.873015][ T9361] loop3: detected capacity change from 0 to 128
[  179.059524][   T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  179.176020][ T5939] pyra 0003:1E7D:2CF6.000D: hidraw0: USB HID v1.01 Device [HID 1e7d:2cf6] on usb-dummy_hcd.2-1/input0
[  179.221475][   T24] usb 1-1: Using ep0 maxpacket: 16
[  179.232547][   T24] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[  179.236171][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.241762][   T24] usb 1-1: Product: syz
[  179.244087][   T24] usb 1-1: Manufacturer: syz
[  179.246122][   T24] usb 1-1: SerialNumber: syz
[  179.249150][   T24] usb 1-1: config 0 descriptor??
[  179.326399][ T9380] loop3: detected capacity change from 0 to 128
[  179.341376][ T9380] omfs: sysblock size (-58445445) is out of range
[  179.381212][   T51] usb 3-1: USB disconnect, device number 17
[  179.385038][ T9382] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1384'.
[  179.407323][ T9382] pim6reg: entered allmulticast mode
[  179.412558][ T9382] pim6reg: left allmulticast mode
[  179.458449][   T24] speedtch 1-1:0.0: speedtch_bind: data interface not found!
[  179.461429][   T24] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19!
[  179.666888][    T9] usb 1-1: USB disconnect, device number 22
[  180.099505][ T9393] loop2: detected capacity change from 0 to 40427
[  180.105777][ T9393] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  180.108961][ T9393] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  180.115167][ T9393] F2FS-fs (loop2): invalid crc value
[  180.148417][ T9393] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  180.153233][ T9393] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  180.155999][ T9393] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  181.086721][ T9414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1395'.
[  181.376193][   T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  181.473281][ T9418] loop2: detected capacity change from 0 to 256
[  181.476792][ T9418] exfat: Deprecated parameter 'namecase'
[  181.485587][ T9418] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d)
[  181.539480][   T24] usb 1-1: Using ep0 maxpacket: 32
[  181.546292][   T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  181.553037][   T24] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  181.559341][   T24] usb 1-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  181.568613][   T24] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  181.573105][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.575864][   T24] usb 1-1: Product: syz
[  181.577465][   T24] usb 1-1: Manufacturer: syz
[  181.579063][   T24] usb 1-1: SerialNumber: syz
[  181.583833][   T24] cdc_ncm 1-1:1.0: skipping garbage
[  181.585902][   T24] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[  181.588625][   T24] cdc_ncm 1-1:1.0: bind() failure
[  181.910331][   T24] usb 1-1: USB disconnect, device number 23
[  182.058377][ T9427] loop3: detected capacity change from 0 to 4096
[  182.079672][ T9427] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  182.104028][ T9427] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  182.451984][ T9436] loop3: detected capacity change from 0 to 32768
[  182.491310][ T9436] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  182.599881][ T7886] (syz-executor,7886,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  182.616178][ T7886] ocfs2: Unmounting device (7,3) on (node local)
[  182.688948][ T9452] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1412'.
[  183.902790][ T9500] loop0: detected capacity change from 0 to 32768
[  183.909536][ T9500] bcachefs (/dev/loop0): error validating superblock: Bad number of member devices 0 (max 64)
[  183.920772][ T9500] bcachefs: bch2_fs_get_tree() error: invalid_sb_too_many_members
[  184.013405][ T6003] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  184.166315][ T9510] xfrm0: entered promiscuous mode
[  184.168658][ T9510] xfrm0: entered allmulticast mode
[  184.173650][ T6003] usb 3-1: config 0 has an invalid interface number: 168 but max is 0
[  184.182253][ T6003] usb 3-1: config 0 has no interface number 0
[  184.187894][ T6003] usb 3-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  184.198813][ T6003] usb 3-1: config 0 interface 168 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  184.213583][ T6003] usb 3-1: config 0 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  184.220748][ T6003] usb 3-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4
[  184.224775][ T6003] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.239732][ T6003] usb 3-1: config 0 descriptor??
[  184.243318][ T9498] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  184.272155][ T9516] loop3: detected capacity change from 0 to 512
[  184.302966][ T9516] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.310474][ T9516] ext4 filesystem being mounted at /204/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  184.335472][ T9516] EXT4-fs error (device loop3): ext4_get_inode_usage:884: inode #12: comm syz.3.1442: corrupted xattr block 6: invalid header
[  184.368183][ T7886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.444283][   T33] audit: type=1326 audit(1755286890.472:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9524 comm="syz.0.1446" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8d2d38ebe9 code=0x0
[  184.455474][ T6003] usb 3-1: string descriptor 0 read error: -71
[  184.460181][ T6003] keyspan 3-1:0.168: Keyspan 2 port adapter converter detected
[  184.463911][ T6003] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 1
[  184.471381][ T6003] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 84
[  184.474896][ T6003] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 2
[  184.481278][ T6003] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  184.491728][ T6003] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 88
[  184.495090][ T6003] keyspan 3-1:0.168: found no endpoint descriptor for endpoint 6
[  184.516689][ T6003] usb 3-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  184.524331][ T6003] usb 3-1: USB disconnect, device number 18
[  184.533461][ T6003] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  184.545530][ T6003] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  184.550301][ T6003] keyspan 3-1:0.168: device disconnected
[  185.892372][ T9558] loop0: detected capacity change from 0 to 128
[  186.044620][ T9558] syz.0.1459: attempt to access beyond end of device
[  186.044620][ T9558] loop0: rw=2049, sector=145, nr_sectors = 16 limit=128
[  186.052065][ T9558] syz.0.1459: attempt to access beyond end of device
[  186.052065][ T9558] loop0: rw=2049, sector=169, nr_sectors = 8 limit=128
[  186.058282][ T9558] syz.0.1459: attempt to access beyond end of device
[  186.058282][ T9558] loop0: rw=2049, sector=185, nr_sectors = 8 limit=128
[  186.064383][ T9558] syz.0.1459: attempt to access beyond end of device
[  186.064383][ T9558] loop0: rw=2049, sector=201, nr_sectors = 8 limit=128
[  186.070484][ T9558] syz.0.1459: attempt to access beyond end of device
[  186.070484][ T9558] loop0: rw=2049, sector=217, nr_sectors = 8 limit=128
[  186.076736][ T9558] syz.0.1459: attempt to access beyond end of device
[  186.076736][ T9558] loop0: rw=2049, sector=233, nr_sectors = 8 limit=128
[  186.083070][ T9558] syz.0.1459: attempt to access beyond end of device
[  186.083070][ T9558] loop0: rw=2049, sector=249, nr_sectors = 8 limit=128
[  186.089177][ T9558] syz.0.1459: attempt to access beyond end of device
[  186.089177][ T9558] loop0: rw=2049, sector=265, nr_sectors = 8 limit=128
[  186.103227][ T9558] syz.0.1459: attempt to access beyond end of device
[  186.103227][ T9558] loop0: rw=2049, sector=281, nr_sectors = 8 limit=128
[  186.109818][ T9558] syz.0.1459: attempt to access beyond end of device
[  186.109818][ T9558] loop0: rw=2049, sector=297, nr_sectors = 8 limit=128
[  186.348924][ T9563] loop0: detected capacity change from 0 to 2048
[  186.370098][ T9565] loop2: detected capacity change from 0 to 4096
[  186.641258][ T1097] ntfs3(loop2): ino=5, mi_enum_attr
[  186.753353][ T9592] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1475'.
[  186.896428][ T9611] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  186.955026][ T9615] loop0: detected capacity change from 0 to 164
[  186.976380][ T9615] isofs: isofs_export_get_parent(): child directory not normalized!
[  187.232925][ T9627] loop0: detected capacity change from 0 to 32768
[  187.329772][ T6004] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  187.480983][ T6004] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  187.484896][ T6004] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.493616][ T6004] usb 3-1: config 0 descriptor??
[  187.497862][ T6004] cp210x 3-1:0.0: cp210x converter detected
[  187.578955][ T9636] loop0: detected capacity change from 0 to 32768
[  187.598967][ T9636] MetaData crosses page boundary!!
[  187.602138][ T9636] lblock = 621d00, size  = 28672
[  187.603826][ T9636] CPU: 0 UID: 0 PID: 9636 Comm: syz.0.1496 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  187.603836][ T9636] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.603840][ T9636] Call Trace:
[  187.603844][ T9636]  <TASK>
[  187.603847][ T9636]  dump_stack_lvl+0x189/0x250
[  187.603860][ T9636]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.603868][ T9636]  ? __pfx__printk+0x10/0x10
[  187.603882][ T9636]  __get_metapage+0x9ea/0xde0
[  187.603896][ T9636]  dtSearch+0x591/0x21b0
[  187.603919][ T9636]  jfs_lookup+0x155/0x380
[  187.603929][ T9636]  ? __pfx_jfs_lookup+0x10/0x10
[  187.603945][ T9636]  ? __pfx_apparmor_path_mknod+0x10/0x10
[  187.603954][ T9636]  ? make_vfsuid+0x49/0xa0
[  187.603962][ T9636]  ? generic_permission+0x2e5/0x690
[  187.603972][ T9636]  ? inode_permission+0x149/0x470
[  187.603977][ T9636]  ? bpf_lsm_path_mknod+0x9/0x20
[  187.603984][ T9636]  ? bpf_lsm_inode_create+0x9/0x20
[  187.603991][ T9636]  path_openat+0x1101/0x3830
[  187.603998][ T9636]  ? arch_stack_walk+0xfc/0x150
[  187.604020][ T9636]  ? __pfx_path_openat+0x10/0x10
[  187.604027][ T9636]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.604041][ T9636]  do_filp_open+0x1fa/0x410
[  187.604048][ T9636]  ? __lock_acquire+0xab9/0xd20
[  187.604058][ T9636]  ? __pfx_do_filp_open+0x10/0x10
[  187.604074][ T9636]  ? _raw_spin_unlock+0x28/0x50
[  187.604081][ T9636]  ? alloc_fd+0x64c/0x6c0
[  187.604095][ T9636]  do_sys_openat2+0x121/0x1c0
[  187.604102][ T9636]  ? __se_sys_futex+0x36f/0x400
[  187.604110][ T9636]  ? __pfx_do_sys_openat2+0x10/0x10
[  187.604136][ T9636]  ? rcu_is_watching+0x15/0xb0
[  187.604146][ T9636]  __x64_sys_openat+0x138/0x170
[  187.604156][ T9636]  do_syscall_64+0xfa/0x3b0
[  187.604165][ T9636]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.604174][ T9636]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.604180][ T9636]  ? exc_page_fault+0x9f/0xf0
[  187.604190][ T9636]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.604197][ T9636] RIP: 0033:0x7f8d2d38ebe9
[  187.604204][ T9636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  187.604225][ T9636] RSP: 002b:00007f8d2e254038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  187.604235][ T9636] RAX: ffffffffffffffda RBX: 00007f8d2d5b5fa0 RCX: 00007f8d2d38ebe9
[  187.604240][ T9636] RDX: 000000000000275a RSI: 00002000000001c0 RDI: ffffffffffffff9c
[  187.604244][ T9636] RBP: 00007f8d2d411e19 R08: 0000000000000000 R09: 0000000000000000
[  187.604249][ T9636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  187.604253][ T9636] R13: 00007f8d2d5b6038 R14: 00007f8d2d5b5fa0 R15: 00007ffe755f30d8
[  187.604264][ T9636]  </TASK>
[  187.606539][ T9636] bread failed!
[  187.701635][ T9636] jfs_lookup: dtSearch returned -5
[  187.722292][ T6004] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121
[  187.724915][ T6004] cp210x 3-1:0.0: querying part number failed
[  187.735228][ T6004] usb 3-1: cp210x converter now attached to ttyUSB0
[  187.932584][ T6004] usb 3-1: USB disconnect, device number 19
[  188.031240][ T6004] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  188.080300][ T6004] cp210x 3-1:0.0: device disconnected
[  188.341773][ T9654] loop0: detected capacity change from 0 to 1024
[  188.515421][ T9663] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  188.673327][ T9671] loop3: detected capacity change from 0 to 512
[  188.697456][ T9671] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  188.720039][ T9671] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002]
[  188.729921][ T9671] System zones: 1-12
[  188.735171][ T9671] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.1512: iget: bogus i_mode (700)
[  188.751314][ T9671] EXT4-fs (loop3): Remounting filesystem read-only
[  188.754580][ T9671] EXT4-fs (loop3): 1 orphan inode deleted
[  188.757940][ T9671] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  188.784208][ T7886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.979430][ T6004] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  188.992378][ T9693] loop2: detected capacity change from 0 to 4096
[  189.130856][ T6004] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  189.134573][ T6004] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  189.138253][ T6004] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  189.143892][ T6004] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  189.147215][ T6004] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  189.151470][ T6004] usb 1-1: config 0 descriptor??
[  189.157339][ T6004] hub 1-1:0.0: USB hub found
[  189.364172][ T6004] hub 1-1:0.0: 14 ports detected
[  189.366733][ T6004] hub 1-1:0.0: insufficient power available to use all downstream ports
[  189.564748][ T6004] hub 1-1:0.0: hub_hub_status failed (err = -71)
[  189.568521][ T6004] hub 1-1:0.0: config failed, can't get hub status (err -71)
[  189.600311][ T6004] usb 1-1: USB disconnect, device number 24
[  190.015211][ T9705] loop3: detected capacity change from 0 to 32768
[  190.019922][ T9705] (syz.3.1526,9705,1):ocfs2_verify_volume:2316 ERROR: bad system_dir_blkno: 0
[  190.024229][ T9705] (syz.3.1526,9705,1):ocfs2_verify_volume:2331 ERROR: status = -22
[  190.027994][ T9705] (syz.3.1526,9705,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  190.031980][ T9705] (syz.3.1526,9705,1):ocfs2_fill_super:1177 ERROR: status = -22
[  190.549408][ T6003] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  190.611441][ T5960] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  190.614672][ T5960] Bluetooth: hci0: Injecting HCI hardware error event
[  190.617630][   T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  190.704721][ T6003] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  190.708867][ T6003] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.712315][ T6003] usb 4-1: Product: syz
[  190.714310][ T6003] usb 4-1: Manufacturer: syz
[  190.716310][ T6003] usb 4-1: SerialNumber: syz
[  190.722740][ T6003] usb 4-1: config 0 descriptor??
[  190.730303][ T6003] gspca_main: sunplus-2.14.0 probing 055f:c230
[  190.779439][   T24] usb 1-1: Using ep0 maxpacket: 32
[  190.783760][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  190.788189][   T24] usb 1-1: config 1 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 250, changing to 11
[  190.793167][   T24] usb 1-1: config 1 interface 0 has no altsetting 0
[  190.798230][   T24] usb 1-1: New USB device found, idVendor=056a, idProduct=030c, bcdDevice= 0.40
[  190.802178][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.805811][   T24] usb 1-1: Product: syz
[  190.807677][   T24] usb 1-1: Manufacturer: syz
[  190.810023][   T24] usb 1-1: SerialNumber: syz
[  190.929540][ T5960] Bluetooth: hci0: command 0x0406 tx timeout
[  190.936920][ T5960] Bluetooth: hci2: command 0x0405 tx timeout
[  190.944880][ T5238] Bluetooth: hci0: hardware error 0x00
[  191.225313][   T24] usbhid 1-1:1.0: can't add hid device: -71
[  191.227589][   T24] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  191.232113][   T24] usb 1-1: USB disconnect, device number 25
[  191.250012][ T6004] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  191.409916][ T6004] usb 3-1: Using ep0 maxpacket: 8
[  191.416250][ T6004] usb 3-1: config 3 has an invalid interface number: 45 but max is 0
[  191.425462][ T6004] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  191.429168][ T6004] usb 3-1: config 3 has no interface number 0
[  191.432147][ T6004] usb 3-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  191.437330][ T6004] usb 3-1: config 3 interface 45 has no altsetting 0
[  191.442540][ T6004] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  191.446320][ T6004] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.449846][ T6004] usb 3-1: Product: syz
[  191.451589][ T6004] usb 3-1: Manufacturer: syz
[  191.453386][ T6004] usb 3-1: SerialNumber: syz
[  191.547157][ T6003] usb 4-1: USB disconnect, device number 10
[  191.668242][ T6004] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  191.686297][ T6004] usb 3-1: USB disconnect, device number 20
[  191.715398][ T6732] udevd[6732]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  191.773756][ T9730] loop0: detected capacity change from 0 to 256
[  191.899885][ T9737] loop0: detected capacity change from 0 to 128
[  191.903408][ T9737] EXT4-fs (loop0): Test dummy encryption mode enabled
[  191.908250][ T9737] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0082]
[  191.913957][ T9737] System zones: 1-3, 19-19, 35-36
[  191.918374][ T9737] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  191.924469][ T9737] ext4 filesystem being mounted at /519/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  191.996715][ T9737] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  192.018379][ T5958] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  192.206142][ T9757] loop0: detected capacity change from 0 to 8192
[  192.313912][ T9767] QAT: Device 7 not found
[  192.452389][ T9780] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1555'.
[  193.009477][ T5238] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  193.041054][ T9760] team0: Port device syz_tun removed
[  193.042537][ T6004] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  193.116047][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.165202][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.202046][ T6004] usb 4-1: Using ep0 maxpacket: 8
[  193.207141][ T6004] usb 4-1: unable to get BOS descriptor or descriptor too short
[  193.212060][ T6004] usb 4-1: config 4 has an invalid interface number: 147 but max is 0
[  193.215513][ T6004] usb 4-1: config 4 contains an unexpected descriptor of type 0x2, skipping
[  193.219094][ T6004] usb 4-1: config 4 has no interface number 0
[  193.230734][ T6004] usb 4-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  193.235376][ T6004] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.242700][ T6004] usb 4-1: Product: syz
[  193.244601][ T6004] usb 4-1: Manufacturer: syz
[  193.246690][ T6004] usb 4-1: SerialNumber: syz
[  193.283527][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.397610][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  193.472340][ T6004] usb 4-1: Found UVC 0.02 device syz (04f2:b746)
[  193.474595][ T6004] usb 4-1: No valid video chain found.
[  193.488736][ T6004] usb 4-1: USB disconnect, device number 11
[  193.546827][ T9724] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  193.553035][ T9724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  193.556725][ T9724] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  193.570499][ T9724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  193.575931][ T9724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  193.631786][   T12] bridge_slave_1: left allmulticast mode
[  193.634260][   T12] bridge_slave_1: left promiscuous mode
[  193.641879][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  193.648847][   T12] bridge_slave_0: left allmulticast mode
[  193.652671][   T12] bridge_slave_0: left promiscuous mode
[  193.655313][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  193.973871][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  193.976600][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.075742][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  194.083792][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  194.087693][   T12] bond0 (unregistering): Released all slaves
[  194.115140][ T9817] tun0: tun_chr_ioctl cmd 1074025676
[  194.117453][ T9817] tun0: owner set to 0
[  194.433186][ T9833] loop3: detected capacity change from 0 to 512
[  194.466023][ T9833] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.480860][ T9833] ext4 filesystem being mounted at /237/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  194.540451][ T9831] loop2: detected capacity change from 0 to 8192
[  194.560356][ T9833] EXT4-fs error (device loop3): ext4_ext_check_inode:523: inode #2: comm syz.3.1574: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[  194.578213][ T9833] EXT4-fs (loop3): Remounting filesystem read-only
[  194.582429][ T5875]  loop2: p1 p2[DM] p4
[  194.588387][ T5875] loop2: p1 size 196608 extends beyond EOD, truncated
[  194.612578][ T5875] loop2: p2 start 4292936063 is beyond EOD, truncated
[  194.615514][ T5875] loop2: p4 size 50331648 extends beyond EOD, truncated
[  194.627079][ T9831]  loop2: p1 p2[DM] p4
[  194.629092][ T9831] loop2: p1 size 196608 extends beyond EOD, truncated
[  194.636727][ T9831] loop2: p2 start 4292936063 is beyond EOD, truncated
[  194.640084][ T9831] loop2: p4 size 50331648 extends beyond EOD, truncated
[  194.667055][ T7886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.791936][   T12] hsr_slave_0: left promiscuous mode
[  194.804006][   T12] hsr_slave_1: left promiscuous mode
[  194.814989][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  194.823897][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  194.846001][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  194.853161][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  194.860704][ T9846] usb usb8: usbfs: process 9846 (syz.3.1576) did not claim interface 0 before use
[  194.887935][   T12] veth1_macvtap: left promiscuous mode
[  194.890875][   T12] veth0_macvtap: left promiscuous mode
[  194.893489][   T12] veth1_vlan: left promiscuous mode
[  194.897066][   T12] veth0_vlan: left promiscuous mode
[  195.160636][    T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  195.247414][ T9850] loop2: detected capacity change from 0 to 1024
[  195.258841][ T9850] EXT4-fs (loop2): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  195.263796][ T9850] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (42152!=20869)
[  195.271895][ T9850] EXT4-fs (loop2): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  195.276659][ T9850] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: inode #5: comm syz.2.1578: unexpected bad inode w/o EXT4_IGET_BAD
[  195.282312][ T9850] EXT4-fs (loop2): no journal found
[  195.284102][ T9850] EXT4-fs (loop2): can't get journal size
[  195.294454][ T9850] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  195.331870][    T9] usb 4-1: config 0 has an invalid interface number: 64 but max is 0
[  195.335172][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  195.341017][    T9] usb 4-1: config 0 has no interface number 0
[  195.344940][ T5965] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  195.357557][   T12] team0 (unregistering): Port device team_slave_1 removed
[  195.362798][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice=39.48
[  195.365779][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.379470][    T9] usb 4-1: Product: syz
[  195.380936][    T9] usb 4-1: Manufacturer: syz
[  195.382752][    T9] usb 4-1: SerialNumber: syz
[  195.395436][    T9] usb 4-1: config 0 descriptor??
[  195.409754][ T9853] loop2: detected capacity change from 0 to 2048
[  195.422196][ T9853] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  195.436810][    T9] uvcvideo 4-1:0.64: probe with driver uvcvideo failed with error -22
[  195.450539][   T12] team0 (unregistering): Port device team_slave_0 removed
[  195.610581][    T9] usb 4-1: USB disconnect, device number 12
[  195.660785][ T5238] Bluetooth: hci0: command tx timeout
[  195.703262][ T9855] loop2: detected capacity change from 0 to 32768
[  195.902775][ T9798] chnl_net:caif_netlink_parms(): no params data found
[  196.065855][ T9798] bridge0: port 1(bridge_slave_0) entered blocking state
[  196.068354][ T9798] bridge0: port 1(bridge_slave_0) entered disabled state
[  196.075809][ T9798] bridge_slave_0: entered allmulticast mode
[  196.082034][ T9798] bridge_slave_0: entered promiscuous mode
[  196.086277][ T9798] bridge0: port 2(bridge_slave_1) entered blocking state
[  196.088774][ T9798] bridge0: port 2(bridge_slave_1) entered disabled state
[  196.091434][ T9798] bridge_slave_1: entered allmulticast mode
[  196.094004][ T9798] bridge_slave_1: entered promiscuous mode
[  196.144022][ T9798] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  196.161223][ T9798] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  196.187738][   T33] audit: type=1326 audit(1755286902.212:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.3.1585" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdabd8ebe9 code=0x7ffc0000
[  196.202186][   T33] audit: type=1326 audit(1755286902.212:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.3.1585" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdabd8ebe9 code=0x7ffc0000
[  196.212553][   T33] audit: type=1326 audit(1755286902.212:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.3.1585" exe="/syz-executor" sig=0 arch=c000003e syscall=123 compat=0 ip=0x7fcdabd8ebe9 code=0x7ffc0000
[  196.224465][   T33] audit: type=1326 audit(1755286902.212:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.3.1585" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdabd8ebe9 code=0x7ffc0000
[  196.244799][   T33] audit: type=1326 audit(1755286902.212:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.3.1585" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdabd8ebe9 code=0x7ffc0000
[  196.298286][ T9798] team0: Port device team_slave_0 added
[  196.313720][ T9798] team0: Port device team_slave_1 added
[  196.377159][ T9798] batman_adv: batadv0: Adding interface: batadv_slave_0
[  196.389345][ T9798] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.398305][ T9798] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  196.430318][ T9798] batman_adv: batadv0: Adding interface: batadv_slave_1
[  196.434536][ T9883] loop3: detected capacity change from 0 to 4096
[  196.439565][ T9798] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  196.469463][ T9798] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  196.470187][ T9883] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  196.505482][ T9883] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  196.603774][ T9798] hsr_slave_0: entered promiscuous mode
[  196.616786][ T9798] hsr_slave_1: entered promiscuous mode
[  196.687830][ T9898] loop3: detected capacity change from 0 to 256
[  196.722269][ T9898] FAT-fs (loop3): Directory bread(block 64) failed
[  196.724441][ T9898] FAT-fs (loop3): Directory bread(block 65) failed
[  196.729105][ T9898] FAT-fs (loop3): Directory bread(block 66) failed
[  196.732782][ T9898] FAT-fs (loop3): Directory bread(block 67) failed
[  196.740956][ T9898] FAT-fs (loop3): Directory bread(block 68) failed
[  196.743741][ T9898] FAT-fs (loop3): Directory bread(block 69) failed
[  196.747632][ T9898] FAT-fs (loop3): Directory bread(block 70) failed
[  196.751474][ T9898] FAT-fs (loop3): Directory bread(block 71) failed
[  196.754271][ T9898] FAT-fs (loop3): Directory bread(block 72) failed
[  196.756991][ T9898] FAT-fs (loop3): Directory bread(block 73) failed
[  196.782760][   T33] audit: type=1800 audit(1755286902.812:202): pid=9898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1593" name="bus" dev="loop3" ino=1048674 res=0 errno=0
[  196.851656][ T9798] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  196.868029][ T9798] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  196.884346][ T9798] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  196.898242][ T9798] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  196.934288][ T9912] loop3: detected capacity change from 0 to 2048
[  196.956763][ T9912] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.975364][ T9912] EXT4-fs error (device loop3): ext4_ext_precache:649: inode #2: comm syz.3.1597: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  196.995104][ T9912] EXT4-fs (loop3): Remounting filesystem read-only
[  197.018343][ T7886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.024960][ T9798] 8021q: adding VLAN 0 to HW filter on device bond0
[  197.041252][ T9798] 8021q: adding VLAN 0 to HW filter on device team0
[  197.048727][ T1088] bridge0: port 1(bridge_slave_0) entered blocking state
[  197.051898][ T1088] bridge0: port 1(bridge_slave_0) entered forwarding state
[  197.061846][ T1088] bridge0: port 2(bridge_slave_1) entered blocking state
[  197.064921][ T1088] bridge0: port 2(bridge_slave_1) entered forwarding state
[  197.255342][ T9798] 8021q: adding VLAN 0 to HW filter on device batadv0
[  197.421992][ T9798] veth0_vlan: entered promiscuous mode
[  197.428781][ T9798] veth1_vlan: entered promiscuous mode
[  197.446191][ T9798] veth0_macvtap: entered promiscuous mode
[  197.452430][ T9798] veth1_macvtap: entered promiscuous mode
[  197.472996][ T9798] batman_adv: batadv0: Interface activated: batadv_slave_0
[  197.482495][ T9798] batman_adv: batadv0: Interface activated: batadv_slave_1
[  197.491190][ T6000] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  197.494294][ T6000] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  197.505361][ T6000] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  197.508922][ T6000] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  197.567697][ T1157] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.574469][ T1157] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.628904][ T1088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  197.634328][ T1088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  197.652825][ T9955] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1599'.
[  197.729788][ T5238] Bluetooth: hci0: command tx timeout
[  197.958315][ T9977] loop2: detected capacity change from 0 to 2048
[  197.975473][ T9977] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  198.251315][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1614'.
[  199.123348][T10025] loop3: detected capacity change from 0 to 1024
[  199.769436][  T974] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  199.786301][T10063] loop2: detected capacity change from 0 to 32768
[  199.802542][T10063] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  199.814450][T10063] (syz.2.1642,10063,1):ocfs2_mknod:505 ERROR: status = -31
[  199.819458][ T5238] Bluetooth: hci0: command tx timeout
[  199.823124][T10063] (syz.2.1642,10063,0):ocfs2_mkdir:661 ERROR: status = -31
[  199.846010][ T5965] ocfs2: Unmounting device (7,2) on (node local)
[  199.931898][  T974] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  199.935889][  T974] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  199.940740][  T974] usb 4-1: config 1 interface 1 has no altsetting 1
[  199.944723][  T974] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  199.955329][  T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  199.957938][  T974] usb 4-1: Product: syz
[  199.962149][  T974] usb 4-1: Manufacturer: syz
[  199.963809][  T974] usb 4-1: SerialNumber: syz
[  200.176093][  T974] usb 4-1: selecting invalid altsetting 1
[  200.181095][  T974] cdc_ncm 4-1:1.0: bind() failure
[  200.187548][  T974] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  200.191713][  T974] cdc_ncm 4-1:1.1: bind() failure
[  200.197965][  T974] usb 4-1: USB disconnect, device number 13
[  200.769920][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  200.943226][    T9] usb 5-1: config 0 has an invalid interface number: 242 but max is 0
[  200.946802][    T9] usb 5-1: config 0 has no interface number 0
[  200.949514][   T51] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  200.952916][    T9] usb 5-1: config 0 interface 242 has no altsetting 0
[  200.957863][    T9] usb 5-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=51.ba
[  200.961788][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.965203][    T9] usb 5-1: Product: syz
[  200.966966][    T9] usb 5-1: Manufacturer: syz
[  200.968918][    T9] usb 5-1: SerialNumber: syz
[  200.973631][    T9] usb 5-1: config 0 descriptor??
[  201.101210][   T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  201.105271][   T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  201.119644][   T51] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDA, changing to 0x8A
[  201.129361][   T51] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  201.140196][   T51] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  201.146446][   T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  201.154845][   T51] usb 4-1: SerialNumber: syz
[  201.163344][   T51] usb 4-1: config 0 descriptor??
[  201.183231][    T9] qmi_wwan 5-1:0.242: bogus CDC Union: master=0, slave=1
[  201.199636][    T9] qmi_wwan 5-1:0.242: probe with driver qmi_wwan failed with error -22
[  201.210454][    T9] usb 5-1: USB disconnect, device number 2
[  201.371473][    T9] usb 4-1: USB disconnect, device number 14
[  201.834394][T10095] random: crng reseeded on system resumption
[  201.899488][ T5238] Bluetooth: hci0: command tx timeout
[  202.309383][  T974] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  202.460923][  T974] usb 4-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.467487][  T974] usb 4-1: config 0 interface 0 has no altsetting 0
[  202.474693][  T974] usb 4-1: New USB device found, idVendor=056a, idProduct=0333, bcdDevice= 0.00
[  202.482545][  T974] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.575162][  T974] usb 4-1: config 0 descriptor??
[  203.011898][  T974] wacom 0003:056A:0333.000E: hidraw0: USB HID v0.00 Device [HID 056a:0333] on usb-dummy_hcd.3-1/input0
[  203.149594][   T51] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  203.214249][  T974] usb 4-1: USB disconnect, device number 15
[  203.311366][   T51] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  203.317460][   T51] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  203.323102][   T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.336313][   T51] usb 5-1: config 0 descriptor??
[  203.549594][   T51] ath6kl: Failed to submit usb control message: -71
[  203.556551][   T51] ath6kl: unable to send the bmi data to the device: -71
[  203.561783][   T51] ath6kl: Unable to send get target info: -71
[  203.566387][   T51] ath6kl: Failed to init ath6kl core: -71
[  203.577236][   T51] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71
[  203.592632][   T51] usb 5-1: USB disconnect, device number 3
[  205.297922][T10154] loop4: detected capacity change from 0 to 512
[  205.336471][T10154] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.352354][T10154] ext4 filesystem being mounted at /26/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.540239][ T9798] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  205.562437][ T9798] EXT4-fs error (device loop4): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  205.736380][T10160] loop3: detected capacity change from 0 to 65536
[  205.787862][T10160] XFS (loop3): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  205.810692][ T9798] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.823643][T10160] XFS (loop3): Ending clean mount
[  205.831378][T10160] XFS (loop3): Quotacheck needed: Please wait.
[  205.885442][T10160] XFS (loop3): Quotacheck: Done.
[  205.915507][ T6000] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.923085][ T7886] XFS (loop3): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  206.083078][ T6000] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.192870][ T6000] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.303597][ T6000] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.517052][ T9724] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  206.523993][ T9724] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  206.528853][ T6000] bridge_slave_1: left allmulticast mode
[  206.531846][ T6000] bridge_slave_1: left promiscuous mode
[  206.534326][ T6000] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.538781][ T9724] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  206.544096][ T9724] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  206.547814][ T9724] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  206.568650][ T6000] bridge_slave_0: left allmulticast mode
[  206.571363][ T6000] bridge_slave_0: left promiscuous mode
[  206.574037][ T6000] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.960717][ T6000] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.966190][ T6000] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.972541][ T6000] bond0 (unregistering): Released all slaves
[  206.979381][   T10] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  207.134281][   T10] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e
[  207.137365][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  207.145096][   T10] usb 4-1: Product: syz
[  207.146475][   T10] usb 4-1: Manufacturer: syz
[  207.149423][   T10] usb 4-1: SerialNumber: syz
[  207.159689][   T10] usb 4-1: config 0 descriptor??
[  207.163533][   T10] hub 4-1:0.0: bad descriptor, ignoring hub
[  207.165675][   T10] hub 4-1:0.0: probe with driver hub failed with error -5
[  207.168635][   T10] usbsevseg 4-1:0.0: USB 7 Segment device now attached
[  207.300537][ T6000] hsr_slave_0: left promiscuous mode
[  207.302829][ T6000] hsr_slave_1: left promiscuous mode
[  207.305007][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.307497][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.320962][ T6000] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.323529][ T6000] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.336457][ T6000] veth1_macvtap: left promiscuous mode
[  207.338442][ T6000] veth0_macvtap: left promiscuous mode
[  207.341522][ T6000] veth1_vlan: left promiscuous mode
[  207.343737][ T6000] veth0_vlan: left promiscuous mode
[  207.485027][   T10] usb 4-1: USB disconnect, device number 16
[  207.488444][   T10] usbsevseg 4-1:0.0: USB 7 Segment now disconnected
[  207.744263][ T6000] team0 (unregistering): Port device team_slave_1 removed
[  207.773816][ T6000] team0 (unregistering): Port device team_slave_0 removed
[  208.077458][T10200] loop3: detected capacity change from 0 to 164
[  208.097284][T10200] ISOFS: unable to read i-node block
[  208.099218][T10200] ISOFS: root inode is unusable. Disabling Rock Ridge and switching to Joliet.
[  208.111147][T10200] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1689'.
[  208.116029][T10200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1689'.
[  208.223126][T10174] chnl_net:caif_netlink_parms(): no params data found
[  208.436392][T10174] bridge0: port 1(bridge_slave_0) entered blocking state
[  208.445518][T10174] bridge0: port 1(bridge_slave_0) entered disabled state
[  208.464969][T10174] bridge_slave_0: entered allmulticast mode
[  208.468076][T10174] bridge_slave_0: entered promiscuous mode
[  208.487299][T10174] bridge0: port 2(bridge_slave_1) entered blocking state
[  208.496308][T10174] bridge0: port 2(bridge_slave_1) entered disabled state
[  208.498860][T10174] bridge_slave_1: entered allmulticast mode
[  208.507889][T10174] bridge_slave_1: entered promiscuous mode
[  208.573078][T10174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  208.577384][T10174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  208.609479][ T5238] Bluetooth: hci0: command tx timeout
[  208.623397][T10174] team0: Port device team_slave_0 added
[  208.630941][T10174] team0: Port device team_slave_1 added
[  208.660433][T10174] batman_adv: batadv0: Adding interface: batadv_slave_0
[  208.663079][T10174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.676059][T10218] loop3: detected capacity change from 0 to 2048
[  208.687323][T10174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  208.692453][T10174] batman_adv: batadv0: Adding interface: batadv_slave_1
[  208.694777][T10174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  208.703670][T10174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  208.721895][T10218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  208.774701][ T7886] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.776432][T10174] hsr_slave_0: entered promiscuous mode
[  208.784681][T10174] hsr_slave_1: entered promiscuous mode
[  208.909434][T10230] netlink: 'syz.2.1695': attribute type 1 has an invalid length.
[  209.005202][T10174] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  209.018312][T10174] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  209.037473][T10174] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  209.053482][T10174] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  209.112272][T10174] bridge0: port 2(bridge_slave_1) entered blocking state
[  209.114647][T10174] bridge0: port 2(bridge_slave_1) entered forwarding state
[  209.117150][T10174] bridge0: port 1(bridge_slave_0) entered blocking state
[  209.119584][T10174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  209.134498][T10253] loop3: detected capacity change from 0 to 256
[  209.149054][T10253] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  209.197708][T10174] 8021q: adding VLAN 0 to HW filter on device bond0
[  209.205583][T10174] 8021q: adding VLAN 0 to HW filter on device team0
[  209.607400][T10174] 8021q: adding VLAN 0 to HW filter on device batadv0
[  209.709690][    T9] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  209.763318][T10174] veth0_vlan: entered promiscuous mode
[  209.769123][T10174] veth1_vlan: entered promiscuous mode
[  209.796935][T10174] veth0_macvtap: entered promiscuous mode
[  209.804283][T10174] veth1_macvtap: entered promiscuous mode
[  209.813914][T10174] batman_adv: batadv0: Interface activated: batadv_slave_0
[  209.822344][T10174] batman_adv: batadv0: Interface activated: batadv_slave_1
[  209.829692][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  209.833066][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  209.837649][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  209.843156][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  209.866766][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  209.873341][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  209.876955][    T9] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  209.904863][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  209.917859][    T9] usb 4-1: config 0 descriptor??
[  209.926312][    T9] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  209.928639][    T9] dvb-usb: bulk message failed: -22 (3/0)
[  209.938730][   T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.950644][   T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  209.953850][    T9] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  209.963586][    T9] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  209.966235][    T9] usb 4-1: media controller created
[  209.969060][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  209.986746][ T1847] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  209.996431][ T1847] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.000474][    T9] dvb-usb: bulk message failed: -22 (6/0)
[  210.002980][    T9] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  210.016829][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input23
[  210.089797][    T9] dvb-usb: schedule remote query interval to 150 msecs.
[  210.102383][    T9] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  210.160666][T10293] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1703'.
[  210.161150][    T9] usb 4-1: USB disconnect, device number 17
[  210.175033][T10291] syzkaller1: tun_chr_ioctl cmd 1074025677
[  210.177728][T10291] syzkaller1: linktype set to 774
[  210.226365][    T9] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  210.558926][T10303] loop2: detected capacity change from 0 to 32768
[  210.572033][T10303] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  210.581326][T10303] OCFS2: ERROR (device loop2): int ocfs2_validate_dx_root(struct super_block *, struct buffer_head *): Dir Index Root # 28549323745621536 has bad signature 
[  210.589460][T10303] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  210.598225][T10303] OCFS2: File system is now read-only.
[  210.606948][T10303] (syz.2.1706,10303,0):ocfs2_find_entry_dx:1037 ERROR: status = -30
[  210.649151][ T5965] ocfs2: Unmounting device (7,2) on (node local)
[  210.689693][ T5238] Bluetooth: hci0: command tx timeout
[  211.019379][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  211.256926][    T9] usb 4-1: config 0 has too many interfaces: 204, using maximum allowed: 32
[  211.263654][    T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 204
[  211.277691][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.283721][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.287683][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  211.293258][    T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  211.296325][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.303244][    T9] usb 4-1: config 0 descriptor??
[  211.725756][    T9] input: HID 28bd:0909 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0909.000F/input/input24
[  211.815356][    T9] uclogic 0003:28BD:0909.000F: input,hidraw0: USB HID v0.00 Mouse [HID 28bd:0909] on usb-dummy_hcd.3-1/input0
[  211.955804][T10360] loop2: detected capacity change from 0 to 32768
[  211.963226][T10360] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1712 (10360)
[  211.975722][T10368] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  211.980423][T10368] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  211.992558][T10360] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  211.997134][T10360] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[  212.003103][T10360] BTRFS info (device loop2): using free-space-tree
[  212.158351][ T5965] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  212.185785][T10391] loop5: detected capacity change from 0 to 2048
[  212.246968][T10391] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  212.304565][T10391] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  212.350564][T10174] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.541216][ T6003] usb 4-1: USB disconnect, device number 18
[  212.876767][ T5238] Bluetooth: hci0: command tx timeout
[  213.222750][T10439] input: syz0 as /devices/virtual/input/input25
[  213.584799][T10433] loop5: detected capacity change from 0 to 32768
[  213.599968][T10453] ALSA: mixer_oss: invalid OSS volume 'u'
[  213.631223][T10433] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  213.638592][T10433] XFS (loop5): totally zeroed log
[  213.652189][T10433] XFS (loop5): Corruption warning: Metadata has LSN (1:384) ahead of current LSN (1:0). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  213.668154][T10433] XFS (loop5): log mount/recovery failed: error -22
[  213.694416][T10433] XFS (loop5): log mount failed
[  215.014758][ T5238] Bluetooth: hci0: command tx timeout
[  215.406157][T10505] loop3: detected capacity change from 0 to 4096
[  215.409763][ T5238] Bluetooth: hci2: command 0x0405 tx timeout
[  215.411281][ T6004] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  215.414654][ T6004] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  215.467011][T10505] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  215.507248][T10515] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1742'.
[  215.516787][T10515] tc_dump_action: action bad kind
[  215.880179][T10547] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  217.026338][  T974] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  217.209467][  T974] usb 4-1: Using ep0 maxpacket: 16
[  217.216567][  T974] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  217.221848][  T974] usb 4-1: config 0 has no interface number 0
[  217.226876][  T974] usb 4-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  217.232019][  T974] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.237518][  T974] usb 4-1: Product: syz
[  217.239518][  T974] usb 4-1: Manufacturer: syz
[  217.242274][  T974] usb 4-1: SerialNumber: syz
[  217.248301][  T974] usb 4-1: config 0 descriptor??
[  217.266941][  T974] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  217.641396][T10588] netlink: 'syz.2.1770': attribute type 1 has an invalid length.
[  217.649440][ T5238] Bluetooth: hci1: command 0x0c1a tx timeout
[  217.899459][    T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  217.932934][T10581] loop5: detected capacity change from 0 to 131072
[  217.935831][ T6004] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  217.938137][ T6004] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  217.941147][  T974] gspca_spca1528: reg_w err -71
[  217.942916][T10581] F2FS-fs (loop5): Test dummy encryption mode enabled
[  217.946628][T10581] F2FS-fs (loop5): invalid crc value
[  217.981434][T10581] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  217.985651][  T974] spca1528 4-1:0.1: probe with driver spca1528 failed with error -71
[  217.988742][T10581] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  217.994579][  T974] usb 4-1: USB disconnect, device number 19
[  218.009607][   T33] audit: type=1800 audit(1755286924.032:203): pid=10581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1767" name="file1" dev="loop5" ino=10 res=0 errno=0
[  218.065606][   T33] audit: type=1804 audit(1755286924.072:204): pid=10581 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1767" name="/newroot/21/bus/file1" dev="loop5" ino=10 res=1 errno=0
[  218.088553][    T9] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  218.102089][    T9] usb 3-1: config 27 interface 0 altsetting 0 has a duplicate endpoint with address 0xB, skipping
[  218.116879][    T9] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  218.126040][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  218.154439][    T9] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  218.155862][ T6004] batman_adv: batadv0: Interface deactivated: wlan0
[  218.158036][    T9] usb 3-1: invalid MIDI out EP 0
[  218.267727][ T6963] udevd[6963]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  218.292890][    T9] snd-usb-audio 3-1:27.0: probe with driver snd-usb-audio failed with error -22
[  218.351301][    T9] usb 3-1: USB disconnect, device number 21
[  218.463320][T10597] loop3: detected capacity change from 0 to 32768
[  218.482583][T10597] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  218.514304][T10597] XFS (loop3): Ending clean mount
[  218.578051][ T7886] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  218.622857][T10609] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1774'.
[  218.711846][T10611] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI
[  218.715922][T10611] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  218.718891][T10611] CPU: 0 UID: 0 PID: 10611 Comm: syz.5.1775 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  218.723959][T10611] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  218.727295][T10611] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  218.729197][T10611] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 39 5e 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 18 5e 36 f9 4d 8b 24 24 48 83 c3
[  218.735943][T10611] RSP: 0018:ffffc9000658fa60 EFLAGS: 00010206
[  218.738403][T10611] RAX: 0000000000000005 RBX: ffff888024c8d400 RCX: 0000000000080000
[  218.741545][T10611] RDX: ffffc9002682f000 RSI: 00000000000003a0 RDI: 00000000000003a1
[  218.744726][T10611] RBP: 0000000000000001 R08: ffff88802990612f R09: 1ffff11005320c25
[  218.747889][T10611] R10: dffffc0000000000 R11: ffffffff88ec9110 R12: 0000000000000028
[  218.750650][T10611] R13: dffffc0000000000 R14: ffff888029906000 R15: dffffc0000000000
[  218.753231][T10611] FS:  00007ff769f8f6c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  218.756461][T10611] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  218.758994][T10611] CR2: 00007ff769f8efc8 CR3: 000000010db18000 CR4: 00000000000006f0
[  218.762043][T10611] Call Trace:
[  218.763330][T10611]  <TASK>
[  218.764526][T10611]  pcl818_detach+0x66/0xd0
[  218.766085][T10611]  comedi_device_detach_locked+0x178/0x750
[  218.768093][T10611]  comedi_unlocked_ioctl+0xcde/0x1020
[  218.770331][T10611]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  218.772341][T10611]  ? __lock_acquire+0xab9/0xd20
[  218.774088][T10611]  ? __fget_files+0x2a/0x420
[  218.775720][T10611]  ? __fget_files+0x2a/0x420
[  218.777365][T10611]  ? __fget_files+0x3a0/0x420
[  218.779152][T10611]  ? __fget_files+0x2a/0x420
[  218.780746][T10611]  ? bpf_lsm_file_ioctl+0x9/0x20
[  218.782665][T10611]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  218.784970][T10611]  __se_sys_ioctl+0xfc/0x170
[  218.786663][T10611]  do_syscall_64+0xfa/0x3b0
[  218.788408][T10611]  ? lockdep_hardirqs_on+0x9c/0x150
[  218.790312][T10611]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.792528][T10611]  ? exc_page_fault+0x9f/0xf0
[  218.794091][T10611]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  218.796346][T10611] RIP: 0033:0x7ff76918ebe9
[  218.798018][T10611] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  218.806108][T10611] RSP: 002b:00007ff769f8f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  218.809452][T10611] RAX: ffffffffffffffda RBX: 00007ff7693b5fa0 RCX: 00007ff76918ebe9
[  218.812708][T10611] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003
[  218.815923][T10611] RBP: 00007ff769211e19 R08: 0000000000000000 R09: 0000000000000000
[  218.819110][T10611] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  218.822312][T10611] R13: 00007ff7693b6038 R14: 00007ff7693b5fa0 R15: 00007fffa3ccc398
[  218.825684][T10611]  </TASK>
[  218.827060][T10611] Modules linked in:
[  218.829750][T10611] ---[ end trace 0000000000000000 ]---
[  218.843785][T10611] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  218.846478][T10611] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 39 5e 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 18 5e 36 f9 4d 8b 24 24 48 83 c3
[  218.874856][T10611] RSP: 0018:ffffc9000658fa60 EFLAGS: 00010206
[  218.877566][T10611] RAX: 0000000000000005 RBX: ffff888024c8d400 RCX: 0000000000080000
[  218.881163][T10611] RDX: ffffc9002682f000 RSI: 00000000000003a0 RDI: 00000000000003a1
[  218.883846][T10611] RBP: 0000000000000001 R08: ffff88802990612f R09: 1ffff11005320c25
[  218.886520][T10611] R10: dffffc0000000000 R11: ffffffff88ec9110 R12: 0000000000000028
[  218.889195][T10611] R13: dffffc0000000000 R14: ffff888029906000 R15: dffffc0000000000
[  218.893046][T10611] FS:  00007ff769f8f6c0(0000) GS:ffff8880b861c000(0000) knlGS:0000000000000000
[  218.896764][T10611] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  218.901479][T10611] CR2: 000055555c1625c8 CR3: 000000010db18000 CR4: 00000000000006f0
[  218.904481][T10611] Kernel panic - not syncing: Fatal exception
[  218.907536][T10611] Kernel Offset: disabled
[  218.909273][T10611] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:42:04  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000032 RBX=0000000000000032 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000159c RDI=000000000000159d RBP=00000000000003f8 RSP=ffffc9000658f1f0
R8 =ffff888106408237 R9 =1ffff11020c81046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98c4 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff769f8f6c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ff769f8efc8 CR3=000000010db18000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff769387498 00007ff769387470 XMM03=00007ff7693874a8 00007ff7693874a0
XMM04=00007ff769eed100 00007ff769387460 XMM05=00007ff769387478 00007ff7693874c0
XMM06=00007ff7693874b8 00007ff7693874b0 XMM07=00007ff7693874a8 00007ff7693874a0
XMM08=0000000000000000 00007ff769212ee7 XMM09=0000000000000000 00007ff769212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffc90007067660 RBX=ffffc90007067660 RCX=0000000000000000 RDX=ffff888106d91cc0
RSI=ffffc90007067660 RDI=ffffffff81ac3870 RBP=ffffc90007067630 RSP=ffffc900070675a8
R8 =dffffc0000000000 R9 =0000000000000000 R10=ffffc900070676e0 R11=fffffbfff1f46fc7
R12=ffff888106d91cc0 R13=0000000000000000 R14=dffffc0000000000 R15=0000000000000000
RIP=ffffffff816998fc RFL=00000292 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30923ffc CR3=000000010d0e8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007ff769387498 00007ff769387470 XMM03=00007ff7693874a8 00007ff7693874a0
XMM04=00007ff769eed100 00007ff769387460 XMM05=00007ff769387478 00007ff7693874c0
XMM06=00007ff7693874b8 00007ff7693874b0 XMM07=00007ff7693874a8 00007ff7693874a0
XMM08=0000000000000000 00007ff769212ee7 XMM09=0000000000000000 00007ff769212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
