last executing test programs:

1m26.702265882s ago: executing program 2 (id=625):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x2a8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0xd, 0xa}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x278, 0x2, [@TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffff8, 0x8, 0xea, 0x12, 0x1c, 0xe, 0x8}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xfffffff9, 0x0, 0xa2, 0x4, 0x1c, 0x1a, 0x2}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x9, 0x2, 0x5, 0x1c, 0x1b, 0x8, 0x8}}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x7, 0x1, 0x9, 0x3, 0x15, 0x10, 0x3}}, @TCA_CHOKE_STAB={0x110, 0x2, "1f6117fec9ad3216abbf2dd8c9b10903ec218765f5023982c553b4af83850b5d2fd75aea051826119756d541b3d5f689ceaa660509eccde2e79fac6e8b0eca858e001318e547185b7bc756056133dcd10297bd2031e97c9e54c61cb6acd87703d23a74f3c8e7648f0c284bf9a7ad720bc798f51cc18a1298a575db7afdc56ca085d28eb9fd9bc4f722cfd5633853ae629c5d8743c2d9f3e9352ad6cb23a0ed20d98e2ee82f439061fd7e7963fa9efcf7f07b5c6b0971b321c94811f8c83f9f639cb733b156668608a4cf07bc598a82c430e3c93ae5f388af4362764292d9748c636f8f2e136ee65433fb5cc09f0d999ea29a47fb5c0e1fedcf30d8ae5c808fb5"}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0xced8, 0x10000, 0xf4ee, 0xc, 0x9, 0x2, 0x8}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x3}]}}]}, 0x2a8}, 0x1, 0x7a00, 0x0, 0x4010041}, 0x0)

1m26.64770846s ago: executing program 2 (id=626):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42842, 0x81)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x0, 0x90)

1m26.647407901s ago: executing program 2 (id=627):
syz_emit_ethernet(0x86, &(0x7f0000000700)={@multicast, @empty, @val={@val={0x88a8, 0x0, 0x0, 0x4}}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "5f1060", 0x48, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x22eb}, {0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x800, [0x7, 0x400]}, {}, {0x8, 0x88be, 0x86ddffff}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7}}}}}}}}}, 0x0)

1m26.597296373s ago: executing program 2 (id=628):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x300000a, 0x12, r0, 0x852ac000)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0xedb, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c)
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000040)=0x8, 0x4)
recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000fc0)=""/4110, 0x100e}, 0x7ffffffe}], 0x1, 0x40002140, 0x0)

1m26.547513287s ago: executing program 2 (id=629):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000080000000000000010000009400000007ad4160850000000f00000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x800000, 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x30000c6, &(0x7f0000000180), 0x1, 0x553, &(0x7f0000001080)="$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")
bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f0000000180)=ANY=[@ANYRES32=r0], 0x0, 0x8, 0x28, 0x0, 0x0, 0x50, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0}, 0x94)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180))

1m25.664469264s ago: executing program 2 (id=644):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYBLOB="40d4823deffdbbeb65eeddb31203a829679a7a18f01faefa691c80df4e49f2c92d0c9708f605177b1f5699eeabb703cc126adf2f9c5167d17178b4e0c590345bad5de906894ef754ec7a8c3b32c7b9d0f74abf43c4dee78decff644fd28d7d874518bd960a098875b53d2005df3fb15a953031adb9887615b59f3caef2de95c9495a7154700055ef1a72", @ANYRES32, @ANYRESOCT, @ANYRES16], 0xec, 0x5ac4, &(0x7f0000008380)="$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")
lchown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01)
creat(&(0x7f00000002c0)='./file0\x00', 0x37)

1m15.328199833s ago: executing program 1 (id=712):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000010400000000", @ANYRES32=0x0, @ANYBLOB="0000000001"], 0x20}}, 0x4000040)
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="0e030e00c4e8120006001e0089", 0xd, 0x28000000, 0x0, 0x0)
ptrace(0x10, r0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r0, 0x200, &(0x7f0000000080)={&(0x7f00000000c0)=""/112, 0x70})

1m15.111889234s ago: executing program 1 (id=713):
r0 = memfd_create(&(0x7f0000000bc0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x00\x00.\xd4`=z\xd1n\x8d\x8f\xa5hS\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{\'\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q,\xec\xc4\xa5\x93\xe5,\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+}5dy\xb1\xef\xf1m\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc0<Q8\xbeX\xde\xd6 \xef\x0e\xc2.\x9c=1\x15d\xddIv\x0fh\xe6M(D\xad\xeb\xcfX8\xb9\x8d\xbe(\xd3\x16?x\xbd@\x0f\xf5\xdb\xeb\xd7i*\xea\x86JX\xff;\x96\xbb\xa7\xa8u5R\xa2,\xba\xbc\x01\x12\xb3q,\x9d\xf8\xbdb`\xb3\xc6\x0f\xb3\xac\xc7\xa4O@\x81\xfc\x1a4$\x885\x97\xa9|\x99\x86*.\xda\x96RQ\xe5\xb1\xef\xb7\x10\x99\xd4\xa7\b\xcd\xe9\xa5\xf6wR\xc1\xdfH).\a\x9a\xab\x9e&+\xc4#\x90\xc9%\xb9\xd7o\x86\x13\a\xc0\x01w9u6\xdd\x9fJ^o\x1d\xda\x11?\xc1\xf5\xf7\xff\xec\x916\xceQ\xcfU\x035\x96\x8f\xc7\x84\"2\xef\x02\xcf\a+\x8a\xd1\x11\xb5\xa8\x92\f\xb3R\",\xfc!_&pD\xeb5\xc6\xc8\xff2\xee\x14\x83\x14l\x04\x80\xaa7\x80\xf1\x18\xf5\xa5\xd23\xe5\b\x00\xe8\x9c\xd4\xd0\a\x93#\xb9Z\xc0y\x97<\xe5i\xe9\xe4\xb02Cu\xe1d\r\x0e\xc1\xf1\x81^\xa7\xffz)\x19U\xe5\xd4\xf5@O#W\x8a\xbb3c+\n\x97\xa6\xf7\x90$\xd6*\xd0\x1b\x10\xe4HM:XO\x1b\rx\xc7\x12|\x7fN\xc9\xf9i\xe4\xe5-\x9b\xe407\x9d\xe8\xc6\x90\x9f_Jf\x05\r\x1b\x9af\v\xbcv\x83\xf3j\xaf\xd0F91 ^x\x85\x80[\xa3B\n#!\xc2R\xdd\xf4)\xba\x1e\xfb6U\xabc\xda\x9a)\xc3\x9a\x06\xc5\xccP)\xdf.\xa7-\x84\xdf8\xbf\xfc1^}B\xee\xccR/z\x1e\xe8\x1e\x99\x99\n\xf4u\xd4\xbd^L\xb2j\xda\xff\x1d\x10\xc8\xad\xbd_OI\xb1\xe8y\x003\a\x06\x92\x8e\n\x8b\xf3\xd4G\x85\xbd\x1a\x81+3\x99jq\xd1\xacK^\xef\xb6!8\xcd?\x1e\\\x16W2\xbd4$zn\xa9\x7f\x9dE\xaf\x0f\xdb\xe0\xfa\x10\xc3\xb2\xf8\x80\x8c\xec$\xda\xc0\x94y1\t\xc5`\xda\xca\xd1\xab:\x18\x10\x9b\xd0w', 0x0)
r1 = memfd_create(&(0x7f00000005c0)='-B\xd5NI\xc5j\x9a\b\x00\x00\x00\b\x84\xa2{\x00\v\x18\x004\x03\x96\x00\x00\xd7Uw\x00\xbc\xfa2\x04\x87\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97k\xde\xc5\xe96\xddU)\xc98M\xcd\xfb\xc83\x12\xd7\xdb\x93\xcc]x\xaa\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x05\x81\x01\xe5\x98\r\x1d\xa1\xce\x8b\x19\xea\xef\xe3\x00\x00\x00\x00\x00\x00\x00\xd9\xf7\xf4\x19\xf2\x14\x0fM\x00\x00\xa9\xf0I{\xf0:\xd7\x802\xf3\r|\x86\x82\xf1\xb2\x06\xb0\x06\xbe\xb1\x0f\xa2\xa6\xedA\xb7\x0f\xda\x9d<\xd6l\xbcF\xcb\xec\x83#?\xf4\x81\x16+\x14\xd0\xb8\x88`W', 0x1)
r2 = dup(r1)
r3 = fanotify_init(0x0, 0x800)
fanotify_mark(r3, 0x1, 0x18, r2, 0x0)
write$binfmt_misc(r0, &(0x7f0000000180)="e5", 0x1)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1m15.111273641s ago: executing program 1 (id=714):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000200)={'batadv0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r1}, @IFLA_HSR_SLAVE2={0x8, 0x2, r2}, @IFLA_HSR_PROTOCOL={0x5, 0x7, 0x1}]}}}]}, 0x48}}, 0x0)

1m14.997729427s ago: executing program 1 (id=715):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000040)=ANY=[], 0x1, 0x6c1, &(0x7f00000003c0)="$eJzs3U9sHFcdB/DvbJx1NqDEbdM0IKRajVRBIxI7q5IgITUghHKIUFQuvVqJ01hx0spxkVshsgEKEidOqAcORcgcekIIIZUTopyRkLhw8j0SNw45AItmdna9tjeO3cRZt/18pPF7s2/ee7/5Zf7srh1NgM+si6/lYCdFLp66tFKur622F9dW2zf79SSTSRrJRK9I0UqKj5IL6S35QvliPVzxoHlevvdhMfHeB+3e2kS9VNs3tuu3xcgtO8mhwcqBJNO96n92POyW8aqlGufK+ng7MDnitWIQd5mwk/3Ewbh1t+isNzYe2n3n5y2wb93p3Te3mEoOp3d3re5s9dXh4VeG8Tg6VN/22tTZ+1gAAABgr438LD/s6P3cz0qOPJlwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NOh6D0zsFU/N7/RK1/NdIr+8/+bQ8/Ub4453Ef07rWqePXouAMBAAAAAAAAgEfy/P3cz0qO9Ne7RfU7/xeqlWPVz8/lrdzOfJZyOiuZy3KWs5TZJFNDAzVX5paXl2a39vxlyp7dbvdO3fPsoGf/rwfKnmc3xtXZHOiovzTYshEAAAAAAAAAfGb9KBfXf/8PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD7QZEc6BXVcqxfn0pjIsmhJM1ierB5c6zBPgZ/HncAAAAAsPdadXmk+F+v0i2qz/zHq8/9h/JWbmU5C1nOYuZztfouoPepv/H3TntxbbV9s1y2DvzNf+0qjmrE9L57GD3zTLXFs4MeF/OdfC+nMp3LWcpCvp+5LGc+0/l2VZtLkan624uptdVW+rFujffChrXLm2N7fqhexneiiqSVa1moYjudK81+6I16uxNDs/2xmWya8W6ZneKV2g5zdLUuyz36RV3uD1PVnh8cZGSmzn2ZjaeG874197s8TjbPNJvG4DuoY2ur7SLp1KubZ/pYOT9cl2Wuf7q3Od/lV2kbM9H5ebnWP/qOb5/z5Cv/+Mvl641bN65fu31q/xxGH9PmY6I9lInndpSJxTITnUfIxKFHif/xadbZ6F1Fd3e1fKHqeyQL+W7eyNXM51xmMpvzmcnXczbtnB3K67Pb57U61xq7O9dOfrmulPeknw3dm56YyQc1lHl9aiivw1e6qapt+JX1LD29gywVzYzO0j9HhjLxxbpSzvHjoTvO+G3IxGSqa3M/ume2z8Sv/9tNcnvx1o2l63Nv7nC+F+uyPG3f3Xht/s1j2aHdq3e3PF6eLv+x0rttDB8dZdsz/bYNR85s1XZs0LbxPtdspjqfe20PO1PLkY7fHTVSr+25kbO0q7YTQ20b3uXkjSwO3oUAsI8dfulws3Wv9bfW+62ftK63Lh361uT5yS81c/CvE3868LvGbxvfKF7K+/lhjow7UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DS4/fY7N+YWF+eX9mEljcc84N2RTf1U9F5p7o99/6RWJrc7on6fZJvuzXHE3EqyL1KXiScw12RGNF0avNJKGoN4ktzYJw+4A/bCmeWbb565/fY7X124Off6/Ovzt86eP/fKufbXZu+cubawOD/T+znuKIG9sP42YNyRAAAAAAAAAAAAADv1JP57w4hpi84Y9hUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4ZLr4Wg52UmR25vRMub622l4sl359fcuJJI0kxQ+S4qPkQnpLpoaGK4bHLrrr9ZfvffirF9/7oL0+1kR/+8amfn/4d7e7y73o1Eumkxyoy6RZN7ce0G1yR+NdKcvPrzfsXjHYwzJhJ/uJg3H7fwAAAP//VngE7g==")
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
syz_mount_image$msdos(&(0x7f0000000340), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f0000000f80)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

1m14.879251089s ago: executing program 1 (id=716):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000180)=@raw={'raw\x00', 0x8, 0x3, 0x4a8, 0x0, 0xffffffff, 0xffffffff, 0x150, 0xffffffff, 0x3d8, 0xffffffff, 0xffffffff, 0x3d8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x128, 0x150, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x508)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
shutdown(r1, 0x1)
bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @loopback, 0x5}, 0x1c)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff7, @empty, 0x2}, 0x1c)
sendmmsg$inet6(r1, &(0x7f0000000540)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x2, @empty, 0xfffffffe}, 0x1c, 0x0}}], 0x1, 0x240c089d)

1m14.697489613s ago: executing program 1 (id=717):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0xbe2a23d4fdc905fc}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

1m14.601418556s ago: executing program 32 (id=717):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0xbe2a23d4fdc905fc}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0)

1m10.657392465s ago: executing program 33 (id=644):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x2800000, &(0x7f0000000540)=ANY=[@ANYRESDEC, @ANYRESHEX, @ANYBLOB="40d4823deffdbbeb65eeddb31203a829679a7a18f01faefa691c80df4e49f2c92d0c9708f605177b1f5699eeabb703cc126adf2f9c5167d17178b4e0c590345bad5de906894ef754ec7a8c3b32c7b9d0f74abf43c4dee78decff644fd28d7d874518bd960a098875b53d2005df3fb15a953031adb9887615b59f3caef2de95c9495a7154700055ef1a72", @ANYRES32, @ANYRESOCT, @ANYRES16], 0xec, 0x5ac4, &(0x7f0000008380)="$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")
lchown(&(0x7f0000000680)='./file0\x00', 0x0, 0xee01)
creat(&(0x7f00000002c0)='./file0\x00', 0x37)

4.175790801s ago: executing program 0 (id=1381):
r0 = syz_open_dev$cec(&(0x7f0000000000), 0x0, 0x0)
ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0)
ioctl$CEC_DQEVENT(r0, 0xc0506107, 0x0)
ioctl$IOC_PR_PREEMPT(r0, 0x40046109, &(0x7f0000000040)={0xd0, 0xfffffffffffffffe})

4.017263487s ago: executing program 0 (id=1384):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in6={{0xa, 0x4e23, 0x10001, @empty, 0x8}}, 0x3, 0x4001}, 0x90)

3.173742338s ago: executing program 0 (id=1388):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000040)={0x84, &(0x7f0000000000)={0x0, 0x16, 0xc, "00004700000040f400bec073"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="20132800000030a6137489699583ccd85eb383bd19d0e23689e1867443413d"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB='@\aH'], 0x0, 0x0, 0x0, 0x0})

2.557418051s ago: executing program 3 (id=1391):
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8)
r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000380)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x15, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008f000000000000000b00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000700008500000086000000bf090000000000005509010000000000950000000000000007000000000000004500f4fffcffffff18000000060000040000000009000000bf91200000000000b702000003000000850000002a000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x1, 0x0, 0x0, 0x41100, 0x2}, 0x94)

1.174544548s ago: executing program 4 (id=1398):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x48}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}]}], {0x14}}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0)

979.179764ms ago: executing program 4 (id=1399):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002080)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0)
r1 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
dup2(r1, r0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000b, 0x12, r0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00')
getdents(r2, &(0x7f0000001fc0)=""/184, 0xb8)

816.480825ms ago: executing program 4 (id=1400):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240), 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000000)={0x6, 0x10, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007000000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000640)='GPL\x00', 0x2, 0x86, &(0x7f0000000680)=""/134}, 0x94)

736.3818ms ago: executing program 0 (id=1401):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2f}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x106}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x20050800)

736.086269ms ago: executing program 4 (id=1402):
r0 = socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'erspan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000010c0)=@newlink={0x40, 0x10, 0xc3b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x1006}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e23}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x44080}, 0x40080c0)

637.108219ms ago: executing program 4 (id=1403):
syz_mount_image$xfs(&(0x7f0000009600), &(0x7f0000009640)='./file0\x00', 0x200800, &(0x7f0000000000)={[{@nouuid}, {@bsdgroups}, {@logbufs}, {@inode64}], [{@flag='nomand'}]}, 0x1, 0x9606, &(0x7f0000009680)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='mountstats\x00')
pread64(r0, &(0x7f0000002240)=""/237, 0xed, 0x4eb)

586.620893ms ago: executing program 0 (id=1404):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10)
sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, 0x0, 0x0, &(0x7f0000004680)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x734}, {0x0}, &(0x7f0000002bc0)=[{&(0x7f0000001900)=""/135, 0x87}, {0xfffffffffffffffe, 0xfffffd95}], 0x2, 0x8}}], 0x48, 0x8800}, 0x0)

494.913096ms ago: executing program 3 (id=1405):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001800)=ANY=[@ANYBLOB="3c020000190001000000000610000000fe8000000000000000000000000000bb7f0000010000000000000000000000054b0000004e2100000a002020000000004d2fc300ce340aeeb0867b265e272646874a9c583f3e188a16ecb68125326da2dfbf27c7bd1ad4daab550f6c81785642714141d596f053ac1189060a6ea99b64e3fdfc32a14a750388b7f2fe9a74dd53c6f922937fda1538fcdba7be09cf280ee17a11cdd5f68394829aedd4afab985ef6ffd5d7b854"], 0x23c}}, 0x84)

494.658607ms ago: executing program 0 (id=1406):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./bus\x00', 0x0, &(0x7f0000000440), 0x1, 0x559d, &(0x7f0000005680)="$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")
r0 = fanotify_init(0x8, 0x40000)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00')
fanotify_mark(r0, 0x1, 0x8100011, r1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$UHID_CREATE2(r2, 0x0, 0x118)

377.525681ms ago: executing program 3 (id=1407):
unshare(0x2a020400)
r0 = syz_io_uring_setup(0x5c23, &(0x7f0000000240)={0x0, 0x10, 0x13290, 0x0, 0x3}, &(0x7f0000000440)=<r1=>0x0, &(0x7f0000000ac0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000140)=@IORING_OP_RENAMEAT={0x23, 0x2, 0x0, 0xffffffffffffffff, &(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000400)='./file0/../file0\x00'})
io_uring_enter(r0, 0x1, 0x0, 0x1, 0x0, 0x1000000)

246.740667ms ago: executing program 3 (id=1408):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'das16m1\x00', [0x83eb, 0x2, 0x10000, 0x4, 0x5, 0xcc7, 0x8, 0x8d, 0xa, 0x0, 0x2, 0x1, 0x1, 0x1, 0x6, 0x101, 0x0, 0x1a449, 0x3, 0x40000003, 0x89, 0xcaa7, 0x0, 0x20001e5c, 0xb, 0xffc00000, 0x3c, 0x8, 0x6, 0xf7ffffff, 0xfffffff8]})

172.093ms ago: executing program 4 (id=1409):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a310000000014000480080002400000000008000140000000000900010073797a300000000070000000060a010400000000000000000100000048000480240001800b00010072656a65637400001400028008000140000000000500020000000000200001800700010072740000140002800800014000000009080002400000000008000b40000000000900010073797a300000000014000000110001"], 0xf8}}, 0x0)

54.767034ms ago: executing program 3 (id=1410):
r0 = syz_open_dev$I2C(&(0x7f0000002680), 0x0, 0xa2d81)
pwrite64(r0, 0x0, 0xfffffe38, 0x4)

0s ago: executing program 3 (id=1411):
r0 = syz_open_dev$ndb(&(0x7f0000000000), 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
ioctl$NBD_SET_SOCK(r0, 0xab00, r1)
r2 = syz_open_dev$ndb(&(0x7f00000000c0), 0x0, 0x0)
ioctl$NBD_CLEAR_SOCK(r0, 0xab04)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:57903' (ED25519) to the list of known hosts.
syzkaller login: [   49.702446][ T5773] cgroup: Unknown subsys name 'net'
[   49.813179][ T5773] cgroup: Unknown subsys name 'cpuset'
[   49.817373][ T5773] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.906480][ T5773] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   56.108706][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   56.111999][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   56.115322][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   56.118164][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   56.121122][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   56.144694][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   56.148547][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   56.152568][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   56.156653][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   56.160574][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   56.219139][ T5238] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   56.223305][ T5238] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   56.226610][ T5238] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   56.229495][ T5238] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   56.232438][ T5238] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   56.273903][ T5841] chnl_net:caif_netlink_parms(): no params data found
[   56.387998][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.391242][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.393680][ T5841] bridge_slave_0: entered allmulticast mode
[   56.396408][ T5841] bridge_slave_0: entered promiscuous mode
[   56.414963][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.417657][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.421330][ T5841] bridge_slave_1: entered allmulticast mode
[   56.424727][ T5841] bridge_slave_1: entered promiscuous mode
[   56.455392][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.460429][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.463819][ T5842] chnl_net:caif_netlink_parms(): no params data found
[   56.519446][ T5841] team0: Port device team_slave_0 added
[   56.535665][ T5841] team0: Port device team_slave_1 added
[   56.587832][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.590495][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.598745][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.625487][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.627785][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.637315][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.645460][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.648440][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.652128][ T5842] bridge_slave_0: entered allmulticast mode
[   56.655544][ T5842] bridge_slave_0: entered promiscuous mode
[   56.663871][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.666672][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.669722][ T5842] bridge_slave_1: entered allmulticast mode
[   56.674363][ T5842] bridge_slave_1: entered promiscuous mode
[   56.715559][ T5841] hsr_slave_0: entered promiscuous mode
[   56.717917][ T5841] hsr_slave_1: entered promiscuous mode
[   56.736008][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   56.743424][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   56.754739][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   56.839563][ T5842] team0: Port device team_slave_0 added
[   56.843948][ T5842] team0: Port device team_slave_1 added
[   56.894915][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.897536][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.907288][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.926667][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.929056][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.938182][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.948536][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.952036][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.955235][ T5853] bridge_slave_0: entered allmulticast mode
[   56.959030][ T5853] bridge_slave_0: entered promiscuous mode
[   56.967931][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.971891][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.975543][ T5853] bridge_slave_1: entered allmulticast mode
[   56.979232][ T5853] bridge_slave_1: entered promiscuous mode
[   57.040487][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   57.047223][ T5842] hsr_slave_0: entered promiscuous mode
[   57.050614][ T5842] hsr_slave_1: entered promiscuous mode
[   57.052968][ T5842] debugfs: 'hsr0' already exists in 'hsr'
[   57.054873][ T5842] Cannot create hsr debugfs directory
[   57.065134][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   57.125308][ T5853] team0: Port device team_slave_0 added
[   57.151998][ T5853] team0: Port device team_slave_1 added
[   57.209359][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   57.212776][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.223215][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   57.237010][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   57.239924][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   57.256077][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   57.375737][ T5853] hsr_slave_0: entered promiscuous mode
[   57.379008][ T5853] hsr_slave_1: entered promiscuous mode
[   57.382421][ T5853] debugfs: 'hsr0' already exists in 'hsr'
[   57.384843][ T5853] Cannot create hsr debugfs directory
[   57.387925][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   57.419415][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   57.443380][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   57.463621][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   57.546268][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   57.559065][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   57.583632][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   57.589704][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   57.726841][ T5853] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   57.736928][ T5853] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   57.752786][ T5853] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   57.771580][ T5853] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   57.819459][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.848894][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[   57.877326][ T5842] 8021q: adding VLAN 0 to HW filter on device team0
[   57.889440][ T3607] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.892531][ T3607] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.904449][ T3607] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.908281][ T3607] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.927124][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[   57.953888][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   57.956754][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   57.986693][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   57.989370][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.059058][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   58.088173][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   58.123223][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.131010][   T32] bridge0: port 1(bridge_slave_0) entered blocking state
[   58.133753][   T32] bridge0: port 1(bridge_slave_0) entered forwarding state
[   58.142249][ T5238] Bluetooth: hci0: command tx timeout
[   58.155383][   T32] bridge0: port 2(bridge_slave_1) entered blocking state
[   58.158390][   T32] bridge0: port 2(bridge_slave_1) entered forwarding state
[   58.230780][ T5238] Bluetooth: hci1: command tx timeout
[   58.247886][ T5842] veth0_vlan: entered promiscuous mode
[   58.254996][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.271148][ T5842] veth1_vlan: entered promiscuous mode
[   58.318609][ T5238] Bluetooth: hci2: command tx timeout
[   58.336799][ T5842] veth0_macvtap: entered promiscuous mode
[   58.343358][ T5841] veth0_vlan: entered promiscuous mode
[   58.346461][ T5842] veth1_macvtap: entered promiscuous mode
[   58.357414][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.373806][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.397272][ T5716] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.400921][ T5716] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.404420][ T5716] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.407578][ T5716] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.413090][ T5841] veth1_vlan: entered promiscuous mode
[   58.474085][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.476319][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   58.476753][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.498402][ T5841] veth0_macvtap: entered promiscuous mode
[   58.509105][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.509771][ T5841] veth1_macvtap: entered promiscuous mode
[   58.514118][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.543676][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.554306][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.556959][ T5842] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   58.558905][ T5853] veth0_vlan: entered promiscuous mode
[   58.569873][   T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.576318][   T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.585155][ T5853] veth1_vlan: entered promiscuous mode
[   58.588993][   T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.595779][   T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.628131][ T5853] veth0_macvtap: entered promiscuous mode
[   58.655319][ T5853] veth1_macvtap: entered promiscuous mode
[   58.665458][ T5911] loop2: detected capacity change from 0 to 4096
[   58.688966][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   58.705797][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   58.745577][   T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   58.749119][   T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   58.775313][   T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   58.785815][   T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   58.797788][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.809147][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.831540][ T5914] loop2: detected capacity change from 0 to 256
[   58.853156][ T5914] =======================================================
[   58.853156][ T5914] WARNING: The mand mount option has been deprecated and
[   58.853156][ T5914]          and is ignored by this kernel. Remove the mand
[   58.853156][ T5914]          option from the mount to silence this warning.
[   58.853156][ T5914] =======================================================
[   58.905045][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.907767][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   58.961614][ T5914] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   58.966146][ T5914] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   58.975525][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   58.978938][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.042702][ T5914] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   59.112523][   T32] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   59.121729][   T32] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   59.553124][ T5923] loop1: detected capacity change from 0 to 128
[   59.581826][ T5923] EXT4-fs: Ignoring removed nobh option
[   59.624144][ T5923] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   59.649201][ T5923] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   59.702723][ T5923] fscrypt (loop1, inode 12): Unsupported encryption modes (contents 0, filenames 0)
[   59.769345][ T5841] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   59.910760][ T5933] netlink: 4 bytes leftover after parsing attributes in process `syz.0.9'.
[   59.933456][ T5936] netlink: 'syz.2.10': attribute type 6 has an invalid length.
[   60.220767][ T5238] Bluetooth: hci0: command tx timeout
[   60.300724][ T5238] Bluetooth: hci1: command tx timeout
[   60.380941][ T5238] Bluetooth: hci2: command tx timeout
[   60.597803][ T5953] netlink: 'syz.2.17': attribute type 1 has an invalid length.
[   60.602680][ T5953] nbd: couldn't find a device at index 393224
[   60.693252][ T5957] loop2: detected capacity change from 0 to 256
[   60.699870][ T5957] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   60.826110][ T5961] loop2: detected capacity change from 0 to 512
[   60.846344][ T5961] EXT4-fs (loop2): mounting ext2 file system using the ext4 subsystem
[   60.890925][ T5961] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.21: bad orphan inode 15
[   60.895675][ T5961] ext4_test_bit(bit=14, block=18) = 1
[   60.897955][ T5961] is_bad_inode(inode)=0
[   60.899682][ T5961] NEXT_ORPHAN(inode)=1023
[   60.902786][ T5961] max_ino=32
[   60.904189][ T5961] i_nlink=0
[   60.908658][ T5961] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[   60.914470][ T5961] ext2 filesystem being mounted at /11/qY3aK supports timestamps until 2038-01-19 (0x7fffffff)
[   60.989416][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[   61.378670][ T5994] loop2: detected capacity change from 0 to 512
[   61.401362][ T5994] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   61.405600][ T5994] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   61.422717][ T5994] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   61.433453][ T5994] EXT4-fs (loop2): 1 truncate cleaned up
[   61.436172][ T5994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.460893][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   62.300761][ T5238] Bluetooth: hci0: command tx timeout
[   62.331002][ T6021] loop1: detected capacity change from 0 to 1024
[   62.334902][ T6021] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   62.339086][ T6021] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[   62.345703][ T6021] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[   62.349880][ T6021] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   62.355232][ T6021] EXT4-fs error (device loop1): ext4_get_journal_inode:5796: comm syz.1.45: inode #1: comm syz.1.45: iget: illegal inode #
[   62.361817][ T6021] EXT4-fs (loop1): Remounting filesystem read-only
[   62.364139][ T6021] EXT4-fs (loop1): no journal found
[   62.380175][ T5238] Bluetooth: hci1: command tx timeout
[   62.444565][ T6024] loop1: detected capacity change from 0 to 4096
[   62.460419][ T5238] Bluetooth: hci2: command tx timeout
[   62.999154][ T6043] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.242746][ T6051] Zero length message leads to an empty skb
[   63.604799][ T6060] warning: `syz.1.61' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   64.380178][ T5238] Bluetooth: hci0: command tx timeout
[   64.460583][ T5238] Bluetooth: hci1: command tx timeout
[   64.491783][  T793] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   64.550183][ T5238] Bluetooth: hci2: command tx timeout
[   64.640090][  T793] usb 2-1: Using ep0 maxpacket: 8
[   64.645797][  T793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   64.649848][  T793] usb 2-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6
[   64.654836][  T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.667773][  T793] usb 2-1: config 0 descriptor??
[   64.885298][  T793] usb 2-1: USB disconnect, device number 2
[   64.923909][ T6086] Non-string source
[   65.418148][ T6111] loop1: detected capacity change from 0 to 128
[   65.500222][  T792] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   65.510933][ T5915] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   65.655304][ T6123] process 'syz.1.91' launched './file0' with NULL argv: empty string added
[   65.661704][ T5915] usb 1-1: Using ep0 maxpacket: 8
[   65.665596][  T792] usb 3-1: config index 0 descriptor too short (expected 3133, got 61)
[   65.671766][  T792] usb 3-1: config 0 has an invalid interface number: 156 but max is 1
[   65.675150][  T792] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   65.679201][  T792] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[   65.683158][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   65.686511][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84
[   65.690531][  T792] usb 3-1: config 0 has no interface number 0
[   65.692783][  T792] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[   65.696322][  T792] usb 3-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   65.699510][  T792] usb 3-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   65.704105][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 239, changing to 11
[   65.707643][ T5915] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 9059, setting to 1024
[   65.711921][ T5915] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   65.719567][  T792] usb 3-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[   65.722864][  T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.727635][ T5915] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae
[   65.730873][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.733574][ T5915] usb 1-1: Product: syz
[   65.738924][  T792] usb 3-1: config 0 descriptor??
[   65.745018][  T792] gspca_main: spca561-2.14.0 probing abcd:cdee
[   65.751018][ T5915] usb 1-1: Manufacturer: syz
[   65.761251][ T5915] usb 1-1: SerialNumber: syz
[   65.767171][ T5915] usb 1-1: config 0 descriptor??
[   65.782599][ T5915] input: KB Gear Tablet as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5
[   65.806534][    C0] kbtab 1-1:0.0: kbtab_irq - usb_submit_urb failed with result -1
[   65.828911][ T6127] netlink: 'syz.1.93': attribute type 1 has an invalid length.
[   65.854017][ T6127] bond1: entered promiscuous mode
[   65.860645][ T6127] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.901848][ T6127] 8021q: adding VLAN 0 to HW filter on device bond1
[   65.911243][ T6127] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address
[   65.915584][ T6127] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode
[   65.929174][ T6127] bond1: (slave ip6gre1): making interface the new active one
[   65.932217][ T6127] ip6gre1: entered promiscuous mode
[   65.935031][ T6127] bond1: (slave ip6gre1): Enslaving as an active interface with an up link
[   65.958914][  T792] spca561 3-1:0.156: probe with driver spca561 failed with error -22
[   65.965157][  T792] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[   65.968128][  T792] usb 3-1: MIDIStreaming interface descriptor not found
[   65.987394][ T5912] usb 1-1: USB disconnect, device number 2
[   66.059102][  T792] usb 3-1: USB disconnect, device number 2
[   66.508740][ T6133] loop1: detected capacity change from 0 to 256
[   66.526267][ T6133] FAT-fs (loop1): Directory bread(block 64) failed
[   66.529206][ T6133] FAT-fs (loop1): Directory bread(block 65) failed
[   66.533846][ T6133] FAT-fs (loop1): Directory bread(block 66) failed
[   66.536718][ T6133] FAT-fs (loop1): Directory bread(block 67) failed
[   66.540803][ T6133] FAT-fs (loop1): Directory bread(block 68) failed
[   66.543535][ T6133] FAT-fs (loop1): Directory bread(block 69) failed
[   66.546249][ T6133] FAT-fs (loop1): Directory bread(block 70) failed
[   66.549021][ T6133] FAT-fs (loop1): Directory bread(block 71) failed
[   66.571804][ T6133] FAT-fs (loop1): Directory bread(block 72) failed
[   66.574555][ T6133] FAT-fs (loop1): Directory bread(block 73) failed
[   66.794075][ T6148] overlayfs: conflicting lowerdir path
[   66.940158][ T5896] usb 3-1: new full-speed USB device number 3 using dummy_hcd
[   67.093014][ T5896] usb 3-1: config 0 has an invalid interface number: 183 but max is 0
[   67.096147][ T5896] usb 3-1: config 0 has no interface number 0
[   67.098610][ T5896] usb 3-1: config 0 interface 183 has no altsetting 0
[   67.109293][ T5896] usb 3-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=57.f2
[   67.112972][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   67.115675][ T5896] usb 3-1: Product: syz
[   67.117113][ T5896] usb 3-1: Manufacturer: syz
[   67.118823][ T5896] usb 3-1: SerialNumber: syz
[   67.129212][ T5896] usb 3-1: config 0 descriptor??
[   67.355300][ T5896] usb 3-1: USB disconnect, device number 3
[   67.835794][ T6154] loop0: detected capacity change from 0 to 16
[   67.860550][ T6154] erofs (device loop0): mounted with root inode @ nid 36.
[   68.049956][ T6162] loop0: detected capacity change from 0 to 1024
[   68.050267][ T6159] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   68.050428][ T6159] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   68.083689][ T6159] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   68.095274][ T6159] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   68.101156][ T6159] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   68.111247][ T6159] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   68.115630][ T6159] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   68.122038][ T6159] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   68.135678][   T32] hfsplus: b-tree write err: -5, ino 4
[   68.138856][ T6159] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   68.319359][ T6160] loop1: detected capacity change from 0 to 32768
[   68.324962][ T6160] (syz.1.106,6160,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   68.332847][ T6160] (syz.1.106,6160,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   68.359324][ T6160] JBD2: Ignoring recovery information on journal
[   68.397126][ T6160] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   68.462084][ T6176] netlink: 830 bytes leftover after parsing attributes in process `syz.2.113'.
[   68.487604][ T5841] ocfs2: Unmounting device (7,1) on (node local)
[   68.616749][ T6179] loop2: detected capacity change from 0 to 4096
[   68.649590][ T6180] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   68.744929][ T6186] loop2: detected capacity change from 0 to 512
[   68.750780][ T6186] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   68.759354][ T6186] EXT4-fs (loop2): 1 truncate cleaned up
[   68.763675][ T6186] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.782749][ T6186] EXT4-fs error (device loop2): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.2.116: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[   68.797926][ T6186] EXT4-fs (loop2): Remounting filesystem read-only
[   68.803590][ T6186] EXT4-fs warning (device loop2): ext4_rename_delete:3735: inode #2: comm syz.2.116: Deleting old file: nlink 5, error=-117
[   68.827185][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.003772][ T6207] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[   69.008063][ T6207] bridge0: port 2(bridge_slave_1) entered disabled state
[   69.011693][ T6207] bridge0: port 1(bridge_slave_0) entered disabled state
[   69.018641][ T6207] bridge0: entered allmulticast mode
[   69.127200][ T6218] loop2: detected capacity change from 0 to 256
[   69.131275][ T6218] exfat: Deprecated parameter 'namecase'
[   69.136977][ T6218] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[   69.395959][ T6233] loop1: detected capacity change from 0 to 1024
[   69.466223][ T6233] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.517927][   T33] audit: type=1800 audit(1755105693.183:2): pid=6233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.135" name="file2" dev="loop1" ino=16 res=0 errno=0
[   70.071129][ T5238] Bluetooth: hci0: command 0x0c1a tx timeout
[   70.150336][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout
[   70.153281][ T5238] Bluetooth: hci1: command 0x0c1a tx timeout
[   70.185661][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.460761][ T6258] loop0: detected capacity change from 0 to 1024
[   70.469217][ T6258] EXT4-fs (loop0): revision level too high, forcing read-only mode
[   70.473052][ T6258] EXT4-fs (loop0): orphan cleanup on readonly fs
[   70.479376][ T6258] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 4 index 0
[   70.489158][ T6258] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[   70.493207][ T6258] EXT4-fs error (device loop0): ext4_acquire_dquot:6933: comm syz.0.143: Failed to acquire dquot type 0
[   70.500613][ T6258] EXT4-fs (loop0): 1 truncate cleaned up
[   70.510803][ T6258] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   70.526168][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.638545][ T6250] loop1: detected capacity change from 0 to 32768
[   70.693390][ T6250] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   70.715769][ T6270] loop2: detected capacity change from 0 to 2048
[   70.724103][ T6270] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   70.728194][ T6270] NILFS (loop2): mounting unchecked fs
[   70.734998][ T6131] udevd[6131]: incorrect nilfs2 checksum on /dev/loop2
[   70.748147][ T6131] udevd[6131]: incorrect nilfs2 checksum on /dev/loop2
[   70.753145][ T6270] NILFS (loop2): recovery complete
[   70.763508][ T6280] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   70.776142][ T6250] XFS (loop1): Ending clean mount
[   70.793145][ T6250] XFS (loop1): Quotacheck needed: Please wait.
[   70.830163][ T6250] XFS (loop1): Quotacheck: Done.
[   70.892193][ T6288] netlink: 8 bytes leftover after parsing attributes in process `syz.0.150'.
[   70.895254][ T6288] netlink: 16 bytes leftover after parsing attributes in process `syz.0.150'.
[   70.902088][ T6288] gretap0: entered promiscuous mode
[   70.903879][ T6288] macvlan2: entered promiscuous mode
[   70.915359][ T5841] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   70.969550][ T6292] loop2: detected capacity change from 0 to 1024
[   71.027199][ T6292] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.068989][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.188120][ T6309] netlink: 'syz.0.159': attribute type 30 has an invalid length.
[   71.246222][ T6313] loop2: detected capacity change from 0 to 512
[   71.264663][ T6313] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.161: bad orphan inode 17
[   71.275649][ T6313] ext4_test_bit(bit=16, block=4) = 1
[   71.277842][ T6313] is_bad_inode(inode)=0
[   71.279393][ T6313] NEXT_ORPHAN(inode)=0
[   71.285796][ T6313] max_ino=32
[   71.286896][ T6313] i_nlink=1
[   71.294733][ T6313] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.337288][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.345944][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.346014][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.521088][ T5896] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   71.700298][ T5896] usb 1-1: Using ep0 maxpacket: 16
[   71.709853][ T5896] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.714785][ T5896] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.719682][ T5896] usb 1-1: config 0 interface 0 has no altsetting 0
[   71.720960][ T6325] loop1: detected capacity change from 0 to 1024
[   71.722858][ T5896] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   71.726164][ T6325] EXT4-fs: Ignoring removed orlov option
[   71.728997][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   71.734487][ T6325] EXT4-fs: Ignoring removed nomblk_io_submit option
[   71.757060][ T5896] usb 1-1: config 0 descriptor??
[   71.766302][ T6325] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   71.927356][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.999358][ T6329] loop1: detected capacity change from 0 to 16
[   72.004505][ T6329] erofs (device loop1): mounted with root inode @ nid 36.
[   72.140194][ T5238] Bluetooth: hci0: command 0x0c1a tx timeout
[   72.174358][ T5896] hid (null): unknown global tag 0xe
[   72.220376][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout
[   72.220412][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout
[   72.297841][ T6333] netlink: 28 bytes leftover after parsing attributes in process `syz.2.169'.
[   72.350138][ T5912] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   72.390420][ T5915] usb 1-1: USB disconnect, device number 3
[   72.500137][ T5912] usb 2-1: Using ep0 maxpacket: 32
[   72.503709][ T5912] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.507813][ T5912] usb 2-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid wMaxPacketSize 0
[   72.511798][ T5912] usb 2-1: config 0 interface 0 has no altsetting 0
[   72.514387][ T6343] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   72.524493][ T5912] usb 2-1: New USB device found, idVendor=1044, idProduct=7a4d, bcdDevice= 0.00
[   72.527961][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=1, SerialNumber=0
[   72.532405][ T6343] netlink: 4 bytes leftover after parsing attributes in process `syz.2.171'.
[   72.535447][ T5912] usb 2-1: Product: syz
[   72.541018][ T5912] usb 2-1: config 0 descriptor??
[   72.645861][ T6345] loop2: detected capacity change from 0 to 8
[   72.661012][ T6345] SQUASHFS error: zlib decompression failed, data probably corrupt
[   72.664291][ T6345] SQUASHFS error: Failed to read block 0x9b: -5
[   72.666841][ T6345] SQUASHFS error: Unable to read metadata cache entry [99]
[   72.669694][ T6345] SQUASHFS error: Unable to read inode 0x127
[   72.952690][ T5912] hid (null): unknown global tag 0xe
[   72.962611][ T5912] waterforce 0003:1044:7A4D.0002: unknown global tag 0xe
[   72.965145][ T5912] waterforce 0003:1044:7A4D.0002: item 0 2 1 14 parsing failed
[   72.968406][ T5912] waterforce 0003:1044:7A4D.0002: hid parse failed with -22
[   72.971752][ T5912] waterforce 0003:1044:7A4D.0002: probe with driver waterforce failed with error -22
[   73.158191][  T793] usb 2-1: USB disconnect, device number 3
[   73.750749][ T6374] loop1: detected capacity change from 0 to 2048
[   73.772250][ T6374] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.807723][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.893947][ T6378] loop1: detected capacity change from 0 to 4096
[   73.932396][ T6380] loop2: detected capacity change from 0 to 2048
[   73.961472][ T6380] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   73.971492][ T6378] ntfs3(loop1): failed to convert "0080" to macgaelic
[   73.978567][ T6378] ntfs3(loop1): failed to convert name for inode 1e.
[   73.982114][ T6378] ntfs3(loop1): ino=1f, mi_enum_attr
[   73.984232][ T6378] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   73.996098][ T6380] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[   74.023986][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.230125][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout
[   74.300148][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout
[   74.300779][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout
[   74.320899][  T792] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   74.372044][ T6395] loop2: detected capacity change from 0 to 32768
[   74.395986][ T6395] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   74.413271][ T6395] XFS (loop2): Ending clean mount
[   74.436327][ T6395] XFS (loop2): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[   74.441796][ T6395] XFS (loop2): Unmount and run xfs_repair
[   74.444300][ T6395] XFS (loop2): First 128 bytes of corrupted metadata buffer:
[   74.447087][ T6395] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[   74.450696][ T6395] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[   74.453903][ T6395] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[   74.457020][ T6395] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[   74.460444][ T6395] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[   74.463571][ T6395] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[   74.466719][ T6395] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[   74.469785][ T6395] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[   74.473598][ T6395] XFS (loop2): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x14 len 4 error 74
[   74.480929][ T6395] XFS (loop2): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[   74.486142][ T6395] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[   74.492354][  T792] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   74.496557][  T792] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[   74.502366][  T792] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   74.506034][  T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   74.509298][  T792] usb 2-1: SerialNumber: syz
[   74.517516][ T5842] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   74.838942][  T792] usb 2-1: 0:2 : does not exist
[   74.854374][  T792] usb 2-1: USB disconnect, device number 4
[   74.882048][ T6131] udevd[6131]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   74.970619][ T6416] loop2: detected capacity change from 0 to 128
[   74.981859][ T6416] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   74.989704][ T6416] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   75.435889][ T6426] loop0: detected capacity change from 0 to 32768
[   75.444654][ T6426] XFS (loop0): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   75.487375][ T6426] XFS (loop0): Ending clean mount
[   75.491693][ T6426] XFS (loop0): Quotacheck needed: Please wait.
[   75.513830][ T6426] XFS (loop0): Quotacheck: Done.
[   75.569107][ T5853] XFS (loop0): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[   75.714170][ T6442] loop2: detected capacity change from 0 to 24
[   75.723122][ T6442] MTD: Attempt to mount non-MTD device "/dev/loop2"
[   75.732560][ T6442] romfs: bad initial checksum on dev loop2.
[   75.740163][  T792] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   75.905311][  T792] usb 2-1: Using ep0 maxpacket: 8
[   75.909728][  T792] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7
[   75.919510][  T792] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[   75.925827][  T792] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[   75.928581][  T792] usb 2-1: Product: syz
[   75.940189][  T792] usb 2-1: Manufacturer: syz
[   75.943662][  T792] usb 2-1: SerialNumber: syz
[   76.467548][  T792] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use
[   76.471727][  T792] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use
[   76.474985][  T792] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2
[   76.478559][  T792] usb 2-1: palm_os_3_probe - error -71 getting bytes available request
[   76.482996][  T792] visor 2-1:1.0: Handspring Visor / Palm OS converter detected
[   76.491007][  T792] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[   76.497971][  T792] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[   76.515337][  T792] usb 2-1: USB disconnect, device number 5
[   76.532819][  T792] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[   76.538978][  T792] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[   76.545220][  T792] visor 2-1:1.0: device disconnected
[   76.792304][  T793] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   76.951714][  T793] usb 3-1: Using ep0 maxpacket: 16
[   76.962369][  T793] usb 3-1: config 0 has an invalid interface number: 217 but max is 0
[   76.965187][  T793] usb 3-1: config 0 has no interface number 0
[   76.975264][  T793] usb 3-1: New USB device found, idVendor=0b48, idProduct=1008, bcdDevice=32.5e
[   76.978255][  T793] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.980930][  T793] usb 3-1: Product: syz
[   76.982314][  T793] usb 3-1: Manufacturer: syz
[   76.985795][  T793] usb 3-1: SerialNumber: syz
[   76.993440][  T793] usb 3-1: config 0 descriptor??
[   76.999746][  T793] ttusb_dec_send_command: command bulk message failed: error -22
[   77.003616][  T793] ttusb-dec 3-1:0.217: probe with driver ttusb-dec failed with error -22
[   77.115434][ T6468] netlink: 'syz.1.217': attribute type 13 has an invalid length.
[   77.204973][ T5896] usb 3-1: USB disconnect, device number 4
[   77.246816][ T6468] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.255571][ T6468] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.356389][   T13] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.363010][   T13] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.368818][   T13] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.377800][   T13] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.399118][ T6468] syz.1.217 (6468) used greatest stack depth: 20616 bytes left
[   77.454881][ T6471] loop1: detected capacity change from 0 to 1024
[   77.476558][ T6471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   77.775743][ T6488] loop2: detected capacity change from 0 to 256
[   77.994905][ T6500] loop2: detected capacity change from 0 to 4096
[   77.998043][ T6500] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   78.019089][ T6500] ntfs3(loop2): ino=19, mi_enum_attr
[   78.023384][ T6500] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   78.134262][ T6502] netlink: 'syz.2.230': attribute type 9 has an invalid length.
[   78.137897][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz.2.230'.
[   78.295577][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.996340][ T6531] autofs4:pid:6531:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(1.2816), cmd(0xc0189375)
[   79.002064][ T6531] autofs4:pid:6531:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc0189375)
[   79.816861][ T6551] loop2: detected capacity change from 0 to 1024
[   79.846452][ T6551] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   79.851173][ T6551] ext4 filesystem being mounted at /93/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.863576][ T6551] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 3: comm syz.2.252: lblock 3 mapped to illegal pblock 3 (length 13)
[   79.869541][ T6551] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 13 with error 117
[   79.874331][ T6551] EXT4-fs (loop2): This should not happen!! Data will be lost
[   79.874331][ T6551] 
[   79.882222][ T6551] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.252: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.888670][ T6551] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.252: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.894963][ T6551] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.252: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.901833][ T6551] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.252: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.908019][ T6551] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.252: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.914358][ T6551] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.252: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.920680][ T6551] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.252: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.926615][ T6551] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.252: lblock 3 mapped to illegal pblock 3 (length 1)
[   79.933608][ T6550] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #15: block 3: comm syz.2.252: lblock 3 mapped to illegal pblock 3 (length 1)
[   80.117074][ T5896] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   80.279374][ T6564] netlink: 16222 bytes leftover after parsing attributes in process `syz.1.257'.
[   80.290322][ T5896] usb 1-1: Using ep0 maxpacket: 16
[   80.308758][ T5896] usb 1-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice=80.f2
[   80.318983][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.325074][ T5896] usb 1-1: Product: syz
[   80.326859][ T5896] usb 1-1: Manufacturer: syz
[   80.328778][ T5896] usb 1-1: SerialNumber: syz
[   80.341308][ T5896] usb 1-1: config 0 descriptor??
[   80.353551][ T5896] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   80.368944][ T5896] snd-usb-audio 1-1:0.0: probe with driver snd-usb-audio failed with error -2
[   80.398534][ T6131] udevd[6131]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   80.416643][ T6568] netlink: 108 bytes leftover after parsing attributes in process `syz.1.259'.
[   80.449813][ T6570] netlink: 8 bytes leftover after parsing attributes in process `syz.1.260'.
[   80.518170][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.534924][ T6574] netlink: 12 bytes leftover after parsing attributes in process `syz.1.262'.
[   80.569481][  T793] usb 1-1: USB disconnect, device number 4
[   80.715027][ T6588] loop1: detected capacity change from 0 to 4096
[   80.723785][ T6588] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   80.742324][ T6588] ntfs3(loop1): ino=1a, mi_enum_attr
[   80.750524][ T6588] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   80.757571][ T6588] ntfs3(loop1): ino=1a, mi_enum_attr
[   80.759575][ T6588] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[   80.778855][ T6588] ntfs3(loop1): ino=5, "/" indx_read
[   81.161573][ T6599] netlink: 20 bytes leftover after parsing attributes in process `syz.1.274'.
[   81.500342][ T5900] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   81.679484][ T5900] usb 1-1: Using ep0 maxpacket: 32
[   81.695522][ T5900] usb 1-1: unable to get BOS descriptor or descriptor too short
[   81.713396][ T5900] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32
[   81.734600][ T5900] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   81.738561][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.752457][ T5900] usb 1-1: Product: С
[   81.754526][ T5900] usb 1-1: Manufacturer: 긨탞鿝ﭘ켛괆勰ǿ㵖鼜뤱Ώ㼛䂨⸓삻䓑⏽﻽煌㈃쏛䙴풰୭鷅䅣퇥
[   81.798934][ T5900] cdc_ncm 1-1:1.0: CDC Union missing and no IAD found
[   81.808483][ T5900] cdc_ncm 1-1:1.0: bind() failure
[   81.853334][ T5900] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[   81.856413][ T5900] cdc_ncm 1-1:1.1: bind() failure
[   82.011422][  T793] usb 1-1: USB disconnect, device number 5
[   82.213863][ T6613] loop1: detected capacity change from 0 to 256
[   82.417026][ T6625] netlink: 12 bytes leftover after parsing attributes in process `syz.1.288'.
[   82.756819][ T6640] overlayfs: failed to resolve './file0': -5
[   83.087940][ T6653] loop0: detected capacity change from 0 to 1024
[   83.149223][   T39] hfsplus: b-tree write err: -5, ino 4
[   83.528686][ T6665] netlink: 28 bytes leftover after parsing attributes in process `syz.0.304'.
[   83.680182][ T5887] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   83.840155][ T5887] usb 3-1: Using ep0 maxpacket: 32
[   83.855782][ T5887] usb 3-1: config 0 has an invalid interface number: 89 but max is 0
[   83.867486][ T5887] usb 3-1: config 0 has no interface number 0
[   83.874884][ T5887] usb 3-1: config 0 interface 89 has no altsetting 0
[   83.895121][ T6679] loop0: detected capacity change from 0 to 1764
[   83.895233][ T5887] usb 3-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[   83.905219][ T6679] grow_buffers: requested out-of-range block 18446744071919729716 for device loop0
[   83.909350][ T6679] isofs_fill_super: bread failed, dev=loop0, iso_blknum=1252572698, block=-1789821900
[   83.914739][ T5887] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.921118][ T5887] usb 3-1: Product: syz
[   83.922952][ T5887] usb 3-1: Manufacturer: syz
[   83.930485][ T5887] usb 3-1: SerialNumber: syz
[   83.938671][ T5887] usb 3-1: config 0 descriptor??
[   83.959286][ T5887] em28xx 3-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[   83.971617][ T5887] em28xx 3-1:0.89: Video interface 89 found: bulk
[   84.157742][ T6688] fanotify: failed to encode fid (type=0, len=0, err=-2)
[   84.204173][ T6690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.315'.
[   84.208405][ T6690] netlink: 16 bytes leftover after parsing attributes in process `syz.0.315'.
[   84.309823][ T6692] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.316'.
[   84.575491][ T5887] em28xx 3-1:0.89: unknown em28xx chip ID (0)
[   85.353430][ T6698] loop0: detected capacity change from 0 to 40427
[   85.364919][ T6698] F2FS-fs (loop0): invalid crc value
[   85.414085][ T5887] em28xx 3-1:0.89: reading from i2c device at 0xa0 failed (error=-5)
[   85.417335][ T5887] em28xx 3-1:0.89: board has no eeprom
[   85.472164][ T6698] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   85.478394][ T6698] F2FS-fs (loop0): Start checkpoint disabled!
[   85.489648][ T6698] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   85.490144][ T5887] em28xx 3-1:0.89: Identified as Terratec Grabby (card=67)
[   85.537393][ T5887] em28xx 3-1:0.89: analog set to bulk mode.
[   85.540378][   T32] kworker/u9:1: attempt to access beyond end of device
[   85.540378][   T32] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   85.546607][ T5896] em28xx 3-1:0.89: Registering V4L2 extension
[   85.550193][ T5887] usb 3-1: USB disconnect, device number 5
[   85.552655][   T32] CPU: 0 UID: 0 PID: 32 Comm: kworker/u9:1 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[   85.552667][   T32] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   85.552671][   T32] Workqueue: writeback wb_workfn (flush-7:0)
[   85.552685][   T32] Call Trace:
[   85.552689][   T32]  <TASK>
[   85.552692][   T32]  dump_stack_lvl+0x189/0x250
[   85.552704][   T32]  ? __pfx_dump_stack_lvl+0x10/0x10
[   85.552712][   T32]  ? __pfx_queue_work_on+0x10/0x10
[   85.552720][   T32]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   85.552728][   T32]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   85.552740][   T32]  f2fs_handle_critical_error+0x37c/0x540
[   85.552752][   T32]  f2fs_write_end_io+0x886/0xb60
[   85.552768][   T32]  __submit_merged_bio+0x27a/0x6a0
[   85.552779][   T32]  __submit_merged_write_cond+0x255/0x530
[   85.552790][   T32]  f2fs_write_data_pages+0x261d/0x3000
[   85.552812][   T32]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   85.552827][   T32]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   85.552851][   T32]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   85.552865][   T32]  ? trace_f2fs_writepages+0x7f/0x200
[   85.552873][   T32]  ? f2fs_write_node_pages+0x478/0x6e0
[   85.552883][   T32]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   85.552897][   T32]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   85.552906][   T32]  do_writepages+0x32e/0x550
[   85.552918][   T32]  ? reacquire_held_locks+0x127/0x1d0
[   85.552925][   T32]  ? writeback_sb_inodes+0x384/0x1010
[   85.552937][   T32]  __writeback_single_inode+0x145/0xff0
[   85.552946][   T32]  ? do_raw_spin_unlock+0x4d/0x240
[   85.552956][   T32]  writeback_sb_inodes+0x6c7/0x1010
[   85.552975][   T32]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   85.553004][   T32]  ? rcu_is_watching+0x15/0xb0
[   85.553015][   T32]  wb_writeback+0x43b/0xaf0
[   85.553027][   T32]  ? queue_io+0x391/0x590
[   85.553036][   T32]  ? __pfx_wb_writeback+0x10/0x10
[   85.553048][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[   85.553058][   T32]  wb_workfn+0x409/0xef0
[   85.553071][   T32]  ? __pfx_wb_workfn+0x10/0x10
[   85.553080][   T32]  ? __lock_acquire+0xab9/0xd20
[   85.553094][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[   85.553103][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[   85.553110][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[   85.553116][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[   85.553123][   T32]  process_scheduled_works+0xae1/0x17b0
[   85.553141][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[   85.553159][   T32]  worker_thread+0x8a0/0xda0
[   85.553176][   T32]  kthread+0x711/0x8a0
[   85.553186][   T32]  ? __pfx_worker_thread+0x10/0x10
[   85.553193][   T32]  ? __pfx_kthread+0x10/0x10
[   85.553203][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[   85.553210][   T32]  ? lockdep_hardirqs_on+0x9c/0x150
[   85.553218][   T32]  ? __pfx_kthread+0x10/0x10
[   85.553226][   T32]  ret_from_fork+0x3fc/0x770
[   85.553235][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[   85.553245][   T32]  ? __switch_to_asm+0x39/0x70
[   85.553255][   T32]  ? __switch_to_asm+0x33/0x70
[   85.553263][   T32]  ? __pfx_kthread+0x10/0x10
[   85.553272][   T32]  ret_from_fork_asm+0x1a/0x30
[   85.553287][   T32]  </TASK>
[   85.553290][   T32] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   85.568947][ T5887] em28xx 3-1:0.89: Disconnecting em28xx
[   85.687843][ T5896] em28xx 3-1:0.89: Config register raw data: 0xffffffed
[   85.691126][ T5896] em28xx 3-1:0.89: AC97 chip type couldn't be determined
[   85.693907][ T5896] em28xx 3-1:0.89: No AC97 audio processor
[   85.699490][ T5896] usb 3-1: Decoder not found
[   85.701765][ T5896] em28xx 3-1:0.89: failed to create media graph
[   85.704442][ T5896] em28xx 3-1:0.89: V4L2 device video103 deregistered
[   85.712392][ T5896] em28xx 3-1:0.89: Registering snapshot button...
[   85.716700][ T5896] input: em28xx snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.89/input/input6
[   85.726492][ T5896] em28xx 3-1:0.89: Remote control support is not available for this card.
[   85.730765][ T5887] em28xx 3-1:0.89: Closing input extension
[   85.734138][ T5887] em28xx 3-1:0.89: Deregistering snapshot button
[   85.764241][ T5887] em28xx 3-1:0.89: Freeing device
[   85.999058][ T6717] loop1: detected capacity change from 0 to 1024
[   86.048864][ T6717] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[   86.067494][ T6717] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   86.081201][ T6717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   86.116761][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.122712][ T6726] loop2: detected capacity change from 0 to 2048
[   86.162517][ T6726] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   86.177006][ T6726] EXT4-fs error (device loop2): ext4_find_extent:939: inode #2: comm syz.2.330: pblk 1 bad header/extent: invalid magic - magic 2, entries 0, max 3(0), depth 0(4)
[   86.187976][ T6726] EXT4-fs (loop2): Remounting filesystem read-only
[   86.278425][ T6728] loop0: detected capacity change from 0 to 32768
[   86.283559][ T6728] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.331 (6728)
[   86.332302][ T6728] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   86.335756][ T6728] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   86.346453][ T6728] BTRFS info (device loop0): using free-space-tree
[   86.347205][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   86.652406][ T6728] BTRFS info (device loop0): rebuilding free space tree
[   86.705143][   T10] cfg80211: failed to load regulatory.db
[   86.721707][   T33] audit: type=1800 audit(1755105711.391:3): pid=6728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.331" name="file2" dev="loop0" ino=261 res=0 errno=0
[   86.772559][ T5853] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   87.247874][ T6772] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   87.655822][ T6779] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   87.667309][ T6779] fuse: Unknown parameter '184467440737095516150x000000000000000900000000000000000000'
[   87.924213][ T6789] netlink: 'syz.1.348': attribute type 1 has an invalid length.
[   88.418461][ T6813] tipc: Started in network mode
[   88.421670][ T6813] tipc: Node identity 2, cluster identity 4711
[   88.423919][ T6813] tipc: Node number set to 2
[   88.503940][ T6820] netlink: 8 bytes leftover after parsing attributes in process `syz.1.363'.
[   89.193906][ T6830] loop2: detected capacity change from 0 to 512
[   89.265839][ T6830] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   90.044195][ T6843] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'.
[   90.067663][ T6843] bridge0: entered promiscuous mode
[   90.069892][ T6843] macvlan3: entered allmulticast mode
[   90.073623][ T6843] bridge0: entered allmulticast mode
[   90.084536][ T6843] bridge0: port 3(macvlan3) entered blocking state
[   90.087463][ T6843] bridge0: port 3(macvlan3) entered disabled state
[   90.118610][ T6843] bridge0: left allmulticast mode
[   90.124069][ T6843] bridge0: left promiscuous mode
[   90.517573][ T6849] netlink: 40 bytes leftover after parsing attributes in process `syz.0.374'.
[   90.561556][ T6851] loop0: detected capacity change from 0 to 8
[   90.591549][ T6851] SQUASHFS error: Unable to read directory block [2c0:35]
[   90.979614][ T6870] loop2: detected capacity change from 0 to 512
[   91.021212][ T6870] EXT4-fs error (device loop2): ext4_quota_enable:7120: comm syz.2.384: Bad quota inum: 1, type: 2
[   91.026550][ T6870] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix.
[   91.053627][ T6870] EXT4-fs (loop2): mount failed
[   91.277851][ T6892] capability: warning: `syz.0.391' uses 32-bit capabilities (legacy support in use)
[   91.288878][ T6892] netlink: 84 bytes leftover after parsing attributes in process `syz.0.391'.
[   91.718447][ T6910] loop0: detected capacity change from 0 to 32768
[   91.724699][ T6910] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.399 (6910)
[   91.735733][ T6910] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   91.739821][ T6910] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[   91.746143][ T6910] BTRFS info (device loop0): using free-space-tree
[   91.788031][ T6940] trusted_key: syz.2.408 sent an empty control message without MSG_MORE.
[   91.870229][ T5912] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   91.881784][ T6910] loop0: detected capacity change from 32768 to 64
[   91.894865][ T6910] syz.0.399: attempt to access beyond end of device
[   91.894865][ T6910] loop0: rw=2049, sector=10464, nr_sectors = 16 limit=64
[   91.907889][ T6910] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[   92.030593][   T82] kworker/u9:4: attempt to access beyond end of device
[   92.030593][   T82] loop0: rw=67112961, sector=10448, nr_sectors = 8 limit=64
[   92.035066][   T82] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0
[   92.042338][ T5912] usb 2-1: Using ep0 maxpacket: 32
[   92.046910][   T82] kworker/u9:4: attempt to access beyond end of device
[   92.046910][   T82] loop0: rw=67112961, sector=10464, nr_sectors = 8 limit=64
[   92.052739][   T82] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0
[   92.053165][ T6959] loop2: detected capacity change from 0 to 512
[   92.056098][   T82] kworker/u9:4: attempt to access beyond end of device
[   92.056098][   T82] loop0: rw=67112961, sector=10472, nr_sectors = 8 limit=64
[   92.056128][   T82] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 4, rd 0, flush 0, corrupt 0, gen 0
[   92.058515][ T5912] usb 2-1: unable to get BOS descriptor or descriptor too short
[   92.063583][   T82] kworker/u9:4: attempt to access beyond end of device
[   92.063583][   T82] loop0: rw=67112961, sector=10480, nr_sectors = 8 limit=64
[   92.068735][ T6959] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[   92.075086][   T82] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 5, rd 0, flush 0, corrupt 0, gen 0
[   92.080140][ T5912] usb 2-1: config 128 has an invalid interface number: 127 but max is 3
[   92.083668][ T5912] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[   92.087648][ T5912] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4
[   92.091720][ T5853] BTRFS error (device loop0 state A): Transaction aborted (error -5)
[   92.093232][ T6959] EXT4-fs (loop2): orphan cleanup on readonly fs
[   92.094516][ T5853] BTRFS: error (device loop0 state A) in btrfs_start_dirty_block_groups:3501: errno=-5 IO failure
[   92.094547][ T5853] BTRFS info (device loop0 state EA): forced readonly
[   92.097670][ T6959] EXT4-fs error (device loop2): ext4_read_block_bitmap_nowait:517: comm syz.2.416: Block bitmap for bg 0 marked uninitialized
[   92.100667][ T5912] usb 2-1: config 128 has no interface number 0
[   92.105104][ T6959] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6657: Corrupt filesystem
[   92.108358][ T5912] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 194, changing to 11
[   92.108377][ T5912] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid maxpacket 33851, setting to 1024
[   92.108394][ T5912] usb 2-1: config 128 interface 127 has no altsetting 0
[   92.112217][ T6959] EXT4-fs (loop2): 1 orphan inode deleted
[   92.113832][ T5853] BTRFS info (device loop0 state EA): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   92.119075][ T6959] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[   92.125602][ T5912] usb 2-1: string descriptor 0 read error: -22
[   92.151922][ T5912] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[   92.254013][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.274469][ T6921] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   92.507428][ T6131] udevd[6131]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   92.537426][ T5912] usb 2-1: USB disconnect, device number 6
[   92.974402][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.160470][ T5912] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   93.212346][ T5896] IPVS: starting estimator thread 0...
[   93.275934][ T6991] loop2: detected capacity change from 0 to 4096
[   93.301230][ T6992] IPVS: using max 39 ests per chain, 93600 per kthread
[   93.335640][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   93.339456][ T5912] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   93.353489][ T6991] ntfs3(loop2): ino=19, mi_enum_attr
[   93.368208][ T6991] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   93.370759][ T5912] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[   93.374895][ T5912] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[   93.388367][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   93.394562][ T5912] usb 1-1: config 0 descriptor??
[   93.430414][ T6991] ntfs3(loop2): try to read out of volume at offset 0x3fffffc7000
[   93.434053][ T6991] ntfs3(loop2): ino=21, The size of extended attributes must not exceed 64KiB
[   93.842063][ T5912] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd
[   93.871386][ T5912] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[   94.016709][ T7000] loop2: detected capacity change from 0 to 64
[   94.074498][ T6980] loop0: detected capacity change from 0 to 1024
[   94.175636][ T5896] usb 1-1: USB disconnect, device number 6
[   94.978799][ T7025] loop1: detected capacity change from 0 to 4096
[   95.086985][ T7027] loop0: detected capacity change from 0 to 512
[   95.099511][ T7027] EXT4-fs: Ignoring removed i_version option
[   95.110460][ T7027] EXT4-fs: Ignoring removed nobh option
[   95.115717][ T7027] EXT4-fs (loop0): Test dummy encryption mode enabled
[   95.118722][ T7027] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   95.127542][ T7028] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   95.158364][ T7027] EXT4-fs (loop0): 1 truncate cleaned up
[   95.166728][ T7027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   95.172352][ T7025] syz.1.442 (7025) used greatest stack depth: 19624 bytes left
[   95.266967][ T7027] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[   95.295114][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.285330][   T33] audit: type=1326 audit(1755105721.951:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7040 comm="syz.0.447" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1bb8b8ebe9 code=0x0
[   97.579929][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.0.455'.
[   98.508472][ T7073] loop2: detected capacity change from 0 to 2048
[   98.555246][ T7073] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   98.579890][   T33] audit: type=1326 audit(1755105723.241:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.459" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1bb8b85ba7 code=0x7ffc0000
[   98.610243][   T33] audit: type=1326 audit(1755105723.241:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.459" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1bb8b2add9 code=0x7ffc0000
[   98.619425][   T33] audit: type=1326 audit(1755105723.251:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.459" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb8b8ebe9 code=0x7ffc0000
[   98.628994][   T33] audit: type=1326 audit(1755105723.251:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.459" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1bb8b85ba7 code=0x7ffc0000
[   98.640389][   T33] audit: type=1326 audit(1755105723.251:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.459" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1bb8b2add9 code=0x7ffc0000
[   98.649457][   T33] audit: type=1326 audit(1755105723.251:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.459" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1bb8b85ba7 code=0x7ffc0000
[   98.676248][   T33] audit: type=1326 audit(1755105723.251:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.459" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1bb8b2add9 code=0x7ffc0000
[   98.718981][   T33] audit: type=1326 audit(1755105723.251:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.459" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f1bb8b85ba7 code=0x7ffc0000
[   98.750231][   T33] audit: type=1326 audit(1755105723.251:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7074 comm="syz.0.459" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f1bb8b2add9 code=0x7ffc0000
[   98.897910][ T7072] UDF-fs: warning (device loop2): udf_truncate_tail_extent: Too long extent after EOF in inode 1367: i_size: 270336 lbcount: 274432 extent 129+238592
[  100.502060][ T7110] futex_wake_op: syz.2.474 tries to shift op by 32; fix this program
[  100.812464][ T7128] loop1: detected capacity change from 0 to 1024
[  100.825525][ T7126] debugfs: 'ttyS3' already exists in 'caif_serial'
[  100.895062][ T3607] hfsplus: b-tree write err: -5, ino 4
[  101.767106][ T7159] syz.2.494: attempt to access beyond end of device
[  101.767106][ T7159] nbd2: rw=4096, sector=0, nr_sectors = 1 limit=0
[  101.786602][ T7159] XFS (nbd2): SB validate failed with error -5.
[  101.938555][ T7156] loop0: detected capacity change from 0 to 32768
[  102.022084][ T7156] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  102.057662][ T7156] XFS (loop0): Ending clean mount
[  102.096041][ T7156] XFS (loop0): Quotacheck needed: Please wait.
[  102.228047][ T7156] XFS (loop0): Quotacheck: Done.
[  102.372865][ T5853] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  102.917383][ T7192] loop1: detected capacity change from 0 to 2048
[  102.924800][ T7192] NILFS (loop1): invalid segment: Checksum error in segment payload
[  102.927978][ T7192] NILFS (loop1): trying rollback from an earlier position
[  102.931513][ T7192] NILFS (loop1): too large filesystem blocksize: 2 ^ 347668480 KiB
[  102.934750][ T7192] NILFS (loop1): error -22 while searching super root
[  103.100304][ T5900] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  103.221051][ T5912] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  103.270346][ T5900] usb 1-1: Using ep0 maxpacket: 16
[  103.273638][ T5900] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  103.276629][ T5900] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  103.279953][ T5900] usb 1-1: config 0 has no interface number 0
[  103.284132][ T5900] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  103.287291][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.289891][ T5900] usb 1-1: Product: syz
[  103.291789][ T5900] usb 1-1: Manufacturer: syz
[  103.293377][ T5900] usb 1-1: SerialNumber: syz
[  103.297037][ T5900] usb 1-1: config 0 descriptor??
[  103.303124][ T5900] usb 1-1: Found UVC 0.00 device syz (046d:08f3)
[  103.305306][ T5900] usb 1-1: No valid video chain found.
[  103.380194][ T5912] usb 2-1: Using ep0 maxpacket: 32
[  103.384504][ T5912] usb 2-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  103.388358][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.394563][ T5912] usb 2-1: config 0 descriptor??
[  103.404979][ T5912] as10x_usb: device has been detected
[  103.407334][ T5912] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  103.417844][ T5912] usb 2-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  103.437977][ T5912] as10x_usb: error during firmware upload part1
[  103.440630][ T5912] Registered device nBox DVB-T Dongle
[  103.505217][ T5912] usb 1-1: USB disconnect, device number 7
[  103.613156][ T5896] usb 2-1: USB disconnect, device number 7
[  103.633777][ T5896] Unregistered device nBox DVB-T Dongle
[  103.635540][ T5896] as10x_usb: device has been disconnected
[  103.831462][ T5900] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  103.982861][ T5900] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  103.987612][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  103.993835][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7
[  103.998429][ T5900] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  104.005940][ T5900] usb 3-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  104.009836][ T5900] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.020088][ T5900] usb 3-1: Product: syz
[  104.021935][ T5900] usb 3-1: Manufacturer: syz
[  104.030164][ T5900] usb 3-1: SerialNumber: syz
[  104.041100][ T5900] usb 3-1: config 0 descriptor??
[  104.048989][ T5900] iguanair 3-1:0.0: failed to get version
[  104.057296][ T5900] iguanair 3-1:0.0: probe with driver iguanair failed with error -90
[  104.184912][ T7208] loop1: detected capacity change from 0 to 128
[  104.188490][ T7208] EXT4-fs: Ignoring removed nobh option
[  104.191831][ T7208] EXT4-fs (loop1): Invalid log block size: 4294967295
[  104.257798][ T5887] usb 3-1: USB disconnect, device number 6
[  104.410934][ T5896] usb 1-1: new low-speed USB device number 8 using dummy_hcd
[  104.465943][ T7222] netlink: 'syz.1.514': attribute type 1 has an invalid length.
[  104.601995][ T5896] usb 1-1: unable to get BOS descriptor or descriptor too short
[  104.605961][ T5896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.609523][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  104.616496][ T5896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.620913][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  104.629590][ T5896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  104.634049][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  104.641203][ T5896] usb 1-1: string descriptor 0 read error: -22
[  104.643825][ T5896] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  104.647400][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.874690][ T5896] usb 1-1: USB disconnect, device number 8
[  105.180281][ T5887] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  105.254933][ T7254] loop1: detected capacity change from 0 to 2048
[  105.269879][ T7255] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  105.279491][   T33] kauditd_printk_skb: 34 callbacks suppressed
[  105.279503][   T33] audit: type=1800 audit(1755105729.941:48): pid=7254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.530" name="file1" dev="loop1" ino=15 res=0 errno=0
[  105.331652][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  105.340204][ T5887] usb 3-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00
[  105.344177][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  105.349898][ T5887] usb 3-1: config 0 descriptor??
[  105.354321][ T7248] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  105.434276][ T7261] sctp: [Deprecated]: syz.1.532 (pid 7261) Use of int in maxseg socket option.
[  105.434276][ T7261] Use struct sctp_assoc_value instead
[  105.567065][ T5887] usbhid 3-1:0.0: can't add hid device: -71
[  105.570526][ T5887] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  105.589323][ T5887] usb 3-1: USB disconnect, device number 7
[  105.886292][ T7276] netlink: 'syz.1.540': attribute type 11 has an invalid length.
[  105.960347][ T5238] Bluetooth: hci0: unexpected event for opcode 0x0c13
[  106.111536][ T7282] loop1: detected capacity change from 0 to 1764
[  106.335985][ T7298] loop0: detected capacity change from 0 to 2048
[  106.395458][ T7300] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  106.449906][ T7300] NILFS (loop0): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  106.454542][ T7300] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=4)
[  106.462498][ T7300] Remounting filesystem read-only
[  106.464610][ T5853] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  106.700215][  T792] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  106.970376][ T5896] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  107.070116][  T792] usb 2-1: Using ep0 maxpacket: 8
[  107.073724][  T792] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  107.077923][  T792] usb 2-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00
[  107.081088][  T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  107.085471][  T792] usb 2-1: config 0 descriptor??
[  107.120058][ T5896] usb 3-1: Using ep0 maxpacket: 8
[  107.124073][ T5896] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 15
[  107.127106][ T5896] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  107.131023][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  107.134629][ T5896] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  107.141935][ T5896] usb 3-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  107.145060][ T5896] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  107.147896][ T5896] usb 3-1: Product: syz
[  107.149610][ T5896] usb 3-1: Manufacturer: syz
[  107.151401][ T5896] usb 3-1: SerialNumber: syz
[  107.154971][ T5896] usb 3-1: config 0 descriptor??
[  107.158147][ T7305] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  107.430798][ T5896] powermate: Expected payload of 3--6 bytes, found 1024 bytes!
[  107.437568][ T5896] input: Griffin SoundKnob as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9
[  107.482174][    C0] Illegal XDP return value 16128 on prog  (id 50) dev veth1_to_team, expect packet loss!
[  107.507181][  T792] corsair 0003:1B1C:1B09.0004: unbalanced delimiter at end of report description
[  107.512701][  T792] corsair 0003:1B1C:1B09.0004: parse failed
[  107.526891][  T792] corsair 0003:1B1C:1B09.0004: probe with driver corsair failed with error -22
[  107.706435][ T5912] usb 2-1: USB disconnect, device number 8
[  107.792683][    C1] powermate: config urb returned -71
[  107.792951][ T5900] usb 3-1: USB disconnect, device number 8
[  107.794402][    C1] powermate: usb_submit_urb(config) failed
[  107.796919][    C1] powermate 3-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  108.190216][ T5912] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  108.353060][ T5912] usb 1-1: unable to get BOS descriptor or descriptor too short
[  108.365457][ T5912] usb 1-1: not running at top speed; connect to a high speed hub
[  108.371348][ T5912] usb 1-1: config 1 interface 0 has no altsetting 0
[  108.374082][ T7336] loop2: detected capacity change from 0 to 256
[  108.386187][ T7336] FAT-fs (loop2): Directory bread(block 1285) failed
[  108.394034][ T5912] usb 1-1: New USB device found, idVendor=05ac, idProduct=024e, bcdDevice= 0.40
[  108.397881][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.399954][ T7336] FAT-fs (loop2): Directory bread(block 1285) failed
[  108.408276][ T5912] usb 1-1: Product: syz
[  108.410719][ T7336] FAT-fs (loop2): Directory bread(block 1285) failed
[  108.416707][ T7336] FAT-fs (loop2): Directory bread(block 1285) failed
[  108.417604][ T5912] usb 1-1: Manufacturer: syz
[  108.439019][ T5912] usb 1-1: SerialNumber: syz
[  108.729629][ T5912] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input10
[  108.739582][ T5282] bcm5974 1-1:1.0: could not read from device
[  108.762159][ T5282] bcm5974 1-1:1.0: could not read from device
[  108.765548][ T5912] usb 1-1: USB disconnect, device number 9
[  109.068611][ T7341] netlink: 100 bytes leftover after parsing attributes in process `syz.2.569'.
[  109.369562][ T7345] loop2: detected capacity change from 0 to 2048
[  109.419054][ T7345] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  109.710277][ T5896] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  109.915243][ T5896] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  109.918558][ T5896] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  109.935411][ T5896] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  109.939018][ T5896] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  109.944337][ T5896] usb 1-1: SerialNumber: syz
[  109.948629][ T7354] loop1: detected capacity change from 0 to 1024
[  109.956208][ T7354] EXT4-fs: Ignoring removed orlov option
[  109.970783][ T7354] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  109.974143][ T7354] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  109.981691][ T7354] EXT4-fs (loop1): invalid journal inode
[  109.985952][ T7354] EXT4-fs (loop1): can't get journal size
[  109.992702][ T7354] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  110.277681][ T5896] usb 1-1: 0:2 : does not exist
[  110.298314][ T5896] usb 1-1: USB disconnect, device number 10
[  110.332869][ T6131] udevd[6131]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  110.889271][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.957625][ T7366] loop2: detected capacity change from 0 to 164
[  110.966121][ T7366] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[  111.017347][ T7364] loop1: detected capacity change from 0 to 4096
[  111.032724][ T7364] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  111.418382][ T7391] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  111.520151][  T792] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  111.672329][  T792] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  111.675629][  T792] usb 2-1: config 220 has an invalid descriptor of length 201, skipping remainder of the config
[  111.679616][  T792] usb 2-1: config 220 has no interface number 2
[  111.683065][  T792] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  111.687757][  T792] usb 2-1: config 220 interface 0 has no altsetting 0
[  111.691402][  T792] usb 2-1: config 220 interface 76 has no altsetting 0
[  111.693868][  T792] usb 2-1: config 220 interface 1 has no altsetting 0
[  111.698091][  T792] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  111.702906][  T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.705813][  T792] usb 2-1: Product: syz
[  111.707401][  T792] usb 2-1: Manufacturer: syz
[  111.709252][  T792] usb 2-1: SerialNumber: syz
[  111.778370][   T33] audit: type=1326 audit(1755105736.441:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.592" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1bb8b8ebe9 code=0x7fc00000
[  111.926781][  T792] usb 2-1: selecting invalid altsetting 0
[  111.934054][  T792] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  111.936286][  T792] usb 2-1: No valid video chain found.
[  111.941180][  T792] usb 2-1: selecting invalid altsetting 0
[  111.943087][  T792] usbtest 2-1:220.1: probe with driver usbtest failed with error -22
[  111.948609][  T792] usb 2-1: USB disconnect, device number 9
[  112.111486][ T7397] loop2: detected capacity change from 0 to 256
[  112.114272][ T7397] exfat: Deprecated parameter 'namecase'
[  112.127422][ T7397] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  112.301471][   T33] audit: type=1326 audit(1755105736.961:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7392 comm="syz.0.592" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f1bb8b8ebe9 code=0x7fc00000
[  112.429479][ T7409] netlink: 'syz.0.598': attribute type 1 has an invalid length.
[  112.433004][ T7409] netlink: 172 bytes leftover after parsing attributes in process `syz.0.598'.
[  112.442495][ T7409] netlink: 4 bytes leftover after parsing attributes in process `syz.0.598'.
[  112.606562][ T7417] kAFS: unable to lookup cell '\/'
[  112.656000][ T7419] netlink: 4 bytes leftover after parsing attributes in process `syz.1.604'.
[  112.803643][ T7408] loop2: detected capacity change from 0 to 32768
[  112.818136][ T7408] JBD2: Ignoring recovery information on journal
[  112.875807][ T7408] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  112.954556][ T7433] loop1: detected capacity change from 0 to 1024
[  112.970646][ T5842] ocfs2: Unmounting device (7,2) on (node local)
[  113.002035][   T82] hfsplus: b-tree write err: -5, ino 8
[  113.140144][  T792] usb 1-1: new low-speed USB device number 11 using dummy_hcd
[  113.236811][ T7435] loop1: detected capacity change from 0 to 32768
[  113.289524][ T7435] find_entry called with index >= next_index
[  113.295742][  T792] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  113.298410][  T792] usb 1-1: config 0 has no interface number 0
[  113.300877][  T792] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  113.304542][  T792] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  113.307759][  T792] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  113.311435][  T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.326403][  T792] usb 1-1: config 0 descriptor??
[  113.339344][  T792] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  113.443584][ T7439] loop2: detected capacity change from 0 to 32768
[  113.475298][ T7439] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  113.490898][ T7439] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  113.513414][   T33] audit: type=1800 audit(1755105738.181:51): pid=7439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.613" name="bus" dev="loop2" ino=17058 res=0 errno=0
[  113.536441][ T7431] iowarrior 1-1:0.1: Error -90 while submitting URB
[  113.541048][ T5912] usb 1-1: USB disconnect, device number 11
[  113.560312][ T5842] ocfs2: Unmounting device (7,2) on (node local)
[  113.689887][ T7447] loop2: detected capacity change from 0 to 512
[  113.718679][ T7447] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.729321][ T7447] ext4 filesystem being mounted at /212/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  113.761849][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.087431][ T7460] netlink: 'syz.0.620': attribute type 1 has an invalid length.
[  114.091059][ T7460] netlink: 228 bytes leftover after parsing attributes in process `syz.0.620'.
[  114.250972][ T7470] netlink: 276 bytes leftover after parsing attributes in process `syz.2.625'.
[  114.285416][ T7468] loop0: detected capacity change from 0 to 4096
[  114.371561][   T33] audit: type=1800 audit(1755105739.041:52): pid=7468 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.624" name="file1" dev="loop0" ino=30 res=0 errno=0
[  114.415918][ T7478] loop2: detected capacity change from 0 to 1024
[  114.441422][ T7478] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  115.110105][ T5912] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  115.254804][ T5842] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.267943][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.272422][ T5912] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  115.276171][ T5912] usb 2-1: New USB device found, idVendor=1038, idProduct=12b6, bcdDevice= 0.00
[  115.279952][ T5912] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.287611][ T5912] usb 2-1: config 0 descriptor??
[  115.703411][ T5912] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0
[  115.706571][ T5912] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0
[  115.709682][ T5912] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0
[  115.713072][ T5912] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0
[  115.716067][ T5912] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0
[  115.730339][ T5912] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0
[  115.733483][ T5912] steelseries 0003:1038:12B6.0005: unknown main item tag 0x0
[  115.739508][ T5912] steelseries 0003:1038:12B6.0005: hidraw0: USB HID v0.00 Device [HID 1038:12b6] on usb-dummy_hcd.1-1/input0
[  115.788291][ T7516] syz.0.646 uses obsolete (PF_INET,SOCK_PACKET)
[  115.901013][ T5912] steelseries 0003:1038:12B6.0005: hid_hw_raw_request() failed with -71
[  115.918404][ T5912] usb 2-1: USB disconnect, device number 10
[  116.950108][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  117.165906][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  117.173241][   T10] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  117.177819][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  117.184201][   T10] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  117.200570][   T10] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  117.204527][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.207952][   T10] usb 2-1: Product: syz
[  117.209742][   T10] usb 2-1: Manufacturer: syz
[  117.214858][   T10] usb 2-1: SerialNumber: syz
[  117.229393][   T10] usb 2-1: config 0 descriptor??
[  117.256882][   T10] garmin_gps 2-1:0.0: Garmin GPS usb/tty converter detected
[  117.328380][   T10] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[  117.348717][   T10] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[  117.349516][ T7522] syz.0.648 (7522): drop_caches: 2
[  117.456134][   T10] usb 2-1: USB disconnect, device number 11
[  117.488465][   T10] garmin_gps 2-1:0.0: device disconnected
[  117.671902][ T7528] netlink: 'syz.0.651': attribute type 5 has an invalid length.
[  117.769350][ T7532] loop0: detected capacity change from 0 to 4096
[  117.785244][ T7532] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  117.799728][ T7532] ntfs3(loop0): ino=1a, mi_enum_attr
[  117.802491][ T7532] ntfs3(loop0): ino=1a, mi_enum_attr
[  117.805036][ T7532] ntfs3(loop0): Failed to initialize $Extend/$Reparse.
[  117.870316][ T7534] loop0: detected capacity change from 0 to 512
[  117.904343][ T7534] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  117.908894][ T7534] ext4 filesystem being mounted at /205/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  117.943945][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.109496][ T7564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.665'.
[  119.184380][ T7566] loop0: detected capacity change from 0 to 512
[  119.616751][ T7570] loop1: detected capacity change from 0 to 40427
[  119.634142][ T7570] F2FS-fs (loop1): Image doesn't support compression
[  119.637072][ T7570] F2FS-fs (loop1): build fault injection rate: 14
[  119.639866][ T7570] F2FS-fs (loop1): build fault injection type: 0x1
[  119.645615][ T7570] F2FS-fs (loop1): invalid crc value
[  119.650939][ T7570] F2FS-fs (loop1): inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x30ed/0x49f0
[  119.659952][ T7570] F2FS-fs (loop1): Failed to initialize F2FS segment manager (-12)
[  119.669960][ T7574] loop0: detected capacity change from 0 to 32768
[  119.685441][ T7574] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  119.711086][ T7574] XFS (loop0): Ending clean mount
[  119.721007][ T7574] XFS (loop0): Quotacheck needed: Please wait.
[  119.754331][ T7574] XFS (loop0): Quotacheck: Done.
[  119.767953][   T33] audit: type=1800 audit(1755105744.431:53): pid=7574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.670" name="file2" dev="loop0" ino=9287 res=0 errno=0
[  119.828636][ T5853] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  120.239416][ T7585] loop1: detected capacity change from 0 to 40427
[  120.247844][ T7585] F2FS-fs (loop1): Wrong segment_count / block_count (31 > 0)
[  120.251269][ T7585] F2FS-fs (loop1): Can't find valid F2FS filesystem in 2th superblock
[  120.255029][ T7585] F2FS-fs (loop1): invalid crc value
[  120.312588][ T7585] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  120.321206][ T7585] F2FS-fs (loop1): Try to recover 2th superblock, ret: 0
[  120.323745][ T7585] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  120.589013][   T33] audit: type=1804 audit(1755105745.241:54): pid=7585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.672" name="/newroot/233/file1/file1" dev="loop1" ino=10 res=1 errno=0
[  120.644043][ T5841] syz-executor: attempt to access beyond end of device
[  120.644043][ T5841] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  120.651495][ T7599] ubi31: attaching mtd0
[  120.652871][ T5841] CPU: 1 UID: 0 PID: 5841 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  120.652893][ T5841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  120.652901][ T5841] Call Trace:
[  120.652907][ T5841]  <TASK>
[  120.652912][ T5841]  dump_stack_lvl+0x189/0x250
[  120.652935][ T5841]  ? __pfx_dump_stack_lvl+0x10/0x10
[  120.652950][ T5841]  ? __pfx_queue_work_on+0x10/0x10
[  120.652962][ T5841]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  120.652976][ T5841]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  120.653000][ T5841]  f2fs_handle_critical_error+0x37c/0x540
[  120.653022][ T5841]  f2fs_write_end_io+0x886/0xb60
[  120.653062][ T5841]  __submit_merged_bio+0x27a/0x6a0
[  120.653084][ T5841]  __submit_merged_write_cond+0x255/0x530
[  120.653104][ T5841]  f2fs_write_data_pages+0x261d/0x3000
[  120.653120][ T5841]  ? __lock_acquire+0xab9/0xd20
[  120.653192][ T5841]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  120.653246][ T5841]  ? check_path+0x21/0x40
[  120.653259][ T5841]  ? check_noncircular+0xe0/0x160
[  120.653311][ T5841]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  120.653329][ T5841]  do_writepages+0x32e/0x550
[  120.653356][ T5841]  ? do_raw_spin_unlock+0x4d/0x240
[  120.653375][ T5841]  filemap_fdatawrite+0x199/0x240
[  120.653392][ T5841]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  120.653445][ T5841]  ? do_raw_spin_unlock+0x4d/0x240
[  120.653464][ T5841]  f2fs_sync_dirty_inodes+0x31f/0x830
[  120.653493][ T5841]  f2fs_write_checkpoint+0x95a/0x1df0
[  120.653533][ T5841]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  120.653592][ T5841]  ? kill_f2fs_super+0x298/0x6c0
[  120.653614][ T5841]  kill_f2fs_super+0x2c3/0x6c0
[  120.653636][ T5841]  ? __pfx_kill_f2fs_super+0x10/0x10
[  120.653652][ T5841]  ? radix_tree_delete_item+0x2b6/0x400
[  120.653673][ T5841]  ? shrinker_free+0x2ce/0x3e0
[  120.653690][ T5841]  deactivate_locked_super+0xbc/0x130
[  120.653707][ T5841]  cleanup_mnt+0x425/0x4c0
[  120.653721][ T5841]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.653738][ T5841]  task_work_run+0x1d4/0x260
[  120.653757][ T5841]  ? __pfx_task_work_run+0x10/0x10
[  120.653771][ T5841]  ? __x64_sys_umount+0x122/0x160
[  120.653792][ T5841]  ? exit_to_user_mode_loop+0x40/0x110
[  120.653814][ T5841]  exit_to_user_mode_loop+0xec/0x110
[  120.653831][ T5841]  do_syscall_64+0x2bd/0x3b0
[  120.653845][ T5841]  ? lockdep_hardirqs_on+0x9c/0x150
[  120.653859][ T5841]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.653871][ T5841]  ? exc_page_fault+0x9f/0xf0
[  120.653887][ T5841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  120.653899][ T5841] RIP: 0033:0x7fbeaa38ff17
[  120.653912][ T5841] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  120.653922][ T5841] RSP: 002b:00007fffc09eb0a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  120.653936][ T5841] RAX: 0000000000000000 RBX: 00007fbeaa411c05 RCX: 00007fbeaa38ff17
[  120.653944][ T5841] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffc09eb160
[  120.653951][ T5841] RBP: 00007fffc09eb160 R08: 0000000000000000 R09: 0000000000000000
[  120.653959][ T5841] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffc09ec1f0
[  120.653966][ T5841] R13: 00007fbeaa411c05 R14: 000000000001d678 R15: 00007fffc09ec230
[  120.653988][ T5841]  </TASK>
[  120.653995][ T5841] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  120.655616][ T7599] ubi31: scanning is finished
[  120.775325][ T7599] ubi31: empty MTD device detected
[  120.843011][ T7599] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB)
[  120.845779][ T7599] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes
[  120.848720][ T7599] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1
[  120.851285][ T7599] ubi31: VID header offset: 64 (aligned 64), data offset: 128
[  120.854056][ T7599] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0
[  120.856240][ T7599] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23
[  120.858892][ T7599] ubi31: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 4053174796
[  120.862339][ T7599] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0
[  120.865721][ T7605] ubi31: background thread "ubi_bgt31d" started, PID 7605
[  122.038312][ T7613] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  122.158442][ T7618] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  123.435127][ T7634] loop1: detected capacity change from 0 to 32768
[  123.490308][   T10] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  123.650128][   T10] usb 1-1: Using ep0 maxpacket: 8
[  123.654108][   T10] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  123.657636][   T10] usb 1-1: config 0 has no interface number 0
[  123.662522][   T10] usb 1-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.1d
[  123.666356][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.669750][   T10] usb 1-1: Product: syz
[  123.671675][   T10] usb 1-1: Manufacturer: syz
[  123.673658][   T10] usb 1-1: SerialNumber: syz
[  123.678441][   T10] usb 1-1: config 0 descriptor??
[  123.686624][   T10] usb 1-1: selecting invalid altsetting 2
[  123.689011][   T10] i2c-cp2615 1-1:0.1: probe with driver i2c-cp2615 failed with error -22
[  123.891978][   T10] usb 1-1: USB disconnect, device number 12
[  124.097032][ T7636] loop1: detected capacity change from 0 to 1024
[  124.122089][ T7636] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.134882][ T7636] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: inode #11: comm syz.1.690: missing EA_INODE flag
[  124.144666][ T7636] EXT4-fs (loop1): Remounting filesystem read-only
[  124.173169][ T5841] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.716450][ T7656] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate.
[  125.344920][ T7676] block nbd0: NBD_DISCONNECT
[  125.741397][   T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  125.857239][ T7689] bond0: entered promiscuous mode
[  125.858907][ T7689] bond_slave_0: entered promiscuous mode
[  125.862718][ T7689] bond_slave_1: entered promiscuous mode
[  125.866220][ T7689] batadv0: entered promiscuous mode
[  125.869766][ T7689] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network
[  125.874693][ T7689] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network
[  125.879581][ T7689] 8021q: adding VLAN 0 to HW filter on device hsr1
[  125.890249][   T10] usb 1-1: Using ep0 maxpacket: 8
[  125.893564][   T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  125.897322][   T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  125.904507][   T10] usb 1-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  125.907942][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.927782][   T10] usb 1-1: config 0 descriptor??
[  125.954510][ T7691] loop1: detected capacity change from 0 to 1024
[  126.001376][ T7691] hfsplus: inconsistency in B*Tree (9,1,255,1,0)
[  126.004290][ T7691] hfsplus: xattr searching failed
[  126.034453][ T7691] loop1: detected capacity change from 1024 to 64
[  126.038987][   T32] kworker/u9:1: attempt to access beyond end of device
[  126.038987][   T32] loop1: rw=1, sector=206, nr_sectors = 8 limit=64
[  126.047383][   T32] hfsplus: b-tree write err: -5, ino 4
[  126.049483][   T32] kworker/u9:1: attempt to access beyond end of device
[  126.049483][   T32] loop1: rw=2049, sector=206, nr_sectors = 8 limit=64
[  126.068522][ T5841] hfsplus: bad catalog entry type
[  126.114442][ T3607] kworker/u10:4: attempt to access beyond end of device
[  126.114442][ T3607] loop1: rw=1, sector=206, nr_sectors = 8 limit=64
[  126.119706][ T3607] hfsplus: b-tree write err: -5, ino 4
[  126.351521][   T10] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0
[  126.354443][   T10] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0
[  126.358628][   T10] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0
[  126.364004][   T10] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0
[  126.366923][   T10] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x7
[  126.369867][   T10] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0
[  126.372788][   T10] hid-rmi 0003:06CB:81A7.0006: unknown main item tag 0x0
[  126.378066][   T10] hid-rmi 0003:06CB:81A7.0006: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.0-1/input0
[  126.500380][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  126.504398][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  126.508318][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  126.512616][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  126.515444][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  126.562752][ T5896] usb 1-1: USB disconnect, device number 13
[  126.645145][ T7693] chnl_net:caif_netlink_parms(): no params data found
[  126.694104][ T7693] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.696500][ T7693] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.698832][ T7693] bridge_slave_0: entered allmulticast mode
[  126.702636][ T7693] bridge_slave_0: entered promiscuous mode
[  126.706221][ T7693] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.708506][ T7693] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.711254][ T7693] bridge_slave_1: entered allmulticast mode
[  126.714140][ T7693] bridge_slave_1: entered promiscuous mode
[  126.735239][ T7693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.740478][ T7693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.759226][ T7693] team0: Port device team_slave_0 added
[  126.763540][ T7693] team0: Port device team_slave_1 added
[  126.782358][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.784766][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.793951][ T7693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.798381][ T7693] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.801408][ T7693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.809787][ T7693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.835882][ T7693] hsr_slave_0: entered promiscuous mode
[  126.838296][ T7693] hsr_slave_1: entered promiscuous mode
[  126.840527][ T7693] debugfs: 'hsr0' already exists in 'hsr'
[  126.842351][ T7693] Cannot create hsr debugfs directory
[  126.940515][ T7693] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  126.946523][ T7693] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  126.951066][ T7693] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  126.955941][ T7693] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  126.977482][ T7693] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.979877][ T7693] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.983319][ T7693] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.985629][ T7693] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.025255][ T7693] 8021q: adding VLAN 0 to HW filter on device bond0
[  127.036019][   T82] bridge0: port 1(bridge_slave_0) entered disabled state
[  127.038834][   T82] bridge0: port 2(bridge_slave_1) entered disabled state
[  127.047167][ T7693] 8021q: adding VLAN 0 to HW filter on device team0
[  127.053744][   T82] bridge0: port 1(bridge_slave_0) entered blocking state
[  127.055998][   T82] bridge0: port 1(bridge_slave_0) entered forwarding state
[  127.072760][   T82] bridge0: port 2(bridge_slave_1) entered blocking state
[  127.075479][   T82] bridge0: port 2(bridge_slave_1) entered forwarding state
[  127.236946][ T7693] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.267873][ T7693] veth0_vlan: entered promiscuous mode
[  127.275580][ T7693] veth1_vlan: entered promiscuous mode
[  127.291643][ T7693] veth0_macvtap: entered promiscuous mode
[  127.297646][ T7693] veth1_macvtap: entered promiscuous mode
[  127.308949][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.316948][ T7693] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.324451][ T5716] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.330264][ T5716] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.335381][ T5716] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.339161][ T5716] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.393827][   T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.397181][   T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.419358][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.423362][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.450285][ T5887] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  127.569195][ T7723] loop3: detected capacity change from 0 to 2048
[  127.600230][ T5887] usb 1-1: Using ep0 maxpacket: 32
[  127.605471][ T6131]  loop3: p1 p2 p3 < > p4 < p5 p6 >
[  127.608150][ T6131] loop3: partition table partially beyond EOD, truncated
[  127.611274][ T5887] usb 1-1: config 0 interface 0 has no altsetting 0
[  127.613618][ T6131] loop3: p1 start 458755 is beyond EOD, truncated
[  127.615973][ T6131] loop3: p2 start 16908804 is beyond EOD, truncated
[  127.618307][ T6131] loop3: p3 start 4284289 is beyond EOD, truncated
[  127.622747][ T5887] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  127.626791][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.629760][ T6131] loop3: p5 start 458755 is beyond EOD, truncated
[  127.632501][ T5887] usb 1-1: Product: syz
[  127.633862][ T5887] usb 1-1: Manufacturer: syz
[  127.635289][ T6131] loop3: p6 start 16908804 is beyond EOD, truncated
[  127.635436][ T5887] usb 1-1: SerialNumber: syz
[  127.642798][ T5887] usb 1-1: config 0 descriptor??
[  127.652551][ T7723]  loop3: p1 p2 p3 < > p4 < p5 p6 >
[  127.654726][ T7723] loop3: partition table partially beyond EOD, truncated
[  127.657912][ T7723] loop3: p1 start 458755 is beyond EOD, truncated
[  127.661537][ T7723] loop3: p2 start 16908804 is beyond EOD, truncated
[  127.664130][ T7723] loop3: p3 start 4284289 is beyond EOD, truncated
[  127.668924][ T7723] loop3: p5 start 458755 is beyond EOD, truncated
[  127.674976][ T7723] loop3: p6 start 16908804 is beyond EOD, truncated
[  127.749959][ T6131] udevd[6131]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  127.792735][ T6131] udevd[6131]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  128.052424][ T5887] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  128.160240][    T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  128.255809][ T5887] gs_usb 1-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  128.260673][ T5887] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -22
[  128.313267][    T9] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  128.317846][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  128.322986][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  128.327592][    T9] usb 4-1: New USB device found, idVendor=1294, idProduct=1320, bcdDevice= 0.00
[  128.332552][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  128.338845][    T9] usb 4-1: config 0 descriptor??
[  128.458760][ T5887] usb 1-1: USB disconnect, device number 14
[  128.550361][ T5848] Bluetooth: hci0: command tx timeout
[  128.755789][    T9] hid-led 0003:1294:1320.0007: hidraw0: USB HID v0.00 Device [HID 1294:1320] on usb-dummy_hcd.3-1/input0
[  128.770151][    T9] hid-led 0003:1294:1320.0007: Riso Kagaku Webmail Notifier initialized
[  128.956553][ T5887] usb 4-1: USB disconnect, device number 2
[  128.968831][ T5716] leds riso_kagaku0:blue: Setting an LED's brightness failed (-38)
[  128.981934][ T5716] leds riso_kagaku0:green: Setting an LED's brightness failed (-38)
[  128.994069][ T5716] leds riso_kagaku0:red: Setting an LED's brightness failed (-38)
[  129.105392][ T7738] overlayfs: empty lowerdir
[  129.356152][ T7744] loop0: detected capacity change from 0 to 32768
[  129.363531][ T7744] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.733 (7744)
[  129.374584][ T7744] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.378024][ T7744] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  129.383025][ T7744] BTRFS info (device loop0): disk space caching is enabled
[  129.385573][ T7744] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  129.436540][ T7744] BTRFS info (device loop0): rebuilding free space tree
[  129.452602][ T7744] BTRFS info (device loop0): disabling free space tree
[  129.455587][ T7744] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  129.462594][ T7744] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  129.515322][ T7762] Bluetooth: MGMT ver 1.23
[  129.603434][ T5853] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  129.790170][ T5900] usb 4-1: new low-speed USB device number 3 using dummy_hcd
[  129.942525][ T5900] usb 4-1: unable to get BOS descriptor or descriptor too short
[  129.947957][ T5900] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  129.952835][ T5900] usb 4-1: config 1 interface 0 altsetting 7 endpoint 0x82 is Bulk; changing to Interrupt
[  129.957037][ T5900] usb 4-1: config 1 interface 0 altsetting 7 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  129.963156][ T5900] usb 4-1: config 1 interface 0 has no altsetting 0
[  129.972921][ T5900] usb 4-1: string descriptor 0 read error: -22
[  129.975722][ T5900] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  129.979554][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.993779][ T7764] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  129.996923][ T7764] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  130.000262][ T7764] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  130.005344][ T5900] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[  130.037594][ T7774] loop0: detected capacity change from 0 to 32768
[  130.043323][ T7774] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.739 (7774)
[  130.071645][ T7774] BTRFS info (device loop0): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  130.075028][ T7774] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  130.078053][ T7774] BTRFS info (device loop0): using free-space-tree
[  130.140220][ T5853] BTRFS info (device loop0): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  130.218984][ T5896] usb 4-1: USB disconnect, device number 3
[  130.427750][ T5238] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  130.432074][ T5238] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  130.436574][ T5238] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  130.446744][ T5238] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  130.454775][ T5238] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  130.600303][ T7800] chnl_net:caif_netlink_parms(): no params data found
[  130.620721][ T5238] Bluetooth: hci0: command tx timeout
[  130.621848][ T5873] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.674505][ T7800] bridge0: port 1(bridge_slave_0) entered blocking state
[  130.676982][ T7800] bridge0: port 1(bridge_slave_0) entered disabled state
[  130.679392][ T7800] bridge_slave_0: entered allmulticast mode
[  130.682718][ T7800] bridge_slave_0: entered promiscuous mode
[  130.687485][ T7800] bridge0: port 2(bridge_slave_1) entered blocking state
[  130.689822][ T7800] bridge0: port 2(bridge_slave_1) entered disabled state
[  130.695804][ T7800] bridge_slave_1: entered allmulticast mode
[  130.698649][ T7800] bridge_slave_1: entered promiscuous mode
[  130.721078][ T5873] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.756367][ T7800] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  130.770281][ T7800] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  130.809299][ T5873] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.884884][ T5873] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.893065][ T7800] team0: Port device team_slave_0 added
[  130.896655][ T7800] team0: Port device team_slave_1 added
[  130.914799][ T7800] batman_adv: batadv0: Adding interface: batadv_slave_0
[  130.917426][ T7800] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.930137][ T7800] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  130.935961][ T7800] batman_adv: batadv0: Adding interface: batadv_slave_1
[  130.938848][ T7800] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  130.949562][ T7800] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  130.990708][ T7800] hsr_slave_0: entered promiscuous mode
[  130.993722][ T7800] hsr_slave_1: entered promiscuous mode
[  130.996480][ T7800] debugfs: 'hsr0' already exists in 'hsr'
[  130.998802][ T7800] Cannot create hsr debugfs directory
[  131.090144][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  131.110791][ T5873] bridge_slave_1: left allmulticast mode
[  131.113081][ T5873] bridge_slave_1: left promiscuous mode
[  131.116637][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.128002][ T5873] bridge_slave_0: left allmulticast mode
[  131.130048][ T5873] bridge_slave_0: left promiscuous mode
[  131.132133][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.233539][ T5900] kernel write not supported for file /569/loginuid (pid: 5900 comm: kworker/0:4)
[  131.251405][   T10] usb 4-1: Using ep0 maxpacket: 8
[  131.261005][   T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 17
[  131.271779][   T10] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=c8.07
[  131.275064][   T10] usb 4-1: New USB device strings: Mfr=209, Product=185, SerialNumber=60
[  131.277805][   T10] usb 4-1: Product: syz
[  131.285569][   T10] usb 4-1: Manufacturer: syz
[  131.288067][   T10] usb 4-1: SerialNumber: syz
[  131.299335][   T10] usb 4-1: config 0 descriptor??
[  131.506794][   T10] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  131.531974][ T5873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  131.539870][ T5873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  131.545311][ T5873] bond0 (unregistering): Released all slaves
[  131.617664][ T5873] tipc: Left network mode
[  131.681976][ T7800] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  131.687436][ T7800] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  131.692460][ T7800] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  131.697784][ T7800] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  132.088052][ T7800] 8021q: adding VLAN 0 to HW filter on device bond0
[  132.105298][ T7800] 8021q: adding VLAN 0 to HW filter on device team0
[  132.115792][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  132.118690][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  132.148389][ T5873] hsr_slave_0: left promiscuous mode
[  132.154037][ T5873] hsr_slave_1: left promiscuous mode
[  132.156830][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.159835][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.166833][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.171650][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.194338][ T5873] veth1_macvtap: left promiscuous mode
[  132.196832][ T5873] veth0_macvtap: left promiscuous mode
[  132.199316][ T5873] veth1_vlan: left promiscuous mode
[  132.201770][ T5873] veth0_vlan: left promiscuous mode
[  132.504604][ T5873] team0 (unregistering): Port device team_slave_1 removed
[  132.534816][ T5873] team0 (unregistering): Port device team_slave_0 removed
[  132.541702][ T5238] Bluetooth: hci3: command tx timeout
[  132.641371][ T7838] netlink: 8 bytes leftover after parsing attributes in process `syz.0.751'.
[  132.714737][ T5238] Bluetooth: hci0: command tx timeout
[  132.781490][   T10] gspca_sunplus: reg_w_riv err -71
[  132.783910][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.786352][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.790693][   T10] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  132.796878][   T10] usb 4-1: USB disconnect, device number 4
[  132.859679][ T7845] netlink: 4 bytes leftover after parsing attributes in process `syz.0.754'.
[  133.009910][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.012453][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  133.142747][ T7715] usb 1-1: new full-speed USB device number 15 using dummy_hcd
[  133.271429][ T7800] 8021q: adding VLAN 0 to HW filter on device batadv0
[  133.338954][ T7862] loop3: detected capacity change from 0 to 64
[  133.343222][ T7715] usb 1-1: unable to get BOS descriptor or descriptor too short
[  133.353834][ T7715] usb 1-1: not running at top speed; connect to a high speed hub
[  133.362167][ T7715] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  133.369240][ T7715] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  133.374197][ T7715] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  133.392177][ T7715] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  133.399134][ T7715] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.402642][ T7715] usb 1-1: Product: syz
[  133.404106][ T7715] usb 1-1: Manufacturer: syz
[  133.407417][ T7715] usb 1-1: SerialNumber: syz
[  133.616645][ T7877] loop3: detected capacity change from 0 to 512
[  133.622702][ T7877] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  133.629315][ T7877] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=884ee02c, mo2=0102]
[  133.631614][ T7800] veth0_vlan: entered promiscuous mode
[  133.634977][ T7877] EXT4-fs (loop3): orphan cleanup on readonly fs
[  133.646328][ T7877] EXT4-fs error (device loop3): ext4_get_branch:178: inode #11: block 33619980: comm syz.3.759: invalid block
[  133.653937][ T7800] veth1_vlan: entered promiscuous mode
[  133.655448][ T7877] EXT4-fs (loop3): Remounting filesystem read-only
[  133.671649][ T7877] EXT4-fs (loop3): 1 truncate cleaned up
[  133.679848][ T7877] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  133.713364][ T7715] usb 1-1: USB disconnect, device number 15
[  133.761169][ T6131] udevd[6131]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  133.782914][ T7800] veth0_macvtap: entered promiscuous mode
[  133.792601][ T7693] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  133.793265][ T7800] veth1_macvtap: entered promiscuous mode
[  133.829255][ T7800] batman_adv: batadv0: Interface activated: batadv_slave_0
[  133.847444][ T7800] batman_adv: batadv0: Interface activated: batadv_slave_1
[  133.875395][ T5873] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  133.883821][ T5873] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  133.887220][ T5873] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  133.894609][ T7884] mmap: syz.3.760 (7884): VmData 37470208 exceed data ulimit 9868. Update limits or use boot option ignore_rlimit_data.
[  133.905842][ T5873] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  134.017192][   T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.020915][   T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.108914][   T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  134.115038][   T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  134.302836][ T7899] sp0: Synchronizing with TNC
[  134.324003][ T7902] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1
[  134.327953][ T7902] ref_ctr increment failed for inode: 0x7a offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8881083c2040
[  134.349063][ T7897] loop0: detected capacity change from 0 to 4096
[  134.376787][ T7897] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.411234][   T33] audit: type=1800 audit(1755105759.081:55): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.764" name="bus" dev="loop0" ino=18 res=0 errno=0
[  134.546102][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.620478][ T5238] Bluetooth: hci3: command tx timeout
[  134.784595][ T5238] Bluetooth: hci0: command tx timeout
[  135.244668][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.773'.
[  135.368478][ T7946] netlink: 12 bytes leftover after parsing attributes in process `syz.0.778'.
[  135.371833][ T7947] capability: warning: `syz.4.779' uses deprecated v2 capabilities in a way that may be insecure
[  135.383628][ T7947] program syz.4.779 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  135.574002][ T7960] loop3: detected capacity change from 0 to 256
[  135.584333][ T7960] exfat: Deprecated parameter 'utf8'
[  135.589055][ T7960] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d)
[  136.241949][ T7969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.785'.
[  136.440225][ T7969] netlink: 16 bytes leftover after parsing attributes in process `syz.4.785'.
[  136.640928][ T7979] tipc: Started in network mode
[  136.642881][ T7979] tipc: Node identity ac14140f, cluster identity 4711
[  136.646563][ T7979] tipc: New replicast peer: 255.255.255.255
[  136.654367][ T7979] tipc: Enabled bearer <udp:syz2>, priority 10
[  136.657231][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz.4.788'.
[  136.675179][ T7979] tipc: Disabling bearer <udp:syz2>
[  136.700425][ T5238] Bluetooth: hci3: command tx timeout
[  136.866464][ T7990] loop4: detected capacity change from 0 to 4096
[  136.903388][ T7990] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  138.585950][ T8037] netlink: 332 bytes leftover after parsing attributes in process `syz.3.808'.
[  138.590906][ T8037] netlink: 160 bytes leftover after parsing attributes in process `syz.3.808'.
[  138.781123][ T5848] Bluetooth: hci3: command tx timeout
[  138.899343][ T8050] loop4: detected capacity change from 0 to 256
[  138.908321][ T8050] exfat: Deprecated parameter 'utf8'
[  138.938283][ T8050] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xdd33351c, utbl_chksum : 0xe619d30d)
[  140.356957][ T8061] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4)
[  140.359303][ T8061] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  140.367402][ T8061] vhci_hcd vhci_hcd.0: Device attached
[  140.372001][ T8061] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  140.381501][ T8061] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  140.389288][ T8061] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  140.401922][ T8061] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  140.409487][ T8061] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  140.419926][ T8061] vhci_hcd vhci_hcd.0: pdev(3) rhport(6) sockfd(19)
[  140.422801][ T8061] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  140.426327][ T8061] vhci_hcd vhci_hcd.0: Device attached
[  140.445800][ T8061] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  140.453553][ T8061] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN
[  140.487292][ T8065] vhci_hcd: connection closed
[  140.488575][ T8062] vhci_hcd: connection closed
[  140.491016][   T12] vhci_hcd: stop threads
[  140.502110][   T12] vhci_hcd: release socket
[  140.505854][   T12] vhci_hcd: disconnect device
[  140.538127][   T12] vhci_hcd: stop threads
[  140.552271][ T5915] vhci_hcd: vhci_device speed not set
[  140.560231][   T12] vhci_hcd: release socket
[  140.563327][   T12] vhci_hcd: disconnect device
[  140.638553][ T5915] usb 39-1: new full-speed USB device number 2 using vhci_hcd
[  140.651696][ T5915] usb 39-1: enqueue for inactive port 0
[  140.696613][ T8071] netlink: 'syz.0.819': attribute type 4 has an invalid length.
[  140.726687][ T5915] vhci_hcd: vhci_device speed not set
[  140.848077][ T8076] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609)
[  140.852960][ T8076] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  140.870189][ T5848] Bluetooth: hci3: command 0x0405 tx timeout
[  141.065732][ T8061] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  141.714585][ T8083] loop3: detected capacity change from 0 to 32768
[  141.722563][ T8083] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.824 (8083)
[  141.745741][ T8083] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  141.749857][ T8083] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  141.763823][ T8083] BTRFS info (device loop3): using free-space-tree
[  142.138400][ T7693] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  142.405947][ T8124] loop4: detected capacity change from 0 to 4096
[  142.410422][ T8124] ntfs3(loop4): ino=3, Correct links count -> 2.
[  142.421796][ T8124] ntfs3(loop4): Failed to load $BadClus (-22).
[  142.882049][ T5915] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  142.921447][ T8150] input: syz1 as /devices/virtual/input/input11
[  143.060250][ T5915] usb 5-1: Using ep0 maxpacket: 8
[  143.112073][ T5915] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  143.116284][ T5915] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.147858][ T5915] usb 5-1: Product: syz
[  143.159414][ T5915] usb 5-1: Manufacturer: syz
[  143.172989][ T5915] usb 5-1: SerialNumber: syz
[  143.293496][ T5915] usb 5-1: config 0 descriptor??
[  143.549192][ T5915] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  144.082177][ T8161] netlink: 'syz.3.842': attribute type 4 has an invalid length.
[  144.301580][ T8166] loop3: detected capacity change from 0 to 128
[  144.329797][ T8166] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  144.336940][ T8166] ext4 filesystem being mounted at /43/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  144.353587][ T8166] EXT4-fs error (device loop3): ext4_check_dx_root:2203: inode #2: comm syz.3.844: Corrupt dir, invalid name for '.', running e2fsck is recommended
[  144.396366][ T7693] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  145.037584][ T8175] bond0: option xmit_hash_policy: invalid value (8)
[  145.063236][ T5915] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  145.074050][ T5915] usb 5-1: USB disconnect, device number 2
[  146.478961][ T8230] loop3: detected capacity change from 0 to 1024
[  146.520295][   T33] audit: type=1800 audit(1755105771.181:56): pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.865" name="file1" dev="loop3" ino=20 res=0 errno=0
[  146.542699][ T8232] loop4: detected capacity change from 0 to 2048
[  146.603998][ T8232] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  146.745273][ T8245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.871'.
[  146.750729][ T8244] syz.0.872 (8244): /proc/8242/oom_adj is deprecated, please use /proc/8242/oom_score_adj instead.
[  146.780280][ T8245] vlan2: entered allmulticast mode
[  146.782153][ T8245] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode
[  146.831549][ T8251] loop3: detected capacity change from 0 to 512
[  146.841649][ T8251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  146.897790][ T7693] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.115365][ T8258] loop3: detected capacity change from 0 to 32768
[  147.128536][ T8258] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  147.138568][ T8258] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  147.184527][ T7693] ocfs2: Unmounting device (7,3) on (node local)
[  147.422199][ T8272] netlink: 'syz.4.883': attribute type 12 has an invalid length.
[  147.424941][ T8272] netlink: 'syz.4.883': attribute type 29 has an invalid length.
[  147.427783][ T8272] netlink: 'syz.4.883': attribute type 2 has an invalid length.
[  147.432603][ T8272] netlink: 'syz.4.883': attribute type 2 has an invalid length.
[  147.435339][ T8272] netlink: 'syz.4.883': attribute type 1 has an invalid length.
[  147.438034][ T8272] netlink: 'syz.4.883': attribute type 37 has an invalid length.
[  147.448983][ T8272] netlink: 'syz.4.883': attribute type 2 has an invalid length.
[  147.460529][ T8272] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.462852][ T8272] netlink: 59 bytes leftover after parsing attributes in process `syz.4.883'.
[  147.565382][ T8283] ip6erspan0: entered promiscuous mode
[  147.875972][ T8297] loop0: detected capacity change from 0 to 32768
[  147.887393][ T8297] JBD2: Unrecognised features on journal
[  147.889767][ T8297] (syz.0.892,8297,0):ocfs2_journal_init:973 ERROR: Linux journal layer error
[  147.894071][ T8297] (syz.0.892,8297,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[  147.898097][ T8297] (syz.0.892,8297,0):ocfs2_check_volume:2432 ERROR: status = -22
[  147.901798][ T8297] (syz.0.892,8297,0):ocfs2_mount_volume:1764 ERROR: status = -22
[  147.907860][ T8297] (syz.0.892,8297,0):ocfs2_fill_super:1177 ERROR: status = -22
[  148.122311][ T8302] netlink: 32 bytes leftover after parsing attributes in process `syz.0.894'.
[  148.538045][ T8324] netlink: 24 bytes leftover after parsing attributes in process `syz.4.900'.
[  148.640273][ T5915] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  148.939439][ T8347] netlink: 512 bytes leftover after parsing attributes in process `syz.4.907'.
[  149.201566][ T8336] loop3: detected capacity change from 0 to 131072
[  149.209284][ T8336] F2FS-fs (loop3): Test dummy encryption mode enabled
[  149.213283][ T8336] F2FS-fs (loop3): invalid crc value
[  149.248803][ T8336] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  149.258081][ T8336] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  149.269518][ T8336] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  149.281764][   T33] audit: type=1800 audit(1755105773.951:57): pid=8336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.904" name="file1" dev="loop3" ino=10 res=0 errno=0
[  149.301809][ T5915] usb 1-1: Using ep0 maxpacket: 16
[  149.307860][ T5915] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  149.312779][   T33] audit: type=1804 audit(1755105773.981:58): pid=8336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.904" name="/newroot/68/bus/file1" dev="loop3" ino=10 res=1 errno=0
[  149.315128][ T5915] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  149.323882][ T5915] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  149.342183][ T5915] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  149.345210][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  149.347804][ T5915] usb 1-1: Product: syz
[  149.349205][ T5915] usb 1-1: Manufacturer: syz
[  149.360153][ T5915] usb 1-1: SerialNumber: syz
[  149.869398][ T5915] usb 1-1: 0:2 : does not exist
[  150.488076][ T5915] usb 1-1: 1:0: failed to get current value for ch 0 (-22)
[  150.497734][ T8390] netlink: 12 bytes leftover after parsing attributes in process `syz.4.918'.
[  150.504730][ T5915] usb 1-1: USB disconnect, device number 16
[  150.510296][    T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  150.541895][ T6131] udevd[6131]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  150.681920][    T9] usb 4-1: Using ep0 maxpacket: 32
[  150.700421][    T9] usb 4-1: config 0 has an invalid interface number: 126 but max is 0
[  150.703924][    T9] usb 4-1: config 0 has no interface number 0
[  150.710643][    T9] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x6 has invalid maxpacket 1023
[  150.716585][    T9] usb 4-1: config 0 interface 126 altsetting 16 bulk endpoint 0x82 has invalid maxpacket 8
[  150.724180][    T9] usb 4-1: config 0 interface 126 has no altsetting 0
[  150.733457][    T9] usb 4-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice=b0.1c
[  150.738380][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.742692][    T9] usb 4-1: Product: syz
[  150.744553][    T9] usb 4-1: Manufacturer: syz
[  150.746476][    T9] usb 4-1: SerialNumber: syz
[  150.753443][    T9] usb 4-1: config 0 descriptor??
[  150.756396][ T8379] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  150.759725][ T8379] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  150.893720][ T8406] loop4: detected capacity change from 0 to 2048
[  150.915691][ T8406] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  151.173197][    T9] ir_usb 4-1:0.126: IR Dongle converter detected
[  151.233150][ T8418] loop4: detected capacity change from 0 to 4096
[  151.247712][ T8418] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  151.299274][ T8418] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  151.390663][    T9] usb 4-1: IR Dongle converter now attached to ttyUSB0
[  151.397573][ T8426] loop4: detected capacity change from 0 to 8
[  151.405204][ T8426] SQUASHFS error: Failed to read block 0x738: -5
[  151.407449][ T8426] SQUASHFS error: Unable to read metadata cache entry [736]
[  151.492671][ T8430] loop4: detected capacity change from 0 to 2048
[  151.581547][    T9] usb 4-1: USB disconnect, device number 5
[  151.595177][    T9] ir-usb ttyUSB0: IR Dongle converter now disconnected from ttyUSB0
[  151.603920][    T9] ir_usb 4-1:0.126: device disconnected
[  151.767082][ T8433] loop0: detected capacity change from 0 to 32768
[  151.913880][ T8439] netlink: 4 bytes leftover after parsing attributes in process `syz.4.940'.
[  151.950175][ T8441] loop0: detected capacity change from 0 to 256
[  151.958354][ T8441] exFAT-fs (loop0): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  152.016342][ T8443] openvswitch: netlink: Message has 1 unknown bytes.
[  152.965953][ T8463] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  152.982532][ T8463] iommufd_mock iommufd_mock1: Adding to iommu group 1
[  153.137145][ T8453] syz.3.946 (8453) used greatest stack depth: 19192 bytes left
[  153.543598][ T8473] loop0: detected capacity change from 0 to 512
[  153.554349][ T8473] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  153.572338][ T8473] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0002]
[  153.576204][ T8473] System zones: 1-12
[  153.593466][ T8473] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  153.610191][ T8473] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #11: comm syz.0.954: corrupted inode contents
[  153.618637][ T8473] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #11: comm syz.0.954: mark_inode_dirty error
[  153.625261][ T8473] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.954: invalid indirect mapped block 1 (level 1)
[  153.632047][ T8473] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #11: comm syz.0.954: corrupted inode contents
[  153.643076][ T8473] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  153.647771][ T8473] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #11: comm syz.0.954: corrupted inode contents
[  153.654621][ T8473] EXT4-fs error (device loop0): ext4_truncate:4666: inode #11: comm syz.0.954: mark_inode_dirty error
[  153.660256][ T8473] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  153.672094][ T8473] EXT4-fs (loop0): 1 truncate cleaned up
[  153.680555][ T8473] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.847151][ T8487] loop3: detected capacity change from 0 to 64
[  153.849515][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.012557][ T8494] netlink: 12 bytes leftover after parsing attributes in process `syz.0.963'.
[  154.469931][ T8502] loop0: detected capacity change from 0 to 32768
[  154.552245][ T8502] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  154.587891][ T8502] XFS (loop0): Ending clean mount
[  154.645272][ T8520] loop3: detected capacity change from 0 to 2048
[  154.657983][   T33] audit: type=1800 audit(1755105779.321:59): pid=8502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.967" name="file1" dev="loop0" ino=6150 res=0 errno=0
[  154.689943][ T8520] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  154.725024][ T8520] EXT4-fs error (device loop3): ext4_find_extent:939: inode #2: comm syz.3.972: pblk 256 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(4)
[  154.743210][ T8520] EXT4-fs (loop3): Remounting filesystem read-only
[  154.758387][ T5853] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  154.763187][ T7693] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.909883][ T8527] overlayfs: failed to decode file handle (len=4, type=251, flags=0, err=-22)
[  155.045893][ T8536] netlink: 132 bytes leftover after parsing attributes in process `syz.0.978'.
[  155.117315][ T8539] loop0: detected capacity change from 0 to 2048
[  155.126673][ T8539] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=3932051, location=3932051
[  155.141383][ T8543] netlink: 'syz.3.982': attribute type 10 has an invalid length.
[  155.149126][ T8543] bridge0: port 3(netdevsim0) entered blocking state
[  155.154120][ T8543] bridge0: port 3(netdevsim0) entered disabled state
[  155.159451][ T8543] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  155.160950][ T8539] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  155.171464][ T8543] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  155.290797][ T8551] loop0: detected capacity change from 0 to 512
[  155.294314][ T8551] EXT4-fs: Ignoring removed oldalloc option
[  155.295787][   T33] audit: type=1326 audit(1755105779.961:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.3.987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62fd38ebe9 code=0x7ffc0000
[  155.318877][   T33] audit: type=1326 audit(1755105779.971:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.3.987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62fd38ebe9 code=0x7ffc0000
[  155.322408][ T8551] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.986: Parent and EA inode have the same ino 15
[  155.349473][   T33] audit: type=1326 audit(1755105779.971:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.3.987" exe="/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f62fd38ebe9 code=0x7ffc0000
[  155.356880][ T8551] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.986: Parent and EA inode have the same ino 15
[  155.374407][   T33] audit: type=1326 audit(1755105779.971:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.3.987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62fd38ebe9 code=0x7ffc0000
[  155.383830][ T8551] EXT4-fs (loop0): 1 orphan inode deleted
[  155.386519][ T8551] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.390588][   T33] audit: type=1326 audit(1755105779.971:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8552 comm="syz.3.987" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f62fd38ebe9 code=0x7ffc0000
[  155.400548][ T8551] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.0.986: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[  155.435051][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.480281][   T10] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  155.504812][ T8561] loop0: detected capacity change from 0 to 256
[  155.512079][ T8561] exfat: Deprecated parameter 'namecase'
[  155.527071][ T8561] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  155.642122][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  155.646826][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.662216][   T10] usb 5-1: New USB device found, idVendor=0419, idProduct=0001, bcdDevice= 0.00
[  155.671360][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.683283][   T10] usb 5-1: config 0 descriptor??
[  156.040217][ T7715] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  156.122617][   T10] samsung 0003:0419:0001.0008: item 0 2 0 8 parsing failed
[  156.129763][   T10] samsung 0003:0419:0001.0008: parse failed
[  156.135542][   T10] samsung 0003:0419:0001.0008: probe with driver samsung failed with error -22
[  156.202399][ T7715] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  156.210085][ T7715] usb 4-1: config 0 interface 0 has no altsetting 0
[  156.215359][ T7715] usb 4-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  156.219528][ T7715] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.223670][ T7715] usb 4-1: Product: syz
[  156.225416][ T7715] usb 4-1: Manufacturer: syz
[  156.227401][ T7715] usb 4-1: SerialNumber: syz
[  156.234335][ T7715] usb 4-1: config 0 descriptor??
[  156.248691][ T7715] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  156.269674][ T7715] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  156.276512][ T7715] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  156.280536][ T7715] usb 4-1: media controller created
[  156.312660][ T7715] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  156.326601][   T10] usb 5-1: USB disconnect, device number 3
[  156.378636][ T7715] DVB: Unable to find symbol tda10046_attach()
[  156.387069][ T7715] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  156.391022][ T7715] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  156.536643][ T8584] loop0: detected capacity change from 0 to 64
[  156.566214][ T8584] BFS-fs: bfs_fill_super(): loop0 is unclean, continuing
[  156.660470][ T7715] dvb_usb_m920x 4-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  156.680933][ T7715] usb 4-1: USB disconnect, device number 6
[  156.723212][ T8588] netlink: 'syz.0.1003': attribute type 1 has an invalid length.
[  156.888941][ T8592] loop4: detected capacity change from 0 to 512
[  156.918446][ T8592] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.926286][ T8592] ext4 filesystem being mounted at /83/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  156.951140][ T7800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.990220][ T5915] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  157.138524][ T8605] loop4: detected capacity change from 0 to 1024
[  157.141840][ T5915] usb 1-1: Using ep0 maxpacket: 32
[  157.146007][ T5915] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  157.149342][ T5915] usb 1-1: config 0 has no interface number 0
[  157.152875][ T5915] usb 1-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[  157.165530][ T5915] usb 1-1: config 0 interface 1 has no altsetting 0
[  157.170912][ T5915] usb 1-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[  157.182736][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.186840][   T27] hfsplus: b-tree write err: -5, ino 4
[  157.213596][ T5915] usb 1-1: Product: syz
[  157.216400][ T5915] usb 1-1: Manufacturer: syz
[  157.218315][ T5915] usb 1-1: SerialNumber: syz
[  157.231133][ T5915] usb 1-1: config 0 descriptor??
[  157.257606][ T8607] loop3: detected capacity change from 0 to 1024
[  157.276740][ T8607] hfsplus: inconsistency in B*Tree (128,1,255,1,0)
[  157.448589][ T5915] cx231xx 1-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[  157.454818][ T5915] cx231xx 1-1:0.1: Not found matching IAD interface
[  157.458684][ T5915] usb 1-1: USB disconnect, device number 17
[  157.843660][   T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  158.002702][   T10] usb 5-1: New USB device found, idVendor=03da, idProduct=2820, bcdDevice=52.3c
[  158.007625][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.013554][   T10] usb 5-1: config 0 descriptor??
[  158.018180][   T10] usb 5-1: bad CDC descriptors
[  158.111215][ T8615] loop0: detected capacity change from 0 to 2048
[  158.123233][ T8615] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  158.252104][   T10] usb 5-1: USB disconnect, device number 4
[  159.735299][ T8653] loop3: detected capacity change from 0 to 512
[  159.747085][ T8653] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  159.781075][ T8653] EXT4-fs (loop3): 1 truncate cleaned up
[  159.784668][ T8653] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  159.864766][ T7693] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.001360][ T8667] tmpfs: Bad value for 'nr_blocks'
[  160.019909][ T8665] loop3: detected capacity change from 0 to 4096
[  160.031084][ T8665] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  160.052124][ T8665] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  160.056879][ T8665] ntfs3(loop3): Failed to load root (-22).
[  160.299381][ T8671] loop0: detected capacity change from 0 to 32768
[  160.311206][ T8671] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  160.331908][ T8671] XFS (loop0): Ending clean mount
[  160.337762][ T8671] XFS (loop0): Quotacheck needed: Please wait.
[  160.351904][ T8671] XFS (loop0): Quotacheck: Done.
[  160.377909][ T5853] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  160.432192][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  160.581597][   T10] usb 4-1: Using ep0 maxpacket: 16
[  160.594153][   T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  160.598763][   T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  160.604830][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  160.607770][   T10] usb 4-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[  160.613658][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  160.619270][   T10] usb 4-1: config 0 descriptor??
[  160.643430][ T8689] loop0: detected capacity change from 0 to 4096
[  160.662600][ T8689] ntfs3(loop0): ino=0, ni_load_mi_ex
[  160.671440][ T8689] ntfs3(loop0): ino=0, ni_load_mi_ex
[  160.675360][ T8689] ntfs3(loop0): Failed to load $MFT (-22).
[  160.884856][ T8697] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1048'.
[  161.074219][   T10] hid (null): usage index exceeded
[  161.076195][   T10] hid (null): usage index exceeded
[  161.078675][   T10] hid (null): unknown global tag 0x53
[  161.369238][   T10] usb 4-1: USB disconnect, device number 7
[  161.902586][ T5848] Bluetooth: hci2: unexpected event for opcode 0x2019
[  161.915367][ T8708] loop0: detected capacity change from 0 to 2048
[  161.932500][ T8708] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  162.329528][ T8717] loop4: detected capacity change from 0 to 32768
[  162.332569][ T8717] XFS: ikeep mount option is deprecated.
[  162.352020][   T33] audit: type=1800 audit(1755105787.011:65): pid=8711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1051" name="bus" dev="loop0" ino=1367 res=0 errno=0
[  162.403828][ T8717] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  162.431380][ T8717] XFS (loop4): Ending clean mount
[  162.435226][ T8717] XFS (loop4): Quotacheck needed: Please wait.
[  162.456796][ T1113] XFS (loop4): Metadata CRC error detected at xfs_rmapbt_read_verify+0x42/0xe0, xfs_rmapbt block 0x14 
[  162.470346][ T1113] XFS (loop4): Unmount and run xfs_repair
[  162.472746][ T1113] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  162.475891][ T1113] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[  162.482511][ T1113] 00000010: 00 00 00 00 00 00 00 14 00 00 00 01 00 00 00 80  ................
[  162.485834][ T1113] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[  162.489286][ T1113] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[  162.492376][ T1113] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[  162.495481][ T1113] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[  162.499095][ T1113] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[  162.503109][ T1113] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[  162.506815][ T1113] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x14 len 4 error 74
[  162.520807][ T1113] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  162.526756][ T1113] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  162.534994][ T8717] XFS (loop4): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  162.539114][ T8717] XFS (loop4): Error -5 reserving per-AG metadata reserve pool.
[  163.238167][ T8737] loop0: detected capacity change from 0 to 32768
[  163.285906][ T8737] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  163.626728][ T5853] ocfs2: Unmounting device (7,0) on (node local)
[  163.807744][ T8758] loop0: detected capacity change from 0 to 8
[  163.826881][ T8758] SQUASHFS error: lzo decompression failed, data probably corrupt
[  163.829933][ T8758] SQUASHFS error: Failed to read block 0x91: -5
[  163.839418][ T8758] SQUASHFS error: Unable to read metadata cache entry [8f]
[  163.844011][ T8758] SQUASHFS error: Unable to read inode 0x11f
[  164.160263][ T8780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1078'.
[  164.201581][ T8780] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1078'.
[  164.580412][   T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  164.632561][ T8793] loop3: detected capacity change from 0 to 256
[  164.730183][   T10] usb 5-1: Using ep0 maxpacket: 32
[  164.732824][ T8795] loop3: detected capacity change from 0 to 8192
[  164.738183][   T10] usb 5-1: config 15 has an invalid interface number: 2 but max is 0
[  164.741890][   T10] usb 5-1: config 15 has no interface number 0
[  164.744568][   T10] usb 5-1: config 15 interface 2 has no altsetting 0
[  164.749591][   T10] usb 5-1: New USB device found, idVendor=1b3b, idProduct=2951, bcdDevice=83.e9
[  164.753474][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.756870][   T10] usb 5-1: Product: syz
[  164.758695][   T10] usb 5-1: Manufacturer: syz
[  164.761503][   T10] usb 5-1: SerialNumber: syz
[  164.950454][ T8802] loop0: detected capacity change from 0 to 2048
[  164.979548][ T8802] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.983984][   T10] uvcvideo 5-1:15.2: probe with driver uvcvideo failed with error -22
[  164.990809][   T10] usb 5-1: USB disconnect, device number 5
[  165.000639][ T8802] ext4 filesystem being mounted at /376/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.035287][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.078257][ T8812] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  165.107335][ T8814] loop0: detected capacity change from 0 to 512
[  165.135773][ T8814] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c01c, mo2=0002]
[  165.139237][ T8814] System zones: 1-3, 19-19, 35-38
[  165.151535][ T8814] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.157881][ T8814] ext4 filesystem being mounted at /378/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.207596][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.430224][   T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  165.606791][   T10] usb 4-1: config 3 has an invalid interface number: 238 but max is 0
[  165.610543][   T10] usb 4-1: config 3 has no interface number 0
[  165.613043][   T10] usb 4-1: config 3 interface 238 has no altsetting 0
[  165.623355][   T10] usb 4-1: New USB device found, idVendor=04dd, idProduct=9032, bcdDevice=92.99
[  165.627979][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.637053][   T10] usb 4-1: Product: syz
[  165.639397][   T10] usb 4-1: Manufacturer: syz
[  165.643502][   T10] usb 4-1: SerialNumber: syz
[  165.857785][   T10] usb 4-1: unsupported MDLM descriptors
[  165.868614][   T10] usb 4-1: USB disconnect, device number 8
[  165.944774][ T8839] loop4: detected capacity change from 0 to 32768
[  166.225071][ T8845] loop0: detected capacity change from 0 to 2048
[  166.228804][ T8845] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  166.234981][ T8845] NILFS (loop0): mounting unchecked fs
[  166.237081][ T8845] NILFS (loop0): recovery required for readonly filesystem
[  166.239836][ T8845] NILFS (loop0): write access will be enabled during recovery
[  166.242446][ T6131] udevd[6131]: incorrect nilfs2 checksum on /dev/loop0
[  166.246596][ T8845] NILFS (loop0): norecovery option specified, skipping roll-forward recovery
[  166.256003][ T8845] NILFS (loop0): couldn't remount because the filesystem is in an incomplete recovery state
[  166.256395][ T6131] udevd[6131]: incorrect nilfs2 checksum on /dev/loop0
[  166.332115][ T8847] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1107'.
[  166.889830][ T8884] loop3: detected capacity change from 0 to 8
[  166.900756][ T8885] syz.4.1123 (8885): drop_caches: 4
[  166.911496][ T8884] SQUASHFS error: zlib decompression failed, data probably corrupt
[  166.917401][ T8884] SQUASHFS error: Failed to read block 0x9b: -5
[  166.919595][ T8884] SQUASHFS error: Unable to read metadata cache entry [99]
[  166.924750][ T8884] SQUASHFS error: Unable to read inode 0x127
[  167.280188][ T8891] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1126'.
[  167.566524][ T8894] loop4: detected capacity change from 0 to 128
[  168.423808][ T8912] loop0: detected capacity change from 0 to 512
[  168.429332][ T8912] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  168.541951][ T8912] EXT4-fs (loop0): 1 truncate cleaned up
[  168.547715][ T8912] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.691825][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.609862][ T8928] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  169.618835][ T8928] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  169.866519][ T8932] loop3: detected capacity change from 0 to 4096
[  169.873168][ T8932] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  169.915045][ T8932] ntfs3(loop3): ino=19, mi_enum_attr
[  169.920700][ T8932] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  169.942601][   T33] audit: type=1800 audit(1755105794.611:66): pid=8932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1143" name="file0" dev="loop3" ino=0 res=0 errno=0
[  170.151472][ T8939] netlink: 'syz.0.1146': attribute type 4 has an invalid length.
[  170.213695][ T8937] loop3: detected capacity change from 0 to 32768
[  170.220575][ T8937] btrfs: Deprecated parameter 'usebackuproot'
[  170.225087][ T8937] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  170.228477][ T8937] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1145 (8937)
[  170.238835][ T8937] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  170.242519][ T8937] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  170.245538][ T8937] BTRFS info (device loop3): disk space caching is enabled
[  170.248034][ T8937] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  170.282673][ T3613] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  170.287598][ T8937] BTRFS error (device loop3): failed to load root extent
[  170.293153][ T8937] BTRFS warning (device loop3): try to load backup roots slot 1
[  170.296715][  T224] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  170.304171][ T8937] BTRFS warning (device loop3): couldn't read tree root
[  170.306990][ T8937] BTRFS warning (device loop3): try to load backup roots slot 2
[  170.315701][  T224] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  170.319932][ T8937] BTRFS warning (device loop3): couldn't read tree root
[  170.323165][ T8937] BTRFS warning (device loop3): try to load backup roots slot 3
[  170.346260][ T8937] BTRFS info (device loop3): rebuilding free space tree
[  170.360817][ T8937] BTRFS info (device loop3): disabling free space tree
[  170.363791][ T8937] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  170.367811][ T8937] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  170.531788][ T7693] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  171.007259][   T33] audit: type=1326 audit(1755105795.671:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.4.1155" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af8b8ebe9 code=0x7ffc0000
[  171.024632][   T33] audit: type=1326 audit(1755105795.691:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.4.1155" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af8b8ebe9 code=0x7ffc0000
[  171.038598][   T33] audit: type=1326 audit(1755105795.701:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.4.1155" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f7af8b8ebe9 code=0x7ffc0000
[  171.058924][   T33] audit: type=1326 audit(1755105795.701:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.4.1155" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af8b8ebe9 code=0x7ffc0000
[  171.081715][   T33] audit: type=1326 audit(1755105795.701:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8977 comm="syz.4.1155" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7af8b8ebe9 code=0x7ffc0000
[  171.340179][ T5896] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  171.490180][ T5896] usb 5-1: Using ep0 maxpacket: 8
[  171.498409][ T5896] usb 5-1: config 0 has an invalid interface number: 31 but max is 0
[  171.502471][ T5896] usb 5-1: config 0 has no interface number 0
[  171.510360][ T5896] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  171.514047][ T5896] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.529131][ T5896] usb 5-1: Product: syz
[  171.531143][ T5915] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  171.536688][ T5896] usb 5-1: Manufacturer: syz
[  171.539037][ T5896] usb 5-1: SerialNumber: syz
[  171.544402][ T5896] usb 5-1: config 0 descriptor??
[  171.682686][ T5915] usb 1-1: config 0 has an invalid interface number: 128 but max is 0
[  171.686044][ T5915] usb 1-1: config 0 has no interface number 0
[  171.693226][ T5915] usb 1-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a
[  171.696817][ T5915] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.700182][ T5915] usb 1-1: Product: syz
[  171.701988][ T5915] usb 1-1: Manufacturer: syz
[  171.703930][ T5915] usb 1-1: SerialNumber: syz
[  171.720468][ T5915] usb 1-1: config 0 descriptor??
[  171.756368][ T5896] uvcvideo 5-1:0.31: probe with driver uvcvideo failed with error -22
[  171.771944][ T5896] usb 5-1: USB disconnect, device number 6
[  172.250124][ T7715] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  172.333075][ T5915] usb 1-1: Firmware version (0.0) predates our first public release.
[  172.337544][ T5915] usb 1-1: Please update to version 0.2 or newer
[  172.382775][ T5915] usb 1-1: USB disconnect, device number 18
[  172.952253][ T7715] usb 4-1: Using ep0 maxpacket: 8
[  173.899037][ T7715] usb 4-1: config index 0 descriptor too short (expected 301, got 45)
[  173.902482][ T7715] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  173.906258][ T7715] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  173.909909][ T7715] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  173.913767][ T7715] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  173.918659][ T7715] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  173.925271][ T7715] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  173.968321][ T9008] loop0: detected capacity change from 0 to 512
[  173.998587][ T9008] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  174.024689][ T9008] EXT4-fs (loop0): 1 truncate cleaned up
[  174.034117][ T9008] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  174.093107][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.146880][ T7715] usb 4-1: usb_control_msg returned -32
[  174.153434][ T7715] usbtmc 4-1:16.0: can't read capabilities
[  174.356026][ T9028] overlayfs: metacopy with no lower data found - abort lookup (/file1)
[  174.513396][ T9044] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1182'.
[  174.524680][ T9045] usbtmc 4-1:16.0: INITIATE_ABORT_BULK_OUT returned 0
[  174.626060][ T9051] loop0: detected capacity change from 0 to 128
[  174.733138][ T5896] usb 4-1: USB disconnect, device number 9
[  175.010149][ T7715] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  175.160224][ T7715] usb 5-1: Using ep0 maxpacket: 16
[  175.164287][ T7715] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  175.168701][ T7715] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  175.174608][ T7715] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  175.178325][ T7715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.181803][ T7715] usb 5-1: Product: syz
[  175.183570][ T7715] usb 5-1: Manufacturer: syz
[  175.185665][ T7715] usb 5-1: SerialNumber: syz
[  175.843817][ T7715] usb 5-1: cannot find UAC_HEADER
[  175.856181][ T7715] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  175.861133][ T7715] usb 5-1: USB disconnect, device number 7
[  175.878592][ T6131] udevd[6131]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  176.095211][ T9079] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1197'.
[  176.202144][ T9085] loop0: detected capacity change from 0 to 16
[  176.211204][ T9085] erofs (device loop0): mounted with root inode @ nid 36.
[  176.251341][ T9087] loop4: detected capacity change from 0 to 1024
[  176.291223][ T9087] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.295304][ T9087] ext4 filesystem being mounted at /133/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  176.389955][   T39] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: block 3: comm kworker/u10:1: lblock 3 mapped to illegal pblock 3 (length 2)
[  176.408481][   T39] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 2 with error 117
[  176.416377][   T39] EXT4-fs (loop4): This should not happen!! Data will be lost
[  176.416377][   T39] 
[  176.434646][ T9094] loop0: detected capacity change from 0 to 128
[  176.437712][   T39] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  176.448003][   T39] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 32 with max blocks 36 with error 28
[  176.452289][   T39] EXT4-fs (loop4): This should not happen!! Data will be lost
[  176.452289][   T39] 
[  176.453185][ T9094] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  176.455716][   T39] EXT4-fs (loop4): Total free blocks count 0
[  176.466626][   T39] EXT4-fs (loop4): Free/Dirty block details
[  176.468589][   T39] EXT4-fs (loop4): free_blocks=4293918720
[  176.468790][ T9094] ext4 filesystem being mounted at /433/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  176.470718][   T39] EXT4-fs (loop4): dirty_blocks=48
[  176.483762][   T39] EXT4-fs (loop4): Block reservation details
[  176.528921][ T5853] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  176.561577][ T9097] loop4: detected capacity change from 0 to 256
[  176.569046][ T9097] exfat: Deprecated parameter 'namecase'
[  176.574437][ T9097] exfat: Deprecated parameter 'namecase'
[  176.576719][ T9097] exfat: Deprecated parameter 'utf8'
[  176.589398][ T9097] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  176.598213][ T9092] loop3: detected capacity change from 0 to 32768
[  176.631586][ T9092] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  176.665105][ T9103] tipc: Cannot configure node identity twice
[  176.672619][ T7693] ocfs2: Unmounting device (7,3) on (node local)
[  176.794445][ T9107] loop3: detected capacity change from 0 to 512
[  176.800466][ T5896] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  176.823635][ T9107] EXT4-fs error (device loop3): ext4_orphan_get:1392: inode #15: comm syz.3.1208: casefold flag without casefold feature
[  176.829020][ T9107] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1208: couldn't read orphan inode 15 (err -117)
[  176.835062][ T9107] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  176.864614][ T7693] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.920098][ T7715] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  176.960146][ T5896] usb 1-1: Using ep0 maxpacket: 32
[  176.964900][ T5896] usb 1-1: unable to get BOS descriptor or descriptor too short
[  176.969470][ T5896] usb 1-1: config 4 has an invalid interface number: 10 but max is 0
[  176.974527][ T5896] usb 1-1: config 4 has no interface number 0
[  176.977224][ T5896] usb 1-1: config 4 interface 10 has no altsetting 0
[  176.982721][ T5896] usb 1-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=b6.15
[  176.986528][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.989957][ T5896] usb 1-1: Product: syz
[  176.992108][ T5896] usb 1-1: Manufacturer: syz
[  176.994071][ T5896] usb 1-1: SerialNumber: syz
[  177.009965][ T9113] tipc: Started in network mode
[  177.012270][ T9113] tipc: Node identity 3e7d0e3322d5, cluster identity 4711
[  177.014909][ T9113] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  177.018761][ T9113] syzkaller0: entered promiscuous mode
[  177.021314][ T9113] syzkaller0: entered allmulticast mode
[  177.028149][ T9111] tipc: Resetting bearer <eth:syzkaller0>
[  177.053375][ T9111] tipc: Disabling bearer <eth:syzkaller0>
[  177.075734][ T7715] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  177.079529][ T7715] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.083393][ T7715] usb 5-1: Product: syz
[  177.085225][ T7715] usb 5-1: Manufacturer: syz
[  177.087257][ T7715] usb 5-1: SerialNumber: syz
[  177.091695][ T7715] usb 5-1: config 0 descriptor??
[  177.097034][ T7715] gspca_main: sunplus-2.14.0 probing 055f:c230
[  177.219964][ T5896] radio-si470x 1-1:4.10: could not find interrupt in endpoint
[  177.224471][ T5896] radio-si470x 1-1:4.10: probe with driver radio-si470x failed with error -5
[  177.229227][ T5896] usbhid 1-1:4.10: couldn't find an input interrupt endpoint
[  177.242893][ T5896] usb 1-1: USB disconnect, device number 19
[  177.506724][ T7715] usb 5-1: USB disconnect, device number 8
[  177.550418][   T24] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  177.700179][   T24] usb 4-1: Using ep0 maxpacket: 32
[  177.703284][   T24] usb 4-1: config 0 has an invalid interface number: 184 but max is 0
[  177.706065][   T24] usb 4-1: config 0 has no interface number 0
[  177.708176][   T24] usb 4-1: config 0 interface 184 has no altsetting 0
[  177.714177][   T24] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[  177.717117][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.720531][   T24] usb 4-1: Product: syz
[  177.722219][   T24] usb 4-1: Manufacturer: syz
[  177.723904][   T24] usb 4-1: SerialNumber: syz
[  177.728439][   T24] usb 4-1: config 0 descriptor??
[  177.741397][   T24] smsc75xx v1.0.0
[  177.990275][ T7715] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  178.143493][ T7715] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  178.149102][ T7715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.164418][ T7715] usb 1-1: config 0 descriptor??
[  178.993118][   T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -71
[  179.000966][   T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  179.002355][ T7715] usb 1-1: Cannot set autoneg
[  179.004341][   T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  179.006271][ T7715] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  179.009610][   T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71
[  179.009622][   T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset
[  179.009630][   T24] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[  179.009855][   T24] smsc75xx 4-1:0.184: probe with driver smsc75xx failed with error -71
[  179.047175][   T24] usb 4-1: USB disconnect, device number 10
[  179.050643][ T7715] usb 1-1: USB disconnect, device number 20
[  179.766853][ T9146] netlink: 'syz.0.1224': attribute type 1 has an invalid length.
[  179.772163][ T9146] netlink: 'syz.0.1224': attribute type 2 has an invalid length.
[  179.777589][ T9146] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1224'.
[  179.950455][ T9151] loop0: detected capacity change from 0 to 4096
[  179.954165][ T9151] EXT4-fs: Ignoring removed nobh option
[  179.971742][ T9151] EXT4-fs (loop0): Test dummy encryption mode enabled
[  180.014544][ T9151] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  180.367098][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.380984][ T9162] orangefs_mount: mount request failed with -4
[  181.436873][ T7715] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  181.600488][ T7715] usb 1-1: Using ep0 maxpacket: 16
[  181.627715][ T7715] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.642129][ T7715] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  181.657353][ T7715] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  181.678124][ T7715] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.704539][ T7715] usb 1-1: config 0 descriptor??
[  181.973953][ T9189] overlayfs: missing 'lowerdir'
[  182.135690][ T7715] HID 045e:07da: Invalid code 65791 type 1
[  182.145478][ T7715] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.000A/input/input12
[  182.162523][ T7715] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0
[  182.205271][ T9197] loop4: detected capacity change from 0 to 1764
[  182.663447][ T9218] openvswitch: netlink: IP tunnel dst address not specified
[  182.789681][ T9226] loop4: detected capacity change from 0 to 512
[  182.828294][   T24] libceph: connect (1)[c::]:6789 error -101
[  182.832046][ T9226] EXT4-fs: Ignoring removed nomblk_io_submit option
[  182.846442][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  182.860145][ T9226] EXT4-fs (loop4): Test dummy encryption mode enabled
[  182.876623][   T24] libceph: connect (1)[c::]:6789 error -101
[  182.890780][ T9226] EXT4-fs (loop4): 1 truncate cleaned up
[  182.893728][ T9226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.898687][   T24] libceph: mon0 (1)[c::]:6789 connect error
[  182.915309][ T9224] ceph: No mds server is up or the cluster is laggy
[  182.969136][   T24] usb 1-1: USB disconnect, device number 21
[  183.111872][ T9233] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap
[  183.222609][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1261'.
[  183.535105][ T7800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.870175][   T24] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  184.033712][   T24] usb 1-1: config 0 has an invalid interface number: 219 but max is 0
[  184.044341][   T24] usb 1-1: config 0 has no interface number 0
[  184.047916][   T24] usb 1-1: config 0 interface 219 altsetting 0 endpoint 0xF has invalid maxpacket 1479, setting to 64
[  184.061174][   T24] usb 1-1: New USB device found, idVendor=0421, idProduct=0335, bcdDevice=65.bf
[  184.064494][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.074513][   T24] usb 1-1: config 0 descriptor??
[  184.082229][   T24] rndis_host 1-1:0.219: invalid descriptor buffer length
[  184.085279][   T24] usb 1-1: bad CDC descriptors
[  184.087654][   T24] cdc_acm 1-1:0.219: invalid descriptor buffer length
[  184.091388][ T9281] loop4: detected capacity change from 0 to 512
[  184.108447][ T9281] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.330175][ T7715] usb 1-1: USB disconnect, device number 22
[  185.214501][ T9292] loop0: detected capacity change from 0 to 1024
[  185.232117][ T9292] EXT4-fs: inline encryption not supported
[  185.259247][ T9292] EXT4-fs (loop0): inodes count not valid: 32 vs 4
[  185.795988][ T7800] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.881415][ T9300] netlink: 'syz.4.1282': attribute type 1 has an invalid length.
[  185.903538][ T9300] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1282'.
[  186.122435][ T9311] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1288'.
[  186.691580][ T9312] loop0: detected capacity change from 0 to 40427
[  186.704462][ T9312] F2FS-fs (loop0): Image doesn't support compression
[  186.728671][ T9312] F2FS-fs (loop0): build fault injection rate: 690
[  186.741590][ T9312] F2FS-fs (loop0): invalid crc value
[  187.094827][ T9312] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  187.102515][ T9338] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  187.108620][ T9312] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  187.195556][   T33] audit: type=1800 audit(1755105811.861:72): pid=9312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1289" name="file1" dev="loop0" ino=10 res=0 errno=0
[  187.233245][ T9312] syz.0.1289: attempt to access beyond end of device
[  187.233245][ T9312] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  187.269438][ T5853] syz-executor: attempt to access beyond end of device
[  187.269438][ T5853] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  187.282632][ T5853] CPU: 0 UID: 0 PID: 5853 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  187.282658][ T5853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.282665][ T5853] Call Trace:
[  187.282671][ T5853]  <TASK>
[  187.282677][ T5853]  dump_stack_lvl+0x189/0x250
[  187.282703][ T5853]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.282719][ T5853]  ? __pfx_queue_work_on+0x10/0x10
[  187.282732][ T5853]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  187.282748][ T5853]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  187.282797][ T5853]  f2fs_handle_critical_error+0x37c/0x540
[  187.282823][ T5853]  f2fs_write_end_io+0x886/0xb60
[  187.282856][ T5853]  __submit_merged_bio+0x27a/0x6a0
[  187.282878][ T5853]  __submit_merged_write_cond+0x255/0x530
[  187.282900][ T5853]  f2fs_write_data_pages+0x261d/0x3000
[  187.282944][ T5853]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  187.283001][ T5853]  ? ktime_get+0x3e/0x1f0
[  187.283016][ T5853]  ? ktime_get+0x3e/0x1f0
[  187.283031][ T5853]  ? seqcount_lockdep_reader_access+0x15f/0x1c0
[  187.283047][ T5853]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  187.283072][ T5853]  ? rcu_is_watching+0x15/0xb0
[  187.283095][ T5853]  ? __lock_acquire+0xab9/0xd20
[  187.283128][ T5853]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  187.283146][ T5853]  do_writepages+0x32e/0x550
[  187.283174][ T5853]  ? do_raw_spin_unlock+0x4d/0x240
[  187.283194][ T5853]  filemap_fdatawrite+0x199/0x240
[  187.283210][ T5853]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  187.283268][ T5853]  ? do_raw_spin_unlock+0x4d/0x240
[  187.283287][ T5853]  f2fs_sync_dirty_inodes+0x31f/0x830
[  187.283319][ T5853]  f2fs_write_checkpoint+0x95a/0x1df0
[  187.283357][ T5853]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  187.283415][ T5853]  ? kill_f2fs_super+0x298/0x6c0
[  187.283437][ T5853]  kill_f2fs_super+0x2c3/0x6c0
[  187.283460][ T5853]  ? __pfx_kill_f2fs_super+0x10/0x10
[  187.283475][ T5853]  ? radix_tree_delete_item+0x2b6/0x400
[  187.283497][ T5853]  ? shrinker_free+0x2ce/0x3e0
[  187.283519][ T5853]  deactivate_locked_super+0xbc/0x130
[  187.283536][ T5853]  cleanup_mnt+0x425/0x4c0
[  187.283550][ T5853]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.283569][ T5853]  task_work_run+0x1d4/0x260
[  187.283589][ T5853]  ? __pfx_task_work_run+0x10/0x10
[  187.283604][ T5853]  ? __x64_sys_umount+0x122/0x160
[  187.283626][ T5853]  ? exit_to_user_mode_loop+0x40/0x110
[  187.283649][ T5853]  exit_to_user_mode_loop+0xec/0x110
[  187.283667][ T5853]  do_syscall_64+0x2bd/0x3b0
[  187.283681][ T5853]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.283694][ T5853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.283706][ T5853]  ? exc_page_fault+0x9f/0xf0
[  187.283723][ T5853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  187.283734][ T5853] RIP: 0033:0x7f1bb8b8ff17
[  187.283748][ T5853] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  187.283758][ T5853] RSP: 002b:00007ffeb59d33e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  187.283797][ T5853] RAX: 0000000000000000 RBX: 00007f1bb8c11c05 RCX: 00007f1bb8b8ff17
[  187.283806][ T5853] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb59d34a0
[  187.283814][ T5853] RBP: 00007ffeb59d34a0 R08: 0000000000000000 R09: 0000000000000000
[  187.283821][ T5853] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffeb59d4530
[  187.283829][ T5853] R13: 00007f1bb8c11c05 R14: 000000000002dae8 R15: 00007ffeb59d4570
[  187.283854][ T5853]  </TASK>
[  187.283859][ T5853] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  187.874253][ T9354] loop0: detected capacity change from 0 to 256
[  187.889226][ T9354] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  187.893810][ T9354] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  187.907850][ T9354] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  187.959150][ T9356] input: syz0 as /devices/virtual/input/input13
[  188.216920][ T9358] loop0: detected capacity change from 0 to 32768
[  188.267079][ T9358] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  188.317296][ T5853] ocfs2: Unmounting device (7,0) on (node local)
[  188.666286][ T9383] loop0: detected capacity change from 0 to 32768
[  188.784148][ T9382] loop3: detected capacity change from 0 to 32768
[  188.829082][ T9382] (syz.3.1312,9382,0):ocfs2_check_set_options:1265 ERROR: ACL support requested but extended attributes feature is not enabled
[  188.843306][ T9382] (syz.3.1312,9382,0):ocfs2_fill_super:1177 ERROR: status = -22
[  189.302697][ T9401] loop4: detected capacity change from 0 to 40427
[  189.319654][ T9401] F2FS-fs (loop4): invalid crc value
[  189.588126][ T9401] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  189.591802][ T9401] F2FS-fs (loop4): Start checkpoint disabled!
[  189.600591][ T9401] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  189.741551][ T9408] loop3: detected capacity change from 0 to 32768
[  189.758970][ T9408] OCFS2: ERROR (device loop3): int ocfs2_validate_inode_block(struct super_block *, struct buffer_head *): Invalid dinode #70: OCFS2_VALID_FL not set
[  189.766187][ T9408] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  189.770524][ T9408] OCFS2: File system is now read-only.
[  189.772941][ T9408] (syz.3.1316,9408,1):ocfs2_read_locked_inode:597 ERROR: status = -30
[  189.776530][ T9408] (syz.3.1316,9408,1):_ocfs2_get_system_file_inode:144 ERROR: status = -30
[  189.781616][ T9408] (syz.3.1316,9408,1):ocfs2_init_global_system_inodes:465 ERROR: status = -30
[  189.784952][ T9408] (syz.3.1316,9408,1):ocfs2_init_global_system_inodes:467 ERROR: Unable to load system inode 3, possibly corrupt fs?
[  189.784969][ T9408] (syz.3.1316,9408,1):ocfs2_init_global_system_inodes:476 ERROR: status = -30
[  189.793370][ T9408] (syz.3.1316,9408,1):ocfs2_initialize_super:2198 ERROR: status = -30
[  189.796837][ T9408] (syz.3.1316,9408,1):ocfs2_fill_super:1177 ERROR: status = -30
[  189.945673][   T32] kworker/u9:1: attempt to access beyond end of device
[  189.945673][   T32] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  189.950591][   T32] CPU: 0 UID: 0 PID: 32 Comm: kworker/u9:1 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  189.950606][   T32] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  189.950611][   T32] Workqueue: writeback wb_workfn (flush-7:4)
[  189.950630][   T32] Call Trace:
[  189.950634][   T32]  <TASK>
[  189.950638][   T32]  dump_stack_lvl+0x189/0x250
[  189.950652][   T32]  ? __pfx_dump_stack_lvl+0x10/0x10
[  189.950661][   T32]  ? __pfx_queue_work_on+0x10/0x10
[  189.950670][   T32]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  189.950680][   T32]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  189.950693][   T32]  f2fs_handle_critical_error+0x37c/0x540
[  189.950708][   T32]  f2fs_write_end_io+0x886/0xb60
[  189.950728][   T32]  __submit_merged_bio+0x27a/0x6a0
[  189.950740][   T32]  __submit_merged_write_cond+0x255/0x530
[  189.950752][   T32]  f2fs_write_data_pages+0x261d/0x3000
[  189.950807][   T32]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  189.950823][   T32]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  189.950850][   T32]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  189.950860][   T32]  ? look_up_lock_class+0x74/0x170
[  189.950875][   T32]  ? trace_f2fs_writepages+0x7f/0x200
[  189.950885][   T32]  ? f2fs_write_node_pages+0x478/0x6e0
[  189.950896][   T32]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  189.950911][   T32]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  189.950921][   T32]  do_writepages+0x32e/0x550
[  189.950934][   T32]  ? reacquire_held_locks+0x127/0x1d0
[  189.950943][   T32]  ? writeback_sb_inodes+0x384/0x1010
[  189.950956][   T32]  __writeback_single_inode+0x145/0xff0
[  189.950966][   T32]  ? do_raw_spin_unlock+0x4d/0x240
[  189.950977][   T32]  writeback_sb_inodes+0x6c7/0x1010
[  189.950999][   T32]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  189.951027][   T32]  ? rcu_is_watching+0x15/0xb0
[  189.951039][   T32]  wb_writeback+0x43b/0xaf0
[  189.951052][   T32]  ? queue_io+0x391/0x590
[  189.951063][   T32]  ? __pfx_wb_writeback+0x10/0x10
[  189.951076][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.951086][   T32]  wb_workfn+0x409/0xef0
[  189.951100][   T32]  ? __pfx_wb_workfn+0x10/0x10
[  189.951110][   T32]  ? __lock_acquire+0xab9/0xd20
[  189.951127][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[  189.951137][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.951144][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[  189.951150][   T32]  ? process_scheduled_works+0x9ef/0x17b0
[  189.951158][   T32]  process_scheduled_works+0xae1/0x17b0
[  189.951178][   T32]  ? __pfx_process_scheduled_works+0x10/0x10
[  189.951199][   T32]  worker_thread+0x8a0/0xda0
[  189.951219][   T32]  kthread+0x711/0x8a0
[  189.951230][   T32]  ? __pfx_worker_thread+0x10/0x10
[  189.951237][   T32]  ? __pfx_kthread+0x10/0x10
[  189.951247][   T32]  ? _raw_spin_unlock_irq+0x23/0x50
[  189.951254][   T32]  ? lockdep_hardirqs_on+0x9c/0x150
[  189.951261][   T32]  ? __pfx_kthread+0x10/0x10
[  189.951271][   T32]  ret_from_fork+0x3fc/0x770
[  189.951281][   T32]  ? __pfx_ret_from_fork+0x10/0x10
[  189.951291][   T32]  ? __switch_to_asm+0x39/0x70
[  189.951300][   T32]  ? __switch_to_asm+0x33/0x70
[  189.951308][   T32]  ? __pfx_kthread+0x10/0x10
[  189.951317][   T32]  ret_from_fork_asm+0x1a/0x30
[  189.951334][   T32]  </TASK>
[  189.951337][   T32] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  190.137930][ T9410] loop0: detected capacity change from 0 to 131072
[  190.151187][ T5238] Bluetooth: hci2: command 0x0c1a tx timeout
[  190.185125][ T7715] Bluetooth: hci2: Opcode 0x0c1a failed: -110
[  190.195173][ T9410] XFS (loop0): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  190.215939][ T7715] Bluetooth: hci2: Error when powering off device on rfkill (-110)
[  190.254204][ T9410] XFS (loop0): Starting recovery (logdev: internal)
[  190.270966][ T9410] XFS (loop0): Ending recovery (logdev: internal)
[  190.334440][ T5853] XFS (loop0): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846
[  190.957205][ T9440] loop0: detected capacity change from 0 to 256
[  191.341026][ T9435] loop3: detected capacity change from 0 to 32768
[  191.367276][ T9435] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1323 (9435)
[  191.415233][ T9435] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  191.422347][ T9435] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  191.427974][ T9435] BTRFS info (device loop3): using free-space-tree
[  191.651053][ T5900] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  191.696342][ T7693] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  191.829392][ T5900] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  191.848852][ T5900] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4
[  191.866165][ T5900] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  191.896210][ T5900] usb 1-1: config 0 descriptor??
[  191.922280][ T5900] rndis_host 1-1:0.0: probe with driver rndis_host failed with error -22
[  192.175265][ T5912] usb 1-1: USB disconnect, device number 23
[  192.460815][ T5238] Bluetooth: hci0: command 0x0c1a tx timeout
[  192.466290][ T7715] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[  192.468549][ T7715] Bluetooth: hci0: Error when powering off device on rfkill (-110)
[  192.797492][ T9483] loop0: detected capacity change from 0 to 256
[  192.807260][ T9483] FAT-fs (loop0): bogus logical sector size 2238
[  192.809892][ T9483] FAT-fs (loop0): Can't find a valid FAT filesystem
[  192.833057][ T9483] binder: Bad value for 'stats'
[  193.005995][ T9491] loop0: detected capacity change from 0 to 512
[  193.061580][ T9491] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1340: casefold flag without casefold feature
[  193.068308][ T9491] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1340: couldn't read orphan inode 15 (err -117)
[  193.083376][ T9491] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  193.126606][ T5853] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.460129][ T5912] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  193.560117][ T5900] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  193.620276][ T5912] usb 1-1: Using ep0 maxpacket: 8
[  193.626001][ T5912] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  193.629567][ T5912] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  193.634207][ T5912] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  193.637526][ T5912] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  193.642527][ T5912] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  193.646113][ T5912] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  193.725309][ T5900] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  193.729050][ T5900] usb 4-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  193.733635][ T5900] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  193.741082][ T5900] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  193.745668][ T5900] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.749229][ T5900] usb 4-1: Product: syz
[  193.751380][ T5900] usb 4-1: Manufacturer: syz
[  193.753494][ T5900] usb 4-1: SerialNumber: syz
[  193.856663][ T5912] usb 1-1: GET_CAPABILITIES returned 0
[  193.858859][ T5912] usbtmc 1-1:16.0: can't read capabilities
[  193.977967][ T5900] usb 4-1: 0:2 : does not exist
[  193.987956][ T5900] usb 4-1: USB disconnect, device number 11
[  194.067149][    C0] usbtmc 1-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71
[  194.075548][   T10] usb 1-1: USB disconnect, device number 24
[  194.225184][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.227362][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  194.780220][ T7715] Bluetooth: hci3: Opcode 0x0c1a failed: -110
[  194.780788][ T5238] Bluetooth: hci3: command 0x0405 tx timeout
[  194.782849][ T7715] Bluetooth: hci3: Error when powering off device on rfkill (-110)
[  194.903606][ T9545] sctp: [Deprecated]: syz.0.1364 (pid 9545) Use of struct sctp_assoc_value in delayed_ack socket option.
[  194.903606][ T9545] Use struct sctp_sack_info instead
[  195.180238][ T5887] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  195.180248][ T7715] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  195.333161][ T5887] usb 1-1: config 0 has an invalid interface number: 56 but max is 0
[  195.337771][ T5887] usb 1-1: config 0 has no interface number 0
[  195.340117][ T7715] usb 4-1: Using ep0 maxpacket: 8
[  195.346603][ T7715] usb 4-1: unable to get BOS descriptor or descriptor too short
[  195.346831][ T5887] usb 1-1: config 0 interface 56 altsetting 114 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  195.356008][ T5887] usb 1-1: config 0 interface 56 altsetting 114 endpoint 0x81 has invalid wMaxPacketSize 0
[  195.359559][ T5887] usb 1-1: config 0 interface 56 has no altsetting 0
[  195.363171][ T5887] usb 1-1: New USB device found, idVendor=28bd, idProduct=0933, bcdDevice= 0.00
[  195.364894][ T7715] usb 4-1: unable to read config index 0 descriptor/start: -71
[  195.367279][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.369613][ T7715] usb 4-1: can't read configurations, error -71
[  195.375361][ T5887] usb 1-1: config 0 descriptor??
[  195.793072][ T5887] uclogic 0003:28BD:0933.000B: interface is invalid, ignoring
[  196.012930][ T5900] usb 1-1: USB disconnect, device number 25
[  196.578063][ T9576] bridge0: entered promiscuous mode
[  196.586417][ T9576] vlan2: entered promiscuous mode
[  197.031932][ T9596] sit0: entered promiscuous mode
[  197.039971][ T9596] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1385'.
[  197.353402][ T5915] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  197.524172][ T5915] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  197.528097][ T5915] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  197.532560][ T5915] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  197.536363][ T5915] usb 4-1: config 1 has no interface number 1
[  197.538958][ T5915] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  197.544512][ T5915] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  197.553076][ T5915] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  197.556461][ T5915] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.559307][ T5915] usb 4-1: Product: syz
[  197.561027][ T5915] usb 4-1: Manufacturer: syz
[  197.562935][ T5915] usb 4-1: SerialNumber: syz
[  197.787381][ T5915] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  197.798359][ T5915] usb 4-1: MIDIStreaming interface descriptor not found
[  197.824366][ T5915] usb 4-1: USB disconnect, device number 14
[  198.040184][ T5900] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  198.200141][ T5900] usb 1-1: Using ep0 maxpacket: 32
[  198.206814][ T5900] usb 1-1: config 0 interface 0 has no altsetting 0
[  198.322042][ T5900] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  198.327850][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.331493][ T5900] usb 1-1: Product: syz
[  198.333356][ T5900] usb 1-1: Manufacturer: syz
[  198.335387][ T5900] usb 1-1: SerialNumber: syz
[  198.340394][ T5900] usb 1-1: config 0 descriptor??
[  198.834378][ T5900] gs_usb 1-1:0.0: Configuring for 1 interfaces
[  199.643805][ T5915] usb 1-1: USB disconnect, device number 26
[  200.491764][ T9649] netlink: 388 bytes leftover after parsing attributes in process `syz.3.1405'.
[  200.619881][ T9643] loop4: detected capacity change from 0 to 32768
[  200.656537][ T9643] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  200.674842][ T9647] loop0: detected capacity change from 0 to 32768
[  200.687546][ T9647] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1406 (9647)
[  200.702011][ T9647] BTRFS info (device loop0): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  200.705908][ T9647] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  200.709096][ T9647] BTRFS info (device loop0): using free-space-tree
[  200.748256][ T9643] XFS (loop4): Ending clean mount
[  200.787066][ T7800] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  200.992579][ T9682] block nbd3: shutting down sockets
Connection to localhost closed by remote host.
[  201.419644][ T9647] BTRFS info (device loop0): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  201.606507][ T5873] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.699941][ T5873] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.761964][ T5873] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.809529][ T5873] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  201.888093][ T5873] bridge_slave_1: left allmulticast mode
[  201.890749][ T5873] bridge_slave_1: left promiscuous mode
[  201.893387][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[  201.899441][ T5873] bridge_slave_0: left allmulticast mode
[  201.902772][ T5873] bridge_slave_0: left promiscuous mode
[  201.904929][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[  202.345884][ T5873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  202.351198][ T5873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  202.356099][ T5873] bond0 (unregistering): Released all slaves
[  202.366343][ T5873] bond1 (unregistering): Released all slaves
[  202.480673][ T5873] tipc: Left network mode
[  202.654539][ T5873] hsr_slave_0: left promiscuous mode
[  202.657600][ T5873] hsr_slave_1: left promiscuous mode
[  202.660453][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  202.663504][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0
[  202.667094][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  202.671907][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1
[  202.691895][ T5873] veth1_macvtap: left promiscuous mode
[  202.694413][ T5873] veth0_macvtap: left promiscuous mode
[  202.696867][ T5873] veth1_vlan: left promiscuous mode
[  202.699200][ T5873] veth0_vlan: left promiscuous mode
[  203.348791][ T5873] team0 (unregistering): Port device team_slave_1 removed
[  203.413620][ T5873] team0 (unregistering): Port device team_slave_0 removed
[  204.344487][ T5873] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.423977][ T5873] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.514717][ T5873] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.593594][ T5873] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode
[  204.600780][ T5873] bridge0: port 3(netdevsim0) entered disabled state
[  204.611717][ T5873] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  204.715404][ T5873] bridge_slave_1: left allmulticast mode
[  204.717268][ T5873] bridge_slave_1: left promiscuous mode
[  204.719207][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[  204.723490][ T5873] bridge_slave_0: left allmulticast mode
[  204.725331][ T5873] bridge_slave_0: left promiscuous mode
[  204.727238][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[  205.235302][ T5873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  205.241765][ T5873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  205.246183][ T5873] bond0 (unregistering): Released all slaves
[  205.338764][ T5873] tipc: Left network mode
[  205.528096][ T5873] hsr_slave_0: left promiscuous mode
[  205.530653][ T5873] hsr_slave_1: left promiscuous mode
[  205.532836][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  205.535826][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0
[  205.539530][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  205.542560][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1
[  205.557822][ T5873] veth1_macvtap: left promiscuous mode
[  205.560157][ T5873] veth0_macvtap: left promiscuous mode
[  205.562397][ T5873] veth1_vlan: left promiscuous mode
[  205.564502][ T5873] veth0_vlan: left promiscuous mode
[  206.136803][ T5873] team0 (unregistering): Port device team_slave_1 removed
[  206.187892][ T5873] team0 (unregistering): Port device team_slave_0 removed
[  209.626709][ T5873] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.696705][ T5873] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.772324][ T5873] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.871538][ T5873] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  209.967063][ T5873] bridge_slave_1: left allmulticast mode
[  209.969014][ T5873] bridge_slave_1: left promiscuous mode
[  209.971525][ T5873] bridge0: port 2(bridge_slave_1) entered disabled state
[  209.975370][ T5873] bridge_slave_0: left allmulticast mode
[  209.977597][ T5873] bridge_slave_0: left promiscuous mode
[  209.979609][ T5873] bridge0: port 1(bridge_slave_0) entered disabled state
[  210.104111][ T5873] gretap0 (unregistering): left promiscuous mode
[  210.316994][ T5873] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  210.321748][ T5873] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  210.325696][ T5873] bond0 (unregistering): Released all slaves
[  210.564325][ T5873] hsr_slave_0: left promiscuous mode
[  210.566625][ T5873] hsr_slave_1: left promiscuous mode
[  210.568912][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.571445][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_0
[  210.574399][ T5873] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  210.576790][ T5873] batman_adv: batadv0: Removing interface: batadv_slave_1
[  210.590246][ T5873] veth1_macvtap: left promiscuous mode
[  210.592376][ T5873] veth0_macvtap: left promiscuous mode
[  210.597593][ T5873] veth1_vlan: left promiscuous mode
[  210.600398][ T5873] veth0_vlan: left promiscuous mode
[  211.073806][ T5873] team0 (unregistering): Port device team_slave_1 removed
[  211.110677][ T5873] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
17:23:54  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90003f9ecd0
R8 =ffff888107298237 R9 =1ffff11020e53046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af18d6 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555563a8a5c8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffff00ffffff00 ffffffffffffffff
XMM02=000000000000ff00 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=0000000000000061 00000000322f3000
XMM06=ff000000ff000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff000000ff XMM09=00326e6100306e61 632f74656e2f302e
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ad74047531bd6200 RBX=ffffffff81968308 RCX=ad74047531bd6200 RDX=0000000000000001
RSI=ffffffff8d9b4408 RDI=ffffffff8be32600 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34230 R13=0000000000000001 R14=0000000000000001 R15=1ffff1102001f000
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f62fe0e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffff00ffffff00 ffffffffffffffff
XMM02=000000000000ff00 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00000000000000ff 00000000000000ff XMM05=0000000000000061 00000000322f3000
XMM06=ff000000ff000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffff000000ff XMM09=00326e6100306e61 632f74656e2f302e
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
