last executing test programs:

2m45.864498969s ago: executing program 0 (id=122):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0xf00, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01000000000000000000090000003c000380140002007663616e30000000000000000000000014000600ff0500000000000000000000000000010800010001000000080003"], 0x50}}, 0x0)

2m45.802212807s ago: executing program 0 (id=123):
fcntl$lock(0xffffffffffffffff, 0x6, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0xfffffe07)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000240)='ramfs\x00', 0x0, 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]})
r3 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r3, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')
creat(&(0x7f0000000300)='./bus\x00', 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x4000}})
write$FUSE_INIT(r4, &(0x7f0000004200)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x2066012}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x1}]})
socket$inet6_udp(0xa, 0x2, 0x0)
close_range(r5, 0xffffffffffffffff, 0x600000000000000)

2m44.902892166s ago: executing program 0 (id=128):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
getsockopt$inet6_tcp_int(r0, 0x6, 0x5, 0x0, &(0x7f0000000040)=0x56)

2m44.82307749s ago: executing program 0 (id=129):
r0 = userfaultfd(0x801)
r1 = syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x252, &(0x7f0000000600)="$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")
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r1, 0xc0506617, &(0x7f0000000540)={@desc={0x1, 0x0, @desc1}, 0x40, 0x0, '\x00', @b})
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff)
syz_open_dev$amidi(&(0x7f0000000480), 0x2, 0x80042)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2m44.424686844s ago: executing program 0 (id=130):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/dev_snmp6\x00')
statx(r0, 0x0, 0x1000, 0x800, &(0x7f0000007640))

2m43.804255287s ago: executing program 0 (id=135):
r0 = msgget$private(0x0, 0x790)
msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYRES8], 0x401, 0x0)
msgrcv(r0, 0x0, 0x0, 0x1, 0x0)
msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300c70000000000"], 0xc, 0x800)
msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="020019"], 0x1a, 0x800)
msgctl$IPC_RMID(r0, 0x0)
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
dup(0xffffffffffffff9c)
openat(0xffffffffffffffff, &(0x7f0000001a00)='./file0\x00', 0x1, 0x40)
msgctl$IPC_SET(r0, 0x1, 0x0)

2m43.599947796s ago: executing program 32 (id=135):
r0 = msgget$private(0x0, 0x790)
msgsnd(r0, &(0x7f0000000100)=ANY=[@ANYRES8], 0x401, 0x0)
msgrcv(r0, 0x0, 0x0, 0x1, 0x0)
msgsnd(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="0300c70000000000"], 0xc, 0x800)
msgsnd(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="020019"], 0x1a, 0x800)
msgctl$IPC_RMID(r0, 0x0)
accept$inet6(0xffffffffffffffff, 0x0, 0x0)
dup(0xffffffffffffff9c)
openat(0xffffffffffffffff, &(0x7f0000001a00)='./file0\x00', 0x1, 0x40)
msgctl$IPC_SET(r0, 0x1, 0x0)

1m9.95276164s ago: executing program 2 (id=1062):
socket$inet6_sctp(0xa, 0x1, 0x84)
r0 = syz_io_uring_setup(0x498, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x40, 0x4007, @fd_index=0x3, 0x6, 0x0, 0x0, 0x2, 0x1})
io_uring_enter(r0, 0x627, 0x4c1, 0x43, 0x0, 0x0)

1m9.797779666s ago: executing program 2 (id=1064):
r0 = socket(0x200000000000011, 0x2, 0x0)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14)
r1 = socket(0x200000000000011, 0x2, 0x1)
bind$packet(r1, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)
syz_emit_ethernet(0x3a, &(0x7f00000006c0)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x4e23, 0x0, 0x18, 0x0, @wg=@data={0x4, 0x9}}}}}}, 0x0)

1m9.743443079s ago: executing program 2 (id=1065):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x28, 0x4, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)=r0}, 0x20)
bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={r2, &(0x7f0000000300), 0x0}, 0x20)

1m9.681906242s ago: executing program 2 (id=1066):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000240)='./file1\x00', 0x1008400, &(0x7f0000000080)=ANY=[], 0x85, 0x677, &(0x7f0000002100)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0)
prlimit64(0x0, 0xe, 0x0, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00'}, 0x10)
ptrace$cont(0x21, r1, 0x80000001, 0x4)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x69000}], 0x1)

1m9.545113922s ago: executing program 2 (id=1067):
r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
creat(&(0x7f0000000000)='./file0\x00', 0x60)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000faff0000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
socket(0x11, 0x800000003, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x28, 0x10, 0x1, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x41480}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x5}, 0x0)
syz_emit_ethernet(0x4a, &(0x7f0000000a80)={@local, @local, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, "95f326cdcb4700348fb30fb073259ba1d894c8782936a22241940351f63a5d49f6b05a95d6c75bec"}}}}, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r0}, 0x10)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff})
sendmsg$tipc(r6, &(0x7f00000003c0)={&(0x7f0000000180), 0x10, &(0x7f0000000380)=[{&(0x7f0000000480)="c3e972bd85a6d84136d6dd55048d3593a74f338ce6772ab9a6f64041c2f6fbbecdc08ebcd3192b6a53662dae7c8e9c665e80a5d0925f728dcac30c29793992e588952653d414cb8ccdabc38767fee819ec5af0c5ee936880fe8549b4ed347779cab4ffd4e0b62c53a1c01db28f2b3f91c34211c9353bc1dece61511917c2245fd66cb8dffeacb4d46d627c97b498bf1ff6b313bfbc9765457c831771d5eec7997ec242e4505f01c1bb3e069b2e630f42a2be86598a61", 0xb6}, {&(0x7f0000000300)='V', 0x1}, {&(0x7f0000001600)="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", 0xfc0}, {0x0}], 0x4, 0x0, 0x0, 0x8000}, 0x0)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00', r7}, 0x18)
r8 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xa6}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r8}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xfffffffffffffe3e)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r9}, 0x10)
r10 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049c4)
write$binfmt_script(r10, &(0x7f0000000140)={'#! ', './file0'}, 0xb)

1m9.274136521s ago: executing program 2 (id=1069):
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x9, 0x0)

1m9.166264698s ago: executing program 33 (id=1069):
r0 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00')
preadv(r0, &(0x7f0000000480)=[{&(0x7f0000000580)=""/128, 0x80}], 0x1, 0x9, 0x0)

4.037064392s ago: executing program 3 (id=1654):
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000380), 0x4000000004882, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)

3.946584934s ago: executing program 3 (id=1655):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0041, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$TUNSETVNETHDRSZ(r0, 0x400454d8, &(0x7f0000000140)=0x90)
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="a69c2ec659a3"], 0xfdef)

3.837199553s ago: executing program 3 (id=1656):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000240)={0x1, &(0x7f0000000000)=[{0x6, 0x5, 0x7, 0x7ffc0001}]})
arch_prctl$ARCH_GET_FS(0x1003, &(0x7f0000000040))

3.733818516s ago: executing program 3 (id=1657):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000080), 0x1, 0x561, &(0x7f0000000f80)="$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")
openat(0xffffffffffffff9c, 0x0, 0x107842, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x10482, 0x189)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r0, 0x0, 0x0, 0x2, 0x0)
sendfile(r0, 0xffffffffffffffff, 0x0, 0x4000001000)
syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfffffd9d)
connect$tipc(0xffffffffffffffff, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x1, 0x4}}, 0x10)
r2 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
sendfile(r2, r2, 0x0, 0x800000049)
sendfile(r2, r2, 0x0, 0xffffffff)

2.046171603s ago: executing program 4 (id=1691):
socket$key(0xf, 0x3, 0x2)
fadvise64(0xffffffffffffffff, 0x8, 0xffffffffffffffff, 0x1)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYRESHEX], 0x50)
r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@bloom_filter={0x1e, 0xac, 0x9, 0x7, 0x400, 0xffffffffffffffff, 0xdffffff7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0xb}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$ax25_int(0xffffffffffffffff, 0x101, 0x5, &(0x7f0000000080)=0x1, 0x4)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200300000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}, 0x1, 0x0, 0x0, 0x4040}, 0x4004000)
r4 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0)
getsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0x7, &(0x7f0000000280), &(0x7f0000000300)=0x4)

1.838485562s ago: executing program 1 (id=1693):
mlockall(0x7)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0)
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x80, 0x2, 0x1dd}, &(0x7f0000000380)=<r1=>0x0, &(0x7f0000000180)=<r2=>0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8010)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x400})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xd}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setscheduler(0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8)
r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r5}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

662.561783ms ago: executing program 3 (id=1694):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r2=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, r2)
ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, 0x0)

479.805887ms ago: executing program 3 (id=1695):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000002c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@barrier={'barrier', 0x3d, 0x7}}, {@heartbeat_none}, {@inode64}]}, 0x1, 0x4703, &(0x7f0000004800)="$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")
syz_mount_image$exfat(0x0, &(0x7f0000000100)='./bus\x00', 0x4800, 0x0, 0x0, 0x0, &(0x7f0000000240))
chdir(&(0x7f00000003c0)='./bus\x00')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)

479.375719ms ago: executing program 4 (id=1696):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
sendmsg$sock(r0, &(0x7f0000001940)={&(0x7f00000002c0)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x1, "391b0192de8635e495ae9f69b982efe337624376ccee2a6ba2d2932b3ba52b8ab1f3a2df28a82207e052f9c191761b59fdbe674586adac54dae154cbdd2cc1", 0xe}, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000340)=[@txtime={{0x0, 0x1, 0x3d, 0xc}}, @txtime={{0x0, 0x1, 0x3d, 0x8}}, @timestamping={{0x0, 0x1, 0x25, 0x5}}, @txtime={{0x0, 0x1, 0x3d, 0xf54}}, @txtime={{0x0, 0x1, 0x3d, 0xce8000}}, @txtime={{0x0, 0x1, 0x3d, 0x8}}], 0xffffffca}, 0x4c094)

290.780831ms ago: executing program 1 (id=1697):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x38, r1, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x8000)

290.580028ms ago: executing program 4 (id=1698):
fanotify_init(0x4c, 0x0)

210.555053ms ago: executing program 1 (id=1699):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x2c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}]}, 0x6c}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x38, 0x3, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0)

210.342821ms ago: executing program 4 (id=1700):
fsopen(&(0x7f0000000040)='nfsd\x00', 0x0)

187.973544ms ago: executing program 4 (id=1701):
pipe(&(0x7f0000000580))
socket$nl_netfilter(0x10, 0x3, 0xc)
pipe2(&(0x7f00000003c0), 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$igmp6(0xa, 0x3, 0x2)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0)

139.160001ms ago: executing program 1 (id=1702):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000000), 0x4)

78.664325ms ago: executing program 1 (id=1703):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000740)='./binderfs/binder1\x00', 0x1802, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f00000001c0)=[@reply_sg={0x40486312, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x1, 0x0, &(0x7f0000000240)='\"'})

78.31117ms ago: executing program 1 (id=1704):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x68, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x2c, 0x11, 0x0, 0x1, @meta={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x1b}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}, 0x1, 0x0, 0x0, 0x4040054}, 0x0)

0s ago: executing program 4 (id=1705):
socket(0x10, 0x3, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @none, 0x2}, 0xa)
r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
connect$bt_rfcomm(r1, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa)
shutdown(r0, 0x1)

kernel console output (not intermixed with test programs):

om 0 to 2048
[  166.715189][ T8417] netlink: 'syz.2.957': attribute type 1 has an invalid length.
[  166.725283][ T8417] netlink: 224 bytes leftover after parsing attributes in process `syz.2.957'.
[  166.916842][ T8424] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  166.932394][ T8424] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  167.012845][ T8424] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  167.051477][ T8424] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  167.054292][ T8424] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  167.067527][ T8424] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  167.267878][ T8437] netlink: 'syz.2.966': attribute type 40 has an invalid length.
[  167.271174][ T8437] netlink: 52 bytes leftover after parsing attributes in process `syz.2.966'.
[  167.286316][ T8439] netlink: 'syz.1.967': attribute type 1 has an invalid length.
[  167.321831][ T1272] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  167.486025][ T1272] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  167.495995][ T1272] usb 4-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice=70.54
[  167.501017][ T1272] usb 4-1: New USB device strings: Mfr=1, Product=34, SerialNumber=7
[  167.512261][ T1272] usb 4-1: Product: syz
[  167.516834][ T1272] usb 4-1: Manufacturer: syz
[  167.526431][ T1272] usb 4-1: SerialNumber: syz
[  167.560822][ T1272] usb 4-1: config 0 descriptor??
[  167.582982][ T1272] gspca_main: conex-2.14.0 probing 0572:0041
[  167.600526][   T33] audit: type=1326 audit(1755118961.166:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.1.973" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  167.639703][   T33] audit: type=1326 audit(1755118961.166:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.1.973" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  167.681452][   T33] audit: type=1326 audit(1755118961.166:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.1.973" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  167.729332][   T33] audit: type=1326 audit(1755118961.166:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.1.973" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  167.752971][   T33] audit: type=1326 audit(1755118961.166:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.1.973" exe="/syz-executor" sig=0 arch=c000003e syscall=266 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  167.763419][   T33] audit: type=1326 audit(1755118961.166:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.1.973" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  167.774820][   T33] audit: type=1326 audit(1755118961.166:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.1.973" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  167.790697][   T33] audit: type=1326 audit(1755118961.166:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8452 comm="syz.1.973" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  167.964056][ T1272] usb 4-1: USB disconnect, device number 13
[  168.049174][ T8470] netlink: 'syz.2.980': attribute type 9 has an invalid length.
[  168.056393][ T8470] netlink: 'syz.2.980': attribute type 6 has an invalid length.
[  168.911846][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout
[  169.072058][ T5941] Bluetooth: hci0: command 0x0405 tx timeout
[  169.152308][ T8557] loop3: detected capacity change from 0 to 128
[  169.469380][ T8581] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  169.659533][ T8595] loop2: detected capacity change from 0 to 512
[  169.664970][ T8595] EXT4-fs: Ignoring removed orlov option
[  169.700619][ T8595] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.707748][ T8595] ext4 filesystem being mounted at /308/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  169.745819][   T28] kworker/u9:1: attempt to access beyond end of device
[  169.745819][   T28] loop3: rw=1, sector=145, nr_sectors = 40 limit=128
[  169.754243][   T28] kworker/u9:1: attempt to access beyond end of device
[  169.754243][   T28] loop3: rw=1, sector=193, nr_sectors = 8 limit=128
[  169.761314][   T28] kworker/u9:1: attempt to access beyond end of device
[  169.761314][   T28] loop3: rw=1, sector=209, nr_sectors = 8 limit=128
[  169.766901][ T5942] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.767458][   T28] kworker/u9:1: attempt to access beyond end of device
[  169.767458][   T28] loop3: rw=1, sector=225, nr_sectors = 8 limit=128
[  169.777580][   T28] kworker/u9:1: attempt to access beyond end of device
[  169.777580][   T28] loop3: rw=1, sector=241, nr_sectors = 8 limit=128
[  169.784169][   T28] kworker/u9:1: attempt to access beyond end of device
[  169.784169][   T28] loop3: rw=1, sector=257, nr_sectors = 8 limit=128
[  169.789850][   T28] kworker/u9:1: attempt to access beyond end of device
[  169.789850][   T28] loop3: rw=1, sector=273, nr_sectors = 8 limit=128
[  169.800078][   T28] kworker/u9:1: attempt to access beyond end of device
[  169.800078][   T28] loop3: rw=1, sector=289, nr_sectors = 8 limit=128
[  169.816780][   T28] kworker/u9:1: attempt to access beyond end of device
[  169.816780][   T28] loop3: rw=1, sector=305, nr_sectors = 8 limit=128
[  169.825236][   T28] kworker/u9:1: attempt to access beyond end of device
[  169.825236][   T28] loop3: rw=1, sector=321, nr_sectors = 8 limit=128
[  169.965855][ T8606] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1001'.
[  170.108261][ T8616] loop3: detected capacity change from 0 to 24
[  170.111125][ T8616] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  170.126275][ T8616] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  170.254474][ T8623] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[  170.698665][ T8633] loop3: detected capacity change from 0 to 256
[  170.711124][ T8633] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  170.783401][ T8636] loop1: detected capacity change from 0 to 256
[  170.787660][ T8636] exfat: Deprecated parameter 'namecase'
[  170.795894][ T8636] exfat: Deprecated parameter 'namecase'
[  170.822872][ T8636] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  170.875322][ T8640] netlink: 'syz.3.1015': attribute type 4 has an invalid length.
[  170.923328][ T8642] loop1: detected capacity change from 0 to 4096
[  170.932661][ T8642] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  170.976846][ T8642] ntfs3(loop1): ino=19, mi_enum_attr
[  170.979323][ T8642] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  170.992000][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout
[  171.160216][ T5941] Bluetooth: hci0: command 0x0405 tx timeout
[  171.165782][ T8654] netlink: 596 bytes leftover after parsing attributes in process `syz.1.1022'.
[  171.169971][ T8650] loop2: detected capacity change from 0 to 1024
[  171.175009][ T8650] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  171.180693][ T8650] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a040e11d, mo2=0002]
[  171.185044][ T8650] System zones: 0-1, 2-3, 4-36, 98-101, 102-102
[  171.188946][ T8650] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  171.252485][ T5942] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.259475][ T8659] loop1: detected capacity change from 0 to 128
[  171.303059][ T8659] EXT4-fs: Ignoring removed nomblk_io_submit option
[  171.308135][ T8659] EXT4-fs (loop1): Test dummy encryption mode enabled
[  171.329818][ T8659] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  171.352880][ T8659] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.430042][ T5944] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  171.691343][ T8671] loop1: detected capacity change from 0 to 32768
[  171.939602][ T8685] loop1: detected capacity change from 0 to 256
[  171.945404][ T8685] FAT-fs (loop1): Directory bread(block 1285) failed
[  171.964755][ T8685] FAT-fs (loop1): Directory bread(block 1285) failed
[  172.361845][   T10] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  172.391302][ T8711] loop3: detected capacity change from 0 to 512
[  172.403381][ T8711] EXT4-fs error (device loop3): ext4_read_inode_bitmap:139: comm syz.3.1048: Invalid inode bitmap blk 4 in block_group 0
[  172.412968][ T8711] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.427469][   T33] kauditd_printk_skb: 9 callbacks suppressed
[  172.427483][   T33] audit: type=1326 audit(1755118965.996:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.3.1048" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948878ebe9 code=0x7ffc0000
[  172.441165][   T33] audit: type=1326 audit(1755118965.996:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.3.1048" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948878ebe9 code=0x7ffc0000
[  172.452389][   T33] audit: type=1326 audit(1755118965.996:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8710 comm="syz.3.1048" exe="/syz-executor" sig=0 arch=c000003e syscall=275 compat=0 ip=0x7f948878ebe9 code=0x7ffc0000
[  172.511931][   T10] usb 3-1: Using ep0 maxpacket: 16
[  172.515223][   T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  172.518832][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  172.523021][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  172.528574][   T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  172.532353][   T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  172.535238][   T10] usb 3-1: Manufacturer: syz
[  172.539014][   T10] usb 3-1: config 0 descriptor??
[  172.581859][ T6012] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  172.741760][ T6012] usb 2-1: Using ep0 maxpacket: 8
[  172.748879][ T6012] usb 2-1: unable to get BOS descriptor or descriptor too short
[  172.755712][ T6012] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  172.759598][ T6012] usb 2-1: config 1 has no interface number 1
[  172.762477][ T6012] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  172.768315][ T6012] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  172.775836][ T6012] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  172.779675][ T6012] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  172.783423][ T6012] usb 2-1: Product: syz
[  172.785217][ T6012] usb 2-1: Manufacturer: syz
[  172.787195][ T6012] usb 2-1: SerialNumber: syz
[  172.801763][   T10] rc_core: IR keymap rc-hauppauge not found
[  172.804667][   T10] Registered IR keymap rc-empty
[  172.808275][   T10] mceusb 3-1:0.0: Error: mce write urb status = -71
[  172.833883][   T10] mceusb 3-1:0.0: Error: mce write urb status = -71
[  172.865839][   T10] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  172.874648][   T10] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input12
[  172.884061][   T10] mceusb 3-1:0.0: Error: mce write urb status = -71
[  172.913891][   T10] mceusb 3-1:0.0: Error: mce write urb status = -71
[  172.932256][   T10] mceusb 3-1:0.0: Error: mce write urb status = -71
[  172.952285][   T10] mceusb 3-1:0.0: Error: mce write urb status = -71
[  172.972131][   T10] mceusb 3-1:0.0: Error: mce write urb status = -71
[  172.992279][   T10] mceusb 3-1:0.0: Error: mce write urb status = -71
[  173.011466][ T6012] usb 2-1: 2:1: cannot set freq 15828157 to ep 0x82
[  173.017331][   T10] mceusb 3-1:0.0: Error: mce write urb status = -71
[  173.035125][   T10] mceusb 3-1:0.0: Error: mce write urb status = -71
[  173.052106][   T10] mceusb 3-1:0.0: Error: mce write urb status = -71
[  173.068830][ T6012] usb 2-1: USB disconnect, device number 20
[  173.071978][ T5941] Bluetooth: hci1: command 0x0c1a tx timeout
[  173.072333][   T10] mceusb 3-1:0.0: Error: mce write urb status = -71
[  173.129153][   T10] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  173.144357][   T10] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  173.201480][ T8693] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.214439][ T8693] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.223078][   T10] usb 3-1: USB disconnect, device number 18
[  173.232178][ T5941] Bluetooth: hci0: command 0x0405 tx timeout
[  173.541458][ T8716] new mount options do not match the existing superblock, will be ignored
[  173.547467][ T8716] cgroup: option or name mismatch, new: 0x4 "", old: 0x0 ""
[  173.848135][ T8730] loop1: detected capacity change from 0 to 4096
[  173.852689][ T8730] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  173.886114][ T8730] ntfs3(loop1): ino=1a, mi_enum_attr
[  173.888412][ T8730] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  173.895244][ T8730] ntfs3(loop1): ino=1a, mi_enum_attr
[  173.897542][ T8730] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  173.911228][ T8730] ntfs3(loop1): ino=5, "/" ntfs_readdir
[  174.288343][ T8750] loop2: detected capacity change from 0 to 1024
[  174.303637][ T8744] loop1: detected capacity change from 0 to 32768
[  174.327237][   T33] audit: type=1800 audit(1755118967.896:129): pid=8750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1066" name="file1" dev="loop2" ino=20 res=0 errno=0
[  174.348876][ T8744] XFS (loop1): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  174.387652][ T8744] XFS (loop1): Ending clean mount
[  174.396747][ T8744] XFS (loop1): Quotacheck needed: Please wait.
[  174.429561][ T8744] XFS (loop1): Quotacheck: Done.
[  174.455470][ T8756] syz.2.1066 (8756) used greatest stack depth: 18552 bytes left
[  174.467114][ T5944] XFS (loop1): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  174.611342][ T8761] loop1: detected capacity change from 0 to 8
[  174.618740][ T8761] SQUASHFS error: xz decompression failed, data probably corrupt
[  174.621598][ T8761] SQUASHFS error: Failed to read block 0x108: -5
[  174.624400][ T8761] SQUASHFS error: Unable to read metadata cache entry [106]
[  174.626911][ T8761] SQUASHFS error: Unable to read inode 0x11f
[  174.735017][ T5950] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.815053][ T5950] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.867633][ T8766] loop1: detected capacity change from 0 to 4096
[  174.873863][ T8766] NILFS (loop1): broken superblock, retrying with spare superblock (blocksize = 1024)
[  174.878804][ T8766] NILFS (loop1): mounting unchecked fs
[  174.883150][ T5849] udevd[5849]: incorrect nilfs2 checksum on /dev/loop1
[  174.905754][ T8766] NILFS (loop1): recovery complete
[  174.914880][ T8767] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.919548][ T5950] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  175.043725][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  175.048691][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  175.055719][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  175.062095][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  175.069862][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  175.329087][ T5950] bridge_slave_1: left allmulticast mode
[  175.331034][ T5950] bridge_slave_1: left promiscuous mode
[  175.343137][ T5950] bridge0: port 2(bridge_slave_1) entered disabled state
[  175.347692][ T5950] bridge_slave_0: left allmulticast mode
[  175.349607][ T5950] bridge_slave_0: left promiscuous mode
[  175.351468][ T5950] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.410622][ T6199] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.624221][ T8788] loop1: detected capacity change from 0 to 32768
[  175.634369][ T8788] lmLogInit: exit(-22)
[  175.636403][ T8788] lmLogOpen: exit(-22)
[  175.728970][ T8798] loop3: detected capacity change from 0 to 32768
[  175.732272][ T8798] XFS: ikeep mount option is deprecated.
[  175.773424][ T8798] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  175.811935][ T8798] XFS (loop3): Ending clean mount
[  175.815153][ T8798] XFS (loop3): Quotacheck needed: Please wait.
[  175.870802][ T8798] XFS (loop3): Quotacheck: Done.
[  175.895990][ T8810] loop1: detected capacity change from 0 to 1024
[  176.432703][ T8814] loop1: detected capacity change from 0 to 2048
[  176.486948][ T8814] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.491322][ T8814] ext4 filesystem being mounted at /350/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.578112][ T6199] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  176.596680][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.936518][ T5950] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.952638][ T5950] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.958702][ T5950] bond0 (unregistering): Released all slaves
[  177.122530][ T8771] chnl_net:caif_netlink_parms(): no params data found
[  177.151930][ T5941] Bluetooth: hci1: command tx timeout
[  177.278826][ T8841] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  177.284313][ T8841] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  177.741070][ T8771] bridge0: port 1(bridge_slave_0) entered blocking state
[  177.754475][ T8771] bridge0: port 1(bridge_slave_0) entered disabled state
[  177.759792][ T8771] bridge_slave_0: entered allmulticast mode
[  177.766038][ T8771] bridge_slave_0: entered promiscuous mode
[  177.770830][ T8771] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.777478][ T8771] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.780822][ T8771] bridge_slave_1: entered allmulticast mode
[  177.784686][ T8771] bridge_slave_1: entered promiscuous mode
[  178.059736][ T8771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  178.108721][ T5950] hsr_slave_0: left promiscuous mode
[  178.113454][ T5950] hsr_slave_1: left promiscuous mode
[  178.116582][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  178.123355][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_0
[  178.134832][ T5950] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  178.138132][ T5950] batman_adv: batadv0: Removing interface: batadv_slave_1
[  178.156288][ T5950] veth1_macvtap: left promiscuous mode
[  178.158831][ T5950] veth0_macvtap: left promiscuous mode
[  178.161087][ T5950] veth1_vlan: left promiscuous mode
[  178.166546][ T5950] veth0_vlan: left promiscuous mode
[  178.451914][   T10] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  178.602113][   T10] usb 4-1: Using ep0 maxpacket: 8
[  178.607409][ T5950] team0 (unregistering): Port device team_slave_1 removed
[  178.608503][   T10] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  178.616157][   T10] usb 4-1: config 179 has no interface number 0
[  178.619134][   T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  178.626144][   T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  178.631141][   T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  178.638310][   T10] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  178.644672][   T10] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  178.650964][   T10] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  178.655691][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.660911][ T5950] team0 (unregistering): Port device team_slave_0 removed
[  178.662357][ T8869] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  178.916630][ T5941] Bluetooth: hci0: connection err: -111
[  178.922767][   T10] usb 4-1: USB disconnect, device number 14
[  178.922856][    C0] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  178.922913][    C0] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  179.191490][ T8771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  179.233264][ T5941] Bluetooth: hci1: command tx timeout
[  179.286980][ T8771] team0: Port device team_slave_0 added
[  179.291496][ T8771] team0: Port device team_slave_1 added
[  179.357009][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_0
[  179.361961][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.377256][ T8871] loop1: detected capacity change from 0 to 1024
[  179.380332][ T8771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  179.393679][ T8771] batman_adv: batadv0: Adding interface: batadv_slave_1
[  179.413969][ T8771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  179.424520][ T8871] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.436366][ T8771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  179.506965][ T8871] EXT4-fs error (device loop1): __ext4_remount:6736: comm syz.1.1097: Abort forced by user
[  179.529181][ T8871] EXT4-fs (loop1): Remounting filesystem read-only
[  179.532710][ T8871] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000.
[  179.556925][ T8771] hsr_slave_0: entered promiscuous mode
[  179.580277][ T8771] hsr_slave_1: entered promiscuous mode
[  179.584308][ T8771] debugfs: 'hsr0' already exists in 'hsr'
[  179.586943][ T8771] Cannot create hsr debugfs directory
[  179.649323][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.977785][ T8771] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  179.987201][ T8771] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  180.005211][ T8771] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  180.022094][ T8771] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  180.147947][ T8771] 8021q: adding VLAN 0 to HW filter on device bond0
[  180.185110][ T8771] 8021q: adding VLAN 0 to HW filter on device team0
[  180.207472][ T8887] loop1: detected capacity change from 0 to 32768
[  180.239318][ T3605] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.242564][ T3605] bridge0: port 1(bridge_slave_0) entered forwarding state
[  180.249288][ T3605] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.252642][ T3605] bridge0: port 2(bridge_slave_1) entered forwarding state
[  180.258908][ T8887] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  180.316776][ T5944] ocfs2: Unmounting device (7,1) on (node local)
[  180.553083][ T8909] netlink: 'syz.3.1103': attribute type 4 has an invalid length.
[  180.600150][ T8909] netlink: 'syz.3.1103': attribute type 4 has an invalid length.
[  180.673743][ T8771] 8021q: adding VLAN 0 to HW filter on device batadv0
[  181.007981][ T8927] syz.1.1106 uses obsolete (PF_INET,SOCK_PACKET)
[  181.311930][ T5941] Bluetooth: hci1: command tx timeout
[  181.534005][ T8771] veth0_vlan: entered promiscuous mode
[  181.588670][ T8771] veth1_vlan: entered promiscuous mode
[  181.729474][ T8771] veth0_macvtap: entered promiscuous mode
[  181.752140][ T8771] veth1_macvtap: entered promiscuous mode
[  181.808155][ T8771] batman_adv: batadv0: Interface activated: batadv_slave_0
[  181.830964][ T8771] batman_adv: batadv0: Interface activated: batadv_slave_1
[  181.890034][ T5914] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  181.905619][ T5914] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  181.925247][ T5914] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  181.936572][ T5914] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  182.204129][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.223484][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.285803][ T3605] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  182.295993][ T3605] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  182.307298][ T8948] netlink: 'syz.1.1111': attribute type 1 has an invalid length.
[  182.314991][ T8948] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1111'.
[  183.301152][ T8960] loop3: detected capacity change from 0 to 32768
[  183.324905][ T8960] bcachefs: bch2_fs_open() bch_fs_open err opening /dev/loop3: erofs_nochanges
[  183.328039][ T8960] bcachefs: bch2_fs_get_tree() error: erofs_nochanges
[  183.398149][ T5941] Bluetooth: hci1: command tx timeout
[  183.617619][ T8954] loop1: detected capacity change from 0 to 32768
[  183.750415][ T8976] netlink: 'syz.4.1116': attribute type 6 has an invalid length.
[  183.799656][ T8954] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  184.017422][ T5944] ocfs2: Unmounting device (7,1) on (node local)
[  184.263334][ T8994] netlink: 'syz.4.1123': attribute type 10 has an invalid length.
[  184.274546][ T8994] veth1_vlan: entered allmulticast mode
[  184.288946][ T8994] team0: Device veth1_vlan failed to register rx_handler
[  184.757270][ T8996] loop1: detected capacity change from 0 to 32768
[  184.783259][ T8996] JBD2: Ignoring recovery information on journal
[  184.968912][ T8996] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  185.487471][ T5944] ocfs2: Unmounting device (7,1) on (node local)
[  186.062234][ T9036] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1137'.
[  186.171318][ T9044] loop3: detected capacity change from 0 to 256
[  186.185520][ T9045] loop4: detected capacity change from 0 to 256
[  186.219620][ T9045] exFAT-fs (loop4): Invalid exboot-signature(sector = 2): 0x1119abd0
[  186.245166][ T9045] exFAT-fs (loop4): Invalid exboot-signature(sector = 5): 0x1119abd0
[  186.248893][ T9045] exFAT-fs (loop4): Invalid exboot-signature(sector = 6): 0x00000000
[  186.255503][ T9045] exFAT-fs (loop4): Invalid exboot-signature(sector = 7): 0x00000000
[  186.274033][ T9045] exFAT-fs (loop4): Invalid exboot-signature(sector = 8): 0x00000000
[  186.284384][ T9045] exFAT-fs (loop4): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x13a8bc6e)
[  186.296985][ T9045] exFAT-fs (loop4): invalid boot region
[  186.299394][ T9045] exFAT-fs (loop4): failed to recognize exfat type
[  186.478688][ T9041] loop1: detected capacity change from 0 to 32768
[  186.486100][ T9041] XFS: noikeep mount option is deprecated.
[  186.509125][ T9054] mkiss: ax0: crc mode is auto.
[  186.547054][ T9041] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  186.640184][ T9041] XFS (loop1): Ending clean mount
[  186.673784][ T9041] XFS (loop1): Quotacheck needed: Please wait.
[  186.754365][ T9041] XFS (loop1): Quotacheck: Done.
[  186.865095][ T5944] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  186.877969][ T5941] Bluetooth: hci0: unexpected event for opcode 0x2011
[  186.990650][ T9084] loop3: detected capacity change from 0 to 1024
[  187.003600][ T9084] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  187.027597][ T9084] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  187.032726][ T5314] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  187.054159][ T9084] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  187.147422][ T6199] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.192092][ T5314] usb 5-1: Using ep0 maxpacket: 8
[  187.196341][ T5314] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  187.202121][ T5314] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  187.219984][ T5314] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 49526, setting to 1024
[  187.237351][ T5314] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  187.249851][ T5314] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  187.258348][ T5314] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  187.268617][ T5314] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.383695][ T9105] loop3: detected capacity change from 0 to 512
[  187.391260][ T9105] FAT-fs (loop3): bogus number of FAT sectors
[  187.400194][ T9105] FAT-fs (loop3): Can't find a valid FAT filesystem
[  187.481266][ T5314] usb 5-1: GET_CAPABILITIES returned 0
[  187.485060][ T5314] usbtmc 5-1:16.0: can't read capabilities
[  187.536473][ T9111] loop1: detected capacity change from 0 to 256
[  187.553183][ T9111] FAT-fs (loop1): Directory bread(block 64) failed
[  187.556317][ T9111] FAT-fs (loop1): Directory bread(block 65) failed
[  187.559189][ T9111] FAT-fs (loop1): Directory bread(block 66) failed
[  187.563435][ T9111] FAT-fs (loop1): Directory bread(block 67) failed
[  187.566948][ T9111] FAT-fs (loop1): Directory bread(block 68) failed
[  187.569809][ T9111] FAT-fs (loop1): Directory bread(block 69) failed
[  187.580742][ T9111] FAT-fs (loop1): Directory bread(block 70) failed
[  187.584509][ T9111] FAT-fs (loop1): Directory bread(block 71) failed
[  187.587444][ T9111] FAT-fs (loop1): Directory bread(block 72) failed
[  187.590178][ T9111] FAT-fs (loop1): Directory bread(block 73) failed
[  187.977595][ T1272] usb 5-1: USB disconnect, device number 2
[  188.247521][ T9118] loop1: detected capacity change from 0 to 32768
[  188.270931][ T9118] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  188.281196][ T9118] XFS (loop1): Ending clean mount
[  188.305237][ T5944] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  188.801900][ T1272] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  188.983980][ T1272] usb 5-1: Using ep0 maxpacket: 8
[  189.004240][ T1272] usb 5-1: unable to get BOS descriptor or descriptor too short
[  189.013974][ T1272] usb 5-1: config 0 has an invalid interface number: 88 but max is 0
[  189.016225][ T9153] netlink: 'syz.3.1175': attribute type 3 has an invalid length.
[  189.017777][ T1272] usb 5-1: config 0 has no interface number 0
[  189.017924][ T1272] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  189.029182][ T1272] usb 5-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  189.035343][ T1272] usb 5-1: config 0 interface 88 has no altsetting 0
[  189.046651][ T1272] usb 5-1: string descriptor 0 read error: -22
[  189.054275][ T1272] usb 5-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  189.061466][ T1272] usb 5-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  189.099220][ T1272] usb 5-1: config 0 descriptor??
[  189.141578][ T1272] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.88/input/input13
[  189.358149][ T6147] udevd[6147]: Error opening device "/dev/input/event3": Input/output error
[  189.367444][ T6147] udevd[6147]: Unable to EVIOCGABS device "/dev/input/event3"
[  189.371374][ T6147] udevd[6147]: Unable to EVIOCGABS device "/dev/input/event3"
[  189.378017][ T1272] usb 5-1: USB disconnect, device number 3
[  189.489871][ T9159] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1178'.
[  189.495664][ T9159] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1178'.
[  189.952237][ T9165] loop3: detected capacity change from 0 to 2048
[  189.990742][ T9165] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  190.010444][ T9165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  190.731912][   T52] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  190.911867][   T52] usb 2-1: Using ep0 maxpacket: 32
[  190.938866][   T52] usb 2-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77
[  190.945168][   T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.950548][   T52] usb 2-1: Product: syz
[  190.952156][   T52] usb 2-1: Manufacturer: syz
[  190.956180][   T52] usb 2-1: SerialNumber: syz
[  190.985765][   T52] usb 2-1: config 0 descriptor??
[  191.003284][ T5941] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  191.006969][ T5941] Bluetooth: hci0: Injecting HCI hardware error event
[  191.011722][ T5941] Bluetooth: hci0: hardware error 0x00
[  191.036967][   T52] hdpvr 2-1:0.0: Could not find bulk-in endpoint
[  191.039225][   T52] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  191.072171][ T5314] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  191.206301][   T52] usb 2-1: USB disconnect, device number 21
[  191.223551][ T5314] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  191.229685][ T5314] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  191.236010][ T5314] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  191.239881][ T5314] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  191.247006][ T5314] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  191.250214][ T5314] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.255217][ T5314] usb 5-1: Product: syz
[  191.256614][ T5314] usb 5-1: Manufacturer: syz
[  191.258156][ T5314] usb 5-1: SerialNumber: syz
[  191.264730][ T9194] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  191.273143][ T5314] cdc_mbim 5-1:1.0: skipping garbage
[  191.424819][ T9201] loop3: detected capacity change from 0 to 128
[  191.438672][ T9201] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  191.452352][ T9201] ext4 filesystem being mounted at /357/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  191.483172][ T9194] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  191.486650][ T9194] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  191.501104][ T6199] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  191.620769][ T9207] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1197'.
[  192.093676][ T9194] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  192.096597][ T9194] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  192.099781][ T5314] cdc_mbim 5-1:1.0: setting tx_max = 184
[  192.110172][ T5314] cdc_mbim 5-1:1.0: cdc-wdm0: USB WDM device
[  192.127154][ T5314] wwan wwan0: port wwan0mbim0 attached
[  192.144530][ T5314] cdc_mbim 5-1:1.0 wwan0: register 'cdc_mbim' at usb-dummy_hcd.4-1, CDC MBIM, 1a:48:c1:65:68:35
[  192.318386][   T52] usb 5-1: USB disconnect, device number 4
[  192.337674][   T52] cdc_mbim 5-1:1.0 wwan0: unregister 'cdc_mbim' usb-dummy_hcd.4-1, CDC MBIM
[  192.425785][   T52] wwan wwan0: port wwan0mbim0 disconnected
[  193.071938][ T5941] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  193.612769][ T6012] usb 4-1: new low-speed USB device number 15 using dummy_hcd
[  193.667440][ T9248] netlink: 'syz.1.1208': attribute type 10 has an invalid length.
[  193.702950][ T9248] veth0_vlan: left promiscuous mode
[  193.706736][ T9248] veth0_vlan: entered promiscuous mode
[  193.711124][ T9248] team0: Device veth0_vlan failed to register rx_handler
[  193.777691][ T6012] usb 4-1: config 0 has an invalid interface number: 1 but max is 0
[  193.781208][ T6012] usb 4-1: config 0 has no interface number 0
[  193.795489][ T6012] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  193.800182][ T6012] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  193.809643][ T6012] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  193.814111][ T6012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.828003][ T6012] usb 4-1: config 0 descriptor??
[  193.843820][ T9234] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  193.854355][ T6012] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  193.890185][ T9257] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  194.038514][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.041317][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  194.092260][ T1272] usb 4-1: USB disconnect, device number 15
[  194.658339][ T9269] loop1: detected capacity change from 0 to 128
[  194.710684][ T9269] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  194.715721][ T9269] ext4 filesystem being mounted at /393/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  194.740204][ T9269] syz.1.1218 (pid 9269) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  194.763547][ T9269] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload
[  194.768586][ T9269] fscrypt: key with description 'fscrypt:e8dab99234bb312e' has invalid payload
[  194.807722][ T9273] loop3: detected capacity change from 0 to 128
[  194.809812][ T5944] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  194.811159][ T9273] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  194.896424][ T9273] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  194.930970][ T9273] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  195.761857][ T1272] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  195.911806][ T1272] usb 4-1: Using ep0 maxpacket: 16
[  195.915271][ T1272] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  195.918745][ T1272] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  195.924326][ T1272] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  195.927581][ T1272] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.930318][ T1272] usb 4-1: Product: syz
[  195.933320][ T1272] usb 4-1: Manufacturer: syz
[  195.934969][ T1272] usb 4-1: SerialNumber: syz
[  195.949884][ T9305] loop4: detected capacity change from 0 to 40427
[  196.074678][ T9305] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  196.078918][ T9305] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  196.108193][ T9305] F2FS-fs (loop4): Stopped filesystem due to reason: 0
[  196.158429][ T1272] usb 4-1: 0:2 : does not exist
[  196.172674][ T1272] usb 4-1: USB disconnect, device number 16
[  196.225272][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  196.417028][ T9330] loop1: detected capacity change from 0 to 1024
[  196.420604][ T9330] EXT4-fs: Ignoring removed oldalloc option
[  196.438231][ T9330] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.484169][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.630020][ T9339] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  198.155663][ T9357] nftables ruleset with unbound chain
[  198.325986][ T9364] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1246'.
[  198.397863][ T9359] loop3: detected capacity change from 0 to 4096
[  198.475944][ T9359] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  198.507383][ T6199] ntfs3(loop3): ino=9, ntfs_sync_fs failed, -22.
[  199.616491][ T9429] loop4: detected capacity change from 0 to 1024
[  199.620242][ T9429] hfsplus: Unknown parameter ''
[  200.273509][ T9437] netlink: 428 bytes leftover after parsing attributes in process `syz.3.1268'.
[  200.277634][ T9437] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1268'.
[  200.650892][ T9447] loop1: detected capacity change from 0 to 4096
[  200.703178][ T9449] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  200.745109][   T33] audit: type=1800 audit(1755118994.306:130): pid=9447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1271" name="file1" dev="loop1" ino=15 res=0 errno=0
[  200.757962][ T9450] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  201.034715][ T9456] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1274'.
[  201.173578][ T9462] loop1: detected capacity change from 0 to 512
[  201.369025][ T9458] loop3: detected capacity change from 0 to 40427
[  201.381603][ T9458] F2FS-fs (loop3): Image doesn't support compression
[  201.385546][ T9458] F2FS-fs (loop3): build fault injection rate: 690
[  201.389549][ T9458] F2FS-fs (loop3): invalid crc value
[  201.547129][ T9458] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  201.553876][ T9458] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  201.924538][ T6199] bio_check_eod: 98 callbacks suppressed
[  201.924558][ T6199] syz-executor: attempt to access beyond end of device
[  201.924558][ T6199] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  201.960473][ T6199] CPU: 1 UID: 0 PID: 6199 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  201.960498][ T6199] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  201.960506][ T6199] Call Trace:
[  201.960518][ T6199]  <TASK>
[  201.960524][ T6199]  dump_stack_lvl+0x189/0x250
[  201.960549][ T6199]  ? __pfx_dump_stack_lvl+0x10/0x10
[  201.960564][ T6199]  ? __pfx_queue_work_on+0x10/0x10
[  201.960578][ T6199]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  201.960594][ T6199]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  201.960616][ T6199]  f2fs_handle_critical_error+0x37c/0x540
[  201.960637][ T6199]  f2fs_write_end_io+0x886/0xb60
[  201.960667][ T6199]  __submit_merged_bio+0x27a/0x6a0
[  201.960688][ T6199]  __submit_merged_write_cond+0x255/0x530
[  201.960707][ T6199]  f2fs_write_data_pages+0x261d/0x3000
[  201.960722][ T6199]  ? __lock_acquire+0xab9/0xd20
[  201.960811][ T6199]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  201.960860][ T6199]  ? check_path+0x21/0x40
[  201.960872][ T6199]  ? check_noncircular+0xe0/0x160
[  201.960918][ T6199]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  201.960935][ T6199]  do_writepages+0x32e/0x550
[  201.960961][ T6199]  ? do_raw_spin_unlock+0x4d/0x240
[  201.960978][ T6199]  filemap_fdatawrite+0x199/0x240
[  201.960995][ T6199]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  201.961046][ T6199]  ? do_raw_spin_unlock+0x4d/0x240
[  201.961063][ T6199]  f2fs_sync_dirty_inodes+0x31f/0x830
[  201.961091][ T6199]  f2fs_write_checkpoint+0x95a/0x1df0
[  201.961123][ T6199]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  201.961171][ T6199]  ? kill_f2fs_super+0x298/0x6c0
[  201.961192][ T6199]  kill_f2fs_super+0x2c3/0x6c0
[  201.961213][ T6199]  ? __pfx_kill_f2fs_super+0x10/0x10
[  201.961227][ T6199]  ? radix_tree_delete_item+0x2b6/0x400
[  201.961247][ T6199]  ? shrinker_free+0x2ce/0x3e0
[  201.961262][ T6199]  deactivate_locked_super+0xbc/0x130
[  201.961279][ T6199]  cleanup_mnt+0x425/0x4c0
[  201.961292][ T6199]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.961308][ T6199]  task_work_run+0x1d4/0x260
[  201.961327][ T6199]  ? __pfx_task_work_run+0x10/0x10
[  201.961340][ T6199]  ? __x64_sys_umount+0x122/0x160
[  201.961358][ T6199]  ? exit_to_user_mode_loop+0x40/0x110
[  201.961381][ T6199]  exit_to_user_mode_loop+0xec/0x110
[  201.961398][ T6199]  do_syscall_64+0x2bd/0x3b0
[  201.961413][ T6199]  ? lockdep_hardirqs_on+0x9c/0x150
[  201.961426][ T6199]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.961438][ T6199]  ? exc_page_fault+0x9f/0xf0
[  201.961454][ T6199]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  201.961465][ T6199] RIP: 0033:0x7f948878ff17
[  201.961478][ T6199] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  201.961490][ T6199] RSP: 002b:00007ffc7097a0b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  201.961505][ T6199] RAX: 0000000000000000 RBX: 00007f9488811c05 RCX: 00007f948878ff17
[  201.961536][ T6199] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc7097a170
[  201.961543][ T6199] RBP: 00007ffc7097a170 R08: 0000000000000000 R09: 0000000000000000
[  201.961551][ T6199] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc7097b200
[  201.961559][ T6199] R13: 00007f9488811c05 R14: 0000000000031304 R15: 00007ffc7097b240
[  201.961579][ T6199]  </TASK>
[  201.961652][ T6199] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  202.364616][ T9492] loop4: detected capacity change from 0 to 2048
[  202.416725][ T9492] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  202.443188][ T9492] ext4 filesystem being mounted at /54/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  202.486940][ T9492] overlayfs: Failed to create volatile/dirty file.
[  202.522935][ T9492] overlayfs: failed to set xattr on upper
[  202.525362][ T9492] overlayfs: ...falling back to redirect_dir=nofollow.
[  202.528396][ T9492] overlayfs: ...falling back to index=off.
[  202.530969][ T9492] overlayfs: ...falling back to uuid=null.
[  202.547408][ T9490] loop1: detected capacity change from 0 to 32768
[  202.552232][ T9490] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1290 (9490)
[  202.574131][ T9490] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  202.578400][ T9490] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  202.601450][ T9490] BTRFS info (device loop1): using free-space-tree
[  202.641263][ T9490] BTRFS info (device loop1): rebuilding free space tree
[  202.655601][ T8771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.893965][ T5944] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  203.040305][   T33] audit: type=1326 audit(1755118996.606:131): auid=4294967295 uid=60929 gid=0 ses=4294967295 subj=unconfined pid=9527 comm="syz.4.1298" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8caf98ebe9 code=0x0
[  203.137033][ T9530] loop3: detected capacity change from 0 to 16
[  203.490452][ T9530] erofs (device loop3): mounted with root inode @ nid 36.
[  203.896964][  T791] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  203.940402][   T33] audit: type=1326 audit(1755121575.508:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9541 comm="syz.1.1303" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  203.955365][   T33] audit: type=1326 audit(1755121575.508:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9541 comm="syz.1.1303" exe="/syz-executor" sig=0 arch=c000003e syscall=90 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  203.971835][   T33] audit: type=1326 audit(1755121575.508:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9541 comm="syz.1.1303" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  203.993943][   T33] audit: type=1326 audit(1755121575.518:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9541 comm="syz.1.1303" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  204.035437][ T9545] loop4: detected capacity change from 0 to 1024
[  204.137457][  T791] usb 4-1: config 3 has an invalid interface number: 71 but max is 0
[  204.141504][  T791] usb 4-1: config 3 has no interface number 0
[  204.144997][  T791] usb 4-1: config 3 interface 71 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[  204.171631][  T791] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0004, bcdDevice=a7.ac
[  204.185369][  T791] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.225656][  T791] ati_remote 4-1:3.71: ati_remote_probe: Unexpected endpoint_in
[  204.460695][   T24] usb 4-1: USB disconnect, device number 17
[  205.637247][ T9571] loop4: detected capacity change from 0 to 1764
[  205.640072][ T9571] iso9660: Unexpected value for 'overriderockperm'
[  205.713432][ T9577] loop4: detected capacity change from 0 to 512
[  205.793441][ T9577] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.798290][ T9577] ext4 filesystem being mounted at /67/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  205.808010][ T9577] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1319: corrupted inode contents
[  205.816927][ T9577] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1319: mark_inode_dirty error
[  205.826220][ T9577] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1319: corrupted inode contents
[  205.838184][ T9577] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1319: corrupted inode contents
[  205.843269][ T9577] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1319: mark_inode_dirty error
[  205.849027][ T9577] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1319: corrupted inode contents
[  205.854917][ T9577] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #2: comm syz.4.1319: mark_inode_dirty error
[  205.862454][ T9577] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1319: corrupted inode contents
[  205.869124][ T9577] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #2: comm syz.4.1319: mark_inode_dirty error
[  205.929042][ T9577] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #2: comm syz.4.1319: corrupted inode contents
[  206.138595][ T8771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  206.267086][ T3605] Bluetooth: hci3: Frame reassembly failed (-84)
[  206.629741][   T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  206.779700][   T24] usb 5-1: Using ep0 maxpacket: 32
[  206.785649][   T24] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  206.790639][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  206.797691][   T24] usb 5-1: config 0 descriptor??
[  206.869467][   T52] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  207.004576][   T24] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  207.012400][   T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  207.017288][   T24] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  207.022328][   T24] usb 5-1: media controller created
[  207.043213][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  207.052641][   T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  207.057259][   T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.070234][   T52] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00
[  207.073966][   T52] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.083786][   T52] usb 2-1: config 0 descriptor??
[  207.207475][   T24] az6027: usb out operation failed. (-71)
[  207.216003][   T24] az6027: usb out operation failed. (-71)
[  207.218460][   T24] stb0899_attach: Driver disabled by Kconfig
[  207.221126][   T24] az6027: no front-end attached
[  207.221126][   T24] 
[  207.224615][   T24] az6027: usb out operation failed. (-71)
[  207.226885][   T24] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  207.233114][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input14
[  207.241188][   T24] dvb-usb: schedule remote query interval to 400 msecs.
[  207.244231][   T24] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  207.253879][   T24] usb 5-1: USB disconnect, device number 5
[  207.297078][   T24] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  207.499063][   T52] isku 0003:1E7D:319C.000E: unknown main item tag 0x0
[  207.504558][   T52] isku 0003:1E7D:319C.000E: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0
[  207.698399][   T52] isku 0003:1E7D:319C.000E: couldn't init struct isku_device
[  207.701221][   T52] isku 0003:1E7D:319C.000E: couldn't install keyboard
[  207.706354][   T52] isku 0003:1E7D:319C.000E: probe with driver isku failed with error -71
[  207.711150][   T52] usb 2-1: USB disconnect, device number 22
[  207.965900][ T9597] loop4: detected capacity change from 0 to 40427
[  207.976497][ T9597] F2FS-fs (loop4): invalid crc value
[  208.020454][ T9597] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  208.025682][ T9597] F2FS-fs (loop4): Start checkpoint disabled!
[  208.031833][ T9597] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  208.103881][   T33] audit: type=1800 audit(1755121579.671:136): pid=9600 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1327" name="file1" dev="loop4" ino=10 res=0 errno=0
[  208.113488][ T9600] syz.4.1327: attempt to access beyond end of device
[  208.113488][ T9600] loop4: rw=2049, sector=77824, nr_sectors = 984 limit=40427
[  208.270238][   T55] Bluetooth: hci3: command 0x1003 tx timeout
[  208.275365][ T5941] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  208.588092][   T52] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  208.686321][   T28] kworker/u9:1: attempt to access beyond end of device
[  208.686321][   T28] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  208.693159][   T28] CPU: 0 UID: 0 PID: 28 Comm: kworker/u9:1 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  208.693177][   T28] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  208.693185][   T28] Workqueue: writeback wb_workfn (flush-7:4)
[  208.693206][   T28] Call Trace:
[  208.693211][   T28]  <TASK>
[  208.693218][   T28]  dump_stack_lvl+0x189/0x250
[  208.693237][   T28]  ? __pfx_dump_stack_lvl+0x10/0x10
[  208.693249][   T28]  ? __pfx_queue_work_on+0x10/0x10
[  208.693260][   T28]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  208.693274][   T28]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  208.693293][   T28]  f2fs_handle_critical_error+0x37c/0x540
[  208.693314][   T28]  f2fs_write_end_io+0x886/0xb60
[  208.693342][   T28]  __submit_merged_bio+0x27a/0x6a0
[  208.693360][   T28]  __submit_merged_write_cond+0x255/0x530
[  208.693378][   T28]  f2fs_write_data_pages+0x261d/0x3000
[  208.693425][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  208.693449][   T28]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  208.693490][   T28]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  208.693512][   T28]  ? trace_f2fs_writepages+0x7f/0x200
[  208.693525][   T28]  ? f2fs_write_node_pages+0x478/0x6e0
[  208.693542][   T28]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  208.693565][   T28]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  208.693580][   T28]  do_writepages+0x32e/0x550
[  208.693598][   T28]  ? reacquire_held_locks+0x127/0x1d0
[  208.693609][   T28]  ? writeback_sb_inodes+0x384/0x1010
[  208.693629][   T28]  __writeback_single_inode+0x145/0xff0
[  208.693643][   T28]  ? do_raw_spin_unlock+0x4d/0x240
[  208.693659][   T28]  writeback_sb_inodes+0x6c7/0x1010
[  208.693692][   T28]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  208.693769][   T28]  ? rcu_is_watching+0x15/0xb0
[  208.693787][   T28]  wb_writeback+0x43b/0xaf0
[  208.693806][   T28]  ? queue_io+0x381/0x590
[  208.693822][   T28]  ? __pfx_wb_writeback+0x10/0x10
[  208.693841][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  208.693857][   T28]  wb_workfn+0x409/0xef0
[  208.693879][   T28]  ? __pfx_wb_workfn+0x10/0x10
[  208.693895][   T28]  ? __lock_acquire+0xab9/0xd20
[  208.693919][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  208.693938][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  208.693948][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  208.693957][   T28]  ? process_scheduled_works+0x9ef/0x17b0
[  208.693969][   T28]  process_scheduled_works+0xae1/0x17b0
[  208.694001][   T28]  ? __pfx_process_scheduled_works+0x10/0x10
[  208.694031][   T28]  worker_thread+0x8a0/0xda0
[  208.694062][   T28]  kthread+0x711/0x8a0
[  208.694078][   T28]  ? __pfx_worker_thread+0x10/0x10
[  208.694088][   T28]  ? __pfx_kthread+0x10/0x10
[  208.694102][   T28]  ? _raw_spin_unlock_irq+0x23/0x50
[  208.694112][   T28]  ? lockdep_hardirqs_on+0x9c/0x150
[  208.694125][   T28]  ? __pfx_kthread+0x10/0x10
[  208.694139][   T28]  ret_from_fork+0x3fc/0x770
[  208.694153][   T28]  ? __pfx_ret_from_fork+0x10/0x10
[  208.694168][   T28]  ? __switch_to_asm+0x39/0x70
[  208.694180][   T28]  ? __switch_to_asm+0x33/0x70
[  208.694192][   T28]  ? __pfx_kthread+0x10/0x10
[  208.694206][   T28]  ret_from_fork_asm+0x1a/0x30
[  208.694232][   T28]  </TASK>
[  208.694237][   T28] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  208.729249][ T9604] loop3: detected capacity change from 0 to 40427
[  208.750064][ T9604] F2FS-fs (loop3): invalid crc value
[  208.830130][   T52] usb 2-1: Using ep0 maxpacket: 32
[  208.855605][   T52] usb 2-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 0.01
[  208.861280][   T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.867782][   T52] usb 2-1: Product: syz
[  208.873210][   T52] usb 2-1: Manufacturer: syz
[  208.875662][   T52] usb 2-1: SerialNumber: syz
[  208.886350][   T52] usb 2-1: config 0 descriptor??
[  208.903107][ T9604] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  208.907216][ T9604] F2FS-fs (loop3): Start checkpoint disabled!
[  208.933889][ T9604] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  209.004188][ T9604] F2FS-fs (loop3): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  209.045884][   T27] kworker/u10:0: attempt to access beyond end of device
[  209.045884][   T27] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  209.059775][   T27] CPU: 0 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  209.059796][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  209.059803][   T27] Workqueue: writeback wb_workfn (flush-7:3)
[  209.059823][   T27] Call Trace:
[  209.059828][   T27]  <TASK>
[  209.059833][   T27]  dump_stack_lvl+0x189/0x250
[  209.059851][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[  209.059864][   T27]  ? __pfx_queue_work_on+0x10/0x10
[  209.059874][   T27]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  209.059886][   T27]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  209.059907][   T27]  f2fs_handle_critical_error+0x37c/0x540
[  209.059926][   T27]  f2fs_write_end_io+0x886/0xb60
[  209.059953][   T27]  __submit_merged_bio+0x27a/0x6a0
[  209.059971][   T27]  __submit_merged_write_cond+0x255/0x530
[  209.059989][   T27]  f2fs_write_data_pages+0x261d/0x3000
[  209.060028][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  209.060101][   T27]  ? f2fs_write_meta_pages+0x357/0x450
[  209.060123][   T27]  ? __lock_acquire+0xab9/0xd20
[  209.060143][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  209.060158][   T27]  do_writepages+0x32e/0x550
[  209.060175][   T27]  ? reacquire_held_locks+0x127/0x1d0
[  209.060185][   T27]  ? writeback_sb_inodes+0x384/0x1010
[  209.060205][   T27]  __writeback_single_inode+0x145/0xff0
[  209.060219][   T27]  ? do_raw_spin_unlock+0x4d/0x240
[  209.060234][   T27]  writeback_sb_inodes+0x6c7/0x1010
[  209.060268][   T27]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  209.060312][   T27]  ? rcu_is_watching+0x15/0xb0
[  209.060331][   T27]  wb_writeback+0x43b/0xaf0
[  209.060350][   T27]  ? queue_io+0x381/0x590
[  209.060366][   T27]  ? __pfx_wb_writeback+0x10/0x10
[  209.060385][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  209.060407][   T27]  wb_workfn+0x409/0xef0
[  209.060431][   T27]  ? __pfx_wb_workfn+0x10/0x10
[  209.060446][   T27]  ? __lock_acquire+0xab9/0xd20
[  209.060487][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  209.060504][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  209.060514][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  209.060523][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  209.060535][   T27]  process_scheduled_works+0xae1/0x17b0
[  209.060568][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  209.060598][   T27]  worker_thread+0x8a0/0xda0
[  209.060630][   T27]  kthread+0x711/0x8a0
[  209.060646][   T27]  ? __pfx_worker_thread+0x10/0x10
[  209.060657][   T27]  ? __pfx_kthread+0x10/0x10
[  209.060671][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  209.060682][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[  209.060727][   T27]  ? __pfx_kthread+0x10/0x10
[  209.060742][   T27]  ret_from_fork+0x3fc/0x770
[  209.060756][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  209.060772][   T27]  ? __switch_to_asm+0x39/0x70
[  209.060785][   T27]  ? __switch_to_asm+0x33/0x70
[  209.060797][   T27]  ? __pfx_kthread+0x10/0x10
[  209.060810][   T27]  ret_from_fork_asm+0x1a/0x30
[  209.060836][   T27]  </TASK>
[  209.065518][   T27] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  209.101506][   T52] usb 2-1: USB disconnect, device number 23
[  209.190874][ T9610] netlink: 'syz.4.1332': attribute type 66 has an invalid length.
[  209.707304][ T9626] loop3: detected capacity change from 0 to 40427
[  209.712891][ T9626] F2FS-fs (loop3): invalid crc value
[  209.752898][ T9635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1343'.
[  209.763468][ T9626] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  209.767854][ T9626] F2FS-fs (loop3): Start checkpoint disabled!
[  209.773490][ T9626] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  210.375647][   T27] kworker/u10:0: attempt to access beyond end of device
[  210.375647][   T27] loop3: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  210.381498][   T27] CPU: 1 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  210.381516][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  210.381524][   T27] Workqueue: writeback wb_workfn (flush-7:3)
[  210.381547][   T27] Call Trace:
[  210.381552][   T27]  <TASK>
[  210.381559][   T27]  dump_stack_lvl+0x189/0x250
[  210.381578][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[  210.381596][   T27]  ? __pfx_queue_work_on+0x10/0x10
[  210.381607][   T27]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  210.381621][   T27]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  210.381641][   T27]  f2fs_handle_critical_error+0x37c/0x540
[  210.381662][   T27]  f2fs_write_end_io+0x886/0xb60
[  210.381716][   T27]  __submit_merged_bio+0x27a/0x6a0
[  210.381736][   T27]  __submit_merged_write_cond+0x255/0x530
[  210.381760][   T27]  f2fs_write_data_pages+0x261d/0x3000
[  210.381800][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  210.381873][   T27]  ? f2fs_write_meta_pages+0x357/0x450
[  210.381895][   T27]  ? __lock_acquire+0xab9/0xd20
[  210.381915][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  210.381930][   T27]  do_writepages+0x32e/0x550
[  210.381950][   T27]  ? reacquire_held_locks+0x127/0x1d0
[  210.381960][   T27]  ? writeback_sb_inodes+0x384/0x1010
[  210.381980][   T27]  __writeback_single_inode+0x145/0xff0
[  210.381994][   T27]  ? do_raw_spin_unlock+0x4d/0x240
[  210.382010][   T27]  writeback_sb_inodes+0x6c7/0x1010
[  210.382042][   T27]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  210.382087][   T27]  ? rcu_is_watching+0x15/0xb0
[  210.382105][   T27]  wb_writeback+0x43b/0xaf0
[  210.382125][   T27]  ? queue_io+0x381/0x590
[  210.382140][   T27]  ? __pfx_wb_writeback+0x10/0x10
[  210.382160][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  210.382176][   T27]  wb_workfn+0x409/0xef0
[  210.382198][   T27]  ? __pfx_wb_workfn+0x10/0x10
[  210.382214][   T27]  ? __lock_acquire+0xab9/0xd20
[  210.382237][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  210.382252][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  210.382263][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  210.382272][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  210.382284][   T27]  process_scheduled_works+0xae1/0x17b0
[  210.382316][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  210.382347][   T27]  worker_thread+0x8a0/0xda0
[  210.382378][   T27]  kthread+0x711/0x8a0
[  210.382394][   T27]  ? __pfx_worker_thread+0x10/0x10
[  210.382405][   T27]  ? __pfx_kthread+0x10/0x10
[  210.382419][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  210.382430][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[  210.382442][   T27]  ? __pfx_kthread+0x10/0x10
[  210.382456][   T27]  ret_from_fork+0x3fc/0x770
[  210.382490][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  210.382506][   T27]  ? __switch_to_asm+0x39/0x70
[  210.382519][   T27]  ? __switch_to_asm+0x33/0x70
[  210.382531][   T27]  ? __pfx_kthread+0x10/0x10
[  210.382544][   T27]  ret_from_fork_asm+0x1a/0x30
[  210.382570][   T27]  </TASK>
[  210.383333][   T27] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  210.505770][   T27] CPU: 0 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  210.505790][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  210.505798][   T27] Workqueue: writeback wb_workfn (flush-7:3)
[  210.505819][   T27] Call Trace:
[  210.505823][   T27]  <TASK>
[  210.505830][   T27]  dump_stack_lvl+0x189/0x250
[  210.505849][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[  210.505861][   T27]  ? __pfx_queue_work_on+0x10/0x10
[  210.505872][   T27]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  210.505885][   T27]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  210.505906][   T27]  f2fs_handle_critical_error+0x37c/0x540
[  210.505926][   T27]  f2fs_write_end_io+0x886/0xb60
[  210.505954][   T27]  __submit_merged_bio+0x27a/0x6a0
[  210.505972][   T27]  __submit_merged_write_cond+0x255/0x530
[  210.505990][   T27]  f2fs_write_data_pages+0x261d/0x3000
[  210.506047][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  210.506123][   T27]  ? f2fs_write_meta_pages+0x357/0x450
[  210.506144][   T27]  ? __lock_acquire+0xab9/0xd20
[  210.506163][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  210.506178][   T27]  do_writepages+0x32e/0x550
[  210.506196][   T27]  ? reacquire_held_locks+0x127/0x1d0
[  210.506207][   T27]  ? writeback_sb_inodes+0x384/0x1010
[  210.506226][   T27]  __writeback_single_inode+0x145/0xff0
[  210.506240][   T27]  ? do_raw_spin_unlock+0x4d/0x240
[  210.506256][   T27]  writeback_sb_inodes+0x6c7/0x1010
[  210.506289][   T27]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  210.506334][   T27]  ? rcu_is_watching+0x15/0xb0
[  210.506352][   T27]  wb_writeback+0x43b/0xaf0
[  210.506372][   T27]  ? queue_io+0x381/0x590
[  210.506387][   T27]  ? __pfx_wb_writeback+0x10/0x10
[  210.506407][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  210.506422][   T27]  wb_workfn+0x409/0xef0
[  210.506445][   T27]  ? __pfx_wb_workfn+0x10/0x10
[  210.506460][   T27]  ? __lock_acquire+0xab9/0xd20
[  210.506483][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  210.506499][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  210.506509][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  210.506518][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  210.506530][   T27]  process_scheduled_works+0xae1/0x17b0
[  210.506562][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  210.506592][   T27]  worker_thread+0x8a0/0xda0
[  210.506623][   T27]  kthread+0x711/0x8a0
[  210.506639][   T27]  ? __pfx_worker_thread+0x10/0x10
[  210.506653][   T27]  ? __pfx_kthread+0x10/0x10
[  210.506668][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  210.506678][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[  210.506717][   T27]  ? __pfx_kthread+0x10/0x10
[  210.506731][   T27]  ret_from_fork+0x3fc/0x770
[  210.506745][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  210.506761][   T27]  ? __switch_to_asm+0x39/0x70
[  210.506773][   T27]  ? __switch_to_asm+0x33/0x70
[  210.506785][   T27]  ? __pfx_kthread+0x10/0x10
[  210.506799][   T27]  ret_from_fork_asm+0x1a/0x30
[  210.506824][   T27]  </TASK>
[  210.630783][   T27] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  210.696323][ T5989] usb 2-1: new full-speed USB device number 24 using dummy_hcd
[  210.857844][ T5989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  210.861881][ T5989] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  210.867099][ T5989] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  210.873788][ T5989] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  210.883191][ T5989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  210.887727][ T5989] usb 2-1: Product: syz
[  210.889383][ T5989] usb 2-1: Manufacturer: syz
[  210.891215][ T5989] usb 2-1: SerialNumber: syz
[  210.904732][ T5989] usb 2-1: config 0 descriptor??
[  210.923660][ T9654] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  210.928201][ T5989] usb 2-1: ucan: probing device on interface #0
[  210.930649][ T5989] usb 2-1: ucan: invalid endpoint configuration
[  210.933059][ T5989] usb 2-1: ucan: probe failed; try to update the device firmware
[  211.135459][ T5989] usb 2-1: USB disconnect, device number 24
[  211.445050][ T6012] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  211.602980][ T6012] usb 4-1: Using ep0 maxpacket: 32
[  211.639905][ T6012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.644138][ T6012] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  211.660456][ T6012] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  211.664435][ T6012] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.680057][ T6012] usb 4-1: config 0 descriptor??
[  211.693174][ T6012] hub 4-1:0.0: USB hub found
[  211.924770][ T6012] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  212.137251][ T6012] usbhid 4-1:0.0: can't add hid device: -71
[  212.139762][ T6012] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  212.175027][ T6012] usb 4-1: USB disconnect, device number 18
[  212.694107][ T9708] netlink: 'syz.1.1377': attribute type 3 has an invalid length.
[  213.006624][ T9716] netlink: 'syz.1.1380': attribute type 3 has an invalid length.
[  213.088573][ T9726] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1384'.
[  213.315606][ T9740] loop3: detected capacity change from 0 to 4096
[  213.378584][ T9740] ntfs3(loop3): ino=9, attr_set_size
[  213.403506][ T5989] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  213.509411][ T9752] input: syz1 as /devices/virtual/input/input15
[  213.574625][ T5989] usb 2-1: Using ep0 maxpacket: 8
[  213.680885][ T9757] loop3: detected capacity change from 0 to 256
[  213.691944][ T9757] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  213.707803][ T9757] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  213.743167][ T9757] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  213.857731][ T9758] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff)
[  213.864880][ T9758] exFAT-fs (loop3): Filesystem has been set read-only
[  213.868156][ T9758] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff)
[  213.880413][ T9758] exFAT-fs (loop3): error, invalid access to FAT (entry 0xffffffff)
[  214.498755][ T5989] usb 2-1: config 0 has no interfaces?
[  214.503355][ T5989] usb 2-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08
[  214.507162][ T5989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  214.523219][ T5989] usb 2-1: Product: syz
[  214.525014][ T5989] usb 2-1: Manufacturer: syz
[  214.526978][ T5989] usb 2-1: SerialNumber: syz
[  214.541049][ T5989] usb 2-1: config 0 descriptor??
[  214.618035][ T9766] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1405'.
[  214.720587][ T9770] loop3: detected capacity change from 0 to 2048
[  214.729498][ T9770] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  214.852861][ T9773] loop4: detected capacity change from 0 to 1024
[  214.901033][ T5989] usb 2-1: USB disconnect, device number 25
[  214.946395][ T9775] loop3: detected capacity change from 0 to 512
[  214.948858][ T9773] hfsplus: inconsistency in B*Tree (0,1,255,1,0)
[  214.955054][ T9773] hfsplus: xattr search failed
[  214.955468][ T9775] EXT4-fs: Ignoring removed oldalloc option
[  214.982441][ T9775] EXT4-fs error (device loop3): ext4_xattr_inode_iget:442: comm syz.3.1409: error while reading EA inode 32 err=-116
[  214.989688][ T9775] EXT4-fs (loop3): Remounting filesystem read-only
[  215.008085][ T9775] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  215.013960][ T9775] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  215.030061][ T9775] EXT4-fs (loop3): 1 orphan inode deleted
[  215.040150][ T9775] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.076354][ T6199] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.266838][ T9779] loop4: detected capacity change from 0 to 32768
[  215.276729][ T9779] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1410 (9779)
[  215.315861][ T9779] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  215.320161][ T9779] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  215.331289][ T9779] BTRFS info (device loop4): using free-space-tree
[  215.351290][ T9781] loop3: detected capacity change from 0 to 32768
[  215.356749][ T9781] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1411 (9781)
[  215.380372][ T9781] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  215.385705][ T9781] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  215.390479][ T9781] BTRFS info (device loop3): using free-space-tree
[  215.681356][ T8771] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  215.854242][ T9819] Bluetooth: MGMT ver 1.23
[  215.863341][ T6199] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  216.104737][   T33] audit: type=1326 audit(1755121587.679:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9828 comm="syz.4.1419" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8caf98ebe9 code=0x0
[  216.133046][ T9827] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.1418'.
[  216.356588][ T9839] loop1: detected capacity change from 0 to 512
[  216.401239][ T9839] EXT4-fs (loop1): VFS: Can't find ext4 filesystem
[  216.416033][ T9843] loop3: detected capacity change from 0 to 4096
[  216.444196][ T9843] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  216.463216][ T9843] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  216.498850][ T9843] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  216.850348][ T9860] loop3: detected capacity change from 0 to 512
[  216.856731][ T9860] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  217.236464][ T9862] loop4: detected capacity change from 0 to 2048
[  217.240497][ T9862] udf: Bad value for 'session'
[  217.322941][ T9860] EXT4-fs error (device loop3): ext4_validate_block_bitmap:432: comm syz.3.1432: bg 0: block 104: invalid block bitmap
[  217.345226][ T9860] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  217.349025][ T9860] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1432: invalid indirect mapped block 1 (level 1)
[  217.357628][ T9860] EXT4-fs (loop3): 1 truncate cleaned up
[  217.363315][ T9860] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.443432][ T6199] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  217.741527][   T52] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  217.772943][ T9873] loop3: detected capacity change from 0 to 32768
[  217.811483][ T9875] loop4: detected capacity change from 0 to 32768
[  217.814936][ T9875] XFS: ikeep mount option is deprecated.
[  217.831005][ T9873] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  217.846560][ T9875] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  217.883606][ T9875] XFS (loop4): Ending clean mount
[  217.889102][   T52] usb 2-1: Using ep0 maxpacket: 32
[  217.890920][ T9875] XFS (loop4): Quotacheck needed: Please wait.
[  217.893669][   T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 7
[  217.898417][   T52] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 9272, setting to 1024
[  217.908164][   T52] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  217.921905][   T52] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.925401][   T52] usb 2-1: Product: syz
[  217.927204][   T52] usb 2-1: Manufacturer: syz
[  217.936390][ T9875] XFS (loop4): Quotacheck: Done.
[  217.944483][   T52] usb 2-1: SerialNumber: syz
[  217.959301][   T52] usb 2-1: config 0 descriptor??
[  217.986890][ T6199] ocfs2: Unmounting device (7,3) on (node local)
[  218.019021][   T52] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  218.232040][   T52] usb 2-1: USB disconnect, device number 26
[  218.234966][ T5914] usb 2-1: Failed to submit usb control message: -71
[  218.237606][ T5914] usb 2-1: unable to send the bmi data to the device: -71
[  218.256271][ T5914] usb 2-1: unable to get target info from device
[  218.263166][ T5914] usb 2-1: could not get target info (-71)
[  218.265356][ T5914] usb 2-1: could not probe fw (-71)
[  218.728688][ T8771] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  218.771335][ T5989] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  218.853950][ T9902] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  218.857288][ T9902] tipc: Bearer <udp:s>: trying with adjusted priority
[  218.860456][ T9902] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  218.953304][ T5989] usb 4-1: config 36 interface 0 altsetting 0 has an endpoint descriptor with address 0x47, changing to 0x7
[  218.957525][ T5989] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 0, changing to 10
[  218.962360][ T5989] usb 4-1: config 36 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  218.972495][ T5989] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  218.975799][ T5989] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  218.979689][ T5989] usb 4-1: Manufacturer: syz
[  218.981610][ T5989] usb 4-1: SerialNumber: syz
[  219.206613][ T5989] usbhid 4-1:36.0: couldn't find an input interrupt endpoint
[  219.227997][ T5989] usb 4-1: USB disconnect, device number 19
[  219.243073][ T9924] loop4: detected capacity change from 0 to 2048
[  219.263187][ T9924] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  219.284593][ T9927] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  219.978434][ T9926] loop1: detected capacity change from 0 to 40427
[  219.993008][ T9926] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  220.006023][ T9926] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  220.019878][ T9926] F2FS-fs (loop1): invalid crc value
[  220.131434][ T9926] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  220.141351][ T9926] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  220.144387][ T9926] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  220.406516][ T9954] loop4: detected capacity change from 0 to 8192
[  220.428682][ T9954] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  220.454345][ T9954] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 1046)
[  220.466901][ T9954] FAT-fs (loop4): Filesystem has been set read-only
[  220.481011][ T8771] FAT-fs (loop4): error, fat_free: invalid cluster chain (i_pos 1046)
[  220.586427][ T5989] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  220.606075][ T9960] overlayfs: failed to decode file handle (len=4, type=251, flags=0, err=-22)
[  220.736331][ T5989] usb 4-1: Using ep0 maxpacket: 32
[  220.742820][ T5989] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 12288, setting to 1024
[  220.747415][ T5989] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  220.757102][ T5989] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  220.760897][ T5989] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  220.764483][ T5989] usb 4-1: Product: syz
[  220.769209][ T5989] usb 4-1: Manufacturer: syz
[  220.773841][ T5989] usb 4-1: SerialNumber: syz
[  220.796456][ T5989] usb 4-1: config 0 descriptor??
[  221.105804][ T5989] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  221.163742][   T24] usb 4-1: USB disconnect, device number 20
[  221.255648][ T5989] usb 5-1: Using ep0 maxpacket: 32
[  221.261757][ T5989] usb 5-1: unable to get BOS descriptor or descriptor too short
[  221.268323][ T5989] usb 5-1: config 117 has an invalid interface number: 249 but max is 0
[  221.271418][ T5989] usb 5-1: config 117 has no interface number 0
[  221.273877][ T5989] usb 5-1: config 117 interface 249 altsetting 99 endpoint 0xF has an invalid bInterval 0, changing to 7
[  221.277747][ T5989] usb 5-1: config 117 interface 249 altsetting 99 endpoint 0xF has invalid maxpacket 42073, setting to 1024
[  221.281471][ T5989] usb 5-1: config 117 interface 249 has no altsetting 0
[  221.292322][ T5989] usb 5-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=d5.d1
[  221.295601][ T5989] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.298136][ T5989] usb 5-1: Product: syz
[  221.299474][ T5989] usb 5-1: Manufacturer: syz
[  221.301032][ T5989] usb 5-1: SerialNumber: syz
[  221.321211][ T9965] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  221.563696][ T5989] ati_remote 5-1:117.249: ati_remote_probe: Unexpected endpoint_in
[  221.573525][ T5989] usb 5-1: USB disconnect, device number 6
[  221.880536][ T9971] loop1: detected capacity change from 0 to 512
[  221.892391][ T9971] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  221.896962][ T9971] System zones: 1-12
[  221.902980][ T9971] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.1473: error while reading EA inode 32 err=-116
[  221.909464][ T9971] EXT4-fs (loop1): Remounting filesystem read-only
[  221.911657][ T9971] EXT4-fs warning (device loop1): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  221.916328][ T9971] EXT4-fs (loop1): 1 orphan inode deleted
[  221.918941][ T9971] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  221.950237][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.050437][ T9980] netlink: 'syz.1.1476': attribute type 15 has an invalid length.
[  222.053560][ T9980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1476'.
[  222.143605][ T9986] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1479'.
[  222.321596][ T9998] input: syz1 as /devices/virtual/input/input16
[  222.503192][T10011] capability: warning: `syz.4.1491' uses 32-bit capabilities (legacy support in use)
[  222.570584][T10011] Falling back ldisc for ttyS3.
[  222.584462][T10013] loop1: detected capacity change from 0 to 4096
[  222.588467][T10013] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  222.603448][T10013] ntfs3(loop1): ino=19, mi_enum_attr
[  222.616804][T10013] ntfs3(loop1): ino=19, mi_enum_attr
[  222.619130][T10013] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  222.723207][T10016] rtc_cmos 00:04: Alarms can be up to one day in the future
[  222.865376][  T791] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  223.023967][  T791] usb 5-1: Using ep0 maxpacket: 8
[  223.028553][  T791] usb 5-1: unable to get BOS descriptor or descriptor too short
[  223.033017][  T791] usb 5-1: config 7 has an invalid descriptor of length 255, skipping remainder of the config
[  223.038902][  T791] usb 5-1: config 7 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  223.042441][  T791] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  223.052495][  T791] usb 5-1: config 7 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  223.061967][  T791] usb 5-1: config 7 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  223.077639][  T791] usb 5-1: New USB device found, idVendor=0489, idProduct=e0b5, bcdDevice=ae.2a
[  223.081021][  T791] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.085066][  T791] usb 5-1: Product: syz
[  223.086494][  T791] usb 5-1: Manufacturer: syz
[  223.088254][  T791] usb 5-1: SerialNumber: syz
[  223.097501][T10015] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  223.294254][   T24] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  223.323357][  T791] usb 5-1: USB disconnect, device number 7
[  223.443606][   T24] usb 4-1: Using ep0 maxpacket: 16
[  223.624280][   T33] audit: type=1326 audit(1755121595.196:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.1.1511" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  223.632680][   T33] audit: type=1326 audit(1755121595.196:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.1.1511" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  223.641665][   T33] audit: type=1326 audit(1755121595.196:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.1.1511" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  223.649319][   T33] audit: type=1326 audit(1755121595.206:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.1.1511" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  223.657483][   T33] audit: type=1326 audit(1755121595.206:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.1.1511" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  223.664857][   T33] audit: type=1326 audit(1755121595.206:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.1.1511" exe="/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  223.673997][   T33] audit: type=1326 audit(1755121595.206:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.1.1511" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  223.684115][   T33] audit: type=1326 audit(1755121595.206:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.1.1511" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  223.692889][   T33] audit: type=1326 audit(1755121595.206:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.1.1511" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  223.693715][   T24] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  223.704326][   T33] audit: type=1326 audit(1755121595.206:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10051 comm="syz.1.1511" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fcf1678ebe9 code=0x7ffc0000
[  223.704802][   T24] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  223.723250][   T24] usb 4-1: config 1 interface 2 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  223.729490][   T24] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  223.732416][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.735821][   T24] usb 4-1: Product: syz
[  223.737231][   T24] usb 4-1: Manufacturer: syz
[  223.738761][   T24] usb 4-1: SerialNumber: syz
[  223.968138][   T24] usb 4-1: USB disconnect, device number 21
[  224.022711][ T5849] udevd[5849]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  225.052171][ T6012] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  225.163047][T10076] loop3: detected capacity change from 0 to 40427
[  225.169926][T10076] F2FS-fs (loop3): invalid crc value
[  225.203446][T10076] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  225.207028][ T6012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  225.207244][T10076] F2FS-fs (loop3): Start checkpoint disabled!
[  225.213692][ T6012] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  225.217813][T10076] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  225.218435][ T6012] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  225.226482][ T6012] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.233771][ T6012] usb 5-1: config 0 descriptor??
[  225.448752][T10082] netlink: 'syz.1.1522': attribute type 2 has an invalid length.
[  225.476462][   T27] kworker/u10:0: attempt to access beyond end of device
[  225.476462][   T27] loop3: rw=1, sector=77824, nr_sectors = 8 limit=40427
[  225.477647][T10082] : entered promiscuous mode
[  225.518637][   T27] kworker/u10:0: attempt to access beyond end of device
[  225.518637][   T27] loop3: rw=1, sector=77832, nr_sectors = 4088 limit=40427
[  225.538586][   T27] kworker/u10:0: attempt to access beyond end of device
[  225.538586][   T27] loop3: rw=1, sector=49152, nr_sectors = 8 limit=40427
[  225.585846][   T27] kworker/u10:0: attempt to access beyond end of device
[  225.585846][   T27] loop3: rw=1, sector=49160, nr_sectors = 4088 limit=40427
[  225.604590][   T27] kworker/u10:0: attempt to access beyond end of device
[  225.604590][   T27] loop3: rw=1, sector=57344, nr_sectors = 8 limit=40427
[  225.641312][T10086] loop1: detected capacity change from 0 to 2048
[  225.653123][   T27] kworker/u10:0: attempt to access beyond end of device
[  225.653123][   T27] loop3: rw=1, sector=57352, nr_sectors = 4064 limit=40427
[  225.654177][T10086] EXT4-fs: Ignoring removed mblk_io_submit option
[  225.670748][   T27] kworker/u10:0: attempt to access beyond end of device
[  225.670748][   T27] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  225.680774][   T27] CPU: 1 UID: 0 PID: 27 Comm: kworker/u10:0 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  225.680796][   T27] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  225.680805][   T27] Workqueue: writeback wb_workfn (flush-7:3)
[  225.680828][   T27] Call Trace:
[  225.680834][   T27]  <TASK>
[  225.680840][   T27]  dump_stack_lvl+0x189/0x250
[  225.680862][   T27]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.680877][   T27]  ? __pfx_queue_work_on+0x10/0x10
[  225.680890][   T27]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  225.680906][   T27]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  225.680929][   T27]  f2fs_handle_critical_error+0x37c/0x540
[  225.680951][   T27]  f2fs_write_end_io+0x886/0xb60
[  225.680983][   T27]  __submit_merged_bio+0x27a/0x6a0
[  225.681004][   T27]  __submit_merged_write_cond+0x255/0x530
[  225.681026][   T27]  f2fs_write_data_pages+0x261d/0x3000
[  225.681067][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  225.681152][   T27]  ? f2fs_write_meta_pages+0x357/0x450
[  225.681177][   T27]  ? __lock_acquire+0xab9/0xd20
[  225.681198][   T27]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  225.681216][   T27]  do_writepages+0x32e/0x550
[  225.681235][   T27]  ? reacquire_held_locks+0x127/0x1d0
[  225.681247][   T27]  ? writeback_sb_inodes+0x384/0x1010
[  225.681271][   T27]  __writeback_single_inode+0x145/0xff0
[  225.681287][   T27]  ? do_raw_spin_unlock+0x4d/0x240
[  225.681306][   T27]  writeback_sb_inodes+0x6c7/0x1010
[  225.681377][   T27]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  225.681429][   T27]  ? rcu_is_watching+0x15/0xb0
[  225.681451][   T27]  wb_writeback+0x43b/0xaf0
[  225.681474][   T27]  ? queue_io+0x381/0x590
[  225.681513][   T27]  ? __pfx_wb_writeback+0x10/0x10
[  225.681537][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  225.681555][   T27]  wb_workfn+0x409/0xef0
[  225.681582][   T27]  ? __pfx_wb_workfn+0x10/0x10
[  225.681627][   T27]  ? __lock_acquire+0xab9/0xd20
[  225.681656][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  225.681675][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  225.681687][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  225.681699][   T27]  ? process_scheduled_works+0x9ef/0x17b0
[  225.681713][   T27]  process_scheduled_works+0xae1/0x17b0
[  225.681750][   T27]  ? __pfx_process_scheduled_works+0x10/0x10
[  225.681786][   T27]  worker_thread+0x8a0/0xda0
[  225.681823][   T27]  kthread+0x711/0x8a0
[  225.681840][   T27]  ? __pfx_worker_thread+0x10/0x10
[  225.681851][   T27]  ? __pfx_kthread+0x10/0x10
[  225.681867][   T27]  ? _raw_spin_unlock_irq+0x23/0x50
[  225.681880][   T27]  ? lockdep_hardirqs_on+0x9c/0x150
[  225.681894][   T27]  ? __pfx_kthread+0x10/0x10
[  225.681910][   T27]  ret_from_fork+0x3fc/0x770
[  225.681927][   T27]  ? __pfx_ret_from_fork+0x10/0x10
[  225.681945][   T27]  ? __switch_to_asm+0x39/0x70
[  225.681960][   T27]  ? __switch_to_asm+0x33/0x70
[  225.681974][   T27]  ? __pfx_kthread+0x10/0x10
[  225.681989][   T27]  ret_from_fork_asm+0x1a/0x30
[  225.682018][   T27]  </TASK>
[  225.797242][    C1] vkms_vblank_simulate: vblank timer overrun
[  225.817629][   T27] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  225.829387][T10086] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  225.845223][ T6012] usb 5-1: string descriptor 0 read error: -22
[  226.070885][ T6012] uclogic 0003:256C:006D.000F: interface is invalid, ignoring
[  226.085067][ T6012] usb 5-1: USB disconnect, device number 8
[  226.540081][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.584277][T10100] loop3: detected capacity change from 0 to 16
[  226.594721][T10100] erofs (device loop3): mounted with root inode @ nid 36.
[  226.645472][T10104] loop1: detected capacity change from 0 to 1024
[  226.649412][T10104] EXT4-fs: Ignoring removed orlov option
[  226.656386][T10104] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  226.677916][T10104] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  226.845494][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.883059][T10114] loop4: detected capacity change from 0 to 128
[  227.107236][   T24] usb 4-1: new full-speed USB device number 22 using dummy_hcd
[  227.120355][T10126] loop4: detected capacity change from 0 to 2048
[  227.125294][T10126] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=4096, location=4096
[  227.128949][T10126] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  227.132878][T10126] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found!
[  227.136366][T10126] UDF-fs: Scanning with blocksize 512 failed
[  227.145052][T10126] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  227.147820][T10126] UDF-fs: Scanning with blocksize 1024 failed
[  227.153190][T10126] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  227.156380][T10126] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  227.159319][T10126] UDF-fs: Scanning with blocksize 2048 failed
[  227.162498][T10126] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  227.166298][T10126] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[  227.170070][T10126] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  227.173207][T10126] UDF-fs: Scanning with blocksize 4096 failed
[  227.175408][T10126] UDF-fs: warning (device loop4): udf_fill_super: No partition found (1)
[  227.209184][T10129] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1541'.
[  227.262931][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  227.267422][   T24] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2
[  227.278420][   T24] usb 4-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  227.283559][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.283823][T10133] loop4: detected capacity change from 0 to 2048
[  227.293616][T10133] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 98: 0x1f != 0x1e
[  227.297121][   T24] usb 4-1: config 0 descriptor??
[  227.300025][T10133] UDF-fs: warning (device loop4): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor.
[  227.307822][T10133] UDF-fs: warning (device loop4): udf_fill_super: No partition found (2)
[  227.311086][   T24] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  227.317453][   T24] dvb-usb: bulk message failed: -22 (3/0)
[  227.343928][   T24] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  227.358060][   T24] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  227.361694][   T24] usb 4-1: media controller created
[  227.366200][   T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  227.388295][   T24] dvb-usb: bulk message failed: -22 (6/0)
[  227.397890][   T24] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  227.406047][   T24] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17
[  227.415090][   T24] dvb-usb: schedule remote query interval to 150 msecs.
[  227.418012][   T24] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  227.518870][ T5989] usb 4-1: USB disconnect, device number 22
[  227.546929][ T5989] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  227.619274][T10139] loop4: detected capacity change from 0 to 32768
[  227.624090][T10139] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1546 (10139)
[  227.641886][T10139] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  227.645496][T10139] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  227.648505][T10139] BTRFS info (device loop4): using free-space-tree
[  227.728713][ T8771] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  227.953243][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1549'.
[  228.011816][T10161] vlan2: entered allmulticast mode
[  228.013951][T10161] bridge0: entered allmulticast mode
[  228.016701][T10161] bridge1: port 1(vlan2) entered blocking state
[  228.027247][T10161] bridge1: port 1(vlan2) entered disabled state
[  228.034303][T10161] vlan2: entered promiscuous mode
[  228.036342][T10161] bridge0: entered promiscuous mode
[  228.052514][T10161] gretap1: entered promiscuous mode
[  228.055233][T10161] bridge1: port 2(gretap1) entered blocking state
[  228.058045][T10161] bridge1: port 2(gretap1) entered disabled state
[  228.068495][T10161] gretap1: entered allmulticast mode
[  228.295382][T10173] loop1: detected capacity change from 0 to 32768
[  228.299480][T10173] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1555 (10173)
[  228.306619][T10173] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  228.310370][T10173] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  228.313417][T10173] BTRFS info (device loop1): disk space caching is enabled
[  228.316106][T10173] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  228.414127][T10173] BTRFS info (device loop1): rebuilding free space tree
[  228.426634][T10173] BTRFS info (device loop1): disabling free space tree
[  228.429050][T10173] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  228.432395][T10173] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  228.493979][T10173] btrfs: Unknown parameter '18446744073709551615@LqE: 艞t}0$'
[  228.583438][ T5944] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  228.620261][T10182] loop4: detected capacity change from 0 to 32768
[  228.680999][T10182] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  228.706569][T10182] XFS (loop4): Ending clean mount
[  228.764652][T10182] XFS (loop4): Quotacheck needed: Please wait.
[  228.862996][T10182] XFS (loop4): Quotacheck: Done.
[  228.907839][ T8771] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  229.196466][T10225] QAT: failed to copy from user cfg_data.
[  229.254516][T10228] loop4: detected capacity change from 0 to 16
[  229.271499][T10228] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  229.365489][T10234] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1572'.
[  229.628000][ T5989] usb 2-1: new full-speed USB device number 27 using dummy_hcd
[  229.779805][ T5989] usb 2-1: config 150 has an invalid interface number: 204 but max is 1
[  229.782853][ T5989] usb 2-1: config 150 has no interface number 0
[  229.785313][ T5989] usb 2-1: config 150 interface 204 has no altsetting 0
[  229.788075][ T5989] usb 2-1: config 150 interface 1 has no altsetting 0
[  229.795486][ T5989] usb 2-1: New USB device found, idVendor=04e2, idProduct=1424, bcdDevice=c7.eb
[  229.799550][ T5989] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.802770][ T5989] usb 2-1: Product: syz
[  229.804138][ T5989] usb 2-1: Manufacturer: syz
[  229.805969][ T5989] usb 2-1: SerialNumber: syz
[  230.099411][T10247] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  230.212365][ T5989] xr_serial 2-1:150.204: xr_serial converter detected
[  230.267419][   T24] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  230.394956][T10247] loop4: detected capacity change from 0 to 32768
[  230.421506][T10247] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  230.429847][   T24] usb 4-1: Using ep0 maxpacket: 32
[  230.440972][   T24] usb 4-1: config 0 has an invalid interface number: 229 but max is 0
[  230.444792][   T24] usb 4-1: config 0 has no interface number 0
[  230.454384][   T24] usb 4-1: New USB device found, idVendor=3b53, idProduct=a0d3, bcdDevice=e3.d4
[  230.458700][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.461478][   T24] usb 4-1: Product: syz
[  230.463004][   T24] usb 4-1: Manufacturer: syz
[  230.464654][   T24] usb 4-1: SerialNumber: syz
[  230.469623][   T24] usb 4-1: config 0 descriptor??
[  230.475860][T10247] XFS (loop4): Ending clean mount
[  230.476446][   T24] usb-storage 4-1:0.229: USB Mass Storage device detected
[  230.480987][T10247] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  230.693240][   T10] usb 4-1: USB disconnect, device number 23
[  231.044777][ T5989] usb 2-1: xr_serial converter now attached to ttyUSB0
[  231.248838][ T5989] usb 2-1: USB disconnect, device number 27
[  231.301140][ T5989] xr_serial ttyUSB0: xr_serial converter now disconnected from ttyUSB0
[  231.305222][ T5989] xr_serial 2-1:150.204: device disconnected
[  231.822208][T10270] loop3: detected capacity change from 0 to 32768
[  231.930643][T10270] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  231.930665][T10270]   allowing incompatible features above 0.0: (unknown version)
[  231.930671][T10270]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  231.955045][T10270] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  231.961014][T10270] bcachefs (loop3): initializing new filesystem
[  231.971349][T10270] bcachefs (loop3): going read-write
[  231.987196][T10270] bcachefs (loop3): marking superblocks
[  232.020924][T10270] bcachefs (loop3): initializing freespace
[  232.143003][T10270] bcachefs (loop3): done initializing freespace
[  232.153884][T10270] bcachefs (loop3): reading snapshots table
[  232.156686][T10270] bcachefs (loop3): reading snapshots done
[  232.216361][T10270] bcachefs (loop3): done starting filesystem
[  232.246342][T10270] syz.3.1583 (10270) used greatest stack depth: 17192 bytes left
[  232.284163][ T6199] bcachefs (loop3): shutting down
[  232.286610][ T6199] bcachefs (loop3): going read-only
[  232.289359][ T6199] bcachefs (loop3): finished waiting for writes to stop
[  232.301119][ T6199] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  232.335530][ T5989] usb 2-1: new full-speed USB device number 28 using dummy_hcd
[  232.391135][ T6199] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  232.408426][ T6199] bcachefs (loop3): clean shutdown complete, journal seq 4
[  232.412486][ T6199] bcachefs (loop3): marking filesystem clean
[  232.418296][T10291] loop4: detected capacity change from 0 to 8192
[  232.424143][T10291] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  232.464505][ T6199] bcachefs (loop3): shutdown complete
[  232.530129][ T5989] usb 2-1: config 27 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  232.535497][ T5989] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 127, setting to 64
[  232.540111][ T5989] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 0, changing to 10
[  232.544784][ T5989] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  232.555718][ T5989] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bf.9d
[  232.559523][ T5989] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.569779][T10287] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  232.589236][ T5989] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  232.682876][ T8450] udevd[8450]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  232.697842][ T5989] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -12
[  232.788687][ T6012] usb 2-1: USB disconnect, device number 28
[  232.813295][T10297] loop4: detected capacity change from 0 to 8192
[  232.913088][T10299] netlink: 'syz.4.1590': attribute type 9 has an invalid length.
[  232.917254][T10299] netlink: 200108 bytes leftover after parsing attributes in process `syz.4.1590'.
[  232.921425][T10299] openvswitch: netlink: Message has 5 unknown bytes.
[  233.009311][T10301] loop4: detected capacity change from 0 to 4096
[  233.018217][T10301] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  233.042823][T10301] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  233.046765][T10301] ntfs3(loop4): ino=19, mi_enum_attr
[  233.059683][T10301] ntfs3(loop4): failed to convert "c46c" to cp857
[  233.070089][T10301] ntfs3(loop4): ino=20, mi_enum_attr
[  233.191823][T10305] loop4: detected capacity change from 0 to 4096
[  233.210407][T10305] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  233.220911][T10305] ntfs3(loop4): ino=19, mi_enum_attr
[  233.222946][T10305] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  233.230842][T10305] ntfs3(loop4): failed to convert "c46c" to iso8859-2
[  233.233248][T10305] ntfs3(loop4): ino=20, mi_enum_attr
[  233.933405][T10317] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1597'.
[  234.029085][T10321] netlink: 96 bytes leftover after parsing attributes in process `syz.1.1599'.
[  234.318399][T10331] loop3: detected capacity change from 0 to 1024
[  234.363192][T10331] hfsplus: bad catalog entry type
[  234.435431][   T27] hfsplus: b-tree write err: -5, ino 4
[  234.463014][T10323] loop1: detected capacity change from 0 to 32768
[  234.496445][T10323] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  234.542814][T10323] XFS (loop1): Ending clean mount
[  234.575096][T10323] XFS (loop1): Quotacheck needed: Please wait.
[  234.658841][T10323] XFS (loop1): Quotacheck: Done.
[  234.888981][T10353] loop3: detected capacity change from 0 to 32768
[  234.913234][T10353] JBD2: Ignoring recovery information on journal
[  234.975158][T10353] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  235.111587][ T6199] ocfs2: Unmounting device (7,3) on (node local)
[  235.266326][ T5944] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  235.714641][T10377] usb usb8: usbfs: interface 0 claimed by hub while 'syz.1.1619' resets device
[  235.812142][   T24] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  235.974586][   T24] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.981270][T10389] loop1: detected capacity change from 0 to 1024
[  235.985043][T10367] loop4: detected capacity change from 0 to 40427
[  235.990772][   T24] usb 4-1: config 0 interface 0 has no altsetting 0
[  235.997839][   T24] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2e22, bcdDevice= 0.00
[  236.004231][T10367] F2FS-fs (loop4): Image doesn't support compression
[  236.011962][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.014209][T10367] F2FS-fs (loop4): build fault injection rate: 690
[  236.038001][T10389] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  236.044870][   T24] usb 4-1: config 0 descriptor??
[  236.050814][T10367] F2FS-fs (loop4): invalid crc value
[  236.111578][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.132260][T10367] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  236.137949][T10367] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  236.193409][ T8771] syz-executor: attempt to access beyond end of device
[  236.193409][ T8771] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  236.199685][ T8771] CPU: 0 UID: 0 PID: 8771 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  236.199702][ T8771] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  236.199710][ T8771] Call Trace:
[  236.199715][ T8771]  <TASK>
[  236.199721][ T8771]  dump_stack_lvl+0x189/0x250
[  236.199747][ T8771]  ? __pfx_dump_stack_lvl+0x10/0x10
[  236.199762][ T8771]  ? __pfx_queue_work_on+0x10/0x10
[  236.199772][ T8771]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  236.199783][ T8771]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  236.199803][ T8771]  f2fs_handle_critical_error+0x37c/0x540
[  236.199826][ T8771]  f2fs_write_end_io+0x886/0xb60
[  236.199857][ T8771]  __submit_merged_bio+0x27a/0x6a0
[  236.199872][ T8771]  __submit_merged_write_cond+0x255/0x530
[  236.199890][ T8771]  f2fs_write_data_pages+0x261d/0x3000
[  236.199933][ T8771]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  236.199956][ T8771]  ? arch_stack_walk+0xfc/0x150
[  236.199989][ T8771]  ? __mod_zone_page_state+0xd7/0x140
[  236.200013][ T8771]  ? folios_put_refs+0x560/0x640
[  236.200036][ T8771]  ? __lock_acquire+0xab9/0xd20
[  236.200060][ T8771]  ? do_raw_spin_lock+0x121/0x290
[  236.200076][ T8771]  ? do_raw_spin_unlock+0x4d/0x240
[  236.200090][ T8771]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  236.200105][ T8771]  do_writepages+0x32e/0x550
[  236.200131][ T8771]  ? do_raw_spin_unlock+0x4d/0x240
[  236.200148][ T8771]  filemap_fdatawrite+0x199/0x240
[  236.200163][ T8771]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  236.200229][ T8771]  ? do_raw_spin_unlock+0x4d/0x240
[  236.200248][ T8771]  f2fs_sync_dirty_inodes+0x31f/0x830
[  236.200275][ T8771]  f2fs_write_checkpoint+0x95a/0x1df0
[  236.200307][ T8771]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  236.200362][ T8771]  ? kill_f2fs_super+0x298/0x6c0
[  236.200380][ T8771]  kill_f2fs_super+0x2c3/0x6c0
[  236.200406][ T8771]  ? __pfx_kill_f2fs_super+0x10/0x10
[  236.200420][ T8771]  ? radix_tree_delete_item+0x2b6/0x400
[  236.200440][ T8771]  ? shrinker_free+0x2ce/0x3e0
[  236.200456][ T8771]  deactivate_locked_super+0xbc/0x130
[  236.200471][ T8771]  cleanup_mnt+0x425/0x4c0
[  236.200483][ T8771]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.200498][ T8771]  task_work_run+0x1d4/0x260
[  236.200517][ T8771]  ? __pfx_task_work_run+0x10/0x10
[  236.200530][ T8771]  ? __x64_sys_umount+0x122/0x160
[  236.200578][ T8771]  ? exit_to_user_mode_loop+0x40/0x110
[  236.200595][ T8771]  exit_to_user_mode_loop+0xec/0x110
[  236.200610][ T8771]  do_syscall_64+0x2bd/0x3b0
[  236.200624][ T8771]  ? lockdep_hardirqs_on+0x9c/0x150
[  236.200637][ T8771]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.200649][ T8771]  ? exc_page_fault+0x9f/0xf0
[  236.200664][ T8771]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  236.200674][ T8771] RIP: 0033:0x7f8caf98ff17
[  236.200684][ T8771] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  236.200693][ T8771] RSP: 002b:00007ffefd6ec958 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  236.200708][ T8771] RAX: 0000000000000000 RBX: 00007f8cafa11c05 RCX: 00007f8caf98ff17
[  236.200716][ T8771] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffefd6eca10
[  236.200722][ T8771] RBP: 00007ffefd6eca10 R08: 0000000000000000 R09: 0000000000000000
[  236.200729][ T8771] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffefd6edaa0
[  236.200736][ T8771] R13: 00007f8cafa11c05 R14: 0000000000039a35 R15: 00007ffefd6edae0
[  236.200758][ T8771]  </TASK>
[  236.202790][ T8771] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  236.459888][T10402] o2cb: This node has not been configured.
[  236.463126][T10402] o2cb: Cluster check failed. Fix errors before retrying.
[  236.466376][T10402] (syz.1.1629,10402,1):user_dlm_register:674 ERROR: status = -22
[  236.469755][T10402] (syz.1.1629,10402,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "bus"
[  236.554823][   T24] koneplus 0003:1E7D:2E22.0010: unknown main item tag 0x0
[  236.558091][   T24] koneplus 0003:1E7D:2E22.0010: unknown main item tag 0x0
[  236.561587][   T24] koneplus 0003:1E7D:2E22.0010: unknown main item tag 0x0
[  236.564934][   T24] koneplus 0003:1E7D:2E22.0010: unknown main item tag 0x0
[  236.568148][   T24] koneplus 0003:1E7D:2E22.0010: unknown main item tag 0x0
[  236.607050][   T24] koneplus 0003:1E7D:2E22.0010: hidraw0: USB HID v0.00 Device [HID 1e7d:2e22] on usb-dummy_hcd.3-1/input0
[  236.781942][ T6012] usb 4-1: USB disconnect, device number 24
[  238.651556][T10443] loop4: detected capacity change from 0 to 2048
[  238.669572][T10443] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  238.716747][ T8771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  238.986516][T10449] 8021q: adding VLAN 0 to HW filter on device bond1
[  239.555918][T10462] loop4: detected capacity change from 0 to 4096
[  239.559631][T10462] EXT4-fs: Ignoring removed nomblk_io_submit option
[  239.564806][T10462] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  239.570302][T10462] EXT4-fs (loop4): Test dummy encryption mode enabled
[  239.587849][T10462] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  239.609279][T10462] EXT4-fs: Ignoring removed nomblk_io_submit option
[  239.612239][T10462] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  239.622573][T10462] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  239.652981][ T8771] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.798561][ T6012] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  239.846691][T10469] loop3: detected capacity change from 0 to 512
[  239.867245][T10469] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  239.899434][ T6199] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  239.968772][ T6012] usb 2-1: Using ep0 maxpacket: 16
[  239.972809][ T6012] usb 2-1: config 8 has an invalid interface number: 223 but max is 0
[  239.980235][ T6012] usb 2-1: config 8 contains an unexpected descriptor of type 0x1, skipping
[  239.983791][ T6012] usb 2-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  239.999977][ T6012] usb 2-1: config 8 has no interface number 0
[  240.002644][ T6012] usb 2-1: config 8 interface 223 altsetting 2 bulk endpoint 0xC has invalid maxpacket 32
[  240.006621][ T6012] usb 2-1: config 8 interface 223 altsetting 2 endpoint 0x7 has invalid maxpacket 15872, setting to 64
[  240.020797][ T6012] usb 2-1: config 8 interface 223 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  240.036461][ T6012] usb 2-1: config 8 interface 223 has no altsetting 0
[  240.049345][ T6012] usb 2-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  240.053377][ T6012] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  240.056975][ T6012] usb 2-1: Product: syz
[  240.058964][ T6012] usb 2-1: Manufacturer: syz
[  240.060947][ T6012] usb 2-1: SerialNumber: syz
[  240.066136][T10464] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  240.157903][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  240.168455][   T33] audit: type=1326 audit(1755121611.751:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.3.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948878ebe9 code=0x7ffc0000
[  240.188937][   T33] audit: type=1326 audit(1755121611.761:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.3.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948878ebe9 code=0x7ffc0000
[  240.225552][   T33] audit: type=1326 audit(1755121611.761:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.3.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948878ebe9 code=0x7ffc0000
[  240.255997][   T33] audit: type=1326 audit(1755121611.761:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.3.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948878ebe9 code=0x7ffc0000
[  240.267435][   T33] audit: type=1326 audit(1755121611.761:157): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.3.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f948878ebe9 code=0x7ffc0000
[  240.272436][T10479] loop3: detected capacity change from 0 to 1024
[  240.293021][   T33] audit: type=1326 audit(1755121611.761:158): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.3.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f948878ebe9 code=0x7ffc0000
[  240.311965][ T6012] usb 2-1: USB disconnect, device number 29
[  240.314408][   T33] audit: type=1326 audit(1755121611.761:159): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.3.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f948878ebe9 code=0x7ffc0000
[  240.326311][   T33] audit: type=1326 audit(1755121611.761:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10476 comm="syz.3.1656" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f948878ebe9 code=0x7ffc0000
[  240.336953][T10479] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  240.423463][   T33] audit: type=1800 audit(1755121612.022:161): pid=10487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1657" name="file1" dev="loop3" ino=15 res=0 errno=0
[  240.493793][T10492] openvswitch: netlink: Missing valid actions attribute.
[  240.496254][T10492] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  240.570076][T10487] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1657: Allocating blocks 497-513 which overlap fs metadata
[  240.597851][T10491] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.1657: Allocating blocks 497-513 which overlap fs metadata
[  240.683143][T10500] hfs: can't find a HFS filesystem on dev nullb0
[  240.769680][T10504] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  240.846352][T10506] loop4: detected capacity change from 0 to 2048
[  240.855847][T10506] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  240.994641][T10510] loop1: detected capacity change from 0 to 1024
[  241.006460][T10510] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  241.124016][T10516] loop1: detected capacity change from 0 to 512
[  241.132241][T10516] EXT4-fs: Ignoring removed oldalloc option
[  241.159886][T10516] EXT4-fs (loop1): 1 truncate cleaned up
[  241.173987][T10516] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  241.215217][ T5944] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  241.615635][T10537] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1682'.
[  241.633933][T10537] bond0: entered promiscuous mode
[  241.636148][T10537] bond_slave_0: entered promiscuous mode
[  241.639594][T10537] bond_slave_1: entered promiscuous mode
[  241.643726][T10537] bond0: left promiscuous mode
[  241.645850][T10537] bond_slave_0: left promiscuous mode
[  241.651186][T10537] bond_slave_1: left promiscuous mode
[  241.783956][T10545] raw_sendmsg: syz.4.1686 forgot to set AF_INET. Fix it!
[  241.865853][T10549] tmpfs: Bad value for 'mpol'
[  241.879462][T10551] netlink: zone id is out of range
[  242.198788][T10561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  242.201850][T10561] IPv6: NLM_F_CREATE should be set when creating new route
[  242.211851][T10561] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  243.286083][T10491] EXT4-fs (loop3): pa ffff88802b45e2b8: logic 32, phys. 161, len 22
[  243.289755][T10491] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  243.338612][ T6199] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.816736][T10566] loop3: detected capacity change from 0 to 32768
[  243.830403][T10566] (syz.3.1695,10566,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  243.864065][T10566] (syz.3.1695,10566,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  243.891840][T10566] JBD2: Ignoring recovery information on journal
[  243.945877][T10566] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  244.022617][T10566] 
[  244.023699][T10566] ======================================================
[  244.026600][T10566] WARNING: possible circular locking dependency detected
[  244.029453][T10566] 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 Not tainted
[  244.032962][T10566] ------------------------------------------------------
[  244.035952][T10566] syz.3.1695/10566 is trying to acquire lock:
[  244.038609][T10566] ffff88803c476618 (sb_internal#7){.+.+}-{0:0}, at: ocfs2_acquire_dquot+0x455/0xb30
[  244.041773][T10566] 
[  244.041773][T10566] but task is already holding lock:
[  244.043394][T10590] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.044180][T10566] ffff888040435d60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x1e8/0x270
[  244.044210][T10566] 
[  244.044210][T10566] which lock already depends on the new lock.
[  244.044210][T10566] 
[  244.044214][T10566] 
[  244.044214][T10566] the existing dependency chain (in reverse order) is:
[  244.044218][T10566] 
[  244.044218][T10566] -> #6 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}:
[  244.044232][T10566]        lock_acquire+0x120/0x360
[  244.062106][T10566]        down_write+0x96/0x1f0
[  244.063719][T10566]        ocfs2_lock_global_qf+0x1e8/0x270
[  244.065561][T10566]        ocfs2_acquire_dquot+0x2b0/0xb30
[  244.067414][T10566]        dqget+0x7b1/0xf10
[  244.069012][T10566]        __dquot_initialize+0x3b3/0xcb0
[  244.070917][T10566]        ocfs2_get_init_inode+0x13b/0x1b0
[  244.072834][T10566]        ocfs2_mknod+0x863/0x2050
[  244.074776][T10566]        ocfs2_mkdir+0x191/0x440
[  244.076636][T10566]        vfs_mkdir+0x306/0x510
[  244.078267][T10566]        do_mkdirat+0x247/0x590
[  244.080292][T10566]        __x64_sys_mkdirat+0x87/0xa0
[  244.082411][T10566]        do_syscall_64+0xfa/0x3b0
[  244.084092][T10566]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.086205][T10566] 
[  244.086205][T10566] -> #5 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}:
[  244.089711][T10566]        lock_acquire+0x120/0x360
[  244.091545][T10566]        down_write+0x96/0x1f0
[  244.093137][T10566]        ocfs2_lock_global_qf+0x1ca/0x270
[  244.095182][T10566]        ocfs2_acquire_dquot+0x2b0/0xb30
[  244.097018][T10566]        dqget+0x7b1/0xf10
[  244.098511][T10566]        __dquot_initialize+0x3b3/0xcb0
[  244.100460][T10566]        ocfs2_get_init_inode+0x13b/0x1b0
[  244.102831][T10566]        ocfs2_mknod+0x863/0x2050
[  244.104998][T10566]        ocfs2_mkdir+0x191/0x440
[  244.106695][T10566]        vfs_mkdir+0x306/0x510
[  244.108357][T10566]        do_mkdirat+0x247/0x590
[  244.110032][T10566]        __x64_sys_mkdirat+0x87/0xa0
[  244.112035][T10566]        do_syscall_64+0xfa/0x3b0
[  244.113775][T10566]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.116026][T10566] 
[  244.116026][T10566] -> #4 (&dquot->dq_lock){+.+.}-{4:4}:
[  244.118630][T10566]        lock_acquire+0x120/0x360
[  244.120599][T10566]        __mutex_lock+0x187/0x1360
[  244.122705][T10566]        dqget+0x72a/0xf10
[  244.124702][T10566]        dquot_transfer+0x2f8/0x6d0
[  244.126801][T10566]        ext4_setattr+0x865/0x1bc0
[  244.128684][T10566]        notify_change+0xb36/0xe40
[  244.130463][T10566]        chown_common+0x40c/0x5c0
[  244.132295][T10566]        do_fchownat+0x161/0x270
[  244.134104][T10566]        __x64_sys_lchown+0x85/0xa0
[  244.136036][T10566]        do_syscall_64+0xfa/0x3b0
[  244.137830][T10566]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.140100][T10566] 
[  244.140100][T10566] -> #3 (&ei->xattr_sem){++++}-{4:4}:
[  244.142709][T10566]        lock_acquire+0x120/0x360
[  244.144747][T10566]        down_read+0x46/0x2e0
[  244.146729][T10566]        ext4_setattr+0x855/0x1bc0
[  244.148537][T10566]        notify_change+0xb36/0xe40
[  244.150230][T10566]        chown_common+0x40c/0x5c0
[  244.151929][T10566]        do_fchownat+0x161/0x270
[  244.153575][T10566]        __x64_sys_chown+0x82/0xa0
[  244.155523][T10566]        do_syscall_64+0xfa/0x3b0
[  244.157423][T10566]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.159962][T10566] 
[  244.159962][T10566] -> #2 (jbd2_handle){++++}-{0:0}:
[  244.162801][T10566]        lock_acquire+0x120/0x360
[  244.164823][T10566]        start_this_handle+0x1fa7/0x21c0
[  244.167263][T10566]        jbd2__journal_start+0x2c1/0x5b0
[  244.169512][T10566]        jbd2_journal_start+0x2a/0x40
[  244.171320][T10566]        ocfs2_start_trans+0x376/0x6d0
[  244.173161][T10566]        ocfs2_mknod+0xe93/0x2050
[  244.174900][T10566]        ocfs2_create+0x1a5/0x440
[  244.176689][T10566]        path_openat+0x14f4/0x3830
[  244.178419][T10566]        do_filp_open+0x1fa/0x410
[  244.180201][T10566]        do_sys_openat2+0x121/0x1c0
[  244.181968][T10566]        __x64_sys_openat+0x138/0x170
[  244.183776][T10566]        do_syscall_64+0xfa/0x3b0
[  244.185466][T10566]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.187955][T10566] 
[  244.187955][T10566] -> #1 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  244.191312][T10566]        lock_acquire+0x120/0x360
[  244.193020][T10566]        down_read+0x46/0x2e0
[  244.194642][T10566]        ocfs2_start_trans+0x36a/0x6d0
[  244.196467][T10566]        ocfs2_mknod+0xe93/0x2050
[  244.198209][T10566]        ocfs2_create+0x1a5/0x440
[  244.199888][T10566]        path_openat+0x14f4/0x3830
[  244.201586][T10566]        do_filp_open+0x1fa/0x410
[  244.203274][T10566]        do_sys_openat2+0x121/0x1c0
[  244.205162][T10566]        __x64_sys_openat+0x138/0x170
[  244.206916][T10566]        do_syscall_64+0xfa/0x3b0
[  244.208659][T10566]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.211261][T10566] 
[  244.211261][T10566] -> #0 (sb_internal#7){.+.+}-{0:0}:
[  244.213981][T10566]        validate_chain+0xb9b/0x2140
[  244.215701][T10566]        __lock_acquire+0xab9/0xd20
[  244.217557][T10566]        lock_acquire+0x120/0x360
[  244.219549][T10566]        ocfs2_start_trans+0x26b/0x6d0
[  244.221792][T10566]        ocfs2_acquire_dquot+0x455/0xb30
[  244.223706][T10566]        dqget+0x7b1/0xf10
[  244.225170][T10566]        __dquot_initialize+0x3b3/0xcb0
[  244.226984][T10566]        ocfs2_get_init_inode+0x13b/0x1b0
[  244.228891][T10566]        ocfs2_mknod+0x863/0x2050
[  244.230805][T10566]        ocfs2_mkdir+0x191/0x440
[  244.232976][T10566]        vfs_mkdir+0x306/0x510
[  244.234838][T10566]        do_mkdirat+0x247/0x590
[  244.236478][T10566]        __x64_sys_mkdirat+0x87/0xa0
[  244.238277][T10566]        do_syscall_64+0xfa/0x3b0
[  244.239963][T10566]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.242352][T10566] 
[  244.242352][T10566] other info that might help us debug this:
[  244.242352][T10566] 
[  244.245737][T10566] Chain exists of:
[  244.245737][T10566]   sb_internal#7 --> &ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE] --> &ocfs2_quota_ip_alloc_sem_key
[  244.245737][T10566] 
[  244.252224][T10566]  Possible unsafe locking scenario:
[  244.252224][T10566] 
[  244.255404][T10566]        CPU0                    CPU1
[  244.257530][T10566]        ----                    ----
[  244.259706][T10566]   lock(&ocfs2_quota_ip_alloc_sem_key);
[  244.262008][T10566]                                lock(&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]);
[  244.265730][T10566]                                lock(&ocfs2_quota_ip_alloc_sem_key);
[  244.268877][T10566]   rlock(sb_internal#7);
[  244.270573][T10566] 
[  244.270573][T10566]  *** DEADLOCK ***
[  244.270573][T10566] 
[  244.273842][T10566] 6 locks held by syz.3.1695/10566:
[  244.276026][T10566]  #0: ffff88803c476428 (sb_writers#32){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  244.279162][T10566]  #1: ffff888040431840 (&type->i_mutex_dir_key#23/1){+.+.}-{4:4}, at: filename_create+0x1f8/0x3c0
[  244.282658][T10566]  #2: ffff88810f3b1840 (&ocfs2_sysfile_lock_key[INODE_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  244.287200][T10566]  #3: ffff88803e5ae0a8 (&dquot->dq_lock){+.+.}-{4:4}, at: ocfs2_acquire_dquot+0x2a3/0xb30
[  244.290551][T10566]  #4: ffff8880404360c0 (&ocfs2_sysfile_lock_key[USER_QUOTA_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_lock_global_qf+0x1ca/0x270
[  244.294815][T10566]  #5: ffff888040435d60 (&ocfs2_quota_ip_alloc_sem_key){++++}-{4:4}, at: ocfs2_lock_global_qf+0x1e8/0x270
[  244.299331][T10566] 
[  244.299331][T10566] stack backtrace:
[  244.301735][T10566] CPU: 0 UID: 0 PID: 10566 Comm: syz.3.1695 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  244.301759][T10566] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  244.301769][T10566] Call Trace:
[  244.301781][T10566]  <TASK>
[  244.301791][T10566]  dump_stack_lvl+0x189/0x250
[  244.301812][T10566]  ? __pfx_dump_stack_lvl+0x10/0x10
[  244.301826][T10566]  ? __pfx__printk+0x10/0x10
[  244.301844][T10566]  ? print_lock_name+0xde/0x100
[  244.301864][T10566]  print_circular_bug+0x2ee/0x310
[  244.301882][T10566]  check_noncircular+0x134/0x160
[  244.301898][T10566]  validate_chain+0xb9b/0x2140
[  244.301917][T10566]  __lock_acquire+0xab9/0xd20
[  244.301941][T10566]  ? ocfs2_acquire_dquot+0x455/0xb30
[  244.301957][T10566]  lock_acquire+0x120/0x360
[  244.301976][T10566]  ? ocfs2_acquire_dquot+0x455/0xb30
[  244.301990][T10566]  ? do_raw_spin_unlock+0x4d/0x240
[  244.302004][T10566]  ocfs2_start_trans+0x26b/0x6d0
[  244.302018][T10566]  ? ocfs2_acquire_dquot+0x455/0xb30
[  244.302030][T10566]  ? __pfx_ocfs2_start_trans+0x10/0x10
[  244.302039][T10566]  ? do_raw_spin_unlock+0x4d/0x240
[  244.302050][T10566]  ? _raw_spin_unlock+0x28/0x50
[  244.302060][T10566]  ? ocfs2_qinfo_unlock+0x121/0x150
[  244.302072][T10566]  ocfs2_acquire_dquot+0x455/0xb30
[  244.302086][T10566]  ? __pfx_ocfs2_acquire_dquot+0x10/0x10
[  244.302098][T10566]  dqget+0x7b1/0xf10
[  244.302113][T10566]  __dquot_initialize+0x3b3/0xcb0
[  244.302127][T10566]  ? __pfx___dquot_initialize+0x10/0x10
[  244.302139][T10566]  ? do_raw_spin_unlock+0x4d/0x240
[  244.302155][T10566]  ? from_vfsgid+0x72/0xa0
[  244.302172][T10566]  ? inode_init_owner+0x1ee/0x3a0
[  244.302190][T10566]  ocfs2_get_init_inode+0x13b/0x1b0
[  244.302209][T10566]  ? __pfx_ocfs2_get_init_inode+0x10/0x10
[  244.302229][T10566]  ocfs2_mknod+0x863/0x2050
[  244.302253][T10566]  ? __pfx_ocfs2_mknod+0x10/0x10
[  244.302275][T10566]  ? do_raw_spin_unlock+0x4d/0x240
[  244.302305][T10566]  ? ocfs2_inode_lock_full_nested+0xabe/0x1b40
[  244.302334][T10566]  ? __lock_acquire+0xab9/0xd20
[  244.302362][T10566]  ? __lock_acquire+0xab9/0xd20
[  244.302385][T10566]  ? do_raw_spin_lock+0x121/0x290
[  244.302404][T10566]  ? do_raw_spin_unlock+0x4d/0x240
[  244.302424][T10566]  ? put_pid+0xe9/0x130
[  244.302445][T10566]  ocfs2_mkdir+0x191/0x440
[  244.302462][T10566]  ? __pfx_from_kgid+0x10/0x10
[  244.302476][T10566]  ? apparmor_path_mkdir+0x1a7/0x220
[  244.302489][T10566]  ? __pfx_ocfs2_mkdir+0x10/0x10
[  244.302538][T10566]  ? HAS_UNMAPPED_ID+0x11a/0x180
[  244.302553][T10566]  ? inode_permission+0x149/0x470
[  244.302566][T10566]  ? __pfx_ocfs2_permission+0x10/0x10
[  244.302582][T10566]  ? bpf_lsm_inode_mkdir+0x9/0x20
[  244.302594][T10566]  vfs_mkdir+0x306/0x510
[  244.302609][T10566]  do_mkdirat+0x247/0x590
[  244.302622][T10566]  ? __pfx_do_mkdirat+0x10/0x10
[  244.302636][T10566]  ? getname_flags+0x1e5/0x540
[  244.302645][T10566]  __x64_sys_mkdirat+0x87/0xa0
[  244.302656][T10566]  do_syscall_64+0xfa/0x3b0
[  244.302669][T10566]  ? lockdep_hardirqs_on+0x9c/0x150
[  244.302679][T10566]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.302693][T10566]  ? exc_page_fault+0x9f/0xf0
[  244.302707][T10566]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  244.302719][T10566] RIP: 0033:0x7f948878d457
[  244.302731][T10566] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  244.302743][T10566] RSP: 002b:00007f9489529e68 EFLAGS: 00000246 ORIG_RAX: 0000000000000102
[  244.302757][T10566] RAX: ffffffffffffffda RBX: 00007f9489529ef0 RCX: 00007f948878d457
[  244.302768][T10566] RDX: 00000000000001ff RSI: 0000200000000100 RDI: 00000000ffffff9c
[  244.302777][T10566] RBP: 0000000000000000 R08: 0000200000000240 R09: 0000000000000000
[  244.302788][T10566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000100
[  244.302801][T10566] R13: 00007f9489529eb0 R14: 0000000000000000 R15: 0000000000000000
[  244.302816][T10566]  </TASK>
[  244.518716][ T6199] ocfs2: Unmounting device (7,3) on (node local)

VM DIAGNOSIS:
21:03:57  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000069 RBX=0000000000000069 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000003115 RDI=0000000000003116 RBP=00000000000003f8 RSP=ffffc90008af6a30
R8 =ffff888106990237 R9 =1ffff11020d32046 R10=dffffc0000000000 R11=ffffffff854e6de0
R12=dffffc0000000000 R13=ffffffff99af18fe R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e6e5c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f948952a6c0 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055555f31c808 CR3=0000000118ce2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fcf16812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=ffffffff8fc105f0 RCX=ffffffff8fc105f8 RDX=ffffffff9041eb8e
RSI=ffffffff9041eb5e RDI=ffffffff8be325a0 RBP=dffffc0000000000 RSP=ffffc90008b57868
R8 =0000000000000016 R9 =0000000000000000 R10=ffffc90008b579b8 R11=ffffffff81ac3890
R12=ffffffff9041eb92 R13=ffffffff9041eb93 R14=ffffc90008b57968 R15=ffffffff8fc105f4
RIP=ffffffff810014b0 RFL=00000806 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f66c34dc020 CR3=000000010aa7a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000ffffff00 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
