last executing test programs:

5m57.820795107s ago: executing program 1 (id=492):
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003180)=[{{&(0x7f0000000400)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xfffffffd}, 0x1c, 0x0}}], 0x1, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000002c00)=[{&(0x7f00000004c0)='\x00', 0x1}], 0x1}}], 0x1, 0x4000000)
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0xca02})
close(r0)
socket$nl_netfilter(0x10, 0x3, 0xc)
preadv(r1, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0x3}], 0x3e8, 0x0, 0x0)
ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})

5m57.328475831s ago: executing program 1 (id=496):
r0 = syz_open_dev$dri(&(0x7f0000000180), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000002080)={0x7fff, 0x0, 0x100})

5m57.179490897s ago: executing program 1 (id=499):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r2, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0)

5m57.115905084s ago: executing program 1 (id=501):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000040)='./file0\x00', 0x2000002, &(0x7f0000001140)=ANY=[@ANYBLOB="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"], 0xfe, 0xc2d, &(0x7f00000001c0)="$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")
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000300)='./file2\x00', 0x80cc88, &(0x7f0000000ec0)={[{@fmask={'fmask', 0x3d, 0x9}}, {@umask={'umask', 0x3d, 0x80000002}}, {@utf8}, {@keep_last_dots}, {@allow_utime={'allow_utime', 0x3d, 0x801}}, {@errors_continue}, {@discard}, {@time_offset={'time_offset', 0x3d, 0x4}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-1'}}]}, 0x3, 0x1510, &(0x7f0000003640)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1edc01, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000004100)={0x2020}, 0x2020)

5m57.079299367s ago: executing program 1 (id=502):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}, 0x10)
connect$inet(r0, &(0x7f0000000440)={0x2, 0x4e24, @remote}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f0000000080)={@multicast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @remote, @multicast1=0xac14140f}, {0x4e24, 0x4e20, 0x8}}}}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000080)=ANY=[], 0x0)

5m56.745230832s ago: executing program 1 (id=509):
r0 = semget$private(0x0, 0x5, 0x0)
semctl$SEM_STAT_ANY(r0, 0xea74a5b0b64fd6f6, 0x14, &(0x7f0000000000)=""/66)

5m56.309286313s ago: executing program 32 (id=509):
r0 = semget$private(0x0, 0x5, 0x0)
semctl$SEM_STAT_ANY(r0, 0xea74a5b0b64fd6f6, 0x14, &(0x7f0000000000)=""/66)

3m18.154348149s ago: executing program 3 (id=1958):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x13, &(0x7f0000000040), 0x4)

3m18.087519815s ago: executing program 3 (id=1959):
syz_mount_image$xfs(&(0x7f0000009700), &(0x7f0000009740)='./file0\x00', 0x4000000, &(0x7f0000000180), 0x1, 0x979b, &(0x7f0000012f40)="$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")
syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000180)='./file1\x00', 0x8, &(0x7f0000000880)={[{@noblock_validity}, {@stripe={'stripe', 0x3d, 0x5}}, {@nomblk_io_submit}, {@grpjquota}, {@sb={'sb', 0x3d, 0x64}}, {@orlov}, {@quota}, {@data_err_abort}, {@bsdgroups}, {@dax_inode}]}, 0x66, 0x50a, &(0x7f0000000200)="$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")
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1a4a438, &(0x7f00000008c0)=ANY=[], 0xc, 0x0, &(0x7f0000000000))

3m17.148251743s ago: executing program 3 (id=1963):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000086"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10)
setuid(0xee00)

3m16.606208768s ago: executing program 3 (id=1964):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
timerfd_settime(0xffffffffffffffff, 0x1, 0x0, 0x0)
syz_mount_image$erofs(&(0x7f00000012c0), &(0x7f0000000240)='./file0\x00', 0x2000401, &(0x7f0000000000)=ANY=[], 0x1, 0x22f, &(0x7f0000001080)="$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")
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000009500"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
openat$btrfs_control(0xffffffffffffff9c, 0x0, 0xd00, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
msgget(0x0, 0x400)
mount$tmpfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x80, 0x0)

3m15.566169339s ago: executing program 3 (id=1971):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000bf0001000100000095"], &(0x7f00000000c0)='GPL\x00', 0x9}, 0x94)

3m15.256933952s ago: executing program 3 (id=1978):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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")
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)

3m15.107173571s ago: executing program 33 (id=1978):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$eJzs3M9rHFUcAPDvTJL+bhNrrba2Gq1i8UfSpFV78KCi4EFB0EM9xiSttdtGmgi2BI0i9SgF7+JR8C/w5kXUgwheFTxKoWgQmnqKzK9mu9mkSZpkbfbzgc2+t/Nm3/vOzNt9My+zAbSt3uxPErEjIn6LiO4ie3OB3uJpZnpy+Pr05HASs7Nv/JXk5a5NTw5XRav1tpeZw2lE+mkSzyfz6x2/cPHMUK02er7M90+cfa9//MLFp06fHTo1emr03ODx48eODjz7zODTqxJnFte1/R+OHdj3yluXXxs+cfntH7/JmrX3YLG8Po5but4koCZ6s63292yucdmjy2j7nWBnXTrpbGFDWJaOiMh2V1fe/7ujI+Z2Xne8/ElLGwesqey7afPCi6dmgQ0siVa3AGiN6os+O/+tHus09PhfuPpCxKYyPTM9OTxzI/7OSMvXu9aw/t6IODH175fZI5Z7HQIAYAXysc2TzcZ/aezNn4u5jl3lHEpPRNwVEbsj4u6I2BMR90TkZe+NiPuKlWe7l1h/b0N+/vgnvdK0zaskG/89Vzf2m6mLv3zq6ShzO/P4u5KTp2ujR8ptcji6Nmf5gUXq+O6lXz9faFn9+C97ZPVXY8GyAVc6Gy7QjQxNDK3WRrj6ccT+zmbxJzdmArIjYF9E7F/eW++qEqcf//rAQoVuHf8iVmGeafariMeK/T8VDfFXksXnJ/u3RG30SH91VMz30y+XXl+o/tuKfxVk+3/bzcd/Q4nuf5JivrYrarXR8+PLr+PS758teE6z0uN/U/JmPmf98zvFax8MTUycH4jYlLya56tzuvz1wbl1q3xVPov/8KHm/X93uU4W//0RkR3EByPigYh4sGz7QxHxcEQcWiT+H1585N1F4k8iiZbu/5Gmn383jv+epH6+fgWJjjPff7vQjPnS9v+xmMo/awv5598tLLWBt7n5AAAA4I6QRsSOSNK+It27I9K0r6/4H/49sS2tjY1PPHFy7P1zI8U9Aj3RlVZXurrrrocOJFPlOxb5wfJacbX8aHnd+IuOrXm+b3isNtLi2KHdbb+5/0fV/zN/drS6dcCac78WtK/G/p+2qB3A+lvK979zAdiYmvT/ra1oB7D+nP9D+2rW/z9qyBv/w8Y0v///0eQn64CNyPgf2pf+D+1L/4e2dDv39a88Ud0ssPL32bLkO/zbJVH94sVa1rU15l6JtOUht1Ei6zHrW+ncb6gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADcyf4LAAD///ss5ts=")
lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="02000000010000000000000002000000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)

7.606441878s ago: executing program 4 (id=4190):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00'}, 0x48)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3, <r5=>0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20)
setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000440), &(0x7f0000000480)=r6}, 0x20)
sendmsg$inet(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

7.277075529s ago: executing program 4 (id=4198):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0)
r5 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4)
bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10)
setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe3}]}, 0x10)
sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4)
sendmmsg$inet(r5, &(0x7f0000004a80)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000007c0)="16ecaaaeb69ec105e9dd534f1bd77f8051db33a07055391264d230088248daa370b0bc75883a507be52e9744ca1479096e0a1d347324d779b5fe3167e722437570ee9c472c6399c49d1473a32016f512dee12a2f9dc3bd6060001c8139ae43a3cbf08d05c66712c9a0b2994264c8614da6c0251fdeb06bcb94139d6b3df7bd60ac9d53ac834c97388aa638bb50457e57f90b3e8e11975ebd2c81a2a13cb5dc9b7fae4411137ad278cf52dd8d32de5b07a396cd19a242b247d2ca16ce1a663064abfc1ba416f7b1fc251409afd53815f775ab04810637bd8c9b2606a8512ee5622829a369d77900cfc7987f950003fb657f4c17131695efdcead8816ddae634049c3dab49a0ca36b1d5d93c8dac8fa0ba2a74f55d159667e3b52ec903f439a21a023b4bc7bf4463d73f5ae46a680f138c34f0ab2e8503ce342bfb26e481f087a08d410a8886335ac1fda0df344dfbb68b6bb8fcc2bf9a85fe835f350fb281e1159b093d52c519a3d61cd4979941c87ebf52404bdb04ebce4e1980314c1b03a674a86d6cf027b9076559eecadd6cbc5daab4002468d3653a11bbcb9cf625b1e4fe49a398e63200944d4ecee2741a09daf3650edb6a8dca6dc705873b78767c0e942a766c8be2bf425eeba3c277f09332f84fe9f24272059625703661763ed5efd08af27a1b6ccc3a7ae63ff339676e5caa6447e4a0575131495bc643681ca8e18b95bc7db66366c50cd89c9a59746da83dcced2526003b48e250bb7a20eabaf34e950fd1eeb6cce37de630e51a067e786dc3ecde5d2218962d33adde6734636adcf597b93be0cc3f307127d2b0df08a75d14f41ed41237db5e7b10fdacd56231cd781566b26080a06edbd7af51e6310233f0cea9aea8fe2c08a94cdc1ae11c6bef6f0fb5d4155567b47db0c4fc61940d157fc5a1df14ff33bd638b56b200b032cd99504751cb6c29d8252e6ebd0c1ac4c3df", 0x2b1}], 0x1}}], 0x1, 0x400c0)
sendto$inet(r5, &(0x7f0000000580)="17", 0x1d4c, 0x10048095, 0x0, 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x20000023896)

6.184416453s ago: executing program 4 (id=4200):
syz_emit_ethernet(0x46, &(0x7f0000000200)={@broadcast, @local, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "bb85a4", 0x10, 0x0, 0xff, @private2, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, {[@hopopts={0x3b, 0x1, '\x00', [@generic={0x80, 0x6, "0a9d6dc3b141"}]}]}}}}}, 0x0)

6.118183231s ago: executing program 4 (id=4202):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x400c84, &(0x7f0000000340), 0x1, 0x786, &(0x7f0000000800)="$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")
creat(&(0x7f0000000580)='./bus\x00', 0x0)
syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000100)='./file0\x00', 0x8000c2, &(0x7f0000000740), 0x0, 0x5d1, &(0x7f0000000140)="$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")
mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0)
sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0)
lchown(&(0x7f0000000fc0)='./file0\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14113e, 0x6ceac77f206eabb9)
write$binfmt_script(r0, &(0x7f0000000080), 0x208e24b)
stat(&(0x7f0000000140)='./file0\x00', 0x0)

5.90397931s ago: executing program 4 (id=4208):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x47}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0)

5.41232753s ago: executing program 4 (id=4216):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441d3e189e87fe30600000000000f000200", 0x4, 0x200})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x2)

5.169427589s ago: executing program 34 (id=4216):
r0 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000040)={0xfffffff8, 0x401, 0xfffffffd, 0xc4cf, 0x7, "0441d3e189e87fe30600000000000f000200", 0x4, 0x200})
ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0x2)

2.327753439s ago: executing program 0 (id=4238):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000c000000180001801400020076657468315f746f5f626174616476007800038004000100700003801c000180090002002b277d2c0000000009"], 0xa4}}, 0x0)

492.308264ms ago: executing program 0 (id=4247):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r1=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r1}, @IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_VERSION={0x5, 0x6, 0xff}]}}}]}, 0x48}}, 0x0)

308.478156ms ago: executing program 2 (id=4249):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d424000000000000002900000002000000", 0xfe60)

307.957195ms ago: executing program 0 (id=4250):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48)

305.940615ms ago: executing program 2 (id=4251):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, 0x0, 0x0)

225.250563ms ago: executing program 0 (id=4252):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000009e0000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000600)={r1, 0x58, &(0x7f0000001040)}, 0x10)

165.720743ms ago: executing program 2 (id=4253):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x1800403, &(0x7f0000000940), 0x2, 0x5ad, &(0x7f0000000180)="$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")
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000100001000000f5ffffffffffffff000a14000000060a0000000000000000000002"], 0x3c}}, 0x0)
mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000000)='\x06\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x00<r\xe9\x9cD\x90\xce\xe1\xc5\x85=\\!\xbbQ\xde\xc3\xe3\x7f\xcf\x1f\x17G\xa6\x13\xae\x92 \x1c\xbf\xfa\xe8e\x8cD\"\xa3w')

165.291107ms ago: executing program 0 (id=4254):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb0}}, 0x0)

52.066464ms ago: executing program 0 (id=4255):
r0 = socket(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb0, 0x24, 0xf0b, 0x0, 0xfffffffe, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x80, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0xbb80}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffd], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x8001}, @TCA_TAPRIO_SCHED_ENTRY_GATE_MASK={0x8, 0x3, 0x1}]}]}]}}]}, 0xb0}}, 0x0)

51.660936ms ago: executing program 2 (id=4256):
r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0)
write$sndseq(r0, &(0x7f0000001380)=[{0x4, 0x0, 0x0, 0x0, @tick, {0xb}, {}, @ext={0x0, 0x0}}, {0x0, 0x0, 0x0, 0x0, @time={0x6}, {}, {0x2}, @connect={{0x2, 0x83}, {0x3, 0xfc}}}, {0x0, 0x9, 0x0, 0x0, @time={0x800002, 0x2}, {0x0, 0x8}, {}, @control}, {0x0, 0xfd, 0x1, 0x0, @time={0x7}, {}, {0x0, 0xfc}, @result={0x2, 0x2}}], 0x70)

51.568236ms ago: executing program 2 (id=4257):
add_key(&(0x7f0000000080)='rxrpc_s\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff)

0s ago: executing program 2 (id=4258):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x40820}, 0x0)
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_mreqn(r0, 0x0, 0x27, &(0x7f0000000180)={@multicast2, @loopback}, 0xc)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000040)={'lo\x00'})
setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="e00000027f0007000000000002"], 0x18)

kernel console output (not intermixed with test programs):

25][  T793] usb 1-1: new full-speed USB device number 38 using dummy_hcd
[  331.753456][  T793] usb 1-1: unable to get BOS descriptor or descriptor too short
[  331.757889][  T793] usb 1-1: not running at top speed; connect to a high speed hub
[  331.762507][  T793] usb 1-1: config 188 has an invalid interface number: 3 but max is 1
[  331.765118][  T793] usb 1-1: config 188 has an invalid interface number: 9 but max is 1
[  331.767582][  T793] usb 1-1: config 188 has no interface number 0
[  331.769871][  T793] usb 1-1: config 188 has no interface number 1
[  331.772442][  T793] usb 1-1: config 188 interface 3 has no altsetting 0
[  331.774728][  T793] usb 1-1: config 188 interface 9 has no altsetting 0
[  331.783178][  T793] usb 1-1: New USB device found, idVendor=1410, idProduct=a002, bcdDevice=86.a0
[  331.786830][  T793] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  331.791510][  T793] usb 1-1: Product: syz
[  331.793303][  T793] usb 1-1: Manufacturer: syz
[  331.795272][  T793] usb 1-1: SerialNumber: syz
[  332.058498][  T793] usb 1-1: unknown number of interfaces: 2
[  332.068903][  T793] usb 1-1: USB disconnect, device number 38
[  333.166518][   T51] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  333.361328][   T51] usb 5-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98
[  333.373108][   T51] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  333.378042][   T51] usb 5-1: config 0 descriptor??
[  333.381919][   T51] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  333.386529][   T51] ftdi_sio ttyUSB0: unknown device type: 0xc698
[  333.447469][T13351] bridge_slave_0: left allmulticast mode
[  333.451351][T13351] bridge_slave_0: left promiscuous mode
[  333.453836][T13351] bridge0: port 1(bridge_slave_0) entered disabled state
[  333.468907][T13351] bridge_slave_1: left allmulticast mode
[  333.474231][T13351] bridge_slave_1: left promiscuous mode
[  333.479420][T13351] bridge0: port 2(bridge_slave_1) entered disabled state
[  333.497214][T13351] bond0: (slave bond_slave_0): Releasing backup interface
[  333.501017][T13351] bond_slave_0: left promiscuous mode
[  333.503551][T13351] bond_slave_0: left allmulticast mode
[  333.528022][T13351] bond0: (slave bond_slave_1): Releasing backup interface
[  333.532371][T13351] bond_slave_1: left promiscuous mode
[  333.535228][T13351] bond_slave_1: left allmulticast mode
[  333.552153][T13351] team0: Port device team_slave_0 removed
[  333.564573][T13351] team0: Port device team_slave_1 removed
[  333.572177][T13351] batman_adv: batadv0: Removing interface: batadv_slave_0
[  333.577591][T13351] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  333.583826][T13351] batman_adv: batadv0: Removing interface: batadv_slave_1
[  333.607458][   T51] usb 5-1: USB disconnect, device number 10
[  333.609190][T13351] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check.
[  333.611580][   T51] ftdi_sio 5-1:0.0: device disconnected
[  333.692825][T13356] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2423'.
[  335.745255][    T9] usb 1-1: new high-speed USB device number 39 using dummy_hcd
[  335.914124][    T9] usb 1-1: unable to get BOS descriptor or descriptor too short
[  335.921467][    T9] usb 1-1: config 4 has an invalid interface number: 180 but max is 0
[  335.924733][    T9] usb 1-1: config 4 has no interface number 0
[  335.927136][    T9] usb 1-1: config 4 interface 180 has no altsetting 0
[  335.934219][   T51] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  335.938651][    T9] usb 1-1: New USB device found, idVendor=2c7c, idProduct=0125, bcdDevice=eb.29
[  335.944414][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  335.947718][    T9] usb 1-1: Product: syz
[  335.949120][    T9] usb 1-1: Manufacturer: syz
[  335.953379][    T9] usb 1-1: SerialNumber: syz
[  336.108429][   T51] usb 5-1: Using ep0 maxpacket: 32
[  336.112456][   T51] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  336.115940][   T51] usb 5-1: config 0 has no interface number 0
[  336.120986][   T51] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  336.134617][   T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  336.137894][   T51] usb 5-1: Product: syz
[  336.139535][   T51] usb 5-1: Manufacturer: syz
[  336.141758][   T51] usb 5-1: SerialNumber: syz
[  336.147033][   T51] usb 5-1: config 0 descriptor??
[  336.151288][   T51] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  336.196626][    T9] qmi_wwan 1-1:4.180: probe with driver qmi_wwan failed with error -22
[  336.205479][    T9] usb 1-1: USB disconnect, device number 39
[  336.375352][   T51] usb 5-1: qt2_attach - failed to power on unit: -71
[  336.378289][   T51] quatech2 5-1:0.51: probe with driver quatech2 failed with error -71
[  336.393735][   T51] usb 5-1: USB disconnect, device number 11
[  337.288005][T13431] loop4: detected capacity change from 0 to 8192
[  337.295688][T13431] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  337.385880][T13435] loop4: detected capacity change from 0 to 1024
[  337.393892][T13435] hfsplus: failed to load root directory
[  337.520156][T13439] loop4: detected capacity change from 0 to 8192
[  337.746322][T13454] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2467'.
[  337.883478][T13458] loop4: detected capacity change from 0 to 4096
[  337.920846][T13459] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  337.950069][T13421] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  338.701845][T13476] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.2476'.
[  338.959951][T13488] pim6reg1: entered promiscuous mode
[  338.961858][T13488] pim6reg1: entered allmulticast mode
[  339.007790][    C0] hpet: Lost 1 RTC interrupts
[  339.244729][   T54] Bluetooth: hci0: command 0x0c20 tx timeout
[  339.337690][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  339.915557][T13519] loop4: detected capacity change from 0 to 1024
[  339.925487][T13519] EXT4-fs: Ignoring removed nomblk_io_submit option
[  339.968007][T13519] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  340.001599][   T33] audit: type=1800 audit(1757159250.364:57): pid=13519 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2497" name="bus" dev="loop4" ino=18 res=0 errno=0
[  340.128076][T12280] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  340.248378][T13530] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2501'.
[  340.340381][ T5906] usb 1-1: new full-speed USB device number 40 using dummy_hcd
[  340.525034][ T5906] usb 1-1: config 1 interface 0 has no altsetting 0
[  340.534467][ T5906] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  340.538799][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  340.553595][ T5906] usb 1-1: Product: syz
[  340.555666][ T5906] usb 1-1: Manufacturer: syz
[  340.557784][ T5906] usb 1-1: SerialNumber: syz
[  340.678755][T13538] loop4: detected capacity change from 0 to 32768
[  340.685187][T13538] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2505 (13538)
[  340.704474][T13538] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  340.711419][T13538] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  340.817681][T13538] BTRFS info (device loop4): rebuilding free space tree
[  340.848993][T13538] BTRFS info (device loop4): allowing degraded mounts
[  340.852111][T13538] BTRFS info (device loop4): enabling ssd optimizations
[  340.858315][T13538] BTRFS info (device loop4): enabling free space tree
[  340.869351][T13538] BTRFS info (device loop4): force clearing of disk cache
[  340.872598][T13538] BTRFS info (device loop4): use zstd compression, level 3
[  340.876712][T13538] BTRFS info (device loop4): max_inline set to 0
[  341.008447][T12280] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  341.227513][    C0] hpet: Lost 1 RTC interrupts
[  341.281974][ T5906] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 253 proto 1 vid 0x0525 pid 0xA4A8
[  342.203096][T13575] netlink: 304 bytes leftover after parsing attributes in process `syz.2.2515'.
[  343.334624][ T5316] usb 1-1: USB disconnect, device number 40
[  343.349987][ T5316] usblp0: removed
[  346.144329][T13735] loop4: detected capacity change from 0 to 1024
[  346.201345][   T71] hfsplus: b-tree write err: -5, ino 8
[  346.261684][T13739] netlink: 'syz.4.2542': attribute type 10 has an invalid length.
[  346.601847][T13757] netlink: 'syz.4.2551': attribute type 2 has an invalid length.
[  346.757059][ T5906] IPVS: starting estimator thread 0...
[  346.861345][T13762] IPVS: using max 45 ests per chain, 108000 per kthread
[  347.400665][T13768] netlink: 'syz.0.2556': attribute type 30 has an invalid length.
[  348.223475][T13776] loop4: detected capacity change from 0 to 32768
[  348.237850][T13776] XFS: ikeep mount option is deprecated.
[  348.240001][T13776] XFS: ikeep mount option is deprecated.
[  348.242046][T13776] XFS: noikeep mount option is deprecated.
[  348.255609][T13776] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  348.294985][T13776] XFS (loop4): Ending clean mount
[  348.452542][T12280] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  349.092882][ T5316] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  349.255473][ T5316] usb 1-1: Using ep0 maxpacket: 32
[  349.262557][ T5316] usb 1-1: config 0 has an invalid interface number: 51 but max is 0
[  349.265962][ T5316] usb 1-1: config 0 has no interface number 0
[  349.275848][ T5316] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  349.279986][ T5316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.282601][ T5316] usb 1-1: Product: syz
[  349.284404][ T5316] usb 1-1: Manufacturer: syz
[  349.286432][ T5316] usb 1-1: SerialNumber: syz
[  349.294069][ T5316] usb 1-1: config 0 descriptor??
[  349.301157][ T5316] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  349.536103][ T5316] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  349.550609][ T5316] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  349.981580][    C1] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71
[  349.989457][ T5316] usb 1-1: USB disconnect, device number 41
[  350.006580][ T5316] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  350.014590][ T5316] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  350.019487][ T5316] quatech2 1-1:0.51: device disconnected
[  351.313284][T13882] loop4: detected capacity change from 0 to 2048
[  351.344263][T13882] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  352.205830][T13905] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.2613'.
[  352.487106][T13902] loop4: detected capacity change from 0 to 32768
[  352.491421][T13902] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  352.491421][T13902] clean (size 2912):
[  352.491421][T13902] flags:          0
[  352.491421][T13902] journal_seq:    8
[  352.491421][T13902] prio_ptrs: 
[  352.491421][T13902] usage: type=key_version v=0
[  352.491421][T13902] usage: type=reserved v=0
[  352.491421][T13902] usage: type=reserved v=0
[  352.491421][T13902] usage: type=reserved v=0
[  352.491421][T13902] usage: type=reserved v=0
[  352.491421][T13902] data_usage: btree: 1/1 [0]=2816
[  352.491421][T13902] data_usage: journal: 1/1 [0]=0
[  352.491421][T13902] data_usage: user: 1/1 [0]=32
[  352.491421][T13902] dev_usage: dev=0  
[  352.491421][T13902]   free: buckets=83 sectors=0 fragmented=0
[  352.491421][T13902]   sb: buckets=25 sectors=6152 fragmented=248
[  352.491421][T13902]   journal: buckets=8 sectors=2048 fragmented=0
[  352.491421][T13902]   btree: buckets=11 sectors=2816 fragmented=0
[  352.491421][T13902]   user: buckets=1 sectors=32 fragmented=224
[  352.491421][T13902]   cached: buckets=0 sectors=0 fragmented=0
[  352.491421][T13902]   parity: buckets=0 sectors=0 fragmented=0
[  352.491421][T13902]   stripe: buckets=0 sectors=0 fragmented=0
[  352.491421][T13902]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  352.491421][T13902]   need_discard: buckets=0 sectors=0 fragmented=0
[  352.491421][T13902] clock: read=0
[  352.491421][T13902] clock: write=1288
[  352.491421][T13902] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee3
[  352.491534][T13902] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  352.544619][    C0] hpet: Lost 2 RTC interrupts
[  352.991181][T13917] batadv_slave_1: entered promiscuous mode
[  352.994300][T13916] batadv_slave_1: left promiscuous mode
[  353.388219][T13933] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2626'.
[  353.643684][T13945] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  354.445188][  T793] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  354.611369][  T793] usb 5-1: Using ep0 maxpacket: 8
[  354.623069][  T793] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  354.626275][  T793] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  354.632376][  T793] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  354.636194][  T793] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  354.645393][  T793] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  354.657607][  T793] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  354.661113][  T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  354.892763][  T793] usb 5-1: GET_CAPABILITIES returned 0
[  354.894859][  T793] usbtmc 5-1:16.0: can't read capabilities
[  355.037560][T13969] 9pnet_fd: Insufficient options for proto=fd
[  355.104631][T13975] netlink: 'syz.0.2646': attribute type 1 has an invalid length.
[  355.150005][T13975] gretap1: entered allmulticast mode
[  355.150898][T13978] fuse: Bad value for 'fd'
[  355.158817][T13975] bond1: (slave gretap1): making interface the new active one
[  355.167209][T13975] bond1: (slave gretap1): Enslaving as an active interface with an up link
[  355.221527][T13982] delete_channel: no stack
[  355.481501][T13999] netlink: 'syz.2.2657': attribute type 4 has an invalid length.
[  355.581212][T14003] 9pnet_fd: Insufficient options for proto=fd
[  355.904156][T14017] fuse: Bad value for 'fd'
[  357.305651][ T5316] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  357.456090][    T9] usb 5-1: USB disconnect, device number 12
[  357.471002][ T5316] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  357.475212][ T5316] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  357.481815][ T5316] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  357.485636][ T5316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  357.488822][ T5316] usb 1-1: Product: syz
[  357.491036][ T5316] usb 1-1: Manufacturer: syz
[  357.623056][ T5316] usb 1-1: SerialNumber: syz
[  358.076018][ T5316] usb 1-1: Audio class v2/v3 interfaces need an interface association
[  358.092467][ T5316] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22
[  358.099897][ T5316] usb 1-1: USB disconnect, device number 42
[  359.086883][T14085] netlink: 'syz.2.2696': attribute type 1 has an invalid length.
[  359.116392][T14087] vlan1: entered allmulticast mode
[  359.118399][T14087] veth0_vlan: entered allmulticast mode
[  360.711979][T14137] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  361.623658][T14140] loop4: detected capacity change from 0 to 32768
[  361.626854][T14140] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  361.981683][T14161] No control pipe specified
[  362.202490][T14175] loop4: detected capacity change from 0 to 164
[  362.313544][T14179] dlm: no local IP address has been set
[  362.316225][T14179] dlm: cannot start dlm midcomms -107
[  362.463113][T14183] netlink: 'syz.4.2739': attribute type 30 has an invalid length.
[  362.698679][T14186] futex_wake_op: syz.2.2740 tries to shift op by 36; fix this program
[  363.090752][   T10] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  363.264217][   T10] usb 5-1: Using ep0 maxpacket: 8
[  363.280472][   T10] usb 5-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  363.283942][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.294996][   T10] usb 5-1: Product: syz
[  363.303284][   T10] usb 5-1: Manufacturer: syz
[  363.305430][   T10] usb 5-1: SerialNumber: syz
[  363.540259][   T10] mxuport 5-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  363.544791][   T10] mxuport 5-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  363.551849][   T10] mxuport 5-1:254.0: probe with driver mxuport failed with error -71
[  363.561313][   T10] usb 5-1: USB disconnect, device number 13
[  364.338110][T14213] netdevsim netdevsim0: Firmware load for './cgroup/../file0' refused, path contains '..' component
[  364.538061][T14223] loop4: detected capacity change from 0 to 512
[  364.766564][T14231] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.2761'.
[  364.898887][T14239] loop4: detected capacity change from 0 to 128
[  364.917339][T14239] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  364.923707][T14239] ext4 filesystem being mounted at /231/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  364.944341][T14239] EXT4-fs (loop4): resizing filesystem from 64 to 1 blocks
[  364.948181][T14239] EXT4-fs warning (device loop4): ext4_resize_fs:2042: can't shrink FS - resize aborted
[  364.984635][T12280] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  365.611647][T14227] orangefs_mount: mount request failed with -4
[  366.305479][T14285] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.2787'.
[  366.657639][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2801'.
[  366.938426][T14308] loop4: detected capacity change from 0 to 40427
[  366.943489][T14308] F2FS-fs (loop4): build fault injection rate: 14
[  366.946303][T14308] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  366.958490][T14308] F2FS-fs (loop4): invalid crc value
[  366.963358][    C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  366.985832][    C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  367.065433][T14308] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  367.075150][T14308] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  367.083772][T14308] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  367.102823][T14308] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  367.136171][T12280] F2FS-fs (loop4): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab1/0x1cf0
[  367.147601][T12280] F2FS-fs (loop4): inconsistent node block, node_type:0, nid:13, node_footer[nid:13,ino:3,ofs:191623,cpver:0,blkaddr:0]
[  367.239206][    C0] F2FS-fs (loop4): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60
[  367.244301][    C0] CPU: 0 UID: 0 PID: 13687 Comm: kworker/u9:16 Not tainted syzkaller #0 PREEMPT(full) 
[  367.244317][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  367.244324][    C0] Workqueue: loop4 loop_workfn
[  367.244343][    C0] Call Trace:
[  367.244347][    C0]  <IRQ>
[  367.244353][    C0]  dump_stack_lvl+0x189/0x250
[  367.244369][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.244378][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  367.244388][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  367.244401][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  367.244415][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  367.244431][    C0]  f2fs_write_end_io+0x886/0xb60
[  367.244447][    C0]  blk_update_request+0x57e/0xe60
[  367.244464][    C0]  blk_mq_end_request+0x3e/0x70
[  367.244473][    C0]  blk_done_softirq+0x10a/0x160
[  367.244483][    C0]  handle_softirqs+0x286/0x870
[  367.244494][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  367.244504][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  367.244511][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  367.244545][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  367.244559][    C0]  __irq_exit_rcu+0xca/0x1f0
[  367.244581][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  367.244591][    C0]  ? rcu_is_watching+0x15/0xb0
[  367.244602][    C0]  irq_exit_rcu+0x9/0x30
[  367.244608][    C0]  sysvec_call_function_single+0xa3/0xc0
[  367.244626][    C0]  </IRQ>
[  367.244629][    C0]  <TASK>
[  367.244632][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[  367.244642][    C0] RIP: 0010:raise_softirq+0xcc/0x120
[  367.244651][    C0] Code: 5c 42 00 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 49 41 f7 c4 00 02 00 00 74 01 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00
[  367.244659][    C0] RSP: 0018:ffffc90007287400 EFLAGS: 00000206
[  367.244666][    C0] RAX: a60cea99904fcc00 RBX: 0000000000000004 RCX: a60cea99904fcc00
[  367.244673][    C0] RDX: 0000000000000006 RSI: ffffffff8d9b77f8 RDI: ffffffff8be33680
[  367.244678][    C0] RBP: ffffc900072874b0 R08: ffffffff8fa38b37 R09: 1ffffffff1f47166
[  367.244684][    C0] R10: dffffc0000000000 R11: fffffbfff1f47167 R12: 0000000000000a02
[  367.244690][    C0] R13: 1ffff92000e50e9c R14: 1ffff92000e50e80 R15: dffffc0000000000
[  367.244703][    C0]  ? __pfx_raise_softirq+0x10/0x10
[  367.244713][    C0]  ? __lock_acquire+0xab9/0xd20
[  367.244728][    C0]  blk_mq_complete_request_remote+0x6f7/0xa50
[  367.244740][    C0]  ? __pfx_blk_mq_complete_request_remote+0x10/0x10
[  367.244749][    C0]  ? rcu_read_lock_any_held+0xb3/0x120
[  367.244759][    C0]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  367.244771][    C0]  blk_mq_complete_request+0x19/0xa0
[  367.244781][    C0]  lo_rw_aio+0xd75/0xfa0
[  367.244796][    C0]  ? __pfx_lo_rw_aio+0x10/0x10
[  367.244809][    C0]  ? kthread_associate_blkcg+0x491/0x600
[  367.244819][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.244830][    C0]  loop_process_work+0x835/0xf90
[  367.244845][    C0]  ? update_load_avg+0x572/0x1880
[  367.244854][    C0]  ? __pfx_loop_process_work+0x10/0x10
[  367.244864][    C0]  ? __lock_acquire+0xab9/0xd20
[  367.244880][    C0]  ? do_raw_spin_lock+0x121/0x290
[  367.244888][    C0]  ? look_up_lock_class+0x74/0x170
[  367.244899][    C0]  ? register_lock_class+0x51/0x320
[  367.244912][    C0]  ? __lock_acquire+0xab9/0xd20
[  367.244927][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  367.244938][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.244947][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  367.244954][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  367.244963][    C0]  process_scheduled_works+0xae1/0x17b0
[  367.244982][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  367.244997][    C0]  worker_thread+0x8a0/0xda0
[  367.245007][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  367.245020][    C0]  ? __kthread_parkme+0x7b/0x200
[  367.245032][    C0]  kthread+0x711/0x8a0
[  367.245042][    C0]  ? __pfx_worker_thread+0x10/0x10
[  367.245050][    C0]  ? __pfx_kthread+0x10/0x10
[  367.245059][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.245069][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.245078][    C0]  ? __pfx_kthread+0x10/0x10
[  367.245088][    C0]  ret_from_fork+0x3fc/0x770
[  367.245099][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  367.245109][    C0]  ? __switch_to_asm+0x39/0x70
[  367.245119][    C0]  ? __switch_to_asm+0x33/0x70
[  367.245210][    C0]  ? __pfx_kthread+0x10/0x10
[  367.245223][    C0]  ret_from_fork_asm+0x1a/0x30
[  367.245241][    C0]  </TASK>
[  367.245312][    C0] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  367.436476][    C0] CPU: 0 UID: 0 PID: 13687 Comm: kworker/u9:16 Not tainted syzkaller #0 PREEMPT(full) 
[  367.436539][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  367.436551][    C0] Workqueue: loop4 loop_workfn
[  367.436575][    C0] Call Trace:
[  367.436583][    C0]  <IRQ>
[  367.436590][    C0]  dump_stack_lvl+0x189/0x250
[  367.436613][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.436630][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  367.436647][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  367.436669][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  367.436688][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  367.436714][    C0]  f2fs_write_end_io+0x886/0xb60
[  367.436740][    C0]  blk_update_request+0x57e/0xe60
[  367.436764][    C0]  blk_mq_end_request+0x3e/0x70
[  367.436781][    C0]  blk_done_softirq+0x10a/0x160
[  367.436804][    C0]  handle_softirqs+0x286/0x870
[  367.436823][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  367.436844][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  367.436855][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  367.436877][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  367.436900][    C0]  __irq_exit_rcu+0xca/0x1f0
[  367.436914][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  367.436933][    C0]  ? rcu_is_watching+0x15/0xb0
[  367.436950][    C0]  irq_exit_rcu+0x9/0x30
[  367.436963][    C0]  sysvec_call_function_single+0xa3/0xc0
[  367.436986][    C0]  </IRQ>
[  367.436992][    C0]  <TASK>
[  367.436998][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[  367.437015][    C0] RIP: 0010:raise_softirq+0xcc/0x120
[  367.437029][    C0] Code: 5c 42 00 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 49 41 f7 c4 00 02 00 00 74 01 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00
[  367.437042][    C0] RSP: 0018:ffffc90007287400 EFLAGS: 00000206
[  367.437054][    C0] RAX: a60cea99904fcc00 RBX: 0000000000000004 RCX: a60cea99904fcc00
[  367.437064][    C0] RDX: 0000000000000006 RSI: ffffffff8d9b77f8 RDI: ffffffff8be33680
[  367.437075][    C0] RBP: ffffc900072874b0 R08: ffffffff8fa38b37 R09: 1ffffffff1f47166
[  367.437084][    C0] R10: dffffc0000000000 R11: fffffbfff1f47167 R12: 0000000000000a02
[  367.437093][    C0] R13: 1ffff92000e50e9c R14: 1ffff92000e50e80 R15: dffffc0000000000
[  367.437118][    C0]  ? __pfx_raise_softirq+0x10/0x10
[  367.437137][    C0]  ? __lock_acquire+0xab9/0xd20
[  367.437156][    C0]  blk_mq_complete_request_remote+0x6f7/0xa50
[  367.437174][    C0]  ? __pfx_blk_mq_complete_request_remote+0x10/0x10
[  367.437190][    C0]  ? rcu_read_lock_any_held+0xb3/0x120
[  367.437206][    C0]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  367.437229][    C0]  blk_mq_complete_request+0x19/0xa0
[  367.437247][    C0]  lo_rw_aio+0xd75/0xfa0
[  367.437274][    C0]  ? __pfx_lo_rw_aio+0x10/0x10
[  367.437298][    C0]  ? kthread_associate_blkcg+0x491/0x600
[  367.437316][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.437336][    C0]  loop_process_work+0x835/0xf90
[  367.437362][    C0]  ? update_load_avg+0x572/0x1880
[  367.437378][    C0]  ? __pfx_loop_process_work+0x10/0x10
[  367.437396][    C0]  ? __lock_acquire+0xab9/0xd20
[  367.437420][    C0]  ? do_raw_spin_lock+0x121/0x290
[  367.437436][    C0]  ? look_up_lock_class+0x74/0x170
[  367.437457][    C0]  ? register_lock_class+0x51/0x320
[  367.437479][    C0]  ? __lock_acquire+0xab9/0xd20
[  367.437534][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  367.437553][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.437570][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  367.437583][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  367.437597][    C0]  process_scheduled_works+0xae1/0x17b0
[  367.437631][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  367.437658][    C0]  worker_thread+0x8a0/0xda0
[  367.437675][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  367.437699][    C0]  ? __kthread_parkme+0x7b/0x200
[  367.437721][    C0]  kthread+0x711/0x8a0
[  367.437741][    C0]  ? __pfx_worker_thread+0x10/0x10
[  367.437755][    C0]  ? __pfx_kthread+0x10/0x10
[  367.437773][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.437790][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.437813][    C0]  ? __pfx_kthread+0x10/0x10
[  367.437831][    C0]  ret_from_fork+0x3fc/0x770
[  367.437849][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  367.437869][    C0]  ? __switch_to_asm+0x39/0x70
[  367.437886][    C0]  ? __switch_to_asm+0x33/0x70
[  367.437902][    C0]  ? __pfx_kthread+0x10/0x10
[  367.437919][    C0]  ret_from_fork_asm+0x1a/0x30
[  367.437948][    C0]  </TASK>
[  367.438014][    C0] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  367.460644][T14330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2808'.
[  367.462307][    C0] CPU: 0 UID: 0 PID: 13687 Comm: kworker/u9:16 Not tainted syzkaller #0 PREEMPT(full) 
[  367.462328][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  367.462337][    C0] Workqueue: loop4 loop_workfn
[  367.462362][    C0] Call Trace:
[  367.462370][    C0]  <IRQ>
[  367.462377][    C0]  dump_stack_lvl+0x189/0x250
[  367.462400][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.462419][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  367.462434][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  367.462454][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  367.462480][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  367.462549][    C0]  f2fs_write_end_io+0x886/0xb60
[  367.462577][    C0]  blk_update_request+0x57e/0xe60
[  367.462606][    C0]  blk_mq_end_request+0x3e/0x70
[  367.462622][    C0]  blk_done_softirq+0x10a/0x160
[  367.462639][    C0]  handle_softirqs+0x286/0x870
[  367.462655][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  367.462673][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  367.462682][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  367.462699][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  367.462717][    C0]  __irq_exit_rcu+0xca/0x1f0
[  367.462731][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  367.462747][    C0]  ? rcu_is_watching+0x15/0xb0
[  367.462761][    C0]  irq_exit_rcu+0x9/0x30
[  367.462772][    C0]  sysvec_call_function_single+0xa3/0xc0
[  367.462793][    C0]  </IRQ>
[  367.462798][    C0]  <TASK>
[  367.462803][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[  367.462819][    C0] RIP: 0010:raise_softirq+0xcc/0x120
[  367.462834][    C0] Code: 5c 42 00 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 49 41 f7 c4 00 02 00 00 74 01 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00
[  367.462847][    C0] RSP: 0018:ffffc90007287400 EFLAGS: 00000206
[  367.462857][    C0] RAX: a60cea99904fcc00 RBX: 0000000000000004 RCX: a60cea99904fcc00
[  367.462866][    C0] RDX: 0000000000000006 RSI: ffffffff8d9b77f8 RDI: ffffffff8be33680
[  367.462874][    C0] RBP: ffffc900072874b0 R08: ffffffff8fa38b37 R09: 1ffffffff1f47166
[  367.462884][    C0] R10: dffffc0000000000 R11: fffffbfff1f47167 R12: 0000000000000a02
[  367.462893][    C0] R13: 1ffff92000e50e9c R14: 1ffff92000e50e80 R15: dffffc0000000000
[  367.462915][    C0]  ? __pfx_raise_softirq+0x10/0x10
[  367.462932][    C0]  ? __lock_acquire+0xab9/0xd20
[  367.462956][    C0]  blk_mq_complete_request_remote+0x6f7/0xa50
[  367.462974][    C0]  ? __pfx_blk_mq_complete_request_remote+0x10/0x10
[  367.462988][    C0]  ? rcu_read_lock_any_held+0xb3/0x120
[  367.463004][    C0]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  367.463026][    C0]  blk_mq_complete_request+0x19/0xa0
[  367.463044][    C0]  lo_rw_aio+0xd75/0xfa0
[  367.463072][    C0]  ? __pfx_lo_rw_aio+0x10/0x10
[  367.463092][    C0]  ? kthread_associate_blkcg+0x491/0x600
[  367.463110][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.463130][    C0]  loop_process_work+0x835/0xf90
[  367.463155][    C0]  ? update_load_avg+0x572/0x1880
[  367.463170][    C0]  ? __pfx_loop_process_work+0x10/0x10
[  367.463185][    C0]  ? __lock_acquire+0xab9/0xd20
[  367.463206][    C0]  ? do_raw_spin_lock+0x121/0x290
[  367.463221][    C0]  ? look_up_lock_class+0x74/0x170
[  367.463240][    C0]  ? register_lock_class+0x51/0x320
[  367.463258][    C0]  ? __lock_acquire+0xab9/0xd20
[  367.463281][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  367.463298][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.463313][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  367.463324][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  367.463335][    C0]  process_scheduled_works+0xae1/0x17b0
[  367.463361][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  367.463384][    C0]  worker_thread+0x8a0/0xda0
[  367.463398][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  367.463417][    C0]  ? __kthread_parkme+0x7b/0x200
[  367.463438][    C0]  kthread+0x711/0x8a0
[  367.463458][    C0]  ? __pfx_worker_thread+0x10/0x10
[  367.463472][    C0]  ? __pfx_kthread+0x10/0x10
[  367.463489][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.463539][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.463564][    C0]  ? __pfx_kthread+0x10/0x10
[  367.463581][    C0]  ret_from_fork+0x3fc/0x770
[  367.463600][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  367.463619][    C0]  ? __switch_to_asm+0x39/0x70
[  367.463638][    C0]  ? __switch_to_asm+0x33/0x70
[  367.463655][    C0]  ? __pfx_kthread+0x10/0x10
[  367.463672][    C0]  ret_from_fork_asm+0x1a/0x30
[  367.463698][    C0]  </TASK>
[  367.463705][    C0] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  367.808252][    C0] CPU: 0 UID: 0 PID: 13687 Comm: kworker/u9:16 Not tainted syzkaller #0 PREEMPT(full) 
[  367.808267][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  367.808290][    C0] Workqueue: loop4 loop_workfn
[  367.808310][    C0] Call Trace:
[  367.808317][    C0]  <IRQ>
[  367.808325][    C0]  dump_stack_lvl+0x189/0x250
[  367.808341][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.808351][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  367.808361][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  367.808374][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  367.808396][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  367.808419][    C0]  f2fs_write_end_io+0x886/0xb60
[  367.808444][    C0]  blk_update_request+0x57e/0xe60
[  367.808501][    C0]  blk_mq_end_request+0x3e/0x70
[  367.808521][    C0]  blk_done_softirq+0x10a/0x160
[  367.808535][    C0]  handle_softirqs+0x286/0x870
[  367.808569][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  367.808579][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  367.808586][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  367.808604][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  367.808623][    C0]  __irq_exit_rcu+0xca/0x1f0
[  367.808638][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  367.808651][    C0]  ? rcu_is_watching+0x15/0xb0
[  367.808661][    C0]  irq_exit_rcu+0x9/0x30
[  367.808667][    C0]  sysvec_call_function_single+0xa3/0xc0
[  367.808682][    C0]  </IRQ>
[  367.808704][    C0]  <TASK>
[  367.808710][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[  367.808726][    C0] RIP: 0010:raise_softirq+0xcc/0x120
[  367.808740][    C0] Code: 5c 42 00 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 49 41 f7 c4 00 02 00 00 74 01 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00
[  367.808753][    C0] RSP: 0018:ffffc90007287400 EFLAGS: 00000206
[  367.808766][    C0] RAX: a60cea99904fcc00 RBX: 0000000000000004 RCX: a60cea99904fcc00
[  367.808776][    C0] RDX: 0000000000000006 RSI: ffffffff8d9b77f8 RDI: ffffffff8be33680
[  367.808785][    C0] RBP: ffffc900072874b0 R08: ffffffff8fa38b37 R09: 1ffffffff1f47166
[  367.808793][    C0] R10: dffffc0000000000 R11: fffffbfff1f47167 R12: 0000000000000a02
[  367.808801][    C0] R13: 1ffff92000e50e9c R14: 1ffff92000e50e80 R15: dffffc0000000000
[  367.808825][    C0]  ? __pfx_raise_softirq+0x10/0x10
[  367.808842][    C0]  ? __lock_acquire+0xab9/0xd20
[  367.808866][    C0]  blk_mq_complete_request_remote+0x6f7/0xa50
[  367.808884][    C0]  ? __pfx_blk_mq_complete_request_remote+0x10/0x10
[  367.808900][    C0]  ? rcu_read_lock_any_held+0xb3/0x120
[  367.808916][    C0]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  367.808941][    C0]  blk_mq_complete_request+0x19/0xa0
[  367.808955][    C0]  lo_rw_aio+0xd75/0xfa0
[  367.808973][    C0]  ? __pfx_lo_rw_aio+0x10/0x10
[  367.808988][    C0]  ? kthread_associate_blkcg+0x491/0x600
[  367.809005][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.809025][    C0]  loop_process_work+0x835/0xf90
[  367.809050][    C0]  ? update_load_avg+0x572/0x1880
[  367.809066][    C0]  ? __pfx_loop_process_work+0x10/0x10
[  367.809085][    C0]  ? __lock_acquire+0xab9/0xd20
[  367.809107][    C0]  ? do_raw_spin_lock+0x121/0x290
[  367.809116][    C0]  ? look_up_lock_class+0x74/0x170
[  367.809128][    C0]  ? register_lock_class+0x51/0x320
[  367.809141][    C0]  ? __lock_acquire+0xab9/0xd20
[  367.809155][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  367.809166][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.809175][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  367.809182][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  367.809190][    C0]  process_scheduled_works+0xae1/0x17b0
[  367.809209][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  367.809224][    C0]  worker_thread+0x8a0/0xda0
[  367.809234][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  367.809247][    C0]  ? __kthread_parkme+0x7b/0x200
[  367.809259][    C0]  kthread+0x711/0x8a0
[  367.809270][    C0]  ? __pfx_worker_thread+0x10/0x10
[  367.809277][    C0]  ? __pfx_kthread+0x10/0x10
[  367.809287][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.809296][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.809306][    C0]  ? __pfx_kthread+0x10/0x10
[  367.809315][    C0]  ret_from_fork+0x3fc/0x770
[  367.809326][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  367.809336][    C0]  ? __switch_to_asm+0x39/0x70
[  367.809346][    C0]  ? __switch_to_asm+0x33/0x70
[  367.809355][    C0]  ? __pfx_kthread+0x10/0x10
[  367.809364][    C0]  ret_from_fork_asm+0x1a/0x30
[  367.809380][    C0]  </TASK>
[  367.809435][    C0] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  367.982130][    C0] CPU: 0 UID: 0 PID: 13687 Comm: kworker/u9:16 Not tainted syzkaller #0 PREEMPT(full) 
[  367.982172][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  367.982184][    C0] Workqueue: loop4 loop_workfn
[  367.982210][    C0] Call Trace:
[  367.982219][    C0]  <IRQ>
[  367.982230][    C0]  dump_stack_lvl+0x189/0x250
[  367.982269][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  367.982283][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  367.982299][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  367.982318][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  367.982345][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  367.982369][    C0]  f2fs_write_end_io+0x886/0xb60
[  367.982397][    C0]  blk_update_request+0x57e/0xe60
[  367.982424][    C0]  blk_mq_end_request+0x3e/0x70
[  367.982440][    C0]  blk_done_softirq+0x10a/0x160
[  367.982460][    C0]  handle_softirqs+0x286/0x870
[  367.982502][    C0]  ? __irq_exit_rcu+0xca/0x1f0
[  367.982519][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  367.982529][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  367.982548][    C0]  ? irqtime_account_irq+0xb6/0x1c0
[  367.982568][    C0]  __irq_exit_rcu+0xca/0x1f0
[  367.982588][    C0]  ? __pfx___irq_exit_rcu+0x10/0x10
[  367.982604][    C0]  ? rcu_is_watching+0x15/0xb0
[  367.982620][    C0]  irq_exit_rcu+0x9/0x30
[  367.982631][    C0]  sysvec_call_function_single+0xa3/0xc0
[  367.982651][    C0]  </IRQ>
[  367.982656][    C0]  <TASK>
[  367.982663][    C0]  asm_sysvec_call_function_single+0x1a/0x20
[  367.982679][    C0] RIP: 0010:raise_softirq+0xcc/0x120
[  367.982692][    C0] Code: 5c 42 00 48 c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f6 44 24 21 02 75 49 41 f7 c4 00 02 00 00 74 01 fb 48 c7 04 24 0e 36 e0 45 <4b> c7 04 3e 00 00 00 00 66 43 c7 44 3e 09 00 00 43 c6 44 3e 0b 00
[  367.982703][    C0] RSP: 0018:ffffc90007287400 EFLAGS: 00000206
[  367.982715][    C0] RAX: a60cea99904fcc00 RBX: 0000000000000004 RCX: a60cea99904fcc00
[  367.982725][    C0] RDX: 0000000000000006 RSI: ffffffff8d9b77f8 RDI: ffffffff8be33680
[  367.982731][    C0] RBP: ffffc900072874b0 R08: ffffffff8fa38b37 R09: 1ffffffff1f47166
[  367.982740][    C0] R10: dffffc0000000000 R11: fffffbfff1f47167 R12: 0000000000000a02
[  367.982748][    C0] R13: 1ffff92000e50e9c R14: 1ffff92000e50e80 R15: dffffc0000000000
[  367.982769][    C0]  ? __pfx_raise_softirq+0x10/0x10
[  367.982786][    C0]  ? __lock_acquire+0xab9/0xd20
[  367.982808][    C0]  blk_mq_complete_request_remote+0x6f7/0xa50
[  367.982830][    C0]  ? __pfx_blk_mq_complete_request_remote+0x10/0x10
[  367.982845][    C0]  ? rcu_read_lock_any_held+0xb3/0x120
[  367.982862][    C0]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  367.982884][    C0]  blk_mq_complete_request+0x19/0xa0
[  367.982903][    C0]  lo_rw_aio+0xd75/0xfa0
[  367.982932][    C0]  ? __pfx_lo_rw_aio+0x10/0x10
[  367.982954][    C0]  ? kthread_associate_blkcg+0x491/0x600
[  367.982973][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.982992][    C0]  loop_process_work+0x835/0xf90
[  367.983017][    C0]  ? update_load_avg+0x572/0x1880
[  367.983032][    C0]  ? __pfx_loop_process_work+0x10/0x10
[  367.983049][    C0]  ? __lock_acquire+0xab9/0xd20
[  367.983072][    C0]  ? do_raw_spin_lock+0x121/0x290
[  367.983089][    C0]  ? look_up_lock_class+0x74/0x170
[  367.983108][    C0]  ? register_lock_class+0x51/0x320
[  367.983128][    C0]  ? __lock_acquire+0xab9/0xd20
[  367.983152][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  367.983169][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.983184][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  367.983195][    C0]  ? process_scheduled_works+0x9ef/0x17b0
[  367.983209][    C0]  process_scheduled_works+0xae1/0x17b0
[  367.983239][    C0]  ? __pfx_process_scheduled_works+0x10/0x10
[  367.983263][    C0]  worker_thread+0x8a0/0xda0
[  367.983279][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  367.983296][    C0]  ? __kthread_parkme+0x7b/0x200
[  367.983310][    C0]  kthread+0x711/0x8a0
[  367.983324][    C0]  ? __pfx_worker_thread+0x10/0x10
[  367.983336][    C0]  ? __pfx_kthread+0x10/0x10
[  367.983354][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  367.983371][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  367.983388][    C0]  ? __pfx_kthread+0x10/0x10
[  367.983405][    C0]  ret_from_fork+0x3fc/0x770
[  367.983424][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  367.983442][    C0]  ? __switch_to_asm+0x39/0x70
[  367.983494][    C0]  ? __switch_to_asm+0x33/0x70
[  367.983510][    C0]  ? __pfx_kthread+0x10/0x10
[  367.983526][    C0]  ret_from_fork_asm+0x1a/0x30
[  367.983553][    C0]  </TASK>
[  367.983634][    C0] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  368.181819][T12280] F2FS-fs (loop4): do_checkpoint failed err:-5, stop checkpoint
[  370.144239][T14384] loop4: detected capacity change from 0 to 32768
[  370.159880][T14384] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  370.204310][T12280] ocfs2: Unmounting device (7,4) on (node local)
[  371.139784][T14437] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2855'.
[  371.149837][T14437] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2855'.
[  371.827314][T14458] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2863'.
[  372.844072][T14472] overlay: filesystem on ./bus is read-only
[  372.849107][T14465] loop4: detected capacity change from 0 to 32768
[  372.863754][T14465] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section downgrade: downgrade entry with mismatched major version (0 != 1)
[  372.863754][T14465] downgrade (size 2912):
[  372.863754][T14465] version:	0.0: (unknown version)
[  372.863754][T14465] recovery passes:	
[  372.863754][T14465] errors:	sb_clean_missing
[  372.863754][T14465] version:	0.0: (unknown version)
[  372.863754][T14465] recovery passes:	snapshots_read,set_may_go_rw,check_alloc_info,check_lrus,check_extents_to_backpointers,check_snapshot_trees,check_snapshots,fs_upgrade_for_subvolumes
[  372.863754][T14465] errors:	clean_but_journal_not_empty
[  372.863754][T14465] version:	0.0: (unknown version)
[  372.863754][T14465] recovery passes:	fs_freespace_init
[  372.863754][T14465] errors:	
[  372.863754][T14465] version:	0.1: (unknown version)
[  372.863754][T14465] recovery passes:	set_may_go_rw,fs_freespace_init,check_snapshot_trees
[  372.863754][T14465] errors:	sb_clean_missing,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_empty,dirty_but_no_journal_entries,(unknown error 768),sb_clean_missing,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_
[  372.864149][T14465] bcachefs: bch2_fs_get_tree() error: invalid_sb_downgrade
[  372.885105][T14474] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2870'.
[  373.731365][T14500] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2882'.
[  373.804362][T14508] mac80211_hwsim hwsim7 `: renamed from wlan1 (while UP)
[  374.472339][   T33] audit: type=1326 audit(1757159282.180:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14556 comm="syz.2.2898" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f10f098ebe9 code=0x0
[  374.935186][T14585] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2903'.
[  375.002714][T14587] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2904'.
[  375.137967][T14589] loop4: detected capacity change from 0 to 2048
[  375.153023][T14589] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  375.167692][T14590] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  375.362107][T14601] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2910'.
[  375.510833][T14611] loop4: detected capacity change from 0 to 512
[  375.521311][T14611] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  375.549055][T14611] EXT4-fs (loop4): orphan cleanup on readonly fs
[  375.558658][T14611] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  375.573402][T14611] EXT4-fs (loop4): Remounting filesystem read-only
[  375.605953][T14611] EXT4-fs (loop4): 1 truncate cleaned up
[  375.614552][T14611] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  375.655498][T12280] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  376.129734][T14619] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2917'.
[  376.428993][  T793] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[  376.595384][  T793] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  376.599403][  T793] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  376.605140][  T793] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  376.613320][  T793] usb 5-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  376.617343][  T793] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.620648][  T793] usb 5-1: Product: syz
[  376.624703][  T793] usb 5-1: Manufacturer: syz
[  376.628100][  T793] usb 5-1: SerialNumber: syz
[  376.636261][  T793] usb 5-1: config 0 descriptor??
[  376.638836][T14621] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  376.641423][T14621] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  376.654956][  T793] usb 5-1: ucan: probing device on interface #0
[  376.779343][   T51] usb 1-1: new high-speed USB device number 43 using dummy_hcd
[  376.878533][  T793] usb 5-1: ucan: device protocol version 0 is not supported
[  376.881321][  T793] usb 5-1: ucan: probe failed; try to update the device firmware
[  376.951956][   T51] usb 1-1: unable to get BOS descriptor or descriptor too short
[  376.962217][   T51] usb 1-1: config 7 has an invalid interface number: 232 but max is 0
[  376.965529][   T51] usb 1-1: config 7 has no interface number 0
[  376.968137][   T51] usb 1-1: config 7 interface 232 has no altsetting 0
[  376.979161][   T51] usb 1-1: New USB device found, idVendor=05ac, idProduct=0245, bcdDevice=7d.1d
[  376.987524][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.991395][   T51] usb 1-1: Product: syz
[  376.993212][   T51] usb 1-1: Manufacturer: syz
[  376.995533][   T51] usb 1-1: SerialNumber: syz
[  376.999104][T14650] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2932'.
[  377.103936][   T10] usb 5-1: USB disconnect, device number 14
[  377.234446][   T51] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.232/input/input22
[  377.242953][ T5283] bcm5974 1-1:7.232: could not read from device
[  377.246741][ T5283] bcm5974 1-1:7.232: could not read from device
[  377.254654][   T51] usb 1-1: USB disconnect, device number 43
[  377.256934][ T5283] bcm5974 1-1:7.232: could not read from device
[  378.102766][T14684] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  378.114715][T14684] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  378.202668][T14689] netlink: 'syz.0.2950': attribute type 8 has an invalid length.
[  378.365276][T14701] loop4: detected capacity change from 0 to 256
[  378.379372][T14701] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  378.383805][T14701] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  378.406636][T14701] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  378.427917][T14701] exFAT-fs (loop4): error, broken FAT chain.
[  378.430546][T14701] exFAT-fs (loop4): Filesystem has been set read-only
[  378.435044][T14701] exFAT-fs (loop4): error, failed to bmap (inode : ffff8881130941b8 iblock : 95, err : -5)
[  378.889520][ T5316] usb 1-1: new high-speed USB device number 44 using dummy_hcd
[  378.962325][T14724] tmpfs: Bad value for 'mpol'
[  379.066712][ T5316] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  379.071739][ T5316] usb 1-1: config 0 interface 0 has no altsetting 0
[  379.076789][ T5316] usb 1-1: New USB device found, idVendor=10fd, idProduct=1513, bcdDevice=7e.ce
[  379.080557][ T5316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  379.085598][ T5316] usb 1-1: Product: syz
[  379.087465][ T5316] usb 1-1: Manufacturer: syz
[  379.089221][ T5316] usb 1-1: SerialNumber: syz
[  379.094636][ T5316] usb 1-1: config 0 descriptor??
[  379.099276][ T5316] dvb-usb: found a 'MSI DIGI VOX mini II DVB-T USB2.0' in warm state.
[  379.110225][ T5316] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  379.114527][ T5316] dvbdev: DVB: registering new adapter (MSI DIGI VOX mini II DVB-T USB2.0)
[  379.119228][ T5316] usb 1-1: media controller created
[  379.136619][ T5316] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  379.179638][ T5316] DVB: Unable to find symbol tda10046_attach()
[  379.183408][ T5316] dvb-usb: no frontend was attached by 'MSI DIGI VOX mini II DVB-T USB2.0'
[  379.187309][ T5316] dvb-usb: MSI DIGI VOX mini II DVB-T USB2.0 successfully initialized and connected.
[  379.233433][T14738] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2972'.
[  379.237650][T14738] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2972'.
[  379.351901][T14742] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2974'.
[  379.741943][T14763] netlink: 676 bytes leftover after parsing attributes in process `syz.4.2984'.
[  379.747946][T14763] netlink: 676 bytes leftover after parsing attributes in process `syz.4.2984'.
[  379.765108][ T5316] dvb_usb_m920x 1-1:0.0: probe with driver dvb_usb_m920x failed with error -71
[  379.774874][ T5316] usb 1-1: USB disconnect, device number 44
[  379.796798][T14768] loop4: detected capacity change from 0 to 16
[  379.804445][T14768] erofs (device loop4): mounted with root inode @ nid 36.
[  379.825473][T14768] syz.4.2987: attempt to access beyond end of device
[  379.825473][T14768] loop4: rw=0, sector=48, nr_sectors = 16 limit=16
[  379.836174][T14768] erofs (device loop4): read error -5 @ 43 of nid 36
[  379.908332][T14775] loop4: detected capacity change from 0 to 128
[  379.917866][T14775] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  379.922955][T14775] ext4 filesystem being mounted at /293/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  379.956136][T12280] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  381.009118][ T5906] usb 1-1: new full-speed USB device number 45 using dummy_hcd
[  381.197319][ T5906] usb 1-1: config 0 has no interfaces?
[  381.199589][ T5906] usb 1-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  381.217998][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  381.257093][ T5906] usb 1-1: config 0 descriptor??
[  381.740427][  T793] usb 1-1: USB disconnect, device number 45
[  382.388736][T14834] loop4: detected capacity change from 0 to 32768
[  382.391644][T14834] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3013 (14834)
[  382.407428][T14834] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  382.411860][T14834] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  382.414582][T14834] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  382.436718][T14834] BTRFS info (device loop4): rebuilding free space tree
[  382.446463][T14834] BTRFS info (device loop4): disabling free space tree
[  382.448676][T14834] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  382.453016][T14834] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  382.461691][T14834] BTRFS info (device loop4): setting nodatasum
[  382.463838][T14834] BTRFS info (device loop4): setting nodatacow
[  382.465821][T14834] BTRFS info (device loop4): enabling ssd optimizations
[  382.468141][T14834] BTRFS info (device loop4): enabling disk space caching
[  382.470399][T14834] BTRFS info (device loop4): force clearing of disk cache
[  382.473928][T14834] BTRFS info (device loop4): doing ref verification
[  382.545323][T12280] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  382.598411][T14859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3019'.
[  382.614802][T14859] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3019'.
[  383.434087][T14898] netlink: 348 bytes leftover after parsing attributes in process `syz.4.3035'.
[  383.818772][   T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd
[  383.979773][   T10] usb 5-1: Using ep0 maxpacket: 8
[  383.993577][   T10] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  383.998100][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  384.003689][   T10] usb 5-1: Product: syz
[  384.005378][   T10] usb 5-1: Manufacturer: syz
[  384.007179][   T10] usb 5-1: SerialNumber: syz
[  384.011397][   T10] usb 5-1: config 0 descriptor??
[  384.018753][   T10] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  385.628090][   T10] gspca_sonixj: reg_w1 err -71
[  385.634084][   T33] audit: type=1400 audit(1757159292.480:59): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=14941 comm="syz.0.3052"
[  385.724859][   T10] sonixj 5-1:0.0: probe with driver sonixj failed with error -71
[  385.731380][   T10] usb 5-1: USB disconnect, device number 15
[  386.207111][T14990] loop4: detected capacity change from 0 to 256
[  386.218385][T14990] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011d5f, chksum : 0x09863542, utbl_chksum : 0x000cd30d)
[  386.251503][   T33] audit: type=1800 audit(1757159549.039:60): pid=14990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3072" name="file2" dev="loop4" ino=1048708 res=0 errno=0
[  386.338776][  T793] libceph: connect (1)[c::]:6789 error -101
[  386.345859][  T793] libceph: mon0 (1)[c::]:6789 connect error
[  386.499618][   T33] audit: type=1326 audit(1757159549.279:61): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14993 comm="syz.2.3074" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f10f098ebe9 code=0x0
[  386.556292][T14994] ceph: No mds server is up or the cluster is laggy
[  386.741551][   T33] audit: type=1326 audit(1757159549.501:62): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15014 comm="syz.2.3081" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f098ebe9 code=0x7ffc0000
[  386.952336][   T33] audit: type=1326 audit(1757159549.547:63): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15014 comm="syz.2.3081" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f098ebe9 code=0x7ffc0000
[  386.972070][   T33] audit: type=1326 audit(1757159549.547:64): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15014 comm="syz.2.3081" exe="/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f10f098ebe9 code=0x7ffc0000
[  386.985240][   T33] audit: type=1326 audit(1757159549.547:65): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15014 comm="syz.2.3081" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f098ebe9 code=0x7ffc0000
[  386.995489][   T33] audit: type=1326 audit(1757159549.547:66): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15014 comm="syz.2.3081" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f10f098ebe9 code=0x7ffc0000
[  387.290332][T15036] netlink: 'syz.0.3091': attribute type 3 has an invalid length.
[  387.293445][T15036] netlink: 'syz.0.3091': attribute type 1 has an invalid length.
[  387.296816][T15036] netlink: 216 bytes leftover after parsing attributes in process `syz.0.3091'.
[  387.301288][T15036] NCSI netlink: No device for ifindex 0
[  387.349138][T15038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3092'.
[  387.353000][T15038] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3092'.
[  387.365409][T15038] erspan0: entered promiscuous mode
[  387.368797][T15038] batadv_slave_1: entered promiscuous mode
[  387.372823][T15038] debugfs: 'hsr1' already exists in 'hsr'
[  387.375429][T15038] Cannot create hsr debugfs directory
[  387.524381][T15047] input: syz0 as /devices/virtual/input/input24
[  387.935158][T15060] loop4: detected capacity change from 0 to 32768
[  387.964664][T15060] JBD2: Ignoring recovery information on journal
[  388.012074][T15060] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  388.073326][T15060] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 23 has 4294967295 used bits but only 16777215 total
[  388.082800][T15060] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  388.086965][T15060] OCFS2: File system is now read-only.
[  388.089184][T15060] (syz.4.3103,15060,1):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  388.092571][T15060] (syz.4.3103,15060,1):__ocfs2_claim_clusters:2438 ERROR: status = -30
[  388.095624][T15060] (syz.4.3103,15060,1):__ocfs2_claim_clusters:2446 ERROR: status = -30
[  388.099173][T15060] (syz.4.3103,15060,1):ocfs2_block_group_alloc_contig:437 ERROR: status = -30
[  388.103750][T15060] (syz.4.3103,15060,1):ocfs2_block_group_alloc:711 ERROR: status = -30
[  388.107755][T15060] (syz.4.3103,15060,1):ocfs2_block_group_alloc:764 ERROR: status = -30
[  388.111869][T15060] (syz.4.3103,15060,1):ocfs2_reserve_suballoc_bits:839 ERROR: status = -30
[  388.115377][T15060] (syz.4.3103,15060,1):ocfs2_reserve_suballoc_bits:856 ERROR: status = -30
[  388.119257][T15060] (syz.4.3103,15060,1):ocfs2_reserve_new_metadata_blocks:996 ERROR: status = -30
[  388.124329][T15060] (syz.4.3103,15060,1):ocfs2_reserve_new_metadata_blocks:1019 ERROR: status = -30
[  388.129264][T15060] (syz.4.3103,15060,1):ocfs2_expand_inline_dir:2847 ERROR: status = -30
[  388.132673][T15060] (syz.4.3103,15060,1):ocfs2_extend_dir:3211 ERROR: status = -30
[  388.136684][T15060] (syz.4.3103,15060,1):ocfs2_prepare_dir_for_insert:4316 ERROR: status = -30
[  388.140254][T15060] (syz.4.3103,15060,1):ocfs2_mknod:301 ERROR: status = -30
[  388.144748][T15060] (syz.4.3103,15060,1):ocfs2_mknod:505 ERROR: status = -30
[  388.147903][T15060] (syz.4.3103,15060,1):ocfs2_create:678 ERROR: status = -30
[  388.192249][T12280] ocfs2: Unmounting device (7,4) on (node local)
[  388.278714][T15088] netlink: 52 bytes leftover after parsing attributes in process `syz.2.3116'.
[  388.283832][T15088] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  390.124899][T15126] loop4: detected capacity change from 0 to 32768
[  390.133513][T15126] XFS (loop4): DAX unsupported by block device. Turning off DAX.
[  390.137810][T15126] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  390.157026][T15126] XFS (loop4): Ending clean mount
[  390.164546][T15126] XFS (loop4): Quotacheck needed: Please wait.
[  390.213254][    C1] vkms_vblank_simulate: vblank timer overrun
[  390.226491][T15126] XFS (loop4): Quotacheck: Done.
[  390.263196][T12280] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  390.303468][    C1] vkms_vblank_simulate: vblank timer overrun
[  390.303907][    C0] hpet: Lost 1 RTC interrupts
[  390.339045][    C1] vkms_vblank_simulate: vblank timer overrun
[  391.302347][T15189] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3154'.
[  391.308474][T15189] netlink: 'syz.0.3154': attribute type 7 has an invalid length.
[  391.311926][T15189] netlink: 'syz.0.3154': attribute type 8 has an invalid length.
[  391.331376][T15189] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3154'.
[  391.548814][T15203] nftables ruleset with unbound chain
[  392.990014][T15226] loop4: detected capacity change from 0 to 4096
[  392.996641][T15226] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  393.006463][T15226] ntfs3(loop4): volume is dirty and "force" flag is not set!
[  393.383282][ T5994] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[  393.556607][ T5994] usb 5-1: Using ep0 maxpacket: 8
[  393.561650][ T5994] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  393.566282][ T5994] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  393.570554][ T5994] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  393.575602][ T5994] usb 5-1: config 1 interface 0 has no altsetting 1
[  393.581656][ T5994] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  393.585381][ T5994] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  393.588655][ T5994] usb 5-1: Product: syz
[  393.590654][ T5994] usb 5-1: Manufacturer: syz
[  393.592929][ T5994] usb 5-1: SerialNumber: syz
[  393.601532][ T5994] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22
[  393.647597][   T54] Bluetooth: hci1: unexpected event for opcode 0x2023
[  393.825135][ T5316] usb 5-1: USB disconnect, device number 16
[  394.456544][T15271] wg1 speed is unknown, defaulting to 1000
[  394.459784][T15271] wg1 speed is unknown, defaulting to 1000
[  394.496945][T15271] wg1 speed is unknown, defaulting to 1000
[  394.517610][T15271] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  394.548941][T15271] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[  394.600429][T15271] wg1 speed is unknown, defaulting to 1000
[  394.606549][T15271] wg1 speed is unknown, defaulting to 1000
[  394.613846][T15271] wg1 speed is unknown, defaulting to 1000
[  394.617826][T15271] wg1 speed is unknown, defaulting to 1000
[  394.692313][T15279] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3190'.
[  394.902964][T15296] overlayfs: failed to decode file handle (len=6, type=248, flags=0, err=-61)
[  394.965196][   T10] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[  395.140028][   T10] usb 1-1: Using ep0 maxpacket: 8
[  395.151230][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  395.154875][   T10] usb 1-1: config index 0 descriptor too short (expected 25, got 18)
[  395.159145][   T10] usb 1-1: config 9 has an invalid interface number: 112 but max is 0
[  395.166992][   T10] usb 1-1: config 9 has no interface number 0
[  395.169061][   T10] usb 1-1: config 9 interface 112 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  395.175500][   T10] usb 1-1: config 9 interface 112 has no altsetting 0
[  395.180594][   T10] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice= 8.d3
[  395.185757][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  395.189441][   T10] usb 1-1: Product: syz
[  395.191221][   T10] usb 1-1: Manufacturer: syz
[  395.193371][   T10] usb 1-1: SerialNumber: syz
[  395.205784][   T10] r8152-cfgselector 1-1: Unknown version 0x0000
[  395.335531][T15311] loop4: detected capacity change from 0 to 256
[  395.347186][T15311] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x1f7c91f3, utbl_chksum : 0xe619d30d)
[  395.561070][T15318] exFAT-fs (loop4): valid_size(100667392) is greater than size(4096)
[  395.568235][   T10] r8152-cfgselector 1-1: USB disconnect, device number 46
[  396.005311][ T5316] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  396.168019][ T5316] usb 5-1: Using ep0 maxpacket: 32
[  396.172154][ T5316] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  396.176416][ T5316] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  396.186301][ T5316] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  396.200834][ T5316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  396.204886][ T5316] usb 5-1: Product: syz
[  396.211081][ T5316] usb 5-1: Manufacturer: syz
[  396.213417][ T5316] usb 5-1: SerialNumber: syz
[  396.222041][ T5316] usb 5-1: config 0 descriptor??
[  396.813013][ T5316] usb 5-1: USB disconnect, device number 17
[  398.158345][T15385] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[  398.161866][T15385] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0
[  398.367131][ T5994] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[  398.551282][ T5994] usb 1-1: Using ep0 maxpacket: 16
[  398.559917][ T5994] usb 1-1: New USB device found, idVendor=0c45, idProduct=800a, bcdDevice=db.47
[  398.565447][ T5994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  398.570116][ T5994] usb 1-1: Product: syz
[  398.573322][ T5994] usb 1-1: Manufacturer: syz
[  398.576585][ T5994] usb 1-1: SerialNumber: syz
[  398.586998][ T5994] usb 1-1: config 0 descriptor??
[  398.593354][ T5994] gspca_main: sn9c2028-2.14.0 probing 0c45:800a
[  398.628963][T15391] loop4: detected capacity change from 0 to 128
[  398.636803][T15391] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  398.644328][T15391] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  398.675988][T15391] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  398.685441][T15391] UDF-fs: error (device loop4): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  398.821179][ T5994] gspca_sn9c2028: read1 error -32
[  399.045580][ T5994] gspca_sn9c2028: read1 error -71
[  399.052221][ T5994] sn9c2028 1-1:0.0: probe with driver sn9c2028 failed with error -71
[  399.067063][ T5994] usb 1-1: USB disconnect, device number 47
[  399.805284][T15433] loop4: detected capacity change from 0 to 512
[  399.836477][T15433] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  399.842396][T15433] ext4 filesystem being mounted at /342/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  399.885550][T12280] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  399.909056][    C0] hpet: Lost 1 RTC interrupts
[  399.968173][T15447] netlink: 'syz.4.3266': attribute type 12 has an invalid length.
[  399.974540][T15447] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.3266'.
[  399.989815][T15449] overlayfs: failed to clone upperpath
[  400.057999][   T10] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[  400.241642][   T10] usb 1-1: Using ep0 maxpacket: 16
[  400.248768][   T10] usb 1-1: config 0 has an invalid interface number: 126 but max is 0
[  400.253496][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  400.257565][   T10] usb 1-1: config 0 has no interface number 0
[  400.260591][   T10] usb 1-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  400.267151][   T10] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  400.271714][   T10] usb 1-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  400.276782][   T10] usb 1-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 147
[  400.282307][   T10] usb 1-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  400.288342][   T10] usb 1-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  400.292424][   T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  400.300622][   T10] usb 1-1: config 0 descriptor??
[  400.303670][T15431] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  400.307694][T15431] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  400.314381][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  400.403880][ T5906] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  400.534630][ T5316] usb 1-1: USB disconnect, device number 48
[  400.566419][ T5906] usb 5-1: Using ep0 maxpacket: 16
[  400.571131][ T5906] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  400.575153][ T5906] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  400.585077][ T5906] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  400.589441][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  400.593175][ T5906] usb 5-1: Product: syz
[  400.595639][ T5906] usb 5-1: Manufacturer: syz
[  400.597554][ T5906] usb 5-1: SerialNumber: syz
[  400.832920][ T5906] usb 5-1: 0:2 : does not exist
[  400.851617][ T5906] usb 5-1: USB disconnect, device number 18
[  401.137728][T15471] netlink: 'syz.0.3278': attribute type 3 has an invalid length.
[  401.142946][T15471] netlink: 'syz.0.3278': attribute type 3 has an invalid length.
[  402.710216][T15505] loop4: detected capacity change from 0 to 32768
[  402.717980][T15505] XFS: ikeep mount option is deprecated.
[  402.759541][T15505] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  402.790567][T15505] XFS (loop4): Ending clean mount
[  402.796941][T15505] XFS (loop4): Quotacheck needed: Please wait.
[  402.874598][T15505] XFS (loop4): Quotacheck: Done.
[  402.996324][T12280] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  403.000577][T15546] netlink: 'syz.2.3307': attribute type 1 has an invalid length.
[  403.077454][T15546] bond3: (slave ip6gretap2): Enslaving as a backup interface with an up link
[  403.118079][T15546] veth5: entered promiscuous mode
[  403.124778][T15546] bond3: (slave veth5): Enslaving as a backup interface with a down link
[  403.222997][    C0] hpet: Lost 1 RTC interrupts
[  404.158282][T15582] hub 8-0:1.0: USB hub found
[  404.162421][T15582] hub 8-0:1.0: 1 port detected
[  404.982636][T15587] loop4: detected capacity change from 0 to 32768
[  404.997078][T15587] 
[  404.997078][T15587]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  404.997078][T15587] 
[  405.024652][T15587] ERROR: (device loop4): diWrite: ixpxd invalid
[  405.024652][T15587] 
[  405.031636][T15587] ERROR: (device loop4): txCommit: 
[  405.031636][T15587] 
[  405.044928][T15587] ERROR: (device loop4): dtSearch: stack overrun!
[  405.044928][T15587] 
[  405.049717][T15587] btstack dump:
[  405.050998][T15587] bn = 0, index = 0
[  405.064376][T15587] bn = 0, index = 0
[  405.067295][T15587] bn = 0, index = 0
[  405.068747][T15587] bn = 0, index = 0
[  405.070348][T15587] bn = 0, index = 0
[  405.071710][T15587] bn = 0, index = 0
[  405.075391][T15587] bn = 0, index = 0
[  405.081386][T15587] bn = 0, index = 0
[  405.083120][T15587] jfs_lookup: dtSearch returned -5
[  405.477650][T15599] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  405.519716][T15601] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  405.554876][T15603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3331'.
[  405.558108][T15603] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3331'.
[  405.561596][T15603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3331'.
[  405.648072][T12280] 
[  405.648072][T12280]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  405.648072][T12280] 
[  405.656787][T12280] 
[  405.656787][T12280]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  405.656787][T12280] 
[  405.786196][T15613] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3336'.
[  405.912959][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  406.260367][   T33] audit: type=1326 audit(1757159567.508:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15636 comm="syz.4.3347" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b1b8ebe9 code=0x7ffc0000
[  406.283228][   T33] audit: type=1326 audit(1757159567.518:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15636 comm="syz.4.3347" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fb0b1b90b07 code=0x7ffc0000
[  406.311523][   T33] audit: type=1326 audit(1757159567.518:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15636 comm="syz.4.3347" exe="/syz-executor" sig=0 arch=c000003e syscall=44 compat=0 ip=0x7fb0b1b90a7c code=0x7ffc0000
[  406.327553][   T33] audit: type=1326 audit(1757159567.518:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15636 comm="syz.4.3347" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb0b1b909b4 code=0x7ffc0000
[  406.346760][   T33] audit: type=1326 audit(1757159567.518:71): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15636 comm="syz.4.3347" exe="/syz-executor" sig=0 arch=c000003e syscall=45 compat=0 ip=0x7fb0b1b909b4 code=0x7ffc0000
[  406.361231][   T33] audit: type=1326 audit(1757159567.518:72): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15636 comm="syz.4.3347" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fb0b1b8d84a code=0x7ffc0000
[  406.370974][   T33] audit: type=1326 audit(1757159567.518:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15636 comm="syz.4.3347" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb0b1b8ebe9 code=0x7ffc0000
[  406.595278][T15642] loop4: detected capacity change from 0 to 32768
[  406.598177][T15642] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3349 (15642)
[  406.661999][T15653] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3352'.
[  406.866617][T15642] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  406.870175][T15642] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  406.888177][T15642] BTRFS info (device loop4): enabling ssd optimizations
[  406.891160][T15642] BTRFS info (device loop4): enabling free space tree
[  406.894007][T15642] BTRFS info (device loop4): use lzo compression, level 0
[  406.966124][   T33] audit: type=1800 audit(1757159568.173:74): pid=15642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3349" name="file2" dev="loop4" ino=261 res=0 errno=0
[  407.053771][T12280] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  407.389744][T15686] loop4: detected capacity change from 0 to 1024
[  407.505664][T13666] hfsplus: b-tree write err: -5, ino 4
[  407.562681][T15696] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3367'.
[  407.594695][T15696] netlink: 'syz.2.3367': attribute type 10 has an invalid length.
[  407.608907][T15696] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[  407.611970][T15696] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[  407.758439][T15702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3370'.
[  408.060424][T15698] loop4: detected capacity change from 0 to 65536
[  408.129506][T15698] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  408.165610][T15698] XFS (loop4): Ending clean mount
[  408.189109][T15698] XFS (loop4): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x6 
[  408.193631][T15698] XFS (loop4): Unmount and run xfs_repair
[  408.195448][T15698] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  408.198043][T15698] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  408.200887][T15698] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[  408.204245][T15698] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  408.207257][T15698] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[  408.210042][T15698] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[  408.213223][T15698] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[  408.216724][T15698] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  408.220240][T15698] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  408.223319][T15698] XFS (loop4): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x6 len 2 error 74
[  408.228069][T15698] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  408.233023][T15698] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  408.265188][T12280] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  408.689627][T15736] netlink: 'syz.4.3380': attribute type 21 has an invalid length.
[  408.698758][T15736] netlink: 128 bytes leftover after parsing attributes in process `syz.4.3380'.
[  408.702459][T15736] netlink: 'syz.4.3380': attribute type 4 has an invalid length.
[  408.709101][T15736] netlink: 'syz.4.3380': attribute type 5 has an invalid length.
[  408.716469][T15736] netlink: 3 bytes leftover after parsing attributes in process `syz.4.3380'.
[  408.971503][T15743] loop4: detected capacity change from 0 to 32768
[  408.976232][T15743] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3382 (15743)
[  408.986713][T15743] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  408.990555][T15743] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[  408.994841][T15743] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  409.018817][T15743] BTRFS info (device loop4): rebuilding free space tree
[  409.026128][T15743] BTRFS info (device loop4): disabling free space tree
[  409.029454][T15743] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  409.033093][T15743] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  409.041243][T15743] BTRFS info (device loop4): enabling ssd optimizations
[  409.043982][T15743] BTRFS info (device loop4): turning off barriers
[  409.046300][T15743] BTRFS info (device loop4): enabling disk space caching
[  409.048537][T15743] BTRFS info (device loop4): force clearing of disk cache
[  409.051616][T15743] BTRFS info (device loop4): doing ref verification
[  409.053994][T15743] BTRFS info (device loop4): force zlib compression, level 3
[  409.091728][T12280] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  409.128733][    C0] hpet: Lost 1 RTC interrupts
[  409.252918][    C0] hpet: Lost 1 RTC interrupts
[  409.961060][T15817] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3412'.
[  410.246998][T15839] loop4: detected capacity change from 0 to 1024
[  411.904802][T15873] loop4: detected capacity change from 0 to 4096
[  411.910668][T15873] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  411.926066][T15873] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  412.278447][   T51] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[  412.452434][   T51] usb 5-1: Using ep0 maxpacket: 32
[  412.458536][   T51] usb 5-1: config 0 has no interfaces?
[  412.464620][   T51] usb 5-1: New USB device found, idVendor=10c4, idProduct=818a, bcdDevice=7d.8f
[  412.468239][   T51] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  412.484235][   T51] usb 5-1: Product: syz
[  412.485568][   T51] usb 5-1: Manufacturer: syz
[  412.487073][   T51] usb 5-1: SerialNumber: syz
[  412.490617][   T51] usb 5-1: config 0 descriptor??
[  412.542372][T15887] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3444'.
[  412.557534][T15887] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3444'.
[  412.564161][T15887] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  412.725798][ T5906] usb 5-1: USB disconnect, device number 19
[  412.884147][T15899] sctp: [Deprecated]: syz.2.3450 (pid 15899) Use of struct sctp_assoc_value in delayed_ack socket option.
[  412.884147][T15899] Use struct sctp_sack_info instead
[  413.697608][ T5906] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  413.780707][   T51] IPVS: starting estimator thread 0...
[  413.864622][ T5906] usb 5-1: unable to get BOS descriptor or descriptor too short
[  413.873741][T15926] IPVS: using max 54 ests per chain, 129600 per kthread
[  413.884410][ T5906] usb 5-1: not running at top speed; connect to a high speed hub
[  413.893636][ T5906] usb 5-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  413.903913][ T5906] usb 5-1: config 1 interface 0 has no altsetting 0
[  413.917189][ T5906] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  413.921711][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  413.929058][ T5906] usb 5-1: Product: syz
[  413.930877][ T5906] usb 5-1: Manufacturer: 屄⨖䦉㺯鴆㎔敓ƿ䉆⥜᭙‏嗚瑺囏⍛뙯ᕀ㫰Ⳏ쩀難폧ꃺ桩䚧󥔝
[  413.936252][ T5906] usb 5-1: SerialNumber: syz
[  414.266923][ T5906] usb 5-1: USB disconnect, device number 20
[  414.509142][T15956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3466'.
[  414.513163][T15956] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3466'.
[  414.563247][T15956] 0{X: entered promiscuous mode
[  414.576419][T15956] batadv_slave_1: entered promiscuous mode
[  415.107636][ T5906] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[  415.209624][   T54] Bluetooth: hci2: SCO packet for unknown connection handle 201
[  415.294089][ T5906] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  415.305959][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.310387][ T5906] usb 1-1: Product: syz
[  415.313612][ T5906] usb 1-1: Manufacturer: syz
[  415.315886][ T5906] usb 1-1: SerialNumber: syz
[  415.521144][T15990] vimc link validate: Scaler:src:640x480 (0x33424752, 8, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  415.528073][T15990] vimc vimc.0: first entity in the pipe 'Scaler' is not a source
[  415.610294][T15994] loop4: detected capacity change from 0 to 2048
[  415.620440][T15994] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[  415.623383][T15994] UDF-fs: Scanning with blocksize 512 failed
[  415.637007][T15994] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  415.961504][ T5906] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPROTO
[  416.015461][ T5906] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -71
[  416.070506][ T5906] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  416.084292][ T5906] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -71
[  416.106340][ T5906] usb 1-1: USB disconnect, device number 49
[  417.924849][T16038] loop4: detected capacity change from 0 to 32768
[  419.386803][ T5316] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[  419.643187][ T5316] usb 5-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[  419.648461][ T5316] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  419.652644][ T5316] usb 5-1: Product: syz
[  419.654766][ T5316] usb 5-1: Manufacturer: syz
[  419.656974][ T5316] usb 5-1: SerialNumber: syz
[  419.660972][ T5316] usb 5-1: config 0 descriptor??
[  420.119904][ T5316] usb 5-1: USB disconnect, device number 21
[  420.200055][T16102] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3535'.
[  420.204903][T16102] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3535'.
[  420.212975][T16102] netlink: 60 bytes leftover after parsing attributes in process `syz.2.3535'.
[  420.821615][T16119] loop4: detected capacity change from 0 to 4096
[  420.979620][T16123] loop4: detected capacity change from 0 to 128
[  420.990620][   T33] kauditd_printk_skb: 3 callbacks suppressed
[  420.990637][   T33] audit: type=1800 audit(1757159581.123:76): pid=16123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.3544" name="file1" dev="loop4" ino=1048711 res=0 errno=0
[  421.007291][T16123] FAT-fs (loop4): error, fat_bmap_cluster: request beyond EOF (i_pos 52)
[  421.082374][T16125] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3547'.
[  421.093067][T16125] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3547'.
[  422.552799][T16142] loop4: detected capacity change from 0 to 262144
[  422.564125][T16142] F2FS-fs (loop4): invalid crc value
[  422.600175][T16142] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  422.606100][T16142] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  423.004474][   T51] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  423.167326][   T51] usb 1-1: Using ep0 maxpacket: 8
[  423.179890][   T51] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  423.186638][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  423.191018][   T51] usb 1-1: Product: syz
[  423.193197][   T51] usb 1-1: Manufacturer: syz
[  423.195356][   T51] usb 1-1: SerialNumber: syz
[  423.207837][   T51] usb 1-1: config 0 descriptor??
[  423.215447][   T51] gspca_main: se401-2.14.0 probing 047d:5003
[  423.465686][T16183] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3566'.
[  423.659506][   T51] gspca_se401: Wrong descriptor type
[  423.886566][   T10] usb 1-1: USB disconnect, device number 50
[  424.829001][   T54] Bluetooth: hci1: unexpected event for opcode 0x2027
[  426.634479][T16237] netlink: 116 bytes leftover after parsing attributes in process `syz.0.3594'.
[  426.701825][T16239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3595'.
[  427.277057][T16265] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3602'.
[  427.668402][T16273] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  428.691262][T16308] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[  428.752656][T16309] netlink: 'syz.2.3628': attribute type 1 has an invalid length.
[  428.756052][T16309] netlink: 612 bytes leftover after parsing attributes in process `syz.2.3628'.
[  428.772816][T16309] netlink: 'syz.2.3628': attribute type 1 has an invalid length.
[  429.014992][T16328] netlink: 'syz.4.3637': attribute type 2 has an invalid length.
[  429.027900][T16328] netlink: 1184 bytes leftover after parsing attributes in process `syz.4.3637'.
[  429.349421][T16339] vivid-000: disconnect
[  429.361254][T16337] vivid-000: reconnect
[  431.449513][T16369] loop4: detected capacity change from 0 to 32768
[  431.503683][T16369] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  431.529397][T16369] XFS (loop4): Ending clean mount
[  431.539465][T16369] XFS (loop4): Quotacheck needed: Please wait.
[  431.591255][    C0] hpet: Lost 1 RTC interrupts
[  431.607007][T16369] XFS (loop4): Quotacheck: Done.
[  431.666386][T12280] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  432.146722][T16413] loop4: detected capacity change from 0 to 1764
[  432.290629][T16419] 8021q: adding VLAN 0 to HW filter on device bond2
[  432.320041][T16419] bond_slave_0: entered promiscuous mode
[  432.323090][T16419] bond_slave_1: entered promiscuous mode
[  432.325494][T16419] batadv_slave_0: entered promiscuous mode
[  432.328138][T16419] team_slave_0: entered promiscuous mode
[  432.332810][T16419] team_slave_1: entered promiscuous mode
[  432.337517][T16419] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  432.344567][T16419] bond2: (slave macvlan2): Enslaving as a backup interface with an up link
[  432.871858][T16447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3687'.
[  433.020498][T16453] loop4: detected capacity change from 0 to 1024
[  433.024549][T16453] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  433.040209][T16453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  433.335042][T16460] Bluetooth: MGMT ver 1.23
[  434.002675][T16474] netlink: 'syz.0.3698': attribute type 64 has an invalid length.
[  434.006932][T16474] netlink: 164 bytes leftover after parsing attributes in process `syz.0.3698'.
[  434.020504][T12280] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.107383][T16478] loop4: detected capacity change from 0 to 4096
[  434.129300][T16478] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  434.160743][T16478] EXT4-fs error (device loop4): ext4_generic_delete_entry:2668: inode #2: block 16: comm syz.4.3699: bad entry in directory: inode out of bounds - offset=12, inode=256, rec_len=12, size=4096 fake=1
[  434.169609][T16478] EXT4-fs error (device loop4) in ext4_delete_entry:2739: Corrupt filesystem
[  434.172805][T16478] EXT4-fs warning (device loop4): ext4_rename_delete:3731: inode #2: comm syz.4.3699: Deleting old file: nlink 4, error=-117
[  434.178856][T16478] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.3699: corrupted inode contents
[  434.184571][T16478] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #15: comm syz.4.3699: mark_inode_dirty error
[  434.189175][T16478] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.3699: corrupted inode contents
[  434.193707][T16478] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.3699: mark_inode_dirty error
[  434.200775][T16478] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.3699: corrupted inode contents
[  434.213291][T16478] EXT4-fs error (device loop4): __ext4_ext_dirty:206: inode #15: comm syz.4.3699: mark_inode_dirty error
[  434.219206][T16478] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #15: comm syz.4.3699: corrupted inode contents
[  434.229331][T16478] EXT4-fs error (device loop4): ext4_truncate:4666: inode #15: comm syz.4.3699: mark_inode_dirty error
[  434.278154][T12280] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  434.346817][T16493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3707'.
[  434.352159][T16493] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3707'.
[  434.424484][T16501] netlink: 172 bytes leftover after parsing attributes in process `syz.2.3710'.
[  434.428679][T16501] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  435.420162][T16535] loop4: detected capacity change from 0 to 4096
[  435.425570][T16535] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  435.438494][T16535] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  435.614345][T16551] loop4: detected capacity change from 0 to 256
[  435.631885][T16551] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  435.695050][   T33] audit: type=1326 audit(1757159594.691:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.0.3737" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a278ebe9 code=0x7ffc0000
[  435.725104][   T33] audit: type=1326 audit(1757159594.700:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.0.3737" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a278ebe9 code=0x7ffc0000
[  435.733723][   T33] audit: type=1326 audit(1757159594.700:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.0.3737" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f38a272adb9 code=0x7ffc0000
[  435.743385][   T33] audit: type=1326 audit(1757159594.700:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.0.3737" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f38a272adb9 code=0x7ffc0000
[  435.753030][   T33] audit: type=1326 audit(1757159594.700:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.0.3737" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f38a272adb9 code=0x7ffc0000
[  435.763325][   T33] audit: type=1326 audit(1757159594.700:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.0.3737" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f38a272adb9 code=0x7ffc0000
[  435.772586][   T33] audit: type=1326 audit(1757159594.700:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.0.3737" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f38a272adb9 code=0x7ffc0000
[  435.781993][   T33] audit: type=1326 audit(1757159594.700:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.0.3737" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f38a272adb9 code=0x7ffc0000
[  435.800277][   T33] audit: type=1326 audit(1757159594.700:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16554 comm="syz.0.3737" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f38a272adb9 code=0x7ffc0000
[  435.932413][T16521] 9pnet_fd: p9_fd_create_tcp (16521): problem connecting socket to 127.0.0.1
[  436.059732][T16571] loop4: detected capacity change from 0 to 2048
[  436.101291][T16571] Alternate GPT is invalid, using primary GPT.
[  436.107490][T16571]  loop4: p2 p3 p7
[  436.194628][T16580] loop4: detected capacity change from 0 to 1024
[  436.203599][ T5906] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  436.219600][T16580] hfsplus: catalog searching failed
[  436.235270][T13666] hfsplus: b-tree write err: -5, ino 3
[  436.370799][ T5906] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  436.376403][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  436.379494][ T5906] usb 1-1: Product: syz
[  436.381176][ T5906] usb 1-1: Manufacturer: syz
[  436.383860][ T5906] usb 1-1: SerialNumber: syz
[  436.526752][    C0] hrtimer: interrupt took 15663 ns
[  436.956820][ T5906] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000098. ret = -EPIPE
[  436.962445][ T5906] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): lan78xx_setup_irq_domain() failed : -32
[  436.967458][ T5906] lan78xx 1-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  436.977609][ T5906] lan78xx 1-1:1.0: probe with driver lan78xx failed with error -32
[  437.144032][T16613] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  437.464285][T16629] ip6erspan0: entered promiscuous mode
[  437.551460][T16633] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3770'.
[  437.589109][T16635] netlink: 'syz.4.3771': attribute type 10 has an invalid length.
[  437.603136][T16635] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets).
[  438.563549][T16654] fuse: Bad value for 'fd'
[  438.883345][T16661] loop4: detected capacity change from 0 to 512
[  438.892895][T16661] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  438.912100][T16661] EXT4-fs (loop4): 1 truncate cleaned up
[  438.916108][T16661] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  438.964800][T12280] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  439.088529][T16669] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3784'.
[  439.198629][T16673] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  439.206946][ T5994] usb 1-1: USB disconnect, device number 51
[  439.237952][T16673] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  439.772205][T16703] wg1 speed is unknown, defaulting to 1000
[  439.946527][T16691] loop4: detected capacity change from 0 to 32768
[  439.955409][T16691] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  439.962967][T16691] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  439.977221][   T13] (kworker/u8:1,13,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  440.089941][   T51] usb 1-1: new full-speed USB device number 52 using dummy_hcd
[  440.298886][T12280] ocfs2: Unmounting device (7,4) on (node local)
[  440.324797][    C0] hpet_rtc_timer_reinit: 93 callbacks suppressed
[  440.324823][    C0] hpet: Lost 1 RTC interrupts
[  440.343587][   T51] usb 1-1: config 0 has no interfaces?
[  440.347367][   T51] usb 1-1: New USB device found, idVendor=17dd, idProduct=5500, bcdDevice=f3.5e
[  440.351513][   T51] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  440.354079][   T51] usb 1-1: Product: syz
[  440.355695][   T51] usb 1-1: Manufacturer: syz
[  440.357144][   T51] usb 1-1: SerialNumber: syz
[  440.362387][   T51] usb 1-1: config 0 descriptor??
[  440.636650][   T51] usb 1-1: USB disconnect, device number 52
[  441.390645][    C0] hpet: Lost 1 RTC interrupts
[  442.442022][ T5994] usb 1-1: new high-speed USB device number 53 using dummy_hcd
[  442.617490][ T5994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 245, setting to 64
[  442.622477][ T5994] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  442.626470][ T5994] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  442.632144][ T5994] usb 1-1: config 0 descriptor??
[  442.933451][ T5994] ath6kl: Failed to submit usb control message: -71
[  442.937402][ T5994] ath6kl: unable to send the bmi data to the device: -71
[  442.940908][ T5994] ath6kl: Unable to send get target info: -71
[  442.944618][ T5994] ath6kl: Failed to init ath6kl core: -71
[  442.947973][ T5994] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  442.956005][ T5994] usb 1-1: USB disconnect, device number 53
[  443.130106][T16762] loop4: detected capacity change from 0 to 2048
[  443.136466][T16762] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  443.155003][T16765] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  443.162301][T16762] syz.4.3824: attempt to access beyond end of device
[  443.162301][T16762] loop4: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  443.187417][T16762] syz.4.3824: attempt to access beyond end of device
[  443.187417][T16762] loop4: rw=0, sector=9437254, nr_sectors = 2 limit=2048
[  443.195929][T16762] NILFS (loop4): I/O error reading meta-data file (ino=6, block-offset=0)
[  443.298921][T16771] loop4: detected capacity change from 0 to 16
[  443.303822][T16771] erofs (device loop4): mounted with root inode @ nid 36.
[  443.317299][T16771] erofs (device loop4): bogus lookback distance 0 @ lcn 1 of nid 89
[  443.324936][T16771] erofs (device loop4): readahead error at folio 2 @ nid 89
[  443.328644][T16771] erofs (device loop4): bogus lookback distance 0 @ lcn 1 of nid 89
[  443.333124][T16771] erofs (device loop4): readahead error at folio 1 @ nid 89
[  443.339663][T16771] erofs (device loop4): bogus lookback distance 0 @ lcn 1 of nid 89
[  443.344893][T16771] erofs (device loop4): bogus lookback distance 0 @ lcn 1 of nid 89
[  443.348682][T16771] erofs (device loop4): read error -117 @ 1 of nid 89
[  443.354898][   T33] audit: type=1800 audit(1757159601.761:179): pid=16771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3828" name="file3" dev="loop4" ino=89 res=0 errno=0
[  443.762453][  T793] usb 1-1: new high-speed USB device number 54 using dummy_hcd
[  443.939996][  T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  443.944441][  T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  443.961611][  T793] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  443.965463][  T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  443.974766][  T793] usb 1-1: config 0 descriptor??
[  444.587535][T16793] loop4: detected capacity change from 0 to 32768
[  444.632319][T16793] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=ask,norecovery,nojournal_transaction_names,read_only
[  444.632341][T16793]   allowing incompatible features above 0.0: (unknown version)
[  444.632352][T16793]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  444.648746][T16793] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  444.653439][T16793] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  444.656618][T16793] bcachefs (loop4): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  444.656618][T16793]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  444.691659][T16793] bcachefs (loop4): btree node read error at btree lru level 0/0
[  444.691732][T16793]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key 0:196608:0 durability: 1 ptr: 0:28:0 gen 0
[  444.691745][T16793]   loop4 node offset 0/16: incorrect min_key: got POS_MIN should be 0:196608:0
[  444.691754][T16793]   loop4 btree validate error
[  444.691762][T16793]   flagging btree lru lost data
[  444.691770][T16793]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  444.691779][T16793]   running recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[  444.691788][T16793]   running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[  444.691798][T16793]   running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0)
[  444.691807][T16793]   ret btree_node_read_err_bad_node
[  444.733768][T16793] bcachefs (loop4): error reading btree root btree=lru level=0: btree_node_read_error, fixing
[  444.739773][T16793] bcachefs (loop4): btree node read error at btree freespace level 0/0
[  444.739788][T16793]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0
[  444.739802][T16793]   loop4 node offset 0/32 bset u64s 0: invalid bkey format: field 4 too large: 0 + 4294967296 > 4294967295
[  444.739814][T16793]   u64s 3 fields 64:0, 64:0, 32:0, 0:0, 0:4294967296, 0:0
[  444.739823][T16793]   loop4 btree validate error
[  444.739830][T16793]   flagging btree freespace lost data
[  444.739837][T16793]   ret btree_node_read_err_bad_node
[  444.764897][T16793] bcachefs (loop4): error reading btree root btree=freespace level=0: btree_node_read_error, fixing
[  444.775403][T16793] bcachefs (loop4): check_topology... done
[  444.779598][T16793] bcachefs (loop4): accounting_read... done
[  444.783706][T16793] bcachefs (loop4): alloc_read... done
[  444.786489][T16793] bcachefs (loop4): snapshots_read... done
[  444.789432][T16793] bcachefs (loop4): Fixed errors, running fsck a second time to verify fs is clean
[  444.794342][T16793] bcachefs (loop4): done starting filesystem
[  444.861433][T12280] bcachefs (loop4): shutting down
[  444.884219][T12280] bcachefs (loop4): shutdown complete
[  445.476267][  T793] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000F/input/input25
[  445.554132][  T793] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.000F/input/input26
[  445.562625][  T793] uclogic 0003:256C:006D.000F: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0
[  445.693682][  T793] usb 1-1: USB disconnect, device number 54
[  446.160286][ T5316] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[  446.332157][ T5316] usb 5-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=31.ad
[  446.336007][ T5316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  446.344653][ T5316] usb 5-1: config 0 descriptor??
[  446.350998][ T5316] gspca_main: tv8532-2.14.0 probing 0545:808b
[  446.594439][ T5316] usb 5-1: USB disconnect, device number 22
[  446.818378][T16817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3848'.
[  446.822765][T16817] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3848'.
[  447.042474][T16829] geneve2: entered allmulticast mode
[  447.226431][T16844] bridge2: entered promiscuous mode
[  447.443843][T16851] loop4: detected capacity change from 0 to 32768
[  447.448967][T16851] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  447.511668][  T793] usb 1-1: new high-speed USB device number 55 using dummy_hcd
[  447.677319][  T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  447.682360][  T793] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  447.695289][  T793] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  447.699985][  T793] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  447.703491][  T793] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  447.709575][  T793] usb 1-1: config 0 descriptor??
[  447.856369][T16854] loop4: detected capacity change from 0 to 32768
[  447.869938][T16854] (syz.4.3866,16854,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  447.876820][T16854] (syz.4.3866,16854,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  447.892193][T16854] JBD2: Ignoring recovery information on journal
[  447.961549][T16854] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  448.070379][T12280] ocfs2: Unmounting device (7,4) on (node local)
[  448.170853][  T793] plantronics 0003:047F:FFFF.0010: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  448.567100][T16876] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3875'.
[  448.692189][ T5994] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  448.857468][ T5994] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 129, changing to 11
[  448.865438][ T5994] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0
[  448.869807][ T5994] usb 5-1: config 0 interface 0 has no altsetting 0
[  448.873384][ T5994] usb 5-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  448.887184][ T5994] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  448.898908][ T5994] usb 5-1: config 0 descriptor??
[  449.357121][ T5994] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0
[  449.359937][ T5994] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0
[  449.362612][ T5994] kovaplus 0003:1E7D:2D50.0011: unknown main item tag 0x0
[  449.371382][ T5994] kovaplus 0003:1E7D:2D50.0011: hidraw1: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.4-1/input0
[  449.574739][  T793] usb 5-1: USB disconnect, device number 23
[  450.250928][T16900] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3887'.
[  450.432175][ T5994] usb 1-1: USB disconnect, device number 55
[  455.030683][ T5906] usb 1-1: new high-speed USB device number 56 using dummy_hcd
[  455.203443][ T5906] usb 1-1: Using ep0 maxpacket: 8
[  455.212595][ T5906] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  455.218252][ T5906] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  455.221710][ T5906] usb 1-1: Product: syz
[  455.223229][ T5906] usb 1-1: Manufacturer: syz
[  455.224647][ T5906] usb 1-1: SerialNumber: syz
[  455.230134][ T5906] usb 1-1: config 0 descriptor??
[  455.235897][ T5316] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[  455.399312][ T5316] usb 5-1: Using ep0 maxpacket: 32
[  455.405104][ T5316] usb 5-1: config 0 interface 0 altsetting 7 endpoint 0x81 has invalid wMaxPacketSize 0
[  455.409607][ T5316] usb 5-1: config 0 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 10
[  455.415063][ T5316] usb 5-1: config 0 interface 0 has no altsetting 0
[  455.418031][ T5316] usb 5-1: New USB device found, idVendor=20bc, idProduct=5500, bcdDevice= 0.00
[  455.422172][ T5316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.426549][ T5316] usb 5-1: config 0 descriptor??
[  455.456588][ T5906] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  455.717036][T17002] veth6: entered promiscuous mode
[  455.718746][T17002] veth6: entered allmulticast mode
[  455.876361][ T5316] betop 0003:20BC:5500.0012: hidraw0: USB HID v8.00 Device [HID 20bc:5500] on usb-dummy_hcd.4-1/input0
[  455.880561][ T5316] betop 0003:20BC:5500.0012: no inputs found
[  456.086313][ T5316] usb 5-1: USB disconnect, device number 24
[  456.548953][ T5906] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  456.554750][ T5906] usb 1-1: USB disconnect, device number 56
[  456.762995][T17014] loop4: detected capacity change from 0 to 8
[  457.738728][ T5316] usb 1-1: new full-speed USB device number 57 using dummy_hcd
[  457.903191][ T5316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  457.907509][ T5316] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  457.912905][ T5316] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  457.920154][ T5316] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  457.924556][ T5316] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  457.927782][ T5316] usb 1-1: Product: syz
[  457.929492][ T5316] usb 1-1: Manufacturer: syz
[  457.931390][ T5316] usb 1-1: SerialNumber: syz
[  457.936899][ T5316] usb 1-1: config 0 descriptor??
[  457.939960][T17040] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  457.943063][T17040] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  457.951712][ T5316] usb 1-1: ucan: probing device on interface #0
[  458.011942][T17056] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3956'.
[  458.431497][ T5316] usb 1-1: ucan: device reported invalid device info
[  458.434495][ T5316] usb 1-1: ucan: probe failed; try to update the device firmware
[  458.520950][T17066] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3961'.
[  458.645214][T17072] netlink: 'syz.2.3964': attribute type 8 has an invalid length.
[  458.654614][ T5906] usb 1-1: USB disconnect, device number 57
[  458.809613][T17076] loop4: detected capacity change from 0 to 8192
[  460.163296][T17124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3985'.
[  460.168564][T17124] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3985'.
[  462.065127][T17152] tmpfs: Bad value for 'mpol'
[  462.576499][T17158] loop4: detected capacity change from 0 to 2048
[  462.605333][T17158] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  463.635266][T17185] loop4: detected capacity change from 0 to 764
[  463.646559][ T5859] Bluetooth: hci0: command 0x0c20 tx timeout
[  465.133138][T17214] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4025'.
[  466.472633][T17236] netlink: 'syz.2.4034': attribute type 1 has an invalid length.
[  466.893220][T17240] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  467.459994][T17252] netlink: 848 bytes leftover after parsing attributes in process `syz.2.4042'.
[  467.477785][T17255] loop4: detected capacity change from 0 to 256
[  467.495293][T17255] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[  467.872385][T17285] cgroup: noprefix used incorrectly
[  468.530436][   T33] audit: type=1326 audit(1757159624.993:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17322 comm="syz.4.4075" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb0b1b8ebe9 code=0x0
[  468.657233][T17325] loop4: detected capacity change from 0 to 4096
[  468.662868][T17325] ntfs3(loop4): Primary boot: invalid bytes per MFT record 0 (0).
[  468.668142][T17325] ntfs3(loop4): try to read out of volume at offset 0x1ffe00
[  468.743998][T17327] team0: Device ip6gretap1 is up. Set it down before adding it as a team port
[  470.221026][ T5994] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[  470.393296][ T5994] usb 1-1: Using ep0 maxpacket: 16
[  470.400370][ T5994] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  470.407328][ T5994] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  470.417742][ T5994] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  470.422052][ T5994] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  470.425907][ T5994] usb 1-1: Product: syz
[  470.427779][ T5994] usb 1-1: Manufacturer: syz
[  470.429838][ T5994] usb 1-1: SerialNumber: syz
[  470.436560][ T5994] usb 1-1: config 0 descriptor??
[  470.442657][ T5994] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  470.446363][ T5994] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  471.106620][ T5994] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  471.301120][T17378] loop4: detected capacity change from 0 to 8
[  471.324740][ T5994] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  471.332681][ T5994] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  471.336784][T17378] SQUASHFS error: Failed to read block 0x2d7: -5
[  471.339859][T17378] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  471.345914][ T5994] em28xx 1-1:0.0: No AC97 audio processor
[  471.361944][ T5994] usb 1-1: USB disconnect, device number 58
[  471.375865][ T5994] em28xx 1-1:0.0: Disconnecting em28xx
[  471.399271][ T5994] em28xx 1-1:0.0: Freeing device
[  471.669780][T17384] loop4: detected capacity change from 0 to 32768
[  471.676499][T17384] 
[  471.676499][T17384]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  471.676499][T17384] 
[  471.703294][T13675] read_mapping_page failed!
[  471.706382][T13675] ERROR: (device loop4): txCommit: 
[  471.706382][T13675] 
[  471.713328][T13675] ERROR: (device loop4): remounting filesystem as read-only
[  471.717539][T13675] jfs_write_inode: jfs_commit_inode failed!
[  471.719553][T12280] 
[  471.719553][T12280]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  471.719553][T12280] 
[  471.726504][T12280] 
[  471.726504][T12280]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  471.726504][T12280] 
[  471.808552][T17390] loop4: detected capacity change from 0 to 512
[  471.830309][T17390] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  471.834676][T17390] ext4 filesystem being mounted at /596/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  471.865558][T12280] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.102175][T17407] netlink: 'syz.2.4113': attribute type 4 has an invalid length.
[  472.107131][T17407] netlink: 17 bytes leftover after parsing attributes in process `syz.2.4113'.
[  472.466633][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  472.925066][T17429] cgroup: Unknown subsys name 'uid>00000000000000000000'
[  473.181229][T17443] pim6reg: entered allmulticast mode
[  473.513382][   T51] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[  473.675736][   T51] usb 1-1: Using ep0 maxpacket: 8
[  473.680866][   T51] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  473.684372][   T51] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  473.688579][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.693730][   T51] usb 1-1: config 0 descriptor??
[  473.704840][   T51] gspca_main: vc032x-2.14.0 probing 046d:0892
[  473.723960][T17477] loop4: detected capacity change from 0 to 256
[  473.767881][T17477] exFAT-fs (loop4): start_clu is invalid cluster(0x400)
[  473.982796][T17489] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  473.992445][T17489] overlayfs: failed to clone lowerpath
[  474.142261][T17483] loop4: detected capacity change from 0 to 32768
[  474.147744][   T51] gspca_vc032x: reg_w err -71
[  474.149813][   T51] vc032x 1-1:0.0: probe with driver vc032x failed with error -71
[  474.154403][   T51] usb 1-1: USB disconnect, device number 59
[  474.175855][T17483] read_mapping_page failed!
[  474.307859][T17503] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4160'.
[  475.704441][T17549] loop4: detected capacity change from 0 to 32768
[  475.708400][T17549] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.4182 (17549)
[  475.725844][T17549] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  475.730204][T17549] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  475.808710][T17549] BTRFS info (device loop4): enabling ssd optimizations
[  475.813513][T17549] BTRFS info (device loop4): enabling free space tree
[  475.848225][T12280] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  476.942032][T17604] overlayfs: failed to resolve './file0': -2
[  477.401627][T17610] loop4: detected capacity change from 0 to 2048
[  477.484023][T17610] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  477.832469][   T54] Bluetooth: hci2: unexpected event 0x14 length: 20 > 6
[  477.963310][T12280] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  477.969310][T17640] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4212'.
[  478.008290][    C0] hpet: Lost 1 RTC interrupts
[  478.207929][ T5916] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.368163][ T5916] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.531116][ T5916] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.643853][ T5916] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  478.941912][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  478.955932][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  478.976722][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  478.995925][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  478.999313][ T5994] wg1 speed is unknown, defaulting to 1000
[  479.004199][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  479.004514][ T5994] syz0: Port: 1 Link DOWN
[  479.187093][ T5916] bridge_slave_1: left allmulticast mode
[  479.190011][ T5916] bridge_slave_1: left promiscuous mode
[  479.193609][ T5916] bridge0: port 2(bridge_slave_1) entered disabled state
[  479.221117][ T5916] bridge_slave_0: left allmulticast mode
[  479.223871][ T5916] bridge_slave_0: left promiscuous mode
[  479.226636][ T5916] bridge0: port 1(bridge_slave_0) entered disabled state
[  479.251980][ T5916] batman_adv: batadv0: Interface deactivated: gretap1
[  479.728772][    C0] hpet: Lost 1 RTC interrupts
[  479.785588][ T5916] batman_adv: batadv0: Removing interface: gretap1
[  479.824266][    C0] hpet: Lost 1 RTC interrupts
[  480.135423][    C0] hpet: Lost 1 RTC interrupts
[  480.164990][    C0] hpet: Lost 1 RTC interrupts
[  480.199315][    C0] hpet: Lost 1 RTC interrupts
[  480.357802][    C0] hpet: Lost 1 RTC interrupts
[  480.418041][    C0] hpet: Lost 1 RTC interrupts
[  480.528113][    C0] hpet: Lost 1 RTC interrupts
[  480.558966][ T5916] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  480.564440][ T5916] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  480.569964][ T5916] bond0 (unregistering): Released all slaves
[  480.580106][ T5916] bond1 (unregistering): Released all slaves
[  480.591706][ T5916] bond2 (unregistering): Released all slaves
[  480.604948][T17660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4224'.
[  480.682908][T17649] wg1 speed is unknown, defaulting to 1000
[  481.124863][T17649] chnl_net:caif_netlink_parms(): no params data found
[  481.168263][    C0] hpet: Lost 1 RTC interrupts
[  481.192527][ T5916] hsr_slave_0: left promiscuous mode
[  481.202695][ T5916] hsr_slave_1: left promiscuous mode
[  481.206266][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  481.209849][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_0
[  481.216443][ T5916] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  481.220756][ T5916] batman_adv: batadv0: Removing interface: batadv_slave_1
[  481.245041][ T5916] veth1_macvtap: left promiscuous mode
[  481.248116][ T5916] veth0_macvtap: left promiscuous mode
[  481.250937][ T5916] veth1_vlan: left promiscuous mode
[  481.253219][ T5916] veth0_vlan: left promiscuous mode
[  481.303530][   T54] Bluetooth: hci0: command tx timeout
[  481.667710][T17699] overlayfs: failed to clone upperpath
[  482.131591][ T5916] team0 (unregistering): Port device team_slave_1 removed
[  482.201632][ T5916] team0 (unregistering): Port device team_slave_0 removed
[  483.068071][T17649] bridge0: port 1(bridge_slave_0) entered blocking state
[  483.075770][T17649] bridge0: port 1(bridge_slave_0) entered disabled state
[  483.082073][T17649] bridge_slave_0: entered allmulticast mode
[  483.089874][T17649] bridge_slave_0: entered promiscuous mode
[  483.113961][T17649] bridge0: port 2(bridge_slave_1) entered blocking state
[  483.120357][T17649] bridge0: port 2(bridge_slave_1) entered disabled state
[  483.122766][T17649] bridge_slave_1: entered allmulticast mode
[  483.142717][T17649] bridge_slave_1: entered promiscuous mode
[  483.248668][T17649] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  483.264591][T17649] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  483.334423][T17649] team0: Port device team_slave_0 added
[  483.347634][T17649] team0: Port device team_slave_1 added
[  483.401929][T17649] batman_adv: batadv0: Adding interface: batadv_slave_0
[  483.404416][T17649] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  483.422583][T17649] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  483.431568][T17649] batman_adv: batadv0: Adding interface: batadv_slave_1
[  483.434572][T17649] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  483.453637][T17649] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  483.486083][ T5916] IPVS: stop unused estimator thread 0...
[  483.508312][ T5916] ------------[ cut here ]------------
[  483.510358][ T5916] WARNING: CPU: 0 PID: 5916 at net/xfrm/xfrm_state.c:3303 xfrm_state_fini+0x26d/0x2f0
[  483.514772][ T5916] Modules linked in:
[  483.516998][ T5916] CPU: 0 UID: 0 PID: 5916 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  483.521581][ T5916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  483.527212][ T5916] Workqueue: netns cleanup_net
[  483.528937][ T5916] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  483.530732][ T5916] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 fb e7 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c9 9e e1 f7 e8 74 71 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 66 71 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  483.537222][ T5916] RSP: 0018:ffffc900036e7898 EFLAGS: 00010293
[  483.540035][ T5916] RAX: ffffffff8a223a1c RBX: ffff888121714880 RCX: ffff88801f739cc0
[  483.542833][ T5916] RDX: 0000000000000000 RSI: ffffffff8dba6ce5 RDI: ffff88801f739cc0
[  483.545717][ T5916] RBP: ffffc900036e79b0 R08: ffffffff8fa38b37 R09: 1ffffffff1f47166
[  483.548392][ T5916] R10: dffffc0000000000 R11: fffffbfff1f47167 R12: ffffffff8f6316c0
[  483.550882][ T5916] R13: 1ffff920006dcf40 R14: ffff888121715d00 R15: dffffc0000000000
[  483.553800][ T5916] FS:  0000000000000000(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[  483.558044][ T5916] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  483.560311][ T5916] CR2: 0000001b32d21ff8 CR3: 000000003943c000 CR4: 00000000000006f0
[  483.562652][ T5916] Call Trace:
[  483.563720][ T5916]  <TASK>
[  483.564736][ T5916]  xfrm_net_exit+0x2d/0x70
[  483.566475][ T5916]  ops_undo_list+0x49a/0x990
[  483.568817][ T5916]  ? __pfx_ops_undo_list+0x10/0x10
[  483.571450][ T5916]  ? do_raw_spin_unlock+0x4d/0x240
[  483.573402][ T5916]  cleanup_net+0x4c5/0x800
[  483.574864][ T5916]  ? __pfx_cleanup_net+0x10/0x10
[  483.576696][ T5916]  ? _raw_spin_unlock_irq+0x23/0x50
[  483.578731][ T5916]  ? process_scheduled_works+0x9ef/0x17b0
[  483.580753][ T5916]  ? process_scheduled_works+0x9ef/0x17b0
[  483.582792][ T5916]  process_scheduled_works+0xae1/0x17b0
[  483.584685][ T5916]  ? __pfx_process_scheduled_works+0x10/0x10
[  483.587838][ T5916]  worker_thread+0x8a0/0xda0
[  483.589517][ T5916]  ? __kthread_parkme+0x7b/0x200
[  483.591354][ T5916]  kthread+0x711/0x8a0
[  483.592886][ T5916]  ? __pfx_worker_thread+0x10/0x10
[  483.594732][ T5916]  ? __pfx_kthread+0x10/0x10
[  483.596384][ T5916]  ? _raw_spin_unlock_irq+0x23/0x50
[  483.598515][ T5916]  ? lockdep_hardirqs_on+0x9c/0x150
[  483.600932][ T5916]  ? __pfx_kthread+0x10/0x10
[  483.601286][   T54] Bluetooth: hci0: command tx timeout
[  483.603118][ T5916]  ret_from_fork+0x3fc/0x770
[  483.606585][ T5916]  ? __pfx_ret_from_fork+0x10/0x10
[  483.608657][ T5916]  ? __switch_to_asm+0x39/0x70
[  483.610670][ T5916]  ? __switch_to_asm+0x33/0x70
[  483.612474][ T5916]  ? __pfx_kthread+0x10/0x10
[  483.614278][ T5916]  ret_from_fork_asm+0x1a/0x30
[  483.616191][ T5916]  </TASK>
[  483.618077][ T5916] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  483.621174][ T5916] CPU: 0 UID: 0 PID: 5916 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) 
[  483.624749][ T5916] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  483.629021][ T5916] Workqueue: netns cleanup_net
[  483.630878][ T5916] Call Trace:
[  483.632426][ T5916]  <TASK>
[  483.633687][ T5916]  dump_stack_lvl+0x99/0x250
[  483.635444][ T5916]  ? __asan_memcpy+0x40/0x70
[  483.637179][ T5916]  ? __pfx_dump_stack_lvl+0x10/0x10
[  483.639211][ T5916]  ? __pfx__printk+0x10/0x10
[  483.640946][ T5916]  vpanic+0x281/0x750
[  483.642861][ T5916]  ? __pfx__printk+0x10/0x10
[  483.644621][ T5916]  ? __pfx_vpanic+0x10/0x10
[  483.646319][ T5916]  ? is_bpf_text_address+0x292/0x2b0
[  483.648330][ T5916]  panic+0xb9/0xc0
[  483.649755][ T5916]  ? __pfx_panic+0x10/0x10
[  483.651521][ T5916]  __warn+0x31b/0x4b0
[  483.653116][ T5916]  ? xfrm_state_fini+0x26d/0x2f0
[  483.655090][ T5916]  ? xfrm_state_fini+0x26d/0x2f0
[  483.656952][ T5916]  report_bug+0x2be/0x4f0
[  483.658702][ T5916]  ? xfrm_state_fini+0x26d/0x2f0
[  483.660789][ T5916]  ? xfrm_state_fini+0x26d/0x2f0
[  483.662732][ T5916]  ? xfrm_state_fini+0x26f/0x2f0
[  483.664641][ T5916]  handle_bug+0x84/0x160
[  483.666200][ T5916]  exc_invalid_op+0x1a/0x50
[  483.667952][ T5916]  asm_exc_invalid_op+0x1a/0x20
[  483.669908][ T5916] RIP: 0010:xfrm_state_fini+0x26d/0x2f0
[  483.672120][ T5916] Code: c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 fb e7 00 f8 48 8b 3b 5b 41 5c 41 5d 41 5e 41 5f 5d e9 c9 9e e1 f7 e8 74 71 9d f7 90 <0f> 0b 90 e9 fd fd ff ff e8 66 71 9d f7 90 0f 0b 90 e9 60 fe ff ff
[  483.679665][ T5916] RSP: 0018:ffffc900036e7898 EFLAGS: 00010293
[  483.682097][ T5916] RAX: ffffffff8a223a1c RBX: ffff888121714880 RCX: ffff88801f739cc0
[  483.685154][ T5916] RDX: 0000000000000000 RSI: ffffffff8dba6ce5 RDI: ffff88801f739cc0
[  483.688199][ T5916] RBP: ffffc900036e79b0 R08: ffffffff8fa38b37 R09: 1ffffffff1f47166
[  483.691073][ T5916] R10: dffffc0000000000 R11: fffffbfff1f47167 R12: ffffffff8f6316c0
[  483.694155][ T5916] R13: 1ffff920006dcf40 R14: ffff888121715d00 R15: dffffc0000000000
[  483.697096][ T5916]  ? xfrm_state_fini+0x26c/0x2f0
[  483.699035][ T5916]  ? xfrm_state_fini+0x26c/0x2f0
[  483.700949][ T5916]  xfrm_net_exit+0x2d/0x70
[  483.702809][ T5916]  ops_undo_list+0x49a/0x990
[  483.705553][ T5916]  ? __pfx_ops_undo_list+0x10/0x10
[  483.707733][ T5916]  ? do_raw_spin_unlock+0x4d/0x240
[  483.709715][ T5916]  cleanup_net+0x4c5/0x800
[  483.711439][ T5916]  ? __pfx_cleanup_net+0x10/0x10
[  483.713399][ T5916]  ? _raw_spin_unlock_irq+0x23/0x50
[  483.715319][ T5916]  ? process_scheduled_works+0x9ef/0x17b0
[  483.717524][ T5916]  ? process_scheduled_works+0x9ef/0x17b0
[  483.719756][ T5916]  process_scheduled_works+0xae1/0x17b0
[  483.721996][ T5916]  ? __pfx_process_scheduled_works+0x10/0x10
[  483.724389][ T5916]  worker_thread+0x8a0/0xda0
[  483.726134][ T5916]  ? __kthread_parkme+0x7b/0x200
[  483.728063][ T5916]  kthread+0x711/0x8a0
[  483.729657][ T5916]  ? __pfx_worker_thread+0x10/0x10
[  483.731609][ T5916]  ? __pfx_kthread+0x10/0x10
[  483.733414][ T5916]  ? _raw_spin_unlock_irq+0x23/0x50
[  483.735321][ T5916]  ? lockdep_hardirqs_on+0x9c/0x150
[  483.737399][ T5916]  ? __pfx_kthread+0x10/0x10
[  483.739224][ T5916]  ret_from_fork+0x3fc/0x770
[  483.741293][ T5916]  ? __pfx_ret_from_fork+0x10/0x10
[  483.743233][ T5916]  ? __switch_to_asm+0x39/0x70
[  483.745134][ T5916]  ? __switch_to_asm+0x33/0x70
[  483.747088][ T5916]  ? __pfx_kthread+0x10/0x10
[  483.748956][ T5916]  ret_from_fork_asm+0x1a/0x30
[  483.750805][ T5916]  </TASK>
[  483.752723][ T5916] Kernel Offset: disabled
[  483.754354][ T5916] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:12:03  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000005d RBX=000000000000005d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900036e7030
R8 =ffff888021100237 R9 =1ffff11004220046 R10=dffffc0000000000 R11=ffffffff854f3980
R12=dffffc0000000000 R13=ffffffff99afa8d6 R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f39fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32d21ff8 CR3=000000003943c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0000000000000000 0000000000000000
XMM02=000055557cee4774 000055557cee4610 XMM03=000055557cedfdc4 000055557cedfdc0
XMM04=0000000000000000 000055557cedb4a8 XMM05=0130100002800452 0800000800010000
XMM06=0008060a016dc002 000000000007007f XMM07=020000e01a080280 0301800404a4a808
XMM08=0001000002080606 013cfc00040001a0 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000002 RBX=ffffc90008af7b60 RCX=0000000000000001 RDX=ffffffff847ef9b9
RSI=ffffffff8e846400 RDI=0000000000000039 RBP=ffff88811b963f8a RSP=ffffc90008af7950
R8 =ffff8881079b8000 R9 =0000000000000002 R10=000000000000005c R11=0000000000000000
R12=ffff88811b963f89 R13=0000000000000039 R14=dffffc0000000000 R15=0000000000000009
RIP=ffffffff81bfb184 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558fb7f500 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055558fb9a5c8 CR3=0000000129872000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f38a2812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
