last executing test programs:

1.312311095s ago: executing program 1 (id=330):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10)
bind$bt_hci(r0, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)

1.206289361s ago: executing program 1 (id=332):
r0 = syz_open_dev$sndctrl(&(0x7f0000000080), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000000)=0x639)
r1 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x2})
r2 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000340)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x1, 0x0, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x3, 0x6c4ba42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0xcd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0xfffffffffffffffb, 0x0, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80003, 0x0, 0x0, 0x0, 0x200, 0x0, 0x40000000000, 0x801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x3, 0x0, 0x100000001]})
r3 = syz_open_dev$sndctrl(0x0, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000000), 0x1)
syz_open_dev$radio(0x0, 0x1, 0x2)
setxattr$incfs_metadata(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), &(0x7f0000000240)="f4dc8d08deb0d7125a7e3e1e26eeedad48f424146d12708dee3937850ceb7b3aa7a500315deab4f82a1f84cd1cd1dbd685cd3e4b8e652bb817f53208f0b07decf1a35db51b5bc0e150dde75ce3319ffd88cacb2d24c8fc9bfbddceb122aa7d5f28fd6ecf542c947e9cf619471096d0821e228de667e2dcb66c6489c4815d", 0x7e, 0x0)
getpgrp(0x0)
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4)
r4 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000002c0), 0x1, 0x0)
openat$sysctl(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/tcp_recovery\x00', 0x1, 0x0)
dup2(r3, r4)
r5 = inotify_init1(0x0)
dup(r5)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x200000008, 0x0, 0x4cb, 0x8, 0x0, 0x1}, 0x0, &(0x7f0000000240)={0x1f, 0xfffffffffffffffe, 0x9, 0x0, 0x0, 0x10, 0x4}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

1.205994315s ago: executing program 2 (id=333):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000040)='./file1\x00', 0x80, &(0x7f00000003c0)={[{@gid}, {@umask={'umask', 0x3d, 0xe}}, {@barrier}, {@gid={'gid', 0x3d, 0xee01}}, {@barrier}, {@uid}, {@nls={'nls', 0x3d, 'macroman'}}, {@umask={'umask', 0x3d, 0x1}}]}, 0x44, 0x6ff, &(0x7f0000001200)="$eJzs3U1sHGf5APBn1uu1N5XcbZu0/f+FFKsRETSQ2F5KgoREqBDyoUKRuPS6JE5jee1GtoucCBEXKBzhhHLooQiZQ0+oB6QiDohyRkLiinKPxD3iwKKZnVnvh73ebfyRhN9Pmp13Zt6PZ57OvN6dbbQB/M9afDsmtyOJxQtvbaXbD3bqzQc79dWiHBFTEVGKKLdXkaxFJJ9FXI32Ev+X7sy7S/Yb542Hn354/v7H9fZWOV+y+qVh7Xa1hoywnS8xGxET+XpM5f36ux5vDvR3b6yuk07cacLOFYmDk9YasD1O8xHuW+BJdy9iYnKP/bWIUxExnb8PiHx2KB1zeIdurFkOAAAAnkwTB1V4/lE8iq2YOZ5wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4NmQtH8zMMmXUlGejaT4/f9Kvi9VqZxwvMN95YDjH9w8pkAAAAAAAAAA4Eh8kn9xf/ZRPIqtmCn2t5LsO//Xso3T2etz8V5sxFKsx8XYikZsxmasx3zE5ExXh5Wtxubm+vxgy19H2rLVat3LWy5ERG2g5cI+gZYO+cQBAAAAAAAA4Nn0k1iMmZMOAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAuiURE+1VtpwuyrUolSNiOiIqab3tiD8V5afZn086AAAAADh61Xw9k/ynXWgl2Wf+l7PP/dPxXqzFZizHZjRjKW5kzwLan/pLf9+uNx/s1FfTZbDjb/9rrDiyHiNiIt7fZ+S5rMaZTovF+G58Py7EbFyL9ViOH0YjNmMpZqOankQ0Iolatf30olbEuXe8V3u2rvXHdrZv+9UskmrcjOUstotxvRLtxybZOaRjvto12h8qEX0jvp9mJ/lWbsQc3ej67/Wr/LlMrvX8iH0cjVp25pOdjMyluc+z8cLw3I95nfSPNB+lzjOo07ujpJv9IxU5/8E4OT/VXk2nLz/vzflhG/NRWn8mFqKUX30RL/fm/PYX77/Y2/jL//jLtVultZVbNzcuHOEpPY7ZgypMFoX+TNS7MvHK8Ksvz0QzzcT26JmY7N8xPWrLo1XJs5FNRSPOlt/JSo14resSfDduxFJcjrmYjysxF9+Ihah3rrB0OdOT13J9tTcn2b1WGpzfqkOCP/elrkq/OKDy8Urz8kJXXrtnulp2LN9z9Zcx13X1vTj86hv7r0A6/v/n5XSMn3b+4jwJejKRz81FdC8Nz8RvWunrRnNtZf1W4/aI453P1+lt+0Hv3Pzb0aPu/+t+GNLrJZ1xy9lWlpNqcb2kx17qRNubr0r+jUu7XWng2JnOsVrMxHJ8b987tZK/hxvsqX3sle5j/9ydOSv5+5viWM+7nHg3mtm7kD4HTtUAHLNTr5+qVB9W/1b9qPqz6q3qW9NvTl2Z+kIlJv9a/uPE70u/K30zeT0+ih/HzElHCgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAz4KNO3dXGs3m0nqnENP9ex63UNl3rOGFKB1YZ+e50TqMWsTwsZK8UDncc38aC9Xo21P8wtLj9vxJRAypU3ns4JOxr7GxC2keDqXDVqud1GxPa2KM5uWi1d51yrExHSuNpLzHHTe1exdEbaXR/Herp3k1um4Z4Bl3aXP19qWNO3e/urzaeGfpnaW1hSuXr1yuf33+a5duLjeX5tqvJx0lcBQ27tyd2GP3wC/dAgAAAAAAAAAAAE+O/P/+3/zc/5ihfECdyvrG3iOfPe5TBQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAJ5Si2/H5HYkMT93cS7dfrBTb6ZLUd6tWY6IUkQkP4pIPou4Gu0lal3dJfuN88bDTz88f//j+m5f5aJ+aVi70WznS8xGxES+PtjUHt0M9ne9q7/tzxVe0jnDNGHnisTBSftvAAAA//9u//cB")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x843, 0x1)
ioctl$FIBMAP(r0, 0x1, &(0x7f0000000140)=0x2)

1.128421409s ago: executing program 2 (id=335):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000011000500000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000007f000014001a80100005800c000780080001"], 0x34}}, 0x0)

1.06231394s ago: executing program 1 (id=336):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000100))

1.061901937s ago: executing program 0 (id=337):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000280)=[{&(0x7f00000001c0)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000100060c10000000010000000000", 0x58}], 0x1)

1.00375247s ago: executing program 1 (id=338):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0x7ffffffffffffffc}]}, @NFT_MSG_NEWCHAIN={0x38, 0x3, 0xa, 0x201, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_FLAGS={0x8}, @NFTA_CHAIN_HOOK={0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x7c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0006"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

1.003579835s ago: executing program 2 (id=339):
syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYBLOB="bbbbbbbbbbbb00000000000086dd6076b2af00062f00fc000004cba1414ec4b4b50000000000ff0200000000000000000000000000010000883e"], 0x0)

905.819389ms ago: executing program 2 (id=340):
r0 = socket$kcm(0x2, 0x200000000000001, 0x106)
setsockopt$sock_attach_bpf(r0, 0x1, 0x3e, &(0x7f0000000000), 0x4)

905.592624ms ago: executing program 0 (id=341):
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0)
write$cgroup_pid(r1, &(0x7f0000000c40), 0x12)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r1, 0x0, 0xffffffffffffff9e, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = openat$cgroup_subtree(r2, &(0x7f0000000140), 0x2, 0x0)
write$cgroup_subtree(r3, &(0x7f0000000300)=ANY=[@ANYBLOB='+pids'], 0x6)

905.192774ms ago: executing program 1 (id=342):
r0 = syz_open_dev$usbfs(&(0x7f0000000080), 0x76, 0x109301)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
readahead(0xffffffffffffffff, 0x1de, 0x6)
mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='mpol=prefe'])
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, 0x0)
sendto$unix(r4, &(0x7f0000000300)="ca758d114b32d2b698dea26b6622405b4e673181c725d849297d32d7324ebe82fde7fcc1e0041a5d48f74898b5183a685f", 0x31, 0x810, &(0x7f0000000380)=@abs={0x1, 0x0, 0x4e24}, 0x6e)
r5 = socket$kcm(0x10, 0x3, 0x10)
sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)="1400000017000b63d25a80648c2594f905a3c92b", 0x14}], 0x1}, 0x0)
r6 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x80000)
sendmmsg$alg(r6, 0x0, 0x0, 0x20000812)
r7 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x8, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000001b000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='kmem_cache_free\x00', r7, 0x0, 0x2}, 0x18)
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000001c0)={[{@treelog}, {@nodatacow}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x33, 0x78, 0x39, 0x65, 0x36]}}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@flushoncommit}, {@noautodefrag}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x38, 0x36, 0x38, 0x35, 0x32, 0x25]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)

805.232806ms ago: executing program 0 (id=343):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x1}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xe0, &(0x7f0000004880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x5, 0x0, 0x8, 0x94d430193590d839, 0x0}}, 0x10)

804.985878ms ago: executing program 2 (id=344):
capset(&(0x7f00000004c0)={0x20071026}, &(0x7f0000000100))
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000002c0)={0x53, 0xfffffffffffffffc, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000180)="1b2b13f6b94d", 0x0, 0xfffffffc, 0x0, 0x0, 0x0})

423.847882ms ago: executing program 2 (id=345):
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000030c741401e04684056e6000001ef0902120001000000000904"], 0x0)

384.552659ms ago: executing program 0 (id=346):
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)={@cgroup, 0xffffffffffffffff, 0x33, 0x30}, 0x20)

311.787444ms ago: executing program 0 (id=347):
openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)

255.386737ms ago: executing program 0 (id=348):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000480)=ANY=[@ANYBLOB="6e6f757365725f78617474722c6865617274626561743d6e6f6e652c6572726f72733d72656d6f756e742d726f2c636f686572656e63793d66756c6c2c6572726f72733d636f6e74696e75652c646174613d77726974656261636b2c6572726f72733d72656d6f756e742d726f2c6e6f61636c2c0033b67a38edf7ca65cff4aecf1bccac7b7847e83ec6928ad9eff2281ff7a2314d9a8541a9772b98d067c1463bb01ed3ebf5764745d29402107611df2e22d6cfb25eb0a8b970f339cf6413aaef25cee228060d70ce0ade90d917a9c5"], 0x1, 0x442f, &(0x7f0000004480)="$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")
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 1 (id=349):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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")
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x100)
openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.pending_reads\x00', 0x1a10c1, 0x9c37611dc13d0d83)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='system.posix_acl_default\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="02"], 0x4, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:4436' (ED25519) to the list of known hosts.
syzkaller login: [   49.400638][ T5792] cgroup: Unknown subsys name 'net'
[   49.503508][ T5792] cgroup: Unknown subsys name 'cpuset'
[   49.510801][ T5792] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   51.130075][ T5792] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   55.123695][ T5814] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   55.127517][ T5814] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   55.131418][ T5814] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   55.135328][ T5814] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.136018][ T5816] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   55.141197][ T5816] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.141246][ T5814] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   55.148711][ T5814] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   55.152478][ T5814] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   55.156538][ T5814] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.174262][ T5203] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.180927][ T5203] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.187349][ T5203] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.191866][ T5203] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.200254][ T5203] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.412924][ T5811] chnl_net:caif_netlink_parms(): no params data found
[   55.516213][ T5815] chnl_net:caif_netlink_parms(): no params data found
[   55.574465][ T5819] chnl_net:caif_netlink_parms(): no params data found
[   55.582344][ T5811] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.585592][ T5811] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.588212][ T5811] bridge_slave_0: entered allmulticast mode
[   55.591293][ T5811] bridge_slave_0: entered promiscuous mode
[   55.617107][ T5811] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.620934][ T5811] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.623790][ T5811] bridge_slave_1: entered allmulticast mode
[   55.627564][ T5811] bridge_slave_1: entered promiscuous mode
[   55.680294][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.682795][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.685292][ T5815] bridge_slave_0: entered allmulticast mode
[   55.688871][ T5815] bridge_slave_0: entered promiscuous mode
[   55.692966][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.695977][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.698937][ T5815] bridge_slave_1: entered allmulticast mode
[   55.703294][ T5815] bridge_slave_1: entered promiscuous mode
[   55.750515][ T5811] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.768146][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.772905][ T5811] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.778149][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.781824][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.784899][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.787899][ T5819] bridge_slave_0: entered allmulticast mode
[   55.791988][ T5819] bridge_slave_0: entered promiscuous mode
[   55.821931][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.824952][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.827871][ T5819] bridge_slave_1: entered allmulticast mode
[   55.831856][ T5819] bridge_slave_1: entered promiscuous mode
[   55.887515][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.893900][ T5811] team0: Port device team_slave_0 added
[   55.898455][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.906192][ T5815] team0: Port device team_slave_0 added
[   55.912637][ T5811] team0: Port device team_slave_1 added
[   55.928537][ T5815] team0: Port device team_slave_1 added
[   55.997971][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.001007][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.012284][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.017885][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.021029][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.032139][ T5811] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.039989][ T5819] team0: Port device team_slave_0 added
[   56.045112][ T5819] team0: Port device team_slave_1 added
[   56.059959][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.062927][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.073591][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.078783][ T5811] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.082989][ T5811] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.093806][ T5811] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.123131][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0
[   56.126052][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.137016][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   56.143702][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1
[   56.146530][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   56.156207][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   56.191380][ T5811] hsr_slave_0: entered promiscuous mode
[   56.194096][ T5811] hsr_slave_1: entered promiscuous mode
[   56.214066][ T5815] hsr_slave_0: entered promiscuous mode
[   56.216409][ T5815] hsr_slave_1: entered promiscuous mode
[   56.218578][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.221765][ T5815] Cannot create hsr debugfs directory
[   56.240479][ T5819] hsr_slave_0: entered promiscuous mode
[   56.242679][ T5819] hsr_slave_1: entered promiscuous mode
[   56.244743][ T5819] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   56.247172][ T5819] Cannot create hsr debugfs directory
[   56.477282][ T5811] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.491794][ T5811] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.502214][ T5811] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.514663][ T5811] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.538216][ T5815] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.543911][ T5815] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.558216][ T5815] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.568061][ T5815] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.622551][ T5819] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.634056][ T5819] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.649055][ T5819] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.656018][ T5819] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.714555][ T5811] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.736334][ T5811] 8021q: adding VLAN 0 to HW filter on device team0
[   56.752294][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.755376][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.771202][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.774238][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.835724][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.875515][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[   56.881021][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.897189][  T744] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.899874][  T744] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.905043][  T744] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.907539][  T744] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.922557][ T5819] 8021q: adding VLAN 0 to HW filter on device team0
[   56.945823][  T744] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.948302][  T744] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.954664][  T744] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.957828][  T744] bridge0: port 2(bridge_slave_1) entered forwarding state
[   57.002401][ T5819] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   57.035332][ T5811] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.113207][ T5811] veth0_vlan: entered promiscuous mode
[   57.118390][ T5811] veth1_vlan: entered promiscuous mode
[   57.155049][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.162748][ T5811] veth0_macvtap: entered promiscuous mode
[   57.179890][ T5811] veth1_macvtap: entered promiscuous mode
[   57.190335][   T54] Bluetooth: hci0: command tx timeout
[   57.192896][ T5203] Bluetooth: hci1: command tx timeout
[   57.228405][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.238047][ T5811] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.243700][ T5811] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.247395][ T5811] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.251410][ T5811] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.254922][ T5811] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.270207][ T5203] Bluetooth: hci2: command tx timeout
[   57.271056][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   57.287229][ T5819] veth0_vlan: entered promiscuous mode
[   57.304895][ T5819] veth1_vlan: entered promiscuous mode
[   57.362276][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.365618][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.415780][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.418987][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.424929][ T5815] veth0_vlan: entered promiscuous mode
[   57.434507][ T5819] veth0_macvtap: entered promiscuous mode
[   57.438832][ T5819] veth1_macvtap: entered promiscuous mode
[   57.448893][ T5815] veth1_vlan: entered promiscuous mode
[   57.463716][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.465853][ T5811] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   57.482253][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.495358][ T5819] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.498777][ T5819] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.519476][ T5819] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.522344][ T5819] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.542666][ T5815] veth0_macvtap: entered promiscuous mode
[   57.561755][ T5815] veth1_macvtap: entered promiscuous mode
[   57.605566][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   57.613843][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   57.642162][ T5815] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   57.645754][ T5815] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   57.649350][ T5815] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   57.652908][ T5883] netlink: 60 bytes leftover after parsing attributes in process `syz.0.4'.
[   57.661352][ T5815] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   57.707612][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.714193][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.752696][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.755955][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.785569][ T3538] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.795739][ T3538] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.827122][ T5886] bond0: entered allmulticast mode
[   57.828867][ T5886] bond_slave_0: entered allmulticast mode
[   57.831826][ T5886] bond_slave_1: entered allmulticast mode
[   57.858962][ T5888] process 'syz.2.5' launched '/dev/fd/3' with NULL argv: empty string added
[   57.864827][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   57.871984][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.919838][   T47] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   58.032184][ T5898] loop2: detected capacity change from 0 to 1024
[   58.042250][ T5898] EXT4-fs: Ignoring removed orlov option
[   58.044086][ T5898] EXT4-fs: Ignoring removed nomblk_io_submit option
[   58.077024][ T5898] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   58.092781][   T47] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   58.105929][   T47] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   58.116956][   T47] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   58.123695][   T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   58.124396][ T5896] loop1: detected capacity change from 0 to 32768
[   58.131397][   T47] usb 1-1: SerialNumber: syz
[   58.135401][ T5896] =======================================================
[   58.135401][ T5896] WARNING: The mand mount option has been deprecated and
[   58.135401][ T5896]          and is ignored by this kernel. Remove the mand
[   58.135401][ T5896]          option from the mount to silence this warning.
[   58.135401][ T5896] =======================================================
[   58.168348][ T5896] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[   58.186030][ T5896] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   58.208012][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.332441][ T5896] syz.1.2 (5896) used greatest stack depth: 19304 bytes left
[   58.375308][ T5815] ocfs2: Unmounting device (7,1) on (node local)
[   58.376735][   T47] usb 1-1: 0:2 : does not exist
[   58.401630][   T47] usb 1-1: USB disconnect, device number 2
[   58.450965][ T5906] loop2: detected capacity change from 0 to 32768
[   58.452971][ T5824] udevd[5824]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   58.483036][ T5906] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[   58.486707][ T5845] (kworker/u8:3,5845,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len is smaller than minimal - offset=0, inode=348545186005064, rec_len=0, name_len=1
[   58.524342][ T5819] ocfs2: Unmounting device (7,2) on (node local)
[   58.659277][ T5920] netlink: 56 bytes leftover after parsing attributes in process `syz.2.16'.
[   58.665606][ T5920] A link change request failed with some changes committed already. Interface veth0_to_batadv may have been left with an inconsistent configuration, please check.
[   59.162155][ T5939] netlink: 'syz.0.25': attribute type 1 has an invalid length.
[   59.188797][ T5941] loop1: detected capacity change from 0 to 256
[   59.235179][ T5941] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xf6dff195, utbl_chksum : 0xe619d30d)
[   59.390451][ T5203] Bluetooth: hci1: command tx timeout
[   59.392736][ T5203] Bluetooth: hci0: command tx timeout
[   59.394901][ T5203] Bluetooth: hci2: command tx timeout
[   59.600231][ T5945] loop0: detected capacity change from 0 to 32768
[   59.810400][ T5945] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   59.854468][ T5945] XFS (loop0): Ending clean mount
[   60.681708][ T5969] netlink: 4 bytes leftover after parsing attributes in process `syz.1.32'.
[   60.837863][ T5971] netlink: 8 bytes leftover after parsing attributes in process `syz.1.33'.
[   60.880788][ T5964] loop2: detected capacity change from 0 to 40427
[   61.008426][ T5964] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   61.089259][ T5819] syz-executor: attempt to access beyond end of device
[   61.089259][ T5819] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   61.102866][ T5819] CPU: 0 UID: 0 PID: 5819 Comm: syz-executor Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8-dirty #0 PREEMPT(full) 
[   61.102894][ T5819] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   61.102898][ T5819] Call Trace:
[   61.102902][ T5819]  <TASK>
[   61.102905][ T5819]  dump_stack_lvl+0x189/0x250
[   61.102921][ T5819]  ? __pfx_dump_stack_lvl+0x10/0x10
[   61.102931][ T5819]  ? __pfx_queue_work_on+0x10/0x10
[   61.102937][ T5819]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[   61.102946][ T5819]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   61.102954][ T5819]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   61.102963][ T5819]  ? f2fs_hw_is_readonly+0x39b/0x470
[   61.102973][ T5819]  f2fs_handle_critical_error+0x37c/0x540
[   61.102984][ T5819]  f2fs_write_end_io+0x495/0x810
[   61.102992][ T5819]  ? blkg_put+0x22/0x240
[   61.103004][ T5819]  __submit_merged_bio+0x27a/0x6a0
[   61.103014][ T5819]  __submit_merged_write_cond+0x255/0x530
[   61.103024][ T5819]  f2fs_write_data_pages+0x261d/0x3000
[   61.103046][ T5819]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   61.103080][ T5819]  ? __lock_acquire+0xab9/0xd20
[   61.103112][ T5819]  ? do_raw_spin_lock+0x121/0x290
[   61.103126][ T5819]  ? do_raw_spin_unlock+0x4d/0x240
[   61.103133][ T5819]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   61.103142][ T5819]  do_writepages+0x32e/0x550
[   61.103156][ T5819]  ? do_raw_spin_unlock+0x4d/0x240
[   61.103165][ T5819]  filemap_fdatawrite+0x191/0x230
[   61.103171][ T5819]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   61.103195][ T5819]  ? do_raw_spin_unlock+0x4d/0x240
[   61.103204][ T5819]  f2fs_sync_dirty_inodes+0x31f/0x830
[   61.103218][ T5819]  f2fs_write_checkpoint+0x94a/0x1de0
[   61.103236][ T5819]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   61.103262][ T5819]  ? kill_f2fs_super+0x298/0x6c0
[   61.103273][ T5819]  kill_f2fs_super+0x2c3/0x6c0
[   61.103284][ T5819]  ? __pfx_kill_f2fs_super+0x10/0x10
[   61.103292][ T5819]  ? radix_tree_delete_item+0x2b6/0x400
[   61.103304][ T5819]  ? shrinker_free+0x2ce/0x3e0
[   61.103313][ T5819]  deactivate_locked_super+0xbc/0x130
[   61.103323][ T5819]  cleanup_mnt+0x425/0x4c0
[   61.103331][ T5819]  ? lockdep_hardirqs_on+0x9c/0x150
[   61.103342][ T5819]  task_work_run+0x1d4/0x260
[   61.103351][ T5819]  ? __pfx_task_work_run+0x10/0x10
[   61.103358][ T5819]  ? __x64_sys_umount+0x122/0x160
[   61.103370][ T5819]  ? exit_to_user_mode_loop+0x40/0x110
[   61.103381][ T5819]  exit_to_user_mode_loop+0xec/0x110
[   61.103390][ T5819]  do_syscall_64+0x2bd/0x3b0
[   61.103395][ T5819]  ? lockdep_hardirqs_on+0x9c/0x150
[   61.103403][ T5819]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.103415][ T5819]  ? exc_page_fault+0x9f/0xf0
[   61.103424][ T5819]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   61.103430][ T5819] RIP: 0033:0x7fdf3778fc57
[   61.103437][ T5819] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   61.103443][ T5819] RSP: 002b:00007fffd2e72218 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   61.103451][ T5819] RAX: 0000000000000000 RBX: 00007fdf37810925 RCX: 00007fdf3778fc57
[   61.103455][ T5819] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffd2e722d0
[   61.103459][ T5819] RBP: 00007fffd2e722d0 R08: 0000000000000000 R09: 0000000000000000
[   61.103463][ T5819] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffd2e73360
[   61.103467][ T5819] R13: 00007fdf37810925 R14: 000000000000ee1d R15: 00007fffd2e733a0
[   61.103478][ T5819]  </TASK>
[   61.103525][ T5819] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   61.375863][ T5811] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[   61.387535][ T5985] ata1.00: invalid cdb length 6
[   61.430063][   T54] Bluetooth: hci2: command tx timeout
[   61.432914][   T54] Bluetooth: hci0: command tx timeout
[   61.435202][   T54] Bluetooth: hci1: command tx timeout
[   61.524370][ T5989] netlink: 8 bytes leftover after parsing attributes in process `syz.1.42'.
[   61.649273][ T6000] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   61.840817][ T6015] loop0: detected capacity change from 0 to 1024
[   62.129568][ T5281] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   62.279792][ T5281] usb 2-1: Using ep0 maxpacket: 32
[   62.331861][ T5281] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 219
[   62.372376][ T5281] usb 2-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5
[   62.376157][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.386549][ T5281] usb 2-1: Product: syz
[   62.388348][ T5281] usb 2-1: Manufacturer: syz
[   62.396656][ T5281] usb 2-1: SerialNumber: syz
[   62.416399][ T5281] usb 2-1: config 0 descriptor??
[   62.435144][ T6013] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   62.442045][ T5281] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[   62.482443][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.2.57'.
[   62.749262][ T1089] hfsplus: b-tree write err: -5, ino 4
[   62.770192][ T5281] usb 2-1: USB disconnect, device number 2
[   62.842739][ T5960] udevd[5960]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   62.929599][   T24] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   62.929970][ T6035] loop0: detected capacity change from 0 to 128
[   63.040599][ T6040] loop0: detected capacity change from 0 to 1024
[   63.053305][ T6040] syz.0.63: attempt to access beyond end of device
[   63.053305][ T6040] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024
[   63.058517][   T33] audit: type=1800 audit(1751868315.765:2): pid=6040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.63" name="file1" dev="loop0" ino=20 res=0 errno=0
[   63.063247][ T6040] syz.0.63: attempt to access beyond end of device
[   63.063247][ T6040] loop0: rw=34817, sector=5778, nr_sectors = 2 limit=1024
[   63.072192][ T6040] syz.0.63: attempt to access beyond end of device
[   63.072192][ T6040] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024
[   63.078809][ T6039] syz.0.63: attempt to access beyond end of device
[   63.078809][ T6039] loop0: rw=0, sector=5778, nr_sectors = 2 limit=1024
[   63.100147][   T24] usb 3-1: Using ep0 maxpacket: 16
[   63.110878][   T24] usb 3-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88
[   63.114400][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.117639][   T24] usb 3-1: Product: syz
[   63.119348][   T24] usb 3-1: Manufacturer: syz
[   63.127950][   T24] usb 3-1: SerialNumber: syz
[   63.135763][   T24] usb 3-1: config 0 descriptor??
[   63.276684][ T6052] ip6erspan0: entered allmulticast mode
[   63.360759][   T24] speedtch 3-1:0.0: speedtch_bind: data interface not found!
[   63.363404][   T24] speedtch 3-1:0.0: usbatm_usb_probe: bind failed: -19!
[   63.438799][ T6050] loop0: detected capacity change from 0 to 40427
[   63.463380][ T6050] F2FS-fs (loop0): invalid crc value
[   63.502413][ T6060] loop1: detected capacity change from 0 to 512
[   63.510318][ T5203] Bluetooth: hci1: command tx timeout
[   63.512708][ T5203] Bluetooth: hci0: command tx timeout
[   63.514993][ T5203] Bluetooth: hci2: command tx timeout
[   63.534836][ T6060] EXT4-fs (loop1): 1 truncate cleaned up
[   63.542406][ T6060] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   63.551657][ T6050] F2FS-fs (loop0): Start checkpoint disabled!
[   63.558265][ T6050] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[   63.567818][   T47] usb 3-1: USB disconnect, device number 2
[   63.582615][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   63.620520][ T6067] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   63.665783][ T6050] F2FS-fs (loop0): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[   63.754363][  T744] kworker/u9:3: attempt to access beyond end of device
[   63.754363][  T744] loop0: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[   63.765436][  T744] CPU: 0 UID: 0 PID: 744 Comm: kworker/u9:3 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8-dirty #0 PREEMPT(full) 
[   63.765454][  T744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   63.765463][  T744] Workqueue: writeback wb_workfn (flush-7:0)
[   63.765484][  T744] Call Trace:
[   63.765489][  T744]  <TASK>
[   63.765495][  T744]  dump_stack_lvl+0x189/0x250
[   63.765518][  T744]  ? __pfx_dump_stack_lvl+0x10/0x10
[   63.765532][  T744]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   63.765547][  T744]  ? __pfx_queue_work_on+0x10/0x10
[   63.765559][  T744]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   63.765573][  T744]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   63.765589][  T744]  ? f2fs_hw_is_readonly+0x39b/0x470
[   63.765607][  T744]  f2fs_handle_critical_error+0x37c/0x540
[   63.765625][  T744]  f2fs_write_end_io+0x495/0x810
[   63.765639][  T744]  ? blkg_put+0x22/0x240
[   63.765661][  T744]  __submit_merged_bio+0x27a/0x6a0
[   63.765680][  T744]  __submit_merged_write_cond+0x255/0x530
[   63.765700][  T744]  f2fs_write_data_pages+0x261d/0x3000
[   63.765753][  T744]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   63.765833][  T744]  ? f2fs_write_meta_pages+0x357/0x450
[   63.765855][  T744]  ? __lock_acquire+0xab9/0xd20
[   63.765874][  T744]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   63.765888][  T744]  do_writepages+0x32e/0x550
[   63.765909][  T744]  ? reacquire_held_locks+0x127/0x1d0
[   63.765918][  T744]  ? writeback_sb_inodes+0x372/0x1000
[   63.765940][  T744]  __writeback_single_inode+0x145/0xff0
[   63.765956][  T744]  ? do_raw_spin_unlock+0x4d/0x240
[   63.765973][  T744]  writeback_sb_inodes+0x6b5/0x1000
[   63.766011][  T744]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   63.766109][  T744]  ? rcu_is_watching+0x15/0xb0
[   63.766135][  T744]  wb_writeback+0x43b/0xaf0
[   63.766159][  T744]  ? queue_io+0x351/0x590
[   63.766177][  T744]  ? __pfx_wb_writeback+0x10/0x10
[   63.766201][  T744]  ? _raw_spin_unlock_irq+0x23/0x50
[   63.766220][  T744]  wb_workfn+0x409/0xef0
[   63.766247][  T744]  ? __pfx_wb_workfn+0x10/0x10
[   63.766265][  T744]  ? __lock_acquire+0xab9/0xd20
[   63.766289][  T744]  ? process_scheduled_works+0x9ef/0x17b0
[   63.766310][  T744]  ? _raw_spin_unlock_irq+0x23/0x50
[   63.766323][  T744]  ? process_scheduled_works+0x9ef/0x17b0
[   63.766338][  T744]  ? process_scheduled_works+0x9ef/0x17b0
[   63.766355][  T744]  process_scheduled_works+0xae1/0x17b0
[   63.766396][  T744]  ? __pfx_process_scheduled_works+0x10/0x10
[   63.766427][  T744]  worker_thread+0x8a0/0xda0
[   63.766447][  T744]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   63.766467][  T744]  ? __kthread_parkme+0x7b/0x200
[   63.766487][  T744]  kthread+0x711/0x8a0
[   63.766503][  T744]  ? __pfx_worker_thread+0x10/0x10
[   63.766519][  T744]  ? __pfx_kthread+0x10/0x10
[   63.766533][  T744]  ? _raw_spin_unlock_irq+0x23/0x50
[   63.766546][  T744]  ? lockdep_hardirqs_on+0x9c/0x150
[   63.766560][  T744]  ? __pfx_kthread+0x10/0x10
[   63.766574][  T744]  ret_from_fork+0x3fc/0x770
[   63.766592][  T744]  ? __pfx_ret_from_fork+0x10/0x10
[   63.766612][  T744]  ? __switch_to_asm+0x39/0x70
[   63.766623][  T744]  ? __switch_to_asm+0x33/0x70
[   63.766632][  T744]  ? __pfx_kthread+0x10/0x10
[   63.766645][  T744]  ret_from_fork_asm+0x1a/0x30
[   63.766670][  T744]  </TASK>
[   63.766676][  T744] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   63.937331][  T744] CPU: 0 UID: 0 PID: 744 Comm: kworker/u9:3 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8-dirty #0 PREEMPT(full) 
[   63.937350][  T744] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   63.937358][  T744] Workqueue: writeback wb_workfn (flush-7:0)
[   63.937379][  T744] Call Trace:
[   63.937390][  T744]  <TASK>
[   63.937395][  T744]  dump_stack_lvl+0x189/0x250
[   63.937416][  T744]  ? __pfx_dump_stack_lvl+0x10/0x10
[   63.937430][  T744]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   63.937444][  T744]  ? __pfx_queue_work_on+0x10/0x10
[   63.937456][  T744]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   63.937470][  T744]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   63.937485][  T744]  ? f2fs_hw_is_readonly+0x39b/0x470
[   63.937503][  T744]  f2fs_handle_critical_error+0x37c/0x540
[   63.937521][  T744]  f2fs_write_end_io+0x495/0x810
[   63.937533][  T744]  ? blkg_put+0x22/0x240
[   63.937557][  T744]  __submit_merged_bio+0x27a/0x6a0
[   63.937576][  T744]  __submit_merged_write_cond+0x255/0x530
[   63.937595][  T744]  f2fs_write_data_pages+0x261d/0x3000
[   63.937635][  T744]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   63.937716][  T744]  ? f2fs_write_meta_pages+0x357/0x450
[   63.937738][  T744]  ? __lock_acquire+0xab9/0xd20
[   63.937756][  T744]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   63.937771][  T744]  do_writepages+0x32e/0x550
[   63.937792][  T744]  ? reacquire_held_locks+0x127/0x1d0
[   63.937801][  T744]  ? writeback_sb_inodes+0x372/0x1000
[   63.937824][  T744]  __writeback_single_inode+0x145/0xff0
[   63.937839][  T744]  ? do_raw_spin_unlock+0x4d/0x240
[   63.937855][  T744]  writeback_sb_inodes+0x6b5/0x1000
[   63.937892][  T744]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   63.937942][  T744]  ? rcu_is_watching+0x15/0xb0
[   63.937966][  T744]  wb_writeback+0x43b/0xaf0
[   63.937988][  T744]  ? queue_io+0x351/0x590
[   63.938007][  T744]  ? __pfx_wb_writeback+0x10/0x10
[   63.938029][  T744]  ? _raw_spin_unlock_irq+0x23/0x50
[   63.938047][  T744]  wb_workfn+0x409/0xef0
[   63.938103][  T744]  ? __pfx_wb_workfn+0x10/0x10
[   63.938124][  T744]  ? __lock_acquire+0xab9/0xd20
[   63.938148][  T744]  ? process_scheduled_works+0x9ef/0x17b0
[   63.938169][  T744]  ? _raw_spin_unlock_irq+0x23/0x50
[   63.938182][  T744]  ? process_scheduled_works+0x9ef/0x17b0
[   63.938197][  T744]  ? process_scheduled_works+0x9ef/0x17b0
[   63.938214][  T744]  process_scheduled_works+0xae1/0x17b0
[   63.938256][  T744]  ? __pfx_process_scheduled_works+0x10/0x10
[   63.938287][  T744]  worker_thread+0x8a0/0xda0
[   63.938306][  T744]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   63.938328][  T744]  ? __kthread_parkme+0x7b/0x200
[   63.938348][  T744]  kthread+0x711/0x8a0
[   63.938363][  T744]  ? __pfx_worker_thread+0x10/0x10
[   63.938385][  T744]  ? __pfx_kthread+0x10/0x10
[   63.938400][  T744]  ? _raw_spin_unlock_irq+0x23/0x50
[   63.938414][  T744]  ? lockdep_hardirqs_on+0x9c/0x150
[   63.938427][  T744]  ? __pfx_kthread+0x10/0x10
[   63.938441][  T744]  ret_from_fork+0x3fc/0x770
[   63.938458][  T744]  ? __pfx_ret_from_fork+0x10/0x10
[   63.938474][  T744]  ? __switch_to_asm+0x39/0x70
[   63.938484][  T744]  ? __switch_to_asm+0x33/0x70
[   63.938493][  T744]  ? __pfx_kthread+0x10/0x10
[   63.938506][  T744]  ret_from_fork_asm+0x1a/0x30
[   63.938527][  T744]  </TASK>
[   63.938532][  T744] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   64.813428][ T6089] netlink: 16 bytes leftover after parsing attributes in process `syz.0.84'.
[   64.926014][ T6096] loop1: detected capacity change from 0 to 256
[   65.041534][ T6102] netlink: 'syz.2.90': attribute type 10 has an invalid length.
[   65.169520][    T9] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[   65.196662][ T6112] loop1: detected capacity change from 0 to 256
[   65.204088][ T6112] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[   65.324830][    T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   65.328382][    T9] usb 1-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00
[   65.332278][ T5281] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   65.335485][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.350920][    T9] usb 1-1: config 0 descriptor??
[   65.423546][ T6124] loop1: detected capacity change from 0 to 4096
[   65.452484][ T6125] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   65.499596][ T5281] usb 3-1: Using ep0 maxpacket: 16
[   65.506546][ T5281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   65.515132][ T5281] usb 3-1: New USB device found, idVendor=045e, idProduct=0284, bcdDevice=a4.8f
[   65.518175][ T5281] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.525809][ T5281] usb 3-1: Product: syz
[   65.527425][ T5281] usb 3-1: Manufacturer: syz
[   65.529156][ T5281] usb 3-1: SerialNumber: syz
[   65.553758][ T5281] usb 3-1: config 0 descriptor??
[   65.587963][ T6128] NILFS error (device loop1): nilfs_readdir: zero-length directory entry
[   65.615508][ T6128] NILFS error (device loop1): nilfs_readdir: zero-length directory entry
[   65.845331][    T9] usb 3-1: USB disconnect, device number 3
[   65.870309][ T5281] usb 2-1: new full-speed USB device number 3 using dummy_hcd
[   66.044329][ T5281] usb 2-1: config 0 has an invalid interface number: 77 but max is 0
[   66.047818][ T5281] usb 2-1: config 0 has no interface number 0
[   66.063514][ T5281] usb 2-1: config 0 interface 77 altsetting 1 endpoint 0x2 has invalid maxpacket 544, setting to 64
[   66.072863][ T5844] usb 1-1: USB disconnect, device number 3
[   66.075926][ T5281] usb 2-1: config 0 interface 77 has no altsetting 0
[   66.091259][ T5281] usb 2-1: New USB device found, idVendor=11ff, idProduct=9d64, bcdDevice=33.bd
[   66.095140][ T5281] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.113229][ T5281] usb 2-1: Product: syz
[   66.115109][ T5281] usb 2-1: Manufacturer: syz
[   66.117077][ T5281] usb 2-1: SerialNumber: syz
[   66.130144][ T5281] usb 2-1: config 0 descriptor??
[   66.135415][ T6128] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[   67.119890][ T6141] warning: `syz.2.107' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   67.612499][ T5844] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   68.489695][ T5844] usb 3-1: Using ep0 maxpacket: 8
[   69.156537][ T5281] usb 2-1: USB disconnect, device number 3
[   69.162518][ T5844] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[   69.166363][ T5844] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.179277][ T5844] usb 3-1: Product: syz
[   69.185278][ T5844] usb 3-1: Manufacturer: syz
[   69.188075][ T5844] usb 3-1: SerialNumber: syz
[   69.196630][ T5844] usb 3-1: config 0 descriptor??
[   69.291643][ T6158] netlink: 'syz.0.116': attribute type 1 has an invalid length.
[   69.294454][ T6158] netlink: 17 bytes leftover after parsing attributes in process `syz.0.116'.
[   69.414337][ T5844] gspca_main: sunplus-2.14.0 probing 04a5:3003
[   69.431609][ T5844] gspca_sunplus: reg_w_riv err -71
[   69.433909][ T5844] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[   69.447988][ T5844] usb 3-1: USB disconnect, device number 4
[   69.465312][ T6164] Zero length message leads to an empty skb
[   69.584314][ T6171] netlink: 16 bytes leftover after parsing attributes in process `syz.0.121'.
[   69.895425][ T6183] program syz.1.122 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   70.416282][ T6189] loop0: detected capacity change from 0 to 64
[   70.436375][ T6189] MINIX-fs: mounting unchecked file system, running fsck is recommended
[   70.914306][ T6192] xt_CT: No such helper "snmp"
[   71.045448][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.048285][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[   71.184605][ T6209] netlink: 48 bytes leftover after parsing attributes in process `syz.2.134'.
[   71.481286][ T6228] loop1: detected capacity change from 0 to 64
[   71.517394][ T6228] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[   71.526176][ T6228] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted on loop1
[   71.801974][ T5281] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   71.960747][ T5281] usb 3-1: Using ep0 maxpacket: 16
[   71.965781][ T5281] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   71.972723][ T5281] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   71.977504][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has a duplicate endpoint with address 0x2, skipping
[   71.982346][ T5281] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   71.988943][ T5281] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[   71.993290][ T5281] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[   72.000704][ T5281] usb 3-1: Manufacturer: syz
[   72.010311][ T5281] usb 3-1: config 0 descriptor??
[   72.090379][ T6258] loop1: detected capacity change from 0 to 128
[   72.131277][ T6258] FAT-fs (loop1): error, corrupted directory (invalid i_start)
[   72.134666][ T6258] FAT-fs (loop1): Filesystem has been set read-only
[   72.271649][ T5281] usb 3-1: USB disconnect, device number 5
[   72.272751][ T6263] program syz.1.162 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   72.847241][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801e8b4400: rx timeout, send abort
[   72.852624][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803ca8c800: rx timeout, send abort
[   73.106722][ T6267] loop2: detected capacity change from 0 to 8
[   73.352270][    C0] vcan0: j1939_tp_rxtimer: 0xffff88801e8b4400: abort rx timeout. Force session deactivation
[   73.358235][    C0] vcan0: j1939_tp_rxtimer: 0xffff88803ca8c800: abort rx timeout. Force session deactivation
[   73.682119][ T6286] loop1: detected capacity change from 0 to 128
[   73.701313][ T6286] FAT-fs (loop1): bogus number of reserved sectors
[   73.704180][ T6286] FAT-fs (loop1): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[   73.710560][ T6286] FAT-fs (loop1): Can't find a valid FAT filesystem
[   73.838450][ T6291] loop0: detected capacity change from 0 to 2048
[   73.844164][ T6291] NILFS (loop0): couldn't find nilfs on the device
[   74.013512][ T6305] netlink: 8 bytes leftover after parsing attributes in process `syz.1.181'.
[   74.029636][ T6305] netlink: 12 bytes leftover after parsing attributes in process `syz.1.181'.
[   74.032574][ T6305] netlink: 'syz.1.181': attribute type 18 has an invalid length.
[   74.083098][ T6307] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   74.086185][ T6307] overlayfs: failed to set xattr on upper
[   74.110745][ T6307] overlayfs: ...falling back to redirect_dir=nofollow.
[   74.114139][ T6307] overlayfs: ...falling back to index=off.
[   74.116599][ T6307] overlayfs: ...falling back to uuid=null.
[   74.119070][ T6307] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[   74.283662][ T6318] PKCS8: Unsupported PKCS#8 version
[   74.356506][ T6322] netlink: 'syz.0.189': attribute type 1 has an invalid length.
[   74.368372][ T6322] netlink: 224 bytes leftover after parsing attributes in process `syz.0.189'.
[   74.482789][   T33] audit: type=1800 audit(1751868327.195:3): pid=6331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.194" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[   74.483327][ T6330] Bluetooth: MGMT ver 1.23
[   74.681294][ T6343] loop1: detected capacity change from 0 to 256
[   74.691172][ T6343] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   74.712219][ T6343] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   75.173103][ T6367] loop2: detected capacity change from 0 to 4096
[   75.206680][ T6371] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   75.254608][ T6373] netlink: 8 bytes leftover after parsing attributes in process `syz.0.207'.
[   75.258292][ T6373] openvswitch: netlink: nsh attr 0 has unexpected len 2044 expected 0
[   75.276096][ T6373] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   75.997487][ T6388] loop1: detected capacity change from 0 to 4096
[   76.016967][ T6388] NILFS (loop1): invalid segment: Checksum error in segment payload
[   76.021848][ T6388] NILFS (loop1): trying rollback from an earlier position
[   76.039173][ T6388] NILFS (loop1): recovery complete
[   76.044896][ T6389] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   76.559782][ T5814] Bluetooth: hci0: command 0x1407 tx timeout
[   76.563719][ T5203] Bluetooth: hci0: Opcode 0x1407 failed: -110
[   77.092532][ T6401] netlink: 'syz.1.217': attribute type 11 has an invalid length.
[   77.095510][ T6401] netlink: 149476 bytes leftover after parsing attributes in process `syz.1.217'.
[   77.148611][ T6400] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   77.461407][ T6421] netlink: 156 bytes leftover after parsing attributes in process `syz.1.224'.
[   77.536103][ T6425] loop1: detected capacity change from 0 to 512
[   77.542564][ T6425] EXT4-fs (loop1): revision level too high, forcing read-only mode
[   77.545812][ T6425] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e042e128, mo2=0002]
[   77.549124][ T6425] System zones: 0-1, 15-15, 18-18, 34-34
[   77.553597][ T6425] EXT4-fs (loop1): orphan cleanup on readonly fs
[   77.556260][ T6425] EXT4-fs error (device loop1): ext4_ext_check_inode:523: inode #4: comm syz.1.226: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0)
[   77.564704][ T6425] EXT4-fs (loop1): Remounting filesystem read-only
[   77.567592][ T6425] EXT4-fs warning (device loop1): ext4_enable_quotas:7168: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[   77.577071][ T6425] EXT4-fs (loop1): Cannot turn on quotas: error -117
[   77.582756][ T6425] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   77.588087][ T6427] netlink: 4 bytes leftover after parsing attributes in process `syz.2.225'.
[   77.598629][ T6425] EXT4-fs (loop1): shut down requested (1)
[   78.008258][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   78.084157][ T6429] loop1: detected capacity change from 0 to 8192
[   78.538560][ T6439] loop1: detected capacity change from 0 to 32768
[   78.992872][ T6439] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   79.007510][ T6439] OCFS2: ERROR (device loop1): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list
[   79.015524][ T6439] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   79.019623][ T6439] OCFS2: File system is now read-only.
[   79.021991][ T6439] (syz.1.232,6439,1):ocfs2_find_leaf:1948 ERROR: status = -30
[   79.025196][ T6439] (syz.1.232,6439,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[   79.028679][ T6439] (syz.1.232,6439,1):ocfs2_get_clusters:634 ERROR: status = -30
[   79.032662][ T6439] (syz.1.232,6439,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30
[   79.036186][ T6439] (syz.1.232,6439,1):ocfs2_read_virt_blocks:997 ERROR: status = -30
[   79.040007][ T6439] (syz.1.232,6439,1):ocfs2_read_dir_block:511 ERROR: status = -30
[   79.067461][ T5815] ocfs2: Unmounting device (7,1) on (node local)
[   79.205953][ T6449] loop1: detected capacity change from 0 to 256
[   79.836691][ T6454] 8021q: adding VLAN 0 to HW filter on device bond1
[   80.044555][ T6472] input: syz0 as /devices/virtual/input/input5
[   80.379860][ T6489] loop0: detected capacity change from 0 to 512
[   80.387772][ T6489] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   80.429028][ T6489] EXT4-fs (loop0): 1 orphan inode deleted
[   80.434758][ T6489] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   80.451458][   T40] Quota error (device loop0): do_check_range: Getting dqdh_entries 15 out of range 0-14
[   80.454826][   T40] EXT4-fs error (device loop0): ext4_release_dquot:6969: comm kworker/u10:2: Failed to release dquot type 1
[   80.459170][ T6489] ext4 filesystem being mounted at /75/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   80.481609][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   80.672777][ T6499] loop0: detected capacity change from 0 to 32768
[   80.703625][ T6494] loop1: detected capacity change from 0 to 32768
[   80.709123][ T6494] (syz.1.255,6494,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   80.720655][ T6494] (syz.1.255,6494,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   80.743403][ T6494] JBD2: Ignoring recovery information on journal
[   80.781514][ T6494] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[   80.785711][ T6506] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   80.844590][   T33] audit: type=1800 audit(1751868333.555:4): pid=6494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.255" name="file1" dev="loop1" ino=16980 res=0 errno=0
[   80.877385][ T6494] syz.1.255 (6494) used greatest stack depth: 18984 bytes left
[   80.898597][ T6512] loop0: detected capacity change from 0 to 8
[   80.924555][ T5815] ocfs2: Unmounting device (7,1) on (node local)
[   81.288061][  T792] cfg80211: failed to load regulatory.db
[   81.648940][ T6531] loop0: detected capacity change from 0 to 764
[   81.696354][ T6531] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   82.319493][  T792] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   82.386407][ T6543] loop1: detected capacity change from 0 to 4096
[   82.395697][ T6543] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   82.457034][ T6543] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[   82.483990][  T792] usb 1-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   82.487880][  T792] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.499079][  T792] usb 1-1: config 0 descriptor??
[   82.507050][   T28] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[   82.520056][ T5815] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[   82.526810][ T5815] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   82.539186][ T5815] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[   82.549002][   T28] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[   82.726832][ T6551] netlink: 8 bytes leftover after parsing attributes in process `syz.1.279'.
[   82.861335][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'.
[   82.865340][ T6557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.282'.
[   82.961349][ T6559] loop1: detected capacity change from 0 to 1024
[   82.965504][ T6559] EXT4-fs: Ignoring removed oldalloc option
[   82.975247][ T6559] EXT4-fs: Ignoring removed bh option
[   83.024175][ T6559] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.058535][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.483343][  T792] usb 1-1: Cannot set autoneg
[   83.488673][  T792] MOSCHIP usb-ethernet driver 1-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   83.523971][  T792] usb 1-1: USB disconnect, device number 4
[   84.262617][ T6575] loop0: detected capacity change from 0 to 2048
[   84.318588][ T6575] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   84.323641][ T6575] ext4 filesystem being mounted at /84/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   84.362108][ T6575] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   84.384668][ T6575] fs-verity: sha512 using implementation "sha512-generic"
[   84.574095][ T5811] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.358734][ T6609] PID 6609 killed due to inadequate hugepage pool
[   85.624210][   T33] audit: type=1326 audit(1751868338.335:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.0.294" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efe8438e929 code=0x7fc00000
[   85.666992][   T33] audit: type=1326 audit(1751868338.335:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6588 comm="syz.0.294" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7efe8438e929 code=0x7fc00000
[   85.952908][  T792] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   86.109754][  T792] usb 3-1: Using ep0 maxpacket: 16
[   86.116677][  T792] usb 3-1: config 0 has an invalid interface number: 214 but max is 0
[   86.128349][  T792] usb 3-1: config 0 has no interface number 0
[   86.132333][  T792] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[   86.139563][ T5878] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   86.157519][  T792] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[   86.168458][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.179638][  T792] usb 3-1: Product: syz
[   86.181539][  T792] usb 3-1: Manufacturer: syz
[   86.183611][  T792] usb 3-1: SerialNumber: syz
[   86.205554][  T792] usb 3-1: config 0 descriptor??
[   86.311997][ T5878] usb 1-1: config 3 has an invalid interface number: 7 but max is 0
[   86.316400][ T5878] usb 1-1: config 3 has no interface number 0
[   86.318736][ T5878] usb 1-1: config 3 interface 7 has no altsetting 0
[   86.324180][ T5878] usb 1-1: New USB device found, idVendor=06e1, idProduct=a155, bcdDevice=3f.7b
[   86.327325][ T5878] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.331940][ T5878] usb 1-1: Product: syz
[   86.333315][ T5878] usb 1-1: Manufacturer: syz
[   86.334886][ T5878] usb 1-1: SerialNumber: syz
[   86.557519][ T5878] radio-si470x 1-1:3.7: si470x_get_report: usb_control_msg returned -71
[   86.569670][ T5878] radio-si470x 1-1:3.7: probe with driver radio-si470x failed with error -5
[   86.591873][ T5878] usb 1-1: USB disconnect, device number 5
[   87.208577][ T6632] loop0: detected capacity change from 0 to 256
[   87.223147][ T6632] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xcab3d314, utbl_chksum : 0xe619d30d)
[   87.250955][  T792] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.214/input/input6
[   87.581900][  T792] usb 3-1: USB disconnect, device number 6
[   87.774463][ T6651] [U] 
[   87.775842][ T6651] [U] K{
[   87.777197][ T6651] [U] t 1Ffˊ`GJgo/mC
[   87.786736][ T6651] [U] tؖ/,~Ĝj}8'o1"7-JQKWq5c%"H12YX``+(!(z'tXlnIgjݭp~7!"(5Ob̓J
[   87.793476][ T6651] [U] k\&}66XHX.`a$40|϶9ިU4Vbz}wMTQΦr4
[   87.797898][ T6651] [U] ".h6"k[J4In[Z(C|T]z{3c=x4w)\TXJSH{q;칢t+gd.˂>ywUhfNhl]S2\g%O&z)'pul_<	ذ`ұT;_"(u{7j2X /'cIHcճV=Ai%wEs RjgrhIa6-DV i"n Asc~48c*OO5/J~wvK+3Y)Mvyq潀DTrOtpem%fejA5T_-X~^aaۂq
[   87.815768][ T6651] [U] 	+wG?]'a:	)' B>tf/<'U'hi.+]e.-ɿ%>2`^U8F.63+A«g3p6:^0tv'EtYCnrϩnPj;Z8!\Aʖ2$­wi.#/Bai`4jdy@zgW5˿BٜNy"vI2
[   87.825972][ T6651] [U] T_K5tYJ9c$brLNul9w|G"ʃ%C؝q 3qN^HP*$	.7yӱ2
[   87.833109][ T6651] [U] ?h*37鍾^#Q"0~(oXLb,'v=CSGS0ւ`ه=1(p#2DO*Ƀ
[   87.842262][ T6651] [U] sgGud-{|&2Lc_!`oz֥B%>rwSsH"yA4O.Y䏄RTԶB[+/<<RB|Фe۠V96#ͤjU%s851ҩsP\?q|LQX0K1orɴ2|dF2ޔ0H}C[/px^o
[   87.853940][ T6651] [U] ؛(JЛmxz;؝_*335\xmUAK!aQ`;FI+VUHmjƷZcz)_矡	&axto_ :%PCy+_}UmƫC!KJ7g=b
[   87.858441][ T6648] loop1: detected capacity change from 0 to 32768
[   87.862040][ T6651] [U] ٽF%XAl2r*gVW$j	AFߝ+9̈́Vi֗kپ1}_%r6(]/řYܺhr grn/ܫ#!d%D-{$vUT$:mtrEC1VD~];[sq(e,X8"Gd2@T8t8.Rc+@ꦇpupC'yL-Ss1E?7O^]cH]Jkr]Rkq܆ݣOTcx4N	&ڋ@:m7~+W*xM>>{q_՝LX8U{Z)7?rR;crhײڣ1>)Măt(aϝ}9ڥJ*Mќġ'Lq	DW=|q	ÆW;5Ž!dBx`/E`ƦMX"\
[   87.887157][ T6651] [U] {;٘_o2)o.2W2yx_  HPϱSD:]{
[   87.891567][ T6651] [U] I,>	51^1N4oǶ'0?֒i9w._.WaV`)Zc6GiӹaXL[F*OW)+'\n[K@2Ǭp"^`	
[   87.897235][ T6651] [U] 22Ʃx?0;3u
[   87.899087][ T6651] [U] ޜsObx8W4(~/KUԖoQe+G-ygY_>v3.hә]̈́2)D,		D~d+w;A\FPȘ|$)KؐIɿkYT^R癵A=#ܜ	aet1ݯ4K.e"RS|s:>pr"z#P!KY"}FN84hޱosߙ̫%Dlwm
[   87.913734][ T6651] [U] [['xn',mr/1D=!Dx91BwRlfKZ#`l؛˜b~m
[   87.917986][ T6651] [U] L>d+d"5h3<iR=F^fnvDOIO:U>Y
[   87.921628][ T6648] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   87.922068][ T6651] [U] 'B6v20瞥׌"t8{9FW]쩍
[   87.928527][ T6651] [U] 72uC6τI]8ctۨQSkYI |V'TV/g$[ 9kh`"}[^=0]%̂TF_v4C
[   87.936118][ T6651] [U] ec
[   87.937540][ T6651] [U] |<:^3$7nK~-@?/mtl۾Iw@g~t{P+$jp|IRipm Y 8tV,l,
[   87.961294][ T6648] XFS (loop1): Ending clean mount
[   87.972342][ T6650] [U] K)0~ʪiP'fzr@B]5{ʼ'8ƥFUTqUdǩK;70c[yYCذmL8T͚5rxW xoQhVi'8L
[   87.981103][ T6648] XFS (loop1): Quotacheck needed: Please wait.
[   88.022988][ T6648] XFS (loop1): Quotacheck: Done.
[   88.078342][ T5815] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   88.292238][ T6672] loop2: detected capacity change from 0 to 2048
[   88.305256][ T6672] EXT4-fs: Ignoring removed nomblk_io_submit option
[   88.328323][ T6672] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   88.376822][ T5819] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   88.491235][ T6685] loop2: detected capacity change from 0 to 1024
[   88.537946][ T1098] hfsplus: b-tree write err: -5, ino 4
[   88.662699][ T6695] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   88.866301][ T6706] capability: warning: `syz.2.344' uses deprecated v2 capabilities in a way that may be insecure
[   88.954439][ T6709] tmpfs: Bad value for 'mpol'
[   89.306199][ T6709] loop1: detected capacity change from 0 to 32768
[   89.312059][ T6709] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.342 (6709)
[   89.324196][ T6709] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   89.327693][ T6709] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[   89.330820][ T6709] BTRFS info (device loop1): disk space caching is enabled
[   89.333303][ T6709] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   89.398691][ T6709] BTRFS info (device loop1): rebuilding free space tree
[   89.424164][ T6709] BTRFS info (device loop1): disabling free space tree
[   89.427219][ T6709] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   89.431441][ T6709] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   89.499708][  T792] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   89.652918][ T6733] loop0: detected capacity change from 0 to 32768
[   89.689768][  T792] usb 3-1: too many configurations: 239, using maximum allowed: 8
[   89.691109][ T5815] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   89.719890][  T792] usb 3-1: New USB device found, idVendor=041e, idProduct=4068, bcdDevice=e6.56
[   89.724201][ T6733] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   89.730004][  T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   89.742418][  T792] usb 3-1: SerialNumber: syz
[   89.757510][  T792] usb 3-1: config 0 descriptor??
[   89.801702][ T6733] 
[   89.802762][ T6733] ======================================================
[   89.805645][ T6733] WARNING: possible circular locking dependency detected
[   89.808459][ T6733] 6.16.0-rc4-syzkaller-00286-gc435a4f487e8-dirty #0 Not tainted
[   89.813042][ T6733] ------------------------------------------------------
[   89.815495][ T6733] syz.0.348/6733 is trying to acquire lock:
[   89.817642][ T6733] ffff88803d5da360 (&oi->ip_alloc_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xb6/0x320
[   89.821147][ T6733] 
[   89.821147][ T6733] but task is already holding lock:
[   89.823588][ T6733] ffff88803d5da3f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[   89.827419][ T6733] 
[   89.827419][ T6733] which lock already depends on the new lock.
[   89.827419][ T6733] 
[   89.831743][ T6733] 
[   89.831743][ T6733] the existing dependency chain (in reverse order) is:
[   89.835067][ T6733] 
[   89.835067][ T6733] -> #4 (&oi->ip_xattr_sem){++++}-{4:4}:
[   89.837689][ T6733]        lock_acquire+0x120/0x360
[   89.839420][ T6733]        down_read+0x46/0x2e0
[   89.840945][ T6733]        ocfs2_init_acl+0x2f9/0x720
[   89.842708][ T6733]        ocfs2_mknod+0x1321/0x2050
[   89.844496][ T6733]        ocfs2_mkdir+0x191/0x440
[   89.846228][ T6733]        vfs_mkdir+0x306/0x510
[   89.847894][ T6733]        do_mkdirat+0x247/0x590
[   89.849557][ T6733]        __x64_sys_mkdirat+0x87/0xa0
[   89.851573][ T6733]        do_syscall_64+0xfa/0x3b0
[   89.853225][ T6733]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.855577][ T6733] 
[   89.855577][ T6733] -> #3 (jbd2_handle){++++}-{0:0}:
[   89.858475][ T6733]        lock_acquire+0x120/0x360
[   89.860347][ T6733]        start_this_handle+0x1fa7/0x21c0
[   89.862260][ T6733]        jbd2__journal_start+0x2c1/0x5b0
[   89.864497][ T6733]        jbd2_journal_start+0x2a/0x40
[   89.866510][ T6733]        ocfs2_start_trans+0x376/0x6d0
[   89.868513][ T6733]        ocfs2_mknod+0xe93/0x2050
[   89.870326][ T6733]        ocfs2_create+0x1a5/0x440
[   89.872109][ T6733]        path_openat+0x14f4/0x3830
[   89.874117][ T6733]        do_filp_open+0x1fa/0x410
[   89.875773][ T6733]        do_sys_openat2+0x121/0x1c0
[   89.877585][ T6733]        __x64_sys_creat+0x8f/0xc0
[   89.879440][ T6733]        do_syscall_64+0xfa/0x3b0
[   89.881237][ T6733]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.883490][ T6733] 
[   89.883490][ T6733] -> #2 (&journal->j_trans_barrier){.+.+}-{4:4}:
[   89.886597][ T6733]        lock_acquire+0x120/0x360
[   89.888257][ T6733]        down_read+0x46/0x2e0
[   89.889842][ T6733]        ocfs2_start_trans+0x36a/0x6d0
[   89.891669][ T6733]        ocfs2_mknod+0xe93/0x2050
[   89.893325][ T6733]        ocfs2_create+0x1a5/0x440
[   89.894974][ T6733]        path_openat+0x14f4/0x3830
[   89.896666][ T6733]        do_filp_open+0x1fa/0x410
[   89.898299][ T6733]        do_sys_openat2+0x121/0x1c0
[   89.900005][ T6733]        __x64_sys_creat+0x8f/0xc0
[   89.901712][ T6733]        do_syscall_64+0xfa/0x3b0
[   89.903456][ T6733]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.905841][ T6733] 
[   89.905841][ T6733] -> #1 (sb_internal#2){.+.+}-{0:0}:
[   89.908977][ T6733]        lock_acquire+0x120/0x360
[   89.910664][ T6733]        ocfs2_start_trans+0x26b/0x6d0
[   89.912513][ T6733]        ocfs2_zero_extend+0x8d3/0x2890
[   89.914687][ T6733]        ocfs2_extend_no_holes+0x267/0x4a0
[   89.916544][ T6733]        ocfs2_expand_nonsparse_inode+0x160/0x450
[   89.918606][ T6733]        ocfs2_write_begin_nolock+0x1a81/0x4340
[   89.920683][ T6733]        ocfs2_write_begin+0x1bb/0x310
[   89.922508][ T6733]        generic_perform_write+0x2c7/0x910
[   89.924463][ T6733]        ocfs2_file_write_iter+0x157a/0x1d10
[   89.926461][ T6733]        aio_write+0x535/0x7a0
[   89.928065][ T6733]        io_submit_one+0x78b/0x1310
[   89.929924][ T6733]        __se_sys_io_submit+0x185/0x2f0
[   89.931706][ T6733]        do_syscall_64+0xfa/0x3b0
[   89.933362][ T6733]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.935497][ T6733] 
[   89.935497][ T6733] -> #0 (&oi->ip_alloc_sem){++++}-{4:4}:
[   89.938047][ T6733]        validate_chain+0xb9b/0x2140
[   89.939754][ T6733]        __lock_acquire+0xab9/0xd20
[   89.941513][ T6733]        lock_acquire+0x120/0x360
[   89.943196][ T6733]        down_write+0x96/0x1f0
[   89.944807][ T6733]        ocfs2_try_remove_refcount_tree+0xb6/0x320
[   89.946918][ T6733]        ocfs2_truncate_file+0xda0/0x1420
[   89.948926][ T6733]        ocfs2_setattr+0x1520/0x1b40
[   89.950676][ T6733]        notify_change+0xb36/0xe40
[   89.952385][ T6733]        do_truncate+0x1a4/0x220
[   89.954026][ T6733]        path_openat+0x306c/0x3830
[   89.955649][ T6733]        do_filp_open+0x1fa/0x410
[   89.957294][ T6733]        do_sys_openat2+0x121/0x1c0
[   89.959020][ T6733]        __x64_sys_openat+0x138/0x170
[   89.960769][ T6733]        do_syscall_64+0xfa/0x3b0
[   89.962483][ T6733]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   89.964579][ T6733] 
[   89.964579][ T6733] other info that might help us debug this:
[   89.964579][ T6733] 
[   89.967888][ T6733] Chain exists of:
[   89.967888][ T6733]   &oi->ip_alloc_sem --> jbd2_handle --> &oi->ip_xattr_sem
[   89.967888][ T6733] 
[   89.972130][ T6733]  Possible unsafe locking scenario:
[   89.972130][ T6733] 
[   89.974485][ T6733]        CPU0                    CPU1
[   89.976219][ T6733]        ----                    ----
[   89.977995][ T6733]   lock(&oi->ip_xattr_sem);
[   89.979519][ T6733]                                lock(jbd2_handle);
[   89.981603][ T6733]                                lock(&oi->ip_xattr_sem);
[   89.983848][ T6733]   lock(&oi->ip_alloc_sem);
[   89.985334][ T6733] 
[   89.985334][ T6733]  *** DEADLOCK ***
[   89.985334][ T6733] 
[   89.988055][ T6733] 3 locks held by syz.0.348/6733:
[   89.989662][ T6733]  #0: ffff888118b6c428 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[   89.992658][ T6733]  #1: ffff88803d5da6c0 (&sb->s_type->i_mutex_key#20){+.+.}-{4:4}, at: do_truncate+0x171/0x220
[   89.996043][ T6733]  #2: ffff88803d5da3f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_try_remove_refcount_tree+0xa4/0x320
[   89.999643][ T6733] 
[   89.999643][ T6733] stack backtrace:
[   90.001551][ T6733] CPU: 0 UID: 0 PID: 6733 Comm: syz.0.348 Not tainted 6.16.0-rc4-syzkaller-00286-gc435a4f487e8-dirty #0 PREEMPT(full) 
[   90.001562][ T6733] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   90.001568][ T6733] Call Trace:
[   90.001573][ T6733]  <TASK>
[   90.001578][ T6733]  dump_stack_lvl+0x189/0x250
[   90.001594][ T6733]  ? __pfx_dump_stack_lvl+0x10/0x10
[   90.001606][ T6733]  ? __pfx__printk+0x10/0x10
[   90.001615][ T6733]  ? print_lock_name+0xde/0x100
[   90.001622][ T6733]  print_circular_bug+0x2ee/0x310
[   90.001633][ T6733]  check_noncircular+0x134/0x160
[   90.001642][ T6733]  validate_chain+0xb9b/0x2140
[   90.001653][ T6733]  __lock_acquire+0xab9/0xd20
[   90.001664][ T6733]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[   90.001673][ T6733]  lock_acquire+0x120/0x360
[   90.001681][ T6733]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[   90.001690][ T6733]  down_write+0x96/0x1f0
[   90.001699][ T6733]  ? ocfs2_try_remove_refcount_tree+0xb6/0x320
[   90.001709][ T6733]  ? __pfx_down_write+0x10/0x10
[   90.001717][ T6733]  ocfs2_try_remove_refcount_tree+0xb6/0x320
[   90.001726][ T6733]  ? __pfx_ocfs2_try_remove_refcount_tree+0x10/0x10
[   90.001734][ T6733]  ? up_write+0x1c4/0x420
[   90.001741][ T6733]  ocfs2_truncate_file+0xda0/0x1420
[   90.001753][ T6733]  ? __pfx_ocfs2_truncate_file+0x10/0x10
[   90.001761][ T6733]  ? do_raw_spin_unlock+0x4d/0x240
[   90.001769][ T6733]  ? _raw_spin_unlock+0x28/0x50
[   90.001799][ T6733]  ? ocfs2_inode_lock_tracker+0x3ec/0x660
[   90.001808][ T6733]  ? __pfx_ocfs2_inode_lock_tracker+0x10/0x10
[   90.001814][ T6733]  ? ocfs2_rw_lock+0x13a/0x240
[   90.001819][ T6733]  ? __pfx___dquot_initialize+0x10/0x10
[   90.001827][ T6733]  ? __pfx_ocfs2_rw_lock+0x10/0x10
[   90.001834][ T6733]  ? setattr_prepare+0x1e7/0xac0
[   90.001845][ T6733]  ? inode_newsize_ok+0x11b/0x1c0
[   90.001855][ T6733]  ocfs2_setattr+0x1520/0x1b40
[   90.001864][ T6733]  ? __pfx_ocfs2_setattr+0x10/0x10
[   90.001870][ T6733]  ? ktime_get_coarse_real_ts64_mg+0x52/0x1e0
[   90.001880][ T6733]  ? seqcount_lockdep_reader_access+0x175/0x1c0
[   90.001889][ T6733]  ? ktime_get_coarse_real_ts64_mg+0x1be/0x1e0
[   90.001897][ T6733]  ? current_time+0x222/0x370
[   90.001904][ T6733]  ? evm_inode_setattr+0x1b6/0x7d0
[   90.001913][ T6733]  ? __pfx_current_time+0x10/0x10
[   90.001921][ T6733]  ? try_break_deleg+0x79/0x130
[   90.001929][ T6733]  ? __pfx_ocfs2_setattr+0x10/0x10
[   90.001934][ T6733]  notify_change+0xb36/0xe40
[   90.001944][ T6733]  do_truncate+0x1a4/0x220
[   90.001951][ T6733]  ? __pfx_do_truncate+0x10/0x10
[   90.001956][ T6733]  ? apparmor_file_truncate+0x23e/0x2d0
[   90.001965][ T6733]  path_openat+0x306c/0x3830
[   90.001975][ T6733]  ? arch_stack_walk+0xfc/0x150
[   90.001985][ T6733]  ? __pfx_path_openat+0x10/0x10
[   90.001993][ T6733]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.002008][ T6733]  do_filp_open+0x1fa/0x410
[   90.002019][ T6733]  ? __lock_acquire+0xab9/0xd20
[   90.002027][ T6733]  ? __pfx_do_filp_open+0x10/0x10
[   90.002039][ T6733]  ? _raw_spin_unlock+0x28/0x50
[   90.002046][ T6733]  ? alloc_fd+0x64c/0x6c0
[   90.002053][ T6733]  do_sys_openat2+0x121/0x1c0
[   90.002062][ T6733]  ? __se_sys_futex+0x36f/0x400
[   90.002069][ T6733]  ? __pfx_do_sys_openat2+0x10/0x10
[   90.002078][ T6733]  __x64_sys_openat+0x138/0x170
[   90.002086][ T6733]  do_syscall_64+0xfa/0x3b0
[   90.002093][ T6733]  ? lockdep_hardirqs_on+0x9c/0x150
[   90.002101][ T6733]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.002108][ T6733]  ? exc_page_fault+0x9f/0xf0
[   90.002116][ T6733]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   90.002123][ T6733] RIP: 0033:0x7efe8438e929
[   90.002132][ T6733] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   90.002138][ T6733] RSP: 002b:00007efe852e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[   90.002146][ T6733] RAX: ffffffffffffffda RBX: 00007efe845b5fa0 RCX: 00007efe8438e929
[   90.002150][ T6733] RDX: 0000000000007a05 RSI: 0000200000000140 RDI: ffffffffffffff9c
[   90.002157][ T6733] RBP: 00007efe84410b39 R08: 0000000000000000 R09: 0000000000000000
[   90.002162][ T6733] R10: 0000000000001700 R11: 0000000000000246 R12: 0000000000000000
[   90.002166][ T6733] R13: 0000000000000000 R14: 00007efe845b5fa0 R15: 00007ffec521de88
[   90.002173][ T6733]  </TASK>
[   90.140227][  T792] gspca_main: 041e:4068 too many config
[   90.149735][ T6738] loop1: detected capacity change from 0 to 512
[   90.162989][  T792] usb 3-1: USB disconnect, device number 7
[   90.185912][ T6738] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.349: casefold flag without casefold feature
[   90.195588][ T6738] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.349: couldn't read orphan inode 15 (err -117)
[   90.200635][ T6738] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   90.221382][ T5815] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   90.247001][ T5811] ocfs2: Unmounting device (7,0) on (node local)

VM DIAGNOSIS:
06:05:42  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001bcd RDI=0000000000001bce RBP=00000000000003f8 RSP=ffffc90008eb6850
R8 =ffff88801f6a8237 R9 =1ffff11003ed5046 R10=dffffc0000000000 R11=ffffffff8547a1b0
R12=dffffc0000000000 R13=ffffffff99ac78de R14=ffffffff99dcc720 R15=0000000000000000
RIP=ffffffff8547a22c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007efe852e26c0 ffffffff 00c00000
GS =0000 ffff8880b864d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f0b0ff81178 CR3=000000003f298000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffff0000000000 XMM01=0101010101010101 0101010000000000
XMM02=6d695f746e756f6d 5f7a797300736678 XMM03=aef4cf65caf7ed38 7ab633002c6c6361
XMM04=7461642c65756e69 746e6f633d73726f XMM05=0000000000000000 00007efe852e16e0
XMM06=00007efe852e16e0 00007efe852e1560 XMM07=00007efe852e15a0 00007efe852e1580
XMM08=0000000000000000 0000000006df451d XMM09=0000000000000000 00007efe84411c91
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000000 RBX=dffffc0000000000 RCX=ffff888021089cc0 RDX=0000000000000000
RSI=ffff88801fb8f198 RDI=ffff88801fb8f1a4 RBP=0000000000000005 RSP=ffffc90009067890
R8 =ffff888021089cc0 R9 =0000000000000003 R10=0000000000000009 R11=ffffffff8478edf0
R12=ffffc90009067b60 R13=dffffc0000000000 R14=ffff88801fb8f1a8 R15=ffff88801fb8f198
RIP=ffffffff847a1b68 RFL=00000a03 [-O----C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f543dd33c80 ffffffff 00c00000
GS =0000 ffff8881a3c4d000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055dfc1480018 CR3=0000000109ca4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 ff00000000000000 XMM05=000055dfc147d990 000055dfc147da40
XMM06=000055dfc147fbe0 000055dfc147fb80 XMM07=000055dfc147f900 000055dfc147f880
XMM08=000055dfc147f9f0 000055dfc1480160 XMM09=3a303a322f303a30 3a32746567726174
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
