last executing test programs:

2m8.251886783s ago: executing program 2 (id=100):
syz_mount_image$iso9660(&(0x7f0000000080), &(0x7f0000000100)='./file1\x00', 0x800002, &(0x7f0000000700)=ANY=[], 0x5, 0x57b, &(0x7f0000000140)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
getdents(r0, 0xfffffffffffffffd, 0x58)

2m8.251562415s ago: executing program 2 (id=101):
r0 = socket(0xa, 0x1, 0x84)
setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000002c0)={0x1, {{0x2, 0x4e24, @multicast2}}, {{0x2, 0x4e22, @loopback}}}, 0x108)
r1 = syz_open_procfs(0x0, &(0x7f0000000180)='net/mcfilter\x00')
pread64(r1, &(0x7f00000000c0)=""/144, 0x90, 0x6)

2m8.161195958s ago: executing program 2 (id=102):
syz_mount_image$squashfs(&(0x7f00000001c0), &(0x7f0000000200)='./file0\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00bc7811e943bbb3bc31a70c81525069e4320000000000", @ANYRES64], 0x0, 0x1a2, &(0x7f0000000440)="$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")

2m8.098425538s ago: executing program 2 (id=103):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@max_batch_time={'max_batch_time', 0x3d, 0x1}}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfe, 0x47c, &(0x7f0000000a80)="$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")
mount(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000000)='devpts\x00', 0x0, 0x0)
mount$bpf(0x0, &(0x7f00000023c0)='./file0\x00', 0x0, 0x958028, &(0x7f00000001c0)={[{@gid}, {}]})
r0 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00')
read$FUSE(r0, &(0x7f0000000980)={0x2020}, 0x2020)

2m7.991214251s ago: executing program 2 (id=104):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000440)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x2, 0x1, 0x0, 0x2, 0x3, 0x0, 0x70bd2c, 0x0, [@sadb_x_nat_t_port={0x1, 0x39, 0x4e23}]}, 0x18}, 0x19}, 0x0)

2m7.761140741s ago: executing program 2 (id=105):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000180)="441f08d600270bcf724ef54e91e6ffbe002a5f89000000000000000000", 0x1d)

2m7.731773892s ago: executing program 32 (id=105):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000340)={0x200000, 0x200000, 0x0, 0x0, 0x5989})
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000180)="441f08d600270bcf724ef54e91e6ffbe002a5f89000000000000000000", 0x1d)

1m32.320017231s ago: executing program 1 (id=599):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$can_raw(0x1d, 0x3, 0x1)
setsockopt(r1, 0x65, 0x1, &(0x7f0000000080), 0x1d0)
dup3(r0, r1, 0x0)

1m32.260340623s ago: executing program 1 (id=600):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x2f, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10)

1m32.26016416s ago: executing program 1 (id=601):
mount$nfs(&(0x7f0000000100)='...', 0x0, 0x0, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, @remote}, 0x10)

1m32.196309646s ago: executing program 1 (id=602):
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2208050, &(0x7f0000000140)=ANY=[], 0x1, 0x1520, &(0x7f0000011680)="$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")
ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x40187013, 0x0)
open(&(0x7f0000000180)='./bus\x00', 0x14937f, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1000001, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
truncate(0x0, 0x1c9e)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, 0x0)
ioctl$TUNSETVNETBE(r1, 0x400454de, 0x0)
mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0)
chdir(&(0x7f0000000640)='./file0\x00')

1m32.016938761s ago: executing program 1 (id=605):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0)
getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a)
r2 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0)
r3 = socket(0x10, 0x3, 0x0)
getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14)
sendmsg$nl_route_sched(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0x9}, {0xffff, 0xffff}, {0x1, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800)
sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=@newtfilter={0x38, 0x28, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0xb, 0x9}, {}, {0x9, 0xffff}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_POLICE={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x810}, 0x40c4)

1m31.731853697s ago: executing program 1 (id=612):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00038004"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)

1m31.683695121s ago: executing program 33 (id=612):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000003e000701feffffff00000000017c0000040042800c00018006000600800a0000200002801c00038004"], 0x44}, 0x1, 0x0, 0x0, 0x40040c0}, 0xc000)

53.751174436s ago: executing program 4 (id=1139):
r0 = memfd_create(&(0x7f0000000040)='\x02A\xbb\xcc\x96\x0e\x00\x00\x00\x00\x00\x00', 0x6)
fcntl$addseals(r0, 0x409, 0xd)
ftruncate(r0, 0x1000000)

53.687823605s ago: executing program 4 (id=1140):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1fc, 0x19, 0x1, 0x0, 0x10, {{@in=@remote, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x9, 0x8}, {0x1, 0x0, 0x80}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, [@tmpl={0x144, 0x5, [{{@in=@local, 0x0, 0x32}, 0x0, @in=@broadcast}, {{@in=@local, 0x0, 0x2b}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x800}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x32}, 0x0, @in=@multicast1, 0x800000, 0x3}, {{@in6=@mcast1, 0x0, 0x33}, 0x0, @in=@private=0xa010101, 0x3504, 0x2, 0x0, 0x1, 0x0, 0xabf}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x2b}, 0x2, @in6=@private1, 0x0, 0x1, 0x0, 0xfc, 0x1}]}]}, 0x1fc}}, 0x0)

53.687606023s ago: executing program 4 (id=1141):
umount2(&(0x7f00000002c0)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x7)

53.687493951s ago: executing program 4 (id=1142):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680), 0x3, 0x470, &(0x7f0000000dc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

53.621800839s ago: executing program 4 (id=1143):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newlink={0x48, 0x10, 0x403, 0x70bd27, 0x0, {0x0, 0x0, 0x4, 0x0, 0xa300}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5}, @IFLA_GENEVE_TTL={0x5, 0x3, 0x7}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2400c000}, 0x0)

53.569135396s ago: executing program 4 (id=1144):
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@random="9115463ecc79", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote}}}}, 0x0)

53.515720182s ago: executing program 34 (id=1144):
syz_emit_ethernet(0x2a, &(0x7f0000000100)={@random="9115463ecc79", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @remote, @remote, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote}}}}, 0x0)

31.819093758s ago: executing program 0 (id=1442):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000100)='./file1\x00', 0x101880a, &(0x7f0000000180)={[{@nodiscard}, {}, {@acl}, {@fsync_mode_strict}, {@checkpoint_enable}, {@disable_roll_forward}, {@checkpoint_diasble}, {@background_gc_on}, {@noinline_xattr}, {@discard_unit_block}, {@fsync_mode_strict}, {@age_extent_cache}, {@six_active_logs}, {@fault_injection={'fault_injection', 0x3d, 0xffffffffffffffff}}]}, 0x2, 0x5505, &(0x7f0000002480)="$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")

31.616429741s ago: executing program 0 (id=1443):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000750000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r0, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

31.616336335s ago: executing program 0 (id=1444):
r0 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
r1 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff)
add_key$user(&(0x7f0000000080), &(0x7f0000000100)={'syz', 0x0}, &(0x7f00000001c0)="a6", 0x1, r1)
keyctl$KEYCTL_MOVE(0x1e, r0, 0xffffffffffffffff, r1, 0x0)

31.551111127s ago: executing program 0 (id=1445):
r0 = syz_mount_image$vfat(&(0x7f0000000180), &(0x7f0000001240)='./file0\x00', 0x10, &(0x7f0000000a00)=ANY=[@ANYBLOB="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", @ANYRES16], 0x0, 0x11dc, &(0x7f0000001280)="$eJzs3MGLG1UcB/Bf19rW1N2sWqstiA+96GVo9uBFL0G2IA0obSO0gjB1JxoyJiETFiJi9eTVv0M8ehPEm1724t/gbS8eexBHTNR2l3hYdDewfD6X/OD3vuQ9BgbeMG/23/jq40Gvynr5NNbOnIm1cUR6kCLFWvzt83j19R9/euHWnbs32p3O9s2Urrdvt15LKW28+P17n37z0g/Ti+9+u/Hd+djbfH//161f9i7vXdn//fZH/Sr1qzQcTVOe7o1G0/xeWaSdfjXIUnqnLPKqSP1hVUwO9HvlaDyepXy4s94YT4qqSvlwlgbFLE1HaTqZpfzDvD9MWZal9UbwX3S/flDXdURdPx7noq7r+oloxMV4MtZjI5qxGU/F0/FMXIpn43I8F8/HlfmoVc8bAAAAAAAAAAAAAAAAAAAAThfn/wEAAAAAAAAAAAAAAAAAAGD1bt25e6Pd6WzfTOlCRPnlbne3u/hd9Nu96EcZRVyLZvwW89P/C4v6+lud7WtpbjO+KO//lb+/233sYL41/5zA0nxrkU8H8+ej8Wh+K5pxaXl+a2n+Qrzy8iP5LJrx8wcxijJ24s/sw/xnrZTefLtzKH91Pg4AAABOgyz9Y+n+Pcv+rb/IH+H5wKH99dm4ena1ayeimn0yyMuymBxbcS6O/S8UCsX/XKz6zsRJeHjRVz0TAAAAAAAAAAAAjuIkXidc9RoBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIA/2IFjAQAAAABh/tZpdGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPBVAAAA//8xgdSv")
r1 = openat(r0, &(0x7f0000000080)='./file0\x00', 0x0, 0x30)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$VFAT_IOCTL_READDIR_BOTH(r1, 0x82307202, &(0x7f0000000f00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}])

31.486776011s ago: executing program 0 (id=1446):
r0 = socket$netlink(0x10, 0x3, 0x4)
writev(r0, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c56100000000000000000000000590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x48}], 0x1)

31.242555073s ago: executing program 0 (id=1447):
r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x1bc}, &(0x7f0000000680)=<r1=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4)
io_uring_enter(r0, 0xf000, 0x80004000, 0x4f, 0x0, 0x0)

31.192201296s ago: executing program 35 (id=1447):
r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4, 0x1bc}, &(0x7f0000000680)=<r1=>0x0, &(0x7f0000000280))
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0x200, 0x0, 0x4)
io_uring_enter(r0, 0xf000, 0x80004000, 0x4f, 0x0, 0x0)

1.820159391s ago: executing program 6 (id=1894):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000100)={0x3, &(0x7f0000000000)=[{0x50, 0x55, 0x48, 0x1}, {0x28, 0x4, 0x8, 0xfffff024}, {0x6, 0x1, 0x3, 0x208}]}, 0x10)
syz_genetlink_get_family_id$devlink(&(0x7f00000022c0), r0)

1.819784819s ago: executing program 6 (id=1896):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x2, 0x0, 0x0, 0x7, 0x20}]}, {0x0, [0x5f]}}, 0x0, 0x27, 0x0, 0xa}, 0x28)

1.819674827s ago: executing program 6 (id=1897):
ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000100)={@my=0x1})
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, 0x0)
r0 = add_key$user(&(0x7f0000000200), &(0x7f0000000440), &(0x7f00000000c0), 0x14b, 0xfffffffffffffffd)
r1 = add_key(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f00000002c0)='4', 0xba, 0xfffffffffffffffe)
r2 = add_key$user(&(0x7f0000000540), &(0x7f0000000380)={'syz', 0x2}, &(0x7f0000000580)="ed", 0x1, 0xffffffffffffffff)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r2, r0, r1}, 0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={'blake2b-256\x00'}})

1.756555969s ago: executing program 6 (id=1898):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000380)={[{@nls={'nls', 0x3d, 'cp932'}}, {@nodecompose}, {@nobarrier}, {@uid}, {@part={'part', 0x3d, 0xff}}, {@gid}, {}, {@nobarrier}]}, 0xff, 0x6b3, &(0x7f0000000780)="$eJzs3U9sHFcdB/DvbDbrbJBSt03TgJBiNVIFjUjsrEqChNSAEMohQhFcerUSp7HipJXjorRCZAMUJE6cUA8cilA49IQQQionRDkjIXHhlHskbhxyAIzmz9pre+PYieN1289Hmp03+96895tf5s/ubKwJ8Jl1/vXs76fI+RMXbpXL9+72Fu7d7V0flJNMJGkl7XqWopsUHyfnUk/5fPlm013xsHFevf9R0X7/w1691G6mqn1rs/U2GNmynxxYWdiXZKou/mcLHbZG91dNVT+XVvt7TMVK3GXCjg8SB+O2vEF/tXLUobHW1o9bYM+6XV83N5hMDqa+upafA9KcHR59Zhi/Tc9N/d2LAwAAAJ6Wkd/lhz3zIA9yK4d2JxwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4dCjqZwYWzdQalKdSDJ7/3xl6pn5nzOE+ofeuVLPvPjPuQAAAAAAAAADgiRx7kAe5lUOD5eWi+s3/pWrhcPX6ubydm5nLYk7mVmazlKUsZibJ5FBHnVuzS0uLMxvX/GXKNZeXl283a54euebptXH11wc66n8abGgEAAAAAAAAAJ9ZP8r51d//AQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABgLyiSffWsmg4PypNptZMcSNIpplaad8Ya7A7487gDAAAAgKev28wPFf+rC8tF9Z3/SPW9/0Dezo0sZT5LWchcLlf3Aupv/a2/93sL9+72rpfTxo6/8a9txVH1mPrew+iRp6sWL6yscT7fzvdyIlO5mMXM5/uZzVLmMpVvVaXZFJls7l5M3rvbzSDWjfGeW7N0cX1sx4bKZXxHq0i6uZL5KraTudQZhN5q2h0dGu2PnWTdiHfK7BSvNbaYo8vNvNyiXzTzvWGy2vL9KxmZbnJfZuPZ4bxvzP0295P1I82ktXIP6vDqKOXi+pEeK+cHm3mZ658+3Zxv81ba2kz0f14uDfa+I5vnPPnyP/5y8WrrxrWrV26e2Du70WNav0/0hjLx4pYysVBmov8EmTjwJPHvnE6Tjfosur2z5UvVuocyn+/kzVzOXM5kOjM5m+l8LafTy+mhvL6weV6rY621vWPt+JeaQnlN+tnQtWnXTDysoszrs0N5HT7TTVZ1w++sZum5LWSp6GR0lv45MpT2F5pCOcaPh64447c+EzNDmXh+80z8+r/LSW4u3Li2eHX2rS2O93IzLw/b99aem3+zIxu0fc3mlvvLc+U/VurLxvDeUdY9P6hbl69O84tLu+lsTV0n1fFc1z3qSC17OnJnVE913YsjR+lVdUeH6tZ8ysmbWVj5FNLY9YMUgC04+MrBTvd+92/dD7o/6V7tXjjwzYmzE1/sZP9f23/a97vWb1tfL17JB/lhDo07UgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+DS4+c6712YXFuYW92AhrR3u8M7IqkEq6nc6I9ocyx7IxiejMLHZHvX71I9resjqnXHE3M1D49ndQtq7MNZERlRdWHmnm7RW4klybY884A54Gk4tXX/r1M133v3K/PXZN+bemLtx+uyZ1870vjpz+9SV+YW56fq1adwec7DAjlr9GDDuSAAAAAAAAAAAAICt2o0/bxgxbNEfw7YCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAn0znX8/+forMTJ+cLpfv3e0tlNOgvNqynaSVpPhBUnycnEs9ZXKou+Jh47x6/6Nfvfz+h73VvtqD9q116/3h38vL29yKfjNlKsm+Zv5oE1vq79JQf/1tBlYrVrawTNjxQeJg3P4fAAD//+/HBYc=")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

1.691574668s ago: executing program 6 (id=1899):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x40, 0x10, 0x49920d862a92153b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x12, 0xfffffffffffffffe}}]}}}]}, 0x40}}, 0x0)

1.478527075s ago: executing program 6 (id=1901):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="6103070601090147020b52"], 0xa)

1.444107318s ago: executing program 36 (id=1901):
r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1)
ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=<r3=>0x0)
sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r3], 0x1c}}, 0x0)
write$nci(r0, &(0x7f0000000340)=ANY=[@ANYBLOB="6103070601090147020b52"], 0xa)

672.935423ms ago: executing program 3 (id=1915):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x67682, 0x0)
r1 = dup(r0)
fallocate(r1, 0x80, 0x5, 0x967)

672.716977ms ago: executing program 3 (id=1916):
r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)={0x114, 0x1f, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0)

672.540802ms ago: executing program 3 (id=1917):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7030000000300e7840000101b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

601.912462ms ago: executing program 3 (id=1918):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f00000007c0), &(0x7f0000000180)='./file1\x00', 0x0, &(0x7f0000000a00)=ANY=[], 0x4c, 0x708, &(0x7f0000000c00)="$eJzs3U1sHGcZAOB31uuNN5XcTZq0BSHFakQEDSR2lpIgIREqhHyoUCQuvS6J01heu5HtIidCZAsUjnBCOfRQhMyhJ9QDUhEHRDkjIXFFuUfiHnFg0czOrPfH3vUSx07C80iz883M9/POm5nZ2dlYG8D/rcW3Y7oVSSyef2srXX6wXW8+2K6vFuWIOBYRpYhyZxbJWkTyWcTV6EzxuXRl3l2y1zhvPPz0w3P3P653lsr5lNUvjWq3oz1ihFY+xVxETOXzCZX36u96vDnU372Juk66cacJO1skDo5ae0hrkub7OG+Bp929iKnpXdbXIo5HxEx+HxD51aF0yOEduImucgAAAPA0upo9Ax/pxUfxKLZi9nACAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOdDEtlvBib5VCrKc5EUv/9fydelKpUjjne0r4zZ/sHNQwoEAAAAAAAAAJ6IT/Iv7s88ikexFbPF+naSfef/WrZwKnt9Id6LjViK9bgQW9GIzdiM9ViImJ7t6bCy1djcXF8YbvnrSFu22+17ectLEVEbannpEHYaAAAAAAAAAJ5fP4nFmD3qIAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoFcSMdWZZdOpolyLUjkiZiKiktZrRfypKD/L/nzUAQAAAMCTV83ns8l/OoV2kn3mfzn73D8T78VabMZybEYzluJG9iyg86m/9PdWvflgu76aTsMdf/tfE8WR9RgRU/H+HiPPZzVOd1ssxnfj+3E+5uJarMdy/DAasRlLMRfVdCeiEUnUqp2nF7Uizt3jvdq3dK1vqRxxZiDWV7NIqnEzlrPYLsT1SnQem2T7kI75as9of6hEDIz4fpqd5Fu5feboRs+/16/y5zK59ov77OPJqGV7Pt3NyHya+zwbJ0bnfsLjZHCkhSh1n0Gd2hklXRwcqcj5DybJ+fF8nub65/05P2gTPkobzMSlKOVHX8TL/Tm//cX7J/sbf/kff7l2q7S2cuvmxvknuEuPY25chemiMJiJek8mXhl99OWZaKaZaBWZaI2NbXpwxcz4/TkMlTwb2aVon1fL72SlRrzWcwi+GzdiKS7HfCzElZiPb8SlqHePsHQ63ZfXcn21PyfZuVYavr5VRwR/9ks9lX4xpvLhSvNyoievvVe6WrYtX3P1lzHfc/SdHH30TfwukI7/+bycjvHT7jvO06A3E9HqXJuL6F4anYnftNPXjebayvqtxu19jncun6en7Qf91+bf7j/qwXf3g5AeLyc7Nw9FTqrF8ZJue6kb7Ym+97JK/o1Lp11paNvp7rZazMZyfG/PM7WS38MN99TZ9krvtn/uXDkr+f1Nsa3vLifejWZ2FzJg7KUagEN2/PXjlerD6t+qH1V/Vr1VfWvmzWNXjn2hEtN/Lf9x6vel35W+mbweH8WPY/aoIwUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgOfBxp27K41mc2m9W4iZwTWPW6jsOdboQpTG1tl+YX8dRi1i9FhJXqgc7L4/i4VqDKwpfmHpcXv+JCJG1Kk8dvDJxMfYUKE0pk6ahwPJc/HDadma9tQEzctFq93rlGNjJlYaSXmXM+7YzlkQtZVG89/tvubV6DllgOfcxc3V2xc37tz96vJq452ld5bWLl25fOVy/esLX7t4c7m5NN953bXp1KEHCxyojTt3nccAAAAAAAAAAADwjMn/9//m0F8RtNv7+zuH8pg6lfWN3Uc+c9i7CgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyjFt+O6VYksTB/YT5dfrBdb6ZTUd6pWY6IUkQkP4pIPou4Gp0paj3dJXuN88bDTz88d//j+k5f5aJ+aVS7/WnlU8xFxFQ+H+/YLt0M93e9p7/W/xRe0t3DNGFni8TBUftvAAAA///5DvWY")
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x6880, 0x0)

601.680403ms ago: executing program 3 (id=1919):
r0 = syz_io_uring_setup(0x3, &(0x7f00000001c0)={0x0, 0x1738, 0x10, 0x0, 0x142}, &(0x7f00000002c0), &(0x7f0000000300))
io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r0, 0x14, &(0x7f0000000340)=[0xfeffffff], 0x2)

513.65517ms ago: executing program 3 (id=1920):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$bt_hci(r3, 0x84, 0x82, &(0x7f0000000000)=""/4087, &(0x7f0000001080)=0xff7)
setresgid(0x0, 0xee01, 0xffffffffffffffff)
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
pipe2(&(0x7f0000000240), 0x84000)

121.067936ms ago: executing program 5 (id=1926):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x64, 0x2, 0x6, 0x1, 0x0, 0x0, {0x2}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffaf}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0)

68.168339ms ago: executing program 5 (id=1927):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
r0 = shmget$private(0x0, 0x4000, 0x800, &(0x7f0000ffa000/0x4000)=nil)
shmctl$SHM_LOCK(r0, 0xb)

67.953702ms ago: executing program 5 (id=1928):
semctl$SETVAL(0x0, 0x170ef2fbce22de4b, 0x10, 0x0)

67.859128ms ago: executing program 5 (id=1929):
r0 = socket$inet(0x2b, 0x801, 0x0)
connect$inet(r0, &(0x7f0000000340)={0x2, 0xfffb, @local}, 0x10)
setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4)

246.914µs ago: executing program 5 (id=1930):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {0x0, 0x5}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0xffffffffffffffff}]}}]}, 0x40}}, 0x0)
syz_emit_ethernet(0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaa4c77b99cbb86dd60c6ea090000000000000100000000e01f00000000000000ff0200000000000000000000000000010001c204"], 0x0)

0s ago: executing program 5 (id=1931):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x50)
bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x7, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50)

kernel console output (not intermixed with test programs):

nd, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  137.020864][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.024512][   T24] usb 4-1: Product: syz
[  137.026202][   T24] usb 4-1: Manufacturer: syz
[  137.027951][   T24] usb 4-1: SerialNumber: syz
[  137.078320][  T794] usb 6-1: 0:2 : does not exist
[  137.084140][  T794] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[  137.093788][  T794] usb 6-1: USB disconnect, device number 2
[  137.174545][ T9150] loop0: detected capacity change from 0 to 32768
[  137.177767][ T9150] btrfs: Deprecated parameter 'usebackuproot'
[  137.180583][ T9150] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  137.185147][ T9150] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1180 (9150)
[  137.192314][ T9150] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  137.196757][ T9150] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  137.241585][   T24] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  137.244763][   T24] usb 4-1: 2:1: invalid format type 0x1001 is detected, processed as PCM
[  137.251985][   T24] usb 4-1: USB disconnect, device number 18
[  137.283141][ T9150] BTRFS info (device loop0): rebuilding free space tree
[  137.289084][ T9150] BTRFS info (device loop0): enabling ssd optimizations
[  137.292138][ T9150] BTRFS info (device loop0): using spread ssd allocation scheme
[  137.295239][ T9150] BTRFS info (device loop0): enabling free space tree
[  137.297916][ T9150] BTRFS info (device loop0): force clearing of disk cache
[  137.300907][ T9150] BTRFS info (device loop0): enabling auto defrag
[  137.303602][ T9150] BTRFS info (device loop0): doing ref verification
[  137.306220][ T9150] BTRFS info (device loop0): trying to use backup root at mount time
[  137.309489][ T9150] BTRFS info (device loop0): max_inline set to 4096
[  137.444506][ T6183] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  137.624619][ T9177] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1186'.
[  137.657063][ T9183] mkiss: ax0: crc mode is auto.
[  138.004513][ T5852] Bluetooth: hci0: command tx timeout
[  138.020603][ T9186] loop3: detected capacity change from 0 to 32768
[  138.046765][ T9186] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,str_hash=crc64,recovery_pass_last=set_may_go_rw,nojournal_transaction_names,read_only
[  138.046777][ T9186]   allowing incompatible features above 0.0: (unknown version)
[  138.046782][ T9186]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  138.064644][ T9186] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  138.068257][ T9186] bcachefs (loop3): invalid journal entry, version=1.7: mi_btree_bitmap type=clock in superblock: bad rw, fixing
[  138.073571][ T9186] bcachefs (loop3): invalid bkey in superblock btree=xattrs level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 2285c34bed0abe32 written 16 min_key POS_MIN durability: 0 crc: c_size 1 size 1 offset 0 nonce 0 csum none 12010b:10004000b  compress none
[  138.073588][ T9186]   has non ptr field, deleting
[  138.084743][ T9186] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  138.087309][ T9186] bcachefs (loop3): Version upgrade from 1.3: rebalance_work to 1.7: mi_btree_bitmap incomplete
[  138.087309][ T9186] Doing compatible version upgrade from 1.3: rebalance_work to 1.28: inode_has_case_insensitive
[  138.087309][ T9186]   running recovery passes: check_allocations,check_extents_to_backpointers,check_subvols,check_inodes,check_dirents
[  138.103918][ T9196] loop5: detected capacity change from 0 to 512
[  138.108715][ T9186] bcachefs (loop3): invalid bkey in btree_node btree=dirents level=0: u64s 7 type dirent 4096:189491840996961599:U32_MAX len 0 ver 0: file0 -> 4096 type dir
[  138.108729][ T9186]   dirent points to own directory, deleting
[  138.109075][ T9196] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  138.117048][ T9186] bcachefs (loop3): accounting_read...
[  138.119094][ T9196] EXT4-fs (loop5): orphan cleanup on readonly fs
[  138.126502][ T9186]  done
[  138.127416][ T9196] Quota error (device loop5): find_block_dqentry: Quota for id 0 referenced but not present
[  138.127542][ T9186] bcachefs (loop3): alloc_read... done
[  138.134193][ T9186] bcachefs (loop3): snapshots_read... done
[  138.136721][ T9186] bcachefs (loop3): check_allocations...
[  138.137871][ T9186] bcachefs (loop3): bucket 0:26 data type btree ptr gen 0 missing in alloc btree
[  138.137879][ T9186]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0, fixing
[  138.138307][ T9196] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  138.142493][ T9186] bcachefs (loop3): bucket 0:38 data type btree ptr gen 0 missing in alloc btree
[  138.145050][ T9196] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.1193: Failed to acquire dquot type 1
[  138.149152][ T9186]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 7589ab5e0c11cc7a written 24 min_key POS_MIN durability: 1 ptr: 0:38:0 gen 0, fixing
[  138.149736][ T9186] bcachefs (loop3): bucket 0:41 data type btree ptr gen 0 missing in alloc btree
[  138.154201][ T9196] EXT4-fs error (device loop5): ext4_validate_block_bitmap:441: comm syz.5.1193: bg 0: block 40: padding at end of block bitmap is not set
[  138.156296][ T9186]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 9aa2895aefce4bdf written 24 min_key POS_MIN durability: 1 ptr: 0:41:0 gen 0, fixing
[  138.156905][ T9186] bcachefs (loop3): bucket 0:35 data type btree ptr gen 0 missing in alloc btree
[  138.162299][ T9196] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  138.166488][ T9186]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq c0bef60d07ceb940 written 16 min_key POS_MIN durability: 1 ptr: 0:35:0 gen 0, fixing
[  138.170805][ T9196] EXT4-fs (loop5): 1 truncate cleaned up
[  138.176663][ T9186] bcachefs (loop3): bucket 0:29 data type btree ptr gen 0 missing in alloc btree
[  138.183730][ T9196] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  138.184972][ T9186]   while marking u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0, fixing
[  138.186092][ T9186] bcachefs (loop3): bucket 0:1 gen 0 has wrong data_type: got free, should be sb, fixing
[  138.207311][ T9196] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.1193: bad symlink.
[  138.209105][ T9186] bcachefs (loop3): bucket 0:1 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  138.216306][ T9196] EXT4-fs error (device loop5): ext4_get_link:106: inode #16: comm syz.5.1193: bad symlink.
[  138.217014][ T9186] bcachefs (loop3): bucket 0:2 gen 0 has wrong data_type: got free, should be sb, fixing
[  138.229459][ T9186] bcachefs (loop3): bucket 0:2 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  138.234660][ T9186] bcachefs (loop3): bucket 0:3 gen 0 has wrong data_type: got free, should be sb, fixing
[  138.235222][ T9028] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  138.238251][ T9186] bcachefs (loop3): bucket 0:3 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  138.249143][ T9186] bcachefs (loop3): bucket 0:4 gen 0 has wrong data_type: got free, should be sb, fixing
[  138.253265][ T9186] bcachefs (loop3): bucket 0:4 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  138.257808][ T9186] bcachefs (loop3): bucket 0:5 gen 0 has wrong data_type: got free, should be sb, fixing
[  138.261874][ T9186] bcachefs (loop3): bucket 0:5 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  138.266653][ T9186] bcachefs (loop3): bucket 0:6 gen 0 has wrong data_type: got free, should be sb, fixing
[  138.270446][ T9186] bcachefs (loop3): bucket 0:6 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  138.275028][ T9186] bcachefs (loop3): bucket 0:7 gen 0 has wrong data_type: got free, should be sb, fixing
[  138.278983][ T9186] bcachefs (loop3): bucket 0:7 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  138.283588][ T9186] bcachefs (loop3): bucket 0:8 gen 0 has wrong data_type: got free, should be sb, fixing
[  138.287383][ T9186] bcachefs (loop3): bucket 0:8 gen 0 data type sb has wrong dirty_sectors: got 0, should be 8, fixing
[  138.292146][ T9186] bcachefs (loop3): bucket 0:16 gen 0 has wrong data_type: got free, should be sb, fixing
[  138.296180][ T9186] bcachefs (loop3): bucket 0:16 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  138.300773][ T9186] bcachefs (loop3): bucket 0:17 gen 0 has wrong data_type: got free, should be sb, fixing
[  138.304713][ T9186] bcachefs (loop3): bucket 0:17 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  138.309225][ T9186] bcachefs (loop3): bucket 0:18 gen 0 has wrong data_type: got free, should be sb, fixing
[  138.309234][ T9186]   Ratelimiting new instances of previous error
[  138.315480][ T9186] bcachefs (loop3): bucket 0:18 gen 0 data type sb has wrong dirty_sectors: got 0, should be 256, fixing
[  138.315487][ T9186]   Ratelimiting new instances of previous error
[  138.325270][ T9186]  done
[  138.327714][ T9186] bcachefs (loop3): going read-write
[  138.403977][ T9186] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean
[  138.407917][ T9186] bcachefs (loop3): going read-only
[  138.410650][ T9186] bcachefs (loop3): finished waiting for writes to stop
[  138.415900][ T9186] bcachefs (loop3): flushing journal and stopping allocators, journal seq 13
[  138.420955][ T9186] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 13
[  138.425820][ T9186] bcachefs (loop3): unclean shutdown complete, journal seq 14
[  138.429686][ T9186] bcachefs (loop3): done going read-only, filesystem not clean
[  138.433109][ T9186] bcachefs (loop3): done starting filesystem
[  138.511627][ T6228] bcachefs (loop3): shutting down
[  138.528546][ T6228] bcachefs (loop3): shutdown complete
[  138.851541][   T33] audit: type=1326 audit(1755977210.235:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9226 comm="syz.0.1201" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f210238ebe9 code=0x0
[  139.325950][ T9234] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1204'.
[  139.580097][   T24] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  139.720662][ T9238] loop3: detected capacity change from 0 to 32768
[  139.747047][   T24] usb 6-1: unable to get BOS descriptor or descriptor too short
[  139.752591][   T24] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2
[  139.755799][   T24] usb 6-1: config 1 interface 0 altsetting 247 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  139.761169][   T24] usb 6-1: config 1 interface 0 has no altsetting 1
[  139.765786][   T24] usb 6-1: New USB device found, idVendor=2040, idProduct=b990, bcdDevice=f6.75
[  139.769102][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.772384][   T24] usb 6-1: Product: syz
[  139.774133][   T24] usb 6-1: Manufacturer: syz
[  139.775718][   T24] usb 6-1: SerialNumber: syz
[  139.785104][   T24] smsusb:smsusb_probe: board id=8, interface number 0
[  139.989431][   T24] smsusb:smsusb_probe: Device initialized with return code -19
[  140.060458][ T5852] Bluetooth: hci0: command tx timeout
[  140.202254][ T3144] usb 6-1: USB disconnect, device number 3
[  141.079393][ T9269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  141.103995][ T9264] loop3: detected capacity change from 0 to 40427
[  141.107772][ T9264] F2FS-fs (loop3): extra_attr or flexible_inline_xattr feature is off
[  141.322452][ T9277] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  141.340169][ T9277] batman_adv: batadv0: Removing interface: batadv_slave_0
[  141.604629][ T9300] loop3: detected capacity change from 0 to 16
[  141.608113][ T9300] erofs (device loop3): mounted with root inode @ nid 36.
[  141.638792][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1234'.
[  141.959591][    C1] vcan0: j1939_tp_rxtimer: 0xffff888110137c00: rx timeout, send abort
[  142.210092][ T5852] Bluetooth: hci0: command tx timeout
[  142.459645][    C1] vcan0: j1939_tp_rxtimer: 0xffff888039ae2800: rx timeout, send abort
[  142.462929][    C1] vcan0: j1939_tp_rxtimer: 0xffff888110137c00: abort rx timeout. Force session deactivation
[  142.690179][ T9330] bridge0: entered allmulticast mode
[  142.692378][ T9330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1245'.
[  142.695692][ T9330] bridge_slave_1: left allmulticast mode
[  142.697636][ T9330] bridge_slave_1: left promiscuous mode
[  142.699616][ T9330] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.703618][ T9330] bridge_slave_0: left allmulticast mode
[  142.705556][ T9330] bridge_slave_0: left promiscuous mode
[  142.707573][ T9330] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.723453][ T9330] bridge0 (unregistering): left allmulticast mode
[  142.836164][ T9338] syz.3.1249: attempt to access beyond end of device
[  142.836164][ T9338] nbd3: rw=2048, sector=2, nr_sectors = 1 limit=0
[  142.862774][ T9340] loop5: detected capacity change from 0 to 4096
[  142.870595][ T9340] ntfs3(loop5): ino=19, mi_enum_attr
[  142.872257][ T9342] loop3: detected capacity change from 0 to 512
[  142.872757][ T9340] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  142.875651][ T9342] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  142.892984][ T9342] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  142.896863][ T9342] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.1251: corrupted in-inode xattr: e_value size too large
[  142.902680][ T9342] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.1251: couldn't read orphan inode 15 (err -117)
[  142.908088][ T9342] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.917111][ T9348] loop5: detected capacity change from 0 to 512
[  142.920511][ T9348] EXT4-fs: EXT4-fs: inode_readahead_blks must be 0 or a power of 2 smaller than 2^31
[  142.934074][ T6228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.950977][ T9352] loop3: detected capacity change from 0 to 128
[  142.953320][ T9352] EXT4-fs: Ignoring removed nobh option
[  142.957074][ T9352] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  142.958235][    C1] vcan0: j1939_tp_rxtimer: 0xffff888110137400: rx timeout, send abort
[  142.962952][ T9352] ext4 filesystem being mounted at /388/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  142.964763][    C1] vcan0: j1939_tp_rxtimer: 0xffff888039ae2800: abort rx timeout. Force session deactivation
[  142.989772][ T6228] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  143.024364][ T9358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1257'.
[  143.042861][ T9358] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1257'.
[  143.265101][ T9380] loop3: detected capacity change from 0 to 256
[  143.269808][ T9380] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011e3e, chksum : 0x38c882e6, utbl_chksum : 0xe619d30d)
[  143.488877][    C1] vcan0: j1939_tp_rxtimer: 0xffff888110137400: abort rx timeout. Force session deactivation
[  143.539730][ T9391] loop0: detected capacity change from 0 to 1024
[  143.542205][ T9391] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[  143.549052][ T9391] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[  143.792905][ T9395] loop0: detected capacity change from 0 to 64
[  144.158513][ T3144] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  144.217477][   T33] audit: type=1800 audit(1755977215.524:27): pid=9387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1267" name="/" dev="fuse" ino=5 res=0 errno=0
[  144.319331][ T3144] usb 1-1: config 0 has an invalid interface number: 98 but max is 0
[  144.322190][ T3144] usb 1-1: config 0 has no interface number 0
[  144.324271][ T3144] usb 1-1: config 0 interface 98 has no altsetting 0
[  144.328138][ T3144] usb 1-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24
[  144.331228][ T3144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.333879][ T3144] usb 1-1: Product: syz
[  144.335382][ T3144] usb 1-1: Manufacturer: syz
[  144.337123][ T3144] usb 1-1: SerialNumber: syz
[  144.341565][ T3144] usb 1-1: config 0 descriptor??
[  144.345784][ T9412] loop3: detected capacity change from 0 to 32768
[  144.348974][ T9412] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1279 (9412)
[  144.355539][ T9412] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  144.359334][ T9412] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  144.381035][ T9412] BTRFS info (device loop3): enabling ssd optimizations
[  144.383558][ T9412] BTRFS info (device loop3): enabling free space tree
[  144.412618][ T6228] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  144.478726][ T9429] loop3: detected capacity change from 0 to 16
[  144.481671][ T9429] erofs (device loop3): mounted with root inode @ nid 36.
[  144.485466][ T9429] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36
[  144.488353][ T9429] erofs (device loop3): read error -117 @ 43 of nid 36
[  144.524162][ T9433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1282'.
[  144.561649][ T3144] usb 1-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II
[  144.809665][ T5916] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  144.980922][ T5916] usb 4-1: Using ep0 maxpacket: 32
[  144.986189][ T5916] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  144.989535][ T5916] usb 4-1: config 0 has no interface number 0
[  145.000360][ T5916] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  145.005471][ T5916] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.008425][ T5916] usb 4-1: Product: syz
[  145.010164][ T5916] usb 4-1: Manufacturer: syz
[  145.012081][ T5916] usb 4-1: SerialNumber: syz
[  145.015667][ T5916] usb 4-1: config 0 descriptor??
[  145.019212][ T5916] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  145.049560][ T9454] libceph: resolve 'R' (ret=-3): failed
[  145.229284][ T3144] usb 1-1: reset high-speed USB device number 15 using dummy_hcd
[  145.238552][ T5916] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  145.244171][ T5916] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  145.353966][ T9483] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1305'.
[  145.490275][ T9487] loop5: detected capacity change from 0 to 32768
[  145.497347][ T9487] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  145.522976][ T9028] ocfs2: Unmounting device (7,5) on (node local)
[  145.609815][ T3144] usb 1-1: [ueagle-atm] pre-firmware device, uploading firmware
[  145.615217][ T3144] usb 1-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw
[  145.620102][ T5882] usb 1-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2
[  145.623305][ T5882] usb 1-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw
[  145.680333][    C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  145.683140][  T794] usb 4-1: USB disconnect, device number 19
[  145.688708][  T794] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  145.693665][  T794] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  145.697657][  T794] quatech2 4-1:0.51: device disconnected
[  145.825632][ T3144] usb 1-1: USB disconnect, device number 15
[  146.341775][ T9498] loop3: detected capacity change from 0 to 32768
[  146.347457][ T9498] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  146.354164][ T9498] OCFS2: ERROR (device loop3): int ocfs2_validate_gd_self(struct super_block *, struct buffer_head *, int): Group descriptor #2304 has bad signature 
[  146.360672][ T9498] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  146.364743][ T9498] OCFS2: File system is now read-only.
[  146.366956][ T9498] (syz.3.1311,9498,0):ocfs2_search_chain:1852 ERROR: status = -30
[  146.370136][ T9498] (syz.3.1311,9498,0):ocfs2_search_chain:1940 ERROR: status = -30
[  146.373439][ T9498] (syz.3.1311,9498,0):ocfs2_claim_suballoc_bits:2010 ERROR: status = -30
[  146.382279][ T9498] (syz.3.1311,9498,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  146.385870][ T9498] (syz.3.1311,9498,0):__ocfs2_claim_clusters:2438 ERROR: status = -30
[  146.389189][ T9498] (syz.3.1311,9498,0):__ocfs2_claim_clusters:2446 ERROR: status = -30
[  146.392922][ T9498] (syz.3.1311,9498,0):ocfs2_local_alloc_new_window:1199 ERROR: status = -30
[  146.396634][ T9498] (syz.3.1311,9498,0):ocfs2_local_alloc_new_window:1224 ERROR: status = -30
[  146.400332][ T9498] (syz.3.1311,9498,0):ocfs2_local_alloc_slide_window:1298 ERROR: status = -30
[  146.404144][ T9498] (syz.3.1311,9498,0):ocfs2_local_alloc_slide_window:1317 ERROR: status = -30
[  146.408030][ T9498] (syz.3.1311,9498,0):ocfs2_reserve_local_alloc_bits:672 ERROR: status = -30
[  146.411922][ T9498] (syz.3.1311,9498,0):ocfs2_reserve_local_alloc_bits:710 ERROR: status = -30
[  146.416302][ T9498] (syz.3.1311,9498,0):ocfs2_reserve_clusters_with_limit:1172 ERROR: status = -30
[  146.420277][ T9498] (syz.3.1311,9498,0):ocfs2_reserve_clusters_with_limit:1221 ERROR: status = -30
[  146.424962][ T9498] (syz.3.1311,9498,0):ocfs2_expand_inline_dir:2864 ERROR: status = -30
[  146.428355][ T9498] (syz.3.1311,9498,0):ocfs2_extend_dir:3211 ERROR: status = -30
[  146.431639][ T9498] (syz.3.1311,9498,0):ocfs2_prepare_dir_for_insert:4316 ERROR: status = -30
[  146.435413][ T9498] (syz.3.1311,9498,0):ocfs2_rename:1486 ERROR: status = -30
[  146.438671][ T9498] (syz.3.1311,9498,0):ocfs2_rename:1702 ERROR: status = -30
[  146.452369][ T6228] (syz-executor,6228,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  146.457821][ T6228] ocfs2: Unmounting device (7,3) on (node local)
[  147.311303][    T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  147.473126][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[  147.477089][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.481416][    T9] usb 4-1: config 0 descriptor??
[  147.485493][    T9] gspca_main: STV06xx-2.14.0 probing 046d:0870
[  147.747480][ T9546] dummy0: entered promiscuous mode
[  147.750425][ T9546] netdevsim netdevsim5 netdevsim0: entered promiscuous mode
[  147.754509][ T9546] hsr1: entered allmulticast mode
[  147.756809][ T9546] dummy0: entered allmulticast mode
[  147.759119][ T9546] netdevsim netdevsim5 netdevsim0: entered allmulticast mode
[  147.822137][ T9550] C: renamed from lo (while UP)
[  147.827880][ T9550] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  147.961279][ T9554] loop5: detected capacity change from 0 to 32768
[  147.969673][   T33] audit: type=1800 audit(1755977219.032:28): pid=9554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1334" name="file1" dev="loop5" ino=4 res=0 errno=0
[  147.970448][ T9554] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  147.970448][ T9554] 
[  147.980887][ T9554] ERROR: (device loop5): remounting filesystem as read-only
[  147.983507][ T9554] xtLookup: xtSearch returned -5
[  147.991707][ T9554] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  147.991707][ T9554] 
[  147.995067][ T9554] xtLookup: xtSearch returned -5
[  147.997604][ T9554] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  147.997604][ T9554] 
[  148.001440][ T9554] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  148.001440][ T9554] 
[  148.005012][ T9554] xtLookup: xtSearch returned -5
[  148.007281][ T9554] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt
[  148.007281][ T9554] 
[  148.137881][ T9566] program syz.5.1340 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  148.355284][    T9] usb 4-1: USB disconnect, device number 20
[  148.374570][ T9574] loop0: detected capacity change from 0 to 512
[  148.381480][ T9574] EXT4-fs error (device loop0): ext4_init_orphan_info:585: comm syz.0.1344: inode #0: comm syz.0.1344: iget: illegal inode #
[  148.386880][ T9574] EXT4-fs (loop0): Remounting filesystem read-only
[  148.389406][ T9574] EXT4-fs (loop0): get orphan inode failed
[  148.392538][ T9574] EXT4-fs (loop0): mount failed
[  148.434208][  T794] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  148.470279][ T9580] openvswitch: netlink: IP tunnel TTL not specified.
[  148.532345][ T9588] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2
[  148.618122][  T794] usb 6-1: config 0 interface 0 altsetting 15 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.622490][  T794] usb 6-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  148.628469][  T794] usb 6-1: config 0 interface 0 has no altsetting 0
[  148.632294][  T794] usb 6-1: New USB device found, idVendor=05ac, idProduct=025b, bcdDevice= 0.00
[  148.638355][  T794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.642796][  T794] usb 6-1: config 0 descriptor??
[  148.866482][  T794] usb 6-1: string descriptor 0 read error: -71
[  148.904011][  T794] input: bcm5974 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input17
[  148.908970][ T5280] bcm5974 6-1:0.0: could not read from device
[  148.913553][ T5280] bcm5974 6-1:0.0: could not read from device
[  148.914889][  T794] usb 6-1: USB disconnect, device number 4
[  149.457439][   T33] audit: type=1326 audit(1755977220.426:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9620 comm="syz.5.1363" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f840958ebe9 code=0x0
[  150.031517][ T9644] loop3: detected capacity change from 0 to 24
[  150.033801][ T9644] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  150.036686][ T9644] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  150.090868][   T24] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  150.101979][ T9645] syz.3.1374: attempt to access beyond end of device
[  150.101979][ T9645] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0
[  150.106664][ T9645] vxfs: unable to read disk superblock at 1
[  150.108901][ T9645] syz.3.1374: attempt to access beyond end of device
[  150.108901][ T9645] nbd3: rw=0, sector=16, nr_sectors = 2 limit=0
[  150.113251][ T9645] vxfs: unable to read disk superblock at 8
[  150.115252][ T9645] vxfs: can't find superblock.
[  150.272665][   T24] usb 1-1: Using ep0 maxpacket: 32
[  150.279395][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  150.287117][   T24] usb 1-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  150.291415][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.294862][   T24] usb 1-1: Product: syz
[  150.296658][   T24] usb 1-1: Manufacturer: syz
[  150.298613][   T24] usb 1-1: SerialNumber: syz
[  150.304338][   T24] usb 1-1: config 0 descriptor??
[  150.309723][   T24] usb 1-1: bad CDC descriptors
[  150.312579][   T24] usb 1-1: unsupported MDLM descriptors
[  150.540627][    T9] usb 1-1: USB disconnect, device number 16
[  151.215632][ T9655] loop5: detected capacity change from 0 to 32768
[  151.220767][ T9655] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  151.238916][ T9655] XFS (loop5): Ending clean mount
[  151.241943][ T9655] XFS (loop5): Quotacheck needed: Please wait.
[  151.248215][ T9655] XFS (loop5): Quotacheck: Done.
[  151.268445][ T9028] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  151.353252][ T9671] loop5: detected capacity change from 0 to 512
[  151.365326][ T9671] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  151.369882][ T9671] ext4 filesystem being mounted at /88/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  151.392851][ T9028] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.405804][ T3144] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  151.568426][ T3144] usb 1-1: unable to get BOS descriptor or descriptor too short
[  151.571872][ T3144] usb 1-1: not running at top speed; connect to a high speed hub
[  151.575258][ T3144] usb 1-1: config 1 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  151.579700][ T3144] usb 1-1: config 1 interface 0 has no altsetting 0
[  151.583474][ T3144] usb 1-1: New USB device found, idVendor=0b0e, idProduct=ffff, bcdDevice= 0.40
[  151.586442][ T3144] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.590873][ T3144] usb 1-1: Product: syz
[  151.592357][ T3144] usb 1-1: Manufacturer: syz
[  151.594300][ T3144] usb 1-1: SerialNumber: syz
[  151.605418][ T9675] loop5: detected capacity change from 0 to 65536
[  151.608444][  T794] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  151.634889][ T9675] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  151.663847][ T9675] XFS (loop5): Ending clean mount
[  151.779930][  T794] usb 4-1: Using ep0 maxpacket: 16
[  151.780783][ T9684] XFS (loop5): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  151.782873][  T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid wMaxPacketSize 0
[  151.785578][ T9684] XFS (loop5): Unmount and run xfs_repair
[  151.788690][  T794] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 0
[  151.790959][ T9684] XFS (loop5): First 128 bytes of corrupted metadata buffer:
[  151.793870][  T794] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  151.793882][  T794] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  151.795587][  T794] usb 4-1: New USB device found, idVendor=1608, idProduct=0303, bcdDevice=a1.cb
[  151.796661][ T9684] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  151.799817][  T794] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.804139][ T9684] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  151.806085][  T794] usb 4-1: Product: syz
[  151.806096][  T794] usb 4-1: Manufacturer: syz
[  151.806105][  T794] usb 4-1: SerialNumber: syz
[  151.812291][  T794] usb 4-1: config 0 descriptor??
[  151.813144][ T9684] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  151.819070][  T794] io_ti 4-1:0.0: required endpoints missing
[  151.823622][ T3144] usbhid 1-1:1.0: can't add hid device: -71
[  151.825317][ T9684] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  151.827221][ T3144] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[  151.831839][ T9684] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  151.836038][ T3144] usb 1-1: USB disconnect, device number 17
[  151.839080][ T9684] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  151.845270][ T9684] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  151.848994][ T9684] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  151.852547][ T9684] XFS (loop5): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  151.856926][ T9684] XFS (loop5): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  151.861672][ T9684] XFS (loop5): Please unmount the filesystem and rectify the problem(s)
[  152.071612][ T3144] usb 4-1: USB disconnect, device number 21
[  152.679210][ T9028] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  152.724397][ T9690] netlink: 'syz.3.1387': attribute type 3 has an invalid length.
[  152.797763][ T9696] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1389'.
[  152.800776][ T9696] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1389'.
[  152.864477][ T9703] netlink: 'syz.5.1392': attribute type 13 has an invalid length.
[  152.931644][ T9703] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.934770][ T9703] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.989510][ T9703] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  153.011662][ T9703] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  153.122202][ T9709] loop0: detected capacity change from 0 to 512
[  153.132529][ T9709] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  153.174930][ T5881] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.178052][ T5881] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.183456][ T9709] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.190056][ T5881] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.197713][ T9709] ext4 filesystem being mounted at /438/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  153.201501][ T5881] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  153.230443][ T9714] capability: warning: `syz.5.1396' uses 32-bit capabilities (legacy support in use)
[  153.282639][ T9718] evm: overlay not supported
[  153.288389][ T9719] input: syz1 as /devices/virtual/input/input18
[  153.449381][ T9709] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  153.491873][ T9721] loop5: detected capacity change from 0 to 40427
[  153.512365][ T9721] F2FS-fs (loop5): Image doesn't support compression
[  153.515144][ T9721] F2FS-fs (loop5): build fault injection rate: 690
[  153.521182][ T9721] F2FS-fs (loop5): build fault injection type: 0x35f7
[  153.525368][ T6183] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.534892][ T9721] F2FS-fs (loop5): invalid crc value
[  153.568410][ T9721] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  153.574516][ T9721] F2FS-fs (loop5): Start checkpoint disabled!
[  153.577186][ T9721] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e6
[  153.600596][ T9730] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  153.603861][ T9730] cramfs: wrong magic
[  153.726033][ T9736] binder: 9735:9736 ioctl c018620c 200000000000 returned -22
[  153.728893][ T9738] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1407'.
[  153.732851][ T9738] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1407'.
[  153.769021][    T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  153.930498][    T9] usb 4-1: Using ep0 maxpacket: 8
[  153.939507][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  153.944324][    T9] usb 4-1: config 9 has an invalid interface number: 229 but max is 0
[  153.947679][    T9] usb 4-1: config 9 has an invalid interface number: 255 but max is 0
[  153.954623][    T9] usb 4-1: config 9 has 2 interfaces, different from the descriptor's value: 1
[  153.958395][    T9] usb 4-1: config 9 has no interface number 0
[  153.961241][    T9] usb 4-1: config 9 has no interface number 1
[  153.963734][    T9] usb 4-1: config 9 interface 229 altsetting 112 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  153.968868][    T9] usb 4-1: config 9 interface 229 has no altsetting 0
[  153.973208][    T9] usb 4-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice=12.34
[  153.976133][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.978698][    T9] usb 4-1: Product: syz
[  153.980441][    T9] usb 4-1: Manufacturer: syz
[  153.983024][    T9] usb 4-1: SerialNumber: syz
[  153.995560][ T9756] netlink: 202368 bytes leftover after parsing attributes in process `syz.0.1414'.
[  154.424373][    T9] hub 4-1:9.229: Invalid hub with more than one config or interface
[  154.427026][    T9] hub 4-1:9.229: probe with driver hub failed with error -22
[  154.439279][    T9] usb 4-1: USB disconnect, device number 22
[  154.597877][ T9764] loop0: detected capacity change from 0 to 40427
[  154.600802][ T9764] F2FS-fs: heap/no_heap options were deprecated
[  154.604818][ T9764] F2FS-fs (loop0): invalid crc value
[  154.624249][ T9764] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  154.628007][ T9764] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  154.652655][ T6183] syz-executor: attempt to access beyond end of device
[  154.652655][ T6183] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  154.657928][ T6183] CPU: 1 UID: 0 PID: 6183 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  154.657941][ T6183] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  154.657945][ T6183] Call Trace:
[  154.657948][ T6183]  <TASK>
[  154.657952][ T6183]  dump_stack_lvl+0x189/0x250
[  154.657965][ T6183]  ? __pfx_dump_stack_lvl+0x10/0x10
[  154.657973][ T6183]  ? __pfx_queue_work_on+0x10/0x10
[  154.657981][ T6183]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  154.657991][ T6183]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  154.658001][ T6183]  f2fs_handle_critical_error+0x37c/0x540
[  154.658012][ T6183]  f2fs_write_end_io+0x886/0xb60
[  154.658022][ T6183]  __submit_merged_bio+0x27a/0x6a0
[  154.658032][ T6183]  __submit_merged_write_cond+0x255/0x530
[  154.658042][ T6183]  f2fs_write_data_pages+0x261d/0x3000
[  154.658052][ T6183]  ? arch_stack_walk+0xfc/0x150
[  154.658068][ T6183]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  154.658078][ T6183]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  154.658088][ T6183]  ? rcu_is_watching+0x15/0xb0
[  154.658102][ T6183]  ? folios_put_refs+0x559/0x640
[  154.658112][ T6183]  ? __pfx_folios_put_refs+0x10/0x10
[  154.658119][ T6183]  ? rcu_is_watching+0x15/0xb0
[  154.658125][ T6183]  ? lru_add+0xa2f/0xd80
[  154.658132][ T6183]  ? lru_add+0x198/0xd80
[  154.658138][ T6183]  ? do_raw_spin_lock+0x121/0x290
[  154.658171][ T6183]  ? do_raw_spin_unlock+0x4d/0x240
[  154.658184][ T6183]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  154.658199][ T6183]  do_writepages+0x32e/0x550
[  154.658213][ T6183]  ? rcu_is_watching+0x15/0xb0
[  154.658222][ T6183]  ? do_raw_spin_unlock+0x4d/0x240
[  154.658231][ T6183]  filemap_fdatawrite+0x199/0x240
[  154.658240][ T6183]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  154.658255][ T6183]  ? rcu_is_watching+0x15/0xb0
[  154.658262][ T6183]  ? do_raw_spin_unlock+0x4d/0x240
[  154.658271][ T6183]  f2fs_sync_dirty_inodes+0x31f/0x830
[  154.658280][ T6183]  f2fs_write_checkpoint+0x95a/0x1df0
[  154.658291][ T6183]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  154.658310][ T6183]  ? kill_f2fs_super+0x298/0x6c0
[  154.658317][ T6183]  kill_f2fs_super+0x2c3/0x6c0
[  154.658325][ T6183]  ? __pfx_kill_f2fs_super+0x10/0x10
[  154.658331][ T6183]  ? radix_tree_delete_item+0x2b6/0x400
[  154.658341][ T6183]  ? shrinker_free+0x2ce/0x3e0
[  154.658349][ T6183]  deactivate_locked_super+0xbc/0x130
[  154.658358][ T6183]  cleanup_mnt+0x425/0x4c0
[  154.658367][ T6183]  task_work_run+0x1d4/0x260
[  154.658376][ T6183]  ? __pfx_task_work_run+0x10/0x10
[  154.658385][ T6183]  ? __x64_sys_umount+0x122/0x160
[  154.658394][ T6183]  ? __pfx___x64_sys_umount+0x10/0x10
[  154.658403][ T6183]  ? rcu_is_watching+0x15/0xb0
[  154.658410][ T6183]  exit_to_user_mode_loop+0xec/0x110
[  154.658420][ T6183]  do_syscall_64+0x2bd/0x3b0
[  154.658429][ T6183]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.658437][ T6183]  ? exc_page_fault+0x9f/0xf0
[  154.658446][ T6183]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  154.658453][ T6183] RIP: 0033:0x7f210238ff17
[  154.658461][ T6183] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  154.658467][ T6183] RSP: 002b:00007ffdfb43d5e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  154.658477][ T6183] RAX: 0000000000000000 RBX: 00007f2102411c05 RCX: 00007f210238ff17
[  154.658482][ T6183] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdfb43d6a0
[  154.658487][ T6183] RBP: 00007ffdfb43d6a0 R08: 0000000000000000 R09: 0000000000000000
[  154.658491][ T6183] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdfb43e730
[  154.658496][ T6183] R13: 00007f2102411c05 R14: 000000000002589c R15: 00007ffdfb43e770
[  154.658503][ T6183]  </TASK>
[  154.658506][ T6183] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  154.820765][ T9780] loop5: detected capacity change from 0 to 256
[  154.828337][ T9780] exFAT-fs (loop5): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[  155.088264][ T9788] loop0: detected capacity change from 0 to 32768
[  155.092835][ T9788] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  155.110484][ T9788] XFS (loop0): Ending clean mount
[  155.120916][ T6183] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  155.228442][ T9815] loop0: detected capacity change from 0 to 16
[  155.339915][    T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  155.451880][ T9828] loop0: detected capacity change from 0 to 40427
[  155.455203][ T9828] f2fs: Bad value for 'fault_injection'
[  155.536656][    T9] usb 6-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  155.540349][    T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  155.545495][    T9] usb 6-1: Product: syz
[  155.547317][    T9] usb 6-1: Manufacturer: syz
[  155.549331][    T9] usb 6-1: SerialNumber: syz
[  155.626856][ T9834] loop0: detected capacity change from 0 to 8192
[  155.917702][ T5881] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  155.994265][ T5881] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.049843][ T5881] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.091481][ T5881] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  156.165516][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  156.169040][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  156.169088][ T5881] bridge_slave_1: left allmulticast mode
[  156.176163][ T5881] bridge_slave_1: left promiscuous mode
[  156.178624][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  156.178682][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.185278][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  156.188904][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  156.188921][ T5881] bridge_slave_0: left allmulticast mode
[  156.193902][ T5881] bridge_slave_0: left promiscuous mode
[  156.201526][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.244478][ T9854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1456'.
[  156.311041][ T5881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  156.316977][ T5881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  156.321939][ T5881] bond0 (unregistering): Released all slaves
[  156.327618][ T9860] futex_wake_op: syz.3.1459 tries to shift op by 144; fix this program
[  156.435752][ T9847] chnl_net:caif_netlink_parms(): no params data found
[  156.500390][ T9847] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.504097][ T9847] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.507774][ T9847] bridge_slave_0: entered allmulticast mode
[  156.511087][ T9847] bridge_slave_0: entered promiscuous mode
[  156.515003][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.520886][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1462'.
[  156.524808][ T9847] bridge0: port 2(bridge_slave_1) entered disabled state
[  156.536032][ T9847] bridge_slave_1: entered allmulticast mode
[  156.539484][ T9847] bridge_slave_1: entered promiscuous mode
[  156.561098][ T5881] hsr_slave_0: left promiscuous mode
[  156.564096][ T5881] hsr_slave_1: left promiscuous mode
[  156.566637][ T5881] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.571651][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.577321][ T5881] veth1_macvtap: left promiscuous mode
[  156.579683][ T5881] veth0_macvtap: left promiscuous mode
[  156.582809][ T5881] veth1_vlan: left promiscuous mode
[  156.585016][ T5881] veth0_vlan: left promiscuous mode
[  156.678763][ T5881] team0 (unregistering): Port device team_slave_1 removed
[  156.686567][ T5881] team0 (unregistering): Port device team_slave_0 removed
[  156.749787][ T9847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.754835][ T9847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.766805][ T9847] team0: Port device team_slave_0 added
[  156.769745][ T9847] team0: Port device team_slave_1 added
[  156.783483][ T9847] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.785670][ T9847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.802307][ T9847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.807809][ T9847] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.810536][ T9847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.821616][ T9847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.842474][ T9847] hsr_slave_0: entered promiscuous mode
[  156.845403][ T9847] hsr_slave_1: entered promiscuous mode
[  156.848762][ T9847] debugfs: 'hsr0' already exists in 'hsr'
[  156.851347][ T9847] Cannot create hsr debugfs directory
[  156.908882][ T9847] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  156.915537][ T9847] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  156.919294][ T9847] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  156.923601][ T9847] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  156.936946][ T9847] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.939966][ T9847] bridge0: port 2(bridge_slave_1) entered forwarding state
[  156.942405][ T9847] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.945407][ T9847] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.985401][ T9847] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.994085][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[  156.997677][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[  157.005338][ T9847] 8021q: adding VLAN 0 to HW filter on device team0
[  157.012906][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  157.015775][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  157.022742][ T5881] IPVS: stop unused estimator thread 0...
[  157.025211][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  157.028173][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.060436][ T9895] loop3: detected capacity change from 0 to 65
[  157.073168][ T9895] BFS-fs: bfs_fill_super(): NOTE: filesystem loop3 was created with 512 inodes, the real maximum is 511, mounting anyway
[  157.117551][ T9847] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.198885][ T9847] veth0_vlan: entered promiscuous mode
[  157.204115][ T9847] veth1_vlan: entered promiscuous mode
[  157.215162][ T9847] veth0_macvtap: entered promiscuous mode
[  157.218372][ T9847] veth1_macvtap: entered promiscuous mode
[  157.226041][ T9847] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.234426][ T9847] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.239387][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.245884][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.308115][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.311039][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.356206][   T65] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.358730][   T65] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.371796][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.380613][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.468460][ T9906] loop6: detected capacity change from 0 to 128
[  157.472376][ T9906] FAT-fs (loop6): Directory bread(block 162) failed
[  157.475327][ T9906] FAT-fs (loop6): Directory bread(block 163) failed
[  157.478555][ T9906] FAT-fs (loop6): Directory bread(block 164) failed
[  157.481408][ T9906] FAT-fs (loop6): Directory bread(block 165) failed
[  157.484149][ T9906] FAT-fs (loop6): Directory bread(block 166) failed
[  157.487005][ T9906] FAT-fs (loop6): Directory bread(block 167) failed
[  157.490163][ T9906] FAT-fs (loop6): Directory bread(block 168) failed
[  157.492949][ T9906] FAT-fs (loop6): Directory bread(block 169) failed
[  157.497098][ T9906] FAT-fs (loop6): Directory bread(block 162) failed
[  157.500561][ T9906] FAT-fs (loop6): Directory bread(block 163) failed
[  157.504456][ T9906] syz.6.1448: attempt to access beyond end of device
[  157.504456][ T9906] loop6: rw=3, sector=226, nr_sectors = 6 limit=128
[  157.512956][ T9906] syz.6.1448: attempt to access beyond end of device
[  157.512956][ T9906] loop6: rw=2051, sector=232, nr_sectors = 2 limit=128
[  157.640950][ T9909] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  157.733428][    T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000080. ret = -EPROTO
[  157.739213][    T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  157.743436][    T9] lan78xx 6-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  157.749574][    T9] lan78xx 6-1:1.0: probe with driver lan78xx failed with error -71
[  157.755313][    T9] usb 6-1: USB disconnect, device number 5
[  157.849429][ T9913] loop6: detected capacity change from 0 to 32768
[  157.856183][ T9913] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  157.873219][ T9913] XFS (loop6): Ending clean mount
[  157.877587][ T9913] XFS (loop6): Quotacheck needed: Please wait.
[  157.883740][ T9913] XFS (loop6): Quotacheck: Done.
[  157.917293][ T9847] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  158.100502][ T9936] loop3: detected capacity change from 0 to 8192
[  158.130562][ T9936]  loop3: p1 p2 < > p3 p4 < p5 >
[  158.132435][ T9936] loop3: partition table partially beyond EOD, truncated
[  158.135106][ T9936] loop3: p1 size 100663296 extends beyond EOD, truncated
[  158.140501][ T9936] loop3: p2 start 591104 is beyond EOD, truncated
[  158.143633][ T9936] loop3: p3 start 33572980 is beyond EOD, truncated
[  158.147743][ T9936] loop3: p5 size 100663296 extends beyond EOD, truncated
[  158.198181][ T9943] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1481'.
[  158.201991][ T9943] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1481'.
[  158.245090][ T9947] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1483'.
[  158.332983][ T9951] netlink: 'syz.3.1485': attribute type 9 has an invalid length.
[  158.382955][ T9953] loop5: detected capacity change from 0 to 128
[  158.395381][ T9953] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  158.400218][ T5857] Bluetooth: hci1: command tx timeout
[  158.401876][ T9955] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1487'.
[  158.414517][ T9953] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  158.480932][ T9028] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  158.658929][ T9963] loop3: detected capacity change from 0 to 4096
[  158.663449][ T9963] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  158.676942][ T9963] ntfs3(loop3): ino=1a, mi_enum_attr
[  158.678901][ T9963] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  158.712041][   T33] audit: type=1800 audit(1755977229.078:30): pid=9963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1490" name="file1" dev="loop3" ino=30 res=0 errno=0
[  158.933484][ T9974] netlink: 'syz.5.1496': attribute type 21 has an invalid length.
[  158.936886][ T9974] IPv6: NLM_F_CREATE should be specified when creating new route
[  158.940499][ T9974] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  158.943675][ T9974] IPv6: NLM_F_CREATE should be set when creating new route
[  158.946660][ T9974] IPv6: NLM_F_CREATE should be set when creating new route
[  158.949384][ T9974] IPv6: NLM_F_CREATE should be set when creating new route
[  159.050533][ T9979] loop5: detected capacity change from 0 to 2048
[  159.057131][ T9979] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  159.072241][ T9979] UDF-fs: error (device loop5): udf_verify_fi: directory (ino 1376) has entry where CRC length (32) does not match entry length (24)
[  159.276312][ T9975] loop3: detected capacity change from 0 to 32768
[  159.323897][ T9998] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1505'.
[  159.330623][ T9975] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  159.350978][ T9975] XFS (loop3): Ending clean mount
[  159.368978][ T6228] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  159.373052][T10005] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1507'.
[  159.376600][T10005] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  159.379639][T10005] batman_adv: batadv0: Removing interface: batadv_slave_0
[  159.384572][T10005] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  159.387683][T10005] batman_adv: batadv0: Removing interface: batadv_slave_1
[  159.509271][T10020] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  159.691793][T10029] loop5: detected capacity change from 0 to 32768
[  159.702739][T10029] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  159.715051][T10029] (syz.5.1518,10029,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=0, inode=65, rec_len=16, name_len=1
[  159.721743][T10029] (syz.5.1518,10029,0):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[  159.726477][T10029] (syz.5.1518,10029,0):ocfs2_mknod:301 ERROR: status = -2
[  159.729668][T10029] (syz.5.1518,10029,0):ocfs2_mknod:505 ERROR: status = -2
[  159.732791][T10029] (syz.5.1518,10029,0):ocfs2_create:678 ERROR: status = -2
[  159.758673][ T9028] ocfs2: Unmounting device (7,5) on (node local)
[  159.967116][T10042] loop3: detected capacity change from 0 to 32768
[  159.971843][T10042] XFS (loop3): DAX unsupported by block device. Turning off DAX.
[  159.975186][T10042] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  159.983707][T10042] XFS (loop3): Ending clean mount
[  159.986500][T10042] XFS (loop3): Quotacheck needed: Please wait.
[  160.106926][T10042] XFS (loop3): Quotacheck: Done.
[  160.180280][   T33] audit: type=1800 audit(1755977230.453:31): pid=10042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1524" name="file1" dev="loop3" ino=4422 res=0 errno=0
[  160.192480][T10042] XFS (loop3): Metadata CRC error detected at xfs_refcountbt_read_verify+0x42/0xe0, xfs_refcountbt block 0x28 
[  160.198268][T10042] XFS (loop3): Unmount and run xfs_repair
[  160.200808][T10042] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  160.205176][T10042] 00000000: 52 ff ff ff 7f 00 00 00 ff ff ff ff ff ff ff ff  R...............
[  160.209001][T10042] 00000010: 00 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00  .......(........
[  160.212839][T10042] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  160.216752][T10042] 00000030: 00 00 00 00 bd e7 de 5d 00 00 00 00 00 00 00 00  .......]........
[  160.220694][T10042] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  160.224614][T10042] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  160.228850][T10042] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  160.232774][T10042] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  160.236969][T10042] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x28 len 8 error 74
[  160.242192][T10042] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  160.249151][T10042] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  160.265183][ T6228] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  160.621600][ T5857] Bluetooth: hci1: command tx timeout
[  161.014339][T10069] loop5: detected capacity change from 0 to 32768
[  161.020337][T10069] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  161.037802][ T9028] ocfs2: Unmounting device (7,5) on (node local)
[  161.327681][ T5916] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[  161.427116][T10079] loop3: detected capacity change from 0 to 32768
[  161.451627][T10079] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  161.451648][T10079]   allowing incompatible features above 0.0: (unknown version)
[  161.451656][T10079]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  161.477252][T10079] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  161.480353][T10079] bcachefs (loop3): initializing new filesystem
[  161.486027][T10079] bcachefs (loop3): going read-write
[  161.488372][ T5916] usb 6-1: Using ep0 maxpacket: 8
[  161.493848][ T5916] usb 6-1: unable to get BOS descriptor or descriptor too short
[  161.498879][T10079] bcachefs (loop3): marking superblocks
[  161.502053][ T5916] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  161.503738][T10079] bcachefs (loop3): initializing freespace
[  161.511698][T10079] bcachefs (loop3): done initializing freespace
[  161.516481][T10079] bcachefs (loop3): reading snapshots table
[  161.519999][T10079] bcachefs (loop3): reading snapshots done
[  161.521291][ T5916] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  161.527744][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  161.528568][T10079] bcachefs (loop3): done starting filesystem
[  161.531241][ T5916] usb 6-1: Product: syz
[  161.535253][ T5916] usb 6-1: Manufacturer: syz
[  161.537167][ T5916] usb 6-1: SerialNumber: syz
[  161.581692][ T6228] bcachefs (loop3): shutting down
[  161.584554][ T6228] bcachefs (loop3): going read-only
[  161.586903][ T6228] bcachefs (loop3): finished waiting for writes to stop
[  161.589845][ T6228] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  161.597860][ T6228] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  161.603358][ T6228] bcachefs (loop3): clean shutdown complete, journal seq 4
[  161.607416][ T6228] bcachefs (loop3): marking filesystem clean
[  161.613684][ T6228] bcachefs (loop3): shutdown complete
[  161.626795][T10098] loop6: detected capacity change from 0 to 512
[  161.642373][T10098] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  161.646980][T10098] ext4 filesystem being mounted at /16/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  161.761473][ T5916] cdc_mbim 6-1:1.0: MBIM functional descriptor missing
[  161.764361][ T5916] cdc_mbim 6-1:1.0: bind() failure
[  161.769281][ T5916] usb 6-1: USB disconnect, device number 6
[  161.786668][ T9847] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.921259][   T33] audit: type=1326 audit(1755977232.081:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.6.1544" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbafb8ebe9 code=0x7ffc0000
[  161.929676][   T33] audit: type=1326 audit(1755977232.081:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.6.1544" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbafb8ebe9 code=0x7ffc0000
[  161.939557][   T33] audit: type=1326 audit(1755977232.081:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.6.1544" exe="/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7ffbafb8ebe9 code=0x7ffc0000
[  161.949592][   T33] audit: type=1326 audit(1755977232.081:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.6.1544" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbafb8ebe9 code=0x7ffc0000
[  161.955393][T10118] bridge_slave_0: left allmulticast mode
[  161.959677][   T33] audit: type=1326 audit(1755977232.081:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.6.1544" exe="/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7ffbafb8ebe9 code=0x7ffc0000
[  161.961243][T10118] bridge_slave_0: left promiscuous mode
[  161.972049][T10118] bridge0: port 1(bridge_slave_0) entered disabled state
[  161.975325][   T33] audit: type=1326 audit(1755977232.081:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10115 comm="syz.6.1544" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbafb8ebe9 code=0x7ffc0000
[  161.985872][T10118] bridge_slave_1: left allmulticast mode
[  161.988152][T10118] bridge_slave_1: left promiscuous mode
[  161.991543][T10118] bridge0: port 2(bridge_slave_1) entered disabled state
[  161.996763][T10118] bond0: (slave bond_slave_0): Releasing backup interface
[  162.002916][T10118] bond0: (slave bond_slave_1): Releasing backup interface
[  162.009461][T10118] team0: Port device team_slave_0 removed
[  162.016155][T10118] team0: Port device team_slave_1 removed
[  162.246332][ T5857] Bluetooth: hci0: command tx timeout
[  162.397423][T10129] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1550'.
[  162.401126][T10129] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1550'.
[  162.404788][T10129] netlink: 'syz.5.1550': attribute type 5 has an invalid length.
[  162.408312][T10129] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1550'.
[  162.532130][T10144] kernel profiling enabled (shift: 3)
[  162.681694][T10152] netlink: 'syz.3.1559': attribute type 1 has an invalid length.
[  162.844882][ T5857] Bluetooth: hci1: command tx timeout
[  162.870204][T10166] loop3: detected capacity change from 0 to 4096
[  163.008144][T10170] loop6: detected capacity change from 0 to 32768
[  163.011257][T10170] XFS: ikeep mount option is deprecated.
[  163.017003][T10170] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  163.031211][T10170] XFS (loop6): Ending clean mount
[  163.033762][T10170] XFS (loop6): Quotacheck needed: Please wait.
[  163.039197][T10170] XFS (loop6): Quotacheck: Done.
[  163.049226][T10170] XFS (loop6): syz.6.1567 should use fallocate; XFS_IOC_{ALLOC,FREE}SP ioctl unsupported
[  163.062934][ T9847] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  163.358215][ T6020] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  163.520566][ T6020] usb 7-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  163.525444][ T6020] usb 7-1: config 0 interface 0 has no altsetting 0
[  163.527981][ T6020] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00
[  163.531913][ T6020] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.535828][ T6020] usb 7-1: config 0 descriptor??
[  163.655850][T10184] loop5: detected capacity change from 0 to 4096
[  163.665424][T10185] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  163.978897][ T6020] hid-thrustmaster 0003:044F:B65D.000B: hidraw0: USB HID v1.03 Device [HID 044f:b65d] on usb-dummy_hcd.6-1/input0
[  163.983169][ T6020] hid-thrustmaster 0003:044F:B65D.000B: Wrong number of endpoints?
[  164.021860][T10196] loop3: detected capacity change from 0 to 32768
[  164.025452][T10196] btrfs: Deprecated parameter 'usebackuproot'
[  164.028024][T10196] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  164.033109][T10196] BTRFS error: unrecognized compression value n
[  164.185997][    C0] hid-thrustmaster 0003:044F:B65D.000B: Unknown packet type 0x0, unable to proceed further with wheel init
[  164.245309][ T6020] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  164.400644][   T24] usb 7-1: USB disconnect, device number 2
[  164.405587][ T6020] usb 6-1: Using ep0 maxpacket: 32
[  164.409236][ T6020] usb 6-1: config 0 has an invalid interface number: 20 but max is 0
[  164.412404][ T6020] usb 6-1: config 0 has no interface number 0
[  164.414714][ T6020] usb 6-1: config 0 interface 20 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  164.426934][    T9] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  164.435895][ T6020] usb 6-1: config 0 interface 20 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  164.440215][ T6020] usb 6-1: config 0 interface 20 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  164.445104][ T6020] usb 6-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.00
[  164.448858][ T6020] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.452110][ T6020] usb 6-1: Product: syz
[  164.453722][ T6020] usb 6-1: Manufacturer: syz
[  164.455274][ T6020] usb 6-1: SerialNumber: syz
[  164.457678][ T6020] usb 6-1: config 0 descriptor??
[  164.460586][T10201] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22
[  164.463870][ T6020] ums-sddr09 6-1:0.20: USB Mass Storage device detected
[  164.471512][ T6020] ums-sddr09 6-1:0.20: probe with driver ums-sddr09 failed with error -22
[  164.600528][    T9] usb 4-1: unable to get BOS descriptor or descriptor too short
[  164.603946][    T9] usb 4-1: not running at top speed; connect to a high speed hub
[  164.607681][    T9] usb 4-1: config 140 has an invalid interface number: 70 but max is 0
[  164.611107][    T9] usb 4-1: config 140 has an invalid descriptor of length 0, skipping remainder of the config
[  164.615096][    T9] usb 4-1: config 140 has no interface number 0
[  164.617699][    T9] usb 4-1: config 140 interface 70 altsetting 6 has an endpoint descriptor with address 0x91, changing to 0x81
[  164.623714][    T9] usb 4-1: config 140 interface 70 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  164.627943][    T9] usb 4-1: config 140 interface 70 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  164.632859][    T9] usb 4-1: config 140 interface 70 has no altsetting 0
[  164.637035][    T9] usb 4-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=19.a5
[  164.642403][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.645682][    T9] usb 4-1: Product: syz
[  164.647333][    T9] usb 4-1: Manufacturer: syz
[  164.649150][    T9] usb 4-1: SerialNumber: syz
[  164.680811][   T24] usb 6-1: USB disconnect, device number 7
[  164.873114][    T9] peak_usb 4-1:140.70 can0: unable to request usb[type=0 value=1] err=-71
[  164.876906][    T9] peak_usb 4-1:140.70: unable to read PCAN-USB Pro firmware info (err -71)
[  164.919422][    T9] peak_usb 4-1:140.70: probe with driver peak_usb failed with error -71
[  164.923338][    T9] usb 4-1: USB disconnect, device number 23
[  165.079368][ T5857] Bluetooth: hci1: command tx timeout
[  165.239423][ T6020] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  165.404126][ T6020] usb 7-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73
[  165.417148][ T6020] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.420719][ T6020] usb 7-1: Product: syz
[  165.422746][ T6020] usb 7-1: Manufacturer: syz
[  165.424695][ T6020] usb 7-1: SerialNumber: syz
[  165.428657][ T6020] usb 7-1: config 0 descriptor??
[  165.528376][    T9] usb 6-1: new full-speed USB device number 8 using dummy_hcd
[  165.691224][    T9] usb 6-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43
[  165.694997][    T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  165.701065][    T9] usb 6-1: config 0 descriptor??
[  165.712409][    T9] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state.
[  165.773687][T10242] loop3: detected capacity change from 0 to 512
[  165.788540][T10242] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  165.793957][T10242] ext4 filesystem being mounted at /503/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  165.815422][ T6228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  165.930280][    T9] gp8psk: usb in 128 operation failed.
[  166.147779][    T9] gp8psk: FW Version = 244.249.196 (0xf4f9c4)  Build 2015/223/09
[  166.396511][    T9] gp8psk: usb in 149 operation failed.
[  166.399291][    T9] gp8psk: failed to get FPGA version
[  166.413637][    T9] gp8psk: usb in 138 operation failed.
[  166.416479][    T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[  166.420133][    T9] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19)
[  166.428926][    T9] usb 6-1: USB disconnect, device number 8
[  166.735082][ T6020] asix 7-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  166.739725][ T6020] asix 7-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  166.743590][ T6020] asix 7-1:0.0: probe with driver asix failed with error -71
[  166.751903][ T6020] usb 7-1: USB disconnect, device number 3
[  167.011085][T10266] loop5: detected capacity change from 0 to 128
[  167.112335][   T33] audit: type=1326 audit(1755977236.945:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.5.1606" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840958ebe9 code=0x7ff00000
[  167.120170][   T33] audit: type=1326 audit(1755977236.945:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.5.1606" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840958ebe9 code=0x7ff00000
[  167.129623][   T33] audit: type=1326 audit(1755977236.945:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.5.1606" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840958ebe9 code=0x7ff00000
[  167.138242][   T33] audit: type=1326 audit(1755977236.945:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.5.1606" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840958ebe9 code=0x7ff00000
[  167.146127][   T33] audit: type=1326 audit(1755977236.945:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.5.1606" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840958ebe9 code=0x7ff00000
[  167.154205][   T33] audit: type=1326 audit(1755977236.945:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.5.1606" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840958ebe9 code=0x7ff00000
[  167.162829][   T33] audit: type=1326 audit(1755977236.945:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.5.1606" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840958ebe9 code=0x7ff00000
[  167.171717][   T33] audit: type=1326 audit(1755977236.945:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.5.1606" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840958ebe9 code=0x7ff00000
[  167.178857][   T33] audit: type=1326 audit(1755977236.945:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.5.1606" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840958ebe9 code=0x7ff00000
[  167.185936][   T33] audit: type=1326 audit(1755977236.945:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10267 comm="syz.5.1606" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f840958ebe9 code=0x7ff00000
[  167.295754][T10280] netlink: 'syz.3.1612': attribute type 1 has an invalid length.
[  167.318558][T10282] loop3: detected capacity change from 0 to 1024
[  167.336462][T10282] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  167.361288][ T6228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.456637][T10302] loop3: detected capacity change from 0 to 256
[  167.466766][T10302] FAT-fs (loop3): Directory bread(block 64) failed
[  167.469521][T10302] FAT-fs (loop3): Directory bread(block 65) failed
[  167.472312][T10302] FAT-fs (loop3): Directory bread(block 66) failed
[  167.475267][T10302] FAT-fs (loop3): Directory bread(block 67) failed
[  167.477995][T10302] FAT-fs (loop3): Directory bread(block 68) failed
[  167.480847][T10302] FAT-fs (loop3): Directory bread(block 69) failed
[  167.483546][T10302] FAT-fs (loop3): Directory bread(block 70) failed
[  167.486921][T10302] FAT-fs (loop3): Directory bread(block 71) failed
[  167.489924][T10302] FAT-fs (loop3): Directory bread(block 72) failed
[  167.492839][T10302] FAT-fs (loop3): Directory bread(block 73) failed
[  167.498323][   T24] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  167.762453][   T24] usb 6-1: Using ep0 maxpacket: 16
[  167.763870][T10313] netlink: 1332 bytes leftover after parsing attributes in process `syz.3.1625'.
[  167.765684][   T24] usb 6-1: config 0 has an invalid interface number: 142 but max is 0
[  167.772098][   T24] usb 6-1: config 0 has no interface number 0
[  167.777793][   T24] usb 6-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=a0.f1
[  167.781400][   T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.784354][   T24] usb 6-1: Product: syz
[  167.786091][   T24] usb 6-1: Manufacturer: syz
[  167.787954][   T24] usb 6-1: SerialNumber: syz
[  167.793513][   T24] usb 6-1: config 0 descriptor??
[  168.024911][   T24] usb 6-1: Found UVC 0.00 device syz (1bcf:0b40)
[  168.027318][   T24] usb 6-1: Forcing UVC version to 1.0a
[  168.029373][   T24] usb 6-1: No valid video chain found.
[  168.035312][   T24] usb 6-1: USB disconnect, device number 9
[  168.874768][T10330] mmap: syz.6.1632 (10330) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  168.898722][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1634'.
[  168.899150][T10334] netlink: 'syz.3.1635': attribute type 1 has an invalid length.
[  168.905555][T10334] netlink: 'syz.3.1635': attribute type 1 has an invalid length.
[  168.985622][T10344] loop3: detected capacity change from 0 to 512
[  169.048977][T10344] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.054155][T10344] ext4 filesystem being mounted at /528/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  170.087718][T10356] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  170.797266][T10359] loop6: detected capacity change from 0 to 8192
[  170.835266][ T6228] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  170.869451][T10361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1643'.
[  170.872856][T10361] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1643'.
[  171.294944][T10370] netlink: 129704 bytes leftover after parsing attributes in process `syz.6.1647'.
[  171.354458][  T794] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  171.539505][  T794] usb 4-1: New USB device found, idVendor=1397, idProduct=00bd, bcdDevice=c5.66
[  171.543490][  T794] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.550437][  T794] usb 4-1: config 0 descriptor??
[  171.556680][  T794] usb 4-1: invalid MIDI EP
[  171.565000][  T794] usb 4-1: snd-bcd2000: error during probing
[  171.567744][  T794] snd-bcd2000 4-1:0.0: probe with driver snd-bcd2000 failed with error -22
[  171.709398][T10376] netlink: 196 bytes leftover after parsing attributes in process `syz.5.1650'.
[  171.776305][  T794] usb 4-1: USB disconnect, device number 24
[  172.163483][T10388] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  172.185447][T10390] block device autoloading is deprecated and will be removed.
[  172.187988][T10390] syz.6.1656: attempt to access beyond end of device
[  172.187988][T10390] md0: rw=2048, sector=0, nr_sectors = 8 limit=0
[  172.252581][  T794] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  172.390573][T10395] loop3: detected capacity change from 0 to 8
[  172.435818][  T794] usb 6-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c
[  172.439817][  T794] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.444666][  T794] usb 6-1: config 0 descriptor??
[  172.587279][   T33] kauditd_printk_skb: 293 callbacks suppressed
[  172.587363][   T33] audit: type=1800 audit(1755977242.052:341): pid=10401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1661" name="/" dev="9p" ino=2 res=0 errno=0
[  173.258387][T10420] loop3: detected capacity change from 0 to 16
[  173.263378][T10420] erofs (device loop3): mounted with root inode @ nid 36.
[  173.272663][T10420] erofs (device loop3): inconsistent algorithmtype 0 for nid 36
[  173.275193][T10420] erofs (device loop3): inconsistent algorithmtype 0 for nid 36
[  173.277990][T10420] erofs (device loop3): read error -117 @ 72 of nid 36
[  173.362514][T10422] Bluetooth: MGMT ver 1.23
[  173.367297][T10422] Bluetooth: hci0: invalid length 0, exp 2 for type 2
[  173.505485][T10428] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1674'.
[  173.532934][T10428] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1674'.
[  174.080518][ T3144] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  174.242754][ T3144] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  174.246128][ T3144] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  174.249112][ T3144] usb 7-1: New USB device found, idVendor=0471, idProduct=030c, bcdDevice=e4.df
[  174.253835][ T3144] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  174.270049][ T3144] usb 7-1: config 0 descriptor??
[  174.278974][ T3144] pwc: Philips PCVC690K (Vesta Pro Scan) USB webcam detected.
[  174.407418][  T794] pegasus 6-1:0.0: setup Pegasus II specific registers
[  174.494733][ T3144] pwc: send_video_command error -71
[  174.497250][ T3144] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  174.500533][ T3144] Philips webcam 7-1:0.0: probe with driver Philips webcam failed with error -71
[  174.504082][ T3144] usb 7-1: USB disconnect, device number 4
[  174.521892][  T794] pegasus 6-1:0.0: can't locate MII phy, using default
[  174.529009][  T794] pegasus 6-1:0.0: eth9, ELECOM USB Ethernet LD-USB20, 66:fd:a8:04:8c:6d
[  174.532666][  T794] usb 6-1: USB disconnect, device number 10
[  174.620148][T10458] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1688'.
[  174.625938][T10458] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1688'.
[  174.634550][T10458] geneve2: entered promiscuous mode
[  174.637983][T10458] geneve2: entered allmulticast mode
[  174.820735][T10472] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1694'.
[  174.825804][T10472] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1694'.
[  174.829594][T10472] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1694'.
[  174.869641][T10472] loop3: detected capacity change from 0 to 2048
[  174.882075][T10472] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  175.019372][T10474] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1695'.
[  175.117818][T10476] loop5: detected capacity change from 0 to 2048
[  175.119056][T10478] loop6: detected capacity change from 0 to 128
[  175.122384][T10476] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  175.339267][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1700'.
[  175.679488][T10489] loop5: detected capacity change from 0 to 32768
[  175.690392][T10489] ocfs2: Slot 0 on device (7,5) was already allocated to this node!
[  175.700507][T10489] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  175.767717][ T5881] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  175.810020][ T5881] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  175.830781][ T9028] ocfs2: Unmounting device (7,5) on (node local)
[  175.866836][ T5881] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  175.943065][ T5881] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  176.035345][T10506] loop5: detected capacity change from 0 to 512
[  176.042242][T10506] EXT4-fs: Ignoring removed mblk_io_submit option
[  176.058315][T10506] EXT4-fs (loop5): Test dummy encryption mode enabled
[  176.058489][ T5881] bridge_slave_1: left allmulticast mode
[  176.063533][ T5881] bridge_slave_1: left promiscuous mode
[  176.065876][ T5881] bridge0: port 2(bridge_slave_1) entered disabled state
[  176.074308][T10506] EXT4-fs (loop5): orphan cleanup on readonly fs
[  176.076476][T10506] EXT4-fs error (device loop5): ext4_orphan_get:1392: comm syz.5.1704: inode #13: comm syz.5.1704: iget: illegal inode #
[  176.081600][ T5881] bridge_slave_0: left allmulticast mode
[  176.083716][T10506] EXT4-fs error (device loop5): ext4_orphan_get:1397: comm syz.5.1704: couldn't read orphan inode 13 (err -117)
[  176.084017][ T5881] bridge_slave_0: left promiscuous mode
[  176.089068][T10506] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  176.105845][T10506] EXT4-fs: Ignoring removed mblk_io_submit option
[  176.108722][ T5881] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.113741][T10506] EXT4-fs (loop5): warning: mounting fs with errors, running e2fsck is recommended
[  176.122485][T10506] EXT4-fs error (device loop5): __ext4_remount:6740: comm syz.5.1704: Abort forced by user
[  176.131355][T10506] EXT4-fs (loop5): Remounting filesystem read-only
[  176.139022][T10506] EXT4-fs (loop5): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  176.160002][ T9028] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.189789][T10502] loop6: detected capacity change from 0 to 32768
[  176.300140][ T5881] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  176.312661][ T5881] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  176.318225][ T5881] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  176.327325][ T5881] bond0 (unregistering): Released all slaves
[  176.627045][T10552] syzkaller1: entered promiscuous mode
[  176.630254][T10539] loop5: detected capacity change from 0 to 32768
[  176.633534][T10552] syzkaller1: entered allmulticast mode
[  176.637857][T10552] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 324
[  176.656077][ T5881] hsr_slave_0: left promiscuous mode
[  176.658865][T10539] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  176.662760][ T5881] hsr_slave_1: left promiscuous mode
[  176.665056][T10539] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  176.669334][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.673195][ T5881] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.688347][T10539] XFS (loop5): Ending clean mount
[  176.691712][T10539] XFS (loop5): Quotacheck needed: Please wait.
[  176.697419][T10539] XFS (loop5): Quotacheck: Done.
[  176.703638][   T33] audit: type=1804 audit(1755977245.915:342): pid=10539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.1719" name="/newroot/185/file0/file1" dev="loop5" ino=6150 res=1 errno=0
[  176.743612][ T9028] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  176.801563][ T5881] team0 (unregistering): Port device team_slave_1 removed
[  176.810777][ T5881] team0 (unregistering): Port device team_slave_0 removed
[  177.295282][T10588] loop6: detected capacity change from 0 to 40427
[  177.298688][T10588] F2FS-fs (loop6): build fault injection rate: 16
[  177.301086][T10588] F2FS-fs (loop6): build fault injection type: 0x3bfe8e
[  177.304517][T10588] F2FS-fs (loop6): invalid crc value
[  177.306990][    C1] F2FS-fs (loop6): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  177.310749][T10588] F2FS-fs (loop6): Failed to initialize F2FS segment manager (-5)
[  177.494823][T10604] loop6: detected capacity change from 0 to 2048
[  177.515034][T10604] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: writeback.
[  177.536410][ T9847] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  177.573300][    C0] IPv4: Oversized IP packet from 172.20.20.24
[  177.690125][T10621] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1750'.
[  177.837850][T10625] loop6: detected capacity change from 0 to 32768
[  177.852813][T10625] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  177.860457][T10625] XFS (loop6): Ending clean mount
[  177.862777][T10625] XFS (loop6): Quotacheck needed: Please wait.
[  177.870390][T10625] XFS (loop6): Quotacheck: Done.
[  177.874944][T10625] XFS (loop6): User initiated shutdown received.
[  177.877829][T10646] loop5: detected capacity change from 0 to 128
[  177.877940][T10625] XFS (loop6): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  177.884815][T10625] XFS (loop6): Please unmount the filesystem and rectify the problem(s)
[  177.894027][ T9847] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  178.086459][T10656] loop6: detected capacity change from 0 to 40427
[  178.091265][T10656] F2FS-fs (loop6): invalid crc value
[  178.105327][T10656] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  178.108686][T10656] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  178.122190][ T9847] syz-executor: attempt to access beyond end of device
[  178.122190][ T9847] loop6: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  178.127848][ T9847] CPU: 0 UID: 0 PID: 9847 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  178.127865][ T9847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.127872][ T9847] Call Trace:
[  178.127876][ T9847]  <TASK>
[  178.127882][ T9847]  dump_stack_lvl+0x189/0x250
[  178.127901][ T9847]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.127940][ T9847]  ? __pfx_queue_work_on+0x10/0x10
[  178.127951][ T9847]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  178.127965][ T9847]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  178.127978][ T9847]  ? _printk+0xcf/0x120
[  178.127992][ T9847]  ? f2fs_hw_is_readonly+0x39b/0x470
[  178.128009][ T9847]  f2fs_handle_critical_error+0x37c/0x540
[  178.128025][ T9847]  f2fs_write_end_io+0x886/0xb60
[  178.128041][ T9847]  __submit_merged_bio+0x27a/0x6a0
[  178.128057][ T9847]  f2fs_submit_page_write+0xe16/0x21b0
[  178.128078][ T9847]  ? __f2fs_is_valid_blkaddr+0xd2a/0x14f0
[  178.128098][ T9847]  do_write_page+0x6a6/0x940
[  178.128112][ T9847]  f2fs_do_write_node_page+0x3b/0x60
[  178.128124][ T9847]  __write_node_folio+0x8c1/0x1550
[  178.128139][ T9847]  ? lock_release+0x4b/0x3e0
[  178.128156][ T9847]  ? __pfx___write_node_folio+0x10/0x10
[  178.128168][ T9847]  ? folio_clear_dirty_for_io+0x6b5/0x8c0
[  178.128188][ T9847]  ? f2fs_folio_wait_writeback+0xa9/0x240
[  178.128198][ T9847]  f2fs_sync_node_pages+0xe6e/0x15e0
[  178.128215][ T9847]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  178.128240][ T9847]  ? up_write+0x1c4/0x420
[  178.128251][ T9847]  ? do_raw_spin_unlock+0x4d/0x240
[  178.128265][ T9847]  f2fs_write_checkpoint+0xe6f/0x1df0
[  178.128283][ T9847]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  178.128298][ T9847]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  178.128309][ T9847]  ? kfree+0x18e/0x440
[  178.128323][ T9847]  ? kill_f2fs_super+0x298/0x6c0
[  178.128335][ T9847]  kill_f2fs_super+0x2c3/0x6c0
[  178.128347][ T9847]  ? __pfx_kill_f2fs_super+0x10/0x10
[  178.128356][ T9847]  ? radix_tree_delete_item+0x2b6/0x400
[  178.128372][ T9847]  ? shrinker_free+0x2ce/0x3e0
[  178.128384][ T9847]  deactivate_locked_super+0xbc/0x130
[  178.128394][ T9847]  cleanup_mnt+0x425/0x4c0
[  178.128406][ T9847]  task_work_run+0x1d4/0x260
[  178.128421][ T9847]  ? __pfx_task_work_run+0x10/0x10
[  178.128434][ T9847]  ? __x64_sys_umount+0x122/0x160
[  178.128448][ T9847]  ? __pfx___x64_sys_umount+0x10/0x10
[  178.128463][ T9847]  ? rcu_is_watching+0x15/0xb0
[  178.128475][ T9847]  exit_to_user_mode_loop+0xec/0x110
[  178.128490][ T9847]  do_syscall_64+0x2bd/0x3b0
[  178.128501][ T9847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.128512][ T9847]  ? exc_page_fault+0x9f/0xf0
[  178.128526][ T9847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.128536][ T9847] RIP: 0033:0x7ffbafb8ff17
[  178.128547][ T9847] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  178.128557][ T9847] RSP: 002b:00007ffca9605d58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  178.128570][ T9847] RAX: 0000000000000000 RBX: 00007ffbafc11c05 RCX: 00007ffbafb8ff17
[  178.128578][ T9847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca9605e10
[  178.128585][ T9847] RBP: 00007ffca9605e10 R08: 0000000000000000 R09: 0000000000000000
[  178.128592][ T9847] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffca9606ea0
[  178.128597][ T9847] R13: 00007ffbafc11c05 R14: 000000000002ae63 R15: 00007ffca9606ee0
[  178.128607][ T9847]  </TASK>
[  178.128612][ T9847] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  178.165382][T10661] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[  178.167032][ T3144] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  178.168638][T10661] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  178.172361][ T9847] syz-executor: attempt to access beyond end of device
[  178.172361][ T9847] loop6: rw=2049, sector=40984, nr_sectors = 8 limit=40427
[  178.173580][T10661] vhci_hcd vhci_hcd.0: Device attached
[  178.175605][ T9847] CPU: 0 UID: 0 PID: 9847 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  178.175620][ T9847] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.175626][ T9847] Call Trace:
[  178.175630][ T9847]  <TASK>
[  178.175634][ T9847]  dump_stack_lvl+0x189/0x250
[  178.175653][ T9847]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.175665][ T9847]  ? __pfx_queue_work_on+0x10/0x10
[  178.175680][ T9847]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  178.175696][ T9847]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  178.175713][ T9847]  f2fs_handle_critical_error+0x37c/0x540
[  178.175732][ T9847]  f2fs_write_end_io+0x886/0xb60
[  178.175747][ T9847]  __submit_merged_bio+0x27a/0x6a0
[  178.175761][ T9847]  ? up_write+0x1c4/0x420
[  178.175774][ T9847]  __submit_merged_write_cond+0x44c/0x530
[  178.175792][ T9847]  __write_node_folio+0x10d2/0x1550
[  178.175808][ T9847]  ? lock_release+0x4b/0x3e0
[  178.175825][ T9847]  ? __pfx___write_node_folio+0x10/0x10
[  178.175837][ T9847]  ? folio_clear_dirty_for_io+0x6b5/0x8c0
[  178.175857][ T9847]  ? f2fs_folio_wait_writeback+0xa9/0x240
[  178.175867][ T9847]  f2fs_sync_node_pages+0xe6e/0x15e0
[  178.175879][ T9847]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  178.175893][ T9847]  ? up_write+0x1c4/0x420
[  178.175900][ T9847]  ? do_raw_spin_unlock+0x4d/0x240
[  178.175933][ T9847]  f2fs_write_checkpoint+0xe6f/0x1df0
[  178.175946][ T9847]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  178.175959][ T9847]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  178.175966][ T9847]  ? kfree+0x18e/0x440
[  178.175974][ T9847]  ? kill_f2fs_super+0x298/0x6c0
[  178.175982][ T9847]  kill_f2fs_super+0x2c3/0x6c0
[  178.175990][ T9847]  ? __pfx_kill_f2fs_super+0x10/0x10
[  178.175996][ T9847]  ? radix_tree_delete_item+0x2b6/0x400
[  178.176006][ T9847]  ? shrinker_free+0x2ce/0x3e0
[  178.176014][ T9847]  deactivate_locked_super+0xbc/0x130
[  178.176023][ T9847]  cleanup_mnt+0x425/0x4c0
[  178.176031][ T9847]  task_work_run+0x1d4/0x260
[  178.176041][ T9847]  ? __pfx_task_work_run+0x10/0x10
[  178.176050][ T9847]  ? __x64_sys_umount+0x122/0x160
[  178.176058][ T9847]  ? __pfx___x64_sys_umount+0x10/0x10
[  178.176068][ T9847]  ? rcu_is_watching+0x15/0xb0
[  178.176076][ T9847]  exit_to_user_mode_loop+0xec/0x110
[  178.176091][ T9847]  do_syscall_64+0x2bd/0x3b0
[  178.176101][ T9847]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.176108][ T9847]  ? exc_page_fault+0x9f/0xf0
[  178.176117][ T9847]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  178.176124][ T9847] RIP: 0033:0x7ffbafb8ff17
[  178.176131][ T9847] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  178.176138][ T9847] RSP: 002b:00007ffca9605d58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  178.176146][ T9847] RAX: 0000000000000000 RBX: 00007ffbafc11c05 RCX: 00007ffbafb8ff17
[  178.176151][ T9847] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffca9605e10
[  178.176156][ T9847] RBP: 00007ffca9605e10 R08: 0000000000000000 R09: 0000000000000000
[  178.176160][ T9847] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffca9606ea0
[  178.176165][ T9847] R13: 00007ffbafc11c05 R14: 000000000002ae63 R15: 00007ffca9606ee0
[  178.176173][ T9847]  </TASK>
[  178.176176][ T9847] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  178.179493][T10662] vhci_hcd: connection closed
[  178.326413][ T3144] usb 6-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  178.335560][   T12] vhci_hcd: stop threads
[  178.337680][ T3144] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.339181][   T12] vhci_hcd: release socket
[  178.341456][ T3144] usb 6-1: config 0 descriptor??
[  178.343283][   T12] vhci_hcd: disconnect device
[  178.359244][ T3144] gspca_main: cpia1-2.14.0 probing 0813:0001
[  178.410270][ T5916] vhci_hcd: vhci_device speed not set
[  178.651716][T10678] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  178.697303][T10682] gretap0: entered promiscuous mode
[  178.700608][T10682] gretap0: left promiscuous mode
[  178.759072][T10684] loop6: detected capacity change from 0 to 128
[  178.762633][T10684] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  178.773565][T10684] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  178.780277][T10684] UDF-fs: error (device loop6): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  178.797805][ T3144] cpia1 6-1:0.0: unexpected state after lo power cmd: 00
[  178.813843][T10686] syz.6.1775 (10686): attempted to duplicate a private mapping with mremap.  This is not supported.
[  178.843100][T10690] loop6: detected capacity change from 0 to 256
[  178.853763][T10690] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  178.950865][    T9] IPVS: starting estimator thread 0...
[  179.012012][ T3144] gspca_cpia1: usb_control_msg 01, error -32
[  179.014456][ T3144] gspca_cpia1: usb_control_msg 01, error -71
[  179.016682][ T3144] cpia1 6-1:0.0: only firmware version 1 is supported (got: 0)
[  179.021547][ T3144] usb 6-1: USB disconnect, device number 11
[  179.052143][T10702] IPVS: using max 144 ests per chain, 345600 per kthread
[  179.276253][    T9] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  179.447230][    T9] usb 7-1: Using ep0 maxpacket: 16
[  179.451004][    T9] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 8
[  179.455814][    T9] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[  179.458936][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.461569][    T9] usb 7-1: Product: syz
[  179.463176][    T9] usb 7-1: Manufacturer: syz
[  179.464973][    T9] usb 7-1: SerialNumber: syz
[  179.467536][    T9] usb 7-1: config 0 descriptor??
[  179.470721][    T9] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected
[  179.473450][    T9] usb 7-1: Detected FT232R
[  179.715397][T10722] svc: failed to register nfsdv3 RPC service (errno 111).
[  179.719262][T10722] svc: failed to register nfsaclv3 RPC service (errno 111).
[  179.756187][T10726] IPv6: addrconf: prefix option has invalid lifetime
[  179.760616][T10726] IPv6: addrconf: prefix option has invalid lifetime
[  179.788418][T10730] loop3: detected capacity change from 0 to 256
[  179.790952][T10730] vfat: Deprecated parameter 'posix'
[  179.792797][T10730] FAT-fs: "posix" option is obsolete, not supported now
[  179.876114][    T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  179.882779][    T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  179.885267][    T9] ftdi_sio 7-1:0.0: GPIO initialisation failed: -71
[  179.888915][    T9] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  179.892457][    T9] usb 7-1: USB disconnect, device number 5
[  179.895170][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  179.898473][    T9] ftdi_sio 7-1:0.0: device disconnected
[  180.153048][T10738] loop5: detected capacity change from 0 to 32768
[  180.156430][T10738] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1796 (10738)
[  180.162767][T10738] BTRFS info (device loop5): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  180.166834][T10738] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm
[  180.179542][T10738] BTRFS info (device loop5): enabling ssd optimizations
[  180.182492][T10738] BTRFS info (device loop5): enabling free space tree
[  180.189030][   T33] audit: type=1800 audit(1755977249.170:343): pid=10738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1796" name="file1" dev="loop5" ino=260 res=0 errno=0
[  180.415184][T10767] loop6: detected capacity change from 0 to 1024
[  180.427316][ T1091] hfsplus: b-tree write err: -5, ino 4
[  180.443009][T10769] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  180.514967][   T33] audit: type=1326 audit(1755977249.470:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.6.1806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbafb8ebe9 code=0x7ffc0000
[  180.529268][   T33] audit: type=1326 audit(1755977249.470:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.6.1806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbafb8ebe9 code=0x7ffc0000
[  180.538560][   T33] audit: type=1326 audit(1755977249.479:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.6.1806" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7ffbafb8ebe9 code=0x7ffc0000
[  180.547283][   T33] audit: type=1326 audit(1755977249.479:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.6.1806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbafb8ebe9 code=0x7ffc0000
[  180.556294][   T33] audit: type=1326 audit(1755977249.479:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.6.1806" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7ffbafb8ebe9 code=0x7ffc0000
[  180.565172][   T33] audit: type=1326 audit(1755977249.479:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.6.1806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbafb8ebe9 code=0x7ffc0000
[  180.574914][   T33] audit: type=1326 audit(1755977249.479:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.6.1806" exe="/syz-executor" sig=0 arch=c000003e syscall=128 compat=0 ip=0x7ffbafb8ebe9 code=0x7ffc0000
[  180.584348][   T33] audit: type=1326 audit(1755977249.535:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.6.1806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbafb8ebe9 code=0x7ffc0000
[  180.601875][   T33] audit: type=1326 audit(1755977249.535:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10774 comm="syz.6.1806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffbafb8ebe9 code=0x7ffc0000
[  180.671053][T10782] loop6: detected capacity change from 0 to 8
[  180.682012][T10782] unable to read fragment index table
[  180.739733][T10786] loop6: detected capacity change from 0 to 512
[  180.744917][T10786] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  180.756549][T10786] UDF-fs: error (device loop6): udf_read_inode: (ino 19) failed ident=264
[  180.760299][T10786] binfmt_misc: register: failed to install interpreter file ./file0
[  180.944952][T10799] loop6: detected capacity change from 0 to 4096
[  180.980040][ T9028] BTRFS info (device loop5): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  181.030194][T10802] __nla_validate_parse: 2 callbacks suppressed
[  181.030204][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1817'.
[  181.347088][T10815] loop5: detected capacity change from 0 to 32768
[  181.362504][T10815] XFS (loop5): DAX unsupported by block device. Turning off DAX.
[  181.365516][T10815] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  181.373386][T10815] XFS (loop5): Ending clean mount
[  181.375987][T10815] XFS (loop5): Quotacheck needed: Please wait.
[  181.380444][T10815] XFS (loop5): Quotacheck: Done.
[  181.395558][ T9028] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  181.446511][    T9] usb 7-1: new full-speed USB device number 6 using dummy_hcd
[  181.469941][T10829] loop5: detected capacity change from 0 to 512
[  181.473634][T10829] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  181.480434][T10829] EXT4-fs warning (device loop5): dx_probe:837: inode #2: comm syz.5.1827: Unimplemented hash flags: 0x0001
[  181.484973][T10829] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1827: Corrupt directory, running e2fsck is recommended
[  181.497754][ T9028] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.608484][    T9] usb 7-1: config 8 has an invalid interface number: 223 but max is 0
[  181.612343][    T9] usb 7-1: config 8 has no interface number 0
[  181.614566][    T9] usb 7-1: config 8 interface 223 altsetting 0 endpoint 0x7 has invalid maxpacket 512, setting to 64
[  181.619237][    T9] usb 7-1: config 8 interface 223 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  181.624435][    T9] usb 7-1: New USB device found, idVendor=a6da, idProduct=7458, bcdDevice=2d.4d
[  181.627383][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.630595][    T9] usb 7-1: Product: syz
[  181.632230][    T9] usb 7-1: Manufacturer: syz
[  181.634226][    T9] usb 7-1: SerialNumber: syz
[  181.763449][T10838] loop5: detected capacity change from 0 to 32768
[  181.766183][T10838] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.1830 (10838)
[  181.771046][T10838] BTRFS info (device loop5): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  181.774793][T10838] BTRFS info (device loop5): using crc32c (crc32c-lib) checksum algorithm
[  181.778278][T10838] BTRFS error (device loop5): nologreplay must be used with ro mount option
[  181.782168][T10838] BTRFS error (device loop5): open_ctree failed: -22
[  181.863447][    T9] usb 7-1: USB disconnect, device number 6
[  181.958118][T10849] loop3: detected capacity change from 0 to 1024
[  181.964045][T10849] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  182.128586][T10851] loop3: detected capacity change from 0 to 32768
[  182.134819][T10851] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  182.145501][T10851] XFS (loop3): Ending clean mount
[  182.162902][ T5916] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  182.181308][ T6228] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  182.333686][ T5916] usb 6-1: Using ep0 maxpacket: 8
[  182.337589][ T5916] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  182.343934][ T5916] usb 6-1: New USB device found, idVendor=0421, idProduct=798f, bcdDevice=86.54
[  182.348220][ T5916] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.350911][ T5916] usb 6-1: Product: syz
[  182.352228][ T5916] usb 6-1: Manufacturer: syz
[  182.353680][ T5916] usb 6-1: SerialNumber: syz
[  182.355888][ T5916] usb 6-1: config 0 descriptor??
[  182.358587][ T5916] cdc_phonet 6-1:0.0: probe with driver cdc_phonet failed with error -22
[  182.578163][    T9] usb 6-1: USB disconnect, device number 12
[  182.729289][ T5916] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  182.890301][ T5916] usb 7-1: too many configurations: 9, using maximum allowed: 8
[  182.894544][ T5916] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  182.898385][ T5916] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  182.903058][ T5916] usb 7-1: config 0 interface 0 has no altsetting 0
[  182.906727][ T5916] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  182.910546][ T5916] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  182.915207][ T5916] usb 7-1: config 0 interface 0 has no altsetting 0
[  182.919079][ T5916] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  182.922856][ T5916] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  182.927398][ T5916] usb 7-1: config 0 interface 0 has no altsetting 0
[  182.931171][ T5916] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  182.935116][ T5916] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  182.939783][ T5916] usb 7-1: config 0 interface 0 has no altsetting 0
[  182.944947][ T5916] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  182.949185][ T5916] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  182.953966][ T5916] usb 7-1: config 0 interface 0 has no altsetting 0
[  182.958346][ T5916] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  182.962038][ T5916] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  182.966632][ T5916] usb 7-1: config 0 interface 0 has no altsetting 0
[  182.970297][ T5916] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  182.974067][ T5916] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  182.978808][ T5916] usb 7-1: config 0 interface 0 has no altsetting 0
[  182.982486][ T5916] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 9
[  182.986563][ T5916] usb 7-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[  182.991141][ T5916] usb 7-1: config 0 interface 0 has no altsetting 0
[  182.995752][ T5916] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[  182.999568][ T5916] usb 7-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[  183.002897][ T5916] usb 7-1: Product: syz
[  183.004670][ T5916] usb 7-1: Manufacturer: syz
[  183.006714][ T5916] usb 7-1: SerialNumber: syz
[  183.009745][ T5916] usb 7-1: config 0 descriptor??
[  183.014293][ T5916] yurex 7-1:0.0: USB YUREX device now attached to Yurex #0
[  183.240355][    T9] usb 7-1: USB disconnect, device number 7
[  183.247700][    T9] yurex 7-1:0.0: USB YUREX #0 now disconnected
[  183.487478][T10901] loop3: detected capacity change from 0 to 40427
[  183.491040][T10901] F2FS-fs (loop3): invalid crc value
[  183.507043][T10901] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  183.579439][T10901] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  183.689218][T10901] syz.3.1855: attempt to access beyond end of device
[  183.689218][T10901] loop3: rw=34817, sector=77824, nr_sectors = 8 limit=40427
[  183.775223][ T6228] syz-executor: attempt to access beyond end of device
[  183.775223][ T6228] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  183.781530][ T6228] CPU: 1 UID: 0 PID: 6228 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  183.781548][ T6228] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  183.781555][ T6228] Call Trace:
[  183.781561][ T6228]  <TASK>
[  183.781567][ T6228]  dump_stack_lvl+0x189/0x250
[  183.781586][ T6228]  ? __pfx_dump_stack_lvl+0x10/0x10
[  183.781601][ T6228]  ? __pfx_queue_work_on+0x10/0x10
[  183.781612][ T6228]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  183.781628][ T6228]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  183.781646][ T6228]  f2fs_handle_critical_error+0x37c/0x540
[  183.781666][ T6228]  f2fs_write_end_io+0x886/0xb60
[  183.781683][ T6228]  __submit_merged_bio+0x27a/0x6a0
[  183.781701][ T6228]  __submit_merged_write_cond+0x255/0x530
[  183.781719][ T6228]  f2fs_write_data_pages+0x261d/0x3000
[  183.781736][ T6228]  ? __pfx___switch_to+0x10/0x10
[  183.781761][ T6228]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  183.781798][ T6228]  ? kernel_text_address+0xa5/0xe0
[  183.781814][ T6228]  ? __kernel_text_address+0xd/0x40
[  183.781830][ T6228]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  183.781873][ T6228]  ? stack_trace_save+0x9c/0xe0
[  183.781890][ T6228]  ? stack_depot_save_flags+0x40/0x860
[  183.781906][ T6228]  ? do_raw_spin_lock+0x121/0x290
[  183.781924][ T6228]  ? do_raw_spin_unlock+0x4d/0x240
[  183.781938][ T6228]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  183.781956][ T6228]  do_writepages+0x32e/0x550
[  183.781973][ T6228]  ? rcu_is_watching+0x15/0xb0
[  183.781986][ T6228]  ? do_raw_spin_unlock+0x4d/0x240
[  183.782002][ T6228]  filemap_fdatawrite+0x199/0x240
[  183.782017][ T6228]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  183.782044][ T6228]  ? rcu_is_watching+0x15/0xb0
[  183.782056][ T6228]  ? do_raw_spin_unlock+0x4d/0x240
[  183.782091][ T6228]  f2fs_sync_dirty_inodes+0x31f/0x830
[  183.782108][ T6228]  f2fs_write_checkpoint+0x95a/0x1df0
[  183.782128][ T6228]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  183.782154][ T6228]  ? kill_f2fs_super+0x298/0x6c0
[  183.782168][ T6228]  kill_f2fs_super+0x2c3/0x6c0
[  183.782181][ T6228]  ? __pfx_kill_f2fs_super+0x10/0x10
[  183.782192][ T6228]  ? radix_tree_delete_item+0x2b6/0x400
[  183.782210][ T6228]  ? shrinker_free+0x2ce/0x3e0
[  183.782224][ T6228]  deactivate_locked_super+0xbc/0x130
[  183.782239][ T6228]  cleanup_mnt+0x425/0x4c0
[  183.782254][ T6228]  task_work_run+0x1d4/0x260
[  183.782269][ T6228]  ? __pfx_task_work_run+0x10/0x10
[  183.782284][ T6228]  ? __x64_sys_umount+0x122/0x160
[  183.782300][ T6228]  ? __pfx___x64_sys_umount+0x10/0x10
[  183.782316][ T6228]  ? rcu_is_watching+0x15/0xb0
[  183.782327][ T6228]  exit_to_user_mode_loop+0xec/0x110
[  183.782346][ T6228]  do_syscall_64+0x2bd/0x3b0
[  183.782363][ T6228]  ? rcu_is_watching+0x15/0xb0
[  183.782374][ T6228]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.782387][ T6228]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  183.782398][ T6228] RIP: 0033:0x7f68e018ff17
[  183.782409][ T6228] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  183.782419][ T6228] RSP: 002b:00007ffc5e933d58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  183.782434][ T6228] RAX: 0000000000000000 RBX: 00007f68e0211c05 RCX: 00007f68e018ff17
[  183.782443][ T6228] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc5e933e10
[  183.782450][ T6228] RBP: 00007ffc5e933e10 R08: 0000000000000000 R09: 0000000000000000
[  183.782458][ T6228] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc5e934ea0
[  183.782466][ T6228] R13: 00007f68e0211c05 R14: 000000000002c2d1 R15: 00007ffc5e934ee0
[  183.782480][ T6228]  </TASK>
[  183.783091][ T6228] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  184.147073][T10917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1860'.
[  184.150723][T10917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1860'.
[  184.178633][T10919] loop3: detected capacity change from 0 to 8
[  184.206894][T10921] loop3: detected capacity change from 0 to 256
[  184.209943][T10921] exfat: Deprecated parameter 'utf8'
[  184.216692][T10921] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011ded, chksum : 0x9858084d, utbl_chksum : 0xe619d30d)
[  184.311521][    T9] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  184.389410][T10935] io-wq is not configured for unbound workers
[  184.444776][T10941] IPv6: NLM_F_CREATE should be specified when creating new route
[  184.472320][    T9] usb 7-1: Using ep0 maxpacket: 8
[  184.477443][T10945] loop3: detected capacity change from 0 to 16
[  184.479525][    T9] usb 7-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52
[  184.485140][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.488554][    T9] usb 7-1: Product: syz
[  184.490521][    T9] usb 7-1: Manufacturer: syz
[  184.492706][    T9] usb 7-1: SerialNumber: syz
[  184.498048][    T9] usb 7-1: config 0 descriptor??
[  184.545158][T10951] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0
[  184.591322][T10956] loop3: detected capacity change from 0 to 256
[  184.615117][T10956] FAT-fs (loop3): Directory bread(block 64) failed
[  184.618581][T10956] FAT-fs (loop3): Directory bread(block 65) failed
[  184.622077][T10956] FAT-fs (loop3): Directory bread(block 66) failed
[  184.624764][T10956] FAT-fs (loop3): Directory bread(block 67) failed
[  184.627351][T10956] FAT-fs (loop3): Directory bread(block 68) failed
[  184.630281][T10956] FAT-fs (loop3): Directory bread(block 69) failed
[  184.633603][T10956] FAT-fs (loop3): Directory bread(block 70) failed
[  184.636221][T10956] FAT-fs (loop3): Directory bread(block 71) failed
[  184.638969][T10956] FAT-fs (loop3): Directory bread(block 72) failed
[  184.641739][T10956] FAT-fs (loop3): Directory bread(block 73) failed
[  184.648963][T10958] loop5: detected capacity change from 0 to 4096
[  184.653336][T10958] ntfs3(loop5): Primary boot: invalid sectors per cluster 75.
[  184.660055][T10958] ntfs3(loop5): try to read out of volume at offset 0x1ffe00
[  184.721832][ T6020] usb 7-1: USB disconnect, device number 8
[  184.803594][T10970] loop5: detected capacity change from 0 to 512
[  184.808796][T10970] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  184.813731][T10970] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  184.819791][T10970] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1884: Corrupt directory, running e2fsck is recommended
[  184.825440][T10970] EXT4-fs (loop5): Cannot turn on journaled quota: type 1: error -117
[  184.828911][T10970] EXT4-fs error (device loop5): ext4_iget_extra_inode:5104: inode #15: comm syz.5.1884: corrupted in-inode xattr: invalid ea_ino
[  184.834457][T10970] EXT4-fs (loop5): Remounting filesystem read-only
[  184.840674][T10970] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.849547][T10970] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  184.854311][T10970] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  184.858870][T10970] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1884: Corrupt directory, running e2fsck is recommended
[  184.864875][T10970] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  184.870227][T10970] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  184.874458][T10970] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1884: Corrupt directory, running e2fsck is recommended
[  184.880483][T10970] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  184.885314][T10970] EXT4-fs warning (device loop5): dx_probe:849: Enable large directory feature to access it
[  184.890513][T10970] EXT4-fs warning (device loop5): dx_probe:934: inode #2: comm syz.5.1884: Corrupt directory, running e2fsck is recommended
[  184.896836][T10970] EXT4-fs warning (device loop5): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  184.921517][ T9028] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.963589][    T9] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  185.101643][T10976] loop5: detected capacity change from 0 to 32768
[  185.108583][T10976] (syz.5.1886,10976,1):ocfs2_journal_addressable:1935 ERROR: The journal cannot address the entire volume. Enable the 'block64' journal option with tunefs.ocfs2
[  185.108606][T10976] (syz.5.1886,10976,1):ocfs2_check_volume:2432 ERROR: status = -27
[  185.118571][T10976] (syz.5.1886,10976,1):ocfs2_mount_volume:1764 ERROR: status = -27
[  185.122552][T10976] (syz.5.1886,10976,1):ocfs2_fill_super:1177 ERROR: status = -27
[  185.134680][    T9] usb 4-1: Using ep0 maxpacket: 16
[  185.138945][    T9] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  185.142384][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  185.146790][    T9] usb 4-1: config 0 has no interface number 0
[  185.151173][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  185.154989][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.159183][    T9] usb 4-1: Product: syz
[  185.160987][    T9] usb 4-1: Manufacturer: syz
[  185.162955][    T9] usb 4-1: SerialNumber: syz
[  185.165809][    T9] usb 4-1: config 0 descriptor??
[  185.169942][    T9] usb 4-1: Found UVC 0.00 device syz (046d:08f3)
[  185.177405][    T9] usb 4-1: No valid video chain found.
[  185.267574][T10983] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1889'.
[  185.304028][T10989] loop5: detected capacity change from 0 to 256
[  185.310516][T10989] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[  185.394325][   T24] usb 4-1: USB disconnect, device number 25
[  185.417423][T11001] loop6: detected capacity change from 0 to 1024
[  185.451981][ T9847] hfsplus: bad catalog entry type
[  185.595433][T10995] loop5: detected capacity change from 0 to 65536
[  185.601228][T10995] XFS (loop5): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  185.610328][T10995] XFS (loop5): Ending clean mount
[  185.633468][ T9028] XFS (loop5): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  185.649760][ T1091] hfsplus: b-tree write err: -5, ino 4
[  185.663617][   T12] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.715861][   T12] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.777326][   T12] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.819472][   T12] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  185.872405][ T5852] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  185.875258][ T5852] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  185.878815][ T5852] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  185.881556][ T5852] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  185.884450][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  185.951506][T11017] chnl_net:caif_netlink_parms(): no params data found
[  186.261473][T11036] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1909'.
[  186.265383][T11036] netlink: 'syz.3.1909': attribute type 2 has an invalid length.
[  186.269218][T11036] netlink: 'syz.3.1909': attribute type 2 has an invalid length.
[  186.272536][T11036] netlink: 'syz.3.1909': attribute type 1 has an invalid length.
[  186.275871][T11036] netlink: 'syz.3.1909': attribute type 2 has an invalid length.
[  186.282022][T11036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1909'.
[  186.316454][   T12] bond0 (unregistering): Released all slaves
[  186.329261][T11017] bridge0: port 1(bridge_slave_0) entered blocking state
[  186.332685][T11017] bridge0: port 1(bridge_slave_0) entered disabled state
[  186.335721][T11017] bridge_slave_0: entered allmulticast mode
[  186.338911][T11017] bridge_slave_0: entered promiscuous mode
[  186.344103][T11017] bridge0: port 2(bridge_slave_1) entered blocking state
[  186.347044][T11017] bridge0: port 2(bridge_slave_1) entered disabled state
[  186.349960][T11017] bridge_slave_1: entered allmulticast mode
[  186.353131][T11017] bridge_slave_1: entered promiscuous mode
[  186.378645][T11017] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  186.384215][T11017] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  186.411539][T11017] team0: Port device team_slave_0 added
[  186.416104][T11017] team0: Port device team_slave_1 added
[  186.440189][T11017] batman_adv: batadv0: Adding interface: batadv_slave_0
[  186.442967][T11017] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.455726][T11017] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  186.465511][T11017] batman_adv: batadv0: Adding interface: batadv_slave_1
[  186.468944][T11017] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  186.479388][T11017] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  186.502229][T11050] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1916'.
[  186.504084][T11017] hsr_slave_0: entered promiscuous mode
[  186.507783][T11017] hsr_slave_1: entered promiscuous mode
[  186.528451][   T12] hsr_slave_0: left promiscuous mode
[  186.532357][   T12] hsr_slave_1: left promiscuous mode
[  186.537434][   T12] veth1_macvtap: left promiscuous mode
[  186.539779][   T12] veth0_macvtap: left promiscuous mode
[  186.541601][   T12] veth1_vlan: left promiscuous mode
[  186.543619][   T12] veth0_vlan: left promiscuous mode
[  186.565018][T11054] loop3: detected capacity change from 0 to 1024
[  186.591139][   T26] hfsplus: b-tree write err: -5, ino 4
[  186.963568][T11068] loop5: detected capacity change from 0 to 256
[  186.972224][T11068] vfat: Bad value for 'nonumtail'
[  187.075477][T11017] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  187.080052][T11017] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  187.083857][T11017] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  187.087689][T11017] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  187.129580][T11017] 8021q: adding VLAN 0 to HW filter on device bond0
[  187.147149][T11017] 8021q: adding VLAN 0 to HW filter on device team0
[  187.153130][ T3406] bridge0: port 1(bridge_slave_0) entered blocking state
[  187.156183][ T3406] bridge0: port 1(bridge_slave_0) entered forwarding state
[  187.166998][ T3406] bridge0: port 2(bridge_slave_1) entered blocking state
[  187.169791][ T3406] bridge0: port 2(bridge_slave_1) entered forwarding state
[  187.181213][   T12] IPVS: stop unused estimator thread 0...
[  187.199927][   T12] ------------[ cut here ]------------
[  187.202020][   T12] WARNING: CPU: 1 PID: 12 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  187.205936][   T12] Modules linked in:
[  187.208083][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  187.212377][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.215997][   T12] Workqueue: netns cleanup_net
[  187.217725][   T12] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  187.220066][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5b ff 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 bf e1 f7 e8 b4 95 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 a6 95 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  187.227785][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[  187.230167][   T12] RAX: ffffffff8a22157c RBX: ffff88802a0e8000 RCX: ffff88801c2dd640
[  187.233052][   T12] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffff88801c2dd640
[  187.235837][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa38337 R09: 1ffffffff1f47066
[  187.238652][   T12] R10: dffffc0000000000 R11: fffffbfff1f47067 R12: ffffffff8f630fe0
[  187.241958][   T12] R13: 1ffff9200001ef40 R14: ffff88802a0e9480 R15: dffffc0000000000
[  187.244954][   T12] FS:  0000000000000000(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[  187.248028][   T12] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  187.250258][   T12] CR2: 00007f840a331fc8 CR3: 00000000350a6000 CR4: 00000000000006f0
[  187.253406][   T12] Call Trace:
[  187.254715][   T12]  <TASK>
[  187.255780][   T12]  xfrm_net_exit+0x2d/0x70
[  187.257297][   T12]  ops_undo_list+0x49a/0x990
[  187.258882][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  187.260897][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  187.263252][   T12]  cleanup_net+0x4c5/0x800
[  187.265120][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  187.267187][   T12]  ? rcu_is_watching+0x15/0xb0
[  187.269163][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  187.271505][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  187.273783][   T12]  process_scheduled_works+0xae1/0x17b0
[  187.275544][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  187.277535][   T12]  worker_thread+0x8a0/0xda0
[  187.279230][   T12]  kthread+0x711/0x8a0
[  187.280927][   T12]  ? __pfx_worker_thread+0x10/0x10
[  187.283184][   T12]  ? __pfx_kthread+0x10/0x10
[  187.285192][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  187.287253][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.289012][   T12]  ? __pfx_kthread+0x10/0x10
[  187.290559][   T12]  ret_from_fork+0x3fc/0x770
[  187.292109][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  187.293868][   T12]  ? __switch_to_asm+0x39/0x70
[  187.295571][   T12]  ? __switch_to_asm+0x33/0x70
[  187.297212][   T12]  ? __pfx_kthread+0x10/0x10
[  187.298764][   T12]  ret_from_fork_asm+0x1a/0x30
[  187.300363][   T12]  </TASK>
[  187.301429][   T12] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  187.304263][   T12] CPU: 1 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted syzkaller #0 PREEMPT(full) 
[  187.307750][   T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  187.311657][   T12] Workqueue: netns cleanup_net
[  187.313654][   T12] Call Trace:
[  187.314961][   T12]  <TASK>
[  187.316020][   T12]  dump_stack_lvl+0x99/0x250
[  187.317733][   T12]  ? __asan_memcpy+0x40/0x70
[  187.319611][   T12]  ? __pfx_dump_stack_lvl+0x10/0x10
[  187.321536][   T12]  ? __pfx__printk+0x10/0x10
[  187.323169][   T12]  vpanic+0x281/0x750
[  187.324500][   T12]  ? __pfx__printk+0x10/0x10
[  187.326443][   T12]  ? __pfx_vpanic+0x10/0x10
[  187.328338][   T12]  ? is_bpf_text_address+0x292/0x2b0
[  187.330052][   T12]  panic+0xb9/0xc0
[  187.331309][   T12]  ? __pfx_panic+0x10/0x10
[  187.332904][   T12]  __warn+0x31b/0x4b0
[  187.334215][   T12]  ? xfrm_state_fini+0x26d/0x2f0
[  187.335995][   T12]  ? xfrm_state_fini+0x26d/0x2f0
[  187.337976][   T12]  report_bug+0x2be/0x4f0
[  187.339852][   T12]  ? xfrm_state_fini+0x26d/0x2f0
[  187.342014][   T12]  ? xfrm_state_fini+0x26d/0x2f0
[  187.344120][   T12]  ? xfrm_state_fini+0x26f/0x2f0
[  187.346210][   T12]  handle_bug+0x84/0x160
[  187.347954][   T12]  exc_invalid_op+0x1a/0x50
[  187.349783][   T12]  asm_exc_invalid_op+0x1a/0x20
[  187.351845][   T12] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  187.354147][   T12] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 5b ff 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d9 bf e1 f7 e8 b4 95 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 a6 95 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  187.361766][   T12] RSP: 0018:ffffc900000f7898 EFLAGS: 00010293
[  187.364295][   T12] RAX: ffffffff8a22157c RBX: ffff88802a0e8000 RCX: ffff88801c2dd640
[  187.367659][   T12] RDX: 0000000000000000 RSI: ffffffff8be33660 RDI: ffff88801c2dd640
[  187.370959][   T12] RBP: ffffc900000f79b0 R08: ffffffff8fa38337 R09: 1ffffffff1f47066
[  187.374161][   T12] R10: dffffc0000000000 R11: fffffbfff1f47067 R12: ffffffff8f630fe0
[  187.377320][   T12] R13: 1ffff9200001ef40 R14: ffff88802a0e9480 R15: dffffc0000000000
[  187.380399][   T12]  ? xfrm_state_fini+0x26c/0x2f0
[  187.382166][   T12]  ? xfrm_state_fini+0x26c/0x2f0
[  187.383861][   T12]  xfrm_net_exit+0x2d/0x70
[  187.385566][   T12]  ops_undo_list+0x49a/0x990
[  187.387340][   T12]  ? __pfx_ops_undo_list+0x10/0x10
[  187.389289][   T12]  ? do_raw_spin_unlock+0x4d/0x240
[  187.391016][   T12]  cleanup_net+0x4c5/0x800
[  187.392520][   T12]  ? __pfx_cleanup_net+0x10/0x10
[  187.394158][   T12]  ? rcu_is_watching+0x15/0xb0
[  187.395765][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  187.397974][   T12]  ? process_scheduled_works+0x9ef/0x17b0
[  187.400217][   T12]  process_scheduled_works+0xae1/0x17b0
[  187.402522][   T12]  ? __pfx_process_scheduled_works+0x10/0x10
[  187.405033][   T12]  worker_thread+0x8a0/0xda0
[  187.406900][   T12]  kthread+0x711/0x8a0
[  187.408303][   T12]  ? __pfx_worker_thread+0x10/0x10
[  187.410145][   T12]  ? __pfx_kthread+0x10/0x10
[  187.411925][   T12]  ? _raw_spin_unlock_irq+0x23/0x50
[  187.414096][   T12]  ? lockdep_hardirqs_on+0x9c/0x150
[  187.416271][   T12]  ? __pfx_kthread+0x10/0x10
[  187.418146][   T12]  ret_from_fork+0x3fc/0x770
[  187.419993][   T12]  ? __pfx_ret_from_fork+0x10/0x10
[  187.422113][   T12]  ? __switch_to_asm+0x39/0x70
[  187.424136][   T12]  ? __switch_to_asm+0x33/0x70
[  187.426206][   T12]  ? __pfx_kthread+0x10/0x10
[  187.427955][   T12]  ret_from_fork_asm+0x1a/0x30
[  187.429781][   T12]  </TASK>
[  187.431788][   T12] Kernel Offset: disabled
[  187.433635][   T12] Rebooting in 86400 seconds..

VM DIAGNOSIS:
19:27:38  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff81c75578 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffffff8fa38330 RBP=ffffc90003b1fbb0 RSP=ffffc90003b1fae8
R8 =ffffffff8fa38337 R9 =1ffffffff1f47066 R10=dffffc0000000000 R11=fffffbfff1f47067
R12=dffffc0000000000 R13=1ffff92000763f98 R14=0000000000000a02 R15=1ffff92000763f64
RIP=ffffffff81a65d30 RFL=00000083 [--S---C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555566d5f500 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000555566d7a5c8 CR3=000000002594c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f8409612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006d RBX=000000000000006d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900000f7030
R8 =ffff8881084f0237 R9 =1ffff1102109e046 R10=dffffc0000000000 R11=ffffffff854f1cc0
R12=dffffc0000000000 R13=ffffffff99afa8f0 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1d3c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f840a331fc8 CR3=00000000350a6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8167991b ffffffff8167991b
XMM02=ffffffff823c700b ffffffff8167991b XMM03=ffffffff823c7e3e ffffffff823c708c
XMM04=ffffffff823c80b1 ffffffff823c7e3e XMM05=ffffffff823c708c ffffffff823c700b
XMM06=ffffffff823c6d49 ffffffff823c6cee XMM07=ffffffff823396fd ffffffff8233959e
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f68e0212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
