last executing test programs:

46.465592345s ago: executing program 2 (id=269):
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffbff965, 0x0, 0x0, 0x0, 0xfffffff9}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

46.409169345s ago: executing program 2 (id=272):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NL80211_CMD_VENDOR(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01134f9b3a000000fc006700000008000300", @ANYRES32, @ANYBLOB="0c00990000000000000000000800c300741300000800c4"], 0x3c}}, 0x40000)

46.349539779s ago: executing program 2 (id=274):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func={0x0, 0x0, 0x0, 0x90}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28)

46.258837459s ago: executing program 2 (id=275):
syz_mount_image$jfs(&(0x7f0000000300), &(0x7f0000000040)='./file0\x00', 0x20108c2, &(0x7f0000000e40)=ANY=[], 0xff, 0x61f8, &(0x7f00000128c0)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6)
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})
umount2(&(0x7f00000002c0)='./file0\x00', 0x9)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

45.745389484s ago: executing program 2 (id=276):
r0 = syz_open_dev$usbmon(&(0x7f0000000180), 0x7fffffff, 0x80001)
io_setup(0x6, &(0x7f0000001380)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f00000000c0)=[&(0x7f0000000100)={0x1000000, 0x0, 0x0, 0x5, 0x0, r0, 0x0}])

45.45888329s ago: executing program 2 (id=279):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0xb, 0x2, 0x2, 0x0, 0x70bd25, 0x25dfdbfc}, 0x10}}, 0x20008004)

45.223692456s ago: executing program 32 (id=279):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x2, 0xa, 0xb, 0x2, 0x2, 0x0, 0x70bd25, 0x25dfdbfc}, 0x10}}, 0x20008004)

3.836805678s ago: executing program 3 (id=590):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0)

3.769166234s ago: executing program 3 (id=591):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000040)=ANY=[@ANYBLOB="3800000054003d0926bd7000fedbdf2507000000", @ANYRES32=0x0, @ANYBLOB="170001"], 0x38}}, 0x0)

3.768778195s ago: executing program 3 (id=592):
r0 = socket$inet(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xb0, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x24, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0xe}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x2c2a1f44}]}]}]}}]}, 0xb0}}, 0x0)

3.709180131s ago: executing program 3 (id=593):
syz_mount_image$jfs(&(0x7f0000000080), &(0x7f0000000440)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[], 0x1, 0x6276, &(0x7f0000003680)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000200)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
open$dir(&(0x7f0000000040)='./file0\x00', 0x800, 0xc8)

3.286055922s ago: executing program 3 (id=602):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
sendmmsg$inet6(r0, &(0x7f0000003340)=[{{&(0x7f0000000240)={0xa, 0x4e22, 0x8, @mcast2, 0x7fff}, 0x1c, 0x0}}], 0x1, 0x44010)

2.99613161s ago: executing program 3 (id=603):
futex(0x0, 0x83, 0x0, 0x0, 0x0, 0xffffff01)

2.822582763s ago: executing program 33 (id=603):
futex(0x0, 0x83, 0x0, 0x0, 0x0, 0xffffff01)

2.627211776s ago: executing program 0 (id=606):
link(&(0x7f0000000080)='./cgroup.cpu/cgroup.procs\x00', &(0x7f00000000c0)='./file0\x00')

2.62693025s ago: executing program 0 (id=607):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000040)={0x1, 0x1})

2.469078959s ago: executing program 0 (id=608):
bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x95}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

2.408490174s ago: executing program 0 (id=610):
r0 = syz_open_dev$sndctrl(&(0x7f00000008c0), 0xe8, 0x40000)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000001c0)={0x2, 0x1, 0x7f, 0x6, &(0x7f00000000c0)=[{}]})

2.32806387s ago: executing program 0 (id=611):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000340)={0x34, &(0x7f0000000380)={0x20, 0xb, 0x1, '5'}, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)

1.871718175s ago: executing program 1 (id=613):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x60}}, 0x0)

1.793978035s ago: executing program 1 (id=614):
bpf$ENABLE_STATS(0x20, 0x0, 0x0)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f00000009c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200000000df00850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

1.59835858s ago: executing program 1 (id=615):
socket$isdn(0x22, 0x2, 0x11)

1.597978146s ago: executing program 1 (id=616):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[<r3=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETGAMMA(r1, 0xc02064a4, &(0x7f0000000280)={r3, 0x0, 0x0, 0x0, 0x0})

1.47706679s ago: executing program 1 (id=617):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r1, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0)
sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140)

240.459974ms ago: executing program 1 (id=618):
r0 = syz_open_dev$usbfs(&(0x7f0000000240), 0xb, 0x101301)
ioctl$USBDEVFS_IOCTL(r0, 0x80045505, &(0x7f0000000040)=@usbdevfs_connect)
ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000000)=0x1)

0s ago: executing program 0 (id=619):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000640)="d8000000180081054e81f782db4cb904021d080406037c09e8fe55a10a0015400200142603600e122f00160006000500a80006002000064007d57f5494007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a483455aeb4edbb57a5025ccca9e00b60db798262f3d40fad95667e006dcdfb8951f215ce3bbce81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92782f9ffcdb020e6f3baf26d57a0000000000008de6d7b140540d47", 0xd8}], 0x1, 0x0, 0x0, 0x4a0f0000}, 0x0)

kernel console output (not intermixed with test programs):

63.156587][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.160341][ T5856] bridge_slave_0: entered allmulticast mode
[   63.164634][ T5856] bridge_slave_0: entered promiscuous mode
[   63.194913][ T5852] team0: Port device team_slave_0 added
[   63.198463][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.201619][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.204785][ T5856] bridge_slave_1: entered allmulticast mode
[   63.209208][ T5856] bridge_slave_1: entered promiscuous mode
[   63.227967][ T5852] team0: Port device team_slave_1 added
[   63.257613][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.291465][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.300950][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.305719][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.308902][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.320592][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.343758][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.357136][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.361596][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.371664][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.390442][ T5848] team0: Port device team_slave_0 added
[   63.421743][ T5848] team0: Port device team_slave_1 added
[   63.425560][ T5856] team0: Port device team_slave_0 added
[   63.446071][ T5856] team0: Port device team_slave_1 added
[   63.474313][ T5852] hsr_slave_0: entered promiscuous mode
[   63.477899][ T5852] hsr_slave_1: entered promiscuous mode
[   63.496074][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.499283][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.508675][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.513973][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.516644][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.527012][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.533705][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.536502][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.548196][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.553734][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.557010][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.569642][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.632875][ T5848] hsr_slave_0: entered promiscuous mode
[   63.636209][ T5848] hsr_slave_1: entered promiscuous mode
[   63.640391][ T5848] debugfs: 'hsr0' already exists in 'hsr'
[   63.643106][ T5848] Cannot create hsr debugfs directory
[   63.732009][ T5856] hsr_slave_0: entered promiscuous mode
[   63.734941][ T5856] hsr_slave_1: entered promiscuous mode
[   63.737504][ T5856] debugfs: 'hsr0' already exists in 'hsr'
[   63.740027][ T5856] Cannot create hsr debugfs directory
[   64.003037][ T5852] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   64.016287][ T5852] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   64.024800][ T5852] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   64.041803][ T5852] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   64.084455][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   64.093736][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   64.099376][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   64.121312][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   64.177665][ T5856] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   64.187197][ T5856] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   64.196397][ T5856] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   64.209595][ T5856] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   64.295150][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.317267][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.340604][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[   64.354188][ T5852] 8021q: adding VLAN 0 to HW filter on device team0
[   64.367994][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.371003][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.386420][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.390633][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.393366][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.406549][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.409706][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.432515][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.435763][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.438467][ T5853] Bluetooth: hci0: command tx timeout
[   64.482347][ T5856] 8021q: adding VLAN 0 to HW filter on device team0
[   64.498653][ T5853] Bluetooth: hci1: command tx timeout
[   64.525747][ T5852] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   64.530937][ T5852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.551577][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.554763][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.563551][   T40] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.566717][   T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.579241][ T5853] Bluetooth: hci2: command tx timeout
[   64.665092][ T5856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   64.736046][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.805238][ T5852] veth0_vlan: entered promiscuous mode
[   64.816010][ T5852] veth1_vlan: entered promiscuous mode
[   64.846921][ T5852] veth0_macvtap: entered promiscuous mode
[   64.862809][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.865661][ T5852] veth1_macvtap: entered promiscuous mode
[   64.900060][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0
[   64.904740][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0
[   64.912327][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1
[   64.930862][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   64.944517][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   64.947904][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   64.959068][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   64.969968][ T5848] veth0_vlan: entered promiscuous mode
[   64.991144][ T5848] veth1_vlan: entered promiscuous mode
[   65.023901][ T5856] veth0_vlan: entered promiscuous mode
[   65.038161][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.043177][ T5848] veth0_macvtap: entered promiscuous mode
[   65.049440][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.058136][ T5848] veth1_macvtap: entered promiscuous mode
[   65.074623][ T5856] veth1_vlan: entered promiscuous mode
[   65.084548][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.092135][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.095930][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.109685][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.131388][ T5880] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.136438][ T5880] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.145223][ T5852] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   65.147479][ T5880] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.160720][ T5880] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.169367][ T5856] veth0_macvtap: entered promiscuous mode
[   65.187642][ T5856] veth1_macvtap: entered promiscuous mode
[   65.219794][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.231814][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.264248][ T5879] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.270315][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.273077][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.291242][ T5879] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.296331][ T5879] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.324694][ T5879] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   65.344555][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.347578][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.395505][ T4212] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.401303][ T4212] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.473115][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   65.479813][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   65.575356][ T5931] netlink: ct family unspecified
[   65.577617][ T5931] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   65.586858][ T5928] netlink: 116 bytes leftover after parsing attributes in process `syz.1.7'.
[   65.659002][ T5934] loop0: detected capacity change from 0 to 16
[   65.677677][ T5934] erofs (device loop0): mounted with root inode @ nid 36.
[   65.700443][ T5936] capability: warning: `syz.1.10' uses deprecated v2 capabilities in a way that may be insecure
[   65.707997][ T5934] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36
[   65.717061][ T5934] erofs (device loop0): failed to decompress -29 in[58, 4038] out[1851]
[   65.723236][ T5934] erofs (device loop0): read error -117 @ 43 of nid 36
[   65.787964][ T5940] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36
[   65.808960][ T5940] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36
[   65.817863][ T5940] erofs (device loop0): readahead error at folio 42 @ nid 36
[   65.832811][ T5940] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36
[   65.855721][ T5940] erofs (device loop0): readahead error at folio 41 @ nid 36
[   65.878019][ T5931] erofs (device loop0): bogus lookback distance 1388 @ lcn 42 of nid 36
[   65.902861][ T5940] erofs (device loop0): bogus lookback distance 774 @ lcn 40 of nid 36
[   65.915708][ T5931] erofs (device loop0): read error -117 @ 43 of nid 36
[   65.928186][ T5940] erofs (device loop0): readahead error at folio 40 @ nid 36
[   65.944424][ T5940] erofs (device loop0): readahead error at folio 39 @ nid 36
[   65.958448][ T5940] erofs (device loop0): readahead error at folio 38 @ nid 36
[   65.973416][ T5940] erofs (device loop0): readahead error at folio 36 @ nid 36
[   65.984048][ T5940] erofs (device loop0): bogus lookback distance 1468 @ lcn 31 of nid 36
[   66.001062][ T5940] erofs (device loop0): readahead error at folio 31 @ nid 36
[   66.007422][ T5940] erofs (device loop0): readahead error at folio 25 @ nid 36
[   66.017323][ T5940] erofs (device loop0): readahead error at folio 24 @ nid 36
[   66.031313][ T5940] erofs (device loop0): readahead error at folio 19 @ nid 36
[   66.054322][ T5940] syz.0.8: attempt to access beyond end of device
[   66.054322][ T5940] loop0: rw=524288, sector=784, nr_sectors = 64 limit=16
[   66.086025][ T5940] syz.0.8: attempt to access beyond end of device
[   66.086025][ T5940] loop0: rw=524288, sector=13478624080, nr_sectors = 24 limit=16
[   66.107138][ T5940] syz.0.8: attempt to access beyond end of device
[   66.107138][ T5940] loop0: rw=524288, sector=13478624032, nr_sectors = 48 limit=16
[   66.122961][ T5940] erofs (device loop0): failed to decompress -29 in[58, 4038] out[2639]
[   66.136228][ T5940] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36
[   66.156535][ T5940] erofs (device loop0): readahead error at folio 47 @ nid 36
[   66.176230][ T5940] erofs (device loop0): bogus lookback distance 1586 @ lcn 46 of nid 36
[   66.216085][ T5940] erofs (device loop0): readahead error at folio 46 @ nid 36
[   66.229850][ T5940] erofs (device loop0): readahead error at folio 45 @ nid 36
[   66.237500][ T5940] syz.0.8: attempt to access beyond end of device
[   66.237500][ T5940] loop0: rw=524288, sector=16, nr_sectors = 16 limit=16
[   66.263049][ T5940] erofs (device loop0): failed to decompress -29 in[58, 4038] out[3537]
[   66.499209][ T5853] Bluetooth: hci0: command tx timeout
[   66.578926][ T5853] Bluetooth: hci1: command tx timeout
[   66.659466][ T5853] Bluetooth: hci2: command tx timeout
[   66.899659][ T5914] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   66.993896][ T5972] pim6reg9: entered allmulticast mode
[   67.072475][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   67.091960][ T5914] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[   67.100734][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.115811][ T5914] usb 3-1: config 0 descriptor??
[   67.135546][ T5914] pwc: Askey VC010 type 2 USB webcam detected.
[   67.197351][ T5983] syz.1.29 uses obsolete (PF_INET,SOCK_PACKET)
[   67.532609][ T5914] pwc: recv_control_msg error -32 req 02 val 2b00
[   67.738459][ T5914] pwc: recv_control_msg error -71 req 02 val 2c00
[   67.745978][ T5914] pwc: recv_control_msg error -71 req 04 val 1000
[   67.750712][ T5914] pwc: recv_control_msg error -71 req 04 val 1300
[   67.754156][ T5914] pwc: recv_control_msg error -71 req 04 val 1400
[   67.757040][ T5914] pwc: recv_control_msg error -71 req 02 val 2000
[   67.764315][ T5914] pwc: recv_control_msg error -71 req 02 val 2100
[   67.767098][ T5986] capability: warning: `syz.0.30' uses 32-bit capabilities (legacy support in use)
[   67.771097][ T5914] pwc: recv_control_msg error -71 req 04 val 1500
[   67.774794][ T5914] pwc: recv_control_msg error -71 req 02 val 2500
[   67.777663][ T5914] pwc: recv_control_msg error -71 req 02 val 2400
[   67.784120][ T5914] pwc: recv_control_msg error -71 req 02 val 2600
[   67.786912][ T5914] pwc: recv_control_msg error -71 req 02 val 2900
[   67.790618][ T5914] pwc: recv_control_msg error -71 req 02 val 2800
[   67.793094][ T5914] pwc: recv_control_msg error -71 req 04 val 1100
[   67.795891][ T5914] pwc: recv_control_msg error -71 req 04 val 1200
[   67.801982][ T5914] pwc: Registered as video103.
[   67.806569][ T5914] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input4
[   67.827436][ T5914] usb 3-1: USB disconnect, device number 2
[   68.580883][ T5853] Bluetooth: hci0: command tx timeout
[   68.659731][ T5853] Bluetooth: hci1: command tx timeout
[   68.738990][ T5853] Bluetooth: hci2: command tx timeout
[   68.852514][ T6012] loop1: detected capacity change from 0 to 128
[   68.864433][ T6014] netlink: 4 bytes leftover after parsing attributes in process `syz.0.40'.
[   68.875309][ T6012] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[   68.901124][ T6012] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   68.916670][ T6016] overlayfs: conflicting options: nfs_export=on,metacopy=on
[   69.044280][ T6018] loop0: detected capacity change from 0 to 4096
[   69.072033][   T33] audit: type=1326 audit(1755553553.023:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.44" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c75d8ebe9 code=0x7ffc0000
[   69.093616][ T6018] ntfs3(loop0): ino=1a, mi_enum_attr
[   69.104416][   T33] audit: type=1326 audit(1755553553.023:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.44" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c75d8ebe9 code=0x7ffc0000
[   69.104449][ T6018] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   69.120917][   T33] audit: type=1326 audit(1755553553.033:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.44" exe="/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7f7c75d8ebe9 code=0x7ffc0000
[   69.132757][   T33] audit: type=1326 audit(1755553553.033:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.44" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c75d8ebe9 code=0x7ffc0000
[   69.143690][   T33] audit: type=1326 audit(1755553553.033:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.44" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f7c75d8ebe9 code=0x7ffc0000
[   69.158359][   T33] audit: type=1326 audit(1755553553.033:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.44" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c75d8ebe9 code=0x7ffc0000
[   69.167111][   T33] audit: type=1326 audit(1755553553.033:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.44" exe="/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7f7c75d8ebe9 code=0x7ffc0000
[   69.194034][   T33] audit: type=1326 audit(1755553553.033:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.44" exe="/syz-executor" sig=0 arch=c000003e syscall=96 compat=0 ip=0xffffffffff600000 code=0x7ffc0000
[   69.204291][   T33] audit: type=1326 audit(1755553553.033:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.44" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c75d8ebe9 code=0x7ffc0000
[   69.215273][   T33] audit: type=1326 audit(1755553553.043:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6019 comm="syz.1.44" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c75d8ebe9 code=0x7ffc0000
[   69.520316][ T6030] loop2: detected capacity change from 0 to 1764
[   69.600965][ T6032] loop1: detected capacity change from 0 to 4096
[   69.673937][ T6034] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   70.659422][ T5853] Bluetooth: hci0: command tx timeout
[   70.738890][ T5853] Bluetooth: hci1: command tx timeout
[   70.882121][ T6057] loop0: detected capacity change from 0 to 736
[   70.894779][ T5853] Bluetooth: hci2: command tx timeout
[   71.261871][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   71.266049][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.426395][ T6063] loop0: detected capacity change from 0 to 256
[   71.436303][ T6063] =======================================================
[   71.436303][ T6063] WARNING: The mand mount option has been deprecated and
[   71.436303][ T6063]          and is ignored by this kernel. Remove the mand
[   71.436303][ T6063]          option from the mount to silence this warning.
[   71.436303][ T6063] =======================================================
[   71.480085][ T6063] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   71.484226][ T6063] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[   71.496552][ T6063] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[   71.686620][ T6067] loop1: detected capacity change from 0 to 4096
[   71.945804][ T6073] loop0: detected capacity change from 0 to 256
[   71.957074][ T6073] exfat: Deprecated parameter 'utf8'
[   71.968476][ T6073] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[   72.072574][ T6081] loop0: detected capacity change from 0 to 128
[   72.131037][ T6081] FAT-fs (loop0): error, invalid access to FAT (entry 0x0fff0000)
[   72.133900][ T6081] FAT-fs (loop0): Filesystem has been set read-only
[   72.728957][ T6083] loop2: detected capacity change from 0 to 32768
[   73.559687][ T6111] loop2: detected capacity change from 0 to 512
[   73.570965][ T6111] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[   73.609814][ T6111] UDF-fs: error (device loop2): udf_read_inode: (ino 19) failed ident=264
[   73.613611][ T6111] binfmt_misc: register: failed to install interpreter file ./file0
[   73.893214][ T6119] kAFS: No cell specified
[   73.967377][ T6123] loop0: detected capacity change from 0 to 128
[   73.981714][ T6123] zonefs (loop0) ERROR: Not a zoned block device
[   74.147552][ T6129] loop0: detected capacity change from 0 to 1024
[   74.200125][   T33] kauditd_printk_skb: 1 callbacks suppressed
[   74.200139][   T33] audit: type=1800 audit(1755553558.153:13): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.91" name="file1" dev="loop0" ino=20 res=0 errno=0
[   74.231157][   T33] audit: type=1800 audit(1755553558.153:14): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.91" name="file1" dev="loop0" ino=20 res=0 errno=0
[   74.310654][ T6121] loop1: detected capacity change from 0 to 40427
[   74.327957][ T6121] F2FS-fs (loop1): Small segment_count (9 < 1 * 24)
[   74.333825][ T6121] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   74.449398][ T6121] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   74.457378][ T6121] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   74.463410][ T6121] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   74.551059][ T5852] syz-executor: attempt to access beyond end of device
[   74.551059][ T5852] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   74.558132][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   74.558152][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   74.558159][ T5852] Call Trace:
[   74.558165][ T5852]  <TASK>
[   74.558171][ T5852]  dump_stack_lvl+0x189/0x250
[   74.558193][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[   74.558207][ T5852]  ? __pfx_queue_work_on+0x10/0x10
[   74.558247][ T5852]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   74.558263][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   74.558285][ T5852]  f2fs_handle_critical_error+0x37c/0x540
[   74.558308][ T5852]  f2fs_write_end_io+0x886/0xb60
[   74.558335][ T5852]  __submit_merged_bio+0x27a/0x6a0
[   74.558357][ T5852]  __submit_merged_write_cond+0x255/0x530
[   74.558378][ T5852]  f2fs_write_data_pages+0x261d/0x3000
[   74.558420][ T5852]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   74.558490][ T5852]  ? __lock_acquire+0xab9/0xd20
[   74.558513][ T5852]  ? do_raw_spin_lock+0x121/0x290
[   74.558536][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[   74.558550][ T5852]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   74.558567][ T5852]  do_writepages+0x32e/0x550
[   74.558593][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[   74.558608][ T5852]  filemap_fdatawrite+0x199/0x240
[   74.558623][ T5852]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   74.558671][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[   74.558689][ T5852]  f2fs_sync_dirty_inodes+0x31f/0x830
[   74.558712][ T5852]  f2fs_write_checkpoint+0x95a/0x1df0
[   74.558745][ T5852]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   74.558814][ T5852]  ? call_rcu+0x6ff/0x9c0
[   74.558828][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[   74.558843][ T5852]  ? kill_f2fs_super+0x298/0x6c0
[   74.558859][ T5852]  kill_f2fs_super+0x2c3/0x6c0
[   74.558878][ T5852]  ? __pfx_kill_f2fs_super+0x10/0x10
[   74.558887][ T5852]  ? radix_tree_delete_item+0x2b6/0x400
[   74.558908][ T5852]  ? shrinker_free+0x2ce/0x3e0
[   74.558923][ T5852]  deactivate_locked_super+0xbc/0x130
[   74.558940][ T5852]  cleanup_mnt+0x425/0x4c0
[   74.558953][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[   74.558970][ T5852]  task_work_run+0x1d4/0x260
[   74.558990][ T5852]  ? __pfx_task_work_run+0x10/0x10
[   74.559003][ T5852]  ? __x64_sys_umount+0x122/0x160
[   74.559029][ T5852]  ? exit_to_user_mode_loop+0x40/0x110
[   74.559047][ T5852]  exit_to_user_mode_loop+0xec/0x110
[   74.559063][ T5852]  do_syscall_64+0x2bd/0x3b0
[   74.559078][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[   74.559093][ T5852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.559103][ T5852]  ? exc_page_fault+0x9f/0xf0
[   74.559120][ T5852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   74.559132][ T5852] RIP: 0033:0x7f7c75d8ff17
[   74.559144][ T5852] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   74.559153][ T5852] RSP: 002b:00007ffd19c97788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   74.559167][ T5852] RAX: 0000000000000000 RBX: 00007f7c75e11c05 RCX: 00007f7c75d8ff17
[   74.559174][ T5852] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd19c97840
[   74.559181][ T5852] RBP: 00007ffd19c97840 R08: 0000000000000000 R09: 0000000000000000
[   74.559188][ T5852] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd19c988d0
[   74.559195][ T5852] R13: 00007f7c75e11c05 R14: 000000000001229b R15: 00007ffd19c98910
[   74.559218][ T5852]  </TASK>
[   74.778369][ T5852] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   75.613062][ T6155] Zero length message leads to an empty skb
[   76.391878][ T6177] warning: `syz.1.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   76.669796][ T6158] loop2: detected capacity change from 0 to 32768
[   78.170853][ T6197] loop2: detected capacity change from 0 to 32768
[   78.325236][ T6197] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   78.377606][ T6197] XFS (loop2): Ending clean mount
[   79.346406][ T6222] netlink: 32 bytes leftover after parsing attributes in process `syz.0.115'.
[   79.480553][ T5856] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   79.605710][ T6231] netlink: 60 bytes leftover after parsing attributes in process `syz.0.120'.
[   79.618071][ T6231] unsupported nlmsg_type 40
[   79.767826][ T6240] netlink: 'syz.0.123': attribute type 1 has an invalid length.
[   79.810815][ T6240] bond1: (slave gretap1): making interface the new active one
[   79.816091][ T6240] bond1: (slave gretap1): Enslaving as an active interface with an up link
[   79.930400][ T6249] netlink: 'syz.1.127': attribute type 9 has an invalid length.
[   79.933540][ T6249] netlink: 200108 bytes leftover after parsing attributes in process `syz.1.127'.
[   79.938505][ T6240] syz.0.123 (6240) used greatest stack depth: 19848 bytes left
[   79.942614][ T6249] openvswitch: netlink: Message has 5 unknown bytes.
[   79.994770][ T6244] loop2: detected capacity change from 0 to 40427
[   80.002984][ T6244] F2FS-fs (loop2): invalid crc value
[   80.090763][ T6244] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   80.096774][ T6244] F2FS-fs (loop2): Start checkpoint disabled!
[   80.122247][ T6244] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[   80.141818][   T33] audit: type=1800 audit(1755553564.093:15): pid=6244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.125" name="file1" dev="loop2" ino=10 res=0 errno=0
[   80.693106][ T6257] syz.2.125: attempt to access beyond end of device
[   80.693106][ T6257] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[   80.704899][ T6257] syz.2.125: attempt to access beyond end of device
[   80.704899][ T6257] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[   80.712864][ T6257] syz.2.125: attempt to access beyond end of device
[   80.712864][ T6257] loop2: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[   80.722780][ T6257] syz.2.125: attempt to access beyond end of device
[   80.722780][ T6257] loop2: rw=2049, sector=45120, nr_sectors = 8 limit=40427
[   80.732296][ T6257] syz.2.125: attempt to access beyond end of device
[   80.732296][ T6257] loop2: rw=2049, sector=45128, nr_sectors = 8 limit=40427
[   80.738926][ T6257] syz.2.125: attempt to access beyond end of device
[   80.738926][ T6257] loop2: rw=2049, sector=45136, nr_sectors = 16 limit=40427
[   80.745423][ T6257] syz.2.125: attempt to access beyond end of device
[   80.745423][ T6257] loop2: rw=2049, sector=45152, nr_sectors = 8 limit=40427
[   80.754610][ T6257] syz.2.125: attempt to access beyond end of device
[   80.754610][ T6257] loop2: rw=2049, sector=45160, nr_sectors = 8 limit=40427
[   80.763767][ T6257] syz.2.125: attempt to access beyond end of device
[   80.763767][ T6257] loop2: rw=2049, sector=45168, nr_sectors = 8 limit=40427
[   80.772884][ T6257] syz.2.125: attempt to access beyond end of device
[   80.772884][ T6257] loop2: rw=2049, sector=45176, nr_sectors = 8 limit=40427
[   81.010953][ T1090] CPU: 0 UID: 0 PID: 1090 Comm: kworker/u9:5 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[   81.010991][ T1090] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   81.010999][ T1090] Workqueue: writeback wb_workfn (flush-7:2)
[   81.011020][ T1090] Call Trace:
[   81.011026][ T1090]  <TASK>
[   81.011032][ T1090]  dump_stack_lvl+0x189/0x250
[   81.011049][ T1090]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.011064][ T1090]  ? __pfx_dump_stack_lvl+0x10/0x10
[   81.011079][ T1090]  ? f2fs_handle_critical_error+0x322/0x540
[   81.011097][ T1090]  f2fs_handle_critical_error+0x37c/0x540
[   81.011114][ T1090]  f2fs_write_end_io+0x886/0xb60
[   81.011136][ T1090]  __submit_merged_bio+0x27a/0x6a0
[   81.011156][ T1090]  __submit_merged_write_cond+0x255/0x530
[   81.011176][ T1090]  f2fs_write_data_pages+0x261d/0x3000
[   81.011214][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   81.011239][ T1090]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   81.011272][ T1090]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   81.011296][ T1090]  ? trace_f2fs_writepages+0x7f/0x200
[   81.011310][ T1090]  ? f2fs_write_node_pages+0x478/0x6e0
[   81.011327][ T1090]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   81.011349][ T1090]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   81.011362][ T1090]  do_writepages+0x32e/0x550
[   81.011379][ T1090]  ? reacquire_held_locks+0x127/0x1d0
[   81.011389][ T1090]  ? writeback_sb_inodes+0x384/0x1010
[   81.011406][ T1090]  __writeback_single_inode+0x145/0xff0
[   81.011419][ T1090]  ? do_raw_spin_unlock+0x4d/0x240
[   81.011434][ T1090]  writeback_sb_inodes+0x6c7/0x1010
[   81.011466][ T1090]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   81.011507][ T1090]  ? rcu_is_watching+0x15/0xb0
[   81.011524][ T1090]  wb_writeback+0x43b/0xaf0
[   81.011543][ T1090]  ? queue_io+0x321/0x590
[   81.011559][ T1090]  ? __pfx_wb_writeback+0x10/0x10
[   81.011578][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[   81.011596][ T1090]  wb_workfn+0x409/0xef0
[   81.011620][ T1090]  ? __pfx_wb_workfn+0x10/0x10
[   81.011634][ T1090]  ? __lock_acquire+0xab9/0xd20
[   81.011658][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[   81.011673][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[   81.011685][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[   81.011695][ T1090]  ? process_scheduled_works+0x9ef/0x17b0
[   81.011707][ T1090]  process_scheduled_works+0xae1/0x17b0
[   81.011773][ T1090]  ? __pfx_process_scheduled_works+0x10/0x10
[   81.011798][ T1090]  worker_thread+0x8a0/0xda0
[   81.011829][ T1090]  kthread+0x711/0x8a0
[   81.011846][ T1090]  ? __pfx_worker_thread+0x10/0x10
[   81.011857][ T1090]  ? __pfx_kthread+0x10/0x10
[   81.011872][ T1090]  ? _raw_spin_unlock_irq+0x23/0x50
[   81.011885][ T1090]  ? lockdep_hardirqs_on+0x9c/0x150
[   81.011899][ T1090]  ? __pfx_kthread+0x10/0x10
[   81.011914][ T1090]  ret_from_fork+0x3fc/0x770
[   81.011930][ T1090]  ? __pfx_ret_from_fork+0x10/0x10
[   81.011947][ T1090]  ? __switch_to_asm+0x39/0x70
[   81.011961][ T1090]  ? __switch_to_asm+0x33/0x70
[   81.011972][ T1090]  ? __pfx_kthread+0x10/0x10
[   81.011988][ T1090]  ret_from_fork_asm+0x1a/0x30
[   81.012014][ T1090]  </TASK>
[   81.012081][ T1090] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   82.813672][ T6288] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   82.924181][ T6283] loop0: detected capacity change from 0 to 32768
[   83.001206][ T6283] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   83.010140][   T12] (kworker/u8:0,12,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[   83.136122][ T5848] ocfs2: Unmounting device (7,0) on (node local)
[   83.240463][ T6294] loop1: detected capacity change from 0 to 32768
[   83.253672][ T6294] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.144 (6294)
[   83.305584][ T6294] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   83.311367][ T6294] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   83.314358][ T6294] BTRFS info (device loop1): using free-space-tree
[   83.486297][ T6322] netlink: 52 bytes leftover after parsing attributes in process `syz.0.151'.
[   83.524644][ T6322] netlink: 4 bytes leftover after parsing attributes in process `syz.0.151'.
[   83.527198][ T6294] BTRFS info (device loop1): rebuilding free space tree
[   83.855041][ T6294] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   84.079639][ T6331] loop0: detected capacity change from 0 to 1024
[   84.083515][ T6331] EXT4-fs: Ignoring removed nomblk_io_submit option
[   84.114333][ T6332] netlink: 2048 bytes leftover after parsing attributes in process `syz.1.152'.
[   84.124509][ T6332] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'.
[   84.170586][ T6331] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.233678][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   84.374670][ T6341] loop2: detected capacity change from 0 to 64
[   85.978477][ T5919] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   85.982264][ T6374] loop0: detected capacity change from 0 to 32768
[   86.002944][ T6374] JBD2: Ignoring recovery information on journal
[   86.046222][ T6374] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   86.095965][ T5848] ocfs2: Unmounting device (7,0) on (node local)
[   86.123212][    C0] vcan0: j1939_tp_rxtimer: 0xffff888039684000: rx timeout, send abort
[   86.129247][ T5919] usb 2-1: Using ep0 maxpacket: 32
[   86.143269][ T5919] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   86.148137][ T5919] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.173843][ T5919] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   86.177951][ T5919] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[   86.205333][ T5919] usb 2-1: Product: syz
[   86.207385][ T5919] usb 2-1: Manufacturer: syz
[   86.262469][ T5919] hub 2-1:4.0: USB hub found
[   86.459924][ T5919] hub 2-1:4.0: 2 ports detected
[   86.512787][   T47] cfg80211: failed to load regulatory.db
[   86.623718][    C0] vcan0: j1939_tp_rxtimer: 0xffff888039684c00: rx timeout, send abort
[   86.627797][    C0] vcan0: j1939_tp_rxtimer: 0xffff888039684000: abort rx timeout. Force session deactivation
[   86.667837][ T5919] hub 2-1:4.0: hub_hub_status failed (err = -71)
[   86.672802][ T5919] hub 2-1:4.0: config failed, can't get hub status (err -71)
[   86.721491][ T5919] usb 2-1: USB disconnect, device number 2
[   87.122724][    C0] vcan0: j1939_tp_rxtimer: 0xffff888039685000: rx timeout, send abort
[   87.127213][    C0] vcan0: j1939_tp_rxtimer: 0xffff888039684c00: abort rx timeout. Force session deactivation
[   87.510659][ T6387] loop1: detected capacity change from 0 to 4096
[   87.515547][ T6387] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[   87.526933][ T6389] loop0: detected capacity change from 0 to 1024
[   87.626495][    C0] vcan0: j1939_tp_rxtimer: 0xffff888039685000: abort rx timeout. Force session deactivation
[   87.693329][ T6393] hfsplus: request for non-existent node 211 in B*Tree
[   87.695986][ T6393] hfsplus: request for non-existent node 211 in B*Tree
[   87.723166][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.1.174'.
[   87.819121][ T6399] loop1: detected capacity change from 0 to 256
[   87.842855][ T6399] FAT-fs (loop1): count of clusters too big (178174)
[   87.858016][ T6399] FAT-fs (loop1): Can't find a valid FAT filesystem
[   87.913864][ T6401] loop2: detected capacity change from 0 to 2048
[   87.948178][ T6401] NILFS (loop2): couldn't find nilfs on the device
[   88.387271][ T6406] vlan2: entered allmulticast mode
[   88.413815][ T6406] syz_tun: entered allmulticast mode
[   89.017291][ T6417] netlink: 12 bytes leftover after parsing attributes in process `syz.2.184'.
[   89.021972][ T6417] netlink: 'syz.2.184': attribute type 2 has an invalid length.
[   89.026758][ T6417] netlink: 'syz.2.184': attribute type 1 has an invalid length.
[   89.031226][ T6417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'.
[   89.088631][ T1272] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   89.268168][ T1272] usb 1-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[   89.271337][ T1272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.274148][ T1272] usb 1-1: Product: syz
[   89.275680][ T1272] usb 1-1: Manufacturer: syz
[   89.277496][ T1272] usb 1-1: SerialNumber: syz
[   89.284278][ T1272] usb 1-1: config 0 descriptor??
[   89.291232][ T1272] ch341 1-1:0.0: ch341-uart converter detected
[   89.525196][ T1272] usb 1-1: failed to receive control message: -71
[   89.536320][ T1272] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[   89.551433][ T1272] usb 1-1: USB disconnect, device number 2
[   89.558146][ T1272] ch341 1-1:0.0: device disconnected
[   89.561214][ T6419] loop2: detected capacity change from 0 to 32768
[   89.597318][ T6419] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   89.697058][ T6419] XFS (loop2): Ending clean mount
[   89.753299][ T5856] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   89.932988][ T6434] netlink: 72 bytes leftover after parsing attributes in process `syz.2.188'.
[   90.105627][ T6444] loop0: detected capacity change from 0 to 8192
[   90.161360][ T6447] loop2: detected capacity change from 0 to 8
[   90.438600][ T6458] SQUASHFS error: Failed to read block 0x2fc: -5
[   90.441324][ T6458] SQUASHFS error: Unable to read metadata cache entry [2fa]
[   90.444206][ T6458] SQUASHFS error: Unable to read directory block [247:26]
[   90.451182][ T6458] SQUASHFS error: Unable to read metadata cache entry [2fa]
[   90.453981][ T6458] SQUASHFS error: Unable to read directory block [247:26]
[   90.458837][ T6458] SQUASHFS error: Unable to read metadata cache entry [2fa]
[   90.462091][ T6458] SQUASHFS error: Unable to read directory block [247:26]
[   90.742230][ T6464] loop1: detected capacity change from 0 to 256
[   90.746976][ T6464] exfat: Bad value for 'allow_utime'
[   91.328378][   T47] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   91.490629][   T47] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[   91.494589][   T47] usb 3-1: config 0 has an invalid interface number: 4 but max is 0
[   91.497988][   T47] usb 3-1: config 0 has 2 interfaces, different from the descriptor's value: 1
[   91.502743][   T47] usb 3-1: config 0 has no interface number 0
[   91.505507][   T47] usb 3-1: config 0 has no interface number 1
[   91.511166][   T47] usb 3-1: New USB device found, idVendor=cc35, idProduct=693f, bcdDevice=e7.0f
[   91.515537][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.520043][   T47] usb 3-1: Product: syz
[   91.521974][   T47] usb 3-1: Manufacturer: syz
[   91.524141][   T47] usb 3-1: SerialNumber: syz
[   91.531267][   T47] usb 3-1: config 0 descriptor??
[   91.536142][   T47] cdc_acm 3-1:0.51: probe with driver cdc_acm failed with error -22
[   91.767107][   T47] usb 3-1: USB disconnect, device number 3
[   93.690713][ T6499] netlink: 40 bytes leftover after parsing attributes in process `syz.2.214'.
[   94.136702][ T6502] loop2: detected capacity change from 0 to 32768
[   94.147032][ T6502] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.215 (6502)
[   94.196070][ T6502] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   94.216131][ T6519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'.
[   94.223302][ T6502] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   94.229670][ T6502] BTRFS info (device loop2): using free-space-tree
[   94.465985][ T6502] BTRFS info (device loop2): rebuilding free space tree
[   94.956179][ T5856] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   95.674475][ T6547] pim6reg: entered allmulticast mode
[   95.871365][ T6559] loop1: detected capacity change from 0 to 128
[   95.874262][ T6559] EXT4-fs: Ignoring removed nobh option
[   95.931561][ T6559] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   95.938126][ T6559] ext4 filesystem being mounted at /83/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   95.986546][ T6564] loop2: detected capacity change from 0 to 512
[   96.026289][ T6564] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[   96.032273][ T6564] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[   96.036002][ T6564] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.234: Failed to acquire dquot type 1
[   96.062873][ T6564] EXT4-fs (loop2): 1 truncate cleaned up
[   96.069014][ T6564] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.078477][ T6564] ext4 filesystem being mounted at /60/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   96.165317][ T5856] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   97.241162][   T32] Bluetooth: (null): Invalid header checksum
[   97.244281][   T32] Bluetooth: (null): Invalid header checksum
[   97.330551][ T1088] Bluetooth: (null): Invalid header checksum
[   97.439184][ T1090] Bluetooth: (null): Invalid header checksum
[   97.549390][   T32] Bluetooth: (null): Invalid header checksum
[   97.572205][ T6618] loop2: detected capacity change from 0 to 256
[   97.580764][ T6618] exfat: Deprecated parameter 'namecase'
[   97.582901][ T6618] exfat: Deprecated parameter 'utf8'
[   97.600779][ T6618] exFAT-fs (loop2): failed to load upcase table (idx : 0x0001ff53, chksum : 0xd72bb7d8, utbl_chksum : 0xe619d30d)
[   97.942320][   T33] audit: type=1326 audit(2000000015.950:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6627 comm="syz.2.262" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbabc32add9 code=0x7ffc0000
[   97.953261][   T33] audit: type=1326 audit(2000000015.960:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6627 comm="syz.2.262" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabc38ebe9 code=0x7ffc0000
[   97.964332][   T33] audit: type=1326 audit(2000000015.960:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6627 comm="syz.2.262" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabc38ebe9 code=0x7ffc0000
[   97.973744][   T33] audit: type=1326 audit(2000000015.960:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6627 comm="syz.2.262" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabc38ebe9 code=0x7ffc0000
[   97.983180][   T33] audit: type=1326 audit(2000000015.960:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6627 comm="syz.2.262" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbabc32add9 code=0x7ffc0000
[   97.992235][   T33] audit: type=1326 audit(2000000015.960:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6627 comm="syz.2.262" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbabc32add9 code=0x7ffc0000
[   98.009362][   T33] audit: type=1326 audit(2000000015.960:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6627 comm="syz.2.262" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbabc38ebe9 code=0x7ffc0000
[   98.026771][   T33] audit: type=1326 audit(2000000015.960:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6627 comm="syz.2.262" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fbabc32add9 code=0x7ffc0000
[   98.115584][ T5852] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   98.132554][ T6638] netlink: 'syz.2.267': attribute type 2 has an invalid length.
[   98.172420][ T1272] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   98.260807][ T6648] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'.
[   98.332133][ T1272] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   98.338009][ T1272] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   98.344957][ T1272] usb 1-1: config 1 interface 1 has no altsetting 1
[   98.351551][ T1272] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   98.355783][ T1272] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.388311][ T1272] usb 1-1: Product: syz
[   98.390104][ T1272] usb 1-1: Manufacturer: syz
[   98.391868][ T1272] usb 1-1: SerialNumber: syz
[   98.753945][ T1272] usb 1-1: selecting invalid altsetting 1
[   98.757987][ T1272] cdc_ncm 1-1:1.0: bind() failure
[   98.765140][ T1272] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[   98.767817][ T1272] cdc_ncm 1-1:1.1: bind() failure
[   98.774148][ T1272] usb 1-1: USB disconnect, device number 3
[   98.850970][ T6655] loop2: detected capacity change from 0 to 32768
[   98.875345][ T6655] overlayfs: upper fs needs to support d_type.
[   98.877845][ T6655] overlayfs: upper fs does not support tmpfile.
[   98.883718][ T6655] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   98.900051][ T6655] overlayfs: upper fs needs to support d_type.
[   98.902375][ T6655] overlayfs: upper fs does not support tmpfile.
[   98.906292][ T6655] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   98.935268][ T5856] non-latin1 character 0x2e66 found in JFS file name
[   98.937837][ T5856] mount with iocharset=utf8 to access
[   99.275840][ T5880] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.374282][ T6665] loop1: detected capacity change from 0 to 4096
[   99.438489][ T6666] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   99.442279][ T5880] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.610166][ T5880] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.748126][ T5880] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   99.852431][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   99.863020][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   99.867567][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   99.871097][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   99.874069][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   99.898387][  T792] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   99.997970][ T5880] bridge_slave_1: left allmulticast mode
[  100.000662][ T5880] bridge_slave_1: left promiscuous mode
[  100.004310][ T5880] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.014176][ T5880] bridge_slave_0: left allmulticast mode
[  100.016657][ T5880] bridge_slave_0: left promiscuous mode
[  100.020908][ T5880] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.076319][  T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  100.081255][  T792] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  100.086675][  T792] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[  100.100055][  T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.104763][  T792] usb 1-1: config 0 descriptor??
[  100.572022][  T792] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x2
[  100.588814][  T792] pyra 0003:1E7D:2CF6.0001: unknown main item tag 0x2
[  100.689347][ T5880] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.724265][ T5880] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.758509][  T792] pyra 0003:1E7D:2CF6.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:2cf6] on usb-dummy_hcd.0-1/input0
[  100.764756][ T5880] bond0 (unregistering): Released all slaves
[  100.770205][  T792] pyra 0003:1E7D:2CF6.0001: couldn't init struct pyra_device
[  100.776719][  T792] pyra 0003:1E7D:2CF6.0001: couldn't install mouse
[  100.790822][  T792] pyra 0003:1E7D:2CF6.0001: probe with driver pyra failed with error -71
[  100.802097][  T792] usb 1-1: USB disconnect, device number 4
[  101.050984][ T6671] chnl_net:caif_netlink_parms(): no params data found
[  101.119098][ T5880] hsr_slave_0: left promiscuous mode
[  101.123626][ T5880] hsr_slave_1: left promiscuous mode
[  101.126228][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  101.129260][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_0
[  101.132420][ T5880] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  101.135001][ T5880] batman_adv: batadv0: Removing interface: batadv_slave_1
[  101.151260][ T5880] veth1_macvtap: left promiscuous mode
[  101.153190][ T5880] veth0_macvtap: left promiscuous mode
[  101.155220][ T5880] veth1_vlan: left promiscuous mode
[  101.157286][ T5880] veth0_vlan: left promiscuous mode
[  101.375320][ T5880] pim6reg (unregistering): left allmulticast mode
[  101.876807][ T5880] team0 (unregistering): Port device team_slave_1 removed
[  101.923930][ T5880] team0 (unregistering): Port device team_slave_0 removed
[  101.938809][ T5853] Bluetooth: hci2: command tx timeout
[  102.635364][ T6671] bridge0: port 1(bridge_slave_0) entered blocking state
[  102.644308][ T6671] bridge0: port 1(bridge_slave_0) entered disabled state
[  102.647599][ T6671] bridge_slave_0: entered allmulticast mode
[  102.659459][ T6671] bridge_slave_0: entered promiscuous mode
[  102.677044][ T6671] bridge0: port 2(bridge_slave_1) entered blocking state
[  102.680577][ T6671] bridge0: port 2(bridge_slave_1) entered disabled state
[  102.683868][ T6671] bridge_slave_1: entered allmulticast mode
[  102.690708][ T6671] bridge_slave_1: entered promiscuous mode
[  102.797522][ T6671] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  102.836457][ T6671] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  102.949701][ T6671] team0: Port device team_slave_0 added
[  102.972022][ T6671] team0: Port device team_slave_1 added
[  103.084817][ T6671] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.087235][ T6671] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.100642][ T6671] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.117820][ T6671] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.121716][ T6671] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.135215][ T6671] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.261990][ T6671] hsr_slave_0: entered promiscuous mode
[  103.266326][ T6671] hsr_slave_1: entered promiscuous mode
[  103.280060][ T6671] debugfs: 'hsr0' already exists in 'hsr'
[  103.282269][ T6671] Cannot create hsr debugfs directory
[  103.562834][ T6671] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  103.570621][ T6671] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  103.579119][ T6671] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  103.588100][ T6671] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  103.635436][ T6731] loop0: detected capacity change from 0 to 512
[  103.654773][ T6731] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  103.664402][ T6731] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 overlaps superblock
[  103.668831][ T6731] EXT4-fs (loop0): group descriptors corrupted!
[  103.743969][ T6739] netlink: zone id is out of range
[  103.745744][ T6739] netlink: zone id is out of range
[  103.754148][ T6739] netlink: zone id is out of range
[  103.756315][ T6739] netlink: zone id is out of range
[  103.760907][ T6671] 8021q: adding VLAN 0 to HW filter on device bond0
[  103.765632][ T6739] netlink: zone id is out of range
[  103.767440][ T6739] netlink: zone id is out of range
[  103.775614][ T6739] netlink: zone id is out of range
[  103.779136][ T6739] netlink: zone id is out of range
[  103.781112][ T6739] netlink: zone id is out of range
[  103.783161][ T6739] netlink: zone id is out of range
[  103.788039][ T6671] 8021q: adding VLAN 0 to HW filter on device team0
[  103.804079][ T3599] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.807295][ T3599] bridge0: port 1(bridge_slave_0) entered forwarding state
[  103.843711][ T3599] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.847101][ T3599] bridge0: port 2(bridge_slave_1) entered forwarding state
[  104.019646][ T5853] Bluetooth: hci2: command tx timeout
[  104.033927][ T6671] 8021q: adding VLAN 0 to HW filter on device batadv0
[  104.057347][ T6671] veth0_vlan: entered promiscuous mode
[  104.074805][ T6671] veth1_vlan: entered promiscuous mode
[  104.098737][ T6671] veth0_macvtap: entered promiscuous mode
[  104.107793][ T6671] veth1_macvtap: entered promiscuous mode
[  104.125807][ T6671] batman_adv: batadv0: Interface activated: batadv_slave_0
[  104.137734][ T6671] batman_adv: batadv0: Interface activated: batadv_slave_1
[  104.153062][ T5879] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  104.156470][ T5879] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  104.171930][ T5879] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  104.175886][ T5879] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  104.247649][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.256252][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.274795][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  104.277922][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  104.901519][  T792] usb 4-1: new full-speed USB device number 2 using dummy_hcd
[  105.080201][  T792] usb 4-1: config 0 has an invalid interface number: 46 but max is 0
[  105.083093][  T792] usb 4-1: config 0 has no interface number 0
[  105.088846][  T792] usb 4-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  105.097067][  T792] usb 4-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  105.108789][  T792] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.121831][  T792] usb 4-1: Product: syz
[  105.123365][  T792] usb 4-1: Manufacturer: syz
[  105.125350][  T792] usb 4-1: SerialNumber: syz
[  105.154178][  T792] usb 4-1: config 0 descriptor??
[  105.156997][ T6772] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  105.166419][  T792] ums-karma 4-1:0.46: USB Mass Storage device detected
[  105.260215][  T792] ums-karma 4-1:0.46: probe with driver ums-karma failed with error -5
[  105.471163][ T6807] nfs: Deprecated parameter 'nointr'
[  105.494750][ T5919] hid (null): global environment stack underflow
[  105.503159][ T5919] hid (null): unknown global tag 0xe
[  105.528689][ T5919] hid-generic 0005:0B57:000F.0002: reserved main item tag 0xe
[  105.536505][ T5919] hid-generic 0005:0B57:000F.0002: global environment stack underflow
[  105.540942][ T5919] hid-generic 0005:0B57:000F.0002: item 0 1 1 11 parsing failed
[  105.545153][ T5919] hid-generic 0005:0B57:000F.0002: probe with driver hid-generic failed with error -22
[  105.858959][  T792] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  106.008628][  T792] usb 1-1: Using ep0 maxpacket: 16
[  106.017725][  T792] usb 1-1: config 0 has an invalid interface number: 105 but max is 0
[  106.026400][  T792] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  106.039929][  T792] usb 1-1: config 0 has no interface number 0
[  106.058146][  T792] usb 1-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  106.069683][  T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.077819][  T792] usb 1-1: Product: syz
[  106.083979][  T792] usb 1-1: Manufacturer: syz
[  106.098714][ T5853] Bluetooth: hci2: command tx timeout
[  106.111774][  T792] usb 1-1: SerialNumber: syz
[  106.134412][  T792] usb 1-1: config 0 descriptor??
[  106.150519][  T792] uvcvideo 1-1:0.105: probe with driver uvcvideo failed with error -22
[  106.711155][   T47] usb 1-1: USB disconnect, device number 5
[  107.290674][ T6846] loop0: detected capacity change from 0 to 512
[  107.307827][ T6846] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  107.314702][ T6846] UDF-fs: Scanning with blocksize 512 failed
[  107.320984][ T6846] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  107.332180][ T6846] UDF-fs: Scanning with blocksize 1024 failed
[  107.336996][ T6846] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  107.343931][ T6846] UDF-fs: Scanning with blocksize 2048 failed
[  107.347866][ T6846] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  107.357103][ T6846] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  107.777406][  T792] usb 4-1: USB disconnect, device number 2
[  108.196419][ T5853] Bluetooth: hci2: command tx timeout
[  108.254195][ T6873] loop0: detected capacity change from 0 to 512
[  108.262914][   T33] kauditd_printk_skb: 12 callbacks suppressed
[  108.262928][   T33] audit: type=1326 audit(2000000026.270:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.1.329" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c75d8ebe9 code=0x7ffc0000
[  108.288765][  T792] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  108.297430][   T33] audit: type=1326 audit(2000000026.270:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.1.329" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c75d8ebe9 code=0x7ffc0000
[  108.297455][   T33] audit: type=1326 audit(2000000026.280:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.1.329" exe="/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f7c75d8ebe9 code=0x7ffc0000
[  108.297470][   T33] audit: type=1326 audit(2000000026.280:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.1.329" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c75d8ebe9 code=0x7ffc0000
[  108.297492][   T33] audit: type=1326 audit(2000000026.280:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.1.329" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c75d8ebe9 code=0x7ffc0000
[  108.297507][   T33] audit: type=1326 audit(2000000026.280:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.1.329" exe="/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f7c75d8ebe9 code=0x7ffc0000
[  108.297548][   T33] audit: type=1326 audit(2000000026.280:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.1.329" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c75d8ebe9 code=0x7ffc0000
[  108.297565][   T33] audit: type=1326 audit(2000000026.280:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6872 comm="syz.1.329" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7c75d8ebe9 code=0x7ffc0000
[  108.298721][ T6873] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  108.362739][ T6873] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  108.383831][ T6873] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.328: corrupted inode contents
[  108.391149][ T6873] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.328: mark_inode_dirty error
[  108.396706][ T6873] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.328: corrupted inode contents
[  108.405314][ T6873] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.328: corrupted inode contents
[  108.412103][ T6873] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.328: mark_inode_dirty error
[  108.416449][ T6873] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.328: corrupted inode contents
[  108.425478][ T6873] EXT4-fs error (device loop0): __ext4_ext_dirty:206: inode #2: comm syz.0.328: mark_inode_dirty error
[  108.431231][ T6873] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #2: comm syz.0.328: corrupted inode contents
[  108.436048][ T6873] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #2: comm syz.0.328: mark_inode_dirty error
[  108.455365][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  108.523047][  T792] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice= 5.76
[  108.527773][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  108.545699][  T792] usb 4-1: config 0 descriptor??
[  108.574033][  T792] usb_8dev 4-1:0.0 can0: sending command message failed
[  108.576438][  T792] usb_8dev 4-1:0.0 can0: can't get firmware version
[  108.697712][  T792] usb_8dev 4-1:0.0: probe with driver usb_8dev failed with error -22
[  109.232559][ T5919] usb 4-1: USB disconnect, device number 3
[  109.580156][ T6907] fuse: Bad value for 'fd'
[  109.756193][ T6915] loop0: detected capacity change from 0 to 512
[  109.774709][ T6915] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  109.840912][ T6915] FAT-fs (loop0): FAT read failed (blocknr 1568)
[  110.040756][ T6926] loop0: detected capacity change from 0 to 8192
[  110.099407][ T6931] loop1: detected capacity change from 0 to 1024
[  110.130714][ T6931] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.167266][ T6931] EXT4-fs error (device loop1): ext4_lookup:1787: comm syz.1.348: inode #12: comm syz.1.348: iget: illegal inode #
[  110.174259][ T6931] EXT4-fs (loop1): Remounting filesystem read-only
[  110.229696][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.256850][ T6919] loop3: detected capacity change from 0 to 32768
[  110.271138][ T6919] bcachefs (/dev/loop3): error validating superblock: Invalid superblock layout type 7
[  110.276597][ T6919] bcachefs: bch2_fs_get_tree() error: invalid_sb_layout_type
[  110.420281][   T33] audit: type=1800 audit(2000000028.350:44): pid=6937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.346" name="file1" dev="loop0" ino=1048605 res=0 errno=0
[  111.102428][ T6940] loop1: detected capacity change from 0 to 40427
[  111.134898][ T6940] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  111.137479][ T6940] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  111.379967][ T6940] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  111.387593][ T6940] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  111.391455][ T6940] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  111.543898][ T6940] bio_check_eod: 55 callbacks suppressed
[  111.543916][ T6940] syz.1.351: attempt to access beyond end of device
[  111.543916][ T6940] loop1: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  112.011669][ T5852] syz-executor: attempt to access beyond end of device
[  112.011669][ T5852] loop1: rw=2051, sector=49152, nr_sectors = 4096 limit=40427
[  112.022099][ T5852] syz-executor: attempt to access beyond end of device
[  112.022099][ T5852] loop1: rw=2051, sector=57344, nr_sectors = 16384 limit=40427
[  112.038647][ T5852] F2FS-fs (loop1): Issue discard(6144, 6144, 512) failed, ret: -5
[  112.045915][ T5852] F2FS-fs (loop1): Issue discard(7168, 7168, 2048) failed, ret: -5
[  112.092633][ T6978] netlink: 244 bytes leftover after parsing attributes in process `syz.0.363'.
[  112.706957][ T6989] loop1: detected capacity change from 0 to 40427
[  112.719643][ T6989] F2FS-fs (loop1): invalid crc value
[  112.830110][ T6989] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  112.834897][ T6993] loop0: detected capacity change from 0 to 32768
[  112.839053][ T6989] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  112.850069][ T6993] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section crypt: wrong size (got 24 should be 64)
[  112.850069][ T6993] crypt (size 24):
[  112.850069][ T6993] KFD:               3
[  112.850069][ T6993] scrypt n:          0
[  112.850069][ T6993] scrypt r:          0
[  112.850069][ T6993] scrypt p:          0
[  112.850069][ T6993] 
[  112.893984][ T6993] bcachefs: bch2_fs_get_tree() error: invalid_sb_crypt
[  112.922294][ T6989] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0]
[  112.939539][ T6989] syz.1.368: attempt to access beyond end of device
[  112.939539][ T6989] loop1: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  112.953962][ T6989] syz.1.368: attempt to access beyond end of device
[  112.953962][ T6989] loop1: rw=2049, sector=53256, nr_sectors = 136 limit=40427
[  113.015043][ T5852] syz-executor: attempt to access beyond end of device
[  113.015043][ T5852] loop1: rw=2049, sector=40960, nr_sectors = 32 limit=40427
[  113.030548][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  113.030562][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  113.030567][ T5852] Call Trace:
[  113.030571][ T5852]  <TASK>
[  113.030575][ T5852]  dump_stack_lvl+0x189/0x250
[  113.030590][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[  113.030599][ T5852]  ? __pfx_queue_work_on+0x10/0x10
[  113.030606][ T5852]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  113.030615][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  113.030628][ T5852]  f2fs_handle_critical_error+0x37c/0x540
[  113.030641][ T5852]  f2fs_write_end_io+0x886/0xb60
[  113.030656][ T5852]  __submit_merged_bio+0x27a/0x6a0
[  113.030665][ T5852]  ? up_write+0x1c4/0x420
[  113.030675][ T5852]  __submit_merged_write_cond+0x44c/0x530
[  113.030687][ T5852]  f2fs_sync_node_pages+0x1479/0x15e0
[  113.030711][ T5852]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  113.030732][ T5852]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  113.030741][ T5852]  ? up_write+0x1c4/0x420
[  113.030747][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[  113.030758][ T5852]  f2fs_write_checkpoint+0xe6f/0x1df0
[  113.030774][ T5852]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  113.030801][ T5852]  ? kill_f2fs_super+0x298/0x6c0
[  113.030810][ T5852]  kill_f2fs_super+0x2c3/0x6c0
[  113.030820][ T5852]  ? __pfx_kill_f2fs_super+0x10/0x10
[  113.030826][ T5852]  ? radix_tree_delete_item+0x2b6/0x400
[  113.030838][ T5852]  ? shrinker_free+0x2ce/0x3e0
[  113.030847][ T5852]  deactivate_locked_super+0xbc/0x130
[  113.030857][ T5852]  cleanup_mnt+0x425/0x4c0
[  113.030866][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[  113.030876][ T5852]  task_work_run+0x1d4/0x260
[  113.030887][ T5852]  ? __pfx_task_work_run+0x10/0x10
[  113.030895][ T5852]  ? __x64_sys_umount+0x122/0x160
[  113.030906][ T5852]  ? exit_to_user_mode_loop+0x40/0x110
[  113.030918][ T5852]  exit_to_user_mode_loop+0xec/0x110
[  113.030927][ T5852]  do_syscall_64+0x2bd/0x3b0
[  113.030936][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[  113.030944][ T5852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.030951][ T5852]  ? exc_page_fault+0x9f/0xf0
[  113.030961][ T5852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.030967][ T5852] RIP: 0033:0x7f7c75d8ff17
[  113.030975][ T5852] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  113.030981][ T5852] RSP: 002b:00007ffd19c97788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  113.030990][ T5852] RAX: 0000000000000000 RBX: 00007f7c75e11c05 RCX: 00007f7c75d8ff17
[  113.030995][ T5852] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd19c97840
[  113.030999][ T5852] RBP: 00007ffd19c97840 R08: 0000000000000000 R09: 0000000000000000
[  113.031003][ T5852] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd19c988d0
[  113.031007][ T5852] R13: 00007f7c75e11c05 R14: 000000000001b8d4 R15: 00007ffd19c98910
[  113.031019][ T5852]  </TASK>
[  113.031023][ T5852] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  113.157962][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  113.157976][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  113.157980][ T5852] Call Trace:
[  113.157984][ T5852]  <TASK>
[  113.157988][ T5852]  dump_stack_lvl+0x189/0x250
[  113.158002][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[  113.158011][ T5852]  ? __pfx_queue_work_on+0x10/0x10
[  113.158018][ T5852]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  113.158027][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  113.158040][ T5852]  f2fs_handle_critical_error+0x37c/0x540
[  113.158054][ T5852]  f2fs_write_end_io+0x886/0xb60
[  113.158069][ T5852]  __submit_merged_bio+0x27a/0x6a0
[  113.158078][ T5852]  ? up_write+0x1c4/0x420
[  113.158088][ T5852]  __submit_merged_write_cond+0x44c/0x530
[  113.158101][ T5852]  f2fs_sync_node_pages+0x1479/0x15e0
[  113.158119][ T5852]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  113.158141][ T5852]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  113.158150][ T5852]  ? up_write+0x1c4/0x420
[  113.158156][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[  113.158166][ T5852]  f2fs_write_checkpoint+0xe6f/0x1df0
[  113.158184][ T5852]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  113.158235][ T5852]  ? kill_f2fs_super+0x298/0x6c0
[  113.158247][ T5852]  kill_f2fs_super+0x2c3/0x6c0
[  113.158257][ T5852]  ? __pfx_kill_f2fs_super+0x10/0x10
[  113.158262][ T5852]  ? radix_tree_delete_item+0x2b6/0x400
[  113.158275][ T5852]  ? shrinker_free+0x2ce/0x3e0
[  113.158284][ T5852]  deactivate_locked_super+0xbc/0x130
[  113.158294][ T5852]  cleanup_mnt+0x425/0x4c0
[  113.158302][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[  113.158314][ T5852]  task_work_run+0x1d4/0x260
[  113.158325][ T5852]  ? __pfx_task_work_run+0x10/0x10
[  113.158333][ T5852]  ? __x64_sys_umount+0x122/0x160
[  113.158344][ T5852]  ? exit_to_user_mode_loop+0x40/0x110
[  113.158356][ T5852]  exit_to_user_mode_loop+0xec/0x110
[  113.158365][ T5852]  do_syscall_64+0x2bd/0x3b0
[  113.158374][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[  113.158382][ T5852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.158389][ T5852]  ? exc_page_fault+0x9f/0xf0
[  113.158398][ T5852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.158404][ T5852] RIP: 0033:0x7f7c75d8ff17
[  113.158412][ T5852] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  113.158418][ T5852] RSP: 002b:00007ffd19c97788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  113.158426][ T5852] RAX: 0000000000000000 RBX: 00007f7c75e11c05 RCX: 00007f7c75d8ff17
[  113.158430][ T5852] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd19c97840
[  113.158434][ T5852] RBP: 00007ffd19c97840 R08: 0000000000000000 R09: 0000000000000000
[  113.158438][ T5852] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd19c988d0
[  113.158442][ T5852] R13: 00007f7c75e11c05 R14: 000000000001b8d4 R15: 00007ffd19c98910
[  113.158455][ T5852]  </TASK>
[  113.274582][ T5852] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  113.281573][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  113.281587][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  113.281591][ T5852] Call Trace:
[  113.281594][ T5852]  <TASK>
[  113.281598][ T5852]  dump_stack_lvl+0x189/0x250
[  113.281612][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[  113.281621][ T5852]  ? __pfx_queue_work_on+0x10/0x10
[  113.281628][ T5852]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  113.281638][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  113.281651][ T5852]  f2fs_handle_critical_error+0x37c/0x540
[  113.281664][ T5852]  f2fs_write_end_io+0x886/0xb60
[  113.281679][ T5852]  __submit_merged_bio+0x27a/0x6a0
[  113.281688][ T5852]  ? up_write+0x1c4/0x420
[  113.281699][ T5852]  __submit_merged_write_cond+0x44c/0x530
[  113.281718][ T5852]  f2fs_sync_node_pages+0x1479/0x15e0
[  113.281736][ T5852]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  113.281758][ T5852]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  113.281770][ T5852]  ? up_write+0x1c4/0x420
[  113.281776][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[  113.281786][ T5852]  f2fs_write_checkpoint+0xe6f/0x1df0
[  113.281804][ T5852]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  113.281833][ T5852]  ? kill_f2fs_super+0x298/0x6c0
[  113.281843][ T5852]  kill_f2fs_super+0x2c3/0x6c0
[  113.281853][ T5852]  ? __pfx_kill_f2fs_super+0x10/0x10
[  113.281859][ T5852]  ? radix_tree_delete_item+0x2b6/0x400
[  113.281871][ T5852]  ? shrinker_free+0x2ce/0x3e0
[  113.281881][ T5852]  deactivate_locked_super+0xbc/0x130
[  113.281891][ T5852]  cleanup_mnt+0x425/0x4c0
[  113.281899][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[  113.281909][ T5852]  task_work_run+0x1d4/0x260
[  113.281920][ T5852]  ? __pfx_task_work_run+0x10/0x10
[  113.281927][ T5852]  ? __x64_sys_umount+0x122/0x160
[  113.281938][ T5852]  ? exit_to_user_mode_loop+0x40/0x110
[  113.281950][ T5852]  exit_to_user_mode_loop+0xec/0x110
[  113.281959][ T5852]  do_syscall_64+0x2bd/0x3b0
[  113.281967][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[  113.281975][ T5852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.281981][ T5852]  ? exc_page_fault+0x9f/0xf0
[  113.281991][ T5852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.281997][ T5852] RIP: 0033:0x7f7c75d8ff17
[  113.282004][ T5852] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  113.282010][ T5852] RSP: 002b:00007ffd19c97788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  113.282018][ T5852] RAX: 0000000000000000 RBX: 00007f7c75e11c05 RCX: 00007f7c75d8ff17
[  113.282023][ T5852] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd19c97840
[  113.282027][ T5852] RBP: 00007ffd19c97840 R08: 0000000000000000 R09: 0000000000000000
[  113.282031][ T5852] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd19c988d0
[  113.282035][ T5852] R13: 00007f7c75e11c05 R14: 000000000001b8d4 R15: 00007ffd19c98910
[  113.282048][ T5852]  </TASK>
[  113.282051][ T5852] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  113.346746][ T7019] loop0: detected capacity change from 0 to 8
[  113.382382][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  113.382395][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  113.382399][ T5852] Call Trace:
[  113.382403][ T5852]  <TASK>
[  113.382407][ T5852]  dump_stack_lvl+0x189/0x250
[  113.382421][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[  113.382429][ T5852]  ? __pfx_queue_work_on+0x10/0x10
[  113.382437][ T5852]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  113.382455][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  113.382469][ T5852]  f2fs_handle_critical_error+0x37c/0x540
[  113.382510][ T5852]  f2fs_write_end_io+0x886/0xb60
[  113.382526][ T5852]  __submit_merged_bio+0x27a/0x6a0
[  113.382534][ T5852]  ? up_write+0x1c4/0x420
[  113.382545][ T5852]  __submit_merged_write_cond+0x44c/0x530
[  113.382558][ T5852]  f2fs_sync_node_pages+0x1479/0x15e0
[  113.382576][ T5852]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  113.382597][ T5852]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  113.382606][ T5852]  ? up_write+0x1c4/0x420
[  113.382612][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[  113.382623][ T5852]  f2fs_write_checkpoint+0xe6f/0x1df0
[  113.382640][ T5852]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  113.382669][ T5852]  ? kill_f2fs_super+0x298/0x6c0
[  113.382678][ T5852]  kill_f2fs_super+0x2c3/0x6c0
[  113.382688][ T5852]  ? __pfx_kill_f2fs_super+0x10/0x10
[  113.382694][ T5852]  ? radix_tree_delete_item+0x2b6/0x400
[  113.382707][ T5852]  ? shrinker_free+0x2ce/0x3e0
[  113.382716][ T5852]  deactivate_locked_super+0xbc/0x130
[  113.382726][ T5852]  cleanup_mnt+0x425/0x4c0
[  113.382734][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[  113.382744][ T5852]  task_work_run+0x1d4/0x260
[  113.382755][ T5852]  ? __pfx_task_work_run+0x10/0x10
[  113.382762][ T5852]  ? __x64_sys_umount+0x122/0x160
[  113.382773][ T5852]  ? exit_to_user_mode_loop+0x40/0x110
[  113.382784][ T5852]  exit_to_user_mode_loop+0xec/0x110
[  113.382793][ T5852]  do_syscall_64+0x2bd/0x3b0
[  113.382802][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[  113.382810][ T5852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.382816][ T5852]  ? exc_page_fault+0x9f/0xf0
[  113.382825][ T5852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  113.382832][ T5852] RIP: 0033:0x7f7c75d8ff17
[  113.382839][ T5852] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  113.382845][ T5852] RSP: 002b:00007ffd19c97788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  113.382853][ T5852] RAX: 0000000000000000 RBX: 00007f7c75e11c05 RCX: 00007f7c75d8ff17
[  113.382857][ T5852] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd19c97840
[  113.382861][ T5852] RBP: 00007ffd19c97840 R08: 0000000000000000 R09: 0000000000000000
[  113.382865][ T5852] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd19c988d0
[  113.382869][ T5852] R13: 00007f7c75e11c05 R14: 000000000001b8d4 R15: 00007ffd19c98910
[  113.382882][ T5852]  </TASK>
[  113.382886][ T5852] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  114.144892][ T7034] netlink: 'syz.1.385': attribute type 2 has an invalid length.
[  114.147591][ T7034] netlink: 'syz.1.385': attribute type 8 has an invalid length.
[  114.152074][ T7034] netlink: 1148 bytes leftover after parsing attributes in process `syz.1.385'.
[  114.268991][ T5900] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  114.431609][ T5900] usb 1-1: config 0 has an invalid interface number: 255 but max is 0
[  114.434735][ T5900] usb 1-1: config 0 has no interface number 0
[  114.437360][ T5900] usb 1-1: config 0 interface 255 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88
[  114.442453][ T5900] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[  114.446149][ T5900] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0xA has an invalid bInterval 255, changing to 11
[  114.450521][ T5900] usb 1-1: config 0 interface 255 altsetting 0 endpoint 0xA has invalid maxpacket 59391, setting to 1024
[  114.529867][ T5900] usb 1-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49
[  114.542400][ T5900] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  114.545384][ T5900] usb 1-1: Product: syz
[  114.547006][ T5900] usb 1-1: Manufacturer: syz
[  114.549017][ T5900] usb 1-1: SerialNumber: syz
[  114.557115][ T5900] usb 1-1: config 0 descriptor??
[  114.560824][ T7028] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  114.832098][ T5853] Bluetooth: hci0: ACL packet for unknown connection handle 0
[  115.028397][   T47] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  115.178498][   T47] usb 2-1: Using ep0 maxpacket: 16
[  115.183383][   T47] usb 2-1: config 1 has an invalid interface number: 223 but max is 0
[  115.186742][   T47] usb 2-1: config 1 has no interface number 0
[  115.189299][   T47] usb 2-1: config 1 interface 223 has no altsetting 0
[  115.194261][   T47] usb 2-1: New USB device found, idVendor=05ac, idProduct=0262, bcdDevice=42.53
[  115.197742][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.202300][   T47] usb 2-1: Product: syz
[  115.204458][   T47] usb 2-1: Manufacturer: syz
[  115.206532][   T47] usb 2-1: SerialNumber: syz
[  115.218166][   T47] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.223/input/input7
[  115.418065][ T5282] bcm5974 2-1:1.223: could not read from device
[  115.453311][ T5282] bcm5974 2-1:1.223: could not read from device
[  115.459209][   T47] usb 2-1: USB disconnect, device number 3
[  115.557140][ T5849] udevd[5849]: Error opening device "/dev/input/event3": No such file or directory
[  115.572356][ T5849] udevd[5849]: Unable to EVIOCGABS device "/dev/input/event3"
[  115.582608][ T5849] udevd[5849]: Unable to EVIOCGABS device "/dev/input/event3"
[  115.585719][ T5849] udevd[5849]: Unable to EVIOCGABS device "/dev/input/event3"
[  115.600048][ T5849] udevd[5849]: Unable to EVIOCGABS device "/dev/input/event3"
[  116.283940][ T7088] loop3: detected capacity change from 0 to 32768
[  116.334858][ T7088] ERROR: (device loop3): dbAlloc: the hint is outside the map
[  116.334858][ T7088] 
[  116.350242][ T7088] ERROR: (device loop3): remounting filesystem as read-only
[  116.688414][ T7112] loop3: detected capacity change from 0 to 256
[  116.840659][ T7114] loop0: detected capacity change from 0 to 40427
[  116.844286][ T7114] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  116.847477][ T7114] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  116.851694][ T7114] F2FS-fs (loop0): invalid crc value
[  116.925661][ T7114] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  116.936209][ T7114] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  116.939426][ T7114] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  118.033202][   T33] audit: type=1800 audit(2000000035.220:45): pid=7125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.408" name="file1" dev="loop0" ino=10 res=0 errno=0
[  118.092792][ T7104] loop1: detected capacity change from 0 to 32768
[  118.937222][ T7153] bond_slave_0: entered promiscuous mode
[  118.940484][ T7153] bond_slave_1: entered promiscuous mode
[  118.944795][ T7153] bond_slave_0: left promiscuous mode
[  118.946938][ T7153] bond_slave_1: left promiscuous mode
[  119.190115][ T7161] loop1: detected capacity change from 0 to 512
[  119.200122][ T7161] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  119.212278][ T7163] loop3: detected capacity change from 0 to 64
[  119.224255][ T7161] EXT4-fs (loop1): orphan cleanup on readonly fs
[  119.249208][ T7161] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.417: bg 0: block 248: padding at end of block bitmap is not set
[  119.250327][ T7163] MINIX-fs: mounting unchecked file system, running fsck is recommended
[  119.256102][ T7161] Quota error (device loop1): write_blk: dquota write failed
[  119.263247][ T7161] Quota error (device loop1): qtree_write_dquot: Error -117 occurred while creating quota
[  119.267238][ T7161] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.417: Failed to acquire dquot type 1
[  119.273353][ T7161] EXT4-fs (loop1): 1 truncate cleaned up
[  119.284524][ T7161] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  119.339073][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.767271][ T5848] syz-executor: attempt to access beyond end of device
[  119.767271][ T5848] loop0: rw=2049, sector=40960, nr_sectors = 8 limit=40427
[  119.772515][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  119.772528][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  119.772534][ T5848] Call Trace:
[  119.772537][ T5848]  <TASK>
[  119.772540][ T5848]  dump_stack_lvl+0x189/0x250
[  119.772572][ T5848]  ? __pfx_dump_stack_lvl+0x10/0x10
[  119.772580][ T5848]  ? __pfx_queue_work_on+0x10/0x10
[  119.772591][ T5848]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  119.772605][ T5848]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  119.772623][ T5848]  f2fs_handle_critical_error+0x37c/0x540
[  119.772643][ T5848]  f2fs_write_end_io+0x886/0xb60
[  119.772664][ T5848]  __submit_merged_bio+0x27a/0x6a0
[  119.772673][ T5848]  ? up_write+0x1c4/0x420
[  119.772684][ T5848]  __submit_merged_write_cond+0x44c/0x530
[  119.772701][ T5848]  f2fs_sync_node_pages+0x1479/0x15e0
[  119.772721][ T5848]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  119.772743][ T5848]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  119.772753][ T5848]  ? up_write+0x1c4/0x420
[  119.772759][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[  119.772770][ T5848]  f2fs_write_checkpoint+0xe6f/0x1df0
[  119.772788][ T5848]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  119.772818][ T5848]  ? kill_f2fs_super+0x298/0x6c0
[  119.772828][ T5848]  kill_f2fs_super+0x2c3/0x6c0
[  119.772844][ T5848]  ? __pfx_kill_f2fs_super+0x10/0x10
[  119.772852][ T5848]  ? radix_tree_delete_item+0x2b6/0x400
[  119.772873][ T5848]  ? shrinker_free+0x2ce/0x3e0
[  119.772884][ T5848]  deactivate_locked_super+0xbc/0x130
[  119.772894][ T5848]  cleanup_mnt+0x425/0x4c0
[  119.772903][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.772913][ T5848]  task_work_run+0x1d4/0x260
[  119.772927][ T5848]  ? __pfx_task_work_run+0x10/0x10
[  119.772939][ T5848]  ? __x64_sys_umount+0x122/0x160
[  119.772958][ T5848]  ? exit_to_user_mode_loop+0x40/0x110
[  119.772975][ T5848]  exit_to_user_mode_loop+0xec/0x110
[  119.772984][ T5848]  do_syscall_64+0x2bd/0x3b0
[  119.772993][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[  119.773001][ T5848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.773008][ T5848]  ? exc_page_fault+0x9f/0xf0
[  119.773018][ T5848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  119.773024][ T5848] RIP: 0033:0x7f0f3c78ff17
[  119.773032][ T5848] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  119.773038][ T5848] RSP: 002b:00007ffd76413f08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  119.773048][ T5848] RAX: 0000000000000000 RBX: 00007f0f3c811c05 RCX: 00007f0f3c78ff17
[  119.773052][ T5848] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd76413fc0
[  119.773056][ T5848] RBP: 00007ffd76413fc0 R08: 0000000000000000 R09: 0000000000000000
[  119.773060][ T5848] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd76415050
[  119.773065][ T5848] R13: 00007f0f3c811c05 R14: 000000000001ccb4 R15: 00007ffd76415090
[  119.773078][ T5848]  </TASK>
[  119.775930][ T5848] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  120.069371][ T5887] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  120.116736][ T7190] loop3: detected capacity change from 0 to 32768
[  120.165171][ T7190] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  120.219776][ T5887] usb 2-1: Using ep0 maxpacket: 8
[  120.230054][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  120.234111][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  120.238861][   T33] audit: type=1800 audit(2000000038.240:46): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.431" name="file1" dev="loop3" ino=17059 res=0 errno=0
[  120.247635][ T5887] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  120.259788][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12592, setting to 1024
[  120.264009][ T5887] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  120.267981][ T5887] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  120.272193][   T33] audit: type=1800 audit(2000000038.250:47): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.431" name="file1" dev="loop3" ino=17059 res=0 errno=0
[  120.272409][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.283609][ T5887] usb 2-1: config 0 descriptor??
[  120.287016][ T7188] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  120.381070][ T6671] ocfs2: Unmounting device (7,3) on (node local)
[  120.518042][ T7202] team0: Device gtp0 is of different type
[  120.756230][ T5853] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[  120.757273][ T5887] usb 2-1: USB disconnect, device number 4
[  121.582361][ T7212] loop0: detected capacity change from 0 to 4096
[  121.584676][ T7214] loop1: detected capacity change from 0 to 1024
[  121.707044][ T7212] ntfs3(loop0): ino=1a, mi_enum_attr
[  121.726886][ T7212] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  122.676873][ T7221] loop0: detected capacity change from 0 to 2048
[  122.714187][ T7221] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  122.859573][ T7228] netlink: 'syz.0.444': attribute type 13 has an invalid length.
[  123.053854][ T7228] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.057209][ T7228] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.128609][ T7235] net_ratelimit: 61 callbacks suppressed
[  123.128622][ T7235] openvswitch: netlink: Missing key (keys=40, expected=80)
[  123.210311][ T7226] loop3: detected capacity change from 0 to 32768
[  123.270992][   T33] audit: type=1800 audit(2000000041.270:48): pid=7226 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.443" name="file1" dev="loop3" ino=4 res=0 errno=0
[  123.319268][ T7228] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  123.327888][ T7228] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  123.551454][ T7226] ERROR: (device loop3): dbAdjCtl: the maximum free buddy is not the old root
[  123.551454][ T7226] 
[  123.555907][ T7226] ERROR: (device loop3): remounting filesystem as read-only
[  123.581370][ T5862] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.584936][ T5862] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0
[  123.605070][ T5862] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.654304][ T5862] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0
[  123.657586][ T5862] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.666991][ T5862] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0
[  123.678476][ T5862] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  123.688993][ T5862] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0
[  124.477891][ T7251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.452'.
[  125.198660][ T1272] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  125.368485][ T1272] usb 2-1: Using ep0 maxpacket: 16
[  125.374414][ T1272] usb 2-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  125.377865][ T1272] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  125.382362][ T1272] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  125.385412][ T1272] usb 2-1: Duplicate descriptor for config 1 interface 0 altsetting 0, skipping
[  125.392646][ T1272] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 1.40
[  125.395857][ T1272] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.398380][ T5887] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  125.398845][ T1272] usb 2-1: Product: syz
[  125.403186][ T1272] usb 2-1: Manufacturer: syz
[  125.404976][ T1272] usb 2-1: SerialNumber: syz
[  125.550851][ T5887] usb 4-1: config 8 has an invalid interface number: 177 but max is 0
[  125.554796][ T5887] usb 4-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[  125.560101][ T5887] usb 4-1: config 8 has no interface number 0
[  125.562776][ T5887] usb 4-1: config 8 interface 177 altsetting 9 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  125.569715][ T5887] usb 4-1: config 8 interface 177 has no altsetting 0
[  125.573113][ T5887] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  125.577468][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  125.591324][ T5887] ir_toy 4-1:8.177: required endpoints not found
[  125.628883][ T1272] usb 2-1: 0:2 : does not exist
[  125.648057][ T1272] usb 2-1: USB disconnect, device number 5
[  125.791474][ T5887] usb 4-1: USB disconnect, device number 4
[  126.195202][ T7273] loop1: detected capacity change from 0 to 2048
[  126.206259][ T7273] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=4096, location=4096
[  126.211158][ T7273] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  126.215326][ T7273] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  126.220779][ T7273] UDF-fs: Scanning with blocksize 512 failed
[  126.227188][ T7273] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  126.231555][ T7273] UDF-fs: Scanning with blocksize 1024 failed
[  126.238064][ T7273] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  126.242268][ T7273] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  126.245998][ T7273] UDF-fs: Scanning with blocksize 2048 failed
[  126.250032][ T7273] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  126.253782][ T7273] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=512, location=512
[  126.257164][ T7273] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  126.260140][ T7273] UDF-fs: Scanning with blocksize 4096 failed
[  126.262519][ T7273] UDF-fs: warning (device loop1): udf_fill_super: No partition found (1)
[  126.317859][ T7275] loop1: detected capacity change from 0 to 256
[  126.371869][ T7275] FAT-fs (loop1): Directory bread(block 64) failed
[  126.374101][ T7275] FAT-fs (loop1): Directory bread(block 65) failed
[  126.376353][ T7275] FAT-fs (loop1): Directory bread(block 66) failed
[  126.392991][ T7275] FAT-fs (loop1): Directory bread(block 67) failed
[  126.396509][ T7275] FAT-fs (loop1): Directory bread(block 68) failed
[  126.400034][ T7275] FAT-fs (loop1): Directory bread(block 69) failed
[  126.402620][ T7275] FAT-fs (loop1): Directory bread(block 70) failed
[  126.405513][ T7275] FAT-fs (loop1): Directory bread(block 71) failed
[  126.408300][ T7275] FAT-fs (loop1): Directory bread(block 72) failed
[  126.410664][ T7275] FAT-fs (loop1): Directory bread(block 73) failed
[  126.419287][ T7279] loop3: detected capacity change from 0 to 4096
[  126.424475][ T7279] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  126.432979][ T7279] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 4096)
[  126.436948][ T7279] NILFS (loop3): mounting unchecked fs
[  126.442497][ T7279] NILFS (loop3): invalid segment: Checksum error in segment payload
[  126.445719][ T7279] NILFS (loop3): unable to fall back to spare super block
[  126.452537][ T7279] NILFS (loop3): error -22 while searching super root
[  126.677285][ T7287] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  126.677285][ T7287] The task syz.1.468 (7287) triggered the difference, watch for misbehavior.
[  126.868586][ T7289] process 'syz.3.470' launched '/dev/fd/7' with NULL argv: empty string added
[  127.512645][ T7293] vivid-003: disconnect
[  127.516546][ T7292] vivid-003: reconnect
[  127.636237][ T7299] loop3: detected capacity change from 0 to 8
[  127.891833][ T7311] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2)
[  127.996341][ T7319] loop3: detected capacity change from 0 to 256
[  128.030451][ T7319] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  128.335015][ T7321] loop0: detected capacity change from 0 to 64
[  128.476444][ T7323] loop3: detected capacity change from 0 to 512
[  129.040675][   T33] audit: type=1326 audit(2000000047.040:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.0.494" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3c78ebe9 code=0x7ffc0000
[  129.054479][   T33] audit: type=1326 audit(2000000047.040:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.0.494" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0f3c78ebe9 code=0x7ffc0000
[  129.070356][   T33] audit: type=1326 audit(2000000047.040:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7339 comm="syz.0.494" exe="/syz-executor" sig=0 arch=c000003e syscall=23 compat=0 ip=0x7f0f3c78ebe9 code=0x7ffc0000
[  130.301172][ T7346] loop0: detected capacity change from 0 to 512
[  130.307733][ T7346] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  130.839003][ T5919] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  130.924368][ T7360] netlink: 'syz.1.504': attribute type 1 has an invalid length.
[  130.947256][ T7360] bond1: (slave gretap1): making interface the new active one
[  130.953650][ T7360] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  131.000734][ T5919] usb 4-1: Using ep0 maxpacket: 16
[  131.005905][ T5919] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  131.010325][ T5919] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  131.014830][ T5919] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  131.027132][ T5919] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  131.038395][ T5919] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.041341][ T5919] usb 4-1: Product: syz
[  131.043109][ T5919] usb 4-1: Manufacturer: syz
[  131.048470][ T5919] usb 4-1: SerialNumber: syz
[  131.463497][ T7370] loop1: detected capacity change from 0 to 32768
[  131.468880][ T7370] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.508 (7370)
[  131.473369][ T5919] usb 4-1: 0:2 : does not exist
[  131.483100][ T7370] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  131.489731][ T7370] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  131.492947][ T7370] BTRFS info (device loop1): disk space caching is enabled
[  131.495880][ T7370] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  131.554526][ T7370] BTRFS info (device loop1): rebuilding free space tree
[  131.580673][ T7370] BTRFS info (device loop1): disabling free space tree
[  131.583726][ T7370] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  131.587728][ T7370] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  131.636542][ T5852] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  132.063086][ T7391] loop1: detected capacity change from 0 to 32768
[  132.124523][ T7391]  loop1: p1 p3 < >
[  132.252433][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  132.261024][ T5859] udevd[5859]: inotify_add_watch(7, /dev/loop1p3, 10) failed: No such file or directory
[  132.379679][ T5919] usb 4-1: USB disconnect, device number 5
[  132.433823][ T6382] udevd[6382]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  132.550592][ T7403] loop1: detected capacity change from 0 to 128
[  132.575655][ T7403] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  132.585815][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  132.589884][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  132.591258][ T7403] ext4 filesystem being mounted at /188/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  132.618064][ T7403] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 ro.
[  132.624457][ T7403] EXT4-fs (loop1): re-mounted 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w.
[  132.652470][ T5852] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  132.964157][   T56] block nbd0: Receive control failed (result -32)
[  132.993364][ T7416] loop3: detected capacity change from 0 to 512
[  133.006229][ T7416] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  133.024224][ T7416] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c11c, mo2=0102]
[  133.034799][ T7416] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.520: corrupted in-inode xattr: e_value size too large
[  133.045026][ T7416] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.520: couldn't read orphan inode 15 (err -117)
[  133.065543][ T7416] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.378683][ T5914] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  133.555080][ T5914] usb 2-1: Using ep0 maxpacket: 32
[  133.590499][ T5914] usb 2-1: unable to get BOS descriptor or descriptor too short
[  133.621513][ T5914] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  133.652150][ T5914] usb 2-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec
[  133.672645][ T5914] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.693368][ T5914] usb 2-1: Product: syz
[  133.697664][ T5914] usb 2-1: Manufacturer: syz
[  133.710899][ T5914] usb 2-1: SerialNumber: syz
[  133.792814][ T5914] usb 2-1: config 0 descriptor??
[  134.026390][ T6671] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.149502][ T5914] usb 2-1: USB disconnect, device number 6
[  134.941906][ T7441] loop1: detected capacity change from 0 to 4096
[  134.955178][ T7441] NILFS (loop1): invalid segment: Checksum error in segment payload
[  134.958079][ T7441] NILFS (loop1): trying rollback from an earlier position
[  134.976482][ T7441] NILFS (loop1): recovery complete
[  135.075218][ T7447] sp0: Synchronizing with TNC
[  135.153437][ T5900] iguanair 1-1:0.255: failed to get version
[  135.180127][ T5900] iguanair 1-1:0.255: probe with driver iguanair failed with error -110
[  135.191922][ T5900] usb 1-1: USB disconnect, device number 6
[  135.322178][ T7457] loop3: detected capacity change from 0 to 2048
[  135.362547][ T7457]  loop3: p1 < > p4
[  135.380925][ T7457] loop3: p4 size 8388608 extends beyond EOD, truncated
[  135.493901][ T7465] Illegal XDP return value 2205515086 on prog  (id 53) dev N/A, expect packet loss!
[  135.581104][ T7468] tipc: Started in network mode
[  135.583468][ T7468] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711
[  135.586793][ T7468] tipc: Enabled bearer <eth:macvtap0>, priority 10
[  135.816067][ T6382] udevd[6382]: inotify_add_watch(7, /dev/loop3p1, 10) failed: No such file or directory
[  135.828929][ T5849] udevd[5849]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  135.853929][ T6382] udevd[6382]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory
[  136.249878][ T7480] loop0: detected capacity change from 0 to 32768
[  136.263813][ T7480] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.548 (7480)
[  136.310931][ T7480] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  136.314995][ T7480] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  136.335888][ T7480] BTRFS info (device loop0): disk space caching is enabled
[  136.347026][ T7480] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  136.524984][ T7515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.558'.
[  136.549812][ T7480] BTRFS info (device loop0): rebuilding free space tree
[  136.602356][ T5900] tipc: Node number set to 9480874
[  136.602394][ T7480] BTRFS info (device loop0): disabling free space tree
[  136.605461][ T7480] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  136.620236][ T7480] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  136.727039][ T7519] netlink: 'syz.1.559': attribute type 1 has an invalid length.
[  136.783869][   T33] audit: type=1800 audit(2000000054.790:52): pid=7480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.548" name="file1" dev="loop0" ino=260 res=0 errno=0
[  136.987021][ T7522] loop1: detected capacity change from 0 to 1024
[  137.034297][ T7522] EXT4-fs: Ignoring removed bh option
[  137.067244][ T7522] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  137.146933][ T7522] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.163747][ T7480] syz.0.548 (7480) used greatest stack depth: 19672 bytes left
[  137.270557][ T5848] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  137.479495][ T5852] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 11. Delete some EAs or run e2fsck.
[  137.513899][ T5852] EXT4-fs error (device loop1): ext4_read_inline_dir:1476: inode #12: block 7: comm syz-executor: path /209/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[  137.538051][ T5852] EXT4-fs (loop1): Remounting filesystem read-only
[  137.560804][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.700991][ T7533] loop1: detected capacity change from 0 to 736
[  137.752220][ T7533] rock: directory entry would overflow storage
[  137.754888][ T7533] rock: sig=0x3b10, size=4, remaining=3
[  137.932248][ T7540] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  137.935705][ T7540] syzkaller0: entered promiscuous mode
[  137.944846][ T7540] syzkaller0: entered allmulticast mode
[  137.970382][ T7540] tipc: Resetting bearer <eth:syzkaller0>
[  137.975103][ T7542] netlink: 'syz.3.567': attribute type 5 has an invalid length.
[  137.979921][ T7539] tipc: Resetting bearer <eth:syzkaller0>
[  137.991020][ T7539] tipc: Disabling bearer <eth:syzkaller0>
[  138.216468][ T7558] binder: binder_mmap: 7556 200000ffb000-200000ffd000 bad vm_flags failed -1
[  138.426177][ T7563] loop3: detected capacity change from 0 to 32768
[  138.435091][ T7563] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.576 (7563)
[  138.450875][ T7563] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  138.466276][ T7563] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  138.470197][ T7563] BTRFS info (device loop3): using free-space-tree
[  138.494371][ T7561] loop1: detected capacity change from 0 to 32768
[  138.574245][ T7561] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  138.610938][ T7563] BTRFS info (device loop3 state M): max_inline set to 0
[  138.615935][ T7561] XFS (loop1): Ending clean mount
[  138.645733][ T7561] XFS (loop1): Quotacheck needed: Please wait.
[  138.708694][ T7561] XFS (loop1): Quotacheck: Done.
[  138.750755][ T5852] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  139.095378][ T7598] loop0: detected capacity change from 0 to 4096
[  139.297544][ T7563] BTRFS info (device loop3 state M): allowing degraded mounts
[  139.301454][ T7563] BTRFS info (device loop3 state M): enabling ssd optimizations
[  139.304971][ T7563] BTRFS info (device loop3 state M): turning on async discard
[  139.319194][ T7563] BTRFS info (device loop3 state M): force clearing of disk cache
[  139.322765][ T7563] BTRFS info (device loop3 state M): max_inline set to 0
[  139.352856][ T6671] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  139.394178][ T7597] loop1: detected capacity change from 0 to 32768
[  139.561729][ T7597] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  139.582539][   T33] audit: type=1800 audit(2000000057.590:53): pid=7597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.578" name="bus" dev="loop1" ino=17058 res=0 errno=0
[  139.600904][ T7605] loop3: detected capacity change from 0 to 128
[  139.612600][ T7605] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  139.618870][   T33] audit: type=1800 audit(2000000057.600:54): pid=7597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.578" name="file1" dev="loop1" ino=17059 res=0 errno=0
[  139.646126][ T5852] ocfs2: Unmounting device (7,1) on (node local)
[  140.250040][ T7609] loop1: detected capacity change from 0 to 40427
[  140.255162][ T7609] F2FS-fs (loop1): build fault injection rate: 14
[  140.258113][ T7609] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  140.266591][ T7609] F2FS-fs (loop1): invalid crc value
[  140.270642][    C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  140.281466][    C1] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  140.331545][ T7609] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  140.335307][ T7609] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  140.344064][ T7609] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  140.363510][ T7609] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  140.370195][ T7609] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_convert_inline_inode+0x6bd/0x880
[  140.378467][ T5919] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  140.405119][ T5852] syz-executor: attempt to access beyond end of device
[  140.405119][ T5852] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  140.425807][ T5852] CPU: 0 UID: 0 PID: 5852 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  140.425827][ T5852] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  140.425834][ T5852] Call Trace:
[  140.425838][ T5852]  <TASK>
[  140.425843][ T5852]  dump_stack_lvl+0x189/0x250
[  140.425862][ T5852]  ? __pfx_dump_stack_lvl+0x10/0x10
[  140.425874][ T5852]  ? __pfx_queue_work_on+0x10/0x10
[  140.425884][ T5852]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  140.425897][ T5852]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  140.425917][ T5852]  f2fs_handle_critical_error+0x37c/0x540
[  140.425935][ T5852]  f2fs_write_end_io+0x886/0xb60
[  140.425957][ T5852]  __submit_merged_bio+0x27a/0x6a0
[  140.425979][ T5852]  __submit_merged_write_cond+0x255/0x530
[  140.425997][ T5852]  f2fs_write_data_pages+0x261d/0x3000
[  140.426034][ T5852]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  140.426057][ T5852]  ? is_bpf_text_address+0x26/0x2b0
[  140.426088][ T5852]  ? kernel_text_address+0xa5/0xe0
[  140.426103][ T5852]  ? __kernel_text_address+0xd/0x40
[  140.426117][ T5852]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  140.426141][ T5852]  ? stack_trace_save+0x9c/0xe0
[  140.426161][ T5852]  ? __lock_acquire+0xab9/0xd20
[  140.426188][ T5852]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  140.426204][ T5852]  do_writepages+0x32e/0x550
[  140.426225][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[  140.426241][ T5852]  filemap_fdatawrite+0x199/0x240
[  140.426257][ T5852]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  140.426330][ T5852]  ? do_raw_spin_unlock+0x4d/0x240
[  140.426348][ T5852]  f2fs_sync_dirty_inodes+0x31f/0x830
[  140.426370][ T5852]  f2fs_write_checkpoint+0x95a/0x1df0
[  140.426399][ T5852]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  140.426444][ T5852]  ? kill_f2fs_super+0x298/0x6c0
[  140.426459][ T5852]  kill_f2fs_super+0x2c3/0x6c0
[  140.426475][ T5852]  ? __pfx_kill_f2fs_super+0x10/0x10
[  140.426483][ T5852]  ? radix_tree_delete_item+0x2b6/0x400
[  140.426503][ T5852]  ? shrinker_free+0x2ce/0x3e0
[  140.426518][ T5852]  deactivate_locked_super+0xbc/0x130
[  140.426534][ T5852]  cleanup_mnt+0x425/0x4c0
[  140.426546][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.426564][ T5852]  task_work_run+0x1d4/0x260
[  140.426588][ T5852]  ? __pfx_task_work_run+0x10/0x10
[  140.426600][ T5852]  ? __x64_sys_umount+0x122/0x160
[  140.426618][ T5852]  ? exit_to_user_mode_loop+0x40/0x110
[  140.426635][ T5852]  exit_to_user_mode_loop+0xec/0x110
[  140.426649][ T5852]  do_syscall_64+0x2bd/0x3b0
[  140.426663][ T5852]  ? lockdep_hardirqs_on+0x9c/0x150
[  140.426676][ T5852]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.426686][ T5852]  ? exc_page_fault+0x9f/0xf0
[  140.426703][ T5852]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  140.426715][ T5852] RIP: 0033:0x7f7c75d8ff17
[  140.426727][ T5852] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  140.426737][ T5852] RSP: 002b:00007ffd19c97788 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  140.426751][ T5852] RAX: 0000000000000000 RBX: 00007f7c75e11c05 RCX: 00007f7c75d8ff17
[  140.426758][ T5852] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd19c97840
[  140.426764][ T5852] RBP: 00007ffd19c97840 R08: 0000000000000000 R09: 0000000000000000
[  140.426770][ T5852] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd19c988d0
[  140.426777][ T5852] R13: 00007f7c75e11c05 R14: 00000000000223d7 R15: 00007ffd19c98910
[  140.426796][ T5852]  </TASK>
[  140.426801][ T5852] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  140.491635][ T7616] futex_wake_op: syz.3.586 tries to shift op by -1; fix this program
[  140.578440][ T5919] usb 1-1: Using ep0 maxpacket: 16
[  140.596576][ T5919] usb 1-1: config 0 interface 0 has no altsetting 0
[  140.601133][ T5919] usb 1-1: New USB device found, idVendor=0b05, idProduct=1807, bcdDevice= 0.00
[  140.606107][ T5919] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  140.623363][ T5919] usb 1-1: config 0 descriptor??
[  140.822525][ T7622] netlink: 6 bytes leftover after parsing attributes in process `syz.3.590'.
[  140.827659][ T7622] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  140.993953][ T7632] loop1: detected capacity change from 0 to 2048
[  141.022319][ T7632] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.036906][ T7632] ext4 filesystem being mounted at /222/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  141.040297][ T5919] asus 0003:0B05:1807.0003: item fetching failed at offset 2/5
[  141.045623][ T5919] asus 0003:0B05:1807.0003: Asus hid parse failed: -22
[  141.049811][ T5919] asus 0003:0B05:1807.0003: probe with driver asus failed with error -22
[  141.097660][ T5852] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  141.256946][ T7630] loop3: detected capacity change from 0 to 32768
[  141.264434][ T5919] usb 1-1: USB disconnect, device number 7
[  141.284524][ T7630] 
[  141.284524][ T7630]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  141.284524][ T7630] 
[  141.373735][ T6671] non-latin1 character 0x3ff found in JFS file name
[  141.376948][ T6671] mount with iocharset=utf8 to access
[  141.381849][ T6671] 
[  141.381849][ T6671]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  141.381849][ T6671] 
[  141.391522][ T6671] 
[  141.391522][ T6671]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  141.391522][ T6671] 
[  141.395464][ T6671] 
[  141.395464][ T6671]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  141.395464][ T6671] 
[  141.401109][ T6671] 
[  141.401109][ T6671]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  141.401109][ T6671] 
[  141.415573][  T115] 
[  141.415573][  T115]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  141.415573][  T115] 
[  141.424045][ T6671] read_mapping_page failed!
[  141.425979][ T6671] ERROR: (device loop3): txCommit: 
[  141.425979][ T6671] 
[  141.432882][ T6671] ERROR: (device loop3): remounting filesystem as read-only
[  141.722260][ T5879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.822857][ T5879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.923203][ T5879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.000212][ T5879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  142.160543][ T5879] bridge_slave_1: left allmulticast mode
[  142.168855][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  142.175812][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  142.176032][ T5879] bridge_slave_1: left promiscuous mode
[  142.183297][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  142.196384][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.203833][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  142.211791][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  142.237654][ T5879] bridge_slave_0: left allmulticast mode
[  142.245625][ T5879] bridge_slave_0: left promiscuous mode
[  142.247950][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.576189][  T792] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  142.640894][ T5879] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.646451][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.650862][ T5879] bond0 (unregistering): Released all slaves
[  142.762565][  T792] usb 1-1: Using ep0 maxpacket: 32
[  142.772120][  T792] usb 1-1: config 0 has an invalid interface number: 132 but max is 0
[  142.775816][  T792] usb 1-1: config 0 has no interface number 0
[  142.784790][  T792] usb 1-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  142.835179][  T792] usb 1-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5
[  142.848473][  T792] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.852016][  T792] usb 1-1: Product: syz
[  142.853657][  T792] usb 1-1: Manufacturer: syz
[  142.855441][  T792] usb 1-1: SerialNumber: syz
[  142.907386][  T792] usb 1-1: config 0 descriptor??
[  142.932352][  T792] em28xx 1-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132)
[  142.936841][  T792] em28xx 1-1:0.132: Video interface 132 found:
[  143.055140][ T7681] delete_channel: no stack
[  143.197687][ T5879] hsr_slave_0: left promiscuous mode
[  143.203113][ T5879] hsr_slave_1: left promiscuous mode
[  143.206409][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.211282][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.215528][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.217916][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.238581][ T5879] veth1_macvtap: left promiscuous mode
[  143.240720][ T5879] veth0_macvtap: left promiscuous mode
[  143.242855][ T5879] veth1_vlan: left promiscuous mode
[  143.244907][ T5879] veth0_vlan: left promiscuous mode
[  143.330996][  T792] em28xx 1-1:0.132: unknown em28xx chip ID (0)
[  143.749566][ T5879] team0 (unregistering): Port device team_slave_1 removed
[  143.793655][ T5879] team0 (unregistering): Port device team_slave_0 removed
[  143.971834][  T792] em28xx 1-1:0.132: failed to read eeprom (err=-110)
[  143.974746][  T792] em28xx 1-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-110]
[  144.208412][  T792] em28xx 1-1:0.132: Identified as Leadtek Winfast USB II (card=7)
[  144.212197][  T792] em28xx 1-1:0.132: analog set to bulk mode.
[  144.223381][ T5914] em28xx 1-1:0.132: Registering V4L2 extension
[  144.259290][ T5853] Bluetooth: hci2: command tx timeout
[  144.268061][  T792] usb 1-1: USB disconnect, device number 8
[  144.272591][  T792] em28xx 1-1:0.132: Disconnecting em28xx
[  144.323313][ T7688] tipc: New replicast peer: 255.255.255.255
[  144.327640][ T7688] tipc: Enabled bearer <udp:syz2>, priority 10
[  144.337769][ T7658] chnl_net:caif_netlink_parms(): no params data found
[  144.393185][ T5914] em28xx 1-1:0.132: Config register raw data: 0xffffffed
[  144.397270][ T5914] em28xx 1-1:0.132: AC97 chip type couldn't be determined
[  144.400409][ T5914] em28xx 1-1:0.132: No AC97 audio processor
[  144.442672][ T5914] usb 1-1: Decoder not found
[  144.444978][ T5914] em28xx 1-1:0.132: failed to create media graph
[  144.448960][ T5914] em28xx 1-1:0.132: V4L2 device video103 deregistered
[  144.472103][ T5914] em28xx 1-1:0.132: Remote control support is not available for this card.
[  144.477117][  T792] em28xx 1-1:0.132: Closing input extension
[  144.494421][ T7658] bridge0: port 1(bridge_slave_0) entered blocking state
[  144.498119][ T7658] bridge0: port 1(bridge_slave_0) entered disabled state
[  144.505566][ T7658] bridge_slave_0: entered allmulticast mode
[  144.506442][  T792] em28xx 1-1:0.132: Freeing device
[  144.510936][ T7658] bridge_slave_0: entered promiscuous mode
[  144.514064][ T7658] bridge0: port 2(bridge_slave_1) entered blocking state
[  144.525335][ T7658] bridge0: port 2(bridge_slave_1) entered disabled state
[  144.534346][ T7658] bridge_slave_1: entered allmulticast mode
[  144.547639][ T7658] bridge_slave_1: entered promiscuous mode
[  144.608486][ T7658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  144.614363][ T7658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  144.635326][ T7658] team0: Port device team_slave_0 added
[  144.642779][ T7658] team0: Port device team_slave_1 added
[  144.688374][ T7658] batman_adv: batadv0: Adding interface: batadv_slave_0
[  144.695335][ T7658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.719951][ T7658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  144.722382][ T7705] netlink: 'syz.0.619': attribute type 21 has an invalid length.
[  144.728156][ T7658] batman_adv: batadv0: Adding interface: batadv_slave_1
[  144.732905][ T7658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  144.745671][ T7705] netlink: 128 bytes leftover after parsing attributes in process `syz.0.619'.
[  144.760339][ T7658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  144.764536][ T7705] netlink: 'syz.0.619': attribute type 5 has an invalid length.
[  144.767839][ T7705] netlink: 'syz.0.619': attribute type 6 has an invalid length.
[  144.771075][ T5879] ------------[ cut here ]------------
[  144.771158][ T5879] WARNING: CPU: 1 PID: 5879 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x270/0x2f0
[  144.771176][ T5879] Modules linked in:
[  144.771217][ T5879] CPU: 1 UID: 0 PID: 5879 Comm: kworker/u8:3 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  144.785153][ T5879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.789193][ T5879] Workqueue: netns cleanup_net
[  144.790934][ T5879] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  144.793526][ T5879] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 68 31 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 96 f3 e1 f7 e8 d1 c9 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 c3 c9 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  144.796751][ T7705] netlink: 3 bytes leftover after parsing attributes in process `syz.0.619'.
[  144.801391][ T5879] RSP: 0018:ffffc900033ff898 EFLAGS: 00010293
[  144.801407][ T5879] RAX: ffffffff8a21e1bf RBX: ffff88811234a440 RCX: ffff888023f70000
[  144.801414][ T5879] RDX: 0000000000000000 RSI: ffffffff8dba5f95 RDI: ffff888023f70000
[  144.801419][ T5879] RBP: ffffc900033ff9b0 R08: ffffffff8fa37d37 R09: 1ffffffff1f46fa6
[  144.801424][ T5879] R10: dffffc0000000000 R11: fffffbfff1f46fa7 R12: ffffffff8f630960
[  144.801430][ T5879] R13: 1ffff9200067ff40 R14: ffff88811234b8c0 R15: dffffc0000000000
[  144.801436][ T5879] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  144.801442][ T5879] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  144.801447][ T5879] CR2: 00007f7c76b94fc8 CR3: 000000010acc0000 CR4: 00000000000006f0
[  144.801474][ T5879] Call Trace:
[  144.801481][ T5879]  <TASK>
[  144.801487][ T5879]  xfrm_net_exit+0x2d/0x70
[  144.801501][ T5879]  ops_undo_list+0x49a/0x990
[  144.801514][ T5879]  ? __pfx_ops_undo_list+0x10/0x10
[  144.801525][ T5879]  ? do_raw_spin_unlock+0x4d/0x240
[  144.801538][ T5879]  cleanup_net+0x4c5/0x800
[  144.801549][ T5879]  ? __pfx_cleanup_net+0x10/0x10
[  144.801559][ T5879]  ? _raw_spin_unlock_irq+0x23/0x50
[  144.801568][ T5879]  ? process_scheduled_works+0x9ef/0x17b0
[  144.801575][ T5879]  ? process_scheduled_works+0x9ef/0x17b0
[  144.801583][ T5879]  process_scheduled_works+0xae1/0x17b0
[  144.801599][ T5879]  ? __pfx_process_scheduled_works+0x10/0x10
[  144.801613][ T5879]  worker_thread+0x8a0/0xda0
[  144.801622][ T5879]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  144.801633][ T5879]  ? __kthread_parkme+0x7b/0x200
[  144.801645][ T5879]  kthread+0x711/0x8a0
[  144.801654][ T5879]  ? __pfx_worker_thread+0x10/0x10
[  144.801661][ T5879]  ? __pfx_kthread+0x10/0x10
[  144.801670][ T5879]  ? _raw_spin_unlock_irq+0x23/0x50
[  144.871279][ T5879]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.873214][ T5879]  ? __pfx_kthread+0x10/0x10
[  144.874886][ T5879]  ret_from_fork+0x3fc/0x770
[  144.876502][ T5879]  ? __pfx_ret_from_fork+0x10/0x10
[  144.878521][ T5879]  ? __switch_to_asm+0x39/0x70
[  144.880646][ T5879]  ? __switch_to_asm+0x33/0x70
[  144.882388][ T5879]  ? __pfx_kthread+0x10/0x10
[  144.883920][ T5879]  ret_from_fork_asm+0x1a/0x30
[  144.885535][ T5879]  </TASK>
[  144.886572][ T5879] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  144.889163][ T5879] CPU: 1 UID: 0 PID: 5879 Comm: kworker/u8:3 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  144.893322][ T5879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.896595][ T5879] Workqueue: netns cleanup_net
[  144.898222][ T5879] Call Trace:
[  144.899495][ T5879]  <TASK>
[  144.900730][ T5879]  dump_stack_lvl+0x99/0x250
[  144.902318][ T5879]  ? __asan_memcpy+0x40/0x70
[  144.903888][ T5879]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.905837][ T5879]  ? __pfx__printk+0x10/0x10
[  144.907764][ T5879]  vpanic+0x281/0x750
[  144.909477][ T5879]  ? __pfx__printk+0x10/0x10
[  144.911472][ T5879]  ? __pfx_vpanic+0x10/0x10
[  144.913527][ T5879]  ? is_bpf_text_address+0x292/0x2b0
[  144.915918][ T5879]  panic+0xb9/0xc0
[  144.917506][ T5879]  ? __pfx_panic+0x10/0x10
[  144.919383][ T5879]  __warn+0x31b/0x4b0
[  144.921075][ T5879]  ? xfrm_state_fini+0x270/0x2f0
[  144.923241][ T5879]  ? xfrm_state_fini+0x270/0x2f0
[  144.925501][ T5879]  report_bug+0x2be/0x4f0
[  144.927713][ T5879]  ? xfrm_state_fini+0x270/0x2f0
[  144.929828][ T5879]  ? xfrm_state_fini+0x270/0x2f0
[  144.931974][ T5879]  ? xfrm_state_fini+0x272/0x2f0
[  144.934091][ T5879]  handle_bug+0x84/0x160
[  144.935882][ T5879]  exc_invalid_op+0x1a/0x50
[  144.937776][ T5879]  asm_exc_invalid_op+0x1a/0x20
[  144.939842][ T5879] RIP: 0010:xfrm_state_fini+0x270/0x2f0
[  144.942190][ T5879] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 68 31 01 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 96 f3 e1 f7 e8 d1 c9 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 c3 c9 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  144.950414][ T5879] RSP: 0018:ffffc900033ff898 EFLAGS: 00010293
[  144.953021][ T5879] RAX: ffffffff8a21e1bf RBX: ffff88811234a440 RCX: ffff888023f70000
[  144.955829][ T5879] RDX: 0000000000000000 RSI: ffffffff8dba5f95 RDI: ffff888023f70000
[  144.958478][ T5879] RBP: ffffc900033ff9b0 R08: ffffffff8fa37d37 R09: 1ffffffff1f46fa6
[  144.961156][ T5879] R10: dffffc0000000000 R11: fffffbfff1f46fa7 R12: ffffffff8f630960
[  144.963963][ T5879] R13: 1ffff9200067ff40 R14: ffff88811234b8c0 R15: dffffc0000000000
[  144.967851][ T5879]  ? xfrm_state_fini+0x26f/0x2f0
[  144.970077][ T5879]  ? xfrm_state_fini+0x26f/0x2f0
[  144.972170][ T5879]  xfrm_net_exit+0x2d/0x70
[  144.973848][ T5879]  ops_undo_list+0x49a/0x990
[  144.975677][ T5879]  ? __pfx_ops_undo_list+0x10/0x10
[  144.977909][ T5879]  ? do_raw_spin_unlock+0x4d/0x240
[  144.979888][ T5879]  cleanup_net+0x4c5/0x800
[  144.981665][ T5879]  ? __pfx_cleanup_net+0x10/0x10
[  144.983667][ T5879]  ? _raw_spin_unlock_irq+0x23/0x50
[  144.985809][ T5879]  ? process_scheduled_works+0x9ef/0x17b0
[  144.988113][ T5879]  ? process_scheduled_works+0x9ef/0x17b0
[  144.990558][ T5879]  process_scheduled_works+0xae1/0x17b0
[  144.992608][ T5879]  ? __pfx_process_scheduled_works+0x10/0x10
[  144.994950][ T5879]  worker_thread+0x8a0/0xda0
[  144.996958][ T5879]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  144.999650][ T5879]  ? __kthread_parkme+0x7b/0x200
[  145.001843][ T5879]  kthread+0x711/0x8a0
[  145.003649][ T5879]  ? __pfx_worker_thread+0x10/0x10
[  145.006053][ T5879]  ? __pfx_kthread+0x10/0x10
[  145.008223][ T5879]  ? _raw_spin_unlock_irq+0x23/0x50
[  145.010622][ T5879]  ? lockdep_hardirqs_on+0x9c/0x150
[  145.012900][ T5879]  ? __pfx_kthread+0x10/0x10
[  145.014934][ T5879]  ret_from_fork+0x3fc/0x770
[  145.017036][ T5879]  ? __pfx_ret_from_fork+0x10/0x10
[  145.019504][ T5879]  ? __switch_to_asm+0x39/0x70
[  145.021758][ T5879]  ? __switch_to_asm+0x33/0x70
[  145.023886][ T5879]  ? __pfx_kthread+0x10/0x10
[  145.025944][ T5879]  ret_from_fork_asm+0x1a/0x30
[  145.028079][ T5879]  </TASK>
[  145.030217][ T5879] Kernel Offset: disabled
[  145.032242][ T5879] Rebooting in 86400 seconds..

VM DIAGNOSIS:
21:47:08  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=ffffffff8b7bcb2e RCX=f0e0181525067d00 RDX=0000000000000000
RSI=ffffffff8b7bcb2e RDI=1ffff110226fde4e RBP=ffffffff823a95be RSP=ffffc90002b3f6c8
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffff520000792bc
R12=0000000000000000 R13=ffff8881137ef270 R14=ffff8881137ef270 R15=0000000000000001
RIP=ffffffff8222fd66 RFL=00000a06 [-O---P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f4fa9e91c80 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa07dc6b440 CR3=0000000024376000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00ff000000000000 ff00000000000000 XMM05=000000000000002d 0000310032332f2e
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffff00ff00000000 XMM09=303a312d312f312d 312f316273752f30
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900033ff030
R8 =ffff88801eef0237 R9 =1ffff11003dde046 R10=dffffc0000000000 R11=ffffffff854efc70
R12=dffffc0000000000 R13=ffffffff99af98ed R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854efcec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7c76b94fc8 CR3=000000010acc0000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f7c75e12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
