last executing test programs:

1m47.754691515s ago: executing program 0 (id=719):
sendmsg$sock(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)}, 0x4000)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000014c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000702000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff6d6405000000000065040400010000000404000001000000b7050000400000006a0a80fe000000008500000053000000b7000000000000009500001000000000a80501363034fdb117168bd07ba00af739d1a1ee35fe163a255c33282044b32495ef8ab9adc67ccc945f105d802f5132143c0a9fc7a84452569957c1002ed7d4d8e17f791f4798c8eb483e9973320d046c3126c6afcfd84de03352c69b3edff5be26f8ffa5f8f2879021c2ea53ea79acd7fb38dd1abb75aa393cea26d465637d11f705000000473e7b7c4ae7dd5e4dee88518ddf12dddd4bfc6a4dd3b6beba51074229b0d4b504516c4c3e5d1aa044d8d00728141cd67bcd68f253288e655c6b34e02e90637ef2912ba7de26ff2357ef17f95a25780c3a057844f226ef4e912f01a201e694e3806e8c70e8b69524cd19f7525d8d66bb766f7f3f918c86a70252236800001897133af94a5a4cfc794d8b9d7c33632152c48eaf302f0b2e0c252b00000000000000006f1bbefbe08de65e3762e194ba4cae8b13535d7d11ee917bca4885bbf597a14ab2458efce78510d86272d88e0c8088f404f011289ebc5623faa1182632161e073af1d69a2e36bed435000025ecd201d2ffb0a7fa4f5d11060cdcf071defd0a8be3b69ce3e4f361aca75827426dde87fdf4617222674280f55e98107450c19b9d86329bd5b4697336112b0b8754ce3574046bf6114d1a88597850b77378fa8edfff8faf8b8ec039bab385cac0535373bb8fab90539b1a65ddff841eb671f3faf37ebdfccea0c002ad2b42047c9ec43193ccf617dbf8a12b4f189edbf9fb7c42b1f435ccd4d96822e6b70100912c92e3943e9c4f45d8bcd528fa8a3ea847f10e9b2506f3bb506f1d7fbde8010000000000a073d0de5538ab42e170b3baae34c35987b0dda497ac3f5e97e6e6aeea15c6d5ed24310100000003bb6030f84b63aaf8690db0221b1705c501f802ff59b4e683efa4b6e77e042072bd2ac37d413008ec9eb8166f6e28b49a77ed91befc65315896f88a8fb1dd679fb4c515f8b7a5b7aca6a251a89d47b728502f7e621cc0e3ba04000000c149ee6601728c750d304197c22da8650579475afd96187d881e93b42a5fdfd686d8900c44c67133dad58037fda65885a15a429edfe3027a5ebf95254744f10fd607bc3300b94932b8d944e0b083bbd86b19cb074577a25ff581d92af08a06f857310a2f14326b0b290205e91a682e00c8762cbc6b904c980eef6e6a1def886c95676dce6a8194479700a02b92bdc8d05eae1f24fdd7b80d1bb404c22f681594de2ebb9687219de8d73ac83823feb402a2415a9850d5f0183ec67be96dc0e4c2d7acf1dfe79d6771903b76e21190c22d641030e1ddacf006c3116e1803af20a5f2b5f7ba58aca5bcabbbab24414a3810788e5503e4be66d683daac5f0001000077339b4200000000108a3c87b19d5b9a00c75d84a92d6dcf00ba96edf35ede0e2b57c26e94801b498924166bde57d5f24258d9fd028096cc15a8b912b494d4bbe609031ea1ca65a548971d5d16296dd08e020000007a27310d5d01f8a8a0f5212d7f628f554afea715ccbc66cbb1016490f5d579308cb3188cf2fcaf67e0c16443d526ba4b968f07ae362c2133c168313e84beb871203880dd453c45d0a137d7f5a8b039dbfa62fb2b4214f8e69f967bf1fbd89e77fcca110000000800000000000000f8877994ebdc35f7efd41e3babd9b3782edd6776d5b6cb4ecd72c9de9b5503747d71440378cf2c2c7ea2dc5febb654a867f853713cf4c0bb322fbbe446d18dee4c821275ef18259cafc346c8b3b9fb0f3adcf6ea310a6b9a3f59e29a5909ea047fb61affb4bc8bbea1fb761b8933795b1a91358a7791aa843d07020e8bb6fc18458c49ac6313e7165b7d9f65e94a62b69f1011b94340cdb7303f01e5cdb5682ddf73d65c3de1d88dd7496d6345d5b9de0223988056a53e19a8b96b9640bc6c09d3c2ff894d626b57c776ed53f94d5e22ff148061b37f72bd92924cb1d0a725e19b264346b7cae0251a850de78316503f3c3d395c7e3f04fc8d52583327cd2341ce4b2d092815376299686f41353b2823814563011a2223b9dd00000000000000000000003a131374a3371cb3e2a9bb4d798b91cefa444501f40b7c9589e8c0bb6c82123d2b45ce905d0903b32ecf30e828c71a07a83f3275f3d661d1af0ffbd5d7f0"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x380, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40)

1m47.752430218s ago: executing program 0 (id=721):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000200), 0x2, r0}, 0x38)

1m47.665638873s ago: executing program 0 (id=723):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0))

1m47.487033701s ago: executing program 0 (id=726):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000c40)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2901090, 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
mount(0x0, &(0x7f0000000d40)='./file0/../file0/../file0\x00', &(0x7f00000002c0)='sysfs\x00', 0x0, 0x0)
unshare(0x60400)
faccessat2(0xffffffffffffffff, 0x0, 0x80, 0x3200)
pivot_root(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f00000001c0)='./file0/../file0/../file0\x00')

1m47.437104815s ago: executing program 0 (id=727):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x50}, 0x0)
recvmmsg$unix(r0, &(0x7f0000000dc0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000004740)=""/199, 0xc7}, {&(0x7f0000004840)=""/220, 0xdc}, {&(0x7f0000004940)=""/255, 0xff}, {&(0x7f0000004a40)=""/159, 0x9f}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/253, 0xfd}, {&(0x7f0000005d00)=""/215, 0xd7}], 0x7}}], 0x1, 0x0, 0x0)
write(r0, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14)

1m47.214233997s ago: executing program 0 (id=730):
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/uts\x00')

1m47.061173547s ago: executing program 32 (id=730):
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/uts\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/uts\x00')

1m33.826067392s ago: executing program 3 (id=831):
syz_emit_ethernet(0x82, &(0x7f0000000280)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x4, 0x0, 0x0, 0x3, 0x0, 0x0, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @rand_addr=0x64010102, @remote, {[@lsrr={0x83, 0x27, 0x8f, [@loopback, @rand_addr=0x64010102, @remote, @broadcast, @broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x15}, @loopback]}, @timestamp_addr={0x44, 0x4}, @generic={0x89, 0x2}, @timestamp_prespec={0x44, 0x14, 0x19, 0x3, 0x7, [{@local, 0x1000}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x1000}]}]}}}}}}}, 0x0)

1m33.825888327s ago: executing program 3 (id=832):
r0 = openat$vimc0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000040)={0x0, 0x54485746, 0x2, @discrete={0x40000000}})

1m33.742691909s ago: executing program 3 (id=833):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x6, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1m33.625248654s ago: executing program 3 (id=834):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000180)={[{@iocharset={'iocharset', 0x3d, 'cp869'}}, {@umask={'umask', 0x3d, 0x5}}, {@namecase}, {}, {@fmask={'fmask', 0x3d, 0xab}}, {@discard}, {@fmask={'fmask', 0x3d, 0x6}}, {@utf8}, {@umask={'umask', 0x3d, 0x6}}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x1, 0x1528, &(0x7f00000037c0)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0x1c, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]})
write$ppp(r0, &(0x7f00000002c0)="37bd", 0x2)

1m33.545719348s ago: executing program 3 (id=835):
r0 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0)
ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000200)={0x1, @output={0x1000, 0x0, {0x8, 0x7}, 0x1}})

1m33.274676748s ago: executing program 3 (id=838):
setgroups(0xefff, 0x0)

1m33.095559144s ago: executing program 33 (id=838):
setgroups(0xefff, 0x0)

3.750379762s ago: executing program 1 (id=1772):
syz_mount_image$ext4(&(0x7f0000000400)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480), 0x1, 0x3da, &(0x7f00000004c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000001e01000000000000000000850000007d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_mb_discard_preallocations\x00', r1, 0x0, 0x6}, 0x18)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0xabfe}], 0x1, 0x5405, 0x0, 0x0)

3.56784415s ago: executing program 1 (id=1773):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$inet_opts(r0, 0x0, 0xf, 0x0, 0x0)

3.37658451s ago: executing program 1 (id=1774):
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000dc0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x458, 0x5010, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x3}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000040)={0x0, 0x21, 0x3e, {0x3e, 0x23, "b9e4880a9ff78b6ee52a29a7932432d3a594ee97f4a858b2d05ffbc2f27e69f02b1b7865d2ad4c5bd86107e41c1010b96e3d82b019ef8d81e736bdff"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

1.748069272s ago: executing program 1 (id=1782):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x800)
recvmmsg$unix(r1, &(0x7f0000000c80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x140, 0x0)

1.674225141s ago: executing program 1 (id=1784):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x1, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)

1.673630151s ago: executing program 1 (id=1786):
r0 = syz_usb_connect(0x1, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="120100004f92b90857152077ebb7000000010902120001000000000904"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000340)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x40, 0x19, 0x2, "0500"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000440)=ANY=[@ANYBLOB="401402"], 0x0, 0x0})
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

1.57767057s ago: executing program 2 (id=1788):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6, 0xfffffffc, 0x0, 0x8}, 0x1c)
mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)

1.527590054s ago: executing program 2 (id=1789):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
r1 = socket$unix(0x1, 0x2, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
connect$unix(r2, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
sendmmsg(r2, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0)
connect$unix(r1, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
ppoll(&(0x7f0000000240)=[{r1}, {r1, 0x8153}], 0x2, 0x0, 0x0, 0x0)
recvmmsg$unix(r0, &(0x7f0000003c40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x12122, 0x0)

610.238143ms ago: executing program 2 (id=1793):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file3\x00', 0x4080, &(0x7f00000001c0)=ANY=[], 0x2, 0xc3d, &(0x7f0000000c80)="$eJzs3U9sHNd9B/DfGy3FldNUTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIRRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgpYzOxbcUmRNiOSImV9Pjb13Z19b/a9eeMZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxO+/cvnM2XTQrQAAHqarI189c879HwAeK9f9/z8AAAAAAAAAAAAAABx2KYp4MlLMXl1NY9X7jvqVdt+du6NDw1tXO5aqmkeq8uVP/ey58xe+9MLgxW5eaU9/QP299tl4beT65cbLM7dn5ybn5ycnGqPT7fGZickd72G39Tc7VR2Axu3X70zcvDnfOPf8+Q0f3x14v/9jJwYuDT57+plu2dGh4eGR9SL13vK1B25Ix3YzPI5GEacjxXPf+2lqRUQRuz8W9Yc79psdqzpxqurE6NBw1ZGpdmt6ofzwWvdAFBGNnkrN7jHaeiyi1vdQ+7C9ZsRi2fyywafK7o3MtuZaN6YmG9dacwvthfbM9LXUaW3Zn0YUcTFFLEXESv/9u+uLImqR4jvHV9ONiDjSPQ5frCYGb9+OYh/7uANlOxt9EUvFIzBmh1h/FPFqpPjZOydjPF9nqmvNFyJeLfMHEW+V+VJEKk+MCxHvbXEe8WiqRRF/UY7/pdU0UV0PuteVK19rfGX65kxP2e515Ze8P9x3pTig+8OxTflwHPJrUz2KaFVX/NX04L/ZAQAAAAAAAAAAAAAAAGCvHYsiPhMpXvn3P67mFUc1L/34pcE/GPh475zxpz9kP2XZ5yNisdjZnNyjeWLgtXQtpQOeS/w4q0cRf5Ln/33roBsDAAAAAAAAAAAAAAAAAADwWCviJ5HixXdPpqXoXVO8PX2rcb11Y6qzKmx37d/umulra2trjdTJZs6xnIs5l3Iu51zJGUWun7OZcyznYs6lnMs5V3LGkVw/ZzPnWM7FnEs5l3Ou5Ixarp+zmXMs52KZ9fWOLuftKznjkKzdCwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADwUVJEEb+IFN/+xmqKFBHNiLHo5HL/QbcOAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACj1pyK+Hykaf9i8t60WEan6t+Nk+cuFaB4t85PRHCzzpWheztmqstb81gG0n93pS0X8OFL019++N+B5/Ps67+6dBvHWN9fffbbWySPdDwfe7//YieOXBod//entXqetGnDqSnv6zt3G6NDw8EjP5lr+9k/2bBvI31vsTdeJiPk33ny9NTU1OffgL8pTYBfVH6EXqfYQelqe+Afe04N6sbgXJ+TevYjaoWjGwfSdx0B5/38vUvzOu//RveF37v/1+JXOu3t3+Pj5n67f/1/cvKMd3v9rm+vl+395T9/q/v9kz7YX8+9G+moR9YXbs30nIurzb7x5un27dWvy1uT0hTNnvjw4+OXzZ/qORtRvtqcme17tyeECAAAAAAAAAAAAAAAAeHhSEb8XKVo/Xk2NiLhbzdcauDT47OlnjsSRar7Vhnnbr41cv9x4eeb27Nzk/PzkRGN0uj0+MzG506+rV9O9RoeG96UzH+rYPrf/WP3lmdk35tq3/mhhy8+fqF++Mb8w1xrf+uM4FkVEs3fLqarBo0PDVaOn2q3pquq1LSfT//L6UhH/GSnGLzTS5/O2PP9/8wz/DfP/FzfvaJ/m/3+iZ1v5nSkV8fNI8dt/+XR8vmrnE3HfMcvl/jZSnLr4uVwujpblum3oPFegMzOwLPu/keIff7GxbHc+5JPrZc/u+MA+IsrxPx4pvv/n343fyNs2Pv9h6/F/YvOO9mn8n+rZ9sSG5xXsuuvk8T8dKV568u34zbztg57/0X32xslc+N7zOfZp/D/Vs20gf+9v7U3XAQAAAAAAAAAAHml9qYi/ixQ/HK6lF/K2nfz9v4nNO9qnv//16Z5tE3uzXtGHvtj1QQUAAACAQ6IvFfGTSHFr4e17c6g3zv/umf/5u+vzP4fSpk+rP+f71eq5AXv553+9BvL3ju2+2wAAAAAAAAAAAAAAAAAAAHCopFTEC3k99bFqPv/EtuupL0eKV/77uVwunSjLddeBH6h+rV+dmT59eWpqZry10LoxNdkYmW2NT5Z1n4oUq3/zuVy3qNZX764331njfX0t9rlIMfz33bKdtdi7a5M/tV72bFn2E5Hiv/5hY9nuOtafWi97riz715Hi6/+8ddkT62XPl2W/Gyl+9PVGp+zHozom3eejfnq97PPjM8U+jAoAAAAAAAAAAAAAAAAAAACPm75UxJ9Fiv+5vXRvLn9e/7+v523lrW/2rPe/yd1qnf+Bav3/7V4/yPr/1XMFFrf7VgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+GhKUcSbkWL26mpa7i/fd9SvtKfv3B0dGt662rFU1TxSlS9/6mfPnb/wpRcGL3bzg+vvtc/EayPXLzdenrk9Ozc5Pz850Ridbo/PTEzueA+7rb/ZqeoANG6/fmfi5s35xrnnz2/4+O7A+/0fOzFwafDZ0890y44ODQ+P9JSp9T3wt98nbbP9aBTxV5Hiue/9NP2wP6KI3R+LDzl39tuxqhOnqk6MDg1XHZlqt6YXyg+vdQ9EEdHoqdTsHqOHMBa70oxYLJtfNvhU2b2R2dZc68bUZONaa26hvdCemb6WOq0t+9OIIi6miKWIWOm/f3d9UcTrkeI7x1fTv/RHHOkehy9eHfnqmXPbt6PYxz7uQNnORl/EUvEIjNkh1h9F/FOk+Nk7J+Nf+yNq0fmJL0S8WuYPIt6Kznin8sS4EPHeFucRj6ZaFPF/5fhfWk3v9JfXg+515crXGl+ZvjnTU7Z7XXnk7w8P0yG/NtWjiB9VV/zV9G/+uwYAAAAAAAAAAAAAAAA4RIr4tUjx4rsnUzU/+N6c4vb0rcb11o2pzrS+7ty/7pzptbW1tUbqZDPnWM7FnEs5l3Ou5Iwi18/ZLLO+tjaW3y/mXMq5nHMlZxzJ9XM2c47lXMy5lHM550rOqOX6OZs5x3Iu5lzKuZxzJWcckrl7AAAAAAAAAAAAAAAAAADAR0tR/ZPi299YTWv9nfWlx6KTy9YD/cj7/wAAAP//OGbyDg==")
mremap(&(0x7f00005c1000/0x3000)=nil, 0x3000, 0x800000, 0x3, &(0x7f0000800000/0x800000)=nil)
shmdt(0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000000c40)='./file1\x00', 0x0)
rename(&(0x7f00000000c0)='./file2\x00', &(0x7f0000000080)='./file1\x00')

530.348242ms ago: executing program 4 (id=1794):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r2}, 0x18)
setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r0, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112)

520.257879ms ago: executing program 2 (id=1795):
r0 = socket(0x2, 0x80805, 0x0)
sendmmsg$inet_sctp(r0, &(0x7f0000002240)=[{0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000010c0)="13", 0x1}], 0x1, &(0x7f0000002180)=[@sndinfo={0x20, 0x84, 0x2, {0x3, 0x2, 0x9, 0xfd9}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x76f8}}], 0x38, 0x40010}], 0x1, 0x240000c0)

439.955636ms ago: executing program 4 (id=1796):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$cgroup_int(r0, &(0x7f0000000200), 0x12)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x22051, r0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @union={0x0, 0x0, 0x0, 0x5, 0x0, 0x7ff}]}}, &(0x7f0000000f40)=""/4089, 0x32, 0xff9, 0x1, 0x32e}, 0x28)

439.42103ms ago: executing program 2 (id=1797):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)={0x54, r1, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

372.186689ms ago: executing program 4 (id=1798):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=@newtaction={0x98, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x80d, 0x0, 0x10000000, 0x5, 0x4}, 0x1}}]}, {0x0, 0xa}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_mpls={0x30, 0x2, 0x0, 0x0, {{0x9}, {0x1}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x4008001}, 0x0)

308.203937ms ago: executing program 2 (id=1799):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000840), 0xffffffffffffffff)
r2 = open(&(0x7f0000000780)='./bus\x00', 0x400141042, 0x0)
r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f00000000c0)=0xa0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000040)={@host})
r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000140)={@host})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x4, 0xabc, 0x2449, 0x0, 0x0, 0x4})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000080)={{@hyper, 0x10400000}, @hyper, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r3, 0x7a5, &(0x7f0000000140)={{@host}, 0x1})
mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x7800007, 0x12, r2, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x0, 0x0)
getdents64(r5, &(0x7f0000001f00)=""/4111, 0x100f)

307.846556ms ago: executing program 4 (id=1800):
r0 = socket(0x1e, 0x4, 0x0)
connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10)

227.070254ms ago: executing program 4 (id=1801):
read$FUSE(0xffffffffffffffff, &(0x7f0000000200)={0x2020}, 0x2020)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'lo\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x68, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x38, 0x2, {{0x0, 0x200000, 0x0, 0x3, 0xffffffff, 0x8003}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x7fffffff, 0x0, 0xfffffffd, 0x100000}}]}]}}}]}, 0x68}}, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x0)

0s ago: executing program 4 (id=1802):
open$dir(&(0x7f0000000000)='./file0\x00', 0x10000, 0x48)
r0 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}})
mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha512\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f00000001c0)="66f7", 0x1}, {&(0x7f0000000300)='l3', 0x7fffef80}], 0x3}], 0x1, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x108}, 0x1, 0x0, 0x0, 0x4c000}, 0x80)
unshare(0xc040400)
r6 = socket$nl_audit(0x10, 0x3, 0x9)
setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, 0x0, 0x0)

kernel console output (not intermixed with test programs):

[  157.682143][ T7996] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  157.690519][ T7996] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001)
[  157.709644][   T33] audit: type=1800 audit(1757321030.883:25): pid=7996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.845" name="file1" dev="loop1" ino=1048624 res=0 errno=0
[  157.732166][ T6007] bridge_slave_1: left allmulticast mode
[  157.745049][ T6007] bridge_slave_1: left promiscuous mode
[  157.749475][ T6007] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.778121][ T6007] bridge_slave_0: left allmulticast mode
[  157.784411][ T6007] bridge_slave_0: left promiscuous mode
[  157.788742][ T6007] bridge0: port 1(bridge_slave_0) entered disabled state
[  157.817764][ T6008] libceph: connect (1)[c::]:6789 error -101
[  157.820598][ T6008] libceph: mon0 (1)[c::]:6789 connect error
[  157.833484][   T97] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  157.860763][   T47] libceph: connect (1)[c::]:6789 error -101
[  157.863793][   T47] libceph: mon0 (1)[c::]:6789 connect error
[  157.915722][   T47] libceph: connect (1)[c::]:6789 error -101
[  157.919002][   T47] libceph: mon0 (1)[c::]:6789 connect error
[  158.001188][   T97] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.013729][   T97] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  158.018448][   T97] usb 3-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00
[  158.022117][   T97] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.037493][   T97] usb 3-1: config 0 descriptor??
[  158.089585][ T6008] libceph: connect (1)[c::]:6789 error -101
[  158.092354][ T6008] libceph: mon0 (1)[c::]:6789 connect error
[  158.127718][   T47] libceph: connect (1)[c::]:6789 error -101
[  158.130358][   T47] libceph: mon0 (1)[c::]:6789 connect error
[  158.185309][   T47] libceph: connect (1)[c::]:6789 error -101
[  158.188484][   T47] libceph: mon0 (1)[c::]:6789 connect error
[  158.201773][ T6007] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  158.207452][ T6007] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  158.214085][ T6007] bond0 (unregistering): Released all slaves
[  158.459459][   T97] hid-steam 0003:28DE:1142.0004: reserved main item tag 0xe
[  158.469208][   T97] hid-steam 0003:28DE:1142.0004: hidraw0: USB HID v0.00 Device [HID 28de:1142] on usb-dummy_hcd.2-1/input0
[  158.562276][ T6007] hsr_slave_0: left promiscuous mode
[  158.575665][ T6007] hsr_slave_1: left promiscuous mode
[  158.578550][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.581748][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.586442][ T6007] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.589328][ T6007] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.605015][   T97] libceph: connect (1)[c::]:6789 error -101
[  158.606735][ T6007] veth1_macvtap: left promiscuous mode
[  158.608305][   T97] libceph: mon0 (1)[c::]:6789 connect error
[  158.609788][ T6007] veth0_macvtap: left promiscuous mode
[  158.614590][ T6007] veth1_vlan: left promiscuous mode
[  158.616330][ T6007] veth0_vlan: left promiscuous mode
[  158.623147][ T8004] ceph: No mds server is up or the cluster is laggy
[  158.623153][ T7998] ceph: No mds server is up or the cluster is laggy
[  158.631043][ T8001] ceph: No mds server is up or the cluster is laggy
[  158.652968][   T24] libceph: connect (1)[c::]:6789 error -101
[  158.664635][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  158.672454][   T24] usb 3-1: USB disconnect, device number 15
[  158.882510][ T8019] Illegal XDP return value 4294967262 on prog  (id 72) dev N/A, expect packet loss!
[  159.273022][ T8031] loop1: detected capacity change from 0 to 764
[  159.286571][ T8031] rock: directory entry would overflow storage
[  159.289960][ T8031] rock: sig=0x4654, size=5, remaining=4
[  159.342665][ T6007] team0 (unregistering): Port device team_slave_1 removed
[  159.442719][ T6007] team0 (unregistering): Port device team_slave_0 removed
[  159.674348][ T5950] Bluetooth: hci0: command tx timeout
[  159.896082][ T8037] loop1: detected capacity change from 0 to 2048
[  159.984384][ T8037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.998924][ T8037] EXT4-fs error (device loop1): ext4_ext_precache:649: inode #2: comm syz.1.855: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[  160.020389][ T8037] EXT4-fs (loop1): Remounting filesystem read-only
[  160.066886][ T5952] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.368051][ T8044] loop1: detected capacity change from 0 to 8192
[  160.382182][ T8044] FAT-fs (loop1): bogus logical sector size 155
[  160.385747][ T8044] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  160.389400][ T8044] FAT-fs (loop1): Can't find a valid FAT filesystem
[  160.569972][ T8053] loop1: detected capacity change from 0 to 4096
[  160.614376][ T8053] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  160.653141][ T8053] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[  160.655876][ T8053] ntfs3(loop1): ino=5, mi_enum_attr
[  160.772733][ T7991] chnl_net:caif_netlink_parms(): no params data found
[  160.901107][ T8061] loop1: detected capacity change from 0 to 2364
[  161.121542][ T8074] loop2: detected capacity change from 0 to 512
[  161.144874][ T7991] bridge0: port 1(bridge_slave_0) entered blocking state
[  161.147393][ T7991] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.156358][ T7991] bridge_slave_0: entered allmulticast mode
[  161.166715][ T7991] bridge_slave_0: entered promiscuous mode
[  161.179624][ T7991] bridge0: port 2(bridge_slave_1) entered blocking state
[  161.188345][ T8074] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  161.203146][ T7991] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.206549][ T7991] bridge_slave_1: entered allmulticast mode
[  161.210464][ T7991] bridge_slave_1: entered promiscuous mode
[  161.309080][ T7991] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  161.330338][ T1096] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1)
[  161.349076][ T7991] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  161.488348][ T7991] team0: Port device team_slave_0 added
[  161.498295][ T7991] team0: Port device team_slave_1 added
[  161.565123][ T7991] batman_adv: batadv0: Adding interface: batadv_slave_0
[  161.567371][ T7991] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.583468][ T7991] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  161.592932][ T7991] batman_adv: batadv0: Adding interface: batadv_slave_1
[  161.601215][ T7991] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  161.622695][ T7991] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  161.691732][ T7991] hsr_slave_0: entered promiscuous mode
[  161.701424][ T7991] hsr_slave_1: entered promiscuous mode
[  161.713600][ T5950] Bluetooth: hci0: command tx timeout
[  161.714036][ T7991] debugfs: 'hsr0' already exists in 'hsr'
[  161.718595][ T7991] Cannot create hsr debugfs directory
[  161.895820][ T8108] loop2: detected capacity change from 0 to 256
[  161.919787][ T8108] FAT-fs (loop2): Directory bread(block 64) failed
[  161.922451][ T8108] FAT-fs (loop2): Directory bread(block 65) failed
[  161.929648][ T8108] FAT-fs (loop2): Directory bread(block 66) failed
[  161.932253][ T8108] FAT-fs (loop2): Directory bread(block 67) failed
[  161.935966][ T8108] FAT-fs (loop2): Directory bread(block 68) failed
[  161.939332][ T8108] FAT-fs (loop2): Directory bread(block 69) failed
[  161.942093][ T8108] FAT-fs (loop2): Directory bread(block 70) failed
[  161.947234][ T8108] FAT-fs (loop2): Directory bread(block 71) failed
[  161.950092][ T8108] FAT-fs (loop2): Directory bread(block 72) failed
[  161.952798][ T8108] FAT-fs (loop2): Directory bread(block 73) failed
[  162.077021][ T7991] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  162.089913][ T8098] loop1: detected capacity change from 0 to 32768
[  162.148370][ T7991] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  162.159467][ T7991] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  162.169985][ T7991] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  162.188170][ T8098] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  162.246918][ T8098] XFS (loop1): Ending clean mount
[  162.257951][ T8098] XFS (loop1): Quotacheck needed: Please wait.
[  162.296323][ T8098] XFS (loop1): Quotacheck: Done.
[  162.341487][   T33] audit: type=1800 audit(1757321035.513:26): pid=8098 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.878" name="file1" dev="loop1" ino=4422 res=0 errno=0
[  162.412599][ T7991] 8021q: adding VLAN 0 to HW filter on device bond0
[  162.447556][ T7991] 8021q: adding VLAN 0 to HW filter on device team0
[  162.467150][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[  162.470053][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[  162.507888][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[  162.510874][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[  162.656039][ T5952] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  162.731602][ T7991] 8021q: adding VLAN 0 to HW filter on device batadv0
[  163.208870][ T7991] veth0_vlan: entered promiscuous mode
[  163.232756][ T7991] veth1_vlan: entered promiscuous mode
[  163.234571][ T8160] binder: 8159:8160 ioctl c0306201 200000000640 returned -22
[  163.309831][ T7991] veth0_macvtap: entered promiscuous mode
[  163.317607][ T7991] veth1_macvtap: entered promiscuous mode
[  163.335498][ T7991] batman_adv: batadv0: Interface activated: batadv_slave_0
[  163.364816][ T7991] batman_adv: batadv0: Interface activated: batadv_slave_1
[  163.387869][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  163.405286][ T5958] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  163.408880][ T5958] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  163.412079][ T5958] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  163.510609][ T8156] loop1: detected capacity change from 0 to 32768
[  163.553630][ T8156] 
[  163.553630][ T8156]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  163.553630][ T8156] 
[  163.610460][ T8156] 
[  163.610460][ T8156]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  163.610460][ T8156] 
[  163.622439][ T8156] 
[  163.622439][ T8156]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  163.622439][ T8156] 
[  163.636093][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.637848][ T8156] 
[  163.637848][ T8156]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  163.637848][ T8156] 
[  163.644887][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.663894][  T118] 
[  163.663894][  T118]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  163.663894][  T118] 
[  163.670515][ T8176] 
[  163.670515][ T8176]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  163.670515][ T8176] 
[  163.682356][ T8176] 
[  163.682356][ T8176]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  163.682356][ T8176] 
[  163.701856][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  163.710413][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  163.736280][ T5952] 
[  163.736280][ T5952]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  163.736280][ T5952] 
[  163.744391][ T5952] 
[  163.744391][ T5952]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  163.744391][ T5952] 
[  163.793644][ T5950] Bluetooth: hci0: command tx timeout
[  164.065190][ T8191] loop1: detected capacity change from 0 to 256
[  164.677623][ T8202] fuse: Unknown parameter '00000000000000000000'
[  165.852898][ T6008] kernel write not supported for file /media6 (pid: 6008 comm: kworker/0:5)
[  165.874224][ T5950] Bluetooth: hci0: command tx timeout
[  165.977621][   T33] audit: type=1326 audit(1757321039.153:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.1.916" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e5d8ebe9 code=0x7ffc0000
[  165.993575][   T33] audit: type=1326 audit(1757321039.153:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.1.916" exe="/syz-executor" sig=0 arch=c000003e syscall=141 compat=0 ip=0x7f16e5d8ebe9 code=0x7ffc0000
[  166.002076][   T33] audit: type=1326 audit(1757321039.153:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.1.916" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e5d8ebe9 code=0x7ffc0000
[  166.013158][   T33] audit: type=1326 audit(1757321039.153:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8251 comm="syz.1.916" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e5d8ebe9 code=0x7ffc0000
[  166.159903][ T8265] netlink: 868 bytes leftover after parsing attributes in process `syz.2.923'.
[  166.762195][ T8296] capability: warning: `syz.2.935' uses 32-bit capabilities (legacy support in use)
[  166.844148][ T8300] binder: 8299:8300 ioctl c0306201 200000000080 returned -14
[  166.893629][ T5314] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  166.932237][ T8304] block nbd2: Attempted send on invalid socket
[  166.936538][ T8304] I/O error, dev nbd2, sector 2 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  166.944482][ T8304] MINIX-fs: unable to read superblock
[  167.054364][ T5314] usb 5-1: Using ep0 maxpacket: 16
[  167.063464][ T5314] usb 5-1: too many configurations: 97, using maximum allowed: 8
[  167.128154][ T5314] usb 5-1: string descriptor 0 read error: -71
[  167.130850][ T5314] usb 5-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c
[  167.150486][ T5314] usb 5-1: New USB device strings: Mfr=249, Product=204, SerialNumber=224
[  167.160521][ T5314] usb 5-1: rejected 8 configurations due to insufficient available bus power
[  167.161273][ T8314] loop2: detected capacity change from 0 to 256
[  167.169833][ T5314] usb 5-1: no configuration chosen from 8 choices
[  167.180848][ T5314] usb 5-1: USB disconnect, device number 2
[  167.347917][ T8322] netlink: 4 bytes leftover after parsing attributes in process `syz.1.947'.
[  168.540375][ T8349] evm: overlay not supported
[  169.359071][ T8387] loop4: detected capacity change from 0 to 8192
[  169.523699][ T6008] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  169.564841][ T8392] loop4: detected capacity change from 0 to 256
[  169.590194][ T8392] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  169.646580][ T8392] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  169.650037][ T8392] FAT-fs (loop4): Filesystem has been set read-only
[  169.659757][ T8398] sctp: [Deprecated]: syz.1.979 (pid 8398) Use of int in max_burst socket option.
[  169.659757][ T8398] Use struct sctp_assoc_value instead
[  169.695145][ T6008] usb 3-1: Using ep0 maxpacket: 16
[  169.704120][   T33] audit: type=1326 audit(1757321042.873:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.1.980" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e5d8ebe9 code=0x7ffc0000
[  169.712981][   T33] audit: type=1326 audit(1757321042.883:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.1.980" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e5d8ebe9 code=0x7ffc0000
[  169.721715][ T6008] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[  169.725126][ T6008] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  169.729226][ T6008] usb 3-1: config 0 has no interface number 0
[  169.732613][ T6008] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  169.742275][   T33] audit: type=1326 audit(1757321042.883:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.1.980" exe="/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f16e5d8ebe9 code=0x7ffc0000
[  169.750866][   T33] audit: type=1326 audit(1757321042.883:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8399 comm="syz.1.980" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f16e5d8ebe9 code=0x7ffc0000
[  169.752871][ T8402] loop1: detected capacity change from 0 to 256
[  169.761915][ T6008] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[  169.767357][ T6008] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[  169.770693][ T6008] usb 3-1: Product: syz
[  169.772136][ T6008] usb 3-1: SerialNumber: syz
[  169.775451][ T6008] usb 3-1: config 0 descriptor??
[  169.781489][ T6008] usbhid 3-1:0.8: couldn't find an input interrupt endpoint
[  169.842247][ T8402] FAT-fs (loop1): Directory bread(block 64) failed
[  169.847742][ T8402] FAT-fs (loop1): Directory bread(block 65) failed
[  169.850355][ T8402] FAT-fs (loop1): Directory bread(block 66) failed
[  169.852951][ T8402] FAT-fs (loop1): Directory bread(block 67) failed
[  169.856807][ T8402] FAT-fs (loop1): Directory bread(block 68) failed
[  169.865294][ T8402] FAT-fs (loop1): Directory bread(block 69) failed
[  169.867415][ T8402] FAT-fs (loop1): Directory bread(block 70) failed
[  169.869469][ T8402] FAT-fs (loop1): Directory bread(block 71) failed
[  169.871520][ T8402] FAT-fs (loop1): Directory bread(block 72) failed
[  169.875212][ T8402] FAT-fs (loop1): Directory bread(block 73) failed
[  169.993779][ T5949] usb 3-1: USB disconnect, device number 16
[  170.129917][ T8414] loop1: detected capacity change from 0 to 1024
[  170.357107][ T8424] random: crng reseeded on system resumption
[  170.833715][ T8454] loop2: detected capacity change from 0 to 1024
[  170.923830][  T499] hfsplus: b-tree write err: -5, ino 4
[  171.085764][ T8466] loop2: detected capacity change from 0 to 4096
[  171.099004][ T8466] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  171.256005][ T8466] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  171.259564][ T8466] ntfs3(loop2): Failed to load $AttrDef (-22)
[  171.466209][ T8476] lo speed is unknown, defaulting to 1000
[  171.469299][ T8476] lo speed is unknown, defaulting to 1000
[  171.488110][ T8476] lo speed is unknown, defaulting to 1000
[  171.526346][ T8476] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  171.588037][ T8476] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  171.634795][ T6008] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  171.652866][ T8476] lo speed is unknown, defaulting to 1000
[  171.657920][ T8476] lo speed is unknown, defaulting to 1000
[  171.661751][ T8476] lo speed is unknown, defaulting to 1000
[  171.813507][ T6008] usb 2-1: Using ep0 maxpacket: 16
[  171.821936][ T6008] usb 2-1: New USB device found, idVendor=25c6, idProduct=9002, bcdDevice=41.ba
[  171.826476][ T6008] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.829729][ T6008] usb 2-1: Product: syz
[  171.831556][ T6008] usb 2-1: Manufacturer: syz
[  171.833753][ T6008] usb 2-1: SerialNumber: syz
[  171.839629][ T6008] usb 2-1: config 0 descriptor??
[  172.060183][ T6008] snd-usb-hiface 2-1:0.0: probe with driver snd-usb-hiface failed with error -22
[  172.190776][ T8487] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1018'.
[  172.261650][ T5949] usb 2-1: USB disconnect, device number 16
[  172.566755][ T8498] loop2: detected capacity change from 0 to 512
[  172.571091][ T8498] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  172.575100][ T8498] UDF-fs: Scanning with blocksize 512 failed
[  172.581524][ T8498] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  172.584679][ T8498] UDF-fs: Scanning with blocksize 1024 failed
[  172.588020][ T8498] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[  172.591057][ T8498] UDF-fs: Scanning with blocksize 2048 failed
[  172.594785][ T8498] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  172.603234][ T8498] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  172.869600][ T8506] hfsplus: unable to find HFS+ superblock
[  173.101600][ T8510] loop1: detected capacity change from 0 to 128
[  173.364228][ T8513] loop4: detected capacity change from 0 to 1024
[  174.024149][ T8522] loop2: detected capacity change from 0 to 8
[  174.126381][ T8514] loop1: detected capacity change from 0 to 32768
[  174.142978][ T8514] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1028 (8514)
[  174.160711][ T8514] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  174.168869][ T8514] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  174.370120][ T8532] input: syz1 as /devices/virtual/input/input8
[  174.394647][ T8514] BTRFS info (device loop1): enabling ssd optimizations
[  174.394672][ T8514] BTRFS info (device loop1): enabling free space tree
[  174.534622][ T8551] netlink: 'syz.4.1034': attribute type 1 has an invalid length.
[  174.537868][ T8551] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1034'.
[  174.576218][ T5952] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  174.871434][ T8563] loop2: detected capacity change from 0 to 2048
[  174.939300][ T8563] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  174.970473][ T8563] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  175.001457][ T8563] UDF-fs: unknown compression code (0)
[  175.733422][ T8572] loop1: detected capacity change from 0 to 32768
[  175.788758][ T8572] (syz.1.1041,8572,0):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=7, slot=0
[  175.792804][ T8572] (syz.1.1041,8572,0):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  175.802682][ T8572] (syz.1.1041,8572,0):ocfs2_mount_volume:1758 ERROR: status = -22
[  175.815386][ T8572] (syz.1.1041,8572,0):ocfs2_fill_super:1177 ERROR: status = -22
[  176.047506][ T8598] loop2: detected capacity change from 0 to 16384
[  176.135119][ T8598] bcachefs (loop2): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,str_hash=crc64,erasure_code,prjquota,norecovery,recovery_pass_last=reconstruct_snapshots,read_only,reconstruct_alloc,version_upgrade=none
[  176.135147][ T8598]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  176.151171][ T8598] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  176.156798][ T8598] bcachefs (loop2): recovering from clean shutdown, journal seq 18
[  176.160317][ T8598] bcachefs (loop2): dropping and reconstructing all alloc info
[  176.194367][ T8598] bcachefs (loop2): accounting_read... done
[  176.198146][ T8598] bcachefs (loop2): alloc_read... done
[  176.200725][ T8598] bcachefs (loop2): snapshots_read... done
[  176.214155][ T8598] bcachefs (loop2): reading quotas
[  176.220894][ T8598] bcachefs (loop2): quotas done
[  176.226600][ T8598] bcachefs (loop2): done starting filesystem
[  176.292985][ T8598] bcachefs (loop2): shutdown by ioctl type 2emergency read only at seq 18
[  176.298632][ T8598] bcachefs (loop2): shutdown by ioctl type 1
[  176.322858][ T5954] bcachefs (loop2): shutting down
[  176.352133][ T5954] bcachefs (loop2): shutdown complete
[  176.377491][ T8611] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  176.386033][   T10] IPVS: starting estimator thread 0...
[  176.447743][ T8617] loop4: detected capacity change from 0 to 1024
[  176.451870][ T8617] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  176.473545][ T8614] IPVS: using max 54 ests per chain, 129600 per kthread
[  176.783493][   T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  176.943426][   T10] usb 5-1: Using ep0 maxpacket: 16
[  176.946896][   T10] usb 5-1: config 8 has an invalid interface number: 206 but max is 0
[  176.950119][   T10] usb 5-1: config 8 has no interface number 0
[  176.952571][   T10] usb 5-1: config 8 interface 206 altsetting 1 has an endpoint descriptor with address 0xF7, changing to 0x87
[  176.957997][   T10] usb 5-1: config 8 interface 206 altsetting 1 endpoint 0x87 has invalid maxpacket 33058, setting to 1024
[  176.962334][   T10] usb 5-1: config 8 interface 206 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[  176.968589][   T10] usb 5-1: config 8 interface 206 has no altsetting 0
[  176.984881][   T10] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=35.bb
[  176.988496][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.991636][   T10] usb 5-1: Product: syz
[  176.995870][   T10] usb 5-1: Manufacturer: syz
[  176.997799][   T10] usb 5-1: SerialNumber: syz
[  177.225113][   T10] garmin_gps 5-1:8.206: Garmin GPS usb/tty converter detected
[  177.249039][   T10] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0
[  177.257540][   T10] usb 5-1: USB disconnect, device number 3
[  177.268934][   T10] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0
[  177.272967][   T10] garmin_gps 5-1:8.206: device disconnected
[  177.370485][ T8633] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1060'.
[  177.549835][ T8630] loop2: detected capacity change from 0 to 32768
[  177.562442][ T8630] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  177.573993][ T8630] XFS (loop2): Ending clean mount
[  177.589122][ T8630] XFS (loop2): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  177.618535][ T5954] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  177.743824][   T10] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  177.903719][   T10] usb 2-1: Using ep0 maxpacket: 16
[  177.908366][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  177.918463][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  177.922388][   T10] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00
[  177.932677][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.955407][   T10] usb 2-1: config 0 descriptor??
[  178.141094][ T8667] loop4: detected capacity change from 0 to 2048
[  178.163016][ T8667] UDF-fs: error (device loop4): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  178.168304][ T8667] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  178.171408][ T8667] UDF-fs: Scanning with blocksize 512 failed
[  178.179482][ T8667] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  178.196748][   T33] audit: type=1800 audit(1757321051.373:35): pid=8667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1073" name="bus" dev="loop4" ino=851 res=0 errno=0
[  178.362767][ T8663] loop2: detected capacity change from 0 to 32768
[  178.371482][ T8663] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1071 (8663)
[  178.386642][   T10] hid-multitouch 0003:1FD2:6007.0005: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0
[  178.429393][ T8663] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  178.433891][ T8663] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  178.512203][ T8689] loop4: detected capacity change from 0 to 128
[  178.528155][ T8663] BTRFS info (device loop2): enabling ssd optimizations
[  178.542423][ T8663] BTRFS info (device loop2): enabling free space tree
[  178.548080][ T8663] BTRFS info (device loop2): use zstd compression, level 3
[  178.560790][ T8689] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  178.569840][ T8689] ext4 filesystem being mounted at /68/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  178.586527][   T24] usb 2-1: USB disconnect, device number 17
[  178.634667][ T5954] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  178.649519][ T7991] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  178.990635][ T8695] loop4: detected capacity change from 0 to 32768
[  179.005632][ T8695] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  179.060678][ T7991] (syz-executor,7991,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  179.068551][ T7991] ocfs2: Unmounting device (7,4) on (node local)
[  179.632077][ T8734] loop1: detected capacity change from 0 to 256
[  179.654964][ T8734] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d)
[  179.655853][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  179.658885][ T8734] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  179.814055][   T10] usb 5-1: Using ep0 maxpacket: 16
[  179.822690][   T10] usb 5-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[  179.828397][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.840309][   T10] usb 5-1: config 0 descriptor??
[  179.854649][   T10] gspca_main: sonixj-2.14.0 probing 0471:0327
[  179.943499][ T5987] usb 3-1: new full-speed USB device number 17 using dummy_hcd
[  180.041052][ T8751] netlink: 'syz.1.1104': attribute type 10 has an invalid length.
[  180.044066][ T8751] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1104'.
[  180.059321][ T8751] team0: Port device geneve0 added
[  180.118047][ T8753] loop1: detected capacity change from 0 to 256
[  180.129426][ T5987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 4
[  180.142823][ T5987] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e
[  180.146827][ T5987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.149585][ T5987] usb 3-1: Product: syz
[  180.151107][ T5987] usb 3-1: Manufacturer: syz
[  180.152608][ T5987] usb 3-1: SerialNumber: syz
[  180.158313][ T5987] usb 3-1: config 0 descriptor??
[  180.175327][ T5987] hub 3-1:0.0: bad descriptor, ignoring hub
[  180.177418][ T5987] hub 3-1:0.0: probe with driver hub failed with error -5
[  180.182945][ T5987] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input10
[  180.309763][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1105'.
[  180.624190][ T5987] usb 3-1: USB disconnect, device number 17
[  181.184826][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1107'.
[  181.237359][ T8757] loop1: detected capacity change from 0 to 4096
[  181.272735][ T8761] loop2: detected capacity change from 0 to 2048
[  181.277262][ T8761] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=3932051, location=3932051
[  181.284439][ T8761] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  181.654759][ T8776] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth0_to_team, syncid = 0, id = 0
[  182.094174][   T10] gspca_sonixj: i2c_w8 err -71
[  182.096209][   T10] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  182.104215][   T10] usb 5-1: USB disconnect, device number 4
[  182.223620][ T5987] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  182.373443][ T5987] usb 3-1: Using ep0 maxpacket: 8
[  182.384116][ T5987] usb 3-1: unable to get BOS descriptor or descriptor too short
[  182.388251][ T5987] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  182.392442][ T5987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  182.398307][ T5987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  182.401768][ T5987] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[  182.405860][ T5987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  182.409401][ T5987] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  182.421345][ T5987] usb 3-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  182.427022][ T5987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.430006][ T5987] usb 3-1: Product: syz
[  182.431580][ T5987] usb 3-1: Manufacturer: syz
[  182.434252][ T5987] usb 3-1: SerialNumber: syz
[  182.443796][ T5987] usb 3-1: config 0 descriptor??
[  182.446704][ T8799] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  182.452376][ T5987] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  182.534695][ T6043] udevd[6043]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  182.696395][ T5949] usb 3-1: USB disconnect, device number 18
[  182.715893][ T8811] loop4: detected capacity change from 0 to 128
[  182.742877][ T8811] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  182.759826][ T8811] hpfs: filesystem error: improperly stopped
[  182.762240][ T8811] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  182.769074][ T8811] hpfs: You really don't want any checks? You are crazy...
[  182.772463][ T8811] hpfs: hpfs_map_sector(): read error
[  182.776663][ T8811] hpfs: code page support is disabled
[  182.779397][ T8811] hpfs: hpfs_map_4sectors(): unaligned read
[  182.781800][ T8811] hpfs: hpfs_map_4sectors(): unaligned read
[  182.786465][ T8811] hpfs: filesystem error: unable to find root dir
[  182.804870][ T8811] hpfs: hpfs_map_4sectors(): unaligned read
[  183.046446][ T8832] loop1: detected capacity change from 0 to 128
[  183.504921][ T8838] loop1: detected capacity change from 0 to 32768
[  183.851090][ T8845] tipc: Started in network mode
[  183.853027][ T8845] tipc: Node identity ac141441, cluster identity 4711
[  183.856581][ T8845] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  183.927447][ T8852] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1150'.
[  184.387121][ T8872] loop2: detected capacity change from 0 to 32768
[  184.396536][ T8872] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1155 (8872)
[  184.418073][ T8875] loop1: detected capacity change from 0 to 32768
[  184.425166][ T8875] BTRFS info: device /dev/loop1 (7:1) using temp-fsid f558c9b9-50e6-4142-a53d-5ca04e06de7f
[  184.431153][ T8872] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  184.433805][ T8875] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1156 (8875)
[  184.446918][ T8872] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  184.462209][ T8875] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  184.466488][ T8875] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  184.639734][ T8872] BTRFS info (device loop2): enabling ssd optimizations
[  184.648948][ T8872] BTRFS info (device loop2): enabling free space tree
[  184.661702][ T8875] BTRFS info (device loop1): enabling ssd optimizations
[  184.675689][ T8875] BTRFS info (device loop1): enabling free space tree
[  184.796815][ T5954] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  184.803466][   T33] audit: type=1800 audit(1757321057.973:36): pid=8875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1156" name="file1" dev="loop1" ino=261 res=0 errno=0
[  184.865962][   T33] audit: type=1800 audit(1757321058.033:37): pid=8914 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1156" name="bus" dev="loop1" ino=263 res=0 errno=0
[  185.047046][ T5952] BTRFS info (device loop1): last unmount of filesystem f558c9b9-50e6-4142-a53d-5ca04e06de7f
[  185.252977][ T8920] netlink: 'syz.1.1160': attribute type 6 has an invalid length.
[  185.256013][ T8920] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1160'.
[  185.477032][ T8928] overlayfs: failed to resolve './file0': -2
[  185.768400][ T8927] loop1: detected capacity change from 0 to 32768
[  185.776787][ T8927] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1164 (8927)
[  185.787208][ T8927] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  185.791250][ T8927] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  185.821554][ T8927] BTRFS info (device loop1): enabling ssd optimizations
[  185.826357][ T8927] BTRFS info (device loop1): enabling free space tree
[  185.909341][ T5952] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  186.656695][ T8961] loop2: detected capacity change from 0 to 40427
[  186.662487][ T8961] F2FS-fs (loop2): Image doesn't support compression
[  186.674166][ T8961] F2FS-fs (loop2): invalid crc value
[  186.681622][ T8961] F2FS-fs (loop2): SIT is corrupted node# 2 vs 7
[  186.689977][ T8961] F2FS-fs (loop2): Failed to initialize F2FS segment manager (-117)
[  186.928954][ T8966] loop4: detected capacity change from 0 to 4096
[  186.935181][ T8966] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  187.408990][ T8975] loop4: detected capacity change from 0 to 8192
[  187.546268][ T8968] syz.2.1173 (8968): drop_caches: 2
[  187.619663][ T5987] IPVS: starting estimator thread 0...
[  187.743470][ T8989] IPVS: using max 64 ests per chain, 153600 per kthread
[  187.761152][ T8997] loop4: detected capacity change from 0 to 256
[  187.766512][ T8997] exfat: Deprecated parameter 'utf8'
[  187.768486][ T8997] exfat: Unknown parameter 'iocharseC'
[  187.791683][ T8997] Invalid source name
[  187.811409][ T9003] loop2: detected capacity change from 0 to 16
[  187.818714][ T9003] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  187.980852][ T9012] loop4: detected capacity change from 0 to 16
[  187.989122][ T9012] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  187.993730][ T9013] netlink: 'syz.2.1190': attribute type 1 has an invalid length.
[  188.001938][ T9013] netlink: 'syz.2.1190': attribute type 2 has an invalid length.
[  188.152714][ T9021] loop2: detected capacity change from 0 to 16
[  188.175292][ T9021] erofs (device loop2): mounted with root inode @ nid 36.
[  188.323495][ T5949] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  188.496238][ T9033] loop2: detected capacity change from 0 to 1024
[  188.498746][ T5949] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[  188.498774][ T5949] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.514299][ T5949] usb 5-1: Product: syz
[  188.523142][ T5949] usb 5-1: Manufacturer: syz
[  188.533467][ T5949] usb 5-1: SerialNumber: syz
[  188.555085][ T5949] usb 5-1: config 0 descriptor??
[  188.562900][ T5949] gspca_main: sq930x-2.14.0 probing 2770:930c
[  188.576806][ T8999] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[  188.897570][ T9043] loop1: detected capacity change from 0 to 32768
[  188.919439][ T9043] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  188.951591][ T9043] XFS (loop1): Ending clean mount
[  188.983686][ T5952] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  189.405573][   T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  189.571674][   T24] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  189.576697][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.580602][   T24] usb 2-1: Product: syz
[  189.582850][   T24] usb 2-1: Manufacturer: syz
[  189.591597][   T24] usb 2-1: SerialNumber: syz
[  189.597295][   T24] usb 2-1: config 0 descriptor??
[  189.609148][   T24] gspca_main: sq905c-2.14.0 probing 2770:9052
[  189.665837][ T9071] loop2: detected capacity change from 0 to 512
[  189.677238][ T9071] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.1217: corrupted in-inode xattr: e_value size too large
[  189.683174][ T9071] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.1217: couldn't read orphan inode 15 (err -117)
[  189.691041][ T9071] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  189.708172][ T9071] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #2: block 12: comm syz.2.1217: lblock 3 mapped to illegal pblock 12 (length 1)
[  189.741747][ T5954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  189.805482][   T24] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  189.810219][   T24] sq905c 2-1:0.0: Get version command failed
[  189.812664][   T24] sq905c 2-1:0.0: probe with driver sq905c failed with error -71
[  189.816431][ T5949] gspca_sq930x: reg_w 0105 0c00 failed -71
[  189.823595][   T24] usb 2-1: USB disconnect, device number 18
[  189.891494][ T9079] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1220'.
[  189.898111][ T9079] netem: unknown loss type 12
[  189.900472][ T9079] netem: change failed
[  189.940681][   T33] audit: type=1326 audit(1757321063.113:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.2.1221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091f8ebe9 code=0x7ffc0000
[  189.951617][   T33] audit: type=1326 audit(1757321063.113:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.2.1221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091f8ebe9 code=0x7ffc0000
[  189.960599][   T33] audit: type=1326 audit(1757321063.133:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.2.1221" exe="/syz-executor" sig=0 arch=c000003e syscall=52 compat=0 ip=0x7f8091f8ebe9 code=0x7ffc0000
[  189.973883][   T33] audit: type=1326 audit(1757321063.133:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.2.1221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091f8ebe9 code=0x7ffc0000
[  189.981554][   T33] audit: type=1326 audit(1757321063.133:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9080 comm="syz.2.1221" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091f8ebe9 code=0x7ffc0000
[  190.015275][ T9083] loop2: detected capacity change from 0 to 1024
[  190.018959][ T9083] hfsplus: unable to change nls mapping
[  190.037426][ T5949] gspca_sq930x: Sensor ov9630 not yet treated
[  190.039771][ T5949] sq930x 5-1:0.0: probe with driver sq930x failed with error -22
[  190.057141][ T5949] usb 5-1: USB disconnect, device number 5
[  190.256457][ T9085] loop2: detected capacity change from 0 to 32768
[  190.274621][ T9085] ERROR: (device loop2): dbAlloc: unable to allocate blocks
[  190.274621][ T9085] 
[  190.278938][ T9085] jfs_rename: dtInsert returned -EIO
[  190.393573][ T9089] input: syz0 as /devices/virtual/input/input11
[  191.036801][ T9093] loop2: detected capacity change from 0 to 32768
[  191.058289][ T9093] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1225 (9093)
[  191.085655][ T9093] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  191.092160][ T9093] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  191.154105][ T9093] BTRFS info (device loop2): enabling ssd optimizations
[  191.161794][ T9093] BTRFS info (device loop2): enabling free space tree
[  191.192582][ T5954] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  191.223019][ T9096] loop1: detected capacity change from 0 to 32768
[  191.227191][ T9096] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1228 (9096)
[  191.254169][ T9096] BTRFS info (device loop1): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  191.258314][ T9096] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  191.420731][ T9096] BTRFS info (device loop1): enabling ssd optimizations
[  191.422923][ T9096] BTRFS info (device loop1): enabling free space tree
[  191.505791][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1229'.
[  191.597745][ T9134] batadv0: entered promiscuous mode
[  191.600263][ T9134] macsec1: entered promiscuous mode
[  191.602396][ T9134] macsec1: entered allmulticast mode
[  191.628476][ T9134] batadv0: entered allmulticast mode
[  191.759443][ T9141] misc userio: No port type given on /dev/userio
[  191.809586][ T5952] BTRFS info (device loop1): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  192.196719][ T9160] loop2: detected capacity change from 0 to 128
[  192.210757][ T9160] FAT-fs (loop2): Directory bread(block 32) failed
[  192.215561][ T9160] FAT-fs (loop2): Directory bread(block 33) failed
[  192.219255][ T9160] FAT-fs (loop2): Directory bread(block 34) failed
[  192.221572][ T9160] FAT-fs (loop2): Directory bread(block 35) failed
[  192.227332][ T9160] FAT-fs (loop2): Directory bread(block 36) failed
[  192.229615][ T9160] FAT-fs (loop2): Directory bread(block 37) failed
[  192.232003][ T9160] FAT-fs (loop2): Directory bread(block 38) failed
[  192.235305][ T9160] FAT-fs (loop2): Directory bread(block 39) failed
[  192.237431][ T9160] FAT-fs (loop2): Directory bread(block 40) failed
[  192.239663][ T9160] FAT-fs (loop2): Directory bread(block 41) failed
[  192.298734][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1246'.
[  192.325796][ T9168] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1246'.
[  192.326684][ T6007] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  192.332995][ T6007] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  192.337997][ T6007] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  192.350664][ T6007] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  192.625922][ T9182] gre1: entered promiscuous mode
[  192.684808][ T9184] loop4: detected capacity change from 0 to 4096
[  192.690848][ T9184] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  192.696024][ T9184] ntfs3(loop4): Failed to load $UpCase (-22).
[  192.731479][ T5987] usb 3-1: new low-speed USB device number 19 using dummy_hcd
[  192.753033][ T9188] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1256'.
[  192.762029][ T9188] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1256'.
[  192.891203][ T5987] usb 3-1: config 9 has an invalid interface number: 1 but max is 0
[  192.896143][ T5987] usb 3-1: config 9 has no interface number 0
[  192.898759][ T5987] usb 3-1: config 9 interface 1 has no altsetting 0
[  192.905770][ T5987] usb 3-1: string descriptor 0 read error: -22
[  192.908531][ T5987] usb 3-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36
[  192.912725][ T5987] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  192.924360][ T5987] cx231xx 3-1:9.1: New device   @ 1.5 Mbps (2040:b140) with 1 interfaces
[  192.927678][ T5987] cx231xx 3-1:9.1: Not found matching IAD interface
[  193.244859][ T5987] usb 3-1: USB disconnect, device number 19
[  193.503590][   T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  193.696316][   T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  193.704911][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.722088][   T10] usb 2-1: config 0 descriptor??
[  193.729421][   T10] gspca_main: spca508-2.14.0 probing 8086:0110
[  193.816091][ T9199] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1260'.
[  193.968996][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.971470][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.147562][   T10] gspca_spca508: reg_read err -71
[  194.155828][   T10] gspca_spca508: reg_read err -71
[  194.159430][   T10] gspca_spca508: reg_read err -71
[  194.166611][   T10] gspca_spca508: reg_read err -71
[  194.169122][   T10] gspca_spca508: reg write: error -71
[  194.174957][   T10] spca508 2-1:0.0: probe with driver spca508 failed with error -71
[  194.211675][   T10] usb 2-1: USB disconnect, device number 19
[  194.376027][ T9218] bridge: RTM_NEWNEIGH with invalid ether address
[  194.407560][ T9206] loop4: detected capacity change from 0 to 32768
[  194.414774][ T9206] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section members_v1: too many devices for section size
[  194.414774][ T9206] members_v1 (size 64):
[  194.414774][ T9206] nr_devices mismatch: have 0 entries, should be 8
[  194.430919][ T9206] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  194.582670][ T9222] loop4: detected capacity change from 0 to 4096
[  194.626192][ T9223] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  194.647021][ T9222] NILFS (loop4): DAT doesn't have a block to manage vblocknr = 648518346341351424
[  194.650939][ T9222] NILFS error (device loop4): nilfs_bmap_truncate: broken bmap (inode number=12)
[  194.678741][ T9222] Remounting filesystem read-only
[  194.680500][ T9222] NILFS (loop4): error -5 truncating bmap (ino=12)
[  194.737030][ T9225] ptrace attach of "/syz-executor exec"[5952] was attempted by "\x09                                        0                                           "[9225]
[  194.742486][ T7991] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[  194.807040][ T9220] loop2: detected capacity change from 0 to 40427
[  194.811267][ T9220] F2FS-fs (loop2): Image doesn't support compression
[  194.824103][ T9220] F2FS-fs (loop2): build fault injection rate: 690
[  194.843841][ T9220] F2FS-fs (loop2): invalid crc value
[  194.932462][ T9220] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  194.944245][ T9220] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  195.006082][ T9230] f2fs_ckpt-7:2: attempt to access beyond end of device
[  195.006082][ T9230] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  195.026797][ T9230] CPU: 1 UID: 0 PID: 9230 Comm: f2fs_ckpt-7:2 Not tainted syzkaller #0 PREEMPT(full) 
[  195.026820][ T9230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  195.026830][ T9230] Call Trace:
[  195.026837][ T9230]  <TASK>
[  195.026845][ T9230]  dump_stack_lvl+0x189/0x250
[  195.026870][ T9230]  ? __pfx_dump_stack_lvl+0x10/0x10
[  195.026886][ T9230]  ? __pfx_queue_work_on+0x10/0x10
[  195.026897][ T9230]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  195.026911][ T9230]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  195.026927][ T9230]  f2fs_handle_critical_error+0x37c/0x540
[  195.026944][ T9230]  f2fs_write_end_io+0x886/0xb60
[  195.026960][ T9230]  __submit_merged_bio+0x27a/0x6a0
[  195.026971][ T9230]  ? up_write+0x1c4/0x420
[  195.026983][ T9230]  __submit_merged_write_cond+0x44c/0x530
[  195.026997][ T9230]  f2fs_sync_node_pages+0x1479/0x15e0
[  195.027017][ T9230]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  195.027041][ T9230]  ? f2fs_write_checkpoint+0xdad/0x2440
[  195.027050][ T9230]  ? up_write+0x1c4/0x420
[  195.027057][ T9230]  ? do_raw_spin_unlock+0x4d/0x240
[  195.027067][ T9230]  f2fs_write_checkpoint+0xdde/0x2440
[  195.027089][ T9230]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  195.027120][ T9230]  ? down_write+0x162/0x1f0
[  195.027128][ T9230]  ? __pfx_down_write+0x10/0x10
[  195.027137][ T9230]  ? do_raw_spin_lock+0x121/0x290
[  195.027149][ T9230]  __checkpoint_and_complete_reqs+0xdf/0x3d0
[  195.027157][ T9230]  ? __pfx___schedule+0x10/0x10
[  195.027171][ T9230]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  195.027185][ T9230]  ? schedule+0x91/0x360
[  195.027200][ T9230]  issue_checkpoint_thread+0xd9/0x260
[  195.027210][ T9230]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  195.027218][ T9230]  ? __pfx_autoremove_wake_function+0x10/0x10
[  195.027229][ T9230]  ? __kthread_parkme+0x7b/0x200
[  195.027237][ T9230]  ? __kthread_parkme+0x1a1/0x200
[  195.027248][ T9230]  kthread+0x711/0x8a0
[  195.027258][ T9230]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  195.027266][ T9230]  ? __pfx_kthread+0x10/0x10
[  195.027275][ T9230]  ? _raw_spin_unlock_irq+0x23/0x50
[  195.027286][ T9230]  ? lockdep_hardirqs_on+0x9c/0x150
[  195.027293][ T9230]  ? __pfx_kthread+0x10/0x10
[  195.027302][ T9230]  ret_from_fork+0x47f/0x820
[  195.027316][ T9230]  ? __pfx_ret_from_fork+0x10/0x10
[  195.027330][ T9230]  ? __switch_to_asm+0x39/0x70
[  195.027341][ T9230]  ? __switch_to_asm+0x33/0x70
[  195.027349][ T9230]  ? __pfx_kthread+0x10/0x10
[  195.027358][ T9230]  ret_from_fork_asm+0x1a/0x30
[  195.027377][ T9230]  </TASK>
[  195.027381][ T9230] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  195.029383][ T9241] loop1: detected capacity change from 0 to 256
[  195.031194][ T9230] CPU: 1 UID: 0 PID: 9230 Comm: f2fs_ckpt-7:2 Not tainted syzkaller #0 PREEMPT(full) 
[  195.031205][ T9230] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  195.031211][ T9230] Call Trace:
[  195.031215][ T9230]  <TASK>
[  195.031219][ T9230]  dump_stack_lvl+0x189/0x250
[  195.031235][ T9230]  ? __pfx_dump_stack_lvl+0x10/0x10
[  195.031249][ T9230]  ? __pfx_queue_work_on+0x10/0x10
[  195.031260][ T9230]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  195.031278][ T9230]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  195.031304][ T9230]  f2fs_handle_critical_error+0x37c/0x540
[  195.031329][ T9230]  f2fs_write_end_io+0x886/0xb60
[  195.031357][ T9230]  __submit_merged_bio+0x27a/0x6a0
[  195.031373][ T9230]  ? up_write+0x1c4/0x420
[  195.031385][ T9230]  __submit_merged_write_cond+0x44c/0x530
[  195.031399][ T9230]  f2fs_sync_node_pages+0x1479/0x15e0
[  195.031421][ T9230]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  195.031447][ T9230]  ? f2fs_write_checkpoint+0xdad/0x2440
[  195.031457][ T9230]  ? up_write+0x1c4/0x420
[  195.031463][ T9230]  ? do_raw_spin_unlock+0x4d/0x240
[  195.031475][ T9230]  f2fs_write_checkpoint+0xdde/0x2440
[  195.031505][ T9230]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  195.031546][ T9230]  ? down_write+0x162/0x1f0
[  195.031560][ T9230]  ? __pfx_down_write+0x10/0x10
[  195.031576][ T9230]  ? do_raw_spin_lock+0x121/0x290
[  195.031597][ T9230]  __checkpoint_and_complete_reqs+0xdf/0x3d0
[  195.031611][ T9230]  ? __pfx___schedule+0x10/0x10
[  195.031632][ T9230]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  195.031655][ T9230]  ? schedule+0x91/0x360
[  195.031713][ T9230]  issue_checkpoint_thread+0xd9/0x260
[  195.031732][ T9230]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  195.031746][ T9230]  ? __pfx_autoremove_wake_function+0x10/0x10
[  195.031763][ T9230]  ? __kthread_parkme+0x7b/0x200
[  195.031777][ T9230]  ? __kthread_parkme+0x1a1/0x200
[  195.031797][ T9230]  kthread+0x711/0x8a0
[  195.031816][ T9230]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  195.031829][ T9230]  ? __pfx_kthread+0x10/0x10
[  195.031843][ T9230]  ? _raw_spin_unlock_irq+0x23/0x50
[  195.031861][ T9230]  ? lockdep_hardirqs_on+0x9c/0x150
[  195.031873][ T9230]  ? __pfx_kthread+0x10/0x10
[  195.031888][ T9230]  ret_from_fork+0x47f/0x820
[  195.031908][ T9230]  ? __pfx_ret_from_fork+0x10/0x10
[  195.031931][ T9230]  ? __switch_to_asm+0x39/0x70
[  195.031946][ T9230]  ? __switch_to_asm+0x33/0x70
[  195.031960][ T9230]  ? __pfx_kthread+0x10/0x10
[  195.031975][ T9230]  ret_from_fork_asm+0x1a/0x30
[  195.032010][ T9230]  </TASK>
[  195.032016][ T9230] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  195.068904][ T9241] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  195.394680][   T24] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  195.417966][ T9246] Falling back ldisc for ptm0.
[  195.460168][ T9248] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1278'.
[  195.487304][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1281'.
[  195.580790][   T24] usb 5-1: config 0 has no interfaces?
[  195.580813][   T24] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  195.580824][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.582703][   T24] usb 5-1: config 0 descriptor??
[  195.796384][   T10] usb 5-1: USB disconnect, device number 6
[  196.039678][ T5237] Bluetooth: hci1: command 0x0406 tx timeout
[  196.043842][ T5237] Bluetooth: hci2: command 0x0406 tx timeout
[  198.438712][ T9292] loop1: detected capacity change from 0 to 512
[  198.451191][ T9292] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  198.463748][ T9292] EXT4-fs (loop1): Remounting filesystem read-only
[  198.467215][ T9292] EXT4-fs (loop1): 1 truncate cleaned up
[  198.481751][ T9290] loop2: detected capacity change from 0 to 4096
[  198.497978][ T9292] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  198.523185][ T9292] EXT4-fs (loop1): shut down requested (2)
[  198.538759][ T9290] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  198.553562][ T9290] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  198.596640][ T5952] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  198.628150][ T9290] ntfs3(loop2): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size
[  198.639672][ T9287] ntfs3(loop2): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" attr_set_size
[  198.666667][ T2272] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  198.669507][ T5954] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  198.672157][ T5954] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  198.679594][ T5954] ntfs3(loop2): ino=3, ntfs_set_state failed, -22.
[  198.684482][ T2272] ntfs3(loop2): ino=3, ntfs3_write_inode failed, -22.
[  198.893244][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1307'.
[  198.899191][ T9312] netlink: 'syz.1.1307': attribute type 30 has an invalid length.
[  198.902334][ T9312] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1307'.
[  198.935743][   T47] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  199.117259][   T47] usb 5-1: Using ep0 maxpacket: 8
[  199.140886][   T47] usb 5-1: config 0 has an invalid interface number: 150 but max is 0
[  199.156115][   T47] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  199.158865][   T47] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  199.162704][   T47] usb 5-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[  199.169105][   T47] usb 5-1: config 0 has no interface number 0
[  199.183705][   T47] usb 5-1: config 0 interface 150 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  199.191705][   T47] usb 5-1: config 0 interface 150 has no altsetting 0
[  199.198181][   T47] usb 5-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice=81.75
[  199.220247][   T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  199.307186][   T47] usb 5-1: config 0 descriptor??
[  199.453691][   T10] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  199.613895][   T10] usb 2-1: Using ep0 maxpacket: 8
[  199.620303][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=08dd, bcdDevice=ff.f4
[  199.627589][   T10] usb 2-1: New USB device strings: Mfr=8, Product=2, SerialNumber=3
[  199.630780][   T10] usb 2-1: Product: syz
[  199.632472][   T10] usb 2-1: Manufacturer: syz
[  199.634425][   T10] usb 2-1: SerialNumber: syz
[  199.641743][   T10] usb 2-1: config 0 descriptor??
[  199.651968][   T10] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08dd
[  199.738963][ T5987] usb 5-1: USB disconnect, device number 7
[  199.797463][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1310'.
[  200.271214][   T10] input: gspca_zc3xx as /devices/platform/dummy_hcd.1/usb2/2-1/input/input12
[  200.476598][   T10] usb 2-1: USB disconnect, device number 20
[  200.914516][ T9345] loop2: detected capacity change from 0 to 32768
[  200.959914][ T9345] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  200.987827][ T9345] XFS (loop2): Ending clean mount
[  201.051787][   T33] audit: type=1800 audit(1757321074.213:43): pid=9345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1321" name="file1" dev="loop2" ino=4422 res=0 errno=0
[  201.182362][ T5954] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  201.467599][ T9373] netlink: 'syz.1.1332': attribute type 5 has an invalid length.
[  201.689128][ T9369] loop4: detected capacity change from 0 to 32768
[  201.697275][ T9369] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1330 (9369)
[  201.715410][ T9369] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  201.718789][ T9369] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  202.003446][ T9393] loop1: detected capacity change from 0 to 40427
[  202.016571][ T9369] BTRFS info (device loop4): rebuilding free space tree
[  202.055111][ T9369] BTRFS info (device loop4): enabling ssd optimizations
[  202.058030][ T9369] BTRFS info (device loop4): turning on sync discard
[  202.060736][ T9369] BTRFS info (device loop4): enabling free space tree
[  202.064867][ T9369] BTRFS info (device loop4): force clearing of disk cache
[  202.067898][ T9369] BTRFS info (device loop4): enabling auto defrag
[  202.070625][ T9369] BTRFS info (device loop4): max_inline set to 0
[  202.085099][ T9393] F2FS-fs (loop1): invalid crc value
[  202.139522][ T9393] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  202.146914][ T9393] F2FS-fs (loop1): Start checkpoint disabled!
[  202.166569][   T10] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  202.170421][ T9393] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  202.175188][ T9393] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  202.232600][ T7991] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  202.955141][   T10] usb 3-1: config 9 has an invalid interface number: 252 but max is 0
[  202.958381][   T10] usb 3-1: config 9 has no interface number 0
[  202.960807][   T10] usb 3-1: config 9 interface 252 has no altsetting 0
[  203.199255][ T9408] syz.1.1338: attempt to access beyond end of device
[  203.199255][ T9408] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  203.390012][ T1091] kworker/u10:4: attempt to access beyond end of device
[  203.390012][ T1091] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  203.393524][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0238, bcdDevice=dd.7c
[  203.398124][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.400886][   T10] usb 3-1: Product: syz
[  203.402178][ T1091] CPU: 1 UID: 0 PID: 1091 Comm: kworker/u10:4 Not tainted syzkaller #0 PREEMPT(full) 
[  203.402192][ T1091] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  203.402199][ T1091] Workqueue: writeback wb_workfn (flush-7:1)
[  203.402215][ T1091] Call Trace:
[  203.402220][ T1091]  <TASK>
[  203.402225][ T1091]  dump_stack_lvl+0x189/0x250
[  203.402239][ T1091]  ? __pfx_dump_stack_lvl+0x10/0x10
[  203.402249][ T1091]  ? __pfx_queue_work_on+0x10/0x10
[  203.402256][ T1091]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  203.402268][ T1091]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  203.402293][ T1091]  f2fs_handle_critical_error+0x37c/0x540
[  203.402313][ T1091]  f2fs_write_end_io+0x886/0xb60
[  203.402336][ T1091]  __submit_merged_bio+0x27a/0x6a0
[  203.402355][ T1091]  __submit_merged_write_cond+0x255/0x530
[  203.402379][ T1091]  f2fs_write_data_pages+0x261d/0x3000
[  203.402420][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  203.402446][ T1091]  ? check_path+0x21/0x40
[  203.402496][ T1091]  ? f2fs_update_inode+0x43e/0x2620
[  203.402533][ T1091]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  203.402550][ T1091]  do_writepages+0x32e/0x550
[  203.402571][ T1091]  ? reacquire_held_locks+0x127/0x1d0
[  203.402581][ T1091]  ? writeback_sb_inodes+0x384/0x1010
[  203.402603][ T1091]  __writeback_single_inode+0x145/0xff0
[  203.402618][ T1091]  ? do_raw_spin_unlock+0x4d/0x240
[  203.402633][ T1091]  writeback_sb_inodes+0x6c7/0x1010
[  203.402669][ T1091]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  203.402721][ T1091]  ? rcu_is_watching+0x15/0xb0
[  203.402741][ T1091]  wb_writeback+0x43b/0xaf0
[  203.402759][ T1091]  ? queue_io+0x2f1/0x590
[  203.402776][ T1091]  ? __pfx_wb_writeback+0x10/0x10
[  203.402794][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[  203.402816][ T1091]  wb_workfn+0x409/0xef0
[  203.402841][ T1091]  ? __pfx_wb_workfn+0x10/0x10
[  203.402857][ T1091]  ? __lock_acquire+0xab9/0xd20
[  203.402881][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  203.402904][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[  203.402918][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  203.402933][ T1091]  ? process_scheduled_works+0x9ef/0x17b0
[  203.402952][ T1091]  process_scheduled_works+0xae1/0x17b0
[  203.402989][ T1091]  ? __pfx_process_scheduled_works+0x10/0x10
[  203.403011][ T1091]  worker_thread+0x8a0/0xda0
[  203.403032][ T1091]  kthread+0x711/0x8a0
[  203.403043][ T1091]  ? __pfx_worker_thread+0x10/0x10
[  203.403050][ T1091]  ? __pfx_kthread+0x10/0x10
[  203.403060][ T1091]  ? _raw_spin_unlock_irq+0x23/0x50
[  203.403098][ T1091]  ? lockdep_hardirqs_on+0x9c/0x150
[  203.403106][ T1091]  ? __pfx_kthread+0x10/0x10
[  203.403115][ T1091]  ret_from_fork+0x47f/0x820
[  203.403131][ T1091]  ? __pfx_ret_from_fork+0x10/0x10
[  203.403149][ T1091]  ? __switch_to_asm+0x39/0x70
[  203.403159][ T1091]  ? __switch_to_asm+0x33/0x70
[  203.403167][ T1091]  ? __pfx_kthread+0x10/0x10
[  203.403177][ T1091]  ret_from_fork_asm+0x1a/0x30
[  203.403196][ T1091]  </TASK>
[  203.403201][ T1091] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  203.405826][   T10] usb 3-1: Manufacturer: syz
[  203.405837][   T10] usb 3-1: SerialNumber: syz
[  203.708729][   T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:9.252/input/input13
[  203.739778][ T5282] bcm5974 3-1:9.252: could not read from device
[  203.745768][   T10] usb 3-1: USB disconnect, device number 20
[  204.819907][ T9430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1347'.
[  205.243618][   T47] usb 2-1: new full-speed USB device number 21 using dummy_hcd
[  205.277724][ T9446] loop4: detected capacity change from 0 to 2048
[  205.302564][ T9447] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  205.345976][   T33] audit: type=1800 audit(1757321078.513:44): pid=9446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1355" name="file1" dev="loop4" ino=18 res=0 errno=0
[  205.410334][   T47] usb 2-1: config 5 has an invalid interface number: 179 but max is 0
[  205.414953][   T47] usb 2-1: config 5 has no interface number 0
[  205.417785][ T9447] NILFS (loop4): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  205.419587][   T47] usb 2-1: New USB device found, idVendor=19d2, idProduct=0038, bcdDevice= e.8c
[  205.423032][ T9447] NILFS error (device loop4): nilfs_bmap_propagate: broken bmap (inode number=4)
[  205.429733][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.432753][   T47] usb 2-1: Product: syz
[  205.435861][   T47] usb 2-1: Manufacturer: syz
[  205.437711][   T47] usb 2-1: SerialNumber: syz
[  205.450270][ T9447] Remounting filesystem read-only
[  205.451133][ T9451] loop2: detected capacity change from 0 to 256
[  205.455259][ T7991] NILFS (loop4): disposed unprocessed dirty file(s) when stopping log writer
[  205.628977][ T9457] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  205.670365][   T47] usb 2-1: bad CDC descriptors
[  205.690141][   T47] usb 2-1: USB disconnect, device number 21
[  205.834834][ T9461] loop4: detected capacity change from 0 to 4096
[  205.843800][ T9461] ntfs3: Invalid value for dmask.
[  205.925562][ T9455] loop2: detected capacity change from 0 to 40427
[  205.928802][ T9455] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  205.931252][ T9455] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  205.937747][ T9455] F2FS-fs (loop2): invalid crc value
[  206.002913][ T9455] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  206.010039][ T9455] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  206.012839][ T9455] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  206.373732][ T9475] IPv6: addrconf: prefix option has invalid lifetime
[  206.554382][ T9485] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1369'.
[  207.187284][ T9497] loop2: detected capacity change from 0 to 512
[  207.191425][ T9497] EXT4-fs: Ignoring removed bh option
[  207.197867][ T9497] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  207.221363][ T9497] EXT4-fs (loop2): 1 truncate cleaned up
[  207.234754][ T9497] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.003467][   T47] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  208.131421][ T5314] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  208.151582][ T5954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.171564][   T47] usb 5-1: Using ep0 maxpacket: 32
[  208.176711][   T47] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  208.180390][   T47] usb 5-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  208.196565][   T47] usb 5-1: config 0 interface 0 has no altsetting 0
[  208.205691][   T47] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=dc.8e
[  208.209171][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  208.212055][   T47] usb 5-1: Product: syz
[  208.222859][   T47] usb 5-1: Manufacturer: syz
[  208.229507][   T47] usb 5-1: SerialNumber: syz
[  208.236174][   T47] usb 5-1: config 0 descriptor??
[  208.297003][ T5314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.301444][ T5314] usb 2-1: New USB device found, idVendor=046d, idProduct=c262, bcdDevice= 0.00
[  208.308681][ T5314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.317321][ T5314] usb 2-1: config 0 descriptor??
[  208.450933][   T47] gs_usb 5-1:0.0: Couldn't send data format (err=-71)
[  208.453925][   T47] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -71
[  208.461433][   T47] usb 5-1: USB disconnect, device number 8
[  208.552420][ T9539] loop2: detected capacity change from 0 to 128
[  208.571663][ T9539] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[  208.576612][ T9539] System zones: 1-3, 19-19, 35-36
[  208.579610][ T9539] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  208.584541][ T9539] ext4 filesystem being mounted at /458/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  208.592327][ T9539] EXT4-fs warning (device loop2): ext4_group_extend:1886: will only finish group (8193 blocks, 8129 new)
[  208.597804][ T9539] EXT4-fs warning (device loop2): ext4_group_extend:1891: can't read last block, resize aborted
[  208.620618][ T5954] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  208.659916][ T9542] loop2: detected capacity change from 0 to 256
[  208.686799][ T9542] FAT-fs (loop2): Directory bread(block 64) failed
[  208.693359][ T9542] FAT-fs (loop2): Directory bread(block 65) failed
[  208.696292][ T9542] FAT-fs (loop2): Directory bread(block 66) failed
[  208.698851][ T9542] FAT-fs (loop2): Directory bread(block 67) failed
[  208.701410][ T9542] FAT-fs (loop2): Directory bread(block 68) failed
[  208.707264][ T9542] FAT-fs (loop2): Directory bread(block 69) failed
[  208.713469][ T9542] FAT-fs (loop2): Directory bread(block 70) failed
[  208.716095][ T9542] FAT-fs (loop2): Directory bread(block 71) failed
[  208.718655][ T9542] FAT-fs (loop2): Directory bread(block 72) failed
[  208.721134][ T9542] FAT-fs (loop2): Directory bread(block 73) failed
[  208.736974][ T5314] logitech-hidpp-device 0003:046D:C262.0006: unknown main item tag 0x7
[  208.740192][ T5314] logitech-hidpp-device 0003:046D:C262.0006: item fetching failed at offset 6/7
[  208.748463][ T5314] logitech-hidpp-device 0003:046D:C262.0006: hidpp_probe:parse failed
[  208.752101][ T5314] logitech-hidpp-device 0003:046D:C262.0006: probe with driver logitech-hidpp-device failed with error -22
[  209.006603][ T5314] usb 2-1: USB disconnect, device number 22
[  209.928792][ T9560] netlink: 'syz.1.1391': attribute type 2 has an invalid length.
[  210.337862][ T9573] @: renamed from vlan0 (while UP)
[  210.381638][ T9575] loop4: detected capacity change from 0 to 1764
[  210.452533][ T9575] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  210.519776][ T9575] CIFS mount error: No usable UNC path provided in device string!
[  210.519776][ T9575] 
[  210.549086][ T9575] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  210.678504][ T9579] vivid-003: disconnect
[  210.748887][ T9581] loop4: detected capacity change from 0 to 2048
[  210.770758][ T9581] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  210.856921][  T795] vivid-003: reconnect
[  210.999497][   T56] Bluetooth: hci0: command 0x0405 tx timeout
[  211.064229][   T33] audit: type=1326 audit(1757321084.213:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9563 comm="syz.2.1395" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8091f8ebe9 code=0x7fc00000
[  211.246481][ T9594] loop2: detected capacity change from 0 to 512
[  211.395562][ T9603] loop2: detected capacity change from 0 to 764
[  211.401140][ T9603] rock: directory entry would overflow storage
[  211.407908][ T9603] rock: sig=0x5245, size=8, remaining=5
[  211.553687][  T795] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  211.713620][  T795] usb 5-1: Using ep0 maxpacket: 32
[  211.721303][  T795] usb 5-1: unable to get BOS descriptor or descriptor too short
[  211.727016][  T795] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[  211.742906][  T795] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  211.752919][  T795] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  211.760500][  T795] usb 5-1: Product: С
[  211.762333][  T795] usb 5-1: Manufacturer: 긨탞鿝ﭘ켛괆勰ǿ㵖鼜뤱Ώ㼛䂨⸓삻䓑⏽﻽煌㈃쏛䙴풰୭鷅䅣퇥
[  211.777195][  T795] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found
[  211.779970][  T795] cdc_ncm 5-1:1.0: bind() failure
[  211.788224][  T795] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  211.790948][  T795] cdc_ncm 5-1:1.1: bind() failure
[  211.983923][   T97] usb 5-1: USB disconnect, device number 9
[  212.126960][ T9623] @: renamed from bond_slave_0 (while UP)
[  212.305151][   T10] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  212.310384][ T9629] loop1: detected capacity change from 0 to 2048
[  212.355106][ T9629] Alternate GPT is invalid, using primary GPT.
[  212.359010][ T9629]  loop1: p2 p3 p7
[  212.468503][   T10] usb 3-1: config 135 has an invalid interface number: 230 but max is 0
[  212.473528][   T10] usb 3-1: config 135 has an invalid descriptor of length 0, skipping remainder of the config
[  212.485164][   T10] usb 3-1: config 135 has no interface number 0
[  212.492489][   T10] usb 3-1: config 135 interface 230 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  212.516299][   T10] usb 3-1: New USB device found, idVendor=18ec, idProduct=3288, bcdDevice=3f.3a
[  212.544074][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.547035][   T10] usb 3-1: Product: syz
[  212.548601][   T10] usb 3-1: Manufacturer: syz
[  212.548931][ T5951] udevd[5951]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  212.550374][   T10] usb 3-1: SerialNumber: syz
[  212.579703][ T6141] udevd[6141]: inotify_add_watch(7, /dev/loop1p7, 10) failed: No such file or directory
[  212.580681][   T10] usb 3-1: Found UVC 0.00 device syz (18ec:3288)
[  212.586758][ T6146] udevd[6146]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  212.605330][   T10] usb 3-1: No valid video chain found.
[  212.797905][   T10] usb 3-1: USB disconnect, device number 21
[  212.853711][  T795] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  213.003637][  T795] usb 5-1: Using ep0 maxpacket: 8
[  213.007824][  T795] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  213.016001][  T795] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  213.020191][  T795] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  213.024271][  T795] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  213.029226][  T795] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  213.032853][  T795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  213.243035][ T5950] Bluetooth: hci0: unexpected cc 0x204b length: 9 > 3
[  213.245960][ T5950] Bluetooth: hci0: unexpected event for opcode 0x204b
[  213.248538][  T795] usb 5-1: usb_control_msg returned -71
[  213.251572][  T795] usbtmc 5-1:16.0: can't read capabilities
[  213.265182][  T795] usb 5-1: USB disconnect, device number 10
[  214.285681][ T9665] loop4: detected capacity change from 0 to 256
[  215.706919][ T9704] binder: 9702:9704 ioctl c0306201 200000000080 returned -14
[  216.114371][ T5987] usb 2-1: new full-speed USB device number 23 using dummy_hcd
[  216.330566][ T5987] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  216.340037][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  216.347205][ T5987] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  216.350957][ T5987] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  216.375239][ T5987] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  216.379216][ T5987] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  216.382532][ T5987] usb 2-1: Manufacturer: syz
[  216.399496][ T5987] usb 2-1: config 0 descriptor??
[  216.814672][ T5987] rc_core: IR keymap rc-hauppauge not found
[  216.817462][ T5987] Registered IR keymap rc-empty
[  216.821804][ T5987] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  216.843622][ T5987] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  216.881423][ T5987] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  216.904359][ T5987] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input14
[  216.956825][ T5987] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  216.973682][ T5987] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  216.993917][ T5987] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  217.093852][ T5987] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  217.143513][ T5987] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  217.175356][ T5987] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  217.194700][ T5987] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  217.227987][ T5987] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  217.256964][ T5987] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  217.283441][ T5987] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  217.324339][ T5987] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  217.327298][ T5987] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  217.378126][ T5987] usb 2-1: USB disconnect, device number 23
[  217.469741][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1454'.
[  217.706282][ T9722] binder: 9721:9722 ioctl 4018620d 0 returned -22
[  217.714952][ T9722] binder: 9721:9722 ioctl c0306201 0 returned -14
[  217.850837][ T9725] loop4: detected capacity change from 0 to 1024
[  217.926951][ T9725] hfsplus: request for non-existent node 128 in B*Tree
[  217.929765][ T9725] hfsplus: request for non-existent node 128 in B*Tree
[  218.179508][ T9730] loop4: detected capacity change from 0 to 512
[  218.202263][ T9730] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  218.219883][ T9731] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'.
[  218.250462][ T9730] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1460: invalid indirect mapped block 4294967295 (level 1)
[  218.269385][ T9730] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1460: invalid indirect mapped block 4294967295 (level 1)
[  218.285136][ T9730] EXT4-fs (loop4): 2 truncates cleaned up
[  218.290269][ T9730] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  218.409395][ T7991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  218.633479][ T9739] netlink: 'syz.1.1463': attribute type 1 has an invalid length.
[  219.003043][ T9745] loop4: detected capacity change from 0 to 4096
[  219.014990][ T9745] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  219.026311][ T9745] ntfs3(loop4): Failed to load $MFT.
[  219.096635][ T9749] geneve2: entered promiscuous mode
[  219.098461][ T9749] geneve2: entered allmulticast mode
[  220.005819][ T9784] loop1: detected capacity change from 0 to 8
[  220.030572][ T9784] SQUASHFS error: xz decompression failed, data probably corrupt
[  220.043876][ T9784] SQUASHFS error: Failed to read block 0x108: -5
[  220.048952][ T9784] SQUASHFS error: Unable to read metadata cache entry [106]
[  220.053984][ T9784] SQUASHFS error: Unable to read inode 0x11f
[  220.165481][ T9791] loop2: detected capacity change from 0 to 512
[  220.172292][ T9791] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  220.180461][ T9790] netlink: 'syz.4.1482': attribute type 2 has an invalid length.
[  220.186565][ T9790] netlink: 'syz.4.1482': attribute type 8 has an invalid length.
[  220.190778][ T9791] EXT4-fs (loop2): 1 truncate cleaned up
[  220.195396][ T9790] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1482'.
[  220.199498][ T9791] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  220.256710][ T5954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.423558][   T97] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  220.593740][   T97] usb 2-1: Using ep0 maxpacket: 32
[  220.598260][   T97] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  220.606789][   T97] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  220.620416][   T97] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  220.627101][   T97] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.640078][   T97] usb 2-1: config 0 descriptor??
[  221.114188][   T97] savu 0003:1E7D:2D5A.0007: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  221.231645][ T9826] netlink: 'syz.2.1500': attribute type 6 has an invalid length.
[  221.236113][ T9826] netlink: 'syz.2.1500': attribute type 6 has an invalid length.
[  221.347809][   T10] usb 2-1: USB disconnect, device number 24
[  221.601340][ T9831] netlink: 'syz.2.1502': attribute type 10 has an invalid length.
[  221.604535][ T9831] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1502'.
[  221.607777][ T9831] net veth1_virt_wifi virt_wifi0: entered promiscuous mode
[  221.610490][ T9831] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  221.618977][ T9831] batman_adv: batadv0: Interface deactivated: virt_wifi0
[  221.622090][ T9831] batman_adv: batadv0: Removing interface: virt_wifi0
[  221.629133][ T9831] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check.
[  222.252610][ T9849] loop2: detected capacity change from 0 to 4096
[  222.261104][ T9849] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  222.291865][ T9849] ntfs3(loop2): ino=1a, mi_enum_attr
[  222.301875][ T9849] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  222.362966][ T9859] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1516'.
[  222.375543][ T9857] loop4: detected capacity change from 0 to 4096
[  222.379821][ T9857] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  222.402815][ T9857] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  223.235083][ T9884] loop4: detected capacity change from 0 to 131072
[  223.238598][ T9884] F2FS-fs (loop4): Wrong CP boundary, start(512) end(1536) blocks(0)
[  223.241796][ T9884] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  223.262601][ T9884] F2FS-fs (loop4): invalid crc value
[  223.307227][ T9884] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  223.311054][ T9884] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  223.313878][ T9884] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  223.658230][ T9914] loop2: detected capacity change from 0 to 4096
[  223.709244][ T9917] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  223.729864][ T9909] loop4: detected capacity change from 0 to 32768
[  224.401181][ T9937] loop1: detected capacity change from 0 to 512
[  224.414320][ T9937] EXT4-fs: Ignoring removed nobh option
[  224.427248][ T9937] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  224.446936][ T9937] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842e02c, mo2=0002]
[  224.450040][ T9937] EXT4-fs (loop1): orphan cleanup on readonly fs
[  224.465732][ T9937] EXT4-fs error (device loop1): ext4_clear_blocks:876: inode #11: comm syz.1.1551: attempt to clear invalid blocks 1024 len 1
[  224.489254][ T9937] EXT4-fs (loop1): Remounting filesystem read-only
[  224.509087][ T9937] EXT4-fs (loop1): 1 truncate cleaned up
[  224.518458][ T9937] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  224.548895][ T9948] loop4: detected capacity change from 0 to 1024
[  224.562811][ T5952] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  224.576002][ T9948] EXT4-fs: Ignoring removed bh option
[  224.597424][ T9948] EXT4-fs: inline encryption not supported
[  224.627481][ T9948] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  224.683118][ T9948] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 2: comm syz.4.1555: lblock 2 mapped to illegal pblock 2 (length 1)
[  224.696050][ T9948] Quota error (device loop4): qtree_write_dquot: dquota write failed
[  224.700013][ T9948] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 48: comm syz.4.1555: lblock 0 mapped to illegal pblock 48 (length 1)
[  224.709013][ T9948] Quota error (device loop4): v2_write_file_info: Can't write info structure
[  224.717382][ T9948] EXT4-fs error (device loop4): ext4_acquire_dquot:6943: comm syz.4.1555: Failed to acquire dquot type 0
[  224.725497][ T9948] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  224.746991][ T9948] EXT4-fs error (device loop4): ext4_evict_inode:254: inode #11: comm syz.4.1555: mark_inode_dirty error
[  224.757295][ T9948] EXT4-fs warning (device loop4): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[  224.761777][ T9948] EXT4-fs (loop4): 1 orphan inode deleted
[  224.780571][ T9948] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  224.801340][   T40] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:2: lblock 1 mapped to illegal pblock 1 (length 1)
[  224.822044][   T40] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  224.830877][   T40] EXT4-fs error (device loop4): ext4_release_dquot:6979: comm kworker/u10:2: Failed to release dquot type 0
[  224.836242][ T9948] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz.4.1555: Invalid inode table block 1 in block_group 0
[  224.843204][ T9948] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  224.870466][ T7991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.888183][  T499] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:3: lblock 1 mapped to illegal pblock 1 (length 1)
[  224.899601][  T499] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  224.903129][  T499] EXT4-fs error (device loop4): ext4_release_dquot:6979: comm kworker/u10:3: Failed to release dquot type 0
[  224.911458][ T7991] EXT4-fs error (device loop4): __ext4_get_inode_loc:4861: comm syz-executor: Invalid inode table block 1 in block_group 0
[  224.922309][ T7991] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  224.927204][ T7991] EXT4-fs error (device loop4): ext4_quota_off:7227: inode #3: comm syz-executor: mark_inode_dirty error
[  224.979087][ T9968] Bluetooth: MGMT ver 1.23
[  225.108290][ T9974] loop1: detected capacity change from 0 to 256
[  225.118725][ T9974] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011f41, chksum : 0xf6e84b2e, utbl_chksum : 0xe619d30d)
[  225.236906][ T9970] loop4: detected capacity change from 0 to 32768
[  225.261341][  T118] read_mapping_page failed!
[  225.264032][  T118] read_mapping_page failed!
[  225.545054][ T9990] netlink: 'syz.1.1575': attribute type 16 has an invalid length.
[  225.548209][ T9990] netlink: 'syz.1.1575': attribute type 3 has an invalid length.
[  225.551352][ T9990] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1575'.
[  225.668028][ T9994] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1577'.
[  226.420606][T10031] input: syz1 as /devices/virtual/input/input15
[  226.550118][T10037] loop1: detected capacity change from 0 to 764
[  226.564798][T10037] Symlink component flag not implemented
[  226.567658][T10037] Symlink component flag not implemented
[  226.570309][T10037] Symlink component flag not implemented (129)
[  226.579936][T10037] Symlink component flag not implemented (6)
[  226.649155][T10039] loop4: detected capacity change from 0 to 4096
[  226.750561][T10039] ntfs3(loop4): ino=9, attr_set_size
[  227.606498][T10057] loop4: detected capacity change from 0 to 512
[  227.657458][T10057] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.662441][T10057] ext4 filesystem being mounted at /215/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  227.696266][ T7991] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.983565][   T47] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  228.073555][ T5987] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  228.136087][   T47] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF4, changing to 0x84
[  228.140288][   T47] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 1023
[  228.145635][   T47] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  228.149857][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 65535, setting to 1024
[  228.153646][   T47] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 1024
[  228.158935][   T47] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  228.161806][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.165564][   T47] usb 2-1: Product: syz
[  228.166887][   T47] usb 2-1: Manufacturer: syz
[  228.168371][   T47] usb 2-1: SerialNumber: syz
[  228.171634][   T47] usb 2-1: config 0 descriptor??
[  228.180160][T10064] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  228.183708][T10064] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  228.186950][   T47] usb 2-1: ucan: probing device on interface #0
[  228.188931][   T47] usb 2-1: ucan: invalid endpoint configuration
[  228.191120][   T47] usb 2-1: ucan: probe failed; try to update the device firmware
[  228.223429][ T5987] usb 5-1: Using ep0 maxpacket: 32
[  228.227619][ T5987] usb 5-1: unable to get BOS descriptor or descriptor too short
[  228.231385][ T5987] usb 5-1: config 244 has an invalid interface number: 68 but max is 0
[  228.235829][ T5987] usb 5-1: config 244 has no interface number 0
[  228.237888][ T5987] usb 5-1: config 244 interface 68 altsetting 3 has an endpoint descriptor with address 0xF8, changing to 0x88
[  228.241765][ T5987] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0x4 has invalid maxpacket 1023, setting to 64
[  228.245929][ T5987] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0xC has invalid maxpacket 1024, setting to 64
[  228.249623][ T5987] usb 5-1: config 244 interface 68 altsetting 3 endpoint 0xA has invalid wMaxPacketSize 0
[  228.253217][ T5987] usb 5-1: config 244 interface 68 has no altsetting 0
[  228.258062][ T5987] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=24.0f
[  228.261027][ T5987] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.264232][   T97] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  228.267304][ T5987] usb 5-1: Product: syz
[  228.269205][ T5987] usb 5-1: Manufacturer: syz
[  228.271483][ T5987] usb 5-1: SerialNumber: syz
[  228.390767][   T47] usb 2-1: USB disconnect, device number 25
[  228.413502][   T97] usb 3-1: Using ep0 maxpacket: 16
[  228.418140][   T97] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  228.422941][   T97] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  228.432606][   T97] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  228.436663][   T97] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  228.439865][   T97] usb 3-1: Product: syz
[  228.441667][   T97] usb 3-1: Manufacturer: syz
[  228.449036][   T97] usb 3-1: SerialNumber: syz
[  228.495262][ T5987] comedi comedi5: Endpoint has wrong direction
[  228.497848][ T5987] dt9812 5-1:244.68: driver 'dt9812' failed to auto-configure device.
[  228.507367][ T5987] usb 5-1: USB disconnect, device number 11
[  228.662276][   T97] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  228.671786][   T97] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  228.690811][   T97] usb 3-1: USB disconnect, device number 22
[  228.714633][ T5951] udevd[5951]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  228.930827][T10078] loop1: detected capacity change from 0 to 16
[  228.937227][T10078] erofs (device loop1): rootino(nid 36) is not a directory(i_mode 122700)
[  229.150602][T10092] binder: 10089:10092 ioctl c018620c 200000000100 returned -1
[  229.291595][T10096] loop1: detected capacity change from 0 to 764
[  229.341883][T10096] rock: directory entry would overflow storage
[  229.345786][T10096] rock: sig=0x5245, size=8, remaining=5
[  229.794473][T10095] loop2: detected capacity change from 0 to 40427
[  229.801360][T10095] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  229.805123][T10095] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  229.817583][T10095] F2FS-fs (loop2): invalid crc value
[  229.876642][T10107] fuse: Unexpected value for 'allow_other'
[  229.897849][T10095] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  229.906719][T10095] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  229.909690][T10095] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  231.275050][   T97] usb 2-1: new low-speed USB device number 26 using dummy_hcd
[  231.298220][T10160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1651'.
[  231.301121][T10160] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1651'.
[  231.305420][T10160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1651'.
[  231.308675][T10160] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1651'.
[  231.447570][   T97] usb 2-1: config index 0 descriptor too short (expected 1307, got 27)
[  231.450172][   T97] usb 2-1: config 0 has an invalid interface number: 0 but max is -1
[  231.453075][   T97] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[  231.457490][   T97] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30
[  231.461916][   T97] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 246
[  231.471761][   T97] usb 2-1: string descriptor 0 read error: -22
[  231.476381][   T97] usb 2-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de
[  231.480250][   T97] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.494522][   T97] usb 2-1: config 0 descriptor??
[  231.503196][   T97] hub 2-1:0.0: bad descriptor, ignoring hub
[  231.512286][   T97] hub 2-1:0.0: probe with driver hub failed with error -5
[  231.711910][T10154] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1648'.
[  231.777916][T10174] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies.
[  231.817549][   T33] audit: type=1804 audit(1757321104.993:46): pid=10172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.1655" name="/newroot/551/file1" dev="fuse" ino=1 res=1 errno=0
[  231.826897][   T33] audit: type=1800 audit(1757321104.993:47): pid=10172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1655" name="/" dev="fuse" ino=1 res=0 errno=0
[  231.836695][   T33] audit: type=1800 audit(1757321104.993:48): pid=10172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1655" name="/" dev="fuse" ino=1 res=0 errno=0
[  231.854643][   T97] usb 2-1: USB disconnect, device number 26
[  232.014353][T10187] loop2: detected capacity change from 0 to 512
[  232.027882][T10187] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  232.042567][T10187] EXT4-fs (loop2): 1 truncate cleaned up
[  232.049489][T10187] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  232.059031][T10187] syz.2.1663 (pid 10187) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[  232.098341][T10191] loop4: detected capacity change from 0 to 2048
[  232.101121][ T5954] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  232.109244][T10191] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  233.275931][T10215] qrtr: Invalid version 0
[  233.412147][T10222] bridge0: port 1(bridge_slave_0) entered disabled state
[  233.418217][T10222] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  233.505352][ T5987] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  233.710596][ T5987] usb 2-1: Using ep0 maxpacket: 16
[  233.720201][ T5987] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  233.735275][ T5987] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[  233.747337][ T5987] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.755107][ T5987] usb 2-1: Product: syz
[  233.759906][ T5987] usb 2-1: Manufacturer: syz
[  233.765239][ T5987] usb 2-1: SerialNumber: syz
[  233.774769][ T5987] usb 2-1: config 0 descriptor??
[  233.788602][ T5987] dm9601 2-1:0.0: probe with driver dm9601 failed with error -22
[  233.802900][ T5987] sr9700 2-1:0.0: probe with driver sr9700 failed with error -22
[  233.895658][T10233] loop2: detected capacity change from 0 to 256
[  233.898591][T10233] exfat: Deprecated parameter 'namecase'
[  233.901121][T10233] exfat: Deprecated parameter 'utf8'
[  233.918695][T10233] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[  233.990202][ T5987] usb 2-1: USB disconnect, device number 27
[  234.205618][T10244] loop2: detected capacity change from 0 to 1764
[  234.566178][T10246] loop4: detected capacity change from 0 to 65536
[  234.627256][T10246] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  234.660991][T10246] XFS (loop4): Ending clean mount
[  234.674821][T10246] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  234.679016][T10246] XFS (loop4): Unmount and run xfs_repair
[  234.680984][T10246] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  234.683537][T10246] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  234.686427][T10246] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  234.689171][T10246] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  234.692319][T10246] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  234.695193][T10246] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  234.698020][T10246] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  234.701277][T10246] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  234.704282][T10246] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  234.707452][T10246] XFS (loop4): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  234.722429][T10246] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  234.727215][T10246] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  234.757181][ T7991] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  234.805195][   T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  234.953483][   T10] usb 2-1: Using ep0 maxpacket: 32
[  234.957354][   T10] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92
[  234.960968][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  234.968332][   T10] usb 2-1: config 0 descriptor??
[  234.984877][   T10] gspca_main: nw80x-2.14.0 probing 055f:d001
[  235.792307][T10280] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1696'.
[  235.799923][   T10] gspca_nw80x: reg_r err -71
[  235.810313][   T10] nw80x 2-1:0.0: probe with driver nw80x failed with error -71
[  235.827474][   T10] usb 2-1: USB disconnect, device number 28
[  236.058617][T10286] loop4: detected capacity change from 0 to 64
[  236.415510][ T5987] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  236.443465][   T10] usb 3-1: new low-speed USB device number 23 using dummy_hcd
[  236.563485][ T5987] usb 5-1: Using ep0 maxpacket: 32
[  236.567481][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.571888][ T5987] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.576042][ T5987] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  236.579742][ T5987] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.591985][ T5987] usb 5-1: config 0 descriptor??
[  236.601087][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[  236.606065][   T10] usb 3-1: config 7 has an invalid interface number: 67 but max is 0
[  236.609413][   T10] usb 3-1: config 7 has no interface number 0
[  236.628220][   T10] usb 3-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  236.632063][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.636559][   T10] usb 3-1: Product: 㯑
[  236.863165][   T10] usb 3-1: USB disconnect, device number 23
[  237.009821][ T5987] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.4-1/input0
[  237.259149][T10305] NILFS (nullb0): couldn't find nilfs on the device
[  237.326927][ T5314] usb 5-1: USB disconnect, device number 12
[  237.487866][T10307] loop1: detected capacity change from 0 to 32768
[  237.508354][T10307] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  237.540693][T10307] XFS (loop1): Ending clean mount
[  237.555990][T10307] XFS (loop1): Quotacheck needed: Please wait.
[  237.595852][T10307] XFS (loop1): Quotacheck: Done.
[  237.628880][ T5952] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  237.665977][   T10] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  237.861193][   T10] usb 3-1: config 1 has an invalid interface number: 7 but max is 0
[  237.865277][   T10] usb 3-1: config 1 has no interface number 0
[  237.867795][   T10] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  237.874926][   T10] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  237.880957][   T10] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  237.889234][   T10] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  237.896301][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.903607][   T10] usb 3-1: Product: syz
[  237.906183][   T10] usb 3-1: Manufacturer: syz
[  237.910001][   T10] usb 3-1: SerialNumber: syz
[  237.917115][T10310] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  238.133784][T10310] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  238.339750][   T10] usb 3-1: Incompatible driver and firmware versions
[  238.345673][   T10] usb 3-1: USB disconnect, device number 24
[  238.475038][  T795] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  238.626143][  T795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.630673][  T795] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.640288][  T795] usb 5-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  238.644172][  T795] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.668007][  T795] usb 5-1: config 0 descriptor??
[  238.983949][   T10] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  239.092318][  T795] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0
[  239.092371][  T795] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0
[  239.092392][  T795] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0
[  239.092413][  T795] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0
[  239.092433][  T795] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0
[  239.092480][  T795] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0
[  239.092498][  T795] steelseries 0003:1038:12B6.0009: unknown main item tag 0x0
[  239.101140][  T795] steelseries 0003:1038:12B6.0009: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.4-1/input0
[  239.145429][   T10] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  239.148819][   T10] usb 2-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  239.152220][   T10] usb 2-1: config 220 has an invalid descriptor of length 36, skipping remainder of the config
[  239.158797][   T10] usb 2-1: config 220 has no interface number 2
[  239.160915][   T10] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  239.165891][   T10] usb 2-1: config 220 interface 0 has no altsetting 0
[  239.169278][   T10] usb 2-1: config 220 interface 76 has no altsetting 0
[  239.172395][   T10] usb 2-1: config 220 interface 1 has no altsetting 0
[  239.178240][   T10] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  239.182174][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.185208][   T10] usb 2-1: Product: syz
[  239.186642][   T10] usb 2-1: Manufacturer: syz
[  239.188523][   T10] usb 2-1: SerialNumber: syz
[  239.325860][T10360] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1728'.
[  239.408803][   T10] usb 2-1: selecting invalid altsetting 0
[  239.411186][   T10] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  239.414319][   T10] usb 2-1: No valid video chain found.
[  239.421689][   T10] usb 2-1: selecting invalid altsetting 0
[  239.424071][   T10] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  239.431589][   T10] usb 2-1: USB disconnect, device number 29
[  239.504978][   T47] usb 5-1: USB disconnect, device number 13
[  239.741768][T10376] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  240.280671][T10389] loop1: detected capacity change from 0 to 128
[  240.291045][T10389] FAT-fs (loop1): error, invalid access to FAT (entry 0x0000006f)
[  240.298276][T10389] FAT-fs (loop1): Filesystem has been set read-only
[  240.566133][T10391] loop1: detected capacity change from 0 to 40427
[  240.578389][T10391] F2FS-fs (loop1): invalid crc value
[  240.631198][   T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  240.671604][T10391] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  240.676591][T10391] F2FS-fs (loop1): Start checkpoint disabled!
[  240.681068][T10391] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0
[  240.685199][T10391] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[  240.707449][   T33] audit: type=1800 audit(1757321113.883:49): pid=10391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1740" name="file1" dev="loop1" ino=10 res=0 errno=0
[  240.933422][   T10] usb 5-1: Using ep0 maxpacket: 32
[  240.950624][   T10] usb 5-1: unable to get BOS descriptor or descriptor too short
[  240.960534][   T10] usb 5-1: config 7 has an invalid interface number: 187 but max is 0
[  240.964339][   T10] usb 5-1: config 7 has no interface number 0
[  240.966672][   T10] usb 5-1: config 7 interface 187 altsetting 6 endpoint 0x3 has invalid wMaxPacketSize 0
[  240.970965][   T10] usb 5-1: config 7 interface 187 has no altsetting 0
[  241.060850][T10401] syz.1.1740: attempt to access beyond end of device
[  241.060850][T10401] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  241.075666][T10401] syz.1.1740: attempt to access beyond end of device
[  241.075666][T10401] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  241.083473][T10401] syz.1.1740: attempt to access beyond end of device
[  241.083473][T10401] loop1: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  241.091940][T10401] syz.1.1740: attempt to access beyond end of device
[  241.091940][T10401] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[  241.099373][T10401] syz.1.1740: attempt to access beyond end of device
[  241.099373][T10401] loop1: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[  241.108179][T10401] syz.1.1740: attempt to access beyond end of device
[  241.108179][T10401] loop1: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[  241.128094][T10401] syz.1.1740: attempt to access beyond end of device
[  241.128094][T10401] loop1: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[  241.136614][T10401] syz.1.1740: attempt to access beyond end of device
[  241.136614][T10401] loop1: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[  241.142709][T10401] syz.1.1740: attempt to access beyond end of device
[  241.142709][T10401] loop1: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[  241.148673][T10401] syz.1.1740: attempt to access beyond end of device
[  241.148673][T10401] loop1: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[  241.204226][   T10] usb 5-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  241.206937][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.209373][   T10] usb 5-1: Product: syz
[  241.210661][   T10] usb 5-1: Manufacturer: syz
[  241.212088][   T10] usb 5-1: SerialNumber: syz
[  241.364615][   T26] CPU: 0 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[  241.364632][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  241.364638][   T26] Workqueue: writeback wb_workfn (flush-7:1)
[  241.364668][   T26] Call Trace:
[  241.364672][   T26]  <TASK>
[  241.364677][   T26]  dump_stack_lvl+0x189/0x250
[  241.364691][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[  241.364700][   T26]  ? __pfx_queue_work_on+0x10/0x10
[  241.364707][   T26]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  241.364720][   T26]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  241.364736][   T26]  f2fs_handle_critical_error+0x37c/0x540
[  241.364751][   T26]  f2fs_write_end_io+0x886/0xb60
[  241.364766][   T26]  __submit_merged_bio+0x27a/0x6a0
[  241.364780][   T26]  __submit_merged_write_cond+0x255/0x530
[  241.364793][   T26]  f2fs_write_data_pages+0x261d/0x3000
[  241.364819][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  241.364836][   T26]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  241.364860][   T26]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  241.364876][   T26]  ? trace_f2fs_writepages+0x7f/0x200
[  241.364887][   T26]  ? f2fs_write_node_pages+0x478/0x6e0
[  241.364899][   T26]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  241.364915][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  241.364926][   T26]  do_writepages+0x32e/0x550
[  241.364939][   T26]  ? reacquire_held_locks+0x127/0x1d0
[  241.364946][   T26]  ? writeback_sb_inodes+0x384/0x1010
[  241.364959][   T26]  __writeback_single_inode+0x145/0xff0
[  241.364968][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[  241.364979][   T26]  writeback_sb_inodes+0x6c7/0x1010
[  241.364999][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  241.365026][   T26]  ? rcu_is_watching+0x15/0xb0
[  241.365037][   T26]  wb_writeback+0x43b/0xaf0
[  241.365050][   T26]  ? queue_io+0x2f1/0x590
[  241.365060][   T26]  ? __pfx_wb_writeback+0x10/0x10
[  241.365073][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.365085][   T26]  wb_workfn+0x409/0xef0
[  241.365100][   T26]  ? __pfx_wb_workfn+0x10/0x10
[  241.365109][   T26]  ? __lock_acquire+0xab9/0xd20
[  241.365124][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  241.365138][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.365148][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  241.365158][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  241.365169][   T26]  process_scheduled_works+0xae1/0x17b0
[  241.365193][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  241.365212][   T26]  worker_thread+0x8a0/0xda0
[  241.365231][   T26]  kthread+0x711/0x8a0
[  241.365241][   T26]  ? __pfx_worker_thread+0x10/0x10
[  241.365248][   T26]  ? __pfx_kthread+0x10/0x10
[  241.365257][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.365267][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.365274][   T26]  ? __pfx_kthread+0x10/0x10
[  241.365305][   T26]  ret_from_fork+0x47f/0x820
[  241.365317][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  241.365331][   T26]  ? __switch_to_asm+0x39/0x70
[  241.365340][   T26]  ? __switch_to_asm+0x33/0x70
[  241.365349][   T26]  ? __pfx_kthread+0x10/0x10
[  241.365357][   T26]  ret_from_fork_asm+0x1a/0x30
[  241.365375][   T26]  </TASK>
[  241.365430][   T26] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  241.474854][   T10] usb 5-1: Unknown endpoint type found, address 0x07
[  241.476960][   T10] usb 5-1: Unknown endpoint type found, address 0x03
[  241.479090][   T10] usb 5-1: Not enough endpoints found in device, aborting!
[  241.513449][   T26] CPU: 0 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[  241.513470][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  241.513478][   T26] Workqueue: writeback wb_workfn (flush-7:1)
[  241.513508][   T26] Call Trace:
[  241.513514][   T26]  <TASK>
[  241.513520][   T26]  dump_stack_lvl+0x189/0x250
[  241.513540][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[  241.513554][   T26]  ? __pfx_queue_work_on+0x10/0x10
[  241.513565][   T26]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  241.513582][   T26]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  241.513608][   T26]  f2fs_handle_critical_error+0x37c/0x540
[  241.513631][   T26]  f2fs_write_end_io+0x886/0xb60
[  241.513659][   T26]  __submit_merged_bio+0x27a/0x6a0
[  241.513681][   T26]  __submit_merged_write_cond+0x255/0x530
[  241.513704][   T26]  f2fs_write_data_pages+0x261d/0x3000
[  241.513749][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  241.513778][   T26]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  241.513822][   T26]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  241.513849][   T26]  ? trace_f2fs_writepages+0x7f/0x200
[  241.513866][   T26]  ? f2fs_write_node_pages+0x478/0x6e0
[  241.513886][   T26]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  241.513914][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  241.513931][   T26]  do_writepages+0x32e/0x550
[  241.513953][   T26]  ? reacquire_held_locks+0x127/0x1d0
[  241.513964][   T26]  ? writeback_sb_inodes+0x384/0x1010
[  241.513986][   T26]  __writeback_single_inode+0x145/0xff0
[  241.514000][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[  241.514018][   T26]  writeback_sb_inodes+0x6c7/0x1010
[  241.514056][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  241.514109][   T26]  ? rcu_is_watching+0x15/0xb0
[  241.514129][   T26]  wb_writeback+0x43b/0xaf0
[  241.514150][   T26]  ? queue_io+0x2f1/0x590
[  241.514167][   T26]  ? __pfx_wb_writeback+0x10/0x10
[  241.514189][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.514211][   T26]  wb_workfn+0x409/0xef0
[  241.514237][   T26]  ? __pfx_wb_workfn+0x10/0x10
[  241.514254][   T26]  ? __lock_acquire+0xab9/0xd20
[  241.514310][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  241.514335][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.514350][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  241.514365][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  241.514384][   T26]  process_scheduled_works+0xae1/0x17b0
[  241.514428][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  241.514461][   T26]  worker_thread+0x8a0/0xda0
[  241.514503][   T26]  kthread+0x711/0x8a0
[  241.514520][   T26]  ? __pfx_worker_thread+0x10/0x10
[  241.514531][   T26]  ? __pfx_kthread+0x10/0x10
[  241.514546][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  241.514562][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  241.514572][   T26]  ? __pfx_kthread+0x10/0x10
[  241.514587][   T26]  ret_from_fork+0x47f/0x820
[  241.514606][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  241.514629][   T26]  ? __switch_to_asm+0x39/0x70
[  241.514643][   T26]  ? __switch_to_asm+0x33/0x70
[  241.514656][   T26]  ? __pfx_kthread+0x10/0x10
[  241.514670][   T26]  ret_from_fork_asm+0x1a/0x30
[  241.514701][   T26]  </TASK>
[  241.514707][   T26] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  241.644739][ T5314] usb 5-1: USB disconnect, device number 14
[  241.834300][T10411] cifs: Unknown parameter 'IT&:"1:ӭ'4,Zz-#F<]%gC
[  241.834300][T10411] SȘȞZ6'
[  242.811093][T10434] loop1: detected capacity change from 0 to 1024
[  242.818878][T10434] EXT4-fs: Ignoring removed nobh option
[  242.820816][T10434] EXT4-fs: Ignoring removed bh option
[  242.850231][T10434] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.190040][ T5952] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.454534][   T47] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  243.608145][   T47] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  243.611804][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.614947][   T47] usb 2-1: Product: syz
[  243.616522][   T47] usb 2-1: Manufacturer: syz
[  243.618137][   T47] usb 2-1: SerialNumber: syz
[  243.622481][   T47] usb 2-1: config 0 descriptor??
[  244.237198][   T47] usb 2-1: f81604_read: reg: 105 failed: -EREMOTEIO
[  244.239757][   T47] f81604 2-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO
[  244.242765][   T47] f81604 2-1:0.0: probe with driver f81604 failed with error -121
[  246.508473][   T97] usb 2-1: USB disconnect, device number 30
[  246.649849][T10479] loop1: detected capacity change from 0 to 512
[  246.712443][T10479] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  246.751055][T10473] loop2: detected capacity change from 0 to 32768
[  246.806477][T10473] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  246.835360][ T5952] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  246.842057][T10473] XFS (loop2): Ending clean mount
[  246.857919][T10473] XFS (loop2): Quotacheck needed: Please wait.
[  246.906724][T10473] XFS (loop2): Quotacheck: Done.
[  246.934803][   T33] audit: type=1800 audit(1757321120.103:50): pid=10473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1769" name="file1" dev="loop2" ino=6150 res=0 errno=0
[  247.223670][  T795] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  247.375665][  T795] usb 2-1: Using ep0 maxpacket: 8
[  247.386000][  T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  247.390222][  T795] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  247.406482][  T795] usb 2-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00
[  247.410052][  T795] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  247.427595][  T795] usb 2-1: config 0 descriptor??
[  247.499695][ T5954] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  247.850717][  T795] kye 0003:0458:5010.000A: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  247.858959][  T795] kye 0003:0458:5010.000A: hidraw0: USB HID v0.00 Device [HID 0458:5010] on usb-dummy_hcd.1-1/input0
[  247.862224][  T795] kye 0003:0458:5010.000A: tablet-enabling feature report not found
[  247.865568][  T795] kye 0003:0458:5010.000A: tablet enabling failed
[  247.876302][T10502] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1778'.
[  247.879501][T10502] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1778'.
[  248.068595][   T47] usb 2-1: USB disconnect, device number 31
[  248.195100][T10505] loop4: detected capacity change from 0 to 1024
[  248.661924][T10515] program syz.2.1783 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  248.963441][   T10] usb 2-1: new low-speed USB device number 32 using dummy_hcd
[  248.990233][T10530] loop4: detected capacity change from 0 to 1024
[  248.995618][T10530] EXT4-fs (loop4): ext4_check_descriptors: Inode bitmap for group 0 overlaps block group descriptors
[  248.999319][T10530] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (51554!=20869)
[  249.003133][T10530] JBD2: no valid journal superblock found
[  249.008140][T10530] EXT4-fs (loop4): Could not load journal inode
[  249.128024][   T10] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  249.131514][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.137219][   T10] usb 2-1: config 0 descriptor??
[  249.745127][T10536] loop2: detected capacity change from 0 to 2048
[  249.760355][T10536] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  249.780470][T10536] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24)
[  249.997812][T10544] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  250.001914][T10546] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1798'.
[  250.305928][T10554] Failed to get privilege flags for destination (handle=0x2:0x0)
[  250.478110][T10559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1802'.
[  250.502327][T10558] ==================================================================
[  250.504884][T10558] BUG: KASAN: wild-memory-access in __sha512_update+0x10d/0x1d0
[  250.507283][T10558] Read of size 2 at addr 0005088000000000 by task syz.4.1802/10558
[  250.509991][T10558] 
[  250.511183][T10558] CPU: 1 UID: 0 PID: 10558 Comm: syz.4.1802 Not tainted syzkaller #0 PREEMPT(full) 
[  250.511195][T10558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  250.511202][T10558] Call Trace:
[  250.511208][T10558]  <TASK>
[  250.511213][T10558]  dump_stack_lvl+0x189/0x250
[  250.511228][T10558]  ? __pfx_dump_stack_lvl+0x10/0x10
[  250.511239][T10558]  ? _raw_spin_lock_irqsave+0xb3/0xf0
[  250.511258][T10558]  ? __virt_addr_valid+0x7c/0x5c0
[  250.511274][T10558]  ? __sha512_update+0x10d/0x1d0
[  250.511289][T10558]  kasan_report+0x118/0x150
[  250.511306][T10558]  ? __sha512_update+0x10d/0x1d0
[  250.511321][T10558]  ? __sha512_update+0x10d/0x1d0
[  250.511336][T10558]  kasan_check_range+0x2b0/0x2c0
[  250.511350][T10558]  ? __sha512_update+0x10d/0x1d0
[  250.511363][T10558]  __asan_memcpy+0x29/0x70
[  250.511376][T10558]  __sha512_update+0x10d/0x1d0
[  250.511637][T10558]  crypto_sha512_update+0x27/0x40
[  250.511651][T10558]  shash_ahash_update+0x213/0x2f0
[  250.511663][T10558]  hash_sendmsg+0x96b/0x11d0
[  250.511679][T10558]  ? __pfx_hash_sendmsg+0x10/0x10
[  250.511689][T10558]  __sock_sendmsg+0x21c/0x270
[  250.511704][T10558]  ____sys_sendmsg+0x52d/0x830
[  250.511714][T10558]  ? __pfx_____sys_sendmsg+0x10/0x10
[  250.511724][T10558]  ? import_iovec+0x74/0xa0
[  250.511735][T10558]  ___sys_sendmsg+0x21f/0x2a0
[  250.511744][T10558]  ? __pfx____sys_sendmsg+0x10/0x10
[  250.511759][T10558]  ? __fget_files+0x2a/0x420
[  250.511776][T10558]  ? __fget_files+0x3a0/0x420
[  250.511794][T10558]  __sys_sendmmsg+0x227/0x430
[  250.511808][T10558]  ? __pfx___sys_sendmmsg+0x10/0x10
[  250.511821][T10558]  ? __pfx_do_futex+0x10/0x10
[  250.511834][T10558]  ? __pfx___se_sys_futex+0x10/0x10
[  250.511844][T10558]  __x64_sys_sendmmsg+0xa0/0xc0
[  250.511853][T10558]  do_syscall_64+0xfa/0xfa0
[  250.511863][T10558]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.511871][T10558]  ? asm_sysvec_call_function_single+0x1a/0x20
[  250.511880][T10558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.511888][T10558] RIP: 0033:0x7f1684d8ebe9
[  250.511897][T10558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.511921][T10558] RSP: 002b:00007f1685bf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  250.511931][T10558] RAX: ffffffffffffffda RBX: 00007f1684fc6090 RCX: 00007f1684d8ebe9
[  250.511937][T10558] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000007
[  250.511951][T10558] RBP: 00007f1684e11e19 R08: 0000000000000000 R09: 0000000000000000
[  250.511956][T10558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  250.511961][T10558] R13: 00007f1684fc6128 R14: 00007f1684fc6090 R15: 00007ffd3c3d5908
[  250.511970][T10558]  </TASK>
[  250.511973][T10558] ==================================================================
[  250.616114][T10558] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  250.619174][T10558] CPU: 0 UID: 0 PID: 10558 Comm: syz.4.1802 Not tainted syzkaller #0 PREEMPT(full) 
[  250.623259][T10558] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  250.627014][T10558] Call Trace:
[  250.628176][T10558]  <TASK>
[  250.629171][T10558]  dump_stack_lvl+0x99/0x250
[  250.630684][T10558]  ? __asan_memcpy+0x40/0x70
[  250.632244][T10558]  ? __pfx_dump_stack_lvl+0x10/0x10
[  250.634420][T10558]  ? __pfx__printk+0x10/0x10
[  250.636162][T10558]  vpanic+0x237/0x6d0
[  250.637419][T10558]  ? __pfx_vpanic+0x10/0x10
[  250.638865][T10558]  ? preempt_schedule_common+0x83/0xd0
[  250.640551][T10558]  ? preempt_schedule+0xae/0xc0
[  250.642284][T10558]  panic+0xb9/0xc0
[  250.643779][T10558]  ? __pfx_panic+0x10/0x10
[  250.645324][T10558]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  250.647853][T10558]  ? __sha512_update+0x10d/0x1d0
[  250.649844][T10558]  check_panic_on_warn+0x89/0xb0
[  250.651627][T10558]  ? __sha512_update+0x10d/0x1d0
[  250.653470][T10558]  end_report+0x78/0x160
[  250.655032][T10558]  kasan_report+0x129/0x150
[  250.656734][T10558]  ? __sha512_update+0x10d/0x1d0
[  250.658539][T10558]  ? __sha512_update+0x10d/0x1d0
[  250.660337][T10558]  kasan_check_range+0x2b0/0x2c0
[  250.662368][T10558]  ? __sha512_update+0x10d/0x1d0
[  250.664329][T10558]  __asan_memcpy+0x29/0x70
[  250.666100][T10558]  __sha512_update+0x10d/0x1d0
[  250.668049][T10558]  crypto_sha512_update+0x27/0x40
[  250.669959][T10558]  shash_ahash_update+0x213/0x2f0
[  250.671887][T10558]  hash_sendmsg+0x96b/0x11d0
[  250.674006][T10558]  ? __pfx_hash_sendmsg+0x10/0x10
[  250.675898][T10558]  __sock_sendmsg+0x21c/0x270
[  250.677706][T10558]  ____sys_sendmsg+0x52d/0x830
[  250.679347][T10558]  ? __pfx_____sys_sendmsg+0x10/0x10
[  250.681157][T10558]  ? import_iovec+0x74/0xa0
[  250.682968][T10558]  ___sys_sendmsg+0x21f/0x2a0
[  250.684857][T10558]  ? __pfx____sys_sendmsg+0x10/0x10
[  250.686920][T10558]  ? __fget_files+0x2a/0x420
[  250.688377][T10558]  ? __fget_files+0x3a0/0x420
[  250.689862][T10558]  __sys_sendmmsg+0x227/0x430
[  250.691318][T10558]  ? __pfx___sys_sendmmsg+0x10/0x10
[  250.693114][T10558]  ? __pfx_do_futex+0x10/0x10
[  250.694581][T10558]  ? __pfx___se_sys_futex+0x10/0x10
[  250.696239][T10558]  __x64_sys_sendmmsg+0xa0/0xc0
[  250.697772][T10558]  do_syscall_64+0xfa/0xfa0
[  250.699176][T10558]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.701055][T10558]  ? asm_sysvec_call_function_single+0x1a/0x20
[  250.703022][T10558]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  250.704847][T10558] RIP: 0033:0x7f1684d8ebe9
[  250.706244][T10558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  250.712064][T10558] RSP: 002b:00007f1685bf0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  250.714872][T10558] RAX: ffffffffffffffda RBX: 00007f1684fc6090 RCX: 00007f1684d8ebe9
[  250.717323][T10558] RDX: 0000000000000001 RSI: 0000200000000640 RDI: 0000000000000007
[  250.719879][T10558] RBP: 00007f1684e11e19 R08: 0000000000000000 R09: 0000000000000000
[  250.722199][T10558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  250.724607][T10558] R13: 00007f1684fc6128 R14: 00007f1684fc6090 R15: 00007ffd3c3d5908
[  250.727039][T10558]  </TASK>
[  250.728703][T10558] Kernel Offset: disabled
[  250.730275][T10558] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:45:23  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000612 RBX=0000000000000000 RCX=00000000ac6c9724 RDX=0000000001834bbd
RSI=00000000504fc155 RDI=ffff888020221cc0 RBP=0000000000000001 RSP=ffffc900034673f0
R8 =0000000000000000 R9 =ffffffff8a2c5b81 R10=ffffc90003467620 R11=fffff5200068cec9
R12=0000000000000613 R13=ffff8880202227b0 R14=ffff8880202227b0 R15=e413ab2cac6c9724
RIP=ffffffff819e7c9f RFL=00000007 [-----PC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1685c116c0 ffffffff 00c00000
GS =0000 ffff8880b83fa000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000200030 CR3=0000000041b58000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=8007000c80080010 01000100400a0008
XMM02=8007000c0a000000 00000000401b000c XMM03=8007001072696472 65776f6c001a000c
XMM04=8007001000000011 000700058007000c XMM05=401d00068007000c 7fe7005409000003
XMM06=0000000200070005 8007000c00000900 XMM07=8007001000000011 000700058007000c
XMM08=0007000100050000 0000317a79730002 XMM09=0000000000000000 00007f1684e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffff92000592e8e RBX=ffffc90002c97420 RCX=51bbdbd909a86b00 RDX=ffffc90003bc9000
RSI=ffffffff8c0370e0 RDI=ffffc90002c97420 RBP=ffffc90002c974b0 RSP=ffffc90002c973b0
R8 =0000000000000000 R9 =0000000000000000 R10=ffffc90002c97470 R11=fffff52000592e90
R12=ffffc90002c97400 R13=ffffc90002c973f8 R14=ffffc90002c97470 R15=dffffc0000000000
RIP=ffffffff8173bc6b RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1685bf06c0 ffffffff 00c00000
GS =0000 ffff8881a39fa000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1685bcefc8 CR3=0000000041b58000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=0000000000000000 00007f16e5e12ee7 XMM09=0000000000000000 00007f16e5e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
