last executing test programs:

2m21.564457289s ago: executing program 1 (id=488):
syz_mount_image$exfat(&(0x7f0000000240), &(0x7f0000000100)='./file1\x00', 0x3000cd0, &(0x7f0000000140)=ANY=[], 0x1, 0x1519, &(0x7f00000023c0)="$eJzs3Au0TuX2MPA5n+dZbHJ5k9zXfObiTS4PSRJKkkuSJCG5JyRJkiSJTUgSkpDrTnLdIfe003a/X3JP2jmSJAkJCc83tupzOqdG/3P5f8539vyNsYZnvmvN+c5ljne/a60x9v6m27AajWtWbcDM8M/Qvy7w538SASABAAYCQE4ACACgXK5yudL3Z9GY+E+9ifhf0nDGle5AXEky/4xN5p+xyfwzNpl/xibzz9hk/hmbzD9jk/kLkaEl579atoy7yfP//8+pfyVZvv8zBPyjHTL//zb6Hzpa5p+xyfwzNpl/xibzz3gu34IFV7QPceXJ5z9jk/kLkaH9258prz97pZ9py/YPbEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxP8DZ/1lBgB+XV/pvoQQQgghhBBCCPHv49+70h0IIYQQQgghhBDifx+CAg0GAsgEmSEBskBWuAqyQXbIATkhBldDLrgGcsO1kAfyQj7IDwWgIBSCEAgsMERQGIpAHK6DonA9FIPiUAJKgoNSUBpugDJwI5SFm6Ac3Azl4RaoABUvvWe626EK3AFV4U6oBtWhBtSEu6AW3A214R6oA/dCXbgP6sH9UB8egAbQEBrBg9AYHoIm0BSaQXNoAS2h1Z/kJ+X8vfznoSe8AL2gNyRCH+gLL0I/6A8D4CUYCC/DIHgFBsOrMASGwjB4DYbD6zAC3oCRMApGw5swBsbCOBgPE2AiJMFbMAnehsnwzkPZYSpMg+kwA2ZCMrwLs2A2zIH3YC7Mg/mQlGUhLILF8D4sgQ8gBT6EpfARpMIyWA4rYCWsgtWwBtbCOlgPG2AjbILNsAW2wsewDbbDDtgJu2A37IFPYC98CvvgM0jDz//B/DO/zYfuCAioUKFBg5kwEyZgAmbFrJgNs2EOzIExjGEuzIW5MTfmwTyYD/NhIhbAQlgICQkZGQtjYYxjHItiUSyGxbAElkCHDktjaSyDF7z3ZbEclsPyWB4rYEWsiLfirVgZK2MVrIJVsSpWw2pYA2vgXXgX3o21sTbWwTpYF+tiPayH9bE+NsAG2AgbYWNsjE2wCTbDZtgCW2ArbIWtsTW2wTbYDtthe2yPHbADdsSO2Ak7YWfsjF2wC3bFrtgNu2F3fA6fw+fxeXwBX8DeWE31wb7YF/thPxyAL+FL+DIOwlfwFXwVh+BQHIav4Wv4Oo7A0zgSR+FoHI2V1Vgch+OR1URMwiTMDJNwMk7GKTgVp+J0nIEzMRmTcRbOxtn4Hs7FeTgPF+ACXISLcTEuwQ8wBVNwKZ7BVFyGy3EFrsRVuBLX4Fpcg+txA67HTbgJt+AW/Bg/xu24HXfiTtyNu/ET/AQ/xU9xCKZhGu7H/XgAD+BBPIiH8BAexsN4BI/gUTyKx/AYHscTeBJP4Ck8hafxDJ4FgHN4Ds/jebyIF9M//CqdUUZlUplUgkpQWVVWlU1lUzlUDhVTMZVL5VK5VW6VR+VR+VQ+VUAVUIVUIUWKFKtIFVaFVVzFVVFVVBVTxVQJVUI55VRpVVqVUWVUWVVWlVM3q/LqFlVBVVRt3a3qVlVZtXNV1B2qqqqqqqnqqoaqqWqqWqqWqq1qqzqqjqqr6qp66n5VX/XBAdhQpU+msRqKTdQwbKaaqxaqpXodH1at1Qhso9qqdupRNQpHYgfV2nVUT6hOahx2Vk+p8fi06qomYjf1rOqunlM91POqp2rjeqneagr2UX3VdOyn+qsB6iU1C6ur9InVUK+q5zMPVcPUa2oRvq5GqDfUSDVKjVZvqjFqrBqnxqsJaqJKUm+pSeptNVm9o6aoqWqamq5mqJkqWb2rZqnZao56T81V8zSoBWqhWqQWq/fVEvWBSlEfqqXqI5WqlqnlaoVaqVap1WqNWqvWqfVqg9qoNqnNaovaqj5W29R2tUPtVLvUbrVHfaL2qk/VPvWZSlOfq/3qL+qA+kIdVF+qQ+ordVh9rY6ob9RR9a06pr5Tx9UJdVJ9r06pH9RpdUadVT+qc+ondV5dUBeVV6BRK6210YHOpDPrBJ1FZ9VX6Ww6u86hc+qYvlrn0tfo3PpanUfn1flMfl1AF9SFdKhJW8060oV1ER3X1+mi+npdTBfXJXRJ7XQpXVrfoMvoG3VZfZMup2/W5fUtuoKuqCt50Lfpyvp2XUXfoavqO3U1XV3X0DX1XbqWvlvX1vfoOvpeXVffp+vp+3V9/YBuoBvqRvpB3Vg/pJvoprqZbq5b6Ja6lX5Yt9aP6Da6rW6nH9Xt9WO6g35cd9RP6E76Sd1ZP6W76Kd1V/2M7qaf1d31c7qHvqAvaq976d46UffRffWLup/urwfol/RA/bIepF/Rg/Wreogeqofp1/Rw/boeod/QI/UoPVq/qcfosXqcHq8n6Ik6Sb+lJ+m39WT9jp6ip+pperqeoWfqAb9UmvM/yH/7d/IHX3r3LXqr/lhv09v1Dr1T79K79R69R+/Ve/U+vU+n6TS9X+/XB/QBfVAf1If0IX1YH9ZH9BF9VB/Vx/QxfVyf0D/q7/Up/YM+rc/oM/pHfU6f0+d/+T8Ag0YZbYwJTCaT2SSYLCarucpkM9lNDpPTxMzVJpe5xuQ215o8Jq/JZ/KbAqagKWRCQ8YaNpEpbIqYuLnOFDXXm2KmuClhShpnSpnS5oZ/Of/P+mtlWpnWprVpY9qYdqadaW/amw6mg+loOppOppPpbDqbLqaL6Wq6mm6mm+luupsepofpaXqaXqaXSTSJpq950fQz/c0A85IZaF42g8wgM9gMNkPMEDPMDDPDzXAzwowwI81IM9qMNmPMGDPOjDMTzAST5HOaSWaSmWwmmylmipk2MKeZYWaYZJNsZplZZo6ZY+aauWa+mW8WmoVmsVlslpglJsWkmKVmqUk1y8wys8KsMKvMKrPGrDHrzDqzwWwwm8wmk2q2mq1mm9lmdpgdZpfZZfaYPWav2Wv2mX0mzaSZ/Wa/OWAOmIPmoDlkDpnD5rA5Yo6Yo+aoOWaOmePmuDlpTppT5pQ5bU6bs+asOWfOmfPmvLloLqZf9gUqUIEJTJApyBQkBAlB1iBrkC3IFuQIcgSxIBbkCnIFuYNrgzxB3iBfkD8oEBQMCgVhQIENOIiCwkGRIB5cFxQNrg+KBcWDEkHJwAWlgtLBDUGZ4MagbHBTUC64OSgf3BJUCCoGlYJbg9uCysHtQZXgjqBqcGdQLage1AhqBncFtYK7g9rBPUGd4N6gbnBfUC+4P6gfPBA0CBoGjYIHg8bBQ0GToGnQLGgetAhaBq3+rfW9P533Edcr7B0mhn3CvuGLYb+wfzggfCkcGL4cDgpfCQeHr4ZDwqHhsPC1cHj4ejgifCMcGY4KR4dvhmPCseG4cHw4IZwYJoVvhZPCt8PJ4TvhlHBqOC2YHs4IZ4bJ4bvhrHB2OCd8L5wbzgvnhwvCheGiEH++JIaU8MNwafhRmBouC5eHK8KV4apwdbgmXBuuC9eHG8KN4aZyg34+NNwWbg93hDvDXeHucE/4Sbg3/DTcF34WpoWfh/vDv4QHwi/Cg+GX4aHwq/Bw+HV4JPwmPBp+Gx4LvwuPhyfCk+H34anwh/B0eCY8G/4Yngt/Cs+HF8KLoU+/uE//eidDhjJRJkqgBMpKWSkbZaMclINiFKNclItyU27KQ3koH+WjAlSACmUuROmYmApTYYpTnIpSUSpGxagElSBHjkpTaSpDZagslaVyVI7KU3mqQBWoElWi2+g2up1upzvoDrqT7qTqVJ1qUk2qRbWoNtWmOlSH6lJdqkf1qD7VpwbUgBpRI2pMjakJNaFm1IxaUAtqRa2oNbWmNtSG2lE7ak/tqQN1oI7UkTpRJ+pMnakLdaGu1JW6UTfqTt2pB/WgntSTelEvSqRE6kt9qR/1owE0gAbSQBpEg2gwDaYhNISG0TAaTsNpBI2gkTSKRtObNIbG0jgaTxNoIiVREk2iSTSZJtMUmkLTaBrNoBmUTMk0i2bRHJpDc2kuzaf5tJAW0mJaTEtoCaVQCi2lpZRKqbScltNKWkmraTWtpbW0ntbTRtpIm2kzbaWttI220Q7aQbtoF+2hPbSX9tI+2kdplEb7aT8doAN0kA7SITpEh+kwHaEjdJSO0jE6RsfpOJ2kk3SKTtFpOk1n6Sydo5/oPF2gi+QpwWaxWe1VNpvNbnPYnPZv43w2vy1gC9pCNrR5bN7fxGStLWaL2xK2pHW2lC1tb/i7uIKtaCvZW+1ttrK93VaxFWwW+Ou4lr3b1rb32Dr2XlvT3vWbuK69z9azD9n6tqltYJvbRralbWwfsk1sU9vMNrctbEvb3j5mO9jHbUf7REIn++RfxzY9XmI/sGvtOrvebrB77af2rP3RHrHf2HP2J9vL9rYD7ct2kH3FDrav2iF26G9jADvavmnH2LF2nB1vJ9iJfxdPs9PtDDvTJtt37Sw7++/ixfZ9O9em2Pl2gV1oF12K03tKsR/apfYjm2qX2eV2hV1pV9nVds3/7XWF3WQ32y12j/3EbrPb7Q670+6yuy/F6eexz35m0+zn9rD92h6wX9iD9qg9ZL+6FKef31H7rT1mv7PH7Yk+YL+3p+wP9rQ9c+n808/9e3vBXrTeAiMr1mw44EycmRM4C2flqzgbZ+ccnJNjfDXn4ms4N1/LeTgv5+P8XIALciEOmdgyc8SFuQjH+TouytdzMS7OJbgkOy7FpfkGLsM3clm+icvxzVyeb+EKXJEr8a18G1fm27kK38FV+U6uxtW5Btfku7gW3821+R6uw/dyXb6P6/H9XJ8f4AbckBvxg9yYH+Im3JSbcXNuwS25FT/MrfkRbsNtuR0/yu35Me7Aj3NHfoI78ZPcmZ/iLvw0d+VnuBs/y935Oe7Bz3NPfoF7cW9O5D7cl1/kftyfB/BLPJBf5kH8Cg/mV3kID+Vh/BoP59d5BL/BI3kUj+Y3eQyP5XE8nifwRE7it3gSv82T+R2ewlN5Gk/nGTyTk/ldnsWzeQ6/x3N5Hs/nBbyQF/Fifp+X8Aecwh/yUv6IU3kZL+cVvJJX8Wpew2t5Ha/nDbyRN/Fm3sJb+WPextt5B+/kXbyb9/AnvJc/5X38Gafx57yf/8IH+As+yF/yIf6KD/PXfIS/4aP8LR/j7/g4n+CT/D2f4h/4NJ/hs/wjn+Of+Dxf4IvsGSKMVKQjEwVRpihzlBBlibJGV0XZouxRjihnFIuujnJF10S5o2ujPFHeKF+UPyoQFYwKRWFEkY04iqLCUZEoHl0XFY2uj4pFxaMSUcnIRaWi0tENUZnoxqhsdFNULro5Kh/dElWIKkaVoluj26LK0e1RleiOqGp0Z1Qtqh7ViGpGd0W1oruj2tE9UZ3o3qhsdF9UL7o/qh89EDWIGkaNogejxtFDUZOoadQsah61iFpGraKHo9bRI1GbqG3ULno0ah89FnWIHo86Rk9EnaInL+8vHvz8bfo3+xOjPpH+5QnZPXphfFF8cfz9+JL4B/GU+IfxpfGP4qnxZfHl8RXxlfFV8dXxNfG18XXx9fEN8Y3xTfHN8S1x72tmBofpN8JgXOAyucwuwWVxWd1VLpvL7nK4nC7mrna53DUut7vW5XF5XT6X3xVwBV0hFzpy1rGLXGFXxMXdda6ou94Vc8VdCVfSOVfKlXYtXSvXyrV2j7g2rq1r5x51j7rH3GPu8YRfGned3VOui3vadXXPuGfcs667e871cM+7nu4F18v1doku0fV1fV0/188NcAPcQDfQDXKD3GA32A1xQ9wwN8wNd8PdCDfCjXQj3Wg32o1xY9w4N85NcBNckktyk9wkN9lNdlPcFDfNTXMz3AyX7JLdLDfLzXFz3Fw31813891Ct9AtdovdErfEpbgUt9Qtdaku1S13y91Kt9KtdqvdWrfWrXfr3Ua30W12m91Wt9Vtc9vcDrfD7XK73B63x+11e90+t8+luTS33+13B9wBd9B96Q65r9xh97U74r5xR9237pj7zh13J9xJ5/Up94M77c64s+5Hd8795M67C+6i8y4p9lZsUuzt2OTYO7EpsamxabHpsRmxmbHk2LuxWbHZsTmx92JzY/Ni82MLYgtji2KLY+/HlsQ+iKXEPowtjX0US40tiy2PrYitjK2KeV9wW+QL+yI+7q/zRf31vpgv7kv4kt75Ur60v8GX8Tf6sv4mX87f7Mv7W3wFX9FX8k19M9/ct/AtfSv/sG/tH/FtfFvfzj/q2/vHfAf/uO/on/Cd/JO+s3/Kd/FP+67+Gd/NPzvvlyn7nv4F38v39om+j+/rX/T9fH8/wAd+oH/ZD/Kv+MH+VT/ED/XD/Gt+uH/dj/Bv+JF+lB/t3/Rj/Fg/zo/3E/xEn+Tf8pP8236yf8dP8VP9ND/dz/AzfbJ/18/ys/0c/56f6+f5+X6BX+gX+cX+fb/Ef+BT/Id+qf/Ip/plfrlf4Vf6VX61X+PX+nV+vd/gN/pNfrPf4rf6j/02v93v8Dv9Lr/b7/Gf+L3+U7/Pf+bT/Od+v/+LP+C/8Af9l/6Q/8of9l/7I/4bf9R/64/57/xxf8Kf9N/7U/4Hf9qf8Wf9j/6c/8mf9xf8RfmdNSGEEEKI/xH9J/v7/M5r6pctXV8AyL49/6G/rbkxz8/r/mpvpxgAPNG7W8NftkzQMDEx8ZdjUzUERRYAQOxyfia4HC+DdvAYdIS2UOZ3++uvKl267vur+g0b/k39+M0AWQGy/JqTfnv0a3y5/o1/UL/p+/yH9ZdBqkaILwAoVuRyTnrhX+PL9cv+Qf3d7f+4/qX+s3yRBNDmr3KyweX4cv3S8Ag8CR1/c6QQQgghhBBCCPGz/upc9z+5/7x0f17A/Dbv1/jP7s//RJV/tX8hhBBCCCGEEEL8uaef6/H4wx07tu3y37zI/J/Rxn/AAgHgP6CN31tk+U9tLIMurvRPJiGEEEIIIcS/2+WL/ivdiRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIkXH9838hTP32lQQA+IODr/Q5CiGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEFfa/wkAAP//LqFRhw==")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x82400, 0x184)
lseek(r0, 0x12, 0x1)
getdents(r0, 0x0, 0x40)

2m21.488534839s ago: executing program 1 (id=491):
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x20440, 0x0)
ioctl$RTC_PIE_ON(r0, 0x7005)
ioctl$RTC_IRQP_SET(r0, 0x4008700c, 0xe24)

2m21.424775497s ago: executing program 1 (id=494):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000100)={'syztnl2\x00', 0x0, 0x2f00, 0x0, 0x0, 0x2000006, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @broadcast, @multicast1}}}})

2m21.374115783s ago: executing program 1 (id=496):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000240)='./file0\x00', 0x8c0, &(0x7f0000000280)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c6c6f63616c666c6f636b732c696e74722c6e6f61636c2c001967b9b8a6cdd636d75428f2c5e8054d01858eef552755576e749526b36860cf2511040d1ce5a743ffd83d29d1ba3a54a59d8c7aa249f08d3c8c6d04ac105d67934db6190d59f2323b55a5a4", @ANYRESOCT], 0x1, 0x4441, &(0x7f0000010200)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0xa8)
open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
ioctl$FITRIM(r0, 0x40046f01, &(0x7f0000000500)={0x7fffffff, 0x2, 0x401})

2m21.138196872s ago: executing program 1 (id=502):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockname(r0, 0x0, &(0x7f0000000640))

2m20.661893129s ago: executing program 1 (id=507):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r1, @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008002)

2m20.555065961s ago: executing program 32 (id=507):
socket$nl_route(0x10, 0x3, 0x0)
socket(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bond0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r1, @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4008002)

12.408234138s ago: executing program 0 (id=2033):
r0 = semget$private(0x0, 0x6, 0x0)
semtimedop(r0, &(0x7f00000003c0)=[{0x0, 0x1}, {0x2, 0x4, 0x1800}], 0x2, 0x0)
semop(r0, &(0x7f00000000c0)=[{0x4}, {0x2}], 0x2)
semop(r0, &(0x7f0000001240)=[{}, {0x0, 0x0, 0x2000}], 0x2)
semctl$IPC_RMID(r0, 0x0, 0x0)

12.28684338s ago: executing program 0 (id=2034):
r0 = syz_open_dev$sndpcmc(&(0x7f0000000480), 0x1, 0x0)
ioctl$SNDRV_PCM_IOCTL_HW_REFINE_OLD(r0, 0xc1004110, &(0x7f0000000000)={0x0, [0x6, 0xffff133a, 0x3], [{0x0, 0x3ff, 0x0, 0x1}, {0x35, 0x35}, {0x0, 0x7}, {0xffffffff}, {0xfffffffc}, {}, {}, {0xffffffff}, {}, {}, {}, {0x100}], 0x2})
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40002000, 0x0)
write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x15)
r1 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000200)=ANY=[@ANYBLOB="1201410130f56920ac05190272f00102030109021b000100001000090455070103490200090582030004"], 0x0)
syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00N\b'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x40, &(0x7f0000000080)=ANY=[])
ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x90009427, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)

10.425239587s ago: executing program 0 (id=2045):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000001c0)={<r1=>0x0, 0x38, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0xfffffff6, @private0, 0x9}, @in6={0xa, 0x4e23, 0x5, @local, 0x1}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000500)={r1, 0xf, 0xe, 0x100, 0x2, 0xc}, &(0x7f0000000540)=0x14)

10.306344589s ago: executing program 0 (id=2047):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f00000041c0)={0x2020, 0x0, <r1=>0x0, <r2=>0x0}, 0x2020)
syz_fuse_handle_req(r0, &(0x7f0000006280)="897c6500ff3035465c7acb4e06980b05687c1480c7aafe631c0543db2bf0d6f539506e8782da06c1ca018774d72e9e5a3418ab66ee78dad68457b17ec9d47bf7d8272d607c1c0a4bd906f0cee7f8451828d2458596bdd6a459ba18ebaf61b38f5d66c27fa8a024ad7832a85e58689a4c254c94cbcf7208fce6e61d9566459789d15a6f91dd7db7c54cc3a94da956fb290a8a15f849270bc459d9d9f47801be86dd5c9d18382081a993b7bfde5c28adca4c71329afd6be743b076033b5859891703eb65fa256d6f47450b6edacbd05a9bd8b372e90cfc30f32826566dac6c48e6ef001881cbc30482f9ec469e476a101da496b8c0785eaf875d3608b0c49e9d39baaa1041f903a805f0f24aa63722fa2d87b98595fa5cfaf8b79c458de43ee39904e7cac7540a934b4108957785d58807abff186949f1b94cd21b724aff34ac45c7066dcdbd68ea7b766af9d045cd7fafeafc5c5a0c3400ef4e0c71a6fdd5b8d68a6f317644cda9d2fd2c839a82b97b3d909b54c672227bef573c9de1991d65a63017f724d1f7f1575e69db53318a7fd7065b303e751518c8eef04f642dbd4dfa349040a7b5401050ffc2b4ef62803a7c8eaba99e011dfac24d81b2b61e0b0581e53bf520f623eca17f0545c5e59ff15b527475f970f589894ae589145fa4283f7225088ccfeba1d72e9128f8c223ae1840f2edae3dbcdf7e560d5cdf4f71c9ada1931c0f8312c000101b264aaddb9fab166ba8d8903d6098eca20935ca607ea79e936798b3dfb22a7e159abb234cf21f3733dbf263a8ff116092f251659108892b2e21e1b428fd225096a5040270b2d70347013eaa1fd8e452942200283aab092c4ffc5b8b427b5d691a5a773e09da20539ff0f8214331c5d84107ae8a59aeb58efe22d7a079e446f1dfb07510377799bfdc7ee59cabcd76af0fe8a427ac8258ff33bbad5a8061f1cfdfbf375d73d676cc7916d6658ce46a0b17ad6350150f98e3512b513e25ca73f5f5df0a1fb9582ace7906c493fe1fd2889d9aac0b7c29c2b6c205537627bad64df433336a5ace32ca871e51b4dab0fbb00886a1fa81a98b74de0a26cebf65723515ebb807fc3c161ed42d1a7b6b55717613577ea437f3a2967c66ce45ff85a6a35b7cd40625fc575b107d7394e3d2db51d58347276c33e21f50b5a6b5672bf9fda63139bb75aead1fe4ee9a4064af5a5958466aa39faa6d821489fa415224c8d69d3b5922236832c2b1e4f6b8863b32f9aea83fb522a2de081d674502b48f73ce6db98d84136059b4a6676bc85ac6b7626329afa9bc7d3f9f2caa3c4d872744e0a8e02d72a75c6c545b8ec8e15b6fb0fe4185bd0d154960e6fef05ba40e5fe2968eb1301dcc52a03337179e74ba1522af93d77827845f8941c69ed8bb84567e3c63f1cc378a542f1de7007b688ff0a9c69d5861f0b85402c30a2fd391c52bafbe65f8e82135fd38361d7c0b43c982b2f3e7cb09c40c7e215114f4243d670cd576bcd93c1e959345170c75d6c3cf89cf8c2c70dc792e646e7c649d4c5f36bb016c7acd466ad58473d40dfef36394e581065a8581ab852250403cf372ac0065bf757fa3f445424ac0d82aec1938a2ea116bdfd306baa1cb06c62a4a97d66ab1b9489469cb8ba842da12e310caed02c5ef05c0be1e1e8c9c8b87d6871c94c57d164d08672b205c948086a06a545b266b7ad902a908681eb188bc51b6190b5cb9d8ca59b8c4c6e7369c00d6f6119fd5d437239e3d3c89cb81e09e560fb817590106015f08e7b09f1e1e65bfab3b8489fa058e24081978b9e25463d9945bfbca81c08885d4b6d4c62e217bd9e19460762f36c66bc948fe31cde089626fbb310e3c78a8d3f2eac21d374d9b58d887235d3a95721168e4b9475849071d60ecfe7ea5d6c4bf60da3747612ef59bb651270f326c0af31bc8c71361f851de34ccb3c8071b96f1128d7ee79b41246e566edd0272dbd3ccfe472b38e5e03d3ef83218bd498e6de8b4d92cb6f82716449ede7ba845028eccdb9137be8a622ac88ac53118fbc39637fa7a93cd3abc6f7671c7804420d66e94720acbcac916950f9baca77fef4217155ccc2cd0507339a0486f9f468eb28772986ee768c63eba671bf8c52e48a2a5dc2cc24fe925368706c2d712dd1064692b0fb2a32ddfbd4a0ffcf9c2abcedaae6e527bc1d42637aff2a275b76a7a7f010e42e1cc1d27141f6c3585a2bf58c6c5789ce61551d10118a000e3764631ec0b7f4b1a6f22a678133a30940b79dc76f863dd9f6e0d7776300898c97cef286c731c2050928c492439256e481652bff0d202db3cfdc54c9816ceea7895357bfa0362fad79afd09ed55189294d6ead7e898ac091cddbe7efcedb314bc02a18dd5bbddc42e089124758bb491fd1536aab27c5c124567bc325e7028bced5a179a011d1cb9a5ffb61d7af863e91ec8e60495561188b74d158ba1418228d44e92915a22eb1c166ef7d6179e84381ed950ffd747f13e24172942d922ca3109fb8b1e4e6264fa4a4eec75ad0d0e22579d90f45d6cd157300e38ae665eb56457202e25a8dd5877ba99725de288660badd2704345d9bad208c903ba27ea167dd45a77f77b6502b525b2973270582858183c784c324c1366fbba8d410c38bf75b41e067f6a9a017c56595161db4fc5639393fdafb1f148d3f416c1adc5fe1ab9cebe4689855c9b4bda6dcba5d5fa858a1b87d2ad23cdf54dbdf4d14aa4462da0b6f1107f4afa0091c2643508861a4d9f133ba77751941bb8fb756abf1a104205b80d47a3b4a59724d959c8b5833da4f56fb6613231f230a9378c9af741e94fd2c7213ac1d7625559b3f032f6c8df3ab441929720fe43d7c548cc661eed5b3c62b3c61f538ea3228376e2a18c6da2ad906322f64fb4865cde8e1889a8e5237fd6a39bbd6662f1dedc22fbd74e4376fa610cd710703dbd3924a38beae69783d1d5abf36122cbb87129ba719042748f060f4303a3199c5891c5040fd8cdb9761b006bf64cdcb65e5cc50a29994b8c1c34b83760ece12ed9ed7c3d2a7f8911cdf23a1afe0d7db1bf342aa0123dd5cd31339f5c8e160c4efef882602b3eccbe76fb690162b8bfb8a31910bcdf9a4a5dde76c2ac2fcd8678add7a000cfdcab398eb2171c026313eb6eb56b4b87bf8ef93f7f8a1c0bcc3775b681d4229ea561cb52281d8ba4315c3694ed08433596884d5a7ce3a8b1f82359846b7136726e2fe37bf4f7b7e2206cdcdb0705ced9f0dcaaa2ed3a78ea70d2cfeab668eb321400fc955e9aeb7bbcf86cd03f02dd443503a1480d9d9f899f53bd747a95293786798fc59fceb09e686a9328da4f929b6201841bbbefaffcf3386abdf69540e3b46a643ec10f0acf21f27c0053dc13f18485dbc898729dfbeaaa4887b58cd442d7ffa941808cd9658595be8650a815b088621278d89f0d8a4252566b923df3a3cd65c0e4af08fad385927251b31d35f75eaf25e6cf13a579aeeb0bcc0a14ca4a20a6831d532be0b2af3821792a2df95131b7fafef245aa19b214053342aa820c35858d13f84e496294529411015c41ed447b5b51dc44a45d52552a2be1abfc157f3ace7bfa32d5b931421d5a152dd66b7bf549311b08325e5a7201f793037b38990bedeca8a647c08d2478670f8fc2b4e8983ea18bcd514daeeeeb9d7a778f783c76edf01bd4beda4b77b612cd2e865c2e4f58ca7ae06147bf66ae6aee221cf9b9505dc07e6fb6cf4f82dc8c406c78e270210c11cf2531011ed678d9dfe1f49c9a69a95a9f3b0e5b624d9c2664d787ab911b75a4a38d63e9d6c353f8aaf433ff961fe5e34d84936ead0d0bc7954caf84e541f5c6f3f20c9eed21eb0316b82c0dc5182540e63a0af25565496792153d6395adc2b8d68b8bcd93dd110ff5685879db4384ec390d44b89663d43a5de3bdc0e103b7c1b355dc5f6fe3518c93628780ba03f156badea65d1d0af8433c9e8a975fdd19453da662a33fa9f0f5fa15fdb216b483fb48370a967246e0b763df8b3bc7924a6c76c4b114f803dbfa3b312e6815b4eb67be167283a9e482d9a5beac250089d069d4c386b7fda5fc228404a0f58b12ca4dc131c381b49b42b570bcfc0dd663f24afaf65a26a21f6d92f52c9f8de36cb76bacbaa0eef98ba6b7dbbc2629a03bb2b6f83fc5adaf20c217bc8d0f0d2421e01472532bcb546aeb2d483c8f95011a3ba1d2fd8086a717cb015dd53064ef4a80b6d6fdc12d9069223fdf2aa9b192a0e0bdb38436f49d9eedfef3665815633fee4344aff11162526362b70b18e1dbedbb5d8c4698860beccf667851878a25a1e766caae2861f2e23404aac859e62fdfeac06a6057554828d7035806e8ab3ee2fa6d711e5811db61231a22f4672f6a11b27641f350bcab78792362e6ebc1c054a643bbbf2746678c14dc567d1f73e37005c8ab6374c4d8d3106384a2d32c5fcf05cb9ba97cb7fa1aff11505a701bead543e555f3901ef3b693d5b9ebf49518c3509af042b7e84b1b867c22b7e08725220e4338fd074edce428212e6a3563a08e2ccd8ab71910256532904542e93d5c7deb5bf5d49beb3202d4da4f643649e55edbb91188cdcf0883a40c6ed6b8a086fb5c50dc08fee00308420121d4c7431b3cfb80f9c1e099423ac451d67b12e930d9e391d0a799c7d4b54a0d56ea0aae00c1d009e21fb5459416b464b227d66ccc1a68da59d64c1583dee54bbcd7d61ffe541fd0fb7452adba91906918966a7d58019ad1f8fdebeceeed7018837b6e4272eefeec8385abe7207fb2d7061fa6cdc478165a98971f9729b818a73edefed976d5c7c0a651c091cfd1174c020e39330a79144271fe4cbc61ea0ffa274d0d87d06dd08c1d5f8a0364d46ef7b54426bc286330c75fa257afeb2715c2ae511ff53b1189cc59ab80b1325fbdcedfdb8f36ed71f70091116e16b52188b794e637755027caac8db8554f8674b844964c710cacd7a9d6b06baf6fef76159a380e639b0d3e66080a7cf7f86baac01dbe47fe687fcef2f3bfbf6f8fba045181dee688360a11ee56e5fc73ed31c0e2924ae57f0cc93c63a30662a65c5d5f17123ae28cc5b74dd13ed81b03dc7fa61dc575668868c0df12d3553269f04ba79084d070abcdbd4745de80e90e4e3e524f27249b5c4a2f2d4c8b331b0cb6d4efe62a298daacc6eacdfe008c1f912795dbdc37098c42db860953120fda709baa6d46f52eaba781505e68561ca0f281e850532ef8e7c779883e312806e1c357bdef8d0dda005e710cfa6eb8686e8bf3bff036b3fcdc4036541d93530ce6f598442c24170b307ef05f23c93aa0ec96831b532d8120402214a940d1fa01ed649061a4a71308be189cffd729a196754fb8a75f23851189589be1b819f0612cad3dc94ccee88f4ab9ef6ac9c7daad8cf94f5ed9496c4c824e5b4f66ce32a80e7a6ef069a32f6812e656aa5f5742bd432afdf026c86e8f28212c1139dad47d7fc07e5c1a83e993daaa4a4bb5f0c9435ccab2a10f867ffe259dba7a1d9168619b1e3048860a5122e4a5d0b00372eaae861a0cc88549852fffa76e6d78739b654d67df15ea97a9a46b7c382d83191a673aa619b4a10ec05bc681379b0d6df824cb6fe158e9d89ae5dd1ef66976f67972b553db52eb6feef836dca6026293f83a61e117754a7424a3da63bd82d017f87f0603e2a9b8fc550aae611681935ae91f7ca2b5341b05a25208bd28f1a202a7f2a213b1d7411ffb557470aec00c4d13c70163f22a038a189710dd19a47e8db4a87c3fd329a63abca172a9810edad2d8e19ef85b57ea4287cfb3d740d7ea3fa9c80d06e1aa84b317f678ddb3c147ba5e0db432125f59ca4944c8e9050281ca82a3ecf67b2a5df678697a52a7297af1ecb03c586af7b91d74e881964ed95f7be12fa07e2a4e71aab8b913a13996fa33e915144bf00e49b8e7adec5b2c4b8165f54ba3155230e241ee023af77a295ab87c40f63f6092ccee05cb08a265abe8f57c9919bf45064b6c2240ba8011db223a283a4e2292d9b59df8c9a4fdc763f0631007db9976f351717db0e6b5f9c6e5f227c2efa1ae5fe0be1af0b22fc164f9f9678a01fe8b059749fe8a2972455732da1989c609d191544ef9fbb3e58da93ec4a582430523f260b776e4d747312747d18a9bae14740f5dcd35fd1072f8a4d81573b5882203be856b62d7e1d87081a9e431872c9d68864197bbc61f15dd8aeae950d34d6ce97182deebd2ad64cabd1c723baf512acfc7e94675b31369bd60e155af79b97bb734312569f736dcd5b5a78223ffaa0f7e93e1a112cb9f6a5b88fe3cf12c30024c16c6b8380fdf086c662665d3751c11617cc4dbd5b8bc7543301a23fbc90ba8d060193cdc2b68c31c734d516707b759f7db009c8f06e69b40154e1cd8ae444afb28134acdf871136b4fd78bd86d7faaaf618afb25e92d1ee37cdff0595278f9565f5eb109e181e9cacec2f22e32e9f34774ee223fdb992febcc5dbc5cceeda16cbcf1434730d859e7e03d36ff17636a7a7e66956b515894da114f3040909f90ce3cfbb2d7d46e37049c0fb124e0683d662eb427cd7b851ada229451e6e3aaee64b9964ced3036bde5d9d80eb062474f96ecfb9b65fcafc719494ac12ab7df245475f2a5e7f85ca4789833ca373e6214d39176c8f51dde87a4cfe5414a20f68bb9f34709979b99533ba3435c4aa56e525195e10ffd00f8e41aee30a909c07b973bbf733d45500b539ebe2206d438216690998d9e256db1b7ac6bef3e810785e1986985c945a2b820323a592721fcfa444934d0faf8aa439d5efca5dcd77b72d1eb91b3790d50d0a7483e354c415f81d99c133d648c1293e795b3c43f9b47e23ef982e10072ea5baafb0df675e69af1807b225afa0cec3eafbde8535d3ecaa0ea6ddbffe4465207425bb003670320324df0aeeb16b38a043f9c0e85673b36def332fd68b2b1e6edda621d0cadebbced8c7fc8f890489115b457249e8d8103676b3207a472804d33e0fe511ac56cd8dc5333b2333892f87b455940ada78fcf5075c358fce990e6f65f095eb416d876ce6f120b8b02cfa6b176ee269c942f881247c3e464cce2aa65c39137607c585aeb4b5f24f5f8e058c9c8b48003c1809da3e8aad1bee7955c3a976d43fe132e2b16f4758a0a9884e51d13b930675a4361ff366b0fed190ad7b2a00385528951e39cd44ea06d8921b9d613d7626221154cf86249a550198fe4e5b05ad3052b474291da0a0a2f701759859bc0392adf243ad5eca89e6d18e28dff99ef95743bcabe75504be8c715cd6360facf3bb06cb97c29989d4f6ff5083573cefe6ef0b39a252a2678112fa88e5b06c9a6bfc9597cc96e5a49710c4fc120fb0da4945b9d94e46de1e9989d0fc3d8d20df23d815b660c799a903f651b0d013f7fe158f1d297f7fcb6a48780ca5525f1d081ada0aafa83552318b848783306549750b6254cf676c7b934cf7fdab992717f0cdc089b34278f3fb151cadde14d0d3250e85a4b0ff2a2778a219aa40563d3ef575285484424b6d0e7cc8392342e4848c6fc8cb20fa1b450cc4c1fea19f3bbdd9e342e6c49cd7ac893b1eda2e93d1d74d20969465946b398fbc733757741ac822c4a118632cd242a439fc37512cf79b7c629504ccc1e7f2f11798955c3262b5e9695625ba74d8050e20f51d4769e1ab938f487f1bc4b55b5abcaa3ec079c2d0972b2ae9bfb7c5423b959119292ea05f1d79d35afe47e49d97c946b193bffc0a8f607f18a6845cecbbdd98cd351db2b2dce05a4848ba84a6a497b4618950130cb7e76c03d0976eb2fb41d3a42a1430063ed8e5b8c67e80fd4fc1148911958babbcbff33a6505de209b0d9320017fd736fd027a16564008ab2e1f48a6dd66c9256730e9fda0a606875d0871b2b9b0bc2ed4e1b696dbf0283c8dc72cf4338e595266f5390bc3a21f988353118f2948fc75d050ea076b73508d9ed89bade0ba305c1f4e5daf9d40d2f5e7ababed8d1b1d919c61a6d3fb149c1a9b44e38585a2fe322f83d73a3aecb44da3f0e82942d75d62ed3f91eb44f3411df014f88839e4cb1e21b9b259d4eb4adaf6b0be433d0ed4c87ec77dde5ee9d566e3dd8d928fc1875c63af26c59daba5ae267d9bd5da72b99a03e6a33cc48ed961ab484ff4a46c2d5fa597e626e00b530d7b9a9705e4e08d03f3a7f2a5a5233ad6340e3b5c89db81ca713b6d7d855c6324955f85109b204566f50178cd88abe3fcba25de905e8ea0b75ad51831761ed9b1af2470f976f05ec73bf74d137c207270cfd614170518cdc449aeeb663e114359c8124eaf2499d8cf5dc84a0872301db2e57b50bd285060ec4390d99d4ae3674ca3bb8679c1b08e566ba4f30daec8684a980055eb43cb5a1306c4b52a154682aa96637e06c869278aa2f74ef7345632c11265ef8ac97e953745302556881ba0cb590fef271c0abb193fb84d18ee3f24d9976ae816b857d6f68d1fdfe10b312c799fe014debf875d04bff8b4f387859e97c6bf13f7083c28a2045a0b5eb09c94e781a165965e8617c0efed1701ea9667aeca26d9577ea7b1242e1d91b25d6a66756cc627648a293b9f4345966bc469fafaeddc1118d0972bd5c7751a1f51e5989fd952f314ae10417c97b41e60ebfbc47e496486fa4a89fd16aea7fa1eabebd26eb2a37a3e2b351e0c9d2f67b2e5be0f921adc9b6045b045948e5103af0e5050b9c0799b513c00865deebda730de538f956ceb6164e08bd6f58655a294b4b44fc65309b30f9c00f92ef5bd5b911a3d830f72c258b19521bb8e80db02129954efb61423f518d2c5f36587303890cad9a93fa4f4bcd0e24c67db679c67ea59c1350b8442577632d5e8735833f3daf5a74bc7bd82659a81beba8c889632efe03cd24187aee856cf659e16e195464f52f2b984fc7a299e7b2aa53979a147ebed35705d5e89691666536f2febacfcef9b32d14952f958b72512869e4f6a0a34176918217888b1eb8b89322ebb6bb1dead2b4744e728479880db70e6147edaff6c3f083f18e0696bdbd78cf0bda14d9f42e5c1077ced00041aadff90470aacec0e48e2a5f2a0ed37818a173b96061e8c5bf24c0bde9e09f9e0ddb8e13306ef1d4eb8043ebadde5d7553e5212ecd4691eb426251f9d6720b8276ac543dde02399a35d974b22c1727d4b6df01957cae47443b706d43165e01d6932b136f561ce837431254cfb2a6e7d8070a2d3805aaa15b3c10ccd0cda2e9b418ce9ef380e5d08217752e12b3b892d03a9495c83d78d674612fde5a67738b2d4649ce44606ecce6bf3bd1293eca246a83643e4f1c7ba362b110e07c8479f216e3d4afc4fcb8d0820c8ab702a66d8183e83174597035e92b9b500dee08c80b927b42c3689c7c9617b4112c9e54cbfa51e989b5fd42b80c595d3edd265f138e8128cfbbb0e4f53aa0aa95a2ecda451852e564c42d5de7671560843d08103b9bdceac5fdeb0b1266f72f491265dd2b2b80a225a50955167da1812364ea340d82f61535401bae6f3140a8795d7c318a64cee4676627244930957b2f0b227be21b72d90027e6a5a7af3c59470c74dcdb71d1ef090a0f49c91acd604c792385c8f4e085765292822ee5eca03885fd6bfeaca9b3bbbdeac939f7846a487c5a483ed1e4fbf37c93886ea27bb35c812089b900b77c7c924147e97b6a71533610750bc84921012aa8158b213f7601d934a20bdd1f757b0a33042a683af6b9069f3900059d7f80f9fdcc9f33ece8cf7888dc9e24f1fc6ca0ecccf161c5334c60f440feb3acfc3d115011c176dfa05314c5bcf089e3c82bbe7680a3eefdcdbf3ac27265b779db4f49bade0128eda6e29bc5933ef454601db1b49628fd39ab938794fa46a33937a086ece7050d31a21524e2f0cacb307ed4412a2078636f9cc8e11c5c31cc0f9edd7be6d1e31a1513a58e25215f5a24245cb988589e6d5e5119f4f6557c697fad7d1c3a7e3bae064db4382701e33e48c5b6a52fe9141a385ef2325c6f7781134607e98bfd02c43d6deefaa861700388b40d98e941cfb2ddec209f977e8b9f93d29fdbf85e3010ce7cd622e8c75ce3df535e392052b6d65d5042d2a6e78bbfe5ee146e8b18d4bc7fb024dbba57cbe0402205593766a313950cb719d00c67bb6b3bcaa1015b89e820f11475afce655947113a7c3dcbb52427f090df994fbf076db867e0ab3f6125fb8884c1d13ff3e99fab5fa8b9f0b72cb44db4d0a48d9ec17f9733764e213c40a15ad821ec60e4a88cb2fd9dd9a4f35e6a708f4b74067f4be3f03a95261f6b191df53fa5bb5164e4a164630ad9ce39087aa950ad9e60cd2c44fa2237c49abf858c97737fd21180fd0b9542767150fbed3f39a29e6c3484d9437e15d2439f2a54b2a1ac7e63e6c436658abc3f1dd52d984f6c6901768a8cf2ec98ebf44e90e0fc0c24f8957c62e05d8eacecaf25b178fd710af609a8a1bc4d7955b5f0cb4f48a37685e6304ea5843573a1abff37b5106916c83c8f23f939a0dc43aea8d196191ed6e18dd793990d1f37d7de0bf8fac6f469843724eaab86be8a483be281b8ecf4aa29d9c571951cde8cd8c2aaf4d597ac2cb48f23fad145916920a55d655924940573b64dbd42a280cddc4810434f930183fdbbdc72db1491a4c9d44daf9b1bc2fecd855508648063040faeb125da0e68e6cd2002181118eecff0be1dd8eae726af5d451630cd65119c52abd6dded97f931202f186a18c4ba34bc2c3f6d765e2d8f445e959f26ffb55827cf3ff2cc0289f17b82c8caa5a2d3d54306a300f0ef42bbe4ea9e32c5d4b1173942745cdcfe4f5d1619eefaf8dc600afbc9171d516f7f4b35331d0b9be005132ffad5e9df59710278b842afb626a78b8b8b37fc3a894dc705b2d4e0940cb264e9dc87eaa148e6faf78125462f28a0f1d7b3c65a291b85713fa71ffc478f6601e8716c35489f4a54ed0c70bcfd5502cc91374dc3c982075c5180398bc6b195b36e79dcc4087cb990cc9d964a150e0dcc887d496bdd27c3f298736b9ad8345ba2df46021964cf43c38f9d2e94b77bee2b7bf059e0870ff9f17b9ef1320c0aa88a2fa9781e9017ab64643de9a3df9ed4b8cfd8fa080a2e494409520b795eb1517d224a05e450c4c8ae0e9fd29c0e72d3a592cce55f6dd5107f21214e1a3f9a5448384de06149f959ec0c92790f0ff229ab4971171f1c528ae6d095ec007bf5e7f55d623a68194e9ea8edc3af418075338328f24e7504341c22bef72c2963fc9c3237ba990d29c2c8aa3007395f6d96e95b40ee1b18dbad550bf39d0d98268cb74dde76d987c3169c9067495fb1b88508bbb7e94cbb7dfc15c03b1d5b163132c8a468906f02d422a8cf98d0b432b5779dd962074b72dd27439b2e94312f573435e5aa84664432c1914839cd6e172186ce93eeb1d7cb0659696d9d550eb3b185f8c6ee16e53f78233cbe709f99d2879d63d93f7d0ed133241d2f1ab1eb2c56605ca0f0e01c39ab0ba2370fe5c4e68de0561b517ff9a10023c386236398372c7176e35443e2cf5dd6cbed9f23395f231e6a54f65626cb5860a8b72122c34664119e7c47204ef4a70583a", 0x2000, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)={0x90, 0x0, 0x0, {0x3, 0x0, 0x0, 0x5, 0x0, 0x0, {0x0, 0x0, 0x20, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x2, r2}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x27, 0x0, 0x801001a, 0x66d, 0x0, 0x0, 0x2, 0x0, 0x0, 0x40}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f000000a280)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000008c0)={0x90, 0x0, 0x8, {0x3, 0x100000000000, 0xfffffffffffffffa, 0x0, 0x203, 0x38820000, {0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xa, 0x0, 0x2, 0x2000, 0x0, 0x0, 0x0, 0x2, 0x8009}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)

10.088642679s ago: executing program 0 (id=2050):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xff}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x64}}, 0x0)

9.757757397s ago: executing program 0 (id=2057):
unshare(0x28020480)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=@framed, &(0x7f00000005c0)='GPL\x00'}, 0x90)
setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000200)=r1, 0x4)

9.57285354s ago: executing program 33 (id=2057):
unshare(0x28020480)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x15, 0x3, &(0x7f0000000540)=@framed, &(0x7f00000005c0)='GPL\x00'}, 0x90)
setsockopt$sock_attach_bpf(r0, 0x1, 0x34, &(0x7f0000000200)=r1, 0x4)

2.608257939s ago: executing program 3 (id=2142):
mknodat$null(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x103)
mount$9p_rdma(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='trans=rdma,port=0'])
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000)='cifs\x00', 0x0, &(0x7f00000001c0)='=\n\x9b\xa1Q\x83\xe9\n@\xf6\"2a\xd7\x1fch\x1a}#\xfa\xe4`\xdc[\x03\x97\xcd\xf1\xa6b\x9a\x1f\xff\xff\xffIT\xe4\x8c&\xac\xe6:\xc5\xe8\xd9\"\x82\xd5\xeb\x90\xef1:\xba\xc3\xc3\xd3\xad\'\xc44\x17,,\x8dZz\x04\x17-#F\xc7<\xe6\xf5]%gC\x9e\xca\nS\xc3\xc8\x98\xd8\xc8\x9eZ\xa76\x9f\xc2=\xaa\xcet7\xb9\xbd\xd47\xe3\xc8@$8\v\x9f\xfd\xe1!\x11\x19Y\x06J\x8f\x80\xef9Tw8\x1b\xe2\xf3\x85\xd5}\xa5\xb7\xd5|')

2.450847296s ago: executing program 3 (id=2145):
prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1)
pipe2(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
socket(0x10, 0x3, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0)
syz_emit_vhci(&(0x7f0000001fc0)=@HCI_EVENT_PKT={0x4, @hci_ev_encrypt_change={{0x8, 0x4}, {0x6, 0xc9}}}, 0x7)
openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x1)
msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x4)
recvmmsg(r2, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)=""/70, 0x46}], 0x1}}, {{0x0, 0x0, 0x0}, 0xc9a}], 0x2, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, 0x0, 0x40020)
write$binfmt_misc(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)

1.910491799s ago: executing program 2 (id=2162):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x34}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x3}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x58}}, 0x24008440)

1.910089436s ago: executing program 2 (id=2163):
socket$inet_sctp(0x2, 0x1, 0x84)
socket$inet_sctp(0x2, 0x5, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$can_j1939(0x1d, 0x2, 0x7)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet_udp(0x2, 0x2, 0x0)
eventfd(0x5f0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c00000010001ffe00989837a182138b00268f1c", @ANYRES32=0x0, @ANYBLOB="ff7f000080000000140012800a00010076786c616e0000000400028008000a00", @ANYRES64=r0], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x0)

1.827352397s ago: executing program 2 (id=2165):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x2)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0)
rmdir(&(0x7f0000000140)='./cgroup/../file0\x00')
preadv2(r1, &(0x7f0000000180)=[{&(0x7f0000000340)=""/157, 0x9d}], 0x1, 0x1, 0x4, 0x10)

1.827120272s ago: executing program 2 (id=2166):
bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000700)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x6}, [@generic={0x73, 0x1, 0x1, 0x4b}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.776865926s ago: executing program 2 (id=2167):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_LINK_STATS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="29a626bd7000fddbdf2501000000000000000b"], 0x30}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000)

1.775915969s ago: executing program 2 (id=2169):
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x10031, 0xffffffffffffffff, 0x65be1000)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2)

1.5470375s ago: executing program 3 (id=2171):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@ipv4_delroute={0x40, 0x19, 0x901, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x1}, [@RTA_DST={0x8, 0x1, @dev}, @RTA_GATEWAY={0x8, 0x5, @private=0xa010102}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @LWTUNNEL_IP_SRC={0x1c, 0x3, @multicast2}}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

1.546692493s ago: executing program 3 (id=2172):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c000000100039042abd70000000000000000000", @ANYRES32=r1, @ANYBLOB="01180200031100002c0012800e00010069703665727370616e0000001800028008001500a8bc0d00040012"], 0x4c}}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newlink={0x78, 0x10, 0x401, 0x0, 0x3, {0x0, 0x0, 0x0, r1, 0x0, 0x1c0d}, [@IFLA_LINKINFO={0x58, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x44, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e20}, @IFLA_GRE_TTL={0x5, 0x8, 0x4}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x7ef80}, @IFLA_GRE_ERSPAN_DIR={0x5, 0x17, 0x1}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x10}, @IFLA_GRE_REMOTE={0x14, 0x7, @mcast2}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x10}, 0x12)

1.455938193s ago: executing program 3 (id=2174):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='debugfs\x00', 0x0, 0x0)
r0 = inotify_init1(0x0)
inotify_add_watch(r0, &(0x7f00000000c0)='./file0\x00', 0x60004ce)
syz_usb_connect$uac1(0x0, 0x71, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5f, 0x3, 0x1, 0x0, 0x0, 0x0, {{}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x80}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x0, 0x0, 0x0, 0x0, {0x7, 0x25, 0x1, 0x81, 0x8}}}}}}}]}}, 0x0)

474.804752ms ago: executing program 4 (id=2177):
syz_read_part_table(0x617, &(0x7f0000000000)="$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")

387.189707ms ago: executing program 4 (id=2178):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r0, 0x28, 0x0, 0xfffffffffffffffc, 0x0)

387.053702ms ago: executing program 4 (id=2179):
r0 = socket$kcm(0x11, 0x3, 0x0)
setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000001080), 0x4)
sendmsg$kcm(r0, &(0x7f00000001c0)={&(0x7f0000000680)=@phonet={0x23, 0x0, 0x0, 0x41}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000180)="27050200160014000600002fb96dbcf706e50500070088a8010081", 0x1b}, {&(0x7f0000000240)="cb4e88a8af32", 0x6}, {&(0x7f0000001900)="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", 0xb06}], 0x3}, 0x4081)

337.118125ms ago: executing program 4 (id=2180):
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000000580)='./file0\x00', 0x2000000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
open(&(0x7f0000000040)='./file2\x00', 0x600000, 0x1ac)

336.873697ms ago: executing program 4 (id=2181):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010000100ab5a0000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4024}, 0x4000010)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140ff"], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0x40)
syz_emit_ethernet(0x46, &(0x7f0000000340)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x10, 0x3a, 0x0, @remote, @local, {[], @ni={0x8b, 0x0, 0x0, 0x7, 0x7e20, 0x200000080}}}}}}, 0x0)

246.746593ms ago: executing program 3 (id=2182):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b33, &(0x7f0000000000)={'wlan1\x00'})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
r1 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001140)={0x34, &(0x7f0000000fc0)={0x20, 0x16}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000001540)={0x34, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000003880)={0x34, &(0x7f0000003640)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000003f00)={0x84, &(0x7f0000003b00)={0x40, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000004300)={0x34, &(0x7f00000040c0)=ANY=[@ANYBLOB="632000110000"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
syz_usb_control_io(r1, 0x0, 0x0)
r2 = getpgid(0x0)
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
kcmp$KCMP_EPOLL_TFD(0x0, r2, 0x7, r3, &(0x7f0000000280)={r4, 0xffffffffffffffff, 0xf319})

66.814143ms ago: executing program 4 (id=2183):
r0 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160)

0s ago: executing program 34 (id=2183):
r0 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4)
sendto$inet(r0, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x12160)

kernel console output (not intermixed with test programs):

 160.081258][ T6411] usb 3-1: USB disconnect, device number 18
[  160.109256][ T9469] BTRFS info (device loop0): enabling ssd optimizations
[  160.111874][ T9469] BTRFS info (device loop0): enabling free space tree
[  160.131257][ T5849] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  160.225734][ T2257] usb 4-1: config 131 has an invalid interface number: 242 but max is 0
[  160.228760][ T2257] usb 4-1: config 131 has no interface number 0
[  160.231121][ T2257] usb 4-1: config 131 interface 242 altsetting 13 endpoint 0x2 has invalid maxpacket 7573, setting to 64
[  160.236914][ T2257] usb 4-1: config 131 interface 242 altsetting 13 endpoint 0xC has invalid wMaxPacketSize 0
[  160.240597][ T2257] usb 4-1: config 131 interface 242 has no altsetting 0
[  160.246337][ T2257] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010b, bcdDevice=19.10
[  160.249682][ T2257] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5
[  160.252429][ T2257] usb 4-1: Product: syz
[  160.253837][ T2257] usb 4-1: Manufacturer: syz
[  160.256334][ T2257] usb 4-1: SerialNumber: syz
[  160.259652][ T9459] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  160.334326][ T9487] loop0: detected capacity change from 0 to 32768
[  160.346407][ T9487] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  160.366949][   T33] audit: type=1800 audit(1756196095.814:706): pid=9487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1372" name="bus" dev="loop0" ino=17058 res=0 errno=0
[  160.445385][ T5849] ocfs2: Unmounting device (7,0) on (node local)
[  160.454089][ T5847] Bluetooth: hci2: command 0x0405 tx timeout
[  160.469849][ T2257] kvaser_usb 4-1:131.242: error -ENODEV: Cannot get usb endpoint(s)
[  160.479324][ T2257] usb 4-1: USB disconnect, device number 10
[  160.762152][ T9497] netdevsim netdevsim0: Direct firmware load for x failed with error -2
[  160.765680][ T9497] netdevsim netdevsim0: Falling back to sysfs fallback for: x
[  160.864011][ T7624] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  161.025506][ T9501] loop3: detected capacity change from 0 to 256
[  161.032088][ T9501] exFAT-fs (loop3): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  161.036843][ T7624] usb 3-1: Using ep0 maxpacket: 16
[  161.043738][ T7624] usb 3-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  161.050063][ T7624] usb 3-1: config 0 interface 0 has no altsetting 0
[  161.052914][ T7624] usb 3-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  161.056676][ T7624] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  161.061067][ T7624] usb 3-1: config 0 descriptor??
[  161.118120][ T9502] openvswitch: netlink: IP tunnel dst address not specified
[  161.485360][ T7624] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0
[  161.488719][ T7624] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0
[  161.491750][ T7624] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0
[  161.496026][ T7624] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0
[  161.500743][ T7624] nzxt-smart2 0003:1E71:2009.000A: unknown main item tag 0x0
[  161.507942][ T7624] nzxt-smart2 0003:1E71:2009.000A: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.2-1/input0
[  161.680452][    C1] usb 3-1: input irq status -75 received
[  161.884095][ T5908] usb 3-1: USB disconnect, device number 19
[  162.391150][ T9526] netlink: 'syz.0.1389': attribute type 1 has an invalid length.
[  163.598662][ T9537] loop0: detected capacity change from 0 to 32768
[  163.630469][ T9537] ialloc: diAlloc returned -5!
[  163.632790][ T9537] ialloc: diAlloc returned -5!
[  163.880116][ T9565] loop2: detected capacity change from 0 to 1024
[  163.886869][ T9565] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  163.903364][ T9565] EXT4-fs error (device loop2): __ext4_remount:6740: comm syz.2.1405: Abort forced by user
[  163.907073][ T9565] EXT4-fs (loop2): Remounting filesystem read-only
[  163.909622][ T9565] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000.
[  163.931631][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.004348][   T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  164.156318][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  164.160690][   T10] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  164.164423][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.169075][   T10] usb 4-1: config 0 descriptor??
[  164.274102][ T5908] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  164.444093][ T5908] usb 3-1: Using ep0 maxpacket: 32
[  164.449204][ T5908] usb 3-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  164.451954][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.455659][ T5908] usb 3-1: Product: syz
[  164.457109][ T5908] usb 3-1: Manufacturer: syz
[  164.458631][ T5908] usb 3-1: SerialNumber: syz
[  164.462395][ T5908] usb 3-1: config 0 descriptor??
[  164.579445][   T10] lua 0003:1E7D:2C2E.000B: hidraw0: USB HID v0.00 Device [HID 1e7d:2c2e] on usb-dummy_hcd.3-1/input0
[  164.783215][   T10] usb 4-1: USB disconnect, device number 11
[  164.876857][ T9574] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  164.880936][ T9574] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  165.055239][ T5908] airspy 3-1:0.0: usb_control_msg() failed -71 request 09
[  165.057589][ T5908] airspy 3-1:0.0: Could not detect board
[  165.059583][ T5908] airspy 3-1:0.0: probe with driver airspy failed with error -71
[  165.063268][ T5908] usb 3-1: USB disconnect, device number 20
[  165.635324][ T9607] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1421'.
[  165.639038][ T9607] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1421'.
[  165.731129][ T9613] loop2: detected capacity change from 0 to 16
[  165.736522][ T9613] erofs (device loop2): mounted with root inode @ nid 36.
[  165.780601][ T9616] xt_limit: Overflow, try lower: 604147548/4200216962
[  165.873711][   T13] tipc: Subscription rejected, illegal request
[  166.049262][   T33] audit: type=1800 audit(1756196101.404:707): pid=9621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1424" name="file1" dev="loop2" ino=86 res=0 errno=0
[  166.131458][ T9631] binder: 9630:9631 ioctl c0046209 0 returned -22
[  166.155102][ T9633] loop3: detected capacity change from 0 to 512
[  166.158241][ T9633] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  166.162782][ T9633] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c0a8, mo2=0002]
[  166.166629][ T9633] System zones: 1-12
[  166.168589][ T9633] EXT4-fs error (device loop3): ext4_xattr_inode_iget:437: inode #11: comm syz.3.1432: iget: bogus i_mode (700)
[  166.172671][ T9633] EXT4-fs (loop3): Remounting filesystem read-only
[  166.175620][ T9633] EXT4-fs (loop3): 1 orphan inode deleted
[  166.178355][ T9633] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  166.195370][ T7132] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.314709][ T5908] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  166.468648][ T5908] usb 1-1: config 8 interface 0 has no altsetting 0
[  166.471324][ T5908] usb 1-1: New USB device found, idVendor=046d, idProduct=08b8, bcdDevice=fb.bc
[  166.476707][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.536568][ T9660] loop3: detected capacity change from 0 to 512
[  166.540753][ T9660] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  166.559492][ T9660] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  166.564653][ T9660] ext4 filesystem being mounted at /318/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.660558][ T9663] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  166.687454][ T5908] usb 1-1: string descriptor 0 read error: -71
[  166.691512][ T5908] pwc: Logitech QuickCam detected (reserved ID).
[  166.698289][ T5908] pwc: Failed to set LED on/off time (-71)
[  166.700897][ T5908] pwc: send_video_command error -71
[  166.702897][ T5908] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  166.706373][ T5908] Philips webcam 1-1:8.0: probe with driver Philips webcam failed with error -71
[  166.711099][ T5908] usb 1-1: USB disconnect, device number 25
[  167.314732][ T9675] loop0: detected capacity change from 0 to 512
[  167.318074][ T9675] EXT4-fs: Invalid want_extra_isize 1430
[  167.594032][ T7624] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  167.629138][ T9685] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1454'.
[  167.666182][ T9687] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1455'.
[  167.708596][ T9689] loop2: detected capacity change from 0 to 2048
[  167.722670][ T9690] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  167.724989][ T9689] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #12: rec_len is smaller than minimal - offset=1024, inode=0, rec_len=0, name_len=0
[  167.733309][ T9689] Remounting filesystem read-only
[  167.737434][ T9683] loop3: detected capacity change from 0 to 32768
[  167.754003][ T7624] usb 1-1: Using ep0 maxpacket: 32
[  167.757090][ T7624] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  167.760033][ T7624] usb 1-1: config 0 has no interface number 0
[  167.765389][ T7624] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  167.768667][ T7624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.774442][ T7624] usb 1-1: Product: syz
[  167.775927][ T7624] usb 1-1: Manufacturer: syz
[  167.777736][ T7624] usb 1-1: SerialNumber: syz
[  167.784390][ T7624] usb 1-1: config 0 descriptor??
[  167.788724][ T9683] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  167.788738][ T9683]   allowing incompatible features above 0.0: (unknown version)
[  167.788743][ T9683]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  167.797186][ T7624] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  167.808269][ T9683] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  167.811940][ T9683] bcachefs (loop3): initializing new filesystem
[  167.826552][ T9683] bcachefs (loop3): going read-write
[  167.831258][ T9683] bcachefs (loop3): marking superblocks
[  167.846561][ T9683] bcachefs (loop3): initializing freespace
[  167.857531][ T9683] bcachefs (loop3): done initializing freespace
[  167.864890][ T9683] bcachefs (loop3): reading snapshots table
[  167.867382][ T9683] bcachefs (loop3): reading snapshots done
[  167.885343][ T9683] bcachefs (loop3): done starting filesystem
[  167.982080][ T9709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1460'.
[  167.992803][ T7132] bcachefs (loop3): shutting down
[  167.995353][ T7132] bcachefs (loop3): going read-only
[  167.997197][ T7132] bcachefs (loop3): finished waiting for writes to stop
[  168.000571][ T7132] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  168.015690][ T7624] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  168.022337][ T7132] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  168.026452][ T7624] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  168.031394][ T7132] bcachefs (loop3): clean shutdown complete, journal seq 4
[  168.036408][ T7132] bcachefs (loop3): marking filesystem clean
[  168.050766][ T7132] bcachefs (loop3): shutdown complete
[  168.408912][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  168.411985][ T7624] usb 1-1: USB disconnect, device number 26
[  168.416954][ T7624] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  168.423140][ T7624] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  168.429121][ T7624] quatech2 1-1:0.51: device disconnected
[  168.869538][ T9712] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1461'.
[  168.961872][ T9716] loop0: detected capacity change from 0 to 4096
[  169.822588][ T9732] vlan2: entered promiscuous mode
[  169.827412][ T9732] bridge0: entered promiscuous mode
[  170.196952][ T9738] loop3: detected capacity change from 0 to 4096
[  170.224599][   T33] audit: type=1800 audit(1756196105.674:708): pid=9738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1473" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=34 res=0 errno=0
[  171.244075][ T7624] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  171.395377][ T7624] usb 3-1: Using ep0 maxpacket: 8
[  171.400092][ T7624] usb 3-1: config 8 has an invalid interface number: 49 but max is 0
[  171.403252][ T7624] usb 3-1: config 8 has no interface number 0
[  171.405958][ T7624] usb 3-1: config 8 interface 49 has no altsetting 0
[  171.411137][ T7624] usb 3-1: New USB device found, idVendor=05ac, idProduct=d551, bcdDevice=df.20
[  171.415695][ T7624] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.418930][ T7624] usb 3-1: Product: syz
[  171.420552][ T7624] usb 3-1: Manufacturer: syz
[  171.422318][ T7624] usb 3-1: SerialNumber: syz
[  171.609101][ T9783] loop3: detected capacity change from 0 to 8
[  171.616303][ T9783] SQUASHFS error: lzo decompression failed, data probably corrupt
[  171.619369][ T9783] SQUASHFS error: Failed to read block 0x91: -5
[  171.621832][ T9783] SQUASHFS error: Unable to read metadata cache entry [8f]
[  171.626078][ T9783] SQUASHFS error: Unable to read inode 0x11f
[  171.632821][ T7624] ipheth 3-1:8.49: Unable to find alternate settings interface
[  171.640170][ T7624] usb 3-1: USB disconnect, device number 21
[  171.858470][ T9789] loop3: detected capacity change from 0 to 128
[  171.867852][ T9789] hpfs: Bad magic ... probably not HPFS
[  171.962973][ T9793] xfrm0: entered promiscuous mode
[  171.967167][ T9793] xfrm0: entered allmulticast mode
[  172.180257][ T9806] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1503'.
[  172.331141][ T9821] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1509'.
[  172.332884][ T9823] loop0: detected capacity change from 0 to 8
[  172.357609][ T9823] SQUASHFS error: Unable to read directory block [629:46]
[  172.504634][ T9825] loop3: detected capacity change from 0 to 8192
[  172.546936][ T9825]  loop3: [ICS]
[  172.802181][ T9839] loop0: detected capacity change from 0 to 1024
[  172.893853][ T9839] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  172.914208][ T9839] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c855c01c, mo2=0003]
[  172.970775][ T9839] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.243037][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.871761][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1521'.
[  174.958495][ T9868] loop2: detected capacity change from 0 to 128
[  174.965557][ T9868] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  174.970758][ T9868] ext4 filesystem being mounted at /521/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  175.040473][ T5844] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  175.115337][ T9873] loop2: detected capacity change from 0 to 512
[  175.119838][ T9873] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[  175.125688][ T9873] EXT4-fs (loop2): orphan cleanup on readonly fs
[  175.128555][ T9873] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1530: bad orphan inode 15
[  175.132898][ T9873] ext4_test_bit(bit=14, block=18) = 1
[  175.136221][ T9873] is_bad_inode(inode)=0
[  175.137930][ T9873] NEXT_ORPHAN(inode)=1023
[  175.139680][ T9873] max_ino=32
[  175.141059][ T9873] i_nlink=0
[  175.142784][ T9873] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2962: inode #15: comm syz.2.1530: corrupted xattr block 19: e_value size too large
[  175.151383][ T9873] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117)
[  175.158490][ T9873] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  175.190853][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.212327][ T9876] overlayfs: statfs failed on './file0'
[  175.238743][ T9878] overlayfs: failed to decode file handle (len=24, type=251, flags=0, err=-22)
[  175.393231][ T9884] loop0: detected capacity change from 0 to 1024
[  175.402748][ T9884] hfsplus: bad catalog entry type
[  175.419581][   T32] hfsplus: b-tree write err: -5, ino 4
[  175.733891][ T9887] loop0: detected capacity change from 0 to 1764
[  176.592783][ T9904] loop2: detected capacity change from 0 to 32768
[  176.598700][ T9904] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  176.611853][ T9904] XFS (loop2): Ending clean mount
[  176.615791][ T9904] XFS (loop2): Quotacheck needed: Please wait.
[  176.622591][ T9904] XFS (loop2): Quotacheck: Done.
[  176.751309][ T5844] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  177.256316][ T9927] vivid-004: disconnect
[  177.257985][ T9926] vivid-004: reconnect
[  177.286255][ T9930] netlink: 14528 bytes leftover after parsing attributes in process `syz.3.1550'.
[  177.319396][ T9935] loop3: detected capacity change from 0 to 1024
[  177.331406][   T33] audit: type=1800 audit(1756196112.774:709): pid=9935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1552" name="file1" dev="loop3" ino=20 res=0 errno=0
[  177.414220][ T6411] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  177.565469][ T6411] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[  177.568168][ T6411] usb 1-1: config 0 has no interface number 0
[  177.571885][ T6411] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  177.575034][ T6411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.577521][ T6411] usb 1-1: Product: syz
[  177.578754][ T6411] usb 1-1: Manufacturer: syz
[  177.580151][ T6411] usb 1-1: SerialNumber: syz
[  177.582356][ T6411] usb 1-1: config 0 descriptor??
[  177.654690][ T5908] usb 4-1: new low-speed USB device number 12 using dummy_hcd
[  177.808232][ T5908] usb 4-1: string descriptor 0 read error: -22
[  177.810792][ T5908] usb 4-1: New USB device found, idVendor=04b4, idProduct=8613, bcdDevice=95.8f
[  177.814508][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.818475][ T5908] usb 4-1: config 0 descriptor??
[  177.821792][ T5908] usbtest 4-1:0.0: FX2 device
[  177.823758][ T5908] usbtest 4-1:0.0: low-speed {control intr-in intr-out} tests (+alt)
[  177.988301][ T6411] usb 1-1: Firmware: major: 154, minor: 51, hardware type: ATUSB (1)
[  178.028349][ T5908] usb 4-1: USB disconnect, device number 12
[  178.189884][ T6411] usb 1-1: failed to fetch extended address, random address set
[  178.225837][ T6411] usb 1-1: USB disconnect, device number 27
[  178.569756][ T9961] loop3: detected capacity change from 0 to 8
[  178.576091][ T9961] SQUASHFS error: Failed to read block 0x4de: -5
[  178.578881][ T9961] SQUASHFS error: Failed to read block 0x4de: -5
[  178.581705][   T33] audit: type=1800 audit(1756196114.024:710): pid=9961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1563" name="file1" dev="loop3" ino=5 res=0 errno=0
[  178.844249][ T6411] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  178.974110][ T7624] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  178.994090][ T6411] usb 4-1: Using ep0 maxpacket: 32
[  178.997375][ T6411] usb 4-1: config 0 has an invalid interface number: 196 but max is 0
[  179.000071][ T6411] usb 4-1: config 0 has no interface number 0
[  179.002226][ T6411] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  179.005741][ T6411] usb 4-1: config 0 interface 196 has no altsetting 0
[  179.009580][ T6411] usb 4-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  179.012822][ T6411] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.015969][ T6411] usb 4-1: Product: syz
[  179.017454][ T6411] usb 4-1: Manufacturer: syz
[  179.019230][ T6411] usb 4-1: SerialNumber: syz
[  179.021759][ T6411] usb 4-1: config 0 descriptor??
[  179.023851][ T9963] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  179.144052][ T7624] usb 1-1: Using ep0 maxpacket: 8
[  179.148723][ T7624] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x73, changing to 0x3
[  179.152915][ T7624] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  179.159055][ T7624] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e
[  179.162115][ T7624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.165475][ T7624] usb 1-1: Product: syz
[  179.167007][ T7624] usb 1-1: Manufacturer: syz
[  179.168638][ T7624] usb 1-1: SerialNumber: syz
[  179.171523][ T7624] usb 1-1: config 0 descriptor??
[  179.176094][ T7624] streamzap 1-1:0.0: streamzap_probe: endpoint doesn't match input device 0203
[  179.209000][ T9975] loop2: detected capacity change from 0 to 4096
[  179.219022][ T9976] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  179.232345][ T6411] ipheth 4-1:0.196: ipheth_get_macaddr: usb_control_msg: -71
[  179.237405][ T6411] ipheth 4-1:0.196: probe with driver ipheth failed with error -71
[  179.243632][ T6411] usb 4-1: USB disconnect, device number 13
[  179.378444][ T5908] usb 1-1: USB disconnect, device number 28
[  179.433516][ T9982] loop2: detected capacity change from 0 to 32768
[  179.442326][ T9982] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  179.467777][ T5844] ocfs2: Unmounting device (7,2) on (node local)
[  179.663653][ T9988] loop2: detected capacity change from 0 to 40427
[  179.668003][ T9988] F2FS-fs (loop2): build fault injection rate: 16
[  179.670590][ T9988] F2FS-fs (loop2): build fault injection type: 0x77fd1
[  179.674358][ T9988] F2FS-fs (loop2): invalid crc value
[  179.676761][ T9988] F2FS-fs (loop2): inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x30ed/0x49f0
[  179.680787][ T9988] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-12)
[  179.823337][ T9997] loop3: detected capacity change from 0 to 4096
[  179.827089][ T9997] EXT4-fs (loop3): Test dummy encryption mode enabled
[  179.830669][ T9997] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  179.834103][ T9997] System zones: 0-5
[  179.837601][ T9997] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  179.908403][ T7132] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.924689][ T9995] loop2: detected capacity change from 0 to 32768
[  179.928323][ T9995] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1578 (9995)
[  179.940453][ T9995] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  179.943654][ T9995] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  179.965160][ T9995] BTRFS info (device loop2): setting nodatasum
[  179.967143][ T9995] BTRFS info (device loop2): setting nodatacow
[  179.969181][ T9995] BTRFS info (device loop2): enabling free space tree
[  179.971488][ T9995] BTRFS info (device loop2): max_inline set to 0
[  179.996976][ T5844] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  180.038459][T10001] loop0: detected capacity change from 0 to 32768
[  180.042520][T10001] 
[  180.042520][T10001]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  180.042520][T10001] 
[  180.050021][T10001] find_entry called with index = 0
[  180.051889][T10001] read_mapping_page failed!
[  180.053317][T10001] ERROR: (device loop0): txCommit: 
[  180.053317][T10001] 
[  180.056418][T10001] ERROR: (device loop0): remounting filesystem as read-only
[  180.200417][ T2257] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  180.291145][T10035] libceph: resolve '4.' (ret=-3): failed
[  180.344726][ T5908] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  180.365137][ T2257] usb 4-1: Using ep0 maxpacket: 32
[  180.369209][ T2257] usb 4-1: config 0 has an invalid interface number: 219 but max is 0
[  180.373351][ T2257] usb 4-1: config 0 has no interface number 0
[  180.376465][ T2257] usb 4-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023
[  180.385098][ T2257] usb 4-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  180.389042][ T2257] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.392217][ T2257] usb 4-1: Product: syz
[  180.399445][ T2257] usb 4-1: Manufacturer: syz
[  180.401253][ T2257] usb 4-1: SerialNumber: syz
[  180.404545][ T2257] usb 4-1: config 0 descriptor??
[  180.407840][T10003] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  180.497061][ T5908] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  180.504180][ T5908] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  180.514766][ T5908] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  180.518310][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  180.521432][ T5908] usb 3-1: SerialNumber: syz
[  180.617961][ T2257] etas_es58x 4-1:0.219: Starting syz syz (Serial Number syz)
[  180.621970][ T2257] usb 4-1: USB disconnect, device number 14
[  180.653577][T10046] loop0: detected capacity change from 0 to 40427
[  180.656546][T10046] F2FS-fs (loop0): build fault injection rate: 25
[  180.659560][T10046] F2FS-fs (loop0): invalid crc value
[  180.694310][T10046] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  180.698332][T10046] F2FS-fs (loop0): Start checkpoint disabled!
[  180.702181][T10046] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  180.741433][ T5908] usb 3-1: 0:2 : does not exist
[  180.743776][ T3027] kworker/u10:5: attempt to access beyond end of device
[  180.743776][ T3027] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  180.750253][ T3027] CPU: 1 UID: 0 PID: 3027 Comm: kworker/u10:5 Not tainted syzkaller #0 PREEMPT(full) 
[  180.750272][ T3027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  180.750281][ T3027] Workqueue: writeback wb_workfn (flush-7:0)
[  180.750304][ T3027] Call Trace:
[  180.750310][ T3027]  <TASK>
[  180.750315][ T3027]  dump_stack_lvl+0x189/0x250
[  180.750329][ T3027]  ? __pfx_dump_stack_lvl+0x10/0x10
[  180.750337][ T3027]  ? __pfx_queue_work_on+0x10/0x10
[  180.750345][ T3027]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  180.750356][ T3027]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  180.750368][ T3027]  f2fs_handle_critical_error+0x37c/0x540
[  180.750380][ T3027]  f2fs_write_end_io+0x886/0xb60
[  180.750391][ T3027]  __submit_merged_bio+0x27a/0x6a0
[  180.750403][ T3027]  __submit_merged_write_cond+0x255/0x530
[  180.750414][ T3027]  f2fs_write_data_pages+0x261d/0x3000
[  180.750432][ T3027]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  180.750445][ T3027]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  180.750468][ T3027]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  180.750481][ T3027]  ? trace_f2fs_writepages+0x7f/0x200
[  180.750491][ T3027]  ? f2fs_write_node_pages+0x478/0x6e0
[  180.750501][ T3027]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  180.750512][ T3027]  ? f2fs_update_inode+0x13d9/0x2620
[  180.750522][ T3027]  ? f2fs_write_inode+0x3fb/0x5f0
[  180.750532][ T3027]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  180.750542][ T3027]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  180.750553][ T3027]  do_writepages+0x32e/0x550
[  180.750564][ T3027]  ? unwind_next_frame+0xa5/0x2390
[  180.750576][ T3027]  __writeback_single_inode+0x145/0xff0
[  180.750586][ T3027]  ? do_raw_spin_unlock+0x4d/0x240
[  180.750596][ T3027]  writeback_sb_inodes+0x6c7/0x1010
[  180.750609][ T3027]  ? fprop_reflect_period_percpu+0x6b/0x330
[  180.750621][ T3027]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  180.750639][ T3027]  ? rcu_is_watching+0x15/0xb0
[  180.750649][ T3027]  wb_writeback+0x43b/0xaf0
[  180.750660][ T3027]  ? queue_io+0x2f1/0x590
[  180.750669][ T3027]  ? __pfx_wb_writeback+0x10/0x10
[  180.750679][ T3027]  ? rcu_is_watching+0x15/0xb0
[  180.750687][ T3027]  wb_workfn+0x409/0xef0
[  180.750698][ T3027]  ? __pfx_wb_workfn+0x10/0x10
[  180.750705][ T3027]  ? rcu_is_watching+0x15/0xb0
[  180.750738][ T3027]  ? rcu_is_watching+0x15/0xb0
[  180.750746][ T3027]  ? process_scheduled_works+0x9ef/0x17b0
[  180.750754][ T3027]  ? rcu_is_watching+0x15/0xb0
[  180.750761][ T3027]  ? lock_acquire+0x5f/0x360
[  180.750772][ T3027]  ? rcu_is_watching+0x15/0xb0
[  180.750779][ T3027]  ? process_scheduled_works+0x9ef/0x17b0
[  180.750786][ T3027]  ? process_scheduled_works+0x9ef/0x17b0
[  180.750793][ T3027]  process_scheduled_works+0xae1/0x17b0
[  180.750806][ T3027]  ? __pfx_process_scheduled_works+0x10/0x10
[  180.750817][ T3027]  worker_thread+0x8a0/0xda0
[  180.750825][ T3027]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  180.750851][ T3027]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  180.750860][ T3027]  ? __kthread_parkme+0x7b/0x200
[  180.750870][ T3027]  kthread+0x711/0x8a0
[  180.750880][ T3027]  ? __pfx_worker_thread+0x10/0x10
[  180.750886][ T3027]  ? __pfx_kthread+0x10/0x10
[  180.750895][ T3027]  ? rcu_is_watching+0x15/0xb0
[  180.750902][ T3027]  ? __pfx_kthread+0x10/0x10
[  180.750911][ T3027]  ret_from_fork+0x3fc/0x770
[  180.750920][ T3027]  ? __pfx_ret_from_fork+0x10/0x10
[  180.750929][ T3027]  ? __switch_to_asm+0x39/0x70
[  180.750938][ T3027]  ? __switch_to_asm+0x33/0x70
[  180.750947][ T3027]  ? __pfx_kthread+0x10/0x10
[  180.750955][ T3027]  ret_from_fork_asm+0x1a/0x30
[  180.750968][ T3027]  </TASK>
[  180.751364][ T3027] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  180.752739][ T5908] usb 3-1: USB disconnect, device number 22
[  180.959139][T10051] loop0: detected capacity change from 0 to 1024
[  180.961553][T10051] EXT4-fs: Ignoring removed bh option
[  180.963613][T10051] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  180.986232][T10051] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.995783][T10051] EXT4-fs error (device loop0): ext4_find_dest_de:2052: inode #12: block 7: comm syz.0.1595: bad entry in directory: rec_len is too small for name_len - offset=16, inode=14, rec_len=40, size=56 fake=0
[  181.001977][T10051] EXT4-fs (loop0): Remounting filesystem read-only
[  181.004396][T10051] overlayfs: cleanup of 'index/#18' failed (-30)
[  181.017637][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.098969][T10061] syz_tun: entered promiscuous mode
[  181.101704][T10061] syz_tun: left promiscuous mode
[  181.670159][T10072] loop2: detected capacity change from 0 to 32768
[  181.677570][T10072] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  181.688021][T10072] XFS (loop2): Ending clean mount
[  181.714731][ T5844] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  181.724919][ T2257] usb 1-1: new full-speed USB device number 29 using dummy_hcd
[  181.886261][ T2257] usb 1-1: config 0 has an invalid interface number: 133 but max is 0
[  181.888895][ T2257] usb 1-1: config 0 has no interface number 0
[  181.892719][ T2257] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  181.901465][ T2257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.905349][ T2257] usb 1-1: Product: syz
[  181.907024][ T2257] usb 1-1: Manufacturer: syz
[  181.908955][ T2257] usb 1-1: SerialNumber: syz
[  181.912111][ T2257] usb 1-1: config 0 descriptor??
[  182.056446][T10092] netlink: 'syz.2.1609': attribute type 12 has an invalid length.
[  182.084507][T10094] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1610'.
[  182.091889][T10096] loop2: detected capacity change from 0 to 8
[  182.096887][T10096] SQUASHFS error: zlib decompression failed, data probably corrupt
[  182.100306][T10096] SQUASHFS error: Failed to read block 0x9b: -5
[  182.103142][T10096] SQUASHFS error: Unable to read metadata cache entry [99]
[  182.108817][T10096] SQUASHFS error: Unable to read inode 0x127
[  182.121489][ T2257] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected
[  182.129261][ T2257] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81
[  182.132292][ T2257] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1
[  182.136547][ T2257] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2
[  182.141037][ T2257] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  182.464114][ T5908] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  182.504551][ T2257] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  182.533711][ T7624] usb 1-1: USB disconnect, device number 29
[  182.537962][ T7624] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  182.541647][ T7624] keyspan 1-1:0.133: device disconnected
[  182.626674][ T5908] usb 3-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  182.630471][ T5908] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  182.635745][ T5908] usb 3-1: config 0 descriptor??
[  182.639893][ T5908] gspca_main: spca508-2.14.0 probing 8086:0110
[  182.655703][ T2257] usb 4-1: config 5 has an invalid interface number: 123 but max is 0
[  182.658893][ T2257] usb 4-1: config 5 has no interface number 0
[  182.661274][ T2257] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0xEB, changing to 0x8B
[  182.666371][ T2257] usb 4-1: config 5 interface 123 altsetting 7 has an endpoint descriptor with address 0x16, changing to 0x6
[  182.670889][ T2257] usb 4-1: config 5 interface 123 altsetting 7 endpoint 0x6 has invalid maxpacket 157, setting to 64
[  182.675430][ T2257] usb 4-1: config 5 interface 123 has no altsetting 0
[  182.680384][ T2257] usb 4-1: New USB device found, idVendor=3923, idProduct=718a, bcdDevice=d8.d7
[  182.684525][ T2257] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.687625][ T2257] usb 4-1: Product: syz
[  182.689334][ T2257] usb 4-1: Manufacturer: syz
[  182.691243][ T2257] usb 4-1: SerialNumber: syz
[  182.695284][T10114] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  182.841948][ T5908] gspca_spca508: reg_read err -32
[  182.845878][ T5908] gspca_spca508: reg_read err -32
[  182.848455][ T5908] gspca_spca508: reg_read err -32
[  182.903591][ T2257] comedi comedi5: driver 'ni6501' has successfully auto-configured 'ni6501'.
[  182.908505][ T2257] usb 4-1: USB disconnect, device number 15
[  183.051299][ T5908] gspca_spca508: reg_read err -71
[  183.054830][ T5908] gspca_spca508: reg write: error -71
[  183.056854][ T5908] spca508 3-1:0.0: probe with driver spca508 failed with error -71
[  183.060309][ T5908] usb 3-1: USB disconnect, device number 23
[  183.157670][T10126] (unnamed net_device) (uninitialized): option arp_validate: invalid value (18446744073709551614)
[  183.230430][T10134] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1630'.
[  183.233340][T10134] netlink: 'syz.0.1630': attribute type 19 has an invalid length.
[  183.237203][T10134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1630'.
[  183.242994][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  183.247673][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  183.255340][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  183.261754][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  183.366673][T10136] loop0: detected capacity change from 0 to 32768
[  183.372406][T10136] JBD2: Ignoring recovery information on journal
[  183.384162][T10136] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  183.400152][ T5849] ocfs2: Unmounting device (7,0) on (node local)
[  183.649599][T10156] loop3: detected capacity change from 0 to 512
[  183.653417][T10156] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  183.658645][T10156] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem
[  183.664797][T10156] EXT4-fs (loop3): warning: mounting unchecked fs, running e2fsck is recommended
[  183.668752][T10156] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002e01c, mo2=0006]
[  183.671976][T10156] System zones: 0-2, 18-18, 34-35
[  183.676635][T10156] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.710164][T10152] loop2: detected capacity change from 0 to 32768
[  183.776689][ T5908] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  183.781685][T10159] loop2: detected capacity change from 0 to 2048
[  183.789377][T10159] syz.2.1641: attempt to access beyond end of device
[  183.789377][T10159] loop2: rw=524288, sector=9007199254741068, nr_sectors = 2 limit=2048
[  183.799556][T10161] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  183.800605][T10159] NILFS (loop2): the device already has a read/write mount.
[  183.878837][T10163] loop2: detected capacity change from 0 to 256
[  183.894300][T10164] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1640: bg 0: block 353: padding at end of block bitmap is not set
[  183.911465][T10163] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  183.918084][T10163] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  183.938388][T10163] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  184.097155][T10168] [U] V3Fپ"W/4:XTZWTLW=
[  184.100042][T10168] [U] J"E:"
[  184.155603][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.159556][ T5908] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.164634][ T5908] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  184.169705][ T5908] usb 1-1: New USB device found, idVendor=0b05, idProduct=1854, bcdDevice= 0.00
[  184.173257][ T5908] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.177722][ T5908] usb 1-1: config 0 descriptor??
[  184.444030][ T5313] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  184.518428][ T7132] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.587167][ T5908] asus 0003:0B05:1854.000C: hidraw0: USB HID v0.80 Device [HID 0b05:1854] on usb-dummy_hcd.0-1/input0
[  184.591608][ T5908] asus 0003:0B05:1854.000C: Asus input not registered
[  184.596795][ T5313] usb 3-1: config index 0 descriptor too short (expected 39, got 27)
[  184.599974][ T5313] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  184.603017][ T5313] usb 3-1: config 0 interface 0 has no altsetting 0
[  184.606131][ T5908] asus 0003:0B05:1854.000C: probe with driver asus failed with error -12
[  184.612564][ T5313] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  184.616352][ T5313] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  184.619409][ T5313] usb 3-1: Product: syz
[  184.621199][ T5313] usb 3-1: Manufacturer: syz
[  184.622819][ T5313] usb 3-1: SerialNumber: syz
[  184.625296][ T5313] usb 3-1: config 0 descriptor??
[  184.628855][ T5313] hub 3-1:0.0: bad descriptor, ignoring hub
[  184.631082][ T5313] hub 3-1:0.0: probe with driver hub failed with error -5
[  184.636277][ T5313] usb 3-1: selecting invalid altsetting 0
[  184.643114][T10176] loop3: detected capacity change from 0 to 32768
[  184.646282][T10176] (syz.3.1648,10176,1):ocfs2_verify_volume:2322 ERROR: Superblock slots found greater than file system maximum: found 65535, max 255
[  184.651551][T10176] (syz.3.1648,10176,1):ocfs2_verify_volume:2331 ERROR: status = -22
[  184.655045][T10176] (syz.3.1648,10176,1):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  184.658347][T10176] (syz.3.1648,10176,1):ocfs2_fill_super:1177 ERROR: status = -22
[  184.790637][ T6411] usb 1-1: USB disconnect, device number 30
[  184.874770][T10180] loop3: detected capacity change from 0 to 32768
[  184.877270][T10180] XFS: ikeep mount option is deprecated.
[  184.879325][T10180] XFS: ikeep mount option is deprecated.
[  184.883455][T10180] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  184.897136][T10180] XFS (loop3): Ending clean mount
[  184.913264][ T7132] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  184.916983][ T5908] usb 3-1: USB disconnect, device number 24
[  185.584040][ T5313] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  185.659807][T10206] loop2: detected capacity change from 0 to 2048
[  185.662699][T10206] EXT4-fs: Ignoring removed i_version option
[  185.676579][T10206] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  185.680553][T10206] ext4 filesystem being mounted at /573/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  185.734013][ T5313] usb 1-1: Using ep0 maxpacket: 32
[  185.737951][ T5313] usb 1-1: config 0 has an invalid interface number: 184 but max is 0
[  185.741269][ T5313] usb 1-1: config 0 has no interface number 0
[  185.743776][ T5313] usb 1-1: config 0 interface 184 has no altsetting 0
[  185.749986][ T5313] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  185.753705][ T5313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.757645][ T5313] usb 1-1: Product: syz
[  185.759703][ T5313] usb 1-1: Manufacturer: syz
[  185.761667][ T5313] usb 1-1: SerialNumber: syz
[  185.765918][ T5313] usb 1-1: config 0 descriptor??
[  185.769787][ T5313] smsc75xx v1.0.0
[  185.781403][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.306484][T10228] loop2: detected capacity change from 0 to 1024
[  186.309207][T10228] EXT4-fs: Ignoring removed orlov option
[  186.316784][T10228] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  186.326558][   T33] audit: type=1800 audit(1756196121.774:711): pid=10228 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1666" name="file1" dev="loop2" ino=15 res=0 errno=0
[  186.343495][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.389971][T10234] loop2: detected capacity change from 0 to 8
[  186.393743][T10234] SQUASHFS error: lzo decompression failed, data probably corrupt
[  186.396486][T10234] SQUASHFS error: Failed to read block 0x91: -5
[  186.398747][T10234] SQUASHFS error: Unable to read metadata cache entry [8f]
[  186.401250][T10234] SQUASHFS error: Unable to read inode 0x11f
[  186.409349][ T5313] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[  186.413522][ T5313] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  186.628352][T10251] loop2: detected capacity change from 0 to 512
[  186.631887][T10251] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  186.646625][T10251] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  186.651573][T10251] ext4 filesystem being mounted at /590/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.660836][T10251] EXT4-fs error (device loop2): ext4_xattr_block_list:762: inode #15: comm syz.2.1676: corrupted xattr block 19: overlapping e_value 
[  186.677715][T10251] EXT4-fs (loop2): Remounting filesystem read-only
[  186.722909][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  186.959460][T10279] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  187.034075][ T7624] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  187.191510][ T7624] usb 4-1: config index 0 descriptor too short (expected 23569, got 27)
[  187.197871][ T7624] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  187.204075][ T7624] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  187.208141][ T7624] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  187.211639][ T7624] usb 4-1: Manufacturer: syz
[  187.215343][ T7624] usb 4-1: config 0 descriptor??
[  187.274120][ T7624] rc_core: IR keymap rc-hauppauge not found
[  187.276658][ T7624] Registered IR keymap rc-empty
[  187.279018][ T7624] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  187.284311][ T7624] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input13
[  187.430786][    C1] igorplugusb 4-1:0.0: Error: urb status = -32
[  187.434920][ T7624] usb 4-1: USB disconnect, device number 16
[  187.942527][T10370] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1691'.
[  188.033134][ T5313] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71
[  188.042428][ T5313] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71
[  188.046714][ T5313] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[  188.051372][ T5313] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  188.055518][ T5313] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71
[  188.060564][ T5313] usb 1-1: USB disconnect, device number 31
[  188.310415][T10396] loop2: detected capacity change from 0 to 4096
[  188.319585][T10397] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  188.728527][T10410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1709'.
[  189.129378][T10417] 9pnet_fd: p9_fd_create_unix (10417): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  189.348652][T10426] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1717'.
[  189.905717][T10469] netlink: 'syz.2.1738': attribute type 1 has an invalid length.
[  189.909332][T10469] netlink: 'syz.2.1738': attribute type 1 has an invalid length.
[  189.987474][T10477] bridge0: entered promiscuous mode
[  189.990597][T10477] bridge0: port 3(macvlan2) entered blocking state
[  189.993237][T10477] bridge0: port 3(macvlan2) entered disabled state
[  189.998035][T10477] macvlan2: entered allmulticast mode
[  190.001242][T10477] bridge0: entered allmulticast mode
[  190.005158][T10477] macvlan2: left allmulticast mode
[  190.007149][T10477] bridge0: left allmulticast mode
[  190.009333][T10477] bridge0: left promiscuous mode
[  190.103179][T10492] loop2: detected capacity change from 0 to 512
[  190.110111][T10492] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a846e02c, mo2=0002]
[  190.113370][T10492] System zones: 1-12
[  190.120208][T10492] EXT4-fs error (device loop2): dx_probe:791: inode #2: comm syz.2.1748: Directory hole found for htree index block 0
[  190.125226][T10492] EXT4-fs (loop2): Remounting filesystem read-only
[  190.127640][T10492] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -117
[  190.130651][T10492] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  190.134251][T10492] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  190.150945][T10492] EXT4-fs (loop2): shut down requested (1)
[  190.183420][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.302081][T10503] loop3: detected capacity change from 0 to 32768
[  190.305355][T10503] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1754 (10503)
[  190.310245][T10503] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  190.313546][T10503] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  190.526796][T10503] BTRFS info (device loop3): enabling ssd optimizations
[  190.532506][T10503] BTRFS info (device loop3): enabling free space tree
[  190.553548][ T7132] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  190.749521][T10534] loop2: detected capacity change from 0 to 32768
[  190.752715][T10534] XFS: noikeep mount option is deprecated.
[  190.769380][T10534] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  190.793024][T10534] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  190.803299][T10534] XFS (loop2): Starting recovery (logdev: internal)
[  190.808730][T10544] loop3: detected capacity change from 0 to 32768
[  190.812293][T10534] XFS (loop2): Ending recovery (logdev: internal)
[  190.821084][T10544] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  190.824739][   T13] (kworker/u8:1,13,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  190.836698][ T7132] ocfs2: Unmounting device (7,3) on (node local)
[  190.842972][ T5844] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  190.953203][T10562] loop3: detected capacity change from 0 to 16
[  190.959002][T10562] erofs (device loop3): mounted with root inode @ nid 36.
[  190.984816][T10564] loop2: detected capacity change from 0 to 1024
[  190.999991][T10564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.021868][T10566] loop3: detected capacity change from 0 to 4096
[  191.029671][T10566] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  191.032780][T10566] UDF-fs: Scanning with blocksize 512 failed
[  191.039086][T10566] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  191.057642][   T33] audit: type=1800 audit(1756196126.494:712): pid=10566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1771" name="bus" dev="loop3" ino=1347 res=0 errno=0
[  191.081188][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.265943][T10582] loop2: detected capacity change from 0 to 128
[  191.269079][T10582] ubifs: Bad value for 'compr'
[  191.425072][T10591] loop0: detected capacity change from 0 to 4096
[  191.633223][T10602] loop0: detected capacity change from 0 to 512
[  191.637633][T10602] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  191.643556][T10602] EXT4-fs error (device loop0): ext4_read_block_bitmap_nowait:483: comm syz.0.1786: Invalid block bitmap block 0 in block_group 0
[  191.650532][T10602] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  191.653876][T10602] EXT4-fs error (device loop0): ext4_clear_blocks:876: inode #11: comm syz.0.1786: attempt to clear invalid blocks 983261 len 1
[  191.658646][T10602] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.1786: Invalid inode table block 0 in block_group 0
[  191.662898][T10602] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  191.669832][T10602] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  191.672791][T10602] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.1786: Invalid inode table block 0 in block_group 0
[  191.677892][T10602] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  191.681276][T10602] EXT4-fs error (device loop0): ext4_truncate:4666: inode #11: comm syz.0.1786: mark_inode_dirty error
[  191.686151][T10602] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  191.689255][T10602] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.1786: Invalid inode table block 0 in block_group 0
[  191.693522][T10602] EXT4-fs (loop0): 1 truncate cleaned up
[  191.696234][T10602] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  191.724942][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.593069][T10659] 9p: Unknown access argument 18446744073709551615: -34
[  193.954080][ T6411] usb 1-1: new full-speed USB device number 32 using dummy_hcd
[  194.056346][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.058754][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.117260][ T6411] usb 1-1: config 0 has an invalid interface number: 10 but max is 0
[  194.120828][ T6411] usb 1-1: config 0 has no interface number 0
[  194.127890][ T6411] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68a3, bcdDevice=1d.a7
[  194.131681][ T6411] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.135113][ T6411] usb 1-1: Product: syz
[  194.136872][ T6411] usb 1-1: Manufacturer: syz
[  194.138781][ T6411] usb 1-1: SerialNumber: syz
[  194.144472][ T6411] usb 1-1: config 0 descriptor??
[  194.149009][ T6411] usb 1-1: Expected 3 endpoints, found: 0
[  194.357563][ T5313] usb 1-1: USB disconnect, device number 32
[  194.412742][T10687] loop3: detected capacity change from 0 to 128
[  195.008924][T10708] Bluetooth: hci0: Opcode 0x0401 failed: -22
[  195.131790][T10712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1832'.
[  195.136925][T10712] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  195.139532][T10712] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  195.184614][ T6411] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  195.227171][T10697] loop3: detected capacity change from 0 to 32768
[  195.344079][ T6411] usb 3-1: Using ep0 maxpacket: 8
[  195.350579][ T6411] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  195.353406][ T6411] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.356081][ T6411] usb 3-1: Product: syz
[  195.357539][ T6411] usb 3-1: Manufacturer: syz
[  195.359307][ T6411] usb 3-1: SerialNumber: syz
[  195.364748][ T6411] usb 3-1: config 0 descriptor??
[  195.369915][ T6411] gspca_main: se401-2.14.0 probing 047d:5003
[  195.798087][ T6411] gspca_se401: write req failed req 0x57 val 0x00 error -71
[  195.801830][ T6411] se401 3-1:0.0: probe with driver se401 failed with error -71
[  195.806779][ T6411] usb 3-1: USB disconnect, device number 25
[  196.337980][T10728] netlink: 'syz.2.1838': attribute type 2 has an invalid length.
[  196.343167][T10728] : entered promiscuous mode
[  196.467469][T10738] loop0: detected capacity change from 0 to 512
[  196.472889][T10738] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1843: corrupted in-inode xattr: invalid ea_ino
[  196.478518][T10738] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1843: couldn't read orphan inode 15 (err -117)
[  196.487347][T10738] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  196.505445][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.525302][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1845'.
[  196.528087][T10744] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  196.530402][T10744] batman_adv: batadv0: Removing interface: batadv_slave_0
[  196.533033][T10744] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  196.536333][T10744] batman_adv: batadv0: Removing interface: batadv_slave_1
[  196.754685][ T5908] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  196.789420][T10746] loop0: detected capacity change from 0 to 32768
[  196.795765][T10746] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  196.809554][T10746] XFS (loop0): Ending clean mount
[  196.812065][T10746] XFS (loop0): Quotacheck needed: Please wait.
[  196.817694][T10746] XFS (loop0): Quotacheck: Done.
[  196.849297][ T5849] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  196.914080][ T5908] usb 3-1: Using ep0 maxpacket: 32
[  196.925827][ T5908] usb 3-1: config 0 interface 0 has no altsetting 0
[  196.930602][ T5908] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  196.933711][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  196.938951][ T5908] usb 3-1: Product: syz
[  196.940205][ T5908] usb 3-1: Manufacturer: syz
[  196.941724][ T5908] usb 3-1: SerialNumber: syz
[  196.949389][ T5908] usb 3-1: config 0 descriptor??
[  196.954091][ T5908] gs_usb 3-1:0.0: Required endpoints not found
[  197.024585][   T55] Bluetooth: hci0: command tx timeout
[  197.031129][T10758] loop0: detected capacity change from 0 to 32768
[  197.034172][T10758] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1847 (10758)
[  197.040092][T10758] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  197.043655][T10758] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  197.056837][T10760] loop3: detected capacity change from 0 to 32768
[  197.060046][T10760] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1849 (10760)
[  197.062455][T10758] BTRFS info (device loop0): enabling ssd optimizations
[  197.067655][T10758] BTRFS info (device loop0): enabling free space tree
[  197.069064][T10760] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  197.074779][T10760] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  197.099194][ T5849] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  197.138997][T10760] BTRFS info (device loop3): enabling ssd optimizations
[  197.141931][T10760] BTRFS info (device loop3): enabling free space tree
[  197.174218][ T7132] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  197.303092][T10800] vim2m vim2m.0: Fourcc format (0x47425247) invalid.
[  197.308711][T10802] loop0: detected capacity change from 0 to 128
[  197.311483][T10802] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  197.316874][T10802] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  197.362547][T10806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1857'.
[  197.376621][T10806] batadv_slave_0: entered promiscuous mode
[  197.379644][T10806] batadv_slave_1: entered promiscuous mode
[  197.382484][T10806] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  197.386374][T10806] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  197.389517][T10806] debugfs: 'hsr1' already exists in 'hsr'
[  197.391611][T10806] Cannot create hsr debugfs directory
[  197.723239][T10809] loop3: detected capacity change from 0 to 32768
[  198.295976][T10818] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1862'.
[  198.332819][T10820] netlink: 360 bytes leftover after parsing attributes in process `syz.0.1863'.
[  198.356737][T10822] QAT: Stopping all acceleration devices.
[  198.437180][T10834] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1869'.
[  198.529618][T10842] loop0: detected capacity change from 0 to 512
[  198.538780][T10842] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.542926][T10842] ext4 filesystem being mounted at /613/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.725617][T10848] lo speed is unknown, defaulting to 1000
[  198.728177][T10848] lo speed is unknown, defaulting to 1000
[  198.732771][T10848] lo speed is unknown, defaulting to 1000
[  198.764201][T10848] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  198.847301][T10848] lo speed is unknown, defaulting to 1000
[  198.855783][T10848] lo speed is unknown, defaulting to 1000
[  198.863541][T10848] lo speed is unknown, defaulting to 1000
[  199.368538][   T33] audit: type=1326 audit(1756196134.814:713): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10854 comm="syz.3.1877" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa588d8ebe9 code=0x0
[  199.419670][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.498213][ T5908] usb 3-1: USB disconnect, device number 26
[  199.515517][T10866] loop2: detected capacity change from 0 to 164
[  199.522684][T10866] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[  199.588005][   T33] audit: type=1326 audit(1756196135.024:714): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10872 comm="syz.0.1885" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ccf8ebe9 code=0x7ffc0000
[  199.608632][   T33] audit: type=1326 audit(1756196135.024:715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10872 comm="syz.0.1885" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ccf8ebe9 code=0x7ffc0000
[  199.619148][   T33] audit: type=1326 audit(1756196135.044:716): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10872 comm="syz.0.1885" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f97ccf8d550 code=0x7ffc0000
[  199.628146][   T33] audit: type=1326 audit(1756196135.044:717): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10872 comm="syz.0.1885" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ccf8ebe9 code=0x7ffc0000
[  199.635829][   T33] audit: type=1326 audit(1756196135.044:718): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10872 comm="syz.0.1885" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ccf8ebe9 code=0x7ffc0000
[  199.643216][   T33] audit: type=1326 audit(1756196135.044:719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10872 comm="syz.0.1885" exe="/syz-executor" sig=0 arch=c000003e syscall=40 compat=0 ip=0x7f97ccf8ebe9 code=0x7ffc0000
[  199.651774][   T33] audit: type=1326 audit(1756196135.044:720): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10872 comm="syz.0.1885" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f97ccf8ebe9 code=0x7ffc0000
[  199.897999][T10882] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1889'.
[  200.018407][T10891] loop0: detected capacity change from 0 to 1024
[  200.048525][  T364] hfsplus: b-tree write err: -5, ino 3
[  200.061619][T10885] loop2: detected capacity change from 0 to 32768
[  200.064427][T10885] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1890 (10885)
[  200.069861][T10885] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  200.073368][T10885] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  200.088438][T10885] BTRFS info (device loop2): enabling ssd optimizations
[  200.090846][T10885] BTRFS info (device loop2): enabling free space tree
[  200.092942][T10885] BTRFS info (device loop2): use lzo compression, level 0
[  200.126247][ T5844] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  200.179066][T10918] netlink: 'syz.0.1900': attribute type 32 has an invalid length.
[  200.221656][T10920] loop2: detected capacity change from 0 to 4096
[  200.227938][T10920] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  200.250346][T10927] loop0: detected capacity change from 0 to 64
[  200.257354][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.264796][T10927] syz.0.1903: attempt to access beyond end of device
[  200.264796][T10927] loop0: rw=0, sector=65534, nr_sectors = 2 limit=64
[  200.271065][T10927] buffer_io_error: 10 callbacks suppressed
[  200.271082][T10927] Buffer I/O error on dev loop0, logical block 32767, async page read
[  200.343491][T10929] loop3: detected capacity change from 0 to 256
[  201.208054][T10951] loop3: detected capacity change from 0 to 256
[  201.211379][T10951] exfat: Deprecated parameter 'namecase'
[  201.213799][T10951] exfat: Deprecated parameter 'namecase'
[  201.216379][T10951] exfat: Deprecated parameter 'utf8'
[  201.223156][T10951] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  201.263470][T10953] sit0: entered promiscuous mode
[  201.272118][T10953] netlink: 21 bytes leftover after parsing attributes in process `syz.3.1913'.
[  201.531198][T10968] loop2: detected capacity change from 0 to 8
[  201.536348][T10968] SQUASHFS error: zlib decompression failed, data probably corrupt
[  201.545525][T10968] SQUASHFS error: Failed to read block 0x9b: -5
[  201.548120][T10968] SQUASHFS error: Unable to read metadata cache entry [99]
[  201.550988][T10968] SQUASHFS error: Unable to read inode 0x127
[  201.640812][T10978] loop3: detected capacity change from 0 to 128
[  201.651089][T10978] syz.3.1924: attempt to access beyond end of device
[  201.651089][T10978] loop3: rw=2049, sector=138, nr_sectors = 112 limit=128
[  202.158603][T10997] loop3: detected capacity change from 0 to 256
[  202.167823][T10997] exFAT-fs (loop3): failed to load upcase table (idx : 0x000103df, chksum : 0xf3211d0a, utbl_chksum : 0xe619d30d)
[  202.482517][T11010] loop0: detected capacity change from 0 to 128
[  202.487910][T11010] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  202.493363][T11010] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  202.704117][ T2257] usb 4-1: new low-speed USB device number 17 using dummy_hcd
[  202.709318][T11016] loop0: detected capacity change from 0 to 32768
[  202.712808][T11016] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1941 (11016)
[  202.719894][T11016] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  202.724017][T11016] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  202.740486][T11016] BTRFS info (device loop0): enabling ssd optimizations
[  202.743291][T11016] BTRFS info (device loop0): enabling free space tree
[  202.768741][ T5849] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  202.861707][ T2257] usb 4-1: config 179 has an invalid interface number: 65 but max is 0
[  202.866472][ T2257] usb 4-1: config 179 has no interface number 0
[  202.869671][ T2257] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  202.873771][ T2257] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 8
[  202.881703][ T2257] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10
[  202.885860][T11040] loop2: detected capacity change from 0 to 512
[  202.886890][ T2257] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 8
[  202.893169][ T2257] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  202.901349][ T2257] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  202.911056][ T2257] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.916061][T11008] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  202.918984][T11008] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  202.944866][T11042] loop0: detected capacity change from 0 to 256
[  202.951058][T11042] exFAT-fs (loop0): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  203.139413][ T5313] usb 4-1: USB disconnect, device number 17
[  203.139431][    C1] xpad 4-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  203.145775][    C1] dummy_hcd dummy_hcd.3: timer fired with no URBs pending?
[  203.227363][T11075] loop0: detected capacity change from 0 to 512
[  203.230727][T11075] EXT4-fs: Ignoring removed orlov option
[  203.248216][T11075] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=8040c018, mo2=0002]
[  203.253188][T11075] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.259372][T11075] ext4 filesystem being mounted at /651/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  203.285370][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  203.700188][T11087] loop2: detected capacity change from 0 to 32768
[  203.704791][T11087] bcachefs (/dev/loop2): error reading default superblock: Unsupported superblock version_min 32.24: (unknown version) (min 0.9: (unknown version), max 1.28: inode_has_case_insensitive)
[  203.712389][T11087] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section members_v2: device 0: not enough buckets (got 0, max 64)
[  203.712389][T11087] members_v2 (size 96):
[  203.712389][T11087] member_bytes 0
[  203.720039][T11087] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  204.057780][T11106] loop2: detected capacity change from 0 to 40427
[  204.063346][T11106] F2FS-fs (loop2): invalid crc value
[  204.092800][T11106] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  204.097100][T11106] F2FS-fs (loop2): Start checkpoint disabled!
[  204.101583][T11106] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  204.207160][   T33] audit: type=1800 audit(1756196139.654:721): pid=11109 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1969" name="file1" dev="loop2" ino=10 res=0 errno=0
[  204.217123][T11109] syz.2.1969: attempt to access beyond end of device
[  204.217123][T11109] loop2: rw=2049, sector=77824, nr_sectors = 984 limit=40427
[  204.289760][T11113] netlink: 'syz.0.1971': attribute type 4 has an invalid length.
[  204.374520][T11115] loop0: detected capacity change from 0 to 1024
[  204.960388][ T3027] kworker/u10:5: attempt to access beyond end of device
[  204.960388][ T3027] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  204.966061][ T3027] CPU: 1 UID: 0 PID: 3027 Comm: kworker/u10:5 Not tainted syzkaller #0 PREEMPT(full) 
[  204.966083][ T3027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  204.966093][ T3027] Workqueue: writeback wb_workfn (flush-7:2)
[  204.966118][ T3027] Call Trace:
[  204.966124][ T3027]  <TASK>
[  204.966130][ T3027]  dump_stack_lvl+0x189/0x250
[  204.966150][ T3027]  ? __pfx_dump_stack_lvl+0x10/0x10
[  204.966166][ T3027]  ? __pfx_queue_work_on+0x10/0x10
[  204.966180][ T3027]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  204.966198][ T3027]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  204.966219][ T3027]  f2fs_handle_critical_error+0x37c/0x540
[  204.966242][ T3027]  f2fs_write_end_io+0x886/0xb60
[  204.966262][ T3027]  __submit_merged_bio+0x27a/0x6a0
[  204.966283][ T3027]  __submit_merged_write_cond+0x255/0x530
[  204.966301][ T3027]  f2fs_write_data_pages+0x261d/0x3000
[  204.966331][ T3027]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  204.966354][ T3027]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  204.966389][ T3027]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  204.966411][ T3027]  ? trace_f2fs_writepages+0x7f/0x200
[  204.966429][ T3027]  ? f2fs_write_node_pages+0x478/0x6e0
[  204.966447][ T3027]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  204.966465][ T3027]  ? f2fs_update_inode+0x13d9/0x2620
[  204.966480][ T3027]  ? f2fs_write_inode+0x3fb/0x5f0
[  204.966496][ T3027]  ? __pfx_f2fs_balance_fs+0x10/0x10
[  204.966514][ T3027]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  204.966533][ T3027]  do_writepages+0x32e/0x550
[  204.966577][ T3027]  ? unwind_next_frame+0xa5/0x2390
[  204.966598][ T3027]  __writeback_single_inode+0x145/0xff0
[  204.966615][ T3027]  ? do_raw_spin_unlock+0x4d/0x240
[  204.966664][ T3027]  writeback_sb_inodes+0x6c7/0x1010
[  204.966687][ T3027]  ? fprop_reflect_period_percpu+0x6b/0x330
[  204.966708][ T3027]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  204.966740][ T3027]  ? rcu_is_watching+0x15/0xb0
[  204.966759][ T3027]  wb_writeback+0x43b/0xaf0
[  204.966779][ T3027]  ? queue_io+0x2f1/0x590
[  204.966796][ T3027]  ? __pfx_wb_writeback+0x10/0x10
[  204.966816][ T3027]  ? rcu_is_watching+0x15/0xb0
[  204.966832][ T3027]  wb_workfn+0x409/0xef0
[  204.966853][ T3027]  ? __pfx_wb_workfn+0x10/0x10
[  204.966867][ T3027]  ? rcu_is_watching+0x15/0xb0
[  204.966881][ T3027]  ? rcu_is_watching+0x15/0xb0
[  204.966897][ T3027]  ? process_scheduled_works+0x9ef/0x17b0
[  204.966910][ T3027]  ? rcu_is_watching+0x15/0xb0
[  204.966923][ T3027]  ? lock_acquire+0x5f/0x360
[  204.966944][ T3027]  ? rcu_is_watching+0x15/0xb0
[  204.966956][ T3027]  ? process_scheduled_works+0x9ef/0x17b0
[  204.966969][ T3027]  ? process_scheduled_works+0x9ef/0x17b0
[  204.966983][ T3027]  process_scheduled_works+0xae1/0x17b0
[  204.967009][ T3027]  ? __pfx_process_scheduled_works+0x10/0x10
[  204.967030][ T3027]  worker_thread+0x8a0/0xda0
[  204.967044][ T3027]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  204.967064][ T3027]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  204.967082][ T3027]  ? __kthread_parkme+0x7b/0x200
[  204.967101][ T3027]  kthread+0x711/0x8a0
[  204.967118][ T3027]  ? __pfx_worker_thread+0x10/0x10
[  204.967131][ T3027]  ? __pfx_kthread+0x10/0x10
[  204.967148][ T3027]  ? rcu_is_watching+0x15/0xb0
[  204.967161][ T3027]  ? __pfx_kthread+0x10/0x10
[  204.967178][ T3027]  ret_from_fork+0x3fc/0x770
[  204.967193][ T3027]  ? __pfx_ret_from_fork+0x10/0x10
[  204.967210][ T3027]  ? __switch_to_asm+0x39/0x70
[  204.967227][ T3027]  ? __switch_to_asm+0x33/0x70
[  204.967243][ T3027]  ? __pfx_kthread+0x10/0x10
[  204.967259][ T3027]  ret_from_fork_asm+0x1a/0x30
[  204.967284][ T3027]  </TASK>
[  204.967990][ T3027] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  205.086550][T11124] loop3: detected capacity change from 0 to 32768
[  205.109163][T11124] XFS: ikeep mount option is deprecated.
[  205.114926][T11124] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  205.136910][T11124] XFS (loop3): Ending clean mount
[  205.139738][T11124] XFS (loop3): Quotacheck needed: Please wait.
[  205.144283][T11124] XFS (loop3): Quotacheck: Done.
[  205.167237][ T7132] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  205.377104][T11145] syz_tun: entered allmulticast mode
[  205.571651][T11157] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1986'.
[  205.653142][ T5313] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  205.805623][ T5313] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.809621][ T5313] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[  205.814674][ T5313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10
[  205.818966][ T5313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64
[  205.823233][ T5313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10
[  205.827436][ T5313] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 213, setting to 64
[  205.831477][ T5313] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  205.839207][ T5313] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[  205.842728][ T5313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.845960][ T5313] usb 4-1: Product: syz
[  205.847626][ T5313] usb 4-1: Manufacturer: syz
[  205.849431][ T5313] usb 4-1: SerialNumber: syz
[  205.852394][ T5313] usb 4-1: config 0 descriptor??
[  205.855465][T11138] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  205.858470][T11138] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  206.253220][T11165] netlink: 'syz.2.1989': attribute type 21 has an invalid length.
[  206.256616][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1989'.
[  206.306216][T11169] loop2: detected capacity change from 0 to 2048
[  206.309839][T11169] UDF-fs: error (device loop2): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  206.314842][T11169] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  206.317538][T11169] UDF-fs: Scanning with blocksize 512 failed
[  206.321548][T11169] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  206.327626][   T33] audit: type=1800 audit(1756196141.774:722): pid=11169 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1991" name="file1" dev="loop2" ino=838 res=0 errno=0
[  206.374490][ T5847] Bluetooth: hci2: command 0x0405 tx timeout
[  206.725749][ T5908] hid-generic 0000:0000:0000.000D: unknown main item tag 0x0
[  206.738391][ T5908] hid-generic 0000:0000:0000.000D: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  207.671616][T11197] loop0: detected capacity change from 0 to 32768
[  207.674799][T11197] XFS: noikeep mount option is deprecated.
[  207.699124][T11197] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  207.725050][T11197] XFS (loop0): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  207.737248][T11197] XFS (loop0): Starting recovery (logdev: internal)
[  207.745713][T11197] XFS (loop0): Ending recovery (logdev: internal)
[  207.794482][T11200] loop3: detected capacity change from 0 to 32768
[  207.800330][T11200] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  207.810214][T11200] XFS (loop3): Ending clean mount
[  207.812953][T11217] XFS (loop0): Metadata corruption detected at xfs_btree_lookup_get_block+0x3c5/0x500, xfs_bnobt block 0x8
[  207.813030][T11200] XFS (loop3): Quotacheck needed: Please wait.
[  207.823312][T11200] XFS (loop3): Quotacheck: Done.
[  207.827628][T11217] XFS (loop0): Unmount and run xfs_repair
[  207.833825][T11197] XFS (loop0): Internal error i != 1 at line 628 of file fs/xfs/libxfs/xfs_alloc.c.  Caller xfs_alloc_fixup_trees+0x929/0xd20
[  207.838595][T11197] CPU: 1 UID: 0 PID: 11197 Comm: syz.0.2004 Not tainted syzkaller #0 PREEMPT(full) 
[  207.838615][T11197] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  207.838625][T11197] Call Trace:
[  207.838632][T11197]  <TASK>
[  207.838638][T11197]  dump_stack_lvl+0x189/0x250
[  207.838658][T11197]  ? __pfx__xfs_alert_tag+0x10/0x10
[  207.838674][T11197]  ? __pfx_dump_stack_lvl+0x10/0x10
[  207.838692][T11197]  ? __pfx_xfs_btree_lookup+0x10/0x10
[  207.838710][T11197]  xfs_corruption_error+0x122/0x170
[  207.838726][T11197]  ? xfs_alloc_fixup_trees+0x929/0xd20
[  207.838745][T11197]  xfs_alloc_fixup_trees+0x95e/0xd20
[  207.838764][T11197]  ? xfs_alloc_fixup_trees+0x929/0xd20
[  207.838786][T11197]  ? __pfx_xfs_alloc_fixup_trees+0x10/0x10
[  207.838806][T11197]  ? rcu_is_watching+0x15/0xb0
[  207.838820][T11197]  ? xfs_alloc_ag_vextent_lastblock+0x3e2/0x6e0
[  207.838842][T11197]  ? rcu_is_watching+0x15/0xb0
[  207.838853][T11197]  xfs_alloc_cur_finish+0xd3/0x4b0
[  207.838875][T11197]  xfs_alloc_ag_vextent_near+0xd1a/0x1230
[  207.838901][T11197]  ? __pfx_xfs_alloc_ag_vextent_near+0x10/0x10
[  207.838921][T11197]  ? xfs_group_grab+0x28/0x480
[  207.838934][T11197]  ? xfs_alloc_vextent_prepare_ag+0x1b2/0x610
[  207.838964][T11197]  xfs_alloc_vextent_iterate_ags+0x640/0x940
[  207.838985][T11197]  xfs_alloc_vextent_start_ag+0x388/0x850
[  207.839005][T11197]  xfs_bmapi_allocate+0x188e/0x2e00
[  207.839026][T11197]  ? __pfx_xfs_bmapi_allocate+0x10/0x10
[  207.839040][T11197]  ? lock_acquire+0x5f/0x360
[  207.839065][T11197]  ? xfs_iext_lookup_extent+0x587/0x7e0
[  207.839081][T11197]  ? xfs_iext_prev+0x35a/0x370
[  207.839096][T11197]  ? xfs_iext_get_extent+0x1bb/0x370
[  207.839115][T11197]  xfs_bmapi_convert_delalloc+0x7e2/0x1430
[  207.839137][T11197]  ? __pfx_xfs_bmapi_convert_delalloc+0x10/0x10
[  207.839156][T11197]  ? lock_release+0x4b/0x3e0
[  207.839176][T11197]  ? xfs_writeback_range+0x568/0xf70
[  207.839193][T11197]  ? xfs_writeback_range+0x568/0xf70
[  207.839208][T11197]  ? xfs_iunlock+0x1c0/0x330
[  207.839227][T11197]  xfs_writeback_range+0x674/0xf70
[  207.839248][T11197]  ? __pfx_xfs_writeback_range+0x10/0x10
[  207.839265][T11197]  ? __bitmap_set+0x12f/0x170
[  207.839285][T11197]  ? ifs_block_is_dirty+0x193/0x220
[  207.839306][T11197]  iomap_writeback_folio+0xe75/0x1c80
[  207.839333][T11197]  iomap_writepages+0x162/0x2d0
[  207.839351][T11197]  ? __pfx_iomap_writepages+0x10/0x10
[  207.839402][T11197]  xfs_vm_writepages+0x296/0x310
[  207.839420][T11197]  ? __pfx_xfs_vm_writepages+0x10/0x10
[  207.839436][T11197]  ? folio_add_lru+0x1b2/0x3d0
[  207.839477][T11197]  ? filemap_add_folio+0x1af/0x270
[  207.839504][T11197]  ? do_raw_spin_lock+0x121/0x290
[  207.839516][T11197]  ? xas_start+0x3b3/0x770
[  207.839534][T11197]  ? __pfx_xfs_vm_writepages+0x10/0x10
[  207.839568][T11197]  do_writepages+0x32e/0x550
[  207.839588][T11197]  ? rcu_is_watching+0x15/0xb0
[  207.839603][T11197]  ? do_raw_spin_unlock+0x4d/0x240
[  207.839621][T11197]  file_write_and_wait_range+0x23e/0x340
[  207.839636][T11197]  ? __pfx_file_write_and_wait_range+0x10/0x10
[  207.839666][T11197]  ? __pfx_iomap_file_buffered_write+0x10/0x10
[  207.839684][T11197]  ? __pfx_xfs_break_layouts+0x10/0x10
[  207.839701][T11197]  xfs_file_fsync+0x1a3/0xa30
[  207.839722][T11197]  ? __pfx_xfs_file_fsync+0x10/0x10
[  207.839741][T11197]  ? xfs_file_buffered_write+0x1dd/0x8a0
[  207.839761][T11197]  ? vfs_fsync_range+0x12c/0x1c0
[  207.839773][T11197]  xfs_file_buffered_write+0x723/0x8a0
[  207.839794][T11197]  ? __pfx_xfs_file_buffered_write+0x10/0x10
[  207.839814][T11197]  ? xfs_file_write_iter+0x37b/0xa60
[  207.839833][T11197]  ? __asan_memset+0x22/0x50
[  207.839851][T11197]  iter_file_splice_write+0x975/0x10e0
[  207.839880][T11197]  ? __pfx_iter_file_splice_write+0x10/0x10
[  207.839897][T11197]  ? lock_acquire+0x5f/0x360
[  207.839915][T11197]  ? preempt_count_add+0x91/0x1a0
[  207.839934][T11197]  ? __pfx_iter_file_splice_write+0x10/0x10
[  207.839954][T11197]  direct_splice_actor+0x101/0x160
[  207.839975][T11197]  splice_direct_to_actor+0x5a8/0xcc0
[  207.840001][T11197]  ? __pfx_direct_splice_actor+0x10/0x10
[  207.840020][T11197]  ? __pfx_splice_direct_to_actor+0x10/0x10
[  207.840040][T11197]  do_splice_direct+0x181/0x270
[  207.840060][T11197]  ? __pfx_do_splice_direct+0x10/0x10
[  207.840078][T11197]  ? common_file_perm+0x1b5/0x230
[  207.840098][T11197]  ? __pfx_direct_file_splice_eof+0x10/0x10
[  207.840118][T11197]  ? bpf_lsm_file_permission+0x9/0x20
[  207.840135][T11197]  ? security_file_permission+0x75/0x290
[  207.840154][T11197]  ? rw_verify_area+0x255/0x4d0
[  207.840172][T11197]  do_sendfile+0x4da/0x7e0
[  207.840189][T11197]  ? __pfx_do_sendfile+0x10/0x10
[  207.840204][T11197]  ? __se_sys_futex+0x36f/0x400
[  207.840223][T11197]  __se_sys_sendfile64+0x13e/0x190
[  207.840241][T11197]  ? __pfx___se_sys_sendfile64+0x10/0x10
[  207.840252][T11197]  ? rcu_is_watching+0x15/0xb0
[  207.840261][T11197]  ? rcu_is_watching+0x15/0xb0
[  207.840273][T11197]  do_syscall_64+0xfa/0x3b0
[  207.840293][T11197]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.840307][T11197]  ? exc_page_fault+0x9f/0xf0
[  207.840326][T11197]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  207.840339][T11197] RIP: 0033:0x7f97ccf8ebe9
[  207.840351][T11197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  207.840359][T11197] RSP: 002b:00007f97cdd4d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028
[  207.840369][T11197] RAX: ffffffffffffffda RBX: 00007f97cd1b5fa0 RCX: 00007f97ccf8ebe9
[  207.840396][T11197] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 0000000000000004
[  207.840401][T11197] RBP: 00007f97cd011e19 R08: 0000000000000000 R09: 0000000000000000
[  207.840406][T11197] R10: 0000000020fffe82 R11: 0000000000000246 R12: 0000000000000000
[  207.840411][T11197] R13: 00007f97cd1b6038 R14: 00007f97cd1b5fa0 R15: 00007fff61140268
[  207.840420][T11197]  </TASK>
[  207.841202][T11197] XFS (loop0): Corruption detected. Unmount and run xfs_repair
[  208.014058][ T5313] rc_core: IR keymap rc-snapstream-firefly not found
[  208.016020][T11197] XFS (loop0): page discard on page ffffea0004821c00, inode 0x1146, pos 4194304.
[  208.016578][ T5313] Registered IR keymap rc-empty
[  208.055083][ T5313] rc rc0: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  208.055213][ T7132] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  208.058546][ T5313] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input15
[  208.072771][ T5313] input: syz syz mouse as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input16
[  208.080982][ T5849] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  208.085663][ T5313] usb 4-1: USB disconnect, device number 18
[  208.086068][ T5849] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair.
[  208.087620][    C0] ati_remote 4-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[  208.307411][T11232] loop2: detected capacity change from 0 to 512
[  208.315505][T11232] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  208.320716][T11232] EXT4-fs (loop2): 1 truncate cleaned up
[  208.323618][T11232] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.345402][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.485872][ T2257] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  208.526838][   T33] audit: type=1326 audit(1756196143.974:723): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.2.2016" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd818ebe9 code=0x7ffc0000
[  208.536585][   T33] audit: type=1326 audit(1756196143.974:724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.2.2016" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd818ebe9 code=0x7ffc0000
[  208.548423][   T33] audit: type=1326 audit(1756196143.974:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.2.2016" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7fbbd818ebe9 code=0x7ffc0000
[  208.559367][   T33] audit: type=1326 audit(1756196143.974:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.2.2016" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd818ebe9 code=0x7ffc0000
[  208.564048][ T5313] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  208.568125][   T33] audit: type=1326 audit(1756196143.974:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.2.2016" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd818ebe9 code=0x7ffc0000
[  208.579947][   T33] audit: type=1326 audit(1756196143.984:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.2.2016" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fbbd818ebe9 code=0x7ffc0000
[  208.588553][   T33] audit: type=1326 audit(1756196143.984:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.2.2016" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd818ebe9 code=0x7ffc0000
[  208.602187][   T33] audit: type=1326 audit(1756196143.984:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.2.2016" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbbd818ebe9 code=0x7ffc0000
[  208.610150][   T33] audit: type=1326 audit(1756196143.984:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11242 comm="syz.2.2016" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fbbd818ebe9 code=0x7ffc0000
[  208.644144][ T2257] usb 1-1: Using ep0 maxpacket: 32
[  208.650512][ T2257] usb 1-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  208.654204][ T2257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.657264][ T2257] usb 1-1: Product: syz
[  208.658932][ T2257] usb 1-1: Manufacturer: syz
[  208.660738][ T2257] usb 1-1: SerialNumber: syz
[  208.663878][ T2257] usb 1-1: config 0 descriptor??
[  208.714255][ T5313] usb 4-1: Using ep0 maxpacket: 16
[  208.718009][ T5313] usb 4-1: config 0 has an invalid interface number: 48 but max is 0
[  208.720785][ T5313] usb 4-1: config 0 has no interface number 0
[  208.722903][ T5313] usb 4-1: config 0 interface 48 has no altsetting 0
[  208.727581][ T5313] usb 4-1: New USB device found, idVendor=1199, idProduct=b000, bcdDevice=a8.98
[  208.730677][ T5313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.734090][ T5313] usb 4-1: Product: syz
[  208.735533][ T5313] usb 4-1: Manufacturer: syz
[  208.737201][ T5313] usb 4-1: SerialNumber: syz
[  208.739732][ T5313] usb 4-1: config 0 descriptor??
[  208.854554][ T5908] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  208.948082][ T5313] usb 4-1: USB disconnect, device number 19
[  209.004057][ T5908] usb 3-1: Using ep0 maxpacket: 8
[  209.007920][ T5908] usb 3-1: config 5 has an invalid interface number: 22 but max is 0
[  209.010907][ T5908] usb 3-1: config 5 has no interface number 0
[  209.013367][ T5908] usb 3-1: config 5 interface 22 altsetting 25 endpoint 0x6 has invalid wMaxPacketSize 0
[  209.017119][ T5908] usb 3-1: config 5 interface 22 has no altsetting 0
[  209.021673][ T5908] usb 3-1: New USB device found, idVendor=0bfd, idProduct=010d, bcdDevice=ba.fa
[  209.025263][ T5908] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  209.028459][ T5908] usb 3-1: Product: syz
[  209.029985][ T5908] usb 3-1: Manufacturer: syz
[  209.031796][ T5908] usb 3-1: SerialNumber: syz
[  209.074016][ T2257] airspy 1-1:0.0: Board ID: 00
[  209.076015][ T2257] airspy 1-1:0.0: Firmware version: 
[  209.239705][ T5908] kvaser_usb 3-1:5.22: error -ENODEV: Cannot get usb endpoint(s)
[  209.243611][ T5908] rndis_host 3-1:5.22: skipping garbage
[  209.246362][ T5908] usb 3-1: bad CDC descriptors
[  209.250444][ T5908] usb 3-1: USB disconnect, device number 27
[  209.275705][ T2257] airspy 1-1:0.0: usb_control_msg() failed -71 request 11
[  209.280223][ T2257] airspy 1-1:0.0: Registered as swradio24
[  209.282493][ T2257] airspy 1-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  209.288409][ T2257] usb 1-1: USB disconnect, device number 33
[  209.800353][T11255] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2021'.
[  209.963095][T11262] netlink: 16162 bytes leftover after parsing attributes in process `syz.2.2023'.
[  209.971888][T11262] 9pnet_fd: Insufficient options for proto=fd
[  210.490890][T11269] loop3: detected capacity change from 0 to 32768
[  210.517830][   T53] read_mapping_page failed!
[  210.519758][   T53] ERROR: (device loop3): txCommit: 
[  210.519758][   T53] 
[  210.529565][   T53] ERROR: (device loop3): remounting filesystem as read-only
[  210.544097][   T53] jfs_write_inode: jfs_commit_inode failed!
[  211.217995][ T5908] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  211.364626][ T5908] usb 4-1: Using ep0 maxpacket: 16
[  211.370269][ T5908] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  211.382524][ T5908] usb 4-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00
[  211.386917][ T5908] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  211.394645][ T5908] usb 4-1: config 0 descriptor??
[  211.804900][ T5908] kye 0003:0458:5016.000E: control desc unexpectedly large
[  211.809557][ T5908] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.000E/input/input17
[  211.816632][ T5908] input: HID 0458:5016 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0458:5016.000E/input/input18
[  211.876694][ T5908] kye 0003:0458:5016.000E: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.3-1/input0
[  212.011989][ T5908] usb 4-1: USB disconnect, device number 20
[  212.024090][ T2257] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  212.184139][ T2257] usb 1-1: Using ep0 maxpacket: 32
[  212.188058][ T2257] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[  212.191351][ T2257] usb 1-1: config 0 has no interface number 0
[  212.194266][ T2257] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  212.198596][ T2257] usb 1-1: config 0 interface 85 has no altsetting 0
[  212.203592][ T2257] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  212.207508][ T2257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.210929][ T2257] usb 1-1: Product: syz
[  212.212725][ T2257] usb 1-1: Manufacturer: syz
[  212.215328][ T2257] usb 1-1: SerialNumber: syz
[  212.218394][ T2257] usb 1-1: config 0 descriptor??
[  212.487225][T11294] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2036'.
[  212.555729][T11296] loop2: detected capacity change from 0 to 4096
[  212.577636][T11296] ntfs3(loop2): ino=5, "/" mi_enum_attr
[  212.828351][ T2257] appletouch 1-1:0.85: Geyser mode initialized.
[  212.831604][ T2257] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input19
[  213.098682][ T6411] usb 1-1: USB disconnect, device number 34
[  213.104701][ T6411] appletouch 1-1:0.85: input: appletouch disconnected
[  213.747453][T11317] loop2: detected capacity change from 0 to 256
[  214.052949][ T5849] syz_tun (unregistering): left allmulticast mode
[  214.228395][T11331] loop3: detected capacity change from 0 to 32768
[  214.289931][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  214.293137][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.361030][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  214.364639][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.468445][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  214.480310][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.547660][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  214.551384][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  214.607623][   T13] bridge_slave_1: left allmulticast mode
[  214.609999][   T13] bridge_slave_1: left promiscuous mode
[  214.612571][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  214.618390][   T13] bridge_slave_0: left allmulticast mode
[  214.620627][   T13] bridge_slave_0: left promiscuous mode
[  214.623298][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  214.632311][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  214.636360][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  214.639412][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  214.642727][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  214.646014][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  214.883893][   T13] bond0 (unregistering): left promiscuous mode
[  214.886077][   T13] bond_slave_0: left promiscuous mode
[  214.887895][   T13] bond_slave_1: left promiscuous mode
[  214.890318][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  214.893244][   T13] bond_slave_0: left allmulticast mode
[  214.896160][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  214.899191][   T13] bond_slave_1: left allmulticast mode
[  214.901487][   T13] bond0 (unregistering): Released all slaves
[  214.906228][   T13] bond1 (unregistering): Released all slaves
[  214.911972][   T13] bond2 (unregistering): Released all slaves
[  214.918013][   T13] bond3 (unregistering): Released all slaves
[  214.938142][T11341] lo speed is unknown, defaulting to 1000
[  215.216407][   T13] tipc: Disabling bearer <eth:ipvlan1>
[  215.225604][   T13] tipc: Left network mode
[  215.236101][T11341] chnl_net:caif_netlink_parms(): no params data found
[  215.253477][T11353] [U] 
[  215.260425][T11353] [U] K{
[  215.261588][T11353] [U] T 1FFˊ`GJǘGO/MC
[  215.264894][T11353] [U] Tؖ/,~ĜJ}8'O1"7-΂JQKWQ5C%"H12YX`ȼ`+(¿!(Z'TXLNIGJݭP~7!"ب(5OBܤ̓J
[  215.271026][T11353] [U] K\&}66XHXԵ.`A$40|϶9ިU4ĮVBZ}WMTQΦR4
[  215.278136][T11353] [U] ".H6"KÇ[J4IN[Z(C|T]Z{3C=XԞ˅4W)\TXJSH{Q;̹T+G߮D.˂>YWUHFNHL]S2\G%O&Z)К'PUL_<	ذҮ`ұTޜ;_"(U{7J2X /'CIHCճV=AI%WES RJΜGR͡HIA6-DV I"Nƨ ASC~48C*OO5/ߜJ~WVK+3Y)MVYQƽDTROTPEM%FEJA5T_-X~^AAۂҘQ
[  215.293097][T11353] [U] 	+WG?]'A:	)' B>TF/<'U'HI.+]E.-ɿ߿%>2`^U8F.63+A«G3P6:^0TV'ETYCNRϩNPJ;Zۑ8!\مAʖ2$е­WI.#/BAI`4JDY@ZGW5˿BٜNY"VI2
[  215.302046][T11353] [U] T_K5TYJ9C$BRLNUL9W|G"ʃ%ڶC؝Q 3QN^HP*$	.7Yӱ2
[  215.306686][T11353] [U] ?H*3͝7ɍ^#Q"0~(OXLB,'V=CSGS0ւ`ه=1(ξP#2DO*Ƀ
[  215.310311][T11353] [U] SGGUD-{|&ѐ2LC_!`OZ֥B%>RѶWχݎSSH"YA4O.YďRTԶB[+/<<RB|ФE۠V96#ͤʦJU%S851ҩSP\?Q|LQX0K1ORɴ2|DFِ2ޔ0H}C[/PX^O
[  215.310547][T11341] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.317589][T11353] [U] ؛(JЛMXZ;؝_*335\XMUAK!AQ`;FЕI+VUHMJƷZCZ)_ǟ	ԑ&֡AXTO_ ڼ:%PCֲY+_ܛ}UMƫC!KJ7пG=B
[  215.325760][T11341] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.326011][T11353] [U] ٽF%XAL2R*GVW$J	AF+ؾ9̈́VI֗Kپ1}_%R6(]/ؐřYܺHäR GRN/ܫ#!D%D-{$VUT$:MTREC1VD~];[SQ(E,X8"GDڵ2@T8҃T8.RC+@ʦPUPC'ńYL-SS1E?7O^]C½H]JKR]RKQ܆ݣ޴OTCX4N	&ڋ@:M7~+W*XM>>{Q_՝LX8U{Zؐ)7?RR;CRHײڣ1>)MăT(Aϝ}9ڥJ*Mќġ'LQ	DWظ=|Q	ÆW;5Ž!DBX`ɧ/E`ƦMX"\
[  215.328298][T11341] bridge_slave_0: entered allmulticast mode
[  215.345125][T11353] [U] {;ե٘_O2)O.2W2ʲYX_  HPϱSD:]{Ƚ
[  215.350399][T11353] [U] I,>Ӥ	51^1N4OǶ'0?֒I9W._.WAV`)ZC6GIӹAXL[F*OW)+'\N[K@2ǬP"^`	ؿ
[  215.350973][T11341] bridge_slave_0: entered promiscuous mode
[  215.355267][T11353] [U] 22Ʃ۩X?0;3U
[  215.359074][T11353] [U] ޜƍSOBX8W4(~/KUԖOQE+G-YGY_>V3.Hә]̈́2)D,		D~D+W;A\FPȘ|$)KؐIɿKYT^RǙA=#ܜ	ͿAET1ݯ4K.E"RS|ПS:>PR"Zڭ#P!KY"}FN84ܳHޱOS̫%DLWMƲ
[  215.368048][T11353] [U] [['XN',MR/1D=!DX91BWǻRLFK̤Z#`̑L؛˜B~M
[  215.368203][T11341] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.371168][T11353] [U] L>сD+D"5ʍH3<IR=F^FNVDOIO:U>Y
[  215.374129][T11341] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.376666][T11353] [U] 'B6V20ķǞ׌"T8{9FW]̩
[  215.379529][T11341] bridge_slave_1: entered allmulticast mode
[  215.381565][T11353] [U] 72މUC6τI]8CTۨQSKYI¹ |V'TV/G$[ 9KH`"ܑ}[^=0]%̂TF_V4C
[  215.387595][T11341] bridge_slave_1: entered promiscuous mode
[  215.388196][T11353] [U] EC
[  215.391178][T11353] [U] |<:^3$7NK~-@?/MTL۾IWȬ@G~T{P+$JP|IRIӍPM Y ڔ8TV,L,
[  215.399305][T11352] [U] K)0~ܳʪIP'FҜZR@B]5{ʼ'8ƥFUTQUDǩK;7ͪ0C[YYCذML8T͚5RXW XOQHVI'8L
[  215.405824][   T13] dummy0: left promiscuous mode
[  215.409603][   T13] hsr_slave_0: left promiscuous mode
[  215.412041][   T13] hsr_slave_1: left promiscuous mode
[  215.416528][   T13] veth1_macvtap: left promiscuous mode
[  215.418589][   T13] veth0_macvtap: left promiscuous mode
[  215.420707][   T13] veth1_vlan: left promiscuous mode
[  215.422832][   T13] veth0_vlan: left promiscuous mode
[  215.505280][   T13] team0 (unregistering): Port device team_slave_1 removed
[  215.511048][   T13] team0 (unregistering): Port device team_slave_0 removed
[  215.566745][   T62] lo speed is unknown, defaulting to 1000
[  215.568868][T11341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  215.569096][   T62] infiniband syz2: ib_query_port failed (-19)
[  215.583878][T11341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  215.611026][T11341] team0: Port device team_slave_0 added
[  215.614855][T11341] team0: Port device team_slave_1 added
[  215.632518][T11341] batman_adv: batadv0: Adding interface: batadv_slave_0
[  215.635493][T11341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.646240][T11341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  215.651280][T11341] batman_adv: batadv0: Adding interface: batadv_slave_1
[  215.654043][T11341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  215.663447][T11341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  215.685106][T11341] hsr_slave_0: entered promiscuous mode
[  215.687620][T11341] hsr_slave_1: entered promiscuous mode
[  215.689769][T11341] debugfs: 'hsr0' already exists in 'hsr'
[  215.691863][T11341] Cannot create hsr debugfs directory
[  215.826762][T11341] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  215.831754][T11341] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  215.838650][T11341] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  215.843423][ T5847] Bluetooth: hci2: unexpected event for opcode 0x042c
[  215.843435][T11341] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  215.865353][T11341] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.868146][T11341] bridge0: port 2(bridge_slave_1) entered forwarding state
[  215.870957][T11341] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.873629][T11341] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.927270][T11341] 8021q: adding VLAN 0 to HW filter on device bond0
[  215.939020][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state
[  215.942507][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state
[  215.954304][T11341] 8021q: adding VLAN 0 to HW filter on device team0
[  215.970060][ T1091] bridge0: port 1(bridge_slave_0) entered blocking state
[  215.972777][ T1091] bridge0: port 1(bridge_slave_0) entered forwarding state
[  215.980655][ T1091] bridge0: port 2(bridge_slave_1) entered blocking state
[  215.983399][ T1091] bridge0: port 2(bridge_slave_1) entered forwarding state
[  216.179430][T11341] 8021q: adding VLAN 0 to HW filter on device batadv0
[  216.555732][T11383] loop3: detected capacity change from 0 to 32768
[  216.560054][T11341] veth0_vlan: entered promiscuous mode
[  216.562272][T11383] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  216.566007][T11341] veth1_vlan: entered promiscuous mode
[  216.585557][T11341] veth0_macvtap: entered promiscuous mode
[  216.590268][T11341] veth1_macvtap: entered promiscuous mode
[  216.597535][T11383] XFS (loop3): Ending clean mount
[  216.600912][T11383] XFS (loop3): Quotacheck needed: Please wait.
[  216.601260][T11341] batman_adv: batadv0: Interface activated: batadv_slave_0
[  216.609427][T11383] XFS (loop3): Quotacheck: Done.
[  216.611506][T11341] batman_adv: batadv0: Interface activated: batadv_slave_1
[  216.622920][ T5895] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  216.626905][ T5895] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  216.635267][ T5895] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  216.641963][ T5895] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  216.659230][ T7132] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  216.680937][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.684304][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.694269][ T5847] Bluetooth: hci1: command tx timeout
[  216.703135][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  216.707184][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  216.822244][T11405] gre1: entered promiscuous mode
[  216.825746][T11405] gre1: entered allmulticast mode
[  216.837413][T11405] input: syz0 as /devices/virtual/input/input20
[  217.128447][T11410] loop2: detected capacity change from 0 to 1024
[  217.169617][T11410] hfsplus: xattr searching failed
[  217.388064][T11416] binder: 11415:11416 ioctl c0306201 0 returned -14
[  217.634578][ T5313] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  217.804494][ T5313] usb 4-1: Using ep0 maxpacket: 16
[  217.808927][ T5313] usb 4-1: unable to get BOS descriptor or descriptor too short
[  217.813367][ T5313] usb 4-1: config 5 has an invalid interface number: 118 but max is 0
[  217.819749][ T5313] usb 4-1: config 5 has no interface number 0
[  217.822325][ T5313] usb 4-1: config 5 interface 118 has no altsetting 0
[  217.830727][ T5313] usb 4-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=1c.96
[  217.834594][ T5313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.837885][ T5313] usb 4-1: Product: syz
[  217.839580][ T5313] usb 4-1: Manufacturer: syz
[  217.841404][ T5313] usb 4-1: SerialNumber: syz
[  217.903107][T11443] vlan0: entered promiscuous mode
[  217.955706][T11446] loop2: detected capacity change from 0 to 1024
[  217.959280][T11446] EXT4-fs: Ignoring removed orlov option
[  217.968530][T11446] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  217.994069][   T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  217.996905][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.057400][ T5313] imon_raw 4-1:5.118: IR endpoint missing
[  218.066158][ T5313] usb 4-1: USB disconnect, device number 21
[  218.145264][   T10] usb 5-1: Using ep0 maxpacket: 32
[  218.148832][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  218.153115][   T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[  218.162352][   T10] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  218.166563][   T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  218.171068][   T10] usb 5-1: config 1 interface 1 has no altsetting 0
[  218.175808][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  218.179558][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.182522][   T10] usb 5-1: Product: syz
[  218.188756][   T10] usb 5-1: Manufacturer: syz
[  218.190586][   T10] usb 5-1: SerialNumber: syz
[  218.403025][   T10] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  218.406344][   T10] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  218.417914][   T10] usb 5-1: USB disconnect, device number 2
[  218.485394][T11464] loop2: detected capacity change from 0 to 32768
[  218.489729][T11464] BTRFS: device fsid 3a492a15-ac49-4ce6-945e-cef7a687c6c9 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2097 (11464)
[  218.497172][T11464] BTRFS info (device loop2): first mount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[  218.502018][T11464] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  218.517598][T11464] BTRFS info (device loop2): enabling ssd optimizations
[  218.520636][T11464] BTRFS info (device loop2): enabling free space tree
[  218.548422][ T5844] BTRFS info (device loop2): last unmount of filesystem 3a492a15-ac49-4ce6-945e-cef7a687c6c9
[  218.602504][T11481] loop3: detected capacity change from 0 to 1024
[  218.622363][T11481] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.633239][T11481] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4278190105 free clusters
[  218.640050][T11481] EXT4-fs (loop3): Remounting filesystem read-only
[  218.642736][T11481] EXT4-fs (loop3): error restoring inline_data for inode -- potential data loss! (inode 18, error -30)
[  218.663815][ T7132] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.714976][T11488] mmap: syz.3.2100 (11488) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  218.892992][ T5847] Bluetooth: hci1: command tx timeout
[  218.895640][ T5847] Bluetooth: hci2: command 0x0405 tx timeout
[  219.037393][ T6411] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  219.039899][ T6411] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  219.131785][T11499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2104'.
[  219.139910][T11499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2104'.
[  219.174501][T11501] loop3: detected capacity change from 0 to 1024
[  219.186496][T11501] hfsplus: request for non-existent node 16777216 in B*Tree
[  219.189497][T11501] hfsplus: request for non-existent node 16777216 in B*Tree
[  219.192449][T11501] hfsplus: request for non-existent node 16777216 in B*Tree
[  219.198035][T11501] hfsplus: request for non-existent node 16777216 in B*Tree
[  219.202249][T11501] hfsplus: request for non-existent node 16777216 in B*Tree
[  219.205436][T11501] hfsplus: request for non-existent node 16777216 in B*Tree
[  219.208686][T11501] hfsplus: request for non-existent node 16777216 in B*Tree
[  219.211763][T11501] hfsplus: request for non-existent node 16777216 in B*Tree
[  219.215009][T11501] hfsplus: request for non-existent node 16777216 in B*Tree
[  219.218076][T11501] hfsplus: request for non-existent node 16777216 in B*Tree
[  219.221533][T11501] hfsplus: request for non-existent node 16777216 in B*Tree
[  219.221586][T11503] loop4: detected capacity change from 0 to 8192
[  219.224559][T11501] hfsplus: request for non-existent node 16777216 in B*Tree
[  219.229875][T11501] hfsplus: request for non-existent node 16777216 in B*Tree
[  219.233702][T11501] hfsplus: request for non-existent node 16777216 in B*Tree
[  219.238582][   T33] kauditd_printk_skb: 3 callbacks suppressed
[  219.238596][   T33] audit: type=1800 audit(1756196154.684:735): pid=11501 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2105" name="file1" dev="loop3" ino=20 res=0 errno=0
[  219.347485][T11511] netlink: 248 bytes leftover after parsing attributes in process `syz.4.2109'.
[  219.524067][ T2257] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  219.674211][ T2257] usb 4-1: Using ep0 maxpacket: 32
[  219.678956][ T2257] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[  219.682276][ T2257] usb 4-1: config 0 has no interface number 0
[  219.685085][ T2257] usb 4-1: config 0 interface 12 has no altsetting 0
[  219.689847][ T2257] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[  219.693615][ T2257] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.694227][T11523] loop2: detected capacity change from 0 to 32768
[  219.700138][T11523] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  219.701558][ T2257] usb 4-1: Product: syz
[  219.705751][ T2257] usb 4-1: Manufacturer: syz
[  219.707491][ T2257] usb 4-1: SerialNumber: syz
[  219.710542][ T2257] usb 4-1: config 0 descriptor??
[  219.725846][ T2213] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  219.886700][ T2213] usb 5-1: config 1 has an invalid interface number: 2 but max is 1
[  219.890220][ T2213] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  219.894547][ T2213] usb 5-1: config 1 has no interface number 0
[  219.900275][ T2213] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  219.903879][ T2213] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  219.908185][ T2213] usb 5-1: Product: syz
[  219.909380][T11531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2119'.
[  219.910013][ T2213] usb 5-1: Manufacturer: syz
[  219.913404][T11531] netlink: 'syz.2.2119': attribute type 11 has an invalid length.
[  219.920019][ T5874] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  219.923850][ T5874] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  219.924389][ T2213] usb 5-1: SerialNumber: syz
[  219.927640][T11531] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2119'.
[  219.932663][T11531] netlink: 'syz.2.2119': attribute type 11 has an invalid length.
[  219.937019][ T2213] usb 5-1: selecting invalid altsetting 1
[  219.942105][ T5874] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  219.950000][ T5874] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  220.048015][T11537] loop2: detected capacity change from 0 to 2048
[  220.058456][T11537] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.136568][ T2213] cdc_ncm 5-1:1.2: bind() failure
[  220.143106][ T2213] cdc_ncm 5-1:1.1: skipping garbage
[  220.145680][ T2213] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  220.148469][ T2213] cdc_ncm 5-1:1.1: bind() failure
[  220.155698][ T2213] usb 5-1: USB disconnect, device number 3
[  220.348588][ T2257] f81534 4-1:0.12: f81534_set_register: reg: 1003 data: e0 failed: -71
[  220.351893][ T2257] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[  220.354944][ T2257] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  220.357683][ T2257] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[  220.362935][ T2257] usb 4-1: USB disconnect, device number 22
[  220.732597][   T33] audit: type=1800 audit(1756196156.174:736): pid=11546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2125" name="bus" dev="tmpfs" ino=100 res=0 errno=0
[  220.894746][ T5844] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.934346][   T55] Bluetooth: hci1: command tx timeout
[  220.990963][T11563] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2133'.
[  221.094172][ T6411] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[  221.096736][ T6411] Bluetooth: hci1: Error when powering off device on rfkill (-110)
[  221.125298][T11572] loop3: detected capacity change from 0 to 512
[  221.130202][T11572] EXT4-fs (loop3): orphan cleanup on readonly fs
[  221.133323][T11572] Quota error (device loop3): find_tree_dqentry: Cycle in quota tree detected: block 2 index 0
[  221.137716][T11572] Quota error (device loop3): qtree_read_dquot: Can't read quota structure for id 0
[  221.141215][T11572] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2137: Failed to acquire dquot type 1
[  221.146510][T11572] EXT4-fs (loop3): 1 truncate cleaned up
[  221.148886][T11572] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  221.181138][ T7132] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.472947][T11584] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  221.494961][T11584] CIFS mount error: No usable UNC path provided in device string!
[  221.494961][T11584] 
[  221.498499][T11584] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  222.141889][T11625] loop4: detected capacity change from 0 to 4096
[  222.150737][T11625] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  222.186505][T11341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.322270][T11644] loop4: detected capacity change from 0 to 2048
[  222.336425][T11644] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  222.360992][T11341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  222.505984][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2171'.
[  222.509463][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2171'.
[  222.512814][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2171'.
[  222.518332][T11652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2171'.
[  222.697773][T11660] loop4: detected capacity change from 0 to 512
[  222.894068][ T5908] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  223.044140][ T5908] usb 4-1: Using ep0 maxpacket: 32
[  223.049967][ T5908] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  223.054535][ T5908] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  223.058747][ T5908] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  223.065421][ T5908] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  223.069215][ T5908] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  223.072542][ T5908] usb 4-1: Product: syz
[  223.074596][ T5908] usb 4-1: Manufacturer: syz
[  223.076693][ T5908] usb 4-1: SerialNumber: syz
[  223.283657][ T5908] usb 4-1: 0:2 : does not exist
[  223.291583][ T5908] usb 4-1: USB disconnect, device number 23
[  223.604445][T11667] loop4: detected capacity change from 0 to 2048
[  223.646104][T11667] Dev loop4: RDB in block 1 has bad checksum
[  223.723390][T11673] loop4: detected capacity change from 0 to 16
[  223.727714][T11673] erofs (device loop4): mounted with root inode @ nid 36.
[  223.739488][T11673] overlayfs: failed to get redirect (-117)
[  223.970977][ T5895] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.008374][ T5895] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.068168][ T5895] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.074031][ T7624] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  224.109606][ T5895] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  224.183568][ T5895] bridge_slave_1: left allmulticast mode
[  224.186108][ T5895] bridge_slave_1: left promiscuous mode
[  224.188505][ T5895] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.193277][ T5895] bridge_slave_0: left allmulticast mode
[  224.196578][ T5895] bridge_slave_0: left promiscuous mode
[  224.199033][ T5895] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.227370][ T7624] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  224.232379][ T7624] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  224.235420][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  224.236945][ T7624] usb 4-1: Product: syz
[  224.239556][ T7624] usb 4-1: Manufacturer: syz
[  224.241220][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  224.242992][ T7624] usb 4-1: SerialNumber: syz
[  224.246587][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  224.251378][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  224.255629][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  224.268162][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  224.270624][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  224.273151][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  224.278868][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  224.281571][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  224.318101][ T5895] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  224.322211][ T5895] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  224.326707][ T5895] bond0 (unregistering): Released all slaves
[  224.402912][T11679] chnl_net:caif_netlink_parms(): no params data found
[  224.459828][T11679] bridge0: port 1(bridge_slave_0) entered blocking state
[  224.462802][T11679] bridge0: port 1(bridge_slave_0) entered disabled state
[  224.466816][T11679] bridge_slave_0: entered allmulticast mode
[  224.469413][T11679] bridge_slave_0: entered promiscuous mode
[  224.474330][T11679] bridge0: port 2(bridge_slave_1) entered blocking state
[  224.478689][T11679] bridge0: port 2(bridge_slave_1) entered disabled state
[  224.481543][T11679] bridge_slave_1: entered allmulticast mode
[  224.485575][T11679] bridge_slave_1: entered promiscuous mode
[  224.507393][ T5895] hsr_slave_0: left promiscuous mode
[  224.509881][ T5895] hsr_slave_1: left promiscuous mode
[  224.512171][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  224.515500][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_0
[  224.518907][ T5895] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  224.521833][ T5895] batman_adv: batadv0: Removing interface: batadv_slave_1
[  224.529026][ T5895] veth1_macvtap: left promiscuous mode
[  224.531147][ T5895] veth0_macvtap: left promiscuous mode
[  224.533298][ T5895] veth1_vlan: left promiscuous mode
[  224.535599][ T5895] veth0_vlan: left promiscuous mode
[  224.633274][ T5895] team0 (unregistering): Port device team_slave_1 removed
[  224.656178][ T5895] team0 (unregistering): Port device team_slave_0 removed
[  224.711339][T11679] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  224.725872][T11679] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  224.758582][T11679] team0: Port device team_slave_0 added
[  224.762340][T11679] team0: Port device team_slave_1 added
[  224.782130][T11679] batman_adv: batadv0: Adding interface: batadv_slave_0
[  224.787621][T11679] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.797851][T11679] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  224.804381][T11679] batman_adv: batadv0: Adding interface: batadv_slave_1
[  224.807204][T11679] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  224.817630][T11679] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  224.844730][T11679] hsr_slave_0: entered promiscuous mode
[  224.847970][T11679] hsr_slave_1: entered promiscuous mode
[  224.850541][T11679] debugfs: 'hsr0' already exists in 'hsr'
[  224.852694][T11679] Cannot create hsr debugfs directory
[  224.936658][ T5895] ------------[ cut here ]------------
[  224.938931][ T5895] WARNING: CPU: 0 PID: 5895 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  224.942119][ T5895] Modules linked in:
[  224.943687][ T5895] CPU: 0 UID: 0 PID: 5895 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  224.947631][ T5895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  224.951483][ T5895] Workqueue: netns cleanup_net
[  224.953044][ T5895] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  224.954811][ T5895] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2b ff 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 99 bd e1 f7 e8 74 93 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 66 93 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  224.962121][ T5895] RSP: 0018:ffffc90003f6f898 EFLAGS: 00010293
[  224.964765][ T5895] RAX: ffffffff8a2217bc RBX: ffff88803a6dc880 RCX: ffff88810874b980
[  224.967949][ T5895] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffff88810874b980
[  224.971031][ T5895] RBP: ffffc90003f6f9b0 R08: ffffffff8fa38337 R09: 1ffffffff1f47066
[  224.974135][ T5895] R10: dffffc0000000000 R11: fffffbfff1f47067 R12: ffffffff8f630fe0
[  224.977210][ T5895] R13: 1ffff920007edf40 R14: ffff88803a6ddd00 R15: dffffc0000000000
[  224.980409][ T5895] FS:  0000000000000000(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  224.984151][ T5895] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  224.986781][ T5895] CR2: 0000001b32d1cff8 CR3: 00000000240e8000 CR4: 00000000000006f0
[  224.990027][ T5895] Call Trace:
[  224.991397][ T5895]  <TASK>
[  224.992626][ T5895]  xfrm_net_exit+0x2d/0x70
[  224.994520][ T5895]  ops_undo_list+0x49a/0x990
[  224.996429][ T5895]  ? __pfx_ops_undo_list+0x10/0x10
[  224.998548][ T5895]  ? do_raw_spin_unlock+0x4d/0x240
[  225.000676][ T5895]  cleanup_net+0x4c5/0x800
[  225.002505][ T5895]  ? __pfx_cleanup_net+0x10/0x10
[  225.004553][ T5895]  ? rcu_is_watching+0x15/0xb0
[  225.006552][ T5895]  ? process_scheduled_works+0x9ef/0x17b0
[  225.008921][ T5895]  ? process_scheduled_works+0x9ef/0x17b0
[  225.011250][ T5895]  process_scheduled_works+0xae1/0x17b0
[  225.013466][ T5895]  ? __pfx_process_scheduled_works+0x10/0x10
[  225.015997][ T5895]  worker_thread+0x8a0/0xda0
[  225.017917][ T5895]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  225.020436][ T5895]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  225.022803][ T5895]  ? __kthread_parkme+0x7b/0x200
[  225.024873][ T5895]  kthread+0x711/0x8a0
[  225.026524][ T5895]  ? __pfx_worker_thread+0x10/0x10
[  225.028581][ T5895]  ? __pfx_kthread+0x10/0x10
[  225.030488][ T5895]  ? rcu_is_watching+0x15/0xb0
[  225.032409][ T5895]  ? __pfx_kthread+0x10/0x10
[  225.034327][ T5895]  ret_from_fork+0x3fc/0x770
[  225.036207][ T5895]  ? __pfx_ret_from_fork+0x10/0x10
[  225.038355][ T5895]  ? __switch_to_asm+0x39/0x70
[  225.040350][ T5895]  ? __switch_to_asm+0x33/0x70
[  225.042241][ T5895]  ? __pfx_kthread+0x10/0x10
[  225.044178][ T5895]  ret_from_fork_asm+0x1a/0x30
[  225.046022][ T5895]  </TASK>
[  225.047213][ T5895] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  225.050019][ T5895] CPU: 0 UID: 0 PID: 5895 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  225.053687][ T5895] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  225.057651][ T5895] Workqueue: netns cleanup_net
[  225.059613][ T5895] Call Trace:
[  225.060973][ T5895]  <TASK>
[  225.062172][ T5895]  dump_stack_lvl+0x99/0x250
[  225.064061][ T5895]  ? __asan_memcpy+0x40/0x70
[  225.065947][ T5895]  ? __pfx_dump_stack_lvl+0x10/0x10
[  225.068024][ T5895]  ? __pfx__printk+0x10/0x10
[  225.069914][ T5895]  vpanic+0x281/0x750
[  225.071501][ T5895]  ? __pfx__printk+0x10/0x10
[  225.073319][ T5895]  ? __pfx_vpanic+0x10/0x10
[  225.075208][ T5895]  ? is_bpf_text_address+0x292/0x2b0
[  225.077300][ T5895]  panic+0xb9/0xc0
[  225.078818][ T5895]  ? __pfx_panic+0x10/0x10
[  225.080566][ T5895]  __warn+0x31b/0x4b0
[  225.082153][ T5895]  ? xfrm_state_fini+0x26d/0x2f0
[  225.084087][ T5895]  ? xfrm_state_fini+0x26d/0x2f0
[  225.085986][ T5895]  report_bug+0x2be/0x4f0
[  225.087609][ T5895]  ? xfrm_state_fini+0x26d/0x2f0
[  225.089536][ T5895]  ? xfrm_state_fini+0x26d/0x2f0
[  225.091502][ T5895]  ? xfrm_state_fini+0x26f/0x2f0
[  225.093394][ T5895]  handle_bug+0x84/0x160
[  225.095084][ T5895]  exc_invalid_op+0x1a/0x50
[  225.096836][ T5895]  asm_exc_invalid_op+0x1a/0x20
[  225.098736][ T5895] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  225.100941][ T5895] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 2b ff 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 99 bd e1 f7 e8 74 93 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 66 93 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  225.108520][ T5895] RSP: 0018:ffffc90003f6f898 EFLAGS: 00010293
[  225.110921][ T5895] RAX: ffffffff8a2217bc RBX: ffff88803a6dc880 RCX: ffff88810874b980
[  225.113954][ T5895] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffff88810874b980
[  225.116991][ T5895] RBP: ffffc90003f6f9b0 R08: ffffffff8fa38337 R09: 1ffffffff1f47066
[  225.120079][ T5895] R10: dffffc0000000000 R11: fffffbfff1f47067 R12: ffffffff8f630fe0
[  225.123229][ T5895] R13: 1ffff920007edf40 R14: ffff88803a6ddd00 R15: dffffc0000000000
[  225.126301][ T5895]  ? xfrm_state_fini+0x26c/0x2f0
[  225.128221][ T5895]  ? xfrm_state_fini+0x26c/0x2f0
[  225.130099][ T5895]  xfrm_net_exit+0x2d/0x70
[  225.131821][ T5895]  ops_undo_list+0x49a/0x990
[  225.133663][ T5895]  ? __pfx_ops_undo_list+0x10/0x10
[  225.135678][ T5895]  ? do_raw_spin_unlock+0x4d/0x240
[  225.137641][ T5895]  cleanup_net+0x4c5/0x800
[  225.139362][ T5895]  ? __pfx_cleanup_net+0x10/0x10
[  225.141252][ T5895]  ? rcu_is_watching+0x15/0xb0
[  225.143132][ T5895]  ? process_scheduled_works+0x9ef/0x17b0
[  225.145357][ T5895]  ? process_scheduled_works+0x9ef/0x17b0
[  225.147603][ T5895]  process_scheduled_works+0xae1/0x17b0
[  225.149809][ T5895]  ? __pfx_process_scheduled_works+0x10/0x10
[  225.152170][ T5895]  worker_thread+0x8a0/0xda0
[  225.153943][ T5895]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  225.156412][ T5895]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  225.158717][ T5895]  ? __kthread_parkme+0x7b/0x200
[  225.160609][ T5895]  kthread+0x711/0x8a0
[  225.162231][ T5895]  ? __pfx_worker_thread+0x10/0x10
[  225.164232][ T5895]  ? __pfx_kthread+0x10/0x10
[  225.166069][ T5895]  ? rcu_is_watching+0x15/0xb0
[  225.167971][ T5895]  ? __pfx_kthread+0x10/0x10
[  225.169742][ T5895]  ret_from_fork+0x3fc/0x770
[  225.171531][ T5895]  ? __pfx_ret_from_fork+0x10/0x10
[  225.173555][ T5895]  ? __switch_to_asm+0x39/0x70
[  225.175417][ T5895]  ? __switch_to_asm+0x33/0x70
[  225.177257][ T5895]  ? __pfx_kthread+0x10/0x10
[  225.179099][ T5895]  ret_from_fork_asm+0x1a/0x30
[  225.181016][ T5895]  </TASK>
[  225.183026][ T5895] Kernel Offset: disabled
[  225.184704][ T5895] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:08:06  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000052 RBX=0000000000000052 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003f6f030
R8 =ffff888106e40237 R9 =1ffff11020dc8046 R10=dffffc0000000000 R11=ffffffff854f1f00
R12=dffffc0000000000 R13=ffffffff99afa91d R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1f7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32d1cff8 CR3=00000000240e8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffffffffffffffff ffffffffff000000 XMM05=0000000000000000 00007fdba4c12e53
XMM06=0000000000000000 00007fdba4c12e4d XMM07=0000000000000000 00007fdba4c12e61
XMM08=0000000000000000 00007fdba4c12ee7 XMM09=0000000000000000 00007fdba4c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=00000000000021c1 RBX=ffff888136623900 RCX=0000000000000838 RDX=0000000000000000
RSI=00000000000021c1 RDI=0000000000000838 RBP=0000000000000000 RSP=ffffc900001e0e50
R8 =0000000000000001 R9 =0000000000000000 R10=0000000000000003 R11=ffffffff81703490
R12=00000000100073c3 R13=dffffc0000000000 R14=00000000000021c1 R15=0000000000000020
RIP=ffffffff81716179 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000557f995b27e8 CR3=000000011c1e8000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8167991b ffffffff8167991b
XMM02=ffffffff8167991b ffffffff8167991b XMM03=ffffffff8167991b ffffffff8167991b
XMM04=00007fbbd8eed100 00007fbbd8387460 XMM05=00007fbbd8387478 00007fbbd83874c0
XMM06=00007fbbd83874b8 00007fbbd83874b0 XMM07=00007fbbd83874a8 00007fbbd83874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fbbd8212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
