last executing test programs:

3m28.532852419s ago: executing program 0 (id=6):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000000)=0x5, 0x4)
setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0)
sendto$inet6(r0, &(0x7f0000000040)="c6", 0x1, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c)

3m28.018321279s ago: executing program 0 (id=11):
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8915, &(0x7f00000000c0)={'batadv_slave_0\x00'})
r1 = socket$packet(0x11, 0x3, 0x300)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8919, &(0x7f00000000c0)={'batadv_slave_0\x00'})

3m27.614487733s ago: executing program 0 (id=15):
pipe(&(0x7f0000000200)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0), 0x101001, 0x0)
splice(r0, 0x0, r2, 0x0, 0x7ffc, 0xd)
write$binfmt_elf64(r1, &(0x7f0000000000)=ANY=[], 0xfffffd88)

3m26.507800828s ago: executing program 0 (id=23):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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")
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140))
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0)

3m25.561154773s ago: executing program 0 (id=31):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000200)='./file1\x00', 0x880, &(0x7f0000000600)=ANY=[@ANYBLOB="636865636b3d7374726963742c757466383d312c757466383d302c757466383d312c6e66732c6572726f72733d72656d6f756e742d726f2c73686f72746e616d653d77696e6e742c00043518f9aad8a4f2c1cdb3e993cf0444d9d2d40bb509d4da042c2c85e3650de97db42c38cafa7a9d7503c3c985486cf7fc80515e9bef7e9e56fb346de370b3eb3ecbc59d343c36bf04efc3d68033308b0014b0c677ae5ef2932cc05f566112668fa4f6844dcf823618a2993da771384e8fc12467a56b33e3b00030dbfd82ea2f8ddbeb1d04bac86815ebe0b9d084d60edf56b15e74589892dce86962f611a4313120b738dddfd38d20b443570197dc795020ecf541601ef9a5618869febf769dd50261849a47e170ba166b97e76a0261d0dc1fb3e2646595f1c8b49057d94f10f7b5e35ead0a38", @ANYRESHEX], 0xb, 0x21f, &(0x7f0000000940)="$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")
chdir(&(0x7f00000003c0)='./file0/../file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x116)
getdents(r0, 0xfffffffffffffffd, 0x58)

3m24.841692516s ago: executing program 0 (id=36):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0xfc}, 0x2)

3m24.43056466s ago: executing program 32 (id=36):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000040)={0x1, 0x6}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2)
write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180)={0x2, 0xfc}, 0x2)

1m58.958401898s ago: executing program 1 (id=544):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000007c0), 0x2, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240))

1m58.601850108s ago: executing program 1 (id=546):
pipe2(&(0x7f0000000000)={<r0=>0xffffffffffffffff}, 0x0)
pipe2(&(0x7f0000000080)={<r1=>0xffffffffffffffff}, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6)
tee(r0, r1, 0x1, 0x1)

1m58.39777147s ago: executing program 1 (id=549):
r0 = memfd_create(&(0x7f0000000280)='\x00\x00\x00\x00\x00\x00z\x9b\xb6\xe8t;\xfc\x02\x00\x00\x009\xa0\x8b\x14d\xa2\xa1\xa8!\xe8\xd1\xa0\x8a\xce0\x1c\xb7\xf1\xccm\xce\xd4\xdb\x89\xe5\x8f\xe2\xb6\xd6\x9cF\xbd\xff\x14\x05\x00\x00\x00\x00\x00\x00\x00\xf3\xdc\x91\'\x06\\8\r\xfc\xeeG\xbe\x90C\x1c)5\x98\xa3\xfa\a\xf9\x98\xbb}\xeb\x86P=\xe51\x9d,\xb7\xe6_M\xbe\x19\xea#\xff[\xd1\xc3\x9a\xa3\x1b\xf9\xe9\x1d \xce1\xc9\x9f\xb0\x14\xc2\xeb\xf9\xceE\xad\xa4\x92\f\xef\x87g\xb6\xabW\xac\rP\xf42\xb7\xc8\xaajn\xd7\n\r\x802\xd7\x1b$\x95tO*\xf4\xae\xb8\xb8m\xbf\r\xd5\xbf*\xfd\xc7\x85\x1b\x8b\xe5\x97j`c\xe0\x88?\xda\x8a#t>r\xae\xe8\xc9)', 0x0)
r1 = openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$apparmor_exec(r1, &(0x7f00000001c0)={'exec ', ':\x00~\x14-\x90\x14\x05\x00\x8fQhj\x1b\x04\xe5\x8d\xa1\xc2\xaa-\xc7gD#\x03\x1c\xee\xaa\xdd\x80\x9e/\x19{S\x15\xfe\xbaO\xae\xa1z,\xde-\x8fKN\x86g\x9b\xe4\xfe\xae/\x90\xd8^O\x86\x81\x84\xabq\xeb\x8b;F\xe9\xee\xc8\xd1\xb4Q\x05\x14\xe7\xa9c(0D7[\xccB\xe1Y\x99\x05\xae\xba\x00\xc4\b1\x84\xd6\b\xb0\xf0\x9a\x98\x85;\xffUq9:\xaf\xa2\x83\x88d\xc0\xe5\xcfF\x144}\x02\xb9\xb1\x85\x7fx\xe6\'\x8c\x898\'ej\xde;+\n1\xd4\x15\xf9Q\xacw\xcfS\xed\x80\fkt\xed\xdb|\x10\xbd\xbe\xf1\x94\x99\xe1?\x10\xda\xc7\xed['}, 0xb0)
execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

1m58.029755772s ago: executing program 1 (id=552):
syz_mount_image$exfat(&(0x7f0000000400), &(0x7f0000000040)='./file0\x00', 0x10, &(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRESHEX=0x0, @ANYBLOB="2c757466382c616c6c6f775f7574696d653d3030303030303030303030303030303030312c616c6c6f775f7574696d653d30303030303030303030303030303030303030333737372c0002e5cc2c3640db32594e71db"], 0x1, 0x1528, &(0x7f0000003240)="$eJzs3Au4TdXXMPAx5pyLQ9JOcjmsMcdip4NJkuSSkEuSJEmSW0KSJElIbrklIQm5J7knndw6Tjru9/s16eSVJElISDK/53T5e3v7+vz/79v3eb/3jN/zrLPnOGuPsefc46y9117POeebLsNrNKpZtQEzw3+F+u22NwAkAMAgALgGAAIAKJOrTC5AgGwae/+XHkT8zR6cdaVnIK4k6X/mJv3P3KT/mZv0P3OT/mdu0v/MTfqfuUn/hcjMts7Of61smXf7psvwGsv+qev/9v+8G3+9kev//51ku8x+ef//H+ufOtKk/5mb9D9zk/5nbtL/zE36n7lJ/zM36X/mJv0XIjO70tef/z/Yfn+qrvQ8LrMF/6m8K/vTJ4QQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBAiszjnLzEA8Pv4Ss9LCCGEEEIIIYQQfx+f9UrPQAghhBBCCCGEEP/3IYDRYCCALJAVEiAbZIerIAdcDTnhGojBtZALroPccD3kgbyQD/JDIhSAghACgQWGCApBYYiD9wA3QhIUhWJQHByUgJJwE5SCm6E03AJlIDkF4DYoB+WhAlSE26ES3AGVoQpUhTuhGlSHGlAT7oJacDfUhnugDtwLdeE+qAf3Q314ABrAg9AQHoJG8DA0hkegCTSFZtAcWvyn8l+AHvAi9IRe0Bv6QF94CfpBfxgAA2EQvAyD4RUYAq/CUBgGw+E1GAGvw0h4A0bBaBgDb8JYGAfjYQJMhEkwGd6CKfA2TIV3YBpMhxkwE2bBbJgD78JceA/mwfuQjADzYQEshEWwGD6EFFgCqfARLIWPIQ2WwXJYASthFayGNbAW1sF62AAbYRNshi2wFbbBdtgBO2EX7IY9VfbCJ7APPoX98Bmkw+f/Yv5Z+GN+VwQEVKjQoMEsmAUTMAGzY3bMgTkwJ+bEGMYwF+bC3Jgb82AezIf5MBETsSAWREJCRsZCWAjjGMciWASTMAmLYTF06LAklsRSeDOWxtJYBstgWSyL5bA8lseKWBErYSWsjJWx6m0LALAa1sAaeBfehXdjbayNdbAO1sW6WA/rYX2sjw2wATbEhtgIG2FjbIxNsAk2w2bYAltgS2yJrbAVtsE22BbbYjtsh+2xPXbADtgRO2In7ISdsTN2wS7YFbthN3wBX8AX8UXshdVUH+yLfbEf9sMBOBAH4ss4GF/BV/BVHIrDcDi+hq/h6zgSz+AoHI1jcAxWUuNwPE5AVpNwMk7GKTgFp+JUnIbTcTrOxFk4G+fgHJyL72HGEZaMH+AHuAAX4CJcjIsxBZdgKqbiUjyLabgMl+MKXImrcCWuwbW4BtfjBlyPm3ATbsEtuA234Q7cgbtwF+7BPfgJfoKf4qc4FNMxHQ/gATyIB/EQHsLDeBiP4JFtVwHgMTyGx/E4nsCTeApP4mk8jWfwLJ7Dc3gez+MFfC7xq4Z7iq4bCiqDUUZlUVlUgkpQ2VV2lUPlUDlVThVTMZVL5VK5VW6VR+VR+VQ+lagSVUFVUJEixSpShVQhFVdxVUQVUUkqSRVTxZRTTpVUJVUpVUqVVqVVGXWrKqtuU+VUedXaVVQVVSXVxlVWVVRVVVVVU9VVDVVT1VS1VC1VW9VWdVQdVVfVVfXU/aq+6oMD8EGV0ZlGahg2VsOxiWqqmqnm6nV8VLVUI7GVaq3aqMfVaByF7VRL1149pTqo8dhRPZPw+wtdF/W86qq6qe7qBdVDtXI9VS81Dfuovmom9lP91QA1UM3F6up9TMYa6lU1VA1Tw9VrahG+rkaqN9QoNVqNUW+qsWqcGq8mqIlqkpqs3lJT1NtqqnpHTVPT1Qw1U81Ss9Uc9a6aq95T89T7Kll9oOarBWqhWqQWqw9VilqiUtVHaqn6WKWpZWq5WqFWqlVqtVqj1qp1ar3aoDaqTWqz2qK2qm1qu9qhdqpdarfao/aqT9Q+9anarz5T6epzlfH6fVB9oQ6pL9Vh9ZU6or5WR9U36pj6Vh1XvdQJdVKdUt+r0+oHdUad7XNO/ajOq5/UBfWzuqi8Ao1aaa2NDnQWnVUn6Gw6u75K59BX65z6Gh3T1+pc+jqdW1+v8+i8Op/OrxN1AV1Qh5q01awjXUgX1nF9gy6ib9RJuqgupotrp0vokvomXUrfrEvrW3QZfasuq2/T5XR5XUFX1LfrSvoOXVlX0VX1nbqarq5r6Jr6Ll1L361r63t0HX2vrqvv0/X0/bq+fkA30A/qhvoh3Ug/rBvrR3QT3VQ30811C/2obqkf0610a91GP67b6id0O/2kbq+f0h3007qjfkZ30s/qzvo53UU/r7vqbrq7/llf1F731L10b91H99Uv6X66vx6gB+pB+mU9WL+ih+hX9VA9TA/Xr+kR+nU9Ur+hR+nReox+U4/V4/R4PUFP1JP0ZP2WnqLf1lP1O3qanq5n6KwwS8/WA36rNO+fyH/7D/kzdUb+kF8efYveqrfp7XqH3ql36d16j96r9+p9ep/er/frdJ2uD+gD+qA+qA/pQ/qwPqyP6CP6qD6qj+lj+rg+rk/ok/pH/b0+rX/QZ/RZfVb/qM/r8/rCb88BGDTKaGNMYLKYrCbBZDPZzVUmh7na5DTXmJi51uQy15nc5nqTx+Q1+bKBSTQFTEETGjLWsIlMIVPYxM0Npoi50SSZoqaYKW6cKWFKmptMzCD8Id/k/5fy/2J+K2b8ekybFqaFaWlamlamlWlj2pi2pq1pZ9qZ9qa96WA6mI6mo+lkOpnOprPpYrqYrqar6W66mx6mh+mJYHqb3qavecn0M/3NADPQDDIvm4zCQ8wQM9QMNcPNcDPCjDAjzUgzyowyGTvHmrFmvBlvJpqJZrKZbKaYKWaqmWqmmWlmhplhZplZZo6ZY+aauWaemWeSTbKZb+abhWahWWwWmxSTYlJNqllqlpo0s8wsMyvMCrPKrDJrzBqzzqwzG8wGs8lsMmlmq9lqtpvtZqfZaXab3Wav2Wv2mX1mv9lv0k26OWAOmIPmoDlkDpnD5rA5Yo6Yo+aoOWaOmePmuDlhTphT5pQ5bU6bM+aMOWfOmfPmvLlgLpiL5mLGaV+gAhWYwARZgixBQpAQZA+yBzmCHEHOIGcQC2JBriBXkDu4PsgT5A3yBfmDxKBAUDAIAwpswEEUFAoKB/HghqBIcGOQFBQNigXFAxeUCEoGNwWlgpuD0sEtQZng1qBscFtQLigfVAgqBrcHlYI7gspBlaBqcGdQLage1AhqBncFtYK7g9rBPUGd4N6gbnBfUC+4P6gfPBA0CB4MGgYPBY2Ch4PGwSNBk6Bp0CxoHrT4W+t7fybvY65n2CvMCn3CvuFLYb+wfzggHBgOCl8OB4evhEPCV8Oh4bBwePhaOCJ8PRwZvhGOCkeHY8I3w7HhuHB8OCGcGE4KJ4dvhVPCt8Op4TvhtHB6OCOcGc4KZ4dzwnfDueF74bzw/TA5/CCcHy4IF4aLwsXhh2FKuCRMDT8Kl4Yfh2nhsnB5uCJcGa4KV4drwrXhunB9uCHcGG4KN4dbwq3htnB7uCPcGe4Kd4d7wr3hJ+G+8NNwf/hZmB5+Hh4If3/b+zI8HH4VHgm/Do+G34THwm/D4+F34YnwZHgq/D48Hf4QngnPhufCH8Pz4U/hhfDn8GLoM07uM97eyZChLJSFEiiBslN2ykE5KCflpBjFKBflogAA8lAeykf5KJESqSAVpAxMTIWoEMUpTkWoCCVREhWjYuTIUUkqSaWoFJWm0lSGylBZKkvlqBxVoAp0O91Od9AdVIWq0J10J1Wn6lSTalItqkW1qTbVoTpUl+pSPapH9ak+NaAG1JAaUiNqRI2pMTWhJtSMmlELakEtqSW1olbUhtpQW2pL7agdtaf21IE6UEfqSJ2oE3WmztSFulBX6krdqTv1oB7Uk3pSb+pNfakv9aN+NIAG0CAaRINpMA2hITSUhtJwGk4jaASNpJE0ikbTGHqTxtI4Gk8TaCJNosk0mabQFJpKU2kaTaMZNINm0SyaQ3NoLs2leTSPkimZ5tN8WkgLaTEtphRKoVRKpaW0lNIojZbTclpJK2k1raa1tJbW03raSBtpM22mrbSVttN22kk7aTftpr20l/bRPtpP+ymd0ukAHaCDdJAO0SE6TIfpCB2ho3SUjtExOk7H6QSdoFN0ik7TaTpDZ+gcnaPz9BNdoJ/pInlKsNlsdnuVzWGvtjntNfY/xvlsfptoC9iCNrR5bN4/xGStTbJFbTFb3Dpbwpa0N/0pLmfL2wq2or3dVrJ32Mq/xQC/x7XW7vz1F9HtvbamvcvWsnfb2vYeW8fea+va+2w9+7Ctbx+xDWxT29A2t43sw7axfcQ2sU1tM9vctrVP2Hb2SdvePmU72Kf/FKfYJXatXWfX2w12n/3UnrM/2qP2G3ve/mR72l52kH3ZDrav2CH2VTvUDvtTPMa+acfacXa8nWAn2kl/imfYmXaWnW3n2HftXPven+LF9kObbFPtfLvALrSLfokz5pRqP7JL7cc2zS6zy+0Ku9Kusqvtmn/MdYXdZDfbLXav/cRutzvsTrvL7rZ7fokz1rHffmbT7ef2iP3aHrRf2EP2mD1sv/olzljfMfutPW6/syfsSXvKfm9P2x/sGXv2l/VnrP17+7O9aL0FRlas2XDAWTgrJ3A2zs5XcQ6+mnPyNRzjazkXX8e5+XrOw3k5H+fnRC7ABTlkYsvMERfiwhznG7gI38hJXJSLcXF2XIJL8k1cim/m0pxx9norl+XbuByX5wpckW/nSnwHV+YqXJXv5GpcnWtwTb6La/HdXJvv4Tp8L9fl+7ge38/1+QFuwA9yQ36IG/HD3Jgf4SbclJtxc27Bj3JLfoxbcWtuw49zW36C2/GT3J6f4g78NHfkZ7gTP8ud+Tnuws9zV+7G3fkF7sEvck/uxb25D/fll7gf9+cBPJAH8cs8mF/hIfwqD+VhPJxf4xH8Oo/kN3gUj+Yx/CaP5XE8nifwRJ7Ek/ktnsJv81R+h6fxdJ7BM3kWz+Y5/C7P5fd4Hr/PyfwBz+cFvJAX8WL+kFN4CafyR7yUP+Y0XsbLeQWv5FW8mtfwWl7H63kDb+RNvJkVb+VtvJ13MPIu3s17eC9/wvv4U97Pn3E6f84H+N/4IH/Bh/hLPsxf8RH+mo/yN3yMv+Xj/B2f4JN8ir/n0/wDn+GzfI5/5PP8E1/gn/kie4YIIxXpyERBlCXKGiVE2aLs0VVRjujqKGd0TRSLro1yRddFuaProzxR3ihflD9KjApEBaMwoshGHEVRoahwFI9uiIpEN0ZJUdGoWFQ8clGJqGR0U1QqujkqHd0SlYlujcpGt0XlovLRw/dWjG6PKkV3RJWjKlHV6M6oWlQ9qhHVjO6KakV3R7Wje6I60b1R6ei+qF50f1Q/eiBqAA9GDaOHokbRw1Hj6JGoSdQ0ahY1j1pEj0Yto8eiVlHrqE30eNQ2eiJqFz0ZtY+eijpET192f++oT9Q3eil6KfL+Hr0wvii+OP5hPCW+JJ4a/yi+NP5xPC2+LL48viK+Mr4qvjq+Jr42vi6+Pr4hvjG+Kb45viXufc2s4NApp51xgcvisroEl81ld1e5HO5ql9Nd42LuWpfLXedyu+tdHpfX5XP5XaIr4Aq60JGzjl3kCrnCLu5ucEXcjS7JFXXFXHHnXAlX0jV3LVwL19I95lq51q6Ne9w97p5wT7gn3ZPuKdfBPe06umdcJ/es6+yec8+5511X1811dy+4Hu5F19P1cr1db9fX9XX9XD83wA1wg9wgN9gNdkPcEDfUDXXD3XA3wo1wI91IN8qNcmPcGDfWjXXj3Xg30U10k91kN8VNcVPdVDfNTXMz3Aw3y81yc9wcN9fNdfPcPJeclOzmu/luoVvoFrvFLsWluFSX6pa6pS7Npbnlbrlb6Va61W61W+vWuvVuvdvoNrrNbrPb6ra67W672+l2ut1ut9vr9rp9bp/b7/a7dJfuDrgD57w76A65L91h95U74r52R9037pj71h1337kT7qQ75b53p90P7ow76865H91595O74H52F513k2NvxabE3o5Njb0TmxabHpsRmxmbFZsdmxN7NzY39l5sXuz9WHLsg9j82ILYwtii2OLYh7GU2JJYauyj2NLYx7G02LLY8tiK2MrYqpj3BbZHvpAv7OP+Bl/E3+iTfFFfzBf3zpfwJf1NvpS/2Zf2t/gy/lZf1t/my/nyvoJ/xDfxTX0z39y38I/6lv4x38q39m38476tf8K380/69v4p38E/7Tv6Z3wn/6zv7J/zXfzzvqvv5rv7F3wP/6Lv6bXv7fv4vv4l38/39wP8QD/Iv+wH+1f8EP+qH+qH+eH+NT/Cv+5H+jf8KD/aj/Fv+rF+nB/vJ/iJfpKf7N/yU/zbfqp/x0/z0/0MP9PP8rP9HP+un+vf8/P8+z7Zf+Dn+wV+oV/kF/sPfYpf4lP9R36p/9in+WV+uV/hIWGVX+3X+LV+nV/vN/iNfpPf7Lf4rX6b3+53+J1+l9/t9/i9/hO/z3/q9/vPfLr/3B/w/+YP+i/8If+lP+y/8kf81/6o/8Yf89/64/47f8Kf9Kf89/60/8Gf8Wf9Of+jP+9/8hf8z/6i/M2aEEIIIcQ/RV9mf58/ROofX9Vv3+kLAFfvyH/4P9bcmOfXcX+V2DYGAE/16vLg71u1ar179/7tvmkagsILACB2KT8LXIqXQRt4AtpDayj1v51ff9XtPF+mfvxWgOz/LicBLsWX6t/8F/XHJV+2/gKApMKXcrLBpfhS/dJ/qh38Uj9vy8vUz/bFZIBW/y4vB1yKL9UvCY/B09D+D/cUQgghhBBCCCF+1V9V6HS5z7cZn88TzaWcrHApvtzncyGEEEIIIYQQQlx5z3br/uSj7du37vQXgyp/vUsGmWWQ5b/HNK7E4LIHyL8yALjSy/nHAAF+ucT31/e50q9MQgghhBBCiL/bpZP+Kz0TIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBAi8/p/8S/HrvQahRBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCiCvtfwUAAP//LtcmvA==")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)

1m57.685788202s ago: executing program 1 (id=557):
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4, &(0x7f0000000000), 0x0, 0x236, &(0x7f0000000300)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='mnt/encrypted_dir\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='mnt/encrypted_dir\x00', 0x800, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000006c0)=@v1={0x0, @aes256, 0x4, @auto="77ca3a46da0a4262"})

1m57.233731018s ago: executing program 1 (id=560):
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
r1 = fanotify_init(0x1, 0x1)
fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0)
getdents(r0, &(0x7f0000000800)=""/4096, 0x1000)

1m56.666359322s ago: executing program 33 (id=560):
r0 = syz_open_procfs(0x0, &(0x7f0000000200)='task\x00')
r1 = fanotify_init(0x1, 0x1)
fanotify_mark(r1, 0x1, 0x40001019, r0, 0x0)
getdents(r0, &(0x7f0000000800)=""/4096, 0x1000)

1m30.11232002s ago: executing program 2 (id=729):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
unshare(0x2040600)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffcf8}, 0x48)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000f00)=@raw={'raw\x00', 0xc01, 0x3, 0x578, 0x0, 0x5002004a, 0x6, 0x0, 0x3, 0x4e0, 0x3c8, 0x3c8, 0x4e0, 0x3c8, 0x7fffffe, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast=0xfeffffff, 0x0, 0x0, 'sit0\x00', 'bridge0\x00'}, 0x0, 0x2a0, 0x2c8, 0x0, {0x0, 0x3fa}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r1}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0xe, 0x100, 0x1}}}, {{@uncond, 0x0, 0x1b8, 0x218, 0x0, {}, [@common=@inet=@sctp={{0x148}, {[0x4e20, 0x4e24], [0x4e24, 0x4e20], [0x10000, 0x7f, 0x0, 0x40, 0x9, 0xffff, 0x0, 0x4, 0xfffffffb, 0x3, 0x9, 0x1, 0x5, 0x5, 0x4, 0x1, 0x4, 0x1, 0x9, 0x200, 0x1, 0xa, 0x6, 0x0, 0x39ea, 0xffff, 0x2, 0x800, 0x2, 0x2, 0x5f, 0x778, 0x1, 0x0, 0xffff, 0xd35a, 0x1, 0x2, 0x1, 0x10000, 0xfffffff8, 0x2, 0x7, 0x80000000, 0x3, 0x401, 0x80, 0x2, 0x3, 0x8, 0x6, 0x8000, 0x8000, 0x5, 0xf, 0x1, 0x1, 0x401, 0x100, 0x81, 0x1, 0x5, 0x5, 0x3], 0x2, [{0x2, 0x6, 0x4}, {0x7, 0x9}, {0x8c, 0x50, 0xf7}, {0x4, 0xf9, 0x2}], 0x2, 0x4, 0x5}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @link_local, 0x0, 0x0, [0x0, 0x0, 0x21, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe13], 0x0, 0x0, 0xfffffffffffffffc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x5d8)

1m29.846435706s ago: executing program 2 (id=731):
r0 = io_uring_setup(0x5f41, &(0x7f00000001c0)={0x0, 0x0, 0x2, 0x20000})
r1 = socket$netlink(0x10, 0x3, 0x10)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
close_range(r0, 0xffffffffffffffff, 0x0)

1m29.703483425s ago: executing program 2 (id=732):
r0 = socket(0x400000000010, 0x3, 0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000a80)={'veth1_to_bridge\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x10}}, [@qdisc_kind_options=@q_pie={{0x8}, {0x14, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x42743417}, @TCA_PIE_TUPDATE={0x8, 0x3, 0xfffffff4}]}}]}, 0x40}}, 0x0)

1m29.356730915s ago: executing program 2 (id=735):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f0000000180)=ANY=[@ANYBLOB='nobarrier,gid=', @ANYRESHEX=0x0, @ANYBLOB="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", @ANYRESDEC, @ANYRESDEC], 0x44, 0x6f7, &(0x7f0000001f80)="$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")
r0 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x8201)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd000000801900", [0x0, 0x2000000000001]}})

1m29.062714022s ago: executing program 2 (id=737):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x3, &(0x7f0000002480))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setregid(0x0, 0xee00)

1m28.553715602s ago: executing program 2 (id=744):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x4}}, 0x10)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000280), r1}}, 0x18)

1m27.765604648s ago: executing program 34 (id=744):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000180)={0x7, 0x8, 0xfa00, {r1, 0x4}}, 0x10)
write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f0000000040)={0x13, 0x10, 0xfa00, {&(0x7f0000000280), r1}}, 0x18)

7.517748159s ago: executing program 6 (id=1221):
r0 = socket$inet_sctp(0x2, 0x800000000000001, 0x84)
sendto$inet(r0, &(0x7f0000000100)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10)
shutdown(r0, 0x1)
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x34, 0xfffffffe}, 0x9c)

7.229817786s ago: executing program 6 (id=1225):
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0xa, 0x7, 0x2, 0x4}, 0x50)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4})
write$sndseq(r0, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)

6.893806645s ago: executing program 6 (id=1228):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x800, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x14)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000480)=0x1)

6.417667514s ago: executing program 6 (id=1233):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x24020000)
mount(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x225d4e1, 0x0)

6.226284185s ago: executing program 6 (id=1235):
r0 = syz_io_uring_setup(0x3d1a, &(0x7f0000000480)={0x0, 0x0, 0x10, 0x1}, &(0x7f0000000580), &(0x7f00000000c0))
io_uring_enter(r0, 0x0, 0x235c, 0x3, 0x0, 0x0)
io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0)
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x13, &(0x7f0000000140)=[0x0, 0x7fff], 0x2)

5.660884218s ago: executing program 6 (id=1241):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x10, 0x1, 0xfffffffc}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x86}}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r2, 0x2000012, 0xe, 0x0, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xb}, 0x50)

3.915984341s ago: executing program 4 (id=1251):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000016c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x840e, &(0x7f0000000080)={[{@init_itable_val}, {@dioread_nolock}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@jqfmt_vfsold}, {@bsdgroups}, {@grpjquota}]}, 0x3, 0x42f, &(0x7f0000000940)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
lseek(r0, 0x101, 0x1)
getdents64(r0, 0xfffffffffffffffe, 0x29)

3.40576088s ago: executing program 4 (id=1253):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0xb, 0x8, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000280)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={r2, &(0x7f00000002c0)="e60759a024119a6faaf9ce", 0x0}, 0x20)

3.197302783s ago: executing program 4 (id=1255):
sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x1, 0x4, 0x101, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFULA_CFG_CMD={0x5, 0x1, 0x4}, @NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_FLAGS={0x6, 0x6, 0x1, 0x0, 0x4}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x10001}, @NFULA_CFG_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0xfffffff8}, @NFULA_CFG_MODE={0xa, 0x2, {0xf, 0x2}}, @NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x200}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000041}, 0x40000)
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x46, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x22, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0)

3.120551787s ago: executing program 3 (id=1256):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, <r2=>0x0})
ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000040)={0x28, 0x0, r2, 0x1011, &(0x7f0000002700)=""/4113})

2.869877802s ago: executing program 4 (id=1257):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000000100)={&(0x7f00007ea000/0x2000)=nil, 0x2000})

2.869525542s ago: executing program 3 (id=1258):
r0 = syz_open_procfs(0x0, &(0x7f0000000000)='pagemap\x00')
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
migrate_pages(0x0, 0x4, &(0x7f0000000000)=0x200000007f, &(0x7f0000000300)=0xa)
pread64(r0, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300)

2.853736113s ago: executing program 5 (id=1259):
mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0)
r0 = inotify_init1(0x800)
inotify_add_watch(r0, &(0x7f0000000040)='./file0\x00', 0x40000000)
inotify_add_watch(r0, &(0x7f0000000240)='./file0\x00', 0x40000000)

2.792895377s ago: executing program 4 (id=1260):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[], 0x1, 0x5505, &(0x7f0000000340)="$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")
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x103042, 0x5d9f61795f7ff7ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000040)={0x1000000, 0x10000002000003})

2.573672729s ago: executing program 5 (id=1261):
r0 = socket$kcm(0x10, 0x2, 0x4)
r1 = socket$igmp(0x2, 0x3, 0x2)
connect$inet(r1, &(0x7f0000000c40)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f020000000000000187ac1414aaa69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0)

2.427198408s ago: executing program 5 (id=1262):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x24, r1, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x14}}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90)
sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x1c, r1, 0x50b, 0x70bd28, 0x25dfdbfe, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2405c000}, 0x4000000)

2.268972407s ago: executing program 5 (id=1263):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x40000023, 0x0, 0x9800000000000000}]})

1.817720783s ago: executing program 5 (id=1264):
syz_mount_image$jfs(&(0x7f0000000400), &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1c802, &(0x7f0000002740)=ANY=[], 0x3, 0x5f74, &(0x7f0000002040)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f00000005c0)='\"', 0x1, 0x4fed0)
sendfile(r0, r0, 0x0, 0xe3aa6ea)

1.387619589s ago: executing program 3 (id=1265):
syz_mount_image$hfsplus(&(0x7f0000000400), &(0x7f0000000600)='./file0\x00', 0x0, &(0x7f00000000c0)={[{@nobarrier}, {@nobarrier}, {@type={'type', 0x3d, "aa58ce62"}}, {@gid}, {@gid}, {@nobarrier}, {@nobarrier}]}, 0x44, 0x718, &(0x7f00000011c0)="$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")
lsetxattr$trusted_overlay_redirect(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, 0x0, 0x1)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000080))
llistxattr(&(0x7f0000000180)='./file0\x00', 0x0, 0x0)

824.612432ms ago: executing program 3 (id=1266):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58)
r1 = accept$alg(r0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000008c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}}], 0x1, 0xcb, 0x0)

585.216216ms ago: executing program 4 (id=1267):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
setpriority(0x1, 0x0, 0x3)

473.699323ms ago: executing program 3 (id=1268):
capset(&(0x7f0000000040)={0x19980330}, &(0x7f0000000080)={0x6, 0x6, 0x2, 0x87, 0xffffffff, 0x2})
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={0xffffffffffffffff, 0x0, 0x193, 0x0, &(0x7f0000000a00)="b44c806748f06309624431ed3373010001000000008c6390009c4ebd873094563683b7ee0fae7a6a53200386ce51def6a4effb9de8b4645c2b9c0614907dac12c6d34a8266e6124b925240080cd4f4e5b5da601596c31f137d2ce6ca74fd87f90ea0be786fe13ac0805807dd6853458eccc84575e9af5fee935d3bc54f9bdf5cf073b5a597a9df9cb422ce2ab5ff0700000000000093b110a54f32ad69d05a805194380816a626940f933c95e9c48cc620627041732f2eb0e4c6b6ed2449161c8b447829e7110b031b2e42528ed9aaacacae558272260c6b6ab183dd433a628de952e48b76d92cb36789fa2048c18441e99f6d3928bbcba48129e9c76ea7bafde2f322a406679edc8807a1ac048371092e1545d4feae4e5cc5d59840916e65ca94a1543a0ceb72c7342ce4f36d2a0d920d256eb72e6e3b8a3f043a1f9e1dd290b02c5c2dbe9fbfb4e6c3256dbdb497f13091b76ec3a4344c0b61740561819331f69b6dae2ba1c84842ce053acbac32105ce8807c733200447c6a349b0dfa18e5f324d2ac13427962c47d6eb2f31ff4a3716116", 0x0, 0x405, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)
r0 = syz_open_dev$sg(&(0x7f0000000140), 0x6f5e, 0x0)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x85)

240.512186ms ago: executing program 3 (id=1269):
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000380), 0x1e9000, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x2)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000280)=0x7)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x200000000000000)

0s ago: executing program 5 (id=1270):
r0 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x189802)
r1 = syz_io_uring_setup(0xeec, &(0x7f0000000780)={0x0, 0x0, 0x10100}, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000140)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000100)=@IORING_OP_WRITEV={0x2, 0x0, 0x6003, @fd=r0, 0xff, &(0x7f0000000040)=[{&(0x7f0000000200)="c0", 0x1}, {0x0}], 0x2, 0x4, 0x1, {0x3}})
io_uring_enter(r1, 0x567, 0x0, 0x0, 0x0, 0x0)

kernel console output (not intermixed with test programs):

4) and media sector size (512).
[  172.089533][ T7642] loop3: detected capacity change from 0 to 64
[  172.100339][ T7642] hfs: unable to locate alternate MDB
[  172.111721][ T7642] hfs: continuing without an alternate MDB
[  172.114482][ T7640] loop4: detected capacity change from 0 to 256
[  172.206812][ T7640] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  172.258879][ T7640] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  172.588631][ T7651] loop1: detected capacity change from 0 to 256
[  172.622467][ T7651] exfat: Unknown parameter '0xffffffffffffffff0x0000000000000000'
[  172.684215][ T7656] netlink: 24 bytes leftover after parsing attributes in process `syz.2.553'.
[  173.416639][ T1137] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.606448][ T1137] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.796530][ T1137] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  173.956276][ T1137] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.084522][ T7664] loop2: detected capacity change from 0 to 32768
[  174.196050][ T7664] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  174.321685][ T7664] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  175.038050][ T5768] ocfs2: Unmounting device (7,2) on (node local)
[  175.148782][   T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  175.164637][   T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  175.175929][   T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  175.201351][   T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  175.212841][   T51] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3
[  175.221049][   T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  175.580756][ T7686] lo speed is unknown, defaulting to 1000
[  175.649414][ T7695] loop2: detected capacity change from 0 to 1024
[  175.658013][ T7695] EXT4-fs: Ignoring removed nomblk_io_submit option
[  175.761269][ T7695] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  175.952611][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.840685][ T7686] chnl_net:caif_netlink_parms(): no params data found
[  177.273934][ T5778] Bluetooth: hci1: command tx timeout
[  177.303882][ T7731] loop2: detected capacity change from 0 to 64
[  177.383588][ T7731] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[  177.414266][ T1137] hsr_slave_0: left promiscuous mode
[  177.444292][ T1137] hsr_slave_1: left promiscuous mode
[  177.503633][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  177.523491][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_0
[  177.558985][ T1137] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  177.586992][ T1137] batman_adv: batadv0: Removing interface: batadv_slave_1
[  177.617083][ T1137] bridge_slave_1: left allmulticast mode
[  177.636209][ T1137] bridge_slave_1: left promiscuous mode
[  177.642123][ T1137] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.755089][ T1137] bridge_slave_0: left allmulticast mode
[  177.760958][ T1137] bridge_slave_0: left promiscuous mode
[  177.793673][ T1137] bridge0: port 1(bridge_slave_0) entered disabled state
[  178.020097][ T1137] veth1_macvtap: left promiscuous mode
[  178.026633][ T1137] veth0_macvtap: left promiscuous mode
[  178.062437][ T1137] veth1_vlan: left promiscuous mode
[  178.082417][ T1137] veth0_vlan: left promiscuous mode
[  178.505107][ T5818] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  178.706191][ T5818] usb 3-1: Using ep0 maxpacket: 8
[  178.727014][ T5818] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[  178.743677][ T5818] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  178.771547][ T5818] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  178.782635][ T5818] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  178.795053][ T5818] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  178.809281][ T5818] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  178.818949][ T5818] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.039103][ T5818] usb 3-1: GET_CAPABILITIES returned 0
[  179.056736][ T5818] usbtmc 3-1:16.0: can't read capabilities
[  179.272967][ T5818] usb 3-1: USB disconnect, device number 3
[  179.286790][ T5778] Bluetooth: hci1: command tx timeout
[  179.470228][ T1137] team0 (unregistering): Port device team_slave_1 removed
[  179.532727][ T1137] team0 (unregistering): Port device team_slave_0 removed
[  179.595873][ T1137] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  179.655817][ T1137] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  180.285268][ T1137] bond0 (unregistering): Released all slaves
[  180.440335][ T7686] bridge0: port 1(bridge_slave_0) entered blocking state
[  180.447749][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state
[  180.458561][ T7686] bridge_slave_0: entered allmulticast mode
[  180.467515][ T7686] bridge_slave_0: entered promiscuous mode
[  180.497307][ T7686] bridge0: port 2(bridge_slave_1) entered blocking state
[  180.504774][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state
[  180.519728][ T7686] bridge_slave_1: entered allmulticast mode
[  180.527830][ T7686] bridge_slave_1: entered promiscuous mode
[  180.727776][ T7686] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  180.782982][ T7686] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  181.034331][ T7686] team0: Port device team_slave_0 added
[  181.068732][ T7686] team0: Port device team_slave_1 added
[  181.204796][ T7686] batman_adv: batadv0: Adding interface: batadv_slave_0
[  181.242657][ T7686] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.277760][ T7686] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  181.286173][ T5778] Bluetooth: hci1: command tx timeout
[  181.291086][ T7686] batman_adv: batadv0: Adding interface: batadv_slave_1
[  181.317068][ T7686] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  181.344741][ T7686] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  181.567256][ T7686] hsr_slave_0: entered promiscuous mode
[  181.593910][ T7686] hsr_slave_1: entered promiscuous mode
[  181.594596][   T28] kauditd_printk_skb: 11 callbacks suppressed
[  181.594609][   T28] audit: type=1800 audit(1770072966.926:50): pid=7787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.2.590" name="/newroot/151/bus/#811//deleted" dev="tmpfs" ino=811 res=0 errno=0
[  181.714503][ T1137] IPVS: stop unused estimator thread 0...
[  181.857910][ T5855] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  182.062349][ T5855] usb 5-1: Using ep0 maxpacket: 16
[  182.098443][ T5855] usb 5-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  182.121617][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.146600][ T5855] usb 5-1: Product: syz
[  182.151029][ T5855] usb 5-1: Manufacturer: syz
[  182.163928][ T5855] usb 5-1: SerialNumber: syz
[  182.192409][ T5855] usb 5-1: config 0 descriptor??
[  182.212059][ T5855] ssu100 5-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  182.264728][ T7686] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  182.293917][ T7686] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  182.387619][ T7686] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  182.413374][ T7686] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  182.492026][ T7818] Driver unsupported XDP return value 0 on prog  (id 27) dev N/A, expect packet loss!
[  182.869256][ T7686] 8021q: adding VLAN 0 to HW filter on device bond0
[  182.941241][ T7686] 8021q: adding VLAN 0 to HW filter on device team0
[  182.998859][ T7835] loop2: detected capacity change from 0 to 4096
[  183.014880][ T5855] ssu100: probe of 5-1:0.0 failed with error -71
[  183.023829][ T1146] bridge0: port 1(bridge_slave_0) entered blocking state
[  183.031059][ T1146] bridge0: port 1(bridge_slave_0) entered forwarding state
[  183.080243][ T5855] usb 5-1: USB disconnect, device number 5
[  183.113134][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state
[  183.120362][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state
[  183.129829][ T7835] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  183.248066][ T5778] Bluetooth: hci1: command tx timeout
[  183.483584][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  183.614852][ T7849] loop3: detected capacity change from 0 to 2048
[  183.745259][ T7849] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  183.988729][ T7686] 8021q: adding VLAN 0 to HW filter on device batadv0
[  184.039674][ T1137] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1231: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  184.089389][ T1137] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  184.101958][ T1137] EXT4-fs (loop3): This should not happen!! Data will be lost
[  184.101958][ T1137] 
[  184.112169][ T1137] EXT4-fs (loop3): Total free blocks count 0
[  184.118684][ T1137] EXT4-fs (loop3): Free/Dirty block details
[  184.124931][ T1137] EXT4-fs (loop3): free_blocks=4096
[  184.130256][ T1137] EXT4-fs (loop3): dirty_blocks=32
[  184.143365][ T1137] EXT4-fs (loop3): Block reservation details
[  184.150638][ T1137] EXT4-fs (loop3): i_reserved_data_blocks=2
[  184.158788][ T1137] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 2 with error 28
[  184.189727][ T7857] loop2: detected capacity change from 0 to 8192
[  184.281443][ T7864] loop4: detected capacity change from 0 to 8192
[  185.204858][ T7686] veth0_vlan: entered promiscuous mode
[  185.267932][ T7686] veth1_vlan: entered promiscuous mode
[  185.291443][ T7892] netlink: 28 bytes leftover after parsing attributes in process `syz.2.613'.
[  185.398772][ T7686] veth0_macvtap: entered promiscuous mode
[  185.422844][ T7686] veth1_macvtap: entered promiscuous mode
[  185.473942][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.492794][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.522537][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.537401][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.568667][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  185.589917][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.624964][ T7686] batman_adv: batadv0: Interface activated: batadv_slave_0
[  185.684517][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.734225][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.759320][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.794917][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.826312][ T7686] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  185.849117][ T7686] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  185.878378][ T7686] batman_adv: batadv0: Interface activated: batadv_slave_1
[  185.916269][ T7909] netlink: 284 bytes leftover after parsing attributes in process `syz.2.618'.
[  185.951714][ T7686] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  185.964089][ T7686] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  185.973023][ T7686] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  185.982272][ T7686] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  186.245117][ T1137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.281618][ T1137] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.390308][   T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  186.421348][   T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  186.837200][ T5855] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  186.992090][ T5811] usb 4-1: new full-speed USB device number 5 using dummy_hcd
[  187.045325][ T5855] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  187.083713][ T5855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  187.105874][ T5855] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 65535, setting to 64
[  187.141968][ T5855] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  187.182203][ T5855] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  187.202698][ T5855] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  187.202695][ T5811] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  187.202731][ T5811] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  187.233657][ T5855] usb 3-1: Manufacturer: syz
[  187.278290][ T5855] usb 3-1: config 0 descriptor??
[  187.321915][ T5811] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 512, setting to 64
[  187.346263][ T5811] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 1600, setting to 64
[  187.387063][ T5811] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  187.406512][ T5811] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  187.406631][ T7957] netlink: 4 bytes leftover after parsing attributes in process `syz.4.631'.
[  187.438678][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  187.452565][ T5811] usb 4-1: SerialNumber: syz
[  187.498870][ T7936] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  187.523422][ T7936] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  187.562706][ T7936] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  187.597434][ T7932] loop2: detected capacity change from 0 to 2048
[  187.610810][    T9] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  187.653827][ T7932] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  187.734917][ T7964] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  187.746938][ T7932] syz.2.624: attempt to access beyond end of device
[  187.746938][ T7932] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  187.801648][ T7936] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  187.831867][    T9] usb 6-1: Using ep0 maxpacket: 32
[  187.852661][ T7936] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  187.866557][    T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  187.887731][ T7936] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  187.905235][    T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  187.944745][    T9] usb 6-1: New USB device found, idVendor=256c, idProduct=006e, bcdDevice= 0.00
[  187.960112][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  187.999999][    T9] usb 6-1: config 0 descriptor??
[  188.096575][ T5855] rc_core: IR keymap rc-hauppauge not found
[  188.102612][ T5855] Registered IR keymap rc-empty
[  188.141860][ T5855] mceusb 3-1:0.0: Error: mce write urb status = -71
[  188.179507][ T5855] mceusb 3-1:0.0: Error: mce write urb status = -71
[  188.211766][ T5855] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  188.228148][ T5855] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input8
[  188.249792][ T5855] mceusb 3-1:0.0: Error: mce write urb status = -71
[  188.287142][ T5855] mceusb 3-1:0.0: Error: mce write urb status = -71
[  188.315242][ T5855] mceusb 3-1:0.0: Error: mce write urb status = -71
[  188.338956][ T5811] cdc_ether 4-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.3-1, CDC Ethernet Device, 42:42:42:42:42:42
[  188.343866][ T5855] mceusb 3-1:0.0: Error: mce write urb status = -71
[  188.411306][ T5855] mceusb 3-1:0.0: Error: mce write urb status = -71
[  188.467671][ T5855] mceusb 3-1:0.0: Error: mce write urb status = -71
[  188.496587][ T5855] mceusb 3-1:0.0: Error: mce write urb status = -71
[  188.531117][ T5855] mceusb 3-1:0.0: Error: mce write urb status = -71
[  188.539724][ T5811] usb 4-1: USB disconnect, device number 5
[  188.559519][ T5811] cdc_ether 4-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.3-1, CDC Ethernet Device
[  188.564291][ T5855] mceusb 3-1:0.0: Error: mce write urb status = -71
[  188.610451][ T5855] mceusb 3-1:0.0: Error: mce write urb status = -71
[  188.624484][    T9] usb 6-1: string descriptor 0 read error: -71
[  188.631758][    T9] uclogic 0003:256C:006E.0001: failed retrieving string descriptor #200: -71
[  188.650720][ T5855] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  188.661747][    T9] uclogic 0003:256C:006E.0001: failed retrieving pen parameters: -71
[  188.670413][    T9] uclogic 0003:256C:006E.0001: failed probing pen v2 parameters: -71
[  188.679942][ T5855] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  188.691324][    T9] uclogic 0003:256C:006E.0001: failed probing parameters: -71
[  188.705057][ T5855] usb 3-1: USB disconnect, device number 4
[  188.721472][    T9] uclogic: probe of 0003:256C:006E.0001 failed with error -71
[  188.770554][    T9] usb 6-1: USB disconnect, device number 2
[  189.806059][ T8003] loop4: detected capacity change from 0 to 64
[  189.853938][ T8003] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[  191.796586][ T8059] loop2: detected capacity change from 0 to 128
[  191.828837][ T8059] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  191.883533][ T8059] ext4 filesystem being mounted at /173/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  192.088912][ T8064] program syz.5.658 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  192.144863][ T5768] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  192.925650][ T8087] program syz.5.667 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  193.928342][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  193.936197][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  194.097042][ T8115] netlink: 4 bytes leftover after parsing attributes in process `syz.4.677'.
[  194.887664][ T8137] netlink: 16 bytes leftover after parsing attributes in process `syz.5.686'.
[  195.110568][ T8143] loop4: detected capacity change from 0 to 256
[  195.155491][ T8143] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  195.309459][ T8145] pim6reg1: tun_chr_ioctl cmd 1074025677
[  195.344164][ T8145] pim6reg1: linktype set to 270
[  196.442490][ T8167] loop3: detected capacity change from 0 to 256
[  196.676485][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.703'.
[  196.791811][   T23] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  196.871078][ T8184] loop2: detected capacity change from 0 to 512
[  196.882912][ T8184] EXT4-fs: Ignoring removed nomblk_io_submit option
[  196.908878][ T8184] EXT4-fs error (device loop2): __ext4_iget:5071: inode #11: block 1: comm syz.2.706: invalid block
[  196.915763][ T8184] EXT4-fs error (device loop2): ext4_orphan_get:1403: comm syz.2.706: couldn't read orphan inode 11 (err -117)
[  196.949538][ T8184] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  197.000179][ T8184] EXT4-fs error (device loop2): ext4_add_entry:2486: inode #2: comm syz.2.706: Directory hole found for htree leaf block 0
[  197.045270][   T23] usb 6-1: config 0 has an invalid interface number: 104 but max is 0
[  197.054007][   T23] usb 6-1: config 0 has no interface number 0
[  197.061445][   T23] usb 6-1: config 0 interface 104 has no altsetting 0
[  197.094879][   T23] usb 6-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9
[  197.113456][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.132061][   T23] usb 6-1: Product: syz
[  197.135148][ T5768] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  197.139264][   T23] usb 6-1: Manufacturer: syz
[  197.152469][   T23] usb 6-1: SerialNumber: syz
[  197.166951][   T23] usb 6-1: config 0 descriptor??
[  197.179635][   T23] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  197.378965][   T23] gspca_vc032x: reg_r err -71
[  197.391811][   T23] gspca_vc032x: I2c Bus Busy Wait 00
[  197.397387][   T23] gspca_vc032x: I2c Bus Busy Wait 00
[  197.408224][   T23] gspca_vc032x: I2c Bus Busy Wait 00
[  197.416500][   T23] gspca_vc032x: I2c Bus Busy Wait 00
[  197.423908][   T23] gspca_vc032x: I2c Bus Busy Wait 00
[  197.429470][   T23] gspca_vc032x: I2c Bus Busy Wait 00
[  197.440516][   T23] gspca_vc032x: I2c Bus Busy Wait 00
[  197.446396][   T23] gspca_vc032x: I2c Bus Busy Wait 00
[  197.454054][   T23] gspca_vc032x: I2c Bus Busy Wait 00
[  197.464284][   T23] gspca_vc032x: I2c Bus Busy Wait 00
[  197.472211][   T23] gspca_vc032x: I2c Bus Busy Wait 00
[  197.478204][   T23] gspca_vc032x: I2c Bus Busy Wait 00
[  197.484275][   T23] gspca_vc032x: I2c Bus Busy Wait 00
[  197.495077][   T23] gspca_vc032x: I2c Bus Busy Wait 00
[  197.502312][   T23] gspca_vc032x: I2c Bus Busy Wait 00
[  197.510603][   T23] gspca_vc032x: I2c Bus Busy Wait 00
[  197.523197][   T23] gspca_vc032x: I2c Bus Busy Wait 00
[  197.525556][ T5855] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  197.538769][   T23] gspca_vc032x: I2c Bus Busy Wait 00
[  197.548636][   T23] gspca_vc032x: Unknown sensor...
[  197.558877][   T23] vc032x: probe of 6-1:0.104 failed with error -22
[  197.588799][   T23] usb 6-1: USB disconnect, device number 3
[  197.749024][ T5855] usb 3-1: Using ep0 maxpacket: 32
[  197.775230][ T5855] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  197.810582][ T5855] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  197.835078][ T5855] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  197.852703][ T5855] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  197.879242][ T5855] usb 3-1: Product: syz
[  197.891313][ T8198] loop4: detected capacity change from 0 to 1024
[  197.892266][ T5855] usb 3-1: Manufacturer: syz
[  197.973510][ T5855] hub 3-1:4.0: USB hub found
[  198.176215][ T5855] hub 3-1:4.0: config failed, hub has too many ports! (err -19)
[  198.209659][   T34] hfsplus: b-tree write err: -5, ino 4
[  198.468079][ T5855] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  198.506414][ T5811] usb 3-1: USB disconnect, device number 5
[  198.666541][ T5855] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  198.687710][ T5855] usb 6-1: config 0 has no interface number 0
[  198.706336][ T5855] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.725417][ T5855] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.744538][ T5855] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  198.763761][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.774155][ T5855] usb 6-1: config 0 descriptor??
[  198.879830][ T8215] loop3: detected capacity change from 0 to 32768
[  198.986299][ T8215] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  199.161979][ T8215] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  199.207261][ T5855] uclogic 0003:256C:006D.0002: unknown main item tag 0x0
[  199.233687][ T5855] uclogic 0003:256C:006D.0002: unknown main item tag 0x0
[  199.245449][ T8215] XFS (loop3): Starting recovery (logdev: internal)
[  199.254581][ T8233] loop4: detected capacity change from 0 to 1024
[  199.263114][ T5855] uclogic 0003:256C:006D.0002: unknown main item tag 0x0
[  199.279396][ T5855] uclogic 0003:256C:006D.0002: unknown main item tag 0x0
[  199.300555][ T5855] uclogic 0003:256C:006D.0002: unknown main item tag 0x0
[  199.305865][ T8215] XFS (loop3): Ending recovery (logdev: internal)
[  199.314353][ T5855] uclogic 0003:256C:006D.0002: No inputs registered, leaving
[  199.322928][ T8233] hfsplus: invalid length 32517 has been corrected to 255
[  199.336060][ T8215] XFS (loop3): Quotacheck needed: Please wait.
[  199.419234][ T5855] uclogic 0003:256C:006D.0002: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.5-1/input1
[  199.438726][ T8215] XFS (loop3): Quotacheck: Done.
[  199.456094][ T5855] usb 6-1: USB disconnect, device number 4
[  199.492864][ T1137] hfsplus: b-tree write err: -5, ino 4
[  199.686697][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  199.696228][ T8235] fido_id[8235]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory
[  200.425667][ T8252] loop3: detected capacity change from 0 to 2048
[  200.507028][ T8252] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  200.557272][ T8257] x_tables: ip_tables: sctp match: only valid for protocol 132
[  200.592193][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  200.763803][   T51] Bluetooth: hci3: command 0x0406 tx timeout
[  200.786398][ T8260] loop3: detected capacity change from 0 to 2048
[  200.822737][ T8260] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  200.893070][ T8265] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  200.905570][ T8260] syz.3.730: attempt to access beyond end of device
[  200.905570][ T8260] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  201.256948][ T8270] loop2: detected capacity change from 0 to 1024
[  201.457723][ T5768] hfsplus: bad catalog entry type
[  201.679139][ T5855] usb 5-1: new full-speed USB device number 6 using dummy_hcd
[  201.847144][   T34] hfsplus: b-tree write err: -5, ino 4
[  201.871078][ T5855] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  201.897886][ T5855] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2
[  201.928674][ T8284] loop3: detected capacity change from 0 to 512
[  201.946491][ T5855] usb 5-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  201.973505][ T8284] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  201.992984][ T5855] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.016928][ T8284] EXT4-fs (loop3): ext4_check_descriptors: Block bitmap for group 1 overlaps superblock
[  202.035753][ T5855] usb 5-1: config 0 descriptor??
[  202.049780][ T8284] EXT4-fs (loop3): ext4_check_descriptors: Inode bitmap for group 1 overlaps superblock
[  202.052602][ T1146] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.082989][ T8284] EXT4-fs (loop3): ext4_check_descriptors: Inode table for group 1 overlaps superblock
[  202.085658][ T5855] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  202.104198][ T8284] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  202.137367][ T5855] dvb-usb: bulk message failed: -22 (3/0)
[  202.158146][ T8284] EXT4-fs (loop3): orphan cleanup on readonly fs
[  202.168246][ T5855] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  202.206364][ T8284] EXT4-fs error (device loop3): ext4_validate_block_bitmap:439: comm syz.3.742: bg 0: block 34: padding at end of block bitmap is not set
[  202.247324][ T5855] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  202.259143][ T5856] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  202.278401][ T5855] usb 5-1: media controller created
[  202.308205][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  202.312432][ T8274] loop4: detected capacity change from 0 to 256
[  202.336213][ T8284] Quota error (device loop3): write_blk: dquota write failed
[  202.354395][ T8284] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota
[  202.382203][ T8284] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.742: Failed to acquire dquot type 1
[  202.447608][ T5856] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  202.454320][ T5855] dvb-usb: bulk message failed: -22 (6/0)
[  202.466917][ T5856] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  202.476842][ T8284] EXT4-fs (loop3): 1 truncate cleaned up
[  202.506827][ T5855] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  202.507724][ T8284] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  202.518805][ T1146] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  202.529527][ T8274] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  202.552548][ T5856] usb 6-1: config 220 has an invalid descriptor of length 36, skipping remainder of the config
[  202.556983][ T5855] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9
[  202.584469][ T5856] usb 6-1: config 220 has no interface number 2
[  202.633754][ T5855] dvb-usb: schedule remote query interval to 150 msecs.
[  202.640904][ T5856] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  202.677526][ T5855] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  202.708231][ T5856] usb 6-1: config 220 interface 0 has no altsetting 0
[  202.715269][ T5856] usb 6-1: config 220 interface 76 has no altsetting 0
[  202.750714][ T5855] usb 5-1: USB disconnect, device number 6
[  202.773358][ T5856] usb 6-1: config 220 interface 1 has no altsetting 0
[  202.815057][ T5856] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  202.841003][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  202.860796][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.887528][ T5856] usb 6-1: Product: syz
[  202.906615][ T5856] usb 6-1: Manufacturer: syz
[  202.911296][ T5856] usb 6-1: SerialNumber: syz
[  202.985354][ T1146] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.047327][ T5855] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  203.196086][ T5856] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  203.221563][ T5856] usb 6-1: No valid video chain found.
[  203.243601][ T5856] usb 6-1: selecting invalid altsetting 0
[  203.264379][ T1146] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  203.305359][ T5856] usb 6-1: selecting invalid altsetting 0
[  203.322771][ T5856] usbtest: probe of 6-1:220.1 failed with error -22
[  203.356556][ T5856] usb 6-1: USB disconnect, device number 5
[  203.374028][ T8303] netlink: 24 bytes leftover after parsing attributes in process `syz.3.747'.
[  203.991893][ T5774] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[  204.004817][ T5774] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[  204.005541][ T8313] loop4: detected capacity change from 0 to 1024
[  204.021413][ T8313] EXT4-fs: Ignoring removed nomblk_io_submit option
[  204.032521][ T5774] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[  204.060207][ T5774] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[  204.072778][ T5774] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3
[  204.083264][ T5774] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[  204.094320][ T8313] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  204.289079][  T788] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  204.381756][ T5977] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.445855][ T8312] lo speed is unknown, defaulting to 1000
[  204.525816][  T788] usb 6-1: config index 0 descriptor too short (expected 23569, got 27)
[  204.544385][  T788] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.574159][  T788] usb 6-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  204.622881][  T788] usb 6-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  204.667265][  T788] usb 6-1: Manufacturer: syz
[  204.679323][  T788] usb 6-1: config 0 descriptor??
[  204.897646][  T788] rc_core: IR keymap rc-hauppauge not found
[  204.917240][  T788] Registered IR keymap rc-empty
[  204.942707][  T788] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[  204.998061][  T788] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input10
[  205.053208][    C1] igorplugusb 6-1:0.0: Error: urb status = -32
[  205.104909][ T5856] usb 6-1: USB disconnect, device number 6
[  205.329242][ T1146] bridge0: port 3(vlan2) entered disabled state
[  205.406629][ T1146] vlan2 (unregistering): left allmulticast mode
[  205.433847][ T1146] gretap0 (unregistering): left allmulticast mode
[  205.442634][ T1146] vlan2 (unregistering): left promiscuous mode
[  205.449092][ T1146] gretap0 (unregistering): left promiscuous mode
[  205.457502][ T1146] bridge0: port 3(vlan2) entered disabled state
[  205.496601][ T8312] chnl_net:caif_netlink_parms(): no params data found
[  205.717039][ T5778] Bluetooth: hci3: Entering manufacturer mode failed (-110)
[  205.859406][    T8] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  206.061238][ T8312] bridge0: port 1(bridge_slave_0) entered blocking state
[  206.068627][ T8312] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.097229][    T8] usb 5-1: too many configurations: 9, using maximum allowed: 8
[  206.098628][ T5778] Bluetooth: hci4: command tx timeout
[  206.117175][    T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  206.126746][ T8312] bridge_slave_0: entered allmulticast mode
[  206.134215][    T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  206.162656][ T8312] bridge_slave_0: entered promiscuous mode
[  206.172069][    T8] usb 5-1: config 0 interface 0 has no altsetting 0
[  206.211981][    T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  206.221440][ T8312] bridge0: port 2(bridge_slave_1) entered blocking state
[  206.243289][ T8312] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.254061][    T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  206.266434][ T8312] bridge_slave_1: entered allmulticast mode
[  206.272854][    T8] usb 5-1: config 0 interface 0 has no altsetting 0
[  206.282007][ T8312] bridge_slave_1: entered promiscuous mode
[  206.291520][    T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  206.311612][    T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  206.359070][    T8] usb 5-1: config 0 interface 0 has no altsetting 0
[  206.368476][    T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  206.402299][    T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  206.408284][ T8350] loop5: detected capacity change from 0 to 256
[  206.420223][    T8] usb 5-1: config 0 interface 0 has no altsetting 0
[  206.484101][    T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  206.528523][    T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  206.558028][ T1208] kernel read not supported for file /dsp1 (pid: 1208 comm: kworker/0:3)
[  206.573106][    T8] usb 5-1: config 0 interface 0 has no altsetting 0
[  206.586771][    T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  206.602925][ T1146] hsr_slave_0: left promiscuous mode
[  206.640985][    T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  206.641354][ T1146] hsr_slave_1: left promiscuous mode
[  206.669106][    T8] usb 5-1: config 0 interface 0 has no altsetting 0
[  206.698385][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  206.706171][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_0
[  206.724311][    T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  206.745057][    T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  206.758022][ T1146] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  206.773668][    T8] usb 5-1: config 0 interface 0 has no altsetting 0
[  206.783212][ T1146] batman_adv: batadv0: Removing interface: batadv_slave_1
[  206.800807][    T8] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9
[  206.812420][ T1146] bridge_slave_1: left allmulticast mode
[  206.818210][ T1146] bridge_slave_1: left promiscuous mode
[  206.831816][    T8] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  206.863487][ T1146] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.891873][    T8] usb 5-1: config 0 interface 0 has no altsetting 0
[  206.920388][    T8] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  206.948332][    T8] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  206.961875][    T8] usb 5-1: Product: syz
[  206.967883][ T1146] bridge_slave_0: left allmulticast mode
[  206.979854][ T1146] bridge_slave_0: left promiscuous mode
[  206.986316][    T8] usb 5-1: Manufacturer: syz
[  206.991267][    T8] usb 5-1: SerialNumber: syz
[  207.002285][ T1146] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.024217][    T8] usb 5-1: config 0 descriptor??
[  207.049971][    T8] yurex 5-1:0.0: USB YUREX device now attached to Yurex #0
[  207.073255][ T1146] veth1_macvtap: left promiscuous mode
[  207.090601][ T1146] veth0_macvtap: left promiscuous mode
[  207.102116][ T1146] veth1_vlan: left promiscuous mode
[  207.110538][ T1146] veth0_vlan: left promiscuous mode
[  207.326622][    T8] usb 5-1: USB disconnect, device number 7
[  207.342979][    T8] yurex 5-1:0.0: USB YUREX #0 now disconnected
[  207.606874][ T8370] loop3: detected capacity change from 0 to 32768
[  207.672478][ T8370] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  207.704033][ T8370] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  207.735978][ T8370] BTRFS info (device loop3): using free space tree
[  207.988948][ T8370] BTRFS info (device loop3): enabling ssd optimizations
[  208.028654][ T8370] BTRFS info (device loop3): auto enabling async discard
[  208.078753][ T5778] Bluetooth: hci4: command tx timeout
[  208.515557][ T5770] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  209.232836][ T1146] team0 (unregistering): Port device team_slave_1 removed
[  209.295265][ T1146] team0 (unregistering): Port device team_slave_0 removed
[  209.362430][ T1146] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  209.429253][ T1146] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  209.924006][ T1146] bond0 (unregistering): Released all slaves
[  210.053137][ T8312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  210.062556][   T51] Bluetooth: hci4: command tx timeout
[  210.078829][ T8312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  210.115293][ T5856] lo speed is unknown, defaulting to 1000
[  210.122247][ T8408] netlink: 8 bytes leftover after parsing attributes in process `syz.3.766'.
[  210.267572][ T8312] team0: Port device team_slave_0 added
[  210.316228][ T8312] team0: Port device team_slave_1 added
[  210.463761][ T8312] batman_adv: batadv0: Adding interface: batadv_slave_0
[  210.480881][ T8312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.530901][   T51] Bluetooth: hci2: command 0x0406 tx timeout
[  210.592927][ T8312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  210.606730][ T8312] batman_adv: batadv0: Adding interface: batadv_slave_1
[  210.614902][ T8312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  210.640699][    T8] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  210.642336][ T8312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  210.728887][ T8312] hsr_slave_0: entered promiscuous mode
[  210.753939][ T8312] hsr_slave_1: entered promiscuous mode
[  210.763368][ T8312] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[  210.791911][ T8312] Cannot create hsr debugfs directory
[  210.855333][    T8] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  210.877325][    T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.937933][    T8] usb 4-1: config 0 descriptor??
[  210.972349][    T8] gspca_main: cpia1-2.14.0 probing 0813:0001
[  211.378974][    T8] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[  211.447671][ T8312] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  211.475508][ T8312] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  211.501798][ T8312] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  211.535035][ T8312] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  211.784303][    T8] gspca_cpia1: usb_control_msg 02, error -71
[  211.790384][    T8] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  211.837594][ T8416] loop4: detected capacity change from 0 to 40427
[  211.839075][    T8] usb 4-1: USB disconnect, device number 6
[  211.876370][ T8416] F2FS-fs (loop4): build fault injection attr: rate: 684, type: 0x7ffff
[  211.916211][ T8416] F2FS-fs (loop4): build fault injection attr: rate: 0, type: 0x35f7
[  211.934551][ T8312] 8021q: adding VLAN 0 to HW filter on device bond0
[  211.945422][ T8416] F2FS-fs (loop4): Image doesn't support compression
[  211.970554][ T8416] F2FS-fs (loop4): invalid crc value
[  211.989616][ T8312] 8021q: adding VLAN 0 to HW filter on device team0
[  212.000320][ T8416] F2FS-fs (loop4): Found nat_bits in checkpoint
[  212.017694][   T11] bridge0: port 1(bridge_slave_0) entered blocking state
[  212.025077][   T11] bridge0: port 1(bridge_slave_0) entered forwarding state
[  212.050343][ T5778] Bluetooth: hci4: command tx timeout
[  212.084670][   T34] bridge0: port 2(bridge_slave_1) entered blocking state
[  212.091988][   T34] bridge0: port 2(bridge_slave_1) entered forwarding state
[  212.108541][ T5811] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  212.122127][ T8416] F2FS-fs (loop4): Start checkpoint disabled!
[  212.146557][ T8416] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  212.318001][ T5811] usb 6-1: Using ep0 maxpacket: 32
[  212.368833][ T5811] usb 6-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  212.383469][ T5811] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.426536][ T5811] usb 6-1: Product: syz
[  212.430801][ T5811] usb 6-1: Manufacturer: syz
[  212.469404][ T5811] usb 6-1: SerialNumber: syz
[  212.490542][ T5811] usb 6-1: config 0 descriptor??
[  212.871854][ T8461] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  212.879329][ T8461] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  212.976223][ T5811] airspy 6-1:0.0: Board ID: 00
[  212.992831][ T5811] airspy 6-1:0.0: Firmware version: 
[  213.008816][ T8312] 8021q: adding VLAN 0 to HW filter on device batadv0
[  213.169031][ T5811] airspy 6-1:0.0: usb_control_msg() failed -71 request 11
[  213.231269][ T5811] airspy 6-1:0.0: Registered as swradio24
[  213.267308][ T5811] airspy 6-1:0.0: SDR API is still slightly experimental and functionality changes may follow
[  213.336837][ T5811] usb 6-1: USB disconnect, device number 7
[  213.856151][ T8486] loop6: detected capacity change from 0 to 524288000
[  214.072380][ T8491] loop5: detected capacity change from 0 to 256
[  214.152012][ T8491] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  214.171943][ T8312] veth0_vlan: entered promiscuous mode
[  214.239284][ T8491] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010364, chksum : 0x44009a1b, utbl_chksum : 0xe619d30d)
[  214.259086][ T8312] veth1_vlan: entered promiscuous mode
[  214.480804][ T8312] veth0_macvtap: entered promiscuous mode
[  214.532770][ T8312] veth1_macvtap: entered promiscuous mode
[  214.629502][ T8312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.682035][ T8312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.707041][ T8312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.726690][ T8312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.762780][ T8312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0
[  214.793989][ T8512] program syz.3.788 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  214.803350][ T8312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.804995][ T8312] batman_adv: batadv0: Interface activated: batadv_slave_0
[  214.836027][ T8312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.866863][ T8312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.889104][ T8312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.938065][ T8312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  214.964949][ T8312] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1
[  214.986126][ T8312] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems!
[  215.009066][ T8312] batman_adv: batadv0: Interface activated: batadv_slave_1
[  215.046818][ T8312] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  215.083442][ T8312] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  215.115738][ T8312] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  215.136662][ T8312] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  215.182985][ T8518] netlink: 4 bytes leftover after parsing attributes in process `syz.3.790'.
[  215.451223][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.459301][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.580547][ T1146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  215.645761][ T1146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  215.977398][ T8536] loop6: detected capacity change from 0 to 512
[  216.028985][ T8506] loop4: detected capacity change from 0 to 32768
[  216.077902][ T8538] loop5: detected capacity change from 0 to 1024
[  216.086660][ T8506] XFS: noikeep mount option is deprecated.
[  216.120992][ T8506] XFS: attr2 mount option is deprecated.
[  216.122792][ T8536] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  216.127044][ T8506] XFS: noikeep mount option is deprecated.
[  216.164857][ T8536] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  216.200908][ T8538] hfsplus: invalid length 32517 has been corrected to 255
[  216.263562][ T8506] XFS (loop4): Mounting V5 Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  216.406154][   T28] audit: type=1800 audit(1770073003.463:51): pid=8538 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.796" name="file1" dev="loop5" ino=20 res=0 errno=0
[  216.498658][   T28] audit: type=1800 audit(1770073003.558:52): pid=8536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.745" name="file1" dev="loop6" ino=15 res=0 errno=0
[  216.587717][ T8506] XFS (loop4): Ending clean mount
[  216.611042][ T8506] XFS (loop4): Quotacheck needed: Please wait.
[  216.656993][ T8562] loop3: detected capacity change from 0 to 4096
[  216.706662][ T8562] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  216.726223][ T8312] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  216.794821][ T8506] XFS (loop4): Quotacheck: Done.
[  217.258535][ T5977] XFS (loop4): Unmounting Filesystem a2f82aab-77f8-4286-afd4-a8f747a74bab
[  217.781190][ T8578] loop3: detected capacity change from 0 to 4096
[  217.806635][ T8578] ntfs: (device loop3): parse_options(): Option utf8 is no longer supported, using option nls=utf8. Please use option nls=utf8 in the future and make sure utf8 is compiled either as a module or into the kernel.
[  217.914506][ T8578] ntfs: (device loop3): ntfs_read_locked_inode(): Corrupt standard information attribute in inode.
[  217.979294][ T8578] ntfs: (device loop3): ntfs_read_locked_inode(): Failed with error code -5.  Marking corrupt inode 0xa as bad.  Run chkdsk.
[  218.019944][ T8578] ntfs: (device loop3): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default.
[  218.062622][ T8578] ntfs: volume version 3.1.
[  218.429737][   T11] ntfs: (device loop3): ntfs_write_block(): Writing beyond initialized size is not supported yet. Sorry.
[  218.445270][ T5770] ntfs: (device loop3): ntfs_put_super(): Volume has errors.  Leaving volume marked dirty.  Run chkdsk.
[  218.501975][ T8606] [U] 
[  218.505319][ T8606] [U] 
[  218.508059][ T8606] [U] 
[  218.510791][ T8606] [U] 
[  218.547817][ T8606] [U] 
[  218.550606][ T8606] [U] 
[  218.553336][ T8606] [U] 
[  218.556132][ T8606] [U] 
[  218.558836][ T8606] [U] (
[  218.561645][ T8606] [U] 


[  218.564555][ T8606] [U] 
[  218.567395][ T8606] [U] 
[  218.638508][ T8604] [U] 
[  218.894198][ T8619] loop6: detected capacity change from 0 to 256
[  218.936482][ T8619] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  218.964927][ T5855] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  219.185101][ T5855] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  219.212859][ T5855] usb 6-1: config 0 has no interface number 0
[  219.236143][ T5855] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  219.249090][ T8628] netem: change failed
[  219.280624][ T5855] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  219.308890][ T5855] usb 6-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[  219.328054][ T5855] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  219.405726][ T5855] usb 6-1: config 0 descriptor??
[  219.499984][ T8636] loop3: detected capacity change from 0 to 64
[  219.671546][ T8636] hfs: request for non-existent node 1280 in B*Tree
[  219.707856][ T8636] hfs: request for non-existent node 1280 in B*Tree
[  219.860095][ T1092] hfs: request for non-existent node 1280 in B*Tree
[  219.867747][ T1092] hfs: request for non-existent node 1280 in B*Tree
[  219.907642][ T5855] prodikeys 0003:041E:2801.0003: unknown main item tag 0x5
[  219.938185][ T5855] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0
[  219.945590][ T5855] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0
[  219.993634][ T5855] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0
[  220.001298][ T5855] prodikeys 0003:041E:2801.0003: unknown main item tag 0x0
[  220.043123][ T5855] prodikeys 0003:041E:2801.0003: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.5-1/input1
[  220.127166][ T5855] hid_prodikeys: hid-prodikeys: failed to find output report
[  220.127166][ T5855] 
[  220.496778][ T5855] usb 6-1: USB disconnect, device number 8
[  220.632117][    T8] usb 7-1: new full-speed USB device number 2 using dummy_hcd
[  220.815258][    T8] usb 7-1: config 0 has an invalid interface number: 251 but max is 0
[  220.831829][    T8] usb 7-1: config 0 has no interface number 0
[  220.856878][    T8] usb 7-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  220.879088][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  220.903951][    T8] usb 7-1: Product: syz
[  220.914691][    T8] usb 7-1: Manufacturer: syz
[  220.919834][    T8] usb 7-1: SerialNumber: syz
[  220.934256][    T8] usb 7-1: config 0 descriptor??
[  221.408566][ T8679] loop3: detected capacity change from 0 to 4096
[  221.454404][ T8679] ntfs3: loop3: Different NTFS sector size (4096) and media sector size (512).
[  221.709936][ T8679] ntfs3: loop3: ino=3, ntfs_set_state failed, -22.
[  221.756441][    T8] asix 7-1:0.251 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  221.794399][    T8] asix 7-1:0.251 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  221.836356][    T8] asix: probe of 7-1:0.251 failed with error -71
[  221.857471][   T77] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22.
[  221.872313][    T8] usb 7-1: USB disconnect, device number 2
[  221.898385][ T5770] ntfs3: loop3: ino=3, ntfs_set_state failed, -22.
[  221.930032][ T5770] ntfs3: loop3: Mark volume as dirty due to NTFS errors
[  221.965509][ T5770] ntfs3: loop3: ino=3, ntfs_set_state failed, -22.
[  221.981060][   T34] ntfs3: loop3: ino=3, ntfs3_write_inode failed, -22.
[  222.109684][ T8692] program syz.4.836 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  222.378567][ T8702] loop3: detected capacity change from 0 to 64
[  223.256996][ T8720] program syz.6.845 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  223.353744][ T8719] loop3: detected capacity change from 0 to 4096
[  224.028518][ T8734] loop6: detected capacity change from 0 to 8192
[  224.107996][ T8734] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  224.157042][ T8734] REISERFS (device loop6): found reiserfs format "3.6" with non-standard journal
[  224.167780][ T8734] REISERFS (device loop6): using ordered data mode
[  224.174446][ T8734] reiserfs: using flush barriers
[  224.241978][ T8734] REISERFS (device loop6): journal params: device loop6, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  224.330900][ T8734] REISERFS (device loop6): checking transaction log (loop6)
[  224.404396][ T8734] REISERFS (device loop6): Using r5 hash to sort names
[  224.451607][ T8734] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  224.479639][ T8745] loop3: detected capacity change from 0 to 2048
[  224.483804][ T8734] REISERFS (device loop6): Created .reiserfs_priv - reserved for xattr storage.
[  224.542541][ T8745] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  224.664957][ T8734] REISERFS warning (device loop6): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  224.699258][ T8750] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  224.702380][ T8745] syz.3.852: attempt to access beyond end of device
[  224.702380][ T8745] loop3: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  224.745124][ T8734] REISERFS warning (device loop6): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  224.844725][ T8734] REISERFS warning (device loop6): sh-2029: %s: bitmap block (#%u) reading failed reiserfs_read_bitmap_block: reiserfs_read_bitmap_block
[  224.904903][ T8756] loop4: detected capacity change from 0 to 256
[  224.912437][ T8752] REISERFS warning (device loop6): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  224.931224][ T8756] exfat: Deprecated parameter 'utf8'
[  225.100715][ T8756] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[  225.283274][ T8759] loop5: detected capacity change from 0 to 512
[  225.323218][ T8759] EXT4-fs (loop5): couldn't mount as ext3 due to feature incompatibilities
[  225.575681][ T8764] netlink: 'syz.4.859': attribute type 1 has an invalid length.
[  225.646352][ T8764] netlink: 'syz.4.859': attribute type 2 has an invalid length.
[  226.498574][ T5856] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  226.607466][ T8761] loop3: detected capacity change from 0 to 32768
[  226.624466][ T8761] XFS: attr2 mount option is deprecated.
[  226.692782][ T8761] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  226.702411][ T5856] usb 5-1: Using ep0 maxpacket: 8
[  226.747513][ T5856] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  226.787901][ T5856] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  226.809146][ T8761] XFS (loop3): Ending clean mount
[  226.857615][ T8759] loop5: detected capacity change from 0 to 32768
[  226.860938][ T8761] XFS (loop3): Quotacheck needed: Please wait.
[  226.876209][ T5856] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  226.921373][ T8759] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  226.936483][ T5856] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  226.938177][ T8759] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  227.047178][ T5856] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  227.072909][ T8761] XFS (loop3): Quotacheck: Done.
[  227.099451][ T5856] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  227.109261][ T5856] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  227.237667][ T8759] gfs2: fsid=syz:syz.0: journal 0 mapped with 16 extents in 0ms
[  227.263871][ T8761] XFS (loop3): User initiated shutdown received.
[  227.289458][ T5811] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  227.299249][ T5811] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  227.322350][ T8761] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:497).  Shutting down filesystem.
[  227.385853][ T8761] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  227.390313][ T5856] usb 5-1: GET_CAPABILITIES returned 0
[  227.424702][ T5856] usbtmc 5-1:16.0: can't read capabilities
[  227.543640][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  227.544158][ T5811] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 257ms
[  227.614980][ T5811] gfs2: fsid=syz:syz.0: jid=0: Done
[  227.622530][ T8759] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  227.694877][ T5855] usb 5-1: USB disconnect, device number 8
[  228.185809][    T8] usb 7-1: new low-speed USB device number 3 using dummy_hcd
[  228.402730][    T8] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  228.436115][    T8] usb 7-1: config 0 has no interface number 0
[  228.451315][    T8] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  228.496475][    T8] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8
[  228.537143][    T8] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  228.565823][    T8] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  228.573550][ T8811] loop3: detected capacity change from 0 to 8192
[  228.596884][    T8] usb 7-1: config 0 descriptor??
[  228.613461][ T8806] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  228.643196][    T8] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[  228.895963][ T8819] loop5: detected capacity change from 0 to 256
[  228.971620][    T9] usb 7-1: USB disconnect, device number 3
[  228.977796][    C0] iowarrior 7-1:0.1: iowarrior_callback - usb_submit_urb failed with result -19
[  229.076634][ T8819] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  229.475067][ T8813] loop4: detected capacity change from 0 to 32768
[  229.578100][ T8813] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  229.869320][ T8813] XFS (loop4): Ending clean mount
[  229.919584][ T8813] XFS (loop4): Quotacheck needed: Please wait.
[  230.095980][ T8813] XFS (loop4): Quotacheck: Done.
[  230.163361][   T28] audit: type=1800 audit(1770073017.921:53): pid=8813 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.867" name="file1" dev="loop4" ino=9286 res=0 errno=0
[  230.261286][ T5811] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  230.295620][ T5977] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  230.443335][ T5811] usb 4-1: Using ep0 maxpacket: 8
[  230.472218][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  230.497277][ T5811] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  230.528601][ T5811] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  230.538063][ T8863] loop6: detected capacity change from 0 to 128
[  230.543814][ T5811] usb 4-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[  230.561466][ T5811] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  230.596895][ T5811] usb 4-1: config 0 descriptor??
[  231.008894][ T5811] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0
[  231.049903][ T5811] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0
[  231.070005][ T5811] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0
[  231.092000][ T5811] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0
[  231.141392][ T5811] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0
[  231.141430][ T5811] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0
[  231.141456][ T5811] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0
[  231.141481][ T5811] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0
[  231.141505][ T5811] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0
[  231.141530][ T5811] hid-rmi 0003:06CB:81A7.0004: unbalanced collection at end of report description
[  231.142393][ T5811] hid-rmi 0003:06CB:81A7.0004: parse failed
[  231.142491][ T5811] hid-rmi: probe of 0003:06CB:81A7.0004 failed with error -22
[  231.317294][ T5855] kernel write not supported for file /uhid (pid: 5855 comm: kworker/0:4)
[  231.366343][ T5811] usb 4-1: USB disconnect, device number 7
[  231.445358][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz.4.884'.
[  231.514739][ T8881] netlink: 58 bytes leftover after parsing attributes in process `syz.4.884'.
[  231.533936][ T8884] netlink: 16 bytes leftover after parsing attributes in process `syz.5.885'.
[  231.722323][ T8888] autofs4:pid:8888:check_dev_ioctl_version: ioctl control interface version mismatch: kernel(1.1), user(32766.2895), cmd(0xc018937c)
[  231.737430][ T8888] autofs4:pid:8888:validate_dev_ioctl: invalid device control module version supplied for cmd(0xc018937c)
[  232.149376][ T8904] loop5: detected capacity change from 0 to 736
[  232.577934][ T8909] loop4: detected capacity change from 0 to 4096
[  232.617124][ T8909] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512).
[  232.620192][ T8919] loop6: detected capacity change from 0 to 128
[  232.703881][ T5811] kernel write not supported for file /snd/seq (pid: 5811 comm: kworker/1:3)
[  232.716883][ T8919] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  232.843679][ T8919] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  233.069372][   T28] audit: type=1800 audit(1770073020.965:54): pid=8909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.894" name="file2" dev="loop4" ino=33 res=0 errno=0
[  233.198972][ T8312] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  233.744965][ T8933] loop3: detected capacity change from 0 to 32768
[  233.773447][ T8945] loop5: detected capacity change from 0 to 512
[  233.780394][ T8944] netlink: 'syz.4.905': attribute type 2 has an invalid length.
[  233.790412][ T8933] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  233.799483][ T8933] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  233.804596][ T8945] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  233.817301][ T8933] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms
[  233.832881][    T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  233.839729][    T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  233.846882][ T8944] netlink: 84 bytes leftover after parsing attributes in process `syz.4.905'.
[  233.865067][ T8949] loop6: detected capacity change from 0 to 8
[  233.907661][ T8945] EXT4-fs (loop5): 1 truncate cleaned up
[  233.971677][ T8945] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  233.993328][    T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 161ms
[  234.015616][    T9] gfs2: fsid=syz:syz.0: jid=0: Done
[  234.025103][ T8933] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  234.424921][ T8933] gfs2: fsid=syz:syz.0: found 1 quota changes
[  234.434324][ T7686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  234.614964][ T8933] gfs2: fsid=syz:syz.0: inum=2340 error=-28, nblocks=1, full=1 fail_pt=0
[  234.624381][ T8933] gfs2: fsid=syz:syz.0: rgrp 18 has an error, marking it readonly until umount
[  234.634151][ T8933] gfs2: fsid=syz:syz.0: umount on all nodes and run fsck.gfs2 to fix the error
[  234.643338][ T8933] gfs2: fsid=syz:syz.0:  R: n:18 f:80000000 b:4294967295/4294967295 i:4294967295 q:0 r:19 e:0
[  234.654514][ T8933] gfs2: fsid=syz:syz.0:   L: f:00 b:4294967295 i:4294967295
[  235.399672][ T5770] gfs2: fsid=syz:syz.0: warning: assertion "!qd->qd_change" failed at function = gfs2_qd_dispose, file = fs/gfs2/quota.c, line = 129
[  235.493050][ T5770] CPU: 0 PID: 5770 Comm: syz-executor Not tainted syzkaller #0
[  235.500953][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  235.511152][ T5770] Call Trace:
[  235.514559][ T5770]  <TASK>
[  235.517698][ T5770]  dump_stack_lvl+0x18c/0x250
[  235.522431][ T5770]  ? show_regs_print_info+0x20/0x20
[  235.527682][ T5770]  ? load_image+0x400/0x400
[  235.532238][ T5770]  ? do_raw_spin_unlock+0x121/0x230
[  235.537507][ T5770]  gfs2_assert_warn_i+0x193/0x2c0
[  235.542622][ T5770]  gfs2_qd_dispose+0x4aa/0x5b0
[  235.547572][ T5770]  gfs2_quota_cleanup+0x410/0x720
[  235.552663][ T5770]  ? spin_lock_bucket+0x150/0x150
[  235.557896][ T5770]  ? __might_sleep+0xe0/0xe0
[  235.562578][ T5770]  ? gfs2_ail_empty_tr+0x2f0/0x2f0
[  235.567916][ T5770]  ? gfs2_quota_sync+0x591/0x5a0
[  235.572909][ T5770]  gfs2_make_fs_ro+0x2aa/0x320
[  235.577719][ T5770]  ? gfs2_dinode_out+0xb10/0xb10
[  235.582751][ T5770]  ? __lock_acquire+0x7d40/0x7d40
[  235.587836][ T5770]  ? __rwlock_init+0x150/0x150
[  235.592667][ T5770]  ? do_raw_spin_unlock+0x121/0x230
[  235.597927][ T5770]  gfs2_put_super+0x224/0x930
[  235.602679][ T5770]  ? gfs2_evict_inode+0x1350/0x1350
[  235.607954][ T5770]  generic_shutdown_super+0x134/0x2b0
[  235.613461][ T5770]  kill_block_super+0x44/0x90
[  235.618282][ T5770]  deactivate_locked_super+0x97/0x100
[  235.623804][ T5770]  cleanup_mnt+0x43b/0x4d0
[  235.628273][ T5770]  task_work_run+0x1d4/0x260
[  235.632933][ T5770]  ? task_work_cancel+0x220/0x220
[  235.638179][ T5770]  ? exit_to_user_mode_loop+0x3b/0x110
[  235.643691][ T5770]  exit_to_user_mode_loop+0xe6/0x110
[  235.649063][ T5770]  exit_to_user_mode_prepare+0xee/0x180
[  235.655023][ T5770]  syscall_exit_to_user_mode+0x1a/0x50
[  235.660712][ T5770]  do_syscall_64+0x61/0xa0
[  235.665179][ T5770]  ? clear_bhb_loop+0x40/0x90
[  235.670100][ T5770]  ? clear_bhb_loop+0x40/0x90
[  235.674926][ T5770]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  235.680975][ T5770] RIP: 0033:0x7f01a439c117
[  235.685472][ T5770] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  235.705436][ T5770] RSP: 002b:00007ffd786da8a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  235.713922][ T5770] RAX: 0000000000000000 RBX: 00007f01a440471f RCX: 00007f01a439c117
[  235.722120][ T5770] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd786da960
[  235.730133][ T5770] RBP: 00007ffd786da960 R08: 00007ffd786db960 R09: 00000000ffffffff
[  235.738259][ T5770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd786db9f0
[  235.746362][ T5770] R13: 00007f01a440471f R14: 000000000003a08d R15: 00007ffd786dba30
[  235.754404][ T5770]  </TASK>
[  235.863817][ T8964] loop6: detected capacity change from 0 to 131072
[  235.890764][ T8964] F2FS-fs (loop6): invalid crc value
[  235.969433][ T8964] F2FS-fs (loop6): Found nat_bits in checkpoint
[  236.033303][ T8964] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[  238.574928][ T9012] loop4: detected capacity change from 0 to 32768
[  238.657638][ T9012] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  238.835741][ T9012] XFS (loop4): Ending clean mount
[  238.843839][ T9035] loop6: detected capacity change from 0 to 8192
[  238.853155][ T9009] loop3: detected capacity change from 0 to 32768
[  238.872366][ T9035] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512).
[  238.892378][ T9009] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  238.919235][ T9009] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  239.023194][ T9009] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms
[  239.099050][    T9] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  239.113936][    T9] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  239.125266][   T28] audit: type=1800 audit(1770073027.318:55): pid=9035 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.925" name="file1" dev="loop6" ino=30 res=0 errno=0
[  239.255667][    T9] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 148ms
[  239.288806][ T5977] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  239.296054][    T9] gfs2: fsid=syz:syz.0: jid=0: Done
[  239.338013][ T9009] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  239.615306][ T9048] netlink: 24 bytes leftover after parsing attributes in process `syz.6.929'.
[  239.796572][ T9051] loop5: detected capacity change from 0 to 256
[  239.865909][ T9053] bridge_slave_0: invalid flags given to default FDB implementation
[  239.990190][   T28] audit: type=1800 audit(1770073028.241:56): pid=9051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.938" name="file1" dev="loop5" ino=1048619 res=0 errno=0
[  240.033494][ T9009] gfs2: fsid=syz:syz.0: found 1 quota changes
[  240.049915][   T28] audit: type=1800 audit(1770073028.262:57): pid=9051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.938" name="file1" dev="loop5" ino=1048619 res=0 errno=0
[  240.113020][ T9057] netlink: 'syz.4.931': attribute type 12 has an invalid length.
[  240.272754][ T5770] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error
[  240.272754][ T5770]   inode = 11 2339
[  240.272754][ T5770]   function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 472
[  240.301937][ T5770] gfs2: fsid=syz:syz.0: G:  s:EX n:2/923 f:qobnN t:EX d:EX/0 a:0 v:0 r:3 m:20 p:1
[  240.318432][ T5770] gfs2: fsid=syz:syz.0:  H: s:EX f:H e:0 p:5770 [syz-executor] gfs2_quota_sync+0x411/0x5a0
[  240.372026][ T5770] gfs2: fsid=syz:syz.0:  I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0
[  240.399342][ T5770] gfs2: fsid=syz:syz.0: about to withdraw this file system
[  240.431960][ T5770] gfs2: fsid=syz:syz.0: Journal recovery skipped for jid 0 until next mount.
[  240.458913][ T5770] gfs2: fsid=syz:syz.0: Glock dequeues delayed: 0
[  240.480915][ T5770] gfs2: fsid=syz:syz.0: File system withdrawn
[  240.488679][ T5770] CPU: 0 PID: 5770 Comm: syz-executor Not tainted syzkaller #0
[  240.496301][ T5770] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  240.506580][ T5770] Call Trace:
[  240.509983][ T5770]  <TASK>
[  240.512948][ T5770]  dump_stack_lvl+0x18c/0x250
[  240.517760][ T5770]  ? kobject_uevent_env+0x363/0x8b0
[  240.523009][ T5770]  ? show_regs_print_info+0x20/0x20
[  240.528259][ T5770]  ? load_image+0x400/0x400
[  240.532811][ T5770]  ? kobject_uevent_env+0x363/0x8b0
[  240.538061][ T5770]  gfs2_withdraw+0xb24/0x13d0
[  240.542808][ T5770]  ? gfs2_lm+0x240/0x240
[  240.547100][ T5770]  ? preempt_schedule+0xc0/0xd0
[  240.552001][ T5770]  ? gfs2_consist_inode_i+0xf5/0x110
[  240.557396][ T5770]  gfs2_inode_refresh+0xb89/0x1000
[  240.562552][ T5770]  ? gfs2_inode_metasync+0xf0/0xf0
[  240.567710][ T5770]  ? gfs2_glock_nq+0xd4f/0x1420
[  240.572607][ T5770]  gfs2_instantiate+0x162/0x220
[  240.577595][ T5770]  gfs2_glock_wait+0x1d4/0x2a0
[  240.582417][ T5770]  do_sync+0x4c6/0xe50
[  240.586581][ T5770]  ? gfs2_quota_sync+0x411/0x5a0
[  240.591568][ T5770]  ? bh_get+0x760/0x760
[  240.595775][ T5770]  ? __lock_acquire+0x7d40/0x7d40
[  240.600928][ T5770]  ? do_raw_spin_lock+0x11f/0x2c0
[  240.605981][ T5770]  ? gfs2_quota_sync+0x411/0x5a0
[  240.610934][ T5770]  ? do_raw_spin_unlock+0x121/0x230
[  240.616318][ T5770]  gfs2_quota_sync+0x411/0x5a0
[  240.621365][ T5770]  gfs2_sync_fs+0x4c/0xb0
[  240.625713][ T5770]  sync_filesystem+0xea/0x220
[  240.630522][ T5770]  generic_shutdown_super+0x6f/0x2b0
[  240.636087][ T5770]  kill_block_super+0x44/0x90
[  240.640778][ T5770]  deactivate_locked_super+0x97/0x100
[  240.646164][ T5770]  cleanup_mnt+0x43b/0x4d0
[  240.650778][ T5770]  task_work_run+0x1d4/0x260
[  240.655523][ T5770]  ? task_work_cancel+0x220/0x220
[  240.660750][ T5770]  ? exit_to_user_mode_loop+0x3b/0x110
[  240.666236][ T5770]  exit_to_user_mode_loop+0xe6/0x110
[  240.671557][ T5770]  exit_to_user_mode_prepare+0xee/0x180
[  240.677135][ T5770]  syscall_exit_to_user_mode+0x1a/0x50
[  240.682871][ T5770]  do_syscall_64+0x61/0xa0
[  240.687389][ T5770]  ? clear_bhb_loop+0x40/0x90
[  240.692082][ T5770]  ? clear_bhb_loop+0x40/0x90
[  240.696954][ T5770]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  240.702950][ T5770] RIP: 0033:0x7f01a439c117
[  240.707560][ T5770] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  240.727873][ T5770] RSP: 002b:00007ffd786da8a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  240.736483][ T5770] RAX: 0000000000000000 RBX: 00007f01a440471f RCX: 00007f01a439c117
[  240.744555][ T5770] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd786da960
[  240.752711][ T5770] RBP: 00007ffd786da960 R08: 00007ffd786db960 R09: 00000000ffffffff
[  240.760800][ T5770] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd786db9f0
[  240.768902][ T5770] R13: 00007f01a440471f R14: 000000000003aa65 R15: 00007ffd786dba30
[  240.777016][ T5770]  </TASK>
[  241.447543][ T9077] loop3: detected capacity change from 0 to 4096
[  241.492913][ T9077] ntfs3: loop3: Different NTFS sector size (1024) and media sector size (512).
[  241.736553][ T9064] loop4: detected capacity change from 0 to 32768
[  241.763213][   T28] audit: type=1800 audit(1770073030.100:58): pid=9077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.933" name="file1" dev="loop3" ino=30 res=0 errno=0
[  241.815996][ T9064] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.935 (9064)
[  241.972360][ T9064] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  241.986077][ T9064] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  242.039120][ T9064] BTRFS info (device loop4): doing ref verification
[  242.077218][ T9064] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8)
[  242.127626][ T9064] BTRFS info (device loop4): use lzo compression, level 0
[  242.167139][ T9064] BTRFS info (device loop4): using free space tree
[  242.259707][ T9094] loop5: detected capacity change from 0 to 4096
[  242.288609][ T9094] ntfs3: loop5: Different NTFS sector size (1024) and media sector size (512).
[  242.418304][ T9064] BTRFS info (device loop4): enabling ssd optimizations
[  242.458437][ T9064] BTRFS info (device loop4): auto enabling async discard
[  242.705197][ T9094] ntfs3: loop5: ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" failed to parse mft record
[  242.801587][ T9123] loop3: detected capacity change from 0 to 256
[  242.940454][ T9123] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x8d1bf2bd, utbl_chksum : 0xe619d30d)
[  243.048190][   T77] ntfs3: loop5: ino=1e, failed to parse mft record
[  243.161639][ T5977] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  243.296623][ T9136] loop5: detected capacity change from 0 to 128
[  243.314577][ T9136] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  243.422314][ T9136] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  243.449777][ T9139] vxcan1: tx address claim with dest, not broadcast
[  243.871789][   T77] FAT-fs (loop5): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  243.963201][ T9148] netlink: 28 bytes leftover after parsing attributes in process `syz.4.956'.
[  244.014668][ T9148] netlink: 28 bytes leftover after parsing attributes in process `syz.4.956'.
[  244.120999][ T9148] team0: entered promiscuous mode
[  244.146164][ T9148] team_slave_0: entered promiscuous mode
[  244.174803][ T9148] team_slave_1: entered promiscuous mode
[  244.212327][ T9148] gretap0: entered promiscuous mode
[  245.153851][ T9165] loop3: detected capacity change from 0 to 32768
[  245.177611][ T9163] loop5: detected capacity change from 0 to 40427
[  245.200641][ T9165] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.962 (9165)
[  245.248612][ T9163] F2FS-fs (loop5): invalid crc value
[  245.279024][ T9163] F2FS-fs (loop5): Found nat_bits in checkpoint
[  245.292933][ T9165] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  245.319351][ T9165] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm
[  245.357610][ T9165] BTRFS info (device loop3): doing ref verification
[  245.374703][ T9165] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_LZO (0x8)
[  245.414777][ T9165] BTRFS info (device loop3): use lzo compression, level 0
[  245.460374][ T9165] BTRFS info (device loop3): using free space tree
[  245.485932][ T9163] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  245.594012][ T9170] loop4: detected capacity change from 0 to 32768
[  245.615302][ T7686] syz-executor: attempt to access beyond end of device
[  245.615302][ T7686] loop5: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  245.657443][ T9170] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.964 (9170)
[  245.692180][ T9165] BTRFS info (device loop3): enabling ssd optimizations
[  245.702421][ T9165] BTRFS info (device loop3): auto enabling async discard
[  245.707503][ T7686] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  245.731379][ T7686] F2FS-fs (loop5): Stopped filesystem due to reason: 3
[  245.776603][ T9170] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  245.789633][ T9170] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm
[  245.806701][ T9170] BTRFS info (device loop4): setting nodatacow, compression disabled
[  245.826999][ T9170] BTRFS info (device loop4): enabling auto defrag
[  245.857248][ T9170] BTRFS info (device loop4): max_inline at 0
[  245.876125][ T9170] BTRFS info (device loop4): using free space tree
[  246.017502][ T9170] BTRFS info (device loop4): auto enabling async discard
[  246.200280][ T5770] BTRFS info (device loop3): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  246.398470][ T5786] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 10 /dev/loop3 scanned by udevd (5786)
[  246.569216][ T9174] loop6: detected capacity change from 0 to 32768
[  246.582409][ T5977] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  246.615850][ T9174] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 scanned by syz.6.966 (9174)
[  246.726458][ T9174] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  246.765237][ T9174] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  246.809285][ T9174] BTRFS info (device loop6): using free space tree
[  246.983883][ T5785] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop4 scanned by udevd (5785)
[  246.995742][    T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  247.216561][    T8] usb 4-1: config 0 has an invalid interface number: 104 but max is 0
[  247.268427][    T8] usb 4-1: config 0 has no interface number 0
[  247.275453][ T9174] BTRFS info (device loop6): enabling ssd optimizations
[  247.289664][ T9174] BTRFS info (device loop6): auto enabling async discard
[  247.296384][    T8] usb 4-1: config 0 interface 104 has no altsetting 0
[  247.329672][    T8] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=a1.c9
[  247.353558][    T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  247.394981][    T8] usb 4-1: Product: syz
[  247.421910][    T8] usb 4-1: Manufacturer: syz
[  247.440194][    T8] usb 4-1: SerialNumber: syz
[  247.467944][    T8] usb 4-1: config 0 descriptor??
[  247.521564][    T8] gspca_main: vc032x-2.14.0 probing 0ac8:0321
[  247.727797][    T8] gspca_vc032x: reg_r err -71
[  247.731221][ T8312] BTRFS info (device loop6): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  247.772157][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  247.799037][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  247.834752][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  247.872957][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  247.878355][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  247.910920][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  247.968587][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  247.986237][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  247.991704][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  248.016680][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  248.052298][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  248.072931][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  248.091090][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  248.117708][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  248.132945][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  248.165267][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  248.183292][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  248.230410][    T8] gspca_vc032x: I2c Bus Busy Wait 00
[  248.253358][    T8] gspca_vc032x: Unknown sensor...
[  248.293354][    T8] vc032x: probe of 4-1:0.104 failed with error -22
[  248.354151][    T8] usb 4-1: USB disconnect, device number 8
[  249.617550][ T9280] loop3: detected capacity change from 0 to 2048
[  249.666526][ T9280] UDF-fs: error (device loop3): udf_process_sequence: Primary Volume Descriptor not found!
[  249.725303][ T9280] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  251.372086][ T9282] loop4: detected capacity change from 0 to 65536
[  251.448816][ T9282] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  251.576612][ T9282] XFS (loop4): Ending clean mount
[  251.627618][ T9282] XFS (loop4): Quotacheck needed: Please wait.
[  251.768541][ T9282] XFS (loop4): Quotacheck: Done.
[  252.046784][ T5856] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xd0, xfs_bnobt block 0x8004 
[  252.079152][ T5856] XFS (loop4): Unmount and run xfs_repair
[  252.101779][ T5856] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  252.109413][ T5856] 00000000: 41 42 33 42 00 00 00 02 ff ff ff ff ff ff ff ff  AB3B............
[  252.134308][ T5856] 00000010: 00 00 00 00 00 00 80 04 00 00 00 00 00 00 00 00  ................
[  252.145964][ T5856] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  252.156704][ T5856] 00000030: 00 00 00 01 21 05 00 0a 00 00 00 05 00 00 00 03  ....!...........
[  252.171219][ T5856] 00000040: 00 00 04 a4 00 00 3b 5c 00 00 00 00 00 00 00 00  ......;\........
[  252.180826][ T5856] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  252.195722][ T5856] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  252.206721][ T5856] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  252.222877][ T9282] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x8004 len 2 error 74
[  252.356699][ T5977] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  252.438116][ T1293] ieee802154 phy0 wpan0: encryption failed: -22
[  252.444977][ T1293] ieee802154 phy1 wpan1: encryption failed: -22
[  253.059561][ T9346] loop6: detected capacity change from 0 to 40427
[  253.097500][ T9346] F2FS-fs (loop6): invalid crc value
[  253.147455][ T9346] F2FS-fs (loop6): Found nat_bits in checkpoint
[  253.355816][ T9346] F2FS-fs (loop6): Start checkpoint disabled!
[  253.405554][ T9346] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  254.031312][ T9359] loop5: detected capacity change from 0 to 32768
[  254.069410][ T9359] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop5 scanned by syz.5.995 (9359)
[  254.164297][ T9359] BTRFS info (device loop5): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  254.227440][ T9359] BTRFS info (device loop5): using sha256 (sha256-avx2) checksum algorithm
[  254.271510][ T9359] BTRFS warning (device loop5): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  254.315104][ T9359] BTRFS info (device loop5): trying to use backup root at mount time
[  254.366950][ T9359] BTRFS info (device loop5): force clearing of disk cache
[  254.375185][ T9384] tipc: Started in network mode
[  254.411439][ T9359] BTRFS info (device loop5): enabling ssd optimizations
[  254.419447][ T9384] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  254.444195][ T9359] BTRFS info (device loop5): using spread ssd allocation scheme
[  254.452027][ T9359] BTRFS info (device loop5): turning on flush-on-commit
[  254.462240][ T9384] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  254.504462][ T9359] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_LZO (0x8)
[  254.558587][ T9359] BTRFS info (device loop5): use lzo compression, level 0
[  254.596767][ T9359] BTRFS info (device loop5): turning off flush-on-commit
[  254.642942][ T9359] BTRFS info (device loop5): allowing degraded mounts
[  254.677950][ T9359] BTRFS info (device loop5): using free space tree
[  254.836636][ T9408] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1002'.
[  254.872818][ T9359] BTRFS info (device loop5): auto enabling async discard
[  254.907067][ T9413] loop4: detected capacity change from 0 to 256
[  254.921744][ T9359] BTRFS info (device loop5): rebuilding free space tree
[  255.004159][ T9359] BTRFS info (device loop5): checking UUID tree
[  255.367533][ T5855] usb 4-1: new full-speed USB device number 9 using dummy_hcd
[  255.579827][ T7686] BTRFS info (device loop5): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  255.582401][ T5855] usb 4-1: config 4 has an invalid interface number: 44 but max is 0
[  255.620830][ T5855] usb 4-1: config 4 has no interface number 0
[  255.644078][ T5855] usb 4-1: config 4 interface 44 altsetting 0 has an invalid endpoint with address 0x0, skipping
[  255.665627][ T5855] usb 4-1: New USB device found, idVendor=1044, idProduct=7001, bcdDevice= 5.20
[  255.680463][ T5855] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  255.701451][ T5855] usb 4-1: Product: syz
[  255.706003][ T5855] usb 4-1: Manufacturer: syz
[  255.729790][ T5855] usb 4-1: SerialNumber: syz
[  255.739725][    T8] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  255.956545][    T8] usb 7-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  255.977770][    T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.000385][    T8] usb 7-1: Product: syz
[  256.011165][    T8] usb 7-1: Manufacturer: syz
[  256.024300][    T8] usb 7-1: SerialNumber: syz
[  256.169595][ T5855] dvb-usb: found a 'Gigabyte U7000' in warm state.
[  256.200809][ T5855] dvb-usb: will use the device's hardware PID filter (table count: 32).
[  256.235720][ T5855] dvbdev: DVB: registering new adapter (Gigabyte U7000)
[  256.250973][ T5855] usb 4-1: media controller created
[  256.277512][ T5855] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  256.286791][    T8] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  256.320232][    T8] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -32
[  256.393905][ T5855] DVB: Unable to find symbol dib7000p_attach()
[  256.400560][ T5855] dvb-usb: no frontend was attached by 'Gigabyte U7000'
[  256.520070][ T5855] rc_core: IR keymap rc-dib0700-rc5 not found
[  256.536924][ T5855] Registered IR keymap rc-empty
[  256.542694][    T8] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00000010. ret = -71
[  256.565920][ T5855] dvb-usb: could not initialize remote control.
[  256.575417][    T8] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  256.595102][ T5855] dvb-usb: Gigabyte U7000 successfully initialized and connected.
[  256.608233][    T8] lan78xx 7-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  256.642573][    T8] lan78xx: probe of 7-1:1.0 failed with error -71
[  256.686717][    T8] usb 7-1: USB disconnect, device number 4
[  256.839374][ T5855] usb 4-1: USB disconnect, device number 9
[  256.869699][ T5855] dvb-usb: Gigabyte U7000 successfully deinitialized and disconnected.
[  258.516704][ T9479] loop3: detected capacity change from 0 to 32768
[  258.584899][ T9479] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  258.683048][ T9479] XFS (loop3): Ending clean mount
[  258.699140][ T9486] loop5: detected capacity change from 0 to 32768
[  258.724614][ T9486] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10
[  258.746138][ T9479] XFS (loop3): Quotacheck needed: Please wait.
[  258.856669][ T9479] XFS (loop3): Quotacheck: Done.
[  258.909780][ T5781] BTRFS error: device /dev/loop5 already registered with a higher generation, found 8 expect 10
[  259.036163][ T9479] XFS (loop3): User initiated shutdown received.
[  259.040694][ T9504] loop6: detected capacity change from 0 to 256
[  259.080607][ T9479] XFS (loop3): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:501).  Shutting down filesystem.
[  259.144384][ T9504] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[  259.167977][ T9479] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  259.331441][ T5770] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  259.916887][ T9518] loop5: detected capacity change from 0 to 16
[  259.961795][ T9518] erofs: (device loop5): mounted with root inode @ nid 36.
[  260.341081][ T1146] tipc: Subscription rejected, illegal request
[  260.438414][ T9529] netlink: 'syz.3.1030': attribute type 102 has an invalid length.
[  260.762849][ T9538] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1034'.
[  261.416120][ T9553] loop6: detected capacity change from 0 to 524287999
[  261.532097][ T9536] loop3: detected capacity change from 0 to 32768
[  261.638816][   T28] audit: type=1800 audit(1770073050.972:59): pid=9536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1033" name="file1" dev="loop3" ino=4 res=0 errno=0
[  262.212029][ T9566] loop4: detected capacity change from 0 to 256
[  262.607551][ T9575] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1049'.
[  262.625233][   T23] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  262.827543][   T23] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  262.844834][   T23] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  262.862656][   T23] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  262.888069][   T23] usb 6-1: config 220 has no interface number 2
[  262.897030][   T23] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  262.913976][   T23] usb 6-1: config 220 interface 0 has no altsetting 0
[  262.921592][   T23] usb 6-1: config 220 interface 76 has no altsetting 0
[  262.929031][   T23] usb 6-1: config 220 interface 1 has no altsetting 0
[  262.939427][   T23] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  262.948788][   T23] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.957262][   T23] usb 6-1: Product: syz
[  262.963345][   T23] usb 6-1: Manufacturer: syz
[  262.968382][   T23] usb 6-1: SerialNumber: syz
[  263.124747][ T9585] loop6: detected capacity change from 0 to 256
[  263.178602][ T9585] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  263.208003][   T23] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  263.215518][   T23] usb 6-1: No valid video chain found.
[  263.242684][   T23] usb 6-1: selecting invalid altsetting 0
[  263.295100][   T23] usb 6-1: selecting invalid altsetting 0
[  263.307729][   T23] usbtest: probe of 6-1:220.1 failed with error -22
[  263.338095][   T23] usb 6-1: USB disconnect, device number 9
[  263.837979][ T9597] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1058'.
[  263.859990][ T9597] netlink: 'syz.3.1058': attribute type 20 has an invalid length.
[  263.869051][ T9597] netlink: 'syz.3.1058': attribute type 21 has an invalid length.
[  264.566627][ T9614] loop3: detected capacity change from 0 to 128
[  264.594375][ T9614] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  264.642081][ T9614] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  264.825108][   T34] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  264.978893][ T9625] loop3: detected capacity change from 0 to 1024
[  265.226225][ T1092] hfsplus: b-tree write err: -5, ino 4
[  265.565289][ T9637] loop3: detected capacity change from 0 to 1764
[  265.888593][ T9648] loop4: detected capacity change from 0 to 512
[  265.958598][ T9648] EXT4-fs error (device loop4): ext4_orphan_get:1398: inode #17: comm syz.4.1083: iget: bogus i_mode (0)
[  266.007004][ T9648] EXT4-fs error (device loop4): ext4_orphan_get:1403: comm syz.4.1083: couldn't read orphan inode 17 (err -117)
[  266.023844][ T9654] autofs4:pid:9654:autofs_fill_super: could not open pipe file descriptor
[  266.055947][ T9648] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  266.126901][ T9648] EXT4-fs error (device loop4): ext4_validate_block_bitmap:430: comm syz.4.1083: bg 0: block 7: invalid block bitmap
[  266.348135][ T5977] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  266.505332][ T9665] loop3: detected capacity change from 0 to 128
[  266.589465][ T9670] loop6: detected capacity change from 0 to 256
[  266.624629][ T9665] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  266.633932][ T9670] exfat: Deprecated parameter 'utf8'
[  266.672392][ T9665] ext4 filesystem being mounted at /287/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  266.696919][ T9670] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe3865569, utbl_chksum : 0xe619d30d)
[  266.783182][ T5770] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  266.946817][ T9677] loop5: detected capacity change from 0 to 1024
[  266.997809][ T9677] EXT4-fs: inline encryption not supported
[  267.027864][ T9677] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  267.103160][ T9677] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  267.245207][ T5855] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  267.395696][ T7686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  267.429881][ T5855] usb 4-1: too many configurations: 9, using maximum allowed: 8
[  267.458039][ T5855] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  267.492530][ T5855] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  267.530379][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0
[  267.539034][ T5855] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  267.563327][ T5855] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  267.597022][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0
[  267.624778][ T5855] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  267.634380][ T5855] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  267.664308][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0
[  267.675073][ T5855] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  267.684610][ T5855] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  267.730711][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0
[  267.750986][ T5855] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  267.761604][ T5855] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  267.787640][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0
[  267.798832][ T5855] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  267.817268][ T5855] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  267.835373][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0
[  267.874896][ T5855] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  267.892658][ T5855] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  267.930441][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0
[  267.950726][ T5855] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9
[  267.969114][ T5855] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  267.987939][ T5855] usb 4-1: config 0 interface 0 has no altsetting 0
[  267.997931][ T5855] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  268.010318][ T5855] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  268.026046][ T5855] usb 4-1: Product: syz
[  268.030291][ T5855] usb 4-1: Manufacturer: syz
[  268.043545][ T5855] usb 4-1: SerialNumber: syz
[  268.055791][ T5855] usb 4-1: config 0 descriptor??
[  268.093360][ T5855] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0
[  268.181510][ T5856] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  268.192015][ T9692] loop6: detected capacity change from 0 to 32768
[  268.211249][ T9692] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 scanned by syz.6.1099 (9692)
[  268.250697][ T9692] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  268.261752][ T9692] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  268.279919][ T9692] BTRFS info (device loop6): using free space tree
[  268.367188][ T5855] usb 4-1: USB disconnect, device number 10
[  268.388164][ T5856] usb 6-1: Using ep0 maxpacket: 32
[  268.394567][ T5855] yurex 4-1:0.0: USB YUREX #0 now disconnected
[  268.423759][ T5856] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[  268.456590][ T5856] usb 6-1: config 0 has no interface number 0
[  268.471941][ T5856] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  268.492078][ T5856] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  268.501908][ T9692] BTRFS info (device loop6): enabling ssd optimizations
[  268.508933][ T9692] BTRFS info (device loop6): auto enabling async discard
[  268.530889][ T5856] usb 6-1: Product: syz
[  268.535234][ T5856] usb 6-1: Manufacturer: syz
[  268.552238][ T5856] usb 6-1: SerialNumber: syz
[  268.589189][ T5856] usb 6-1: config 0 descriptor??
[  268.613902][ T5856] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  268.653263][ T5856] usb 6-1: selecting invalid altsetting 1
[  268.673240][ T5856] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  268.689993][ T5856] usb 6-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  268.714358][ T5856] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  268.740456][ T5856] usb 6-1: media controller created
[  268.754006][ T8312] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  268.806319][ T5856] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  269.071005][ T5786] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 10 /dev/loop6 scanned by udevd (5786)
[  269.778140][   T23] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  269.959262][ T9701] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-110
[  269.991481][   T23] usb 4-1: Using ep0 maxpacket: 32
[  269.998746][ T5856] usb 6-1: dvb_usb_ce6230: usb_control_msg() failed=-32
[  270.006378][ T5856] zl10353_read_register: readreg error (reg=127, ret==-32)
[  270.032669][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.063278][ T5856] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  270.071720][   T23] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  270.092298][   T23] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d51, bcdDevice= 0.00
[  270.111381][   T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  270.161901][   T23] usb 4-1: config 0 descriptor??
[  270.211873][ T5856] usb 6-1: USB disconnect, device number 10
[  270.608858][   T23] koneplus 0003:1E7D:2D51.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d51] on usb-dummy_hcd.3-1/input0
[  270.851227][ T9752] loop5: detected capacity change from 0 to 512
[  270.879310][ T9752] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  270.916679][ T9752] EXT4-fs (loop5): 1 truncate cleaned up
[  270.941511][ T9752] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  271.003517][   T23] usb 4-1: USB disconnect, device number 11
[  271.011043][ T9747] loop4: detected capacity change from 0 to 32768
[  271.035924][ T9747] BTRFS error: device /dev/loop4 already registered with a higher generation, found 8 expect 10
[  271.047292][ T9752] fscrypt (loop5, inode 18): Mutually exclusive encryption flags (0x18)
[  271.130173][ T7686] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  271.150213][ T5786] blk_print_req_error: 10 callbacks suppressed
[  271.150232][ T5786] I/O error, dev loop4, sector 32640 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2
[  271.318426][ T9758] loop6: detected capacity change from 0 to 128
[  272.049139][ T9773] loop5: detected capacity change from 0 to 8192
[  272.067657][ T9773] REISERFS warning:  read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025
[  272.083818][ T5818] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  272.106450][ T9773] REISERFS (device loop5): found reiserfs format "3.6" with non-standard journal
[  272.116656][ T9773] REISERFS (device loop5): using ordered data mode
[  272.123608][ T9773] reiserfs: using flush barriers
[  272.140331][ T9773] REISERFS (device loop5): journal params: device loop5, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30
[  272.158275][ T9773] REISERFS (device loop5): checking transaction log (loop5)
[  272.167257][ T9773] REISERFS (device loop5): Using r5 hash to sort names
[  272.176185][ T9773] REISERFS warning (device loop5): vs-13060 reiserfs_update_sd_size: stat data of object [1 2 0x0 SD] (nlink == 1) not found (pos 2)
[  272.213737][ T9773] REISERFS (device loop5): Created .reiserfs_priv - reserved for xattr storage.
[  272.275505][ T5818] usb 5-1: config 0 has an invalid interface number: 1 but max is 0
[  272.283976][ T5818] usb 5-1: config 0 has no interface number 0
[  272.290106][ T5818] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  272.312181][ T5818] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  272.330972][ T5818] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  272.340250][ T5818] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  272.358064][ T5818] usb 5-1: config 0 descriptor??
[  272.793281][ T5818] uclogic 0003:256C:006D.0006: unknown main item tag 0x0
[  272.816461][ T5818] uclogic 0003:256C:006D.0006: unknown main item tag 0x0
[  272.843072][ T5818] uclogic 0003:256C:006D.0006: unknown main item tag 0x0
[  272.852353][ T5818] uclogic 0003:256C:006D.0006: unknown main item tag 0x0
[  272.866933][ T5818] uclogic 0003:256C:006D.0006: unknown main item tag 0x0
[  272.880628][ T5818] uclogic 0003:256C:006D.0006: No inputs registered, leaving
[  272.894572][ T5818] uclogic 0003:256C:006D.0006: hidraw0: USB HID v0.00 Device [HID 256c:006d] on usb-dummy_hcd.4-1/input1
[  273.058236][ T5818] usb 5-1: USB disconnect, device number 9
[  273.214714][ T9780] loop5: detected capacity change from 0 to 32768
[  273.253503][ T9780] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  273.329022][ T9780] XFS (loop5): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  273.395184][ T9780] XFS (loop5): Starting recovery (logdev: internal)
[  273.483020][ T9780] XFS (loop5): Ending recovery (logdev: internal)
[  273.492381][ T9785] loop6: detected capacity change from 0 to 32768
[  273.519895][ T9780] XFS (loop5): Quotacheck needed: Please wait.
[  273.546975][ T9785] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  273.695617][ T9780] XFS (loop5): Quotacheck: Done.
[  273.806717][ T9785] XFS (loop6): Ending clean mount
[  273.861416][ T9785] XFS (loop6): Quotacheck needed: Please wait.
[  273.986764][ T9785] XFS (loop6): Quotacheck: Done.
[  274.025931][ T7686] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  274.040731][ T5818] XFS (loop6): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xd0, xfs_refcountbt block 0x28 
[  274.060508][ T5818] XFS (loop6): Unmount and run xfs_repair
[  274.101027][ T5818] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  274.139585][ T5818] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff  R...............
[  274.185654][ T5818] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00  .......(........
[  274.197097][ T5818] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  274.243265][ T5818] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00  .......]........
[  274.262421][ T9812] syz.4.1136 uses obsolete (PF_INET,SOCK_PACKET)
[  274.283085][ T9814] vivid-000: disconnect
[  274.296368][ T5818] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  274.319209][ T5818] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  274.338298][ T5818] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  274.348197][ T5818] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  274.358261][ T9813] vivid-000: reconnect
[  274.421701][ T9785] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x1df/0x2e0" at daddr 0x28 len 8 error 74
[  274.465281][ T9785] XFS (loop6): Corruption of in-memory data (0x8) detected at xfs_defer_finish_noroll+0x183c/0x1e00 (fs/xfs/libxfs/xfs_defer.c:598).  Shutting down filesystem.
[  274.515318][ T9785] XFS (loop6): Please unmount the filesystem and rectify the problem(s)
[  274.585199][ T9818] loop3: detected capacity change from 0 to 128
[  274.647505][ T9818] VFS: Found a Xenix FS (block size = 512) on device loop3
[  274.753467][ T5770] sysv_free_block: trying to free block not in datazone
[  274.780665][ T5770] sysv_free_inode: inode 0,1,2 or nonexistent inode
[  274.882373][   T28] audit: type=1326 audit(1770073064.863:60): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.3.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a439aeb9 code=0x7ffc0000
[  274.904723][    C0] vkms_vblank_simulate: vblank timer overrun
[  274.945965][   T28] audit: type=1326 audit(1770073064.863:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.3.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a439aeb9 code=0x7ffc0000
[  274.968167][    C0] vkms_vblank_simulate: vblank timer overrun
[  275.046837][   T28] audit: type=1326 audit(1770073064.863:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.3.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7f01a4399d97 code=0x7ffc0000
[  275.102965][   T28] audit: type=1326 audit(1770073064.863:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.3.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a439aeb9 code=0x7ffc0000
[  275.125249][    C0] vkms_vblank_simulate: vblank timer overrun
[  275.223370][ T8312] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  275.238078][   T28] audit: type=1326 audit(1770073064.863:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.3.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=428 compat=0 ip=0x7f01a439aeb9 code=0x7ffc0000
[  275.271235][ T9834] loop5: detected capacity change from 0 to 128
[  275.315406][   T28] audit: type=1326 audit(1770073064.863:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.3.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a439aeb9 code=0x7ffc0000
[  275.460542][   T28] audit: type=1326 audit(1770073064.863:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.3.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a439aeb9 code=0x7ffc0000
[  275.533784][   T28] audit: type=1326 audit(1770073064.863:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.3.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=429 compat=0 ip=0x7f01a439aeb9 code=0x7ffc0000
[  275.555990][    C0] vkms_vblank_simulate: vblank timer overrun
[  275.665089][   T28] audit: type=1326 audit(1770073064.863:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.3.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a439aeb9 code=0x7ffc0000
[  275.717393][   T28] audit: type=1326 audit(1770073064.863:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9823 comm="syz.3.1141" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f01a439aeb9 code=0x7ffc0000
[  275.769365][ T1208] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  275.952231][ T1208] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  275.954203][ T9845] loop6: detected capacity change from 0 to 4096
[  275.961552][ T1208] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  275.973777][ T9845] ntfs3: loop6: Different NTFS sector size (4096) and media sector size (512).
[  275.979732][ T1208] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[  276.038081][ T1208] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  276.050791][ T9845] ntfs3: loop6: Inode r=19 is not in use!
[  276.070646][ T9845] ntfs3: loop6: Mark volume as dirty due to NTFS errors
[  276.077639][ T1208] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  276.117097][ T1208] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  276.144415][ T1208] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  276.158179][ T9845] ntfs3: loop6: ino=1d, "file1" failed to open parent directory r=400 to update
[  276.158971][ T1208] usb 5-1: Product: syz
[  276.187328][ T9845] ntfs3: loop6: ino=1d, "file1" failed to open parent directory r=400 to update
[  276.204221][ T1208] usb 5-1: Manufacturer: syz
[  276.234622][ T1208] cdc_wdm 5-1:1.0: skipping garbage
[  276.240492][ T1208] cdc_wdm 5-1:1.0: skipping garbage
[  276.281748][ T1208] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  276.296259][ T1208] cdc_wdm 5-1:1.0: Unknown control protocol
[  276.697336][ T5856] usb 5-1: USB disconnect, device number 10
[  277.112013][ T1208] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  277.293055][ T1208] usb 7-1: Using ep0 maxpacket: 32
[  277.332651][ T1208] usb 7-1: config 0 has an invalid interface number: 51 but max is 0
[  277.364903][ T1208] usb 7-1: config 0 has no interface number 0
[  277.382005][ T1208] usb 7-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  277.397784][ T1208] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  277.408432][ T1208] usb 7-1: Product: syz
[  277.412658][ T1208] usb 7-1: Manufacturer: syz
[  277.419592][ T1208] usb 7-1: SerialNumber: syz
[  277.433038][ T1208] usb 7-1: config 0 descriptor??
[  277.441919][ T1208] quatech2 7-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  277.695849][ T1208] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  277.741331][ T1208] usb 7-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  278.070269][ T9889] loop3: detected capacity change from 0 to 512
[  278.135737][ T9889] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  278.154312][ T9889] ext4 filesystem being mounted at /306/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  278.192938][    C0] usb 7-1: qt2_read_bulk_callback - non-zero urb status: -71
[  278.201351][  T787] usb 7-1: USB disconnect, device number 5
[  278.221628][  T787] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  278.301221][ T9880] loop5: detected capacity change from 0 to 32768
[  278.314106][  T787] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  278.327261][ T9880] (syz.5.1166,9880,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  278.363276][ T9880] (syz.5.1166,9880,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  278.381836][  T787] quatech2 7-1:0.51: device disconnected
[  278.413019][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  278.485143][ T9880] JBD2: Ignoring recovery information on journal
[  278.585537][ T9880] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  279.037860][ T7686] ocfs2: Unmounting device (7,5) on (node local)
[  279.552547][ T1208] kernel write not supported for file /ppp (pid: 1208 comm: kworker/0:3)
[  279.771470][ T9924] loop5: detected capacity change from 0 to 4096
[  279.919925][ T9924] ntfs3: loop5: Mark volume as dirty due to NTFS errors
[  280.015424][ T9924] ntfs3: loop5: Failed to load $Extend (-22).
[  280.015455][ T9924] ntfs3: loop5: Failed to initialize $Extend.
[  280.063580][ T9938] loop4: detected capacity change from 0 to 256
[  280.106968][ T9938] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  280.292111][ T9940] loop6: detected capacity change from 0 to 1024
[  280.294102][ T9938] exFAT-fs (loop4): error, invalid size(size(0) > aligned(9223372036854777344)
[  280.294102][ T9938] 
[  280.314995][ T9938] exFAT-fs (loop4): Filesystem has been set read-only
[  280.370028][ T9942] loop3: detected capacity change from 0 to 1024
[  280.504514][ T9942] hfsplus: bad catalog entry type
[  280.515428][ T9940] hfsplus: found bad thread record in catalog
[  280.560411][ T9940] hfsplus: found bad thread record in catalog
[  280.590353][ T9945] hfsplus: found bad thread record in catalog
[  280.616341][   T77] hfsplus: b-tree write err: -5, ino 4
[  280.664822][ T9947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1194'.
[  280.699806][ T3495] hfsplus: found bad thread record in catalog
[  280.751050][ T3495] hfsplus: found bad thread record in catalog
[  280.816201][ T9951] loop5: detected capacity change from 0 to 128
[  281.129867][ T9959] loop5: detected capacity change from 0 to 22
[  281.146217][ T9959] MTD: Attempt to mount non-MTD device "/dev/loop5"
[  281.198745][ T9959] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  281.503513][ T9968] loop4: detected capacity change from 0 to 256
[  281.520091][ T9970] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1203'.
[  282.026294][ T9957] loop3: detected capacity change from 0 to 32768
[  282.129148][ T9957] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  282.253358][ T9957] XFS (loop3): Ending clean mount
[  282.426985][ T5770] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  283.234610][T10019] input: syz1 as /devices/virtual/input/input12
[  283.775112][T10031] erspan0: entered promiscuous mode
[  283.781217][T10029] debugfs: Directory 'ptm0' with parent 'caif_serial' already present!
[  284.242550][T10039] loop5: detected capacity change from 0 to 256
[  284.254867][T10014] loop3: detected capacity change from 0 to 32768
[  284.334425][T10039] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d)
[  285.004251][ T1092] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.315547][ T1092] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.530366][ T1092] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  285.693623][ T1092] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  286.277725][   T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  286.297541][   T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  286.310565][   T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  286.332692][   T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  286.344687][   T51] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3
[  286.361166][   T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  286.720234][T10079] loop4: detected capacity change from 0 to 512
[  286.750430][T10079] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  286.776574][T10079] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  286.819282][T10079] EXT4-fs (loop4): 1 truncate cleaned up
[  286.838952][T10079] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  287.147402][ T5977] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.510838][T10100] iommufd_mock iommufd_mock1: Adding to iommu group 0
[  287.948486][T10067] chnl_net:caif_netlink_parms(): no params data found
[  288.315997][ T5778] Bluetooth: hci3: command tx timeout
[  288.784007][T10067] bridge0: port 1(bridge_slave_0) entered blocking state
[  288.817876][T10067] bridge0: port 1(bridge_slave_0) entered disabled state
[  288.838969][T10067] bridge_slave_0: entered allmulticast mode
[  288.852274][T10067] bridge_slave_0: entered promiscuous mode
[  288.957258][T10067] bridge0: port 2(bridge_slave_1) entered blocking state
[  288.962331][T10107] loop4: detected capacity change from 0 to 40427
[  288.973950][T10067] bridge0: port 2(bridge_slave_1) entered disabled state
[  289.012435][T10067] bridge_slave_1: entered allmulticast mode
[  289.031650][T10107] F2FS-fs (loop4): invalid crc value
[  289.040986][T10067] bridge_slave_1: entered promiscuous mode
[  289.085387][T10107] F2FS-fs (loop4): Found nat_bits in checkpoint
[  289.297240][T10107] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  289.345544][T10137] loop3: detected capacity change from 0 to 1024
[  289.359709][T10067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  289.509645][T10067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  289.697268][   T34] hfsplus: b-tree write err: -5, ino 4
[  289.918101][T10067] team0: Port device team_slave_0 added
[  289.947624][ T5977] syz-executor: attempt to access beyond end of device
[  289.947624][ T5977] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  289.972598][ T5977] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  290.036060][ T1092] hsr_slave_0: left promiscuous mode
[  290.081535][ T1092] hsr_slave_1: left promiscuous mode
[  290.113814][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  290.121402][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0
[  290.163093][T10149] program syz.3.1268 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  290.174181][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  290.187807][T10127] loop5: detected capacity change from 0 to 32768
[  290.194554][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1
[  290.215209][ T1092] bridge_slave_1: left allmulticast mode
[  290.221734][ T1092] bridge_slave_1: left promiscuous mode
[  290.238986][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state
[  290.282668][ T1092] bridge_slave_0: left allmulticast mode
[  290.291857][ T1092] bridge_slave_0: left promiscuous mode
[  290.294436][ T5778] Bluetooth: hci3: command tx timeout
[  290.342220][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state
[  290.431399][T10127] ERROR: (device loop5): dbAlloc: the hint is outside the map
[  290.431399][T10127] 
[  290.452855][T10127] ERROR: (device loop5): remounting filesystem as read-only
[  290.470415][T10127] ERROR: (device loop5): dbAlloc: the hint is outside the map
[  290.470415][T10127] 
[  290.488884][ T1092] veth1_macvtap: left promiscuous mode
[  290.503770][ T1092] veth0_macvtap: left promiscuous mode
[  290.510854][ T1092] veth1_vlan: left promiscuous mode
[  290.522842][ T1092] veth0_vlan: left promiscuous mode
[  290.570982][ T7686] ------------[ cut here ]------------
[  290.577756][ T7686] kernel BUG at fs/jfs/inode.c:175!
[  290.589794][ T7686] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[  290.596123][ T7686] CPU: 1 PID: 7686 Comm: syz-executor Not tainted syzkaller #0
[  290.603806][ T7686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[  290.613979][ T7686] RIP: 0010:jfs_evict_inode+0x431/0x440
[  290.619595][ T7686] Code: df fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 89 f0 df fe e9 16 fe ff ff e8 4f c9 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41
[  290.639340][ T7686] RSP: 0018:ffffc9000b67fac0 EFLAGS: 00010293
[  290.645457][ T7686] RAX: ffffffff82ff4b61 RBX: ffff8880787444f0 RCX: ffff8880292a9e00
[  290.653471][ T7686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880787444f0
[  290.661485][ T7686] RBP: 0000000000000001 R08: ffffffff911bf61f R09: 1ffffffff2237ec3
[  290.669585][ T7686] R10: dffffc0000000000 R11: fffffbfff2237ec4 R12: dffffc0000000000
[  290.677763][ T7686] R13: dffffc0000000000 R14: ffff888078744178 R15: ffff888078744528
[  290.685780][ T7686] FS:  0000555555f45500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000
[  290.694751][ T7686] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  290.701456][ T7686] CR2: 0000555555f60a28 CR3: 000000006942c000 CR4: 00000000003506e0
[  290.709550][ T7686] Call Trace:
[  290.712954][ T7686]  <TASK>
[  290.716000][ T7686]  ? evict+0x4c4/0x8d0
[  290.720105][ T7686]  ? jfs_write_inode+0x220/0x220
[  290.725129][ T7686]  evict+0x4ca/0x8d0
[  290.729080][ T7686]  ? proc_nr_inodes+0x230/0x230
[  290.733971][ T7686]  ? do_raw_spin_unlock+0x121/0x230
[  290.739225][ T7686]  ? do_raw_spin_unlock+0x121/0x230
[  290.744469][ T7686]  evict_inodes+0x606/0x6a0
[  290.749014][ T7686]  ? clear_inode+0x150/0x150
[  290.753650][ T7686]  generic_shutdown_super+0x97/0x2b0
[  290.759060][ T7686]  kill_block_super+0x44/0x90
[  290.763784][ T7686]  deactivate_locked_super+0x97/0x100
[  290.769189][ T7686]  cleanup_mnt+0x43b/0x4d0
[  290.773659][ T7686]  task_work_run+0x1d4/0x260
[  290.778291][ T7686]  ? task_work_cancel+0x220/0x220
[  290.783364][ T7686]  ? exit_to_user_mode_loop+0x3b/0x110
[  290.788868][ T7686]  exit_to_user_mode_loop+0xe6/0x110
[  290.794285][ T7686]  exit_to_user_mode_prepare+0xee/0x180
[  290.800148][ T7686]  syscall_exit_to_user_mode+0x1a/0x50
[  290.805671][ T7686]  do_syscall_64+0x61/0xa0
[  290.810135][ T7686]  ? clear_bhb_loop+0x40/0x90
[  290.815025][ T7686]  ? clear_bhb_loop+0x40/0x90
[  290.819839][ T7686]  entry_SYSCALL_64_after_hwframe+0x68/0xd2
[  290.825816][ T7686] RIP: 0033:0x7fb75d79c117
[  290.830272][ T7686] Code: a2 c7 05 7c 94 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  290.849929][ T7686] RSP: 002b:00007ffd840f0958 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  290.858481][ T7686] RAX: 0000000000000000 RBX: 00007fb75d80471f RCX: 00007fb75d79c117
[  290.866500][ T7686] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd840f0a10
[  290.874600][ T7686] RBP: 00007ffd840f0a10 R08: 00007ffd840f1a10 R09: 00000000ffffffff
[  290.882604][ T7686] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd840f1aa0
[  290.890617][ T7686] R13: 00007fb75d80471f R14: 0000000000048487 R15: 00007ffd840f1ae0
[  290.898633][ T7686]  </TASK>
[  290.901685][ T7686] Modules linked in:
[  290.913133][ T7686] ---[ end trace 0000000000000000 ]---
[  290.927796][ T7686] RIP: 0010:jfs_evict_inode+0x431/0x440
[  290.937841][ T7686] Code: df fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 23 fe ff ff 4c 89 f7 e8 89 f0 df fe e9 16 fe ff ff e8 4f c9 87 fe <0f> 0b 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 00 f3 0f 1e fa 41 57 41
[  290.994483][ T7686] RSP: 0018:ffffc9000b67fac0 EFLAGS: 00010293
[  291.002313][ T7686] RAX: ffffffff82ff4b61 RBX: ffff8880787444f0 RCX: ffff8880292a9e00
[  291.017241][ T7686] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8880787444f0
[  291.031181][ T7686] RBP: 0000000000000001 R08: ffffffff911bf61f R09: 1ffffffff2237ec3
[  291.039530][ T7686] R10: dffffc0000000000 R11: fffffbfff2237ec4 R12: dffffc0000000000
[  291.049394][ T7686] R13: dffffc0000000000 R14: ffff888078744178 R15: ffff888078744528
[  291.057794][ T7686] FS:  0000555555f45500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000
[  291.069199][ T7686] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  291.075878][ T7686] CR2: 00002000000001c0 CR3: 000000006942c000 CR4: 00000000003506f0
[  291.084083][ T7686] Kernel panic - not syncing: Fatal exception
[  291.092804][ T7686] Kernel Offset: disabled
[  291.097200][ T7686] Rebooting in 86400 seconds..