last executing test programs:

2m57.433378927s ago: executing program 0 (id=827):
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
syz_io_uring_setup(0x28e2, &(0x7f0000000140)={0x0, 0xe4d0, 0x2, 0x1, 0x35c}, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_rdma(0x10, 0x3, 0x14)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002300)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xc463f262, 0x10, &(0x7f0000000040)}, 0x48)
pipe(&(0x7f0000000340))
pipe(&(0x7f00000000c0))
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', <r1=>0x0})
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000))
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3}, &(0x7f0000000240), &(0x7f00000003c0)=r5}, 0x20)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r4, r1, 0x25, 0x2, @void}, 0x10)
syz_emit_ethernet(0x2a, &(0x7f00000005c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1}, @echo_reply={0x0, 0x0, 0x0, 0x65, 0x4}}}}}, 0x0)

2m57.365969881s ago: executing program 0 (id=828):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x4, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000000000000000000000000008500000029000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50)

2m57.2929836s ago: executing program 0 (id=829):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
get_mempolicy(&(0x7f00000001c0), 0x0, 0xffff, &(0x7f00009c8000/0x4000)=nil, 0x2)

2m57.292862195s ago: executing program 0 (id=830):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x22000b0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
pivot_root(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00')

2m57.233505387s ago: executing program 0 (id=831):
r0 = socket$nl_route(0x10, 0x3, 0x0)
fcntl$lock(r0, 0x25, &(0x7f0000002880)={0x2, 0x2, 0x4, 0x391d, 0xffffffffffffffff})

2m57.03057848s ago: executing program 0 (id=835):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, &(0x7f0000000300))

2m56.730388815s ago: executing program 32 (id=835):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r0 = socket$can_raw(0x1d, 0x3, 0x1)
getsockopt$CAN_RAW_FD_FRAMES(r0, 0x65, 0x8, 0x0, &(0x7f0000000300))

2m22.572378841s ago: executing program 2 (id=1192):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', 0x0})

2m22.501080376s ago: executing program 2 (id=1194):
r0 = syz_open_dev$video(&(0x7f00000000c0), 0x1, 0x8000)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f00000006c0)={0x2, @vbi={0x2, 0xfffffff8, 0xffffffff, 0x30314742, [0x3f4c00, 0x600000], [0x1, 0x6], 0x13a}})

2m22.448225117s ago: executing program 2 (id=1196):
r0 = syz_open_dev$ndb(&(0x7f0000000300), 0x0, 0x149440)
r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r3 = dup3(r2, r1, 0x80000)
ioctl$NBD_SET_SOCK(r0, 0xab00, r3)
ioctl$NBD_DISCONNECT(r0, 0xab08)

2m22.371791856s ago: executing program 2 (id=1199):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000011c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], 0x1, 0x151b, &(0x7f0000002280)="$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")
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

2m22.252525276s ago: executing program 2 (id=1201):
r0 = inotify_init()
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0x400017e)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x68cd42, 0x4)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
openat$cgroup_ro(r1, &(0x7f0000000900)='net_prio.prioidx\x00', 0x275a, 0xb)
read$FUSE(r0, &(0x7f0000001fc0)={0x2020}, 0x2020)

2m21.912647661s ago: executing program 2 (id=1205):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
pidfd_send_signal(r0, 0x0, 0x0, 0x2)

2m21.814265047s ago: executing program 33 (id=1205):
r0 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
pidfd_send_signal(r0, 0x0, 0x0, 0x2)

1m39.952529897s ago: executing program 4 (id=1597):
rt_sigprocmask(0x3, &(0x7f0000000080)={[0xffffffffffffff13]}, 0x0, 0x8)

1m39.952088529s ago: executing program 4 (id=1599):
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
timer_create(0x8, 0x0, &(0x7f0000000000))

1m39.871205571s ago: executing program 4 (id=1600):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000000)={0x1000d, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27"})
ioctl$SW_SYNC_IOC_INC(r0, 0x40045701, &(0x7f0000000380)=0xffffffff)

1m39.820966137s ago: executing program 4 (id=1601):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000440)={[{@resuid}, {@data_err_abort}, {@barrier_val={'barrier', 0x3d, 0x1}}, {@dioread_lock}, {@grpjquota}, {@quota}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@minixdf}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
pivot_root(&(0x7f0000000240)='./file0\x00', &(0x7f0000000000)='./file0/../file0\x00')

1m39.680580215s ago: executing program 4 (id=1602):
r0 = io_uring_setup(0x194e, &(0x7f0000000a80)={0x0, 0xd3d5, 0x80, 0x6, 0x8})
r1 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f0000000240)={0x0, 0x0, r2, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r1, 0xc01864b0, &(0x7f0000000000)={r2, r3, 0x1, 0x0, 0x3})
close_range(r0, 0xffffffffffffffff, 0x0)

1m39.241318672s ago: executing program 4 (id=1606):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1c916, &(0x7f0000000040)={[{@nobarrier}, {@noblock_validity}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@jqfmt_vfsv0}, {@oldalloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@sb={'sb', 0x3d, 0x100000001}}, {@jqfmt_vfsold}, {@resgid, 0x32}]}, 0x9b, 0x4d8, &(0x7f0000000a40)="$eJzs3d1rW+cZAPDnHFtZPpzZYbvIAsvCkmGHLZIdL4kZLNtgbFeBbdnF7jLPlo2xbBlLTmITNof9AYMRtsGuetWbQv+AQsldb0tLoL0vbWkpbdJe9KKNir5Sx5H8QWQrWL8fHOs9H/LzvBJ6dd73vOgE0LPORMTFiHhcqVTOR8RgY3vaWO4fi4j1+nGPHt6Zqi5JVCrXP00iaWyrHj+y4X82nlLzp99H/C15Nm5pdW1+slDILzfWc+WFpVxpde3C3MLkbH42vzg+PnZ54srEpYnRjtRzICKu/vbD//zr5d9dff1nt9678fHI36tp/bKxv1mPTqtXPROHN2zrj4jlvQjWBX2N+mS6nQgAADvSPM//cUScj8Hoq53NAQAAAAdJ5VcD8VUSUQEAAAAOrLQ2NzZJs415AAORptlsfQ7v9+NoWiiWyj+dKa4sTtfn0A5FJp2ZK+RHG3OFhyKTVNfHauVv1y9uWh+PiBMRcW/wSG09O1UsTHd78AMAAAB6xLFN/f8vBuv9fwAAAOCAGep2AgAAAMCe0/8HAACAg69F//8v3cgDAAAA2BN/uHatulSa97+evrm6Ml+8eWE6X5rPLqxMZaeKy0vZ2WJxtvabfQvb/b9Csbj081hcuZ0r50vlXGl17cZCcWWxfGPuqVtgAwAAAPvoxI/uv5tExPovjtSWqkPdTgrYF/27OfiDvcsD2H993U4A6Jpdff8DB0qm2wkAXZdss7/t5J03O58LAACwN4Z/0Pr6f7Lt2MB6uk8pAnvE+B/0Ltf/oXe5/g+9KxN9oSMPvW3vr/9XKrtKCAAA6LiB2pKk2YjaOMBApGk2G3G8dluATDIzV8iPRsR3I+Kdwcx3qutjtWcm2/YZAAAAAAAAAAAAAAAAAAAAAAAAAIC6SiWJCgAAAHCgRaQfJY37fw0PnhvYPD5wKPlysPYYEbf+f/2/tyfL5eWx6vbPnmwv/6+x/WI3RjAAAACAzZr99GY/HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66dHDO1PNZT/jfvKbiBhqFb8/DtceD0cmIo5+nkT/huclEdHXgfjrdyPiZKv4STWtGGpk0Sr+kS7GTyPiWAfiQy+7X21/ft3q85fGmdpj68/f5VoL9fzat3/pk/avr037c3yHMU49eDXXNv7diFP9rdufZvykTfyzO4z/1z+vrbXbV3kpYrjl90/yVKxceWEpV1pduzC3MDmbn80vjo+PXZ64MnFpYjQ3M1fIN/62iHAo/v3D1x5vVf+jca9t+7tV/c/tsP5fP7j98Hv1YqZV/JGzrd//k23ip43vvp80ytX9w83yer280elX3jod8fYb7eo/3eb13+79H9lh/c//8Z/v7/BQAGAflFbX5icLhfxyTxee69Wonha9ELVQ2G3hHy9GGi9kobvtEgAA0HnP9oGf1olr7AAAAAAAAAAAAAAAAAAAAMDW9vPX9ZrWu1NVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtfRMAAP//lOzXow==")
syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @random="539163500011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x810001}}}}}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x515001, 0x408)
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

1m39.109887682s ago: executing program 34 (id=1606):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x1c916, &(0x7f0000000040)={[{@nobarrier}, {@noblock_validity}, {@grpjquota_path={'grpjquota', 0x3d, './file1'}}, {@jqfmt_vfsv0}, {@oldalloc}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x2}}, {@sb={'sb', 0x3d, 0x100000001}}, {@jqfmt_vfsold}, {@resgid, 0x32}]}, 0x9b, 0x4d8, &(0x7f0000000a40)="$eJzs3d1rW+cZAPDnHFtZPpzZYbvIAsvCkmGHLZIdL4kZLNtgbFeBbdnF7jLPlo2xbBlLTmITNof9AYMRtsGuetWbQv+AQsldb0tLoL0vbWkpbdJe9KKNir5Sx5H8QWQrWL8fHOs9H/LzvBJ6dd73vOgE0LPORMTFiHhcqVTOR8RgY3vaWO4fi4j1+nGPHt6Zqi5JVCrXP00iaWyrHj+y4X82nlLzp99H/C15Nm5pdW1+slDILzfWc+WFpVxpde3C3MLkbH42vzg+PnZ54srEpYnRjtRzICKu/vbD//zr5d9dff1nt9678fHI36tp/bKxv1mPTqtXPROHN2zrj4jlvQjWBX2N+mS6nQgAADvSPM//cUScj8Hoq53NAQAAAAdJ5VcD8VUSUQEAAAAOrLQ2NzZJs415AAORptlsfQ7v9+NoWiiWyj+dKa4sTtfn0A5FJp2ZK+RHG3OFhyKTVNfHauVv1y9uWh+PiBMRcW/wSG09O1UsTHd78AMAAAB6xLFN/f8vBuv9fwAAAOCAGep2AgAAAMCe0/8HAACAg69F//8v3cgDAAAA2BN/uHatulSa97+evrm6Ml+8eWE6X5rPLqxMZaeKy0vZ2WJxtvabfQvb/b9Csbj081hcuZ0r50vlXGl17cZCcWWxfGPuqVtgAwAAAPvoxI/uv5tExPovjtSWqkPdTgrYF/27OfiDvcsD2H993U4A6Jpdff8DB0qm2wkAXZdss7/t5J03O58LAACwN4Z/0Pr6f7Lt2MB6uk8pAnvE+B/0Ltf/oXe5/g+9KxN9oSMPvW3vr/9XKrtKCAAA6LiB2pKk2YjaOMBApGk2G3G8dluATDIzV8iPRsR3I+Kdwcx3qutjtWcm2/YZAAAAAAAAAAAAAAAAAAAAAAAAAIC6SiWJCgAAAHCgRaQfJY37fw0PnhvYPD5wKPlysPYYEbf+f/2/tyfL5eWx6vbPnmwv/6+x/WI3RjAAAACAzZr99GY/HgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA66dHDO1PNZT/jfvKbiBhqFb8/DtceD0cmIo5+nkT/huclEdHXgfjrdyPiZKv4STWtGGpk0Sr+kS7GTyPiWAfiQy+7X21/ft3q85fGmdpj68/f5VoL9fzat3/pk/avr037c3yHMU49eDXXNv7diFP9rdufZvykTfyzO4z/1z+vrbXbV3kpYrjl90/yVKxceWEpV1pduzC3MDmbn80vjo+PXZ64MnFpYjQ3M1fIN/62iHAo/v3D1x5vVf+jca9t+7tV/c/tsP5fP7j98Hv1YqZV/JGzrd//k23ip43vvp80ytX9w83yer280elX3jod8fYb7eo/3eb13+79H9lh/c//8Z/v7/BQAGAflFbX5icLhfxyTxee69Wonha9ELVQ2G3hHy9GGi9kobvtEgAA0HnP9oGf1olr7AAAAAAAAAAAAAAAAAAAAMDW9vPX9ZrWu1NVAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIAtfRMAAP//lOzXow==")
syz_emit_ethernet(0x36, &(0x7f0000000180)={@multicast, @random="539163500011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @empty}, @timestamp_reply={0x11, 0xe0, 0x0, 0x0, 0x0, 0x810001}}}}}, 0x0)
openat(0xffffffffffffff9c, 0x0, 0x515001, 0x408)
link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00')

16.764313101s ago: executing program 5 (id=2503):
bpf$MAP_CREATE(0x0, 0x0, 0x48)
r0 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f0000000040)=[<r1=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f00000008c0)={0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "d20bddda7d1db9342de76eec7967fe97751f13a23aeaacb0565c1c2251560ed1"}})
ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000740)={0x0, 0x0, r1})

16.629553902s ago: executing program 5 (id=2504):
r0 = socket(0x2a, 0x2, 0x0)
sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0)
getsockname$packet(r0, &(0x7f00000001c0)={0x11, 0x0, <r1=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x40000)
sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newtfilter={0x34, 0x2c, 0x1, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x5}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0xc814)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0)

16.33946798s ago: executing program 5 (id=2507):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
r1 = dup(r0)
r2 = getpgid(0x0)
kcmp(r2, r2, 0x0, r1, r1)

16.155138618s ago: executing program 5 (id=2509):
mkdir(&(0x7f0000000080)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x195011, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
umount2(&(0x7f0000000040)='./file0/file0\x00', 0x8)

16.076566929s ago: executing program 5 (id=2513):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x20, 0x0, 0x8, 0xff7ff00c}, {0x6, 0x0, 0x5, 0x6}]}, 0x10)
syz_emit_ethernet(0x4e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x18, 0x3a, 0x0, @remote, @mcast2, {[], @ndisc_na={0x92, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}}}}, 0x0)

15.833367466s ago: executing program 5 (id=2520):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x13, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x2c}}, 0x0)

15.609393741s ago: executing program 35 (id=2520):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000980)={0x2c, 0x3e, 0x107, 0x70bd2d, 0x25dfdbfc, {0x4, 0x7c}, [@typed={0x4}, @nested={0x14, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0x8, 0x13, 0x0, 0x0, @u32=0x7fffffff}]}]}, 0x2c}}, 0x0)

3.587864072s ago: executing program 6 (id=2633):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000002000)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
sendmsg$TIPC_NL_MEDIA_GET(0xffffffffffffffff, 0x0, 0x20000000)

1.309420807s ago: executing program 3 (id=2653):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0)
ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0))
ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000200)=0x2)

1.25884401s ago: executing program 6 (id=2654):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6c00000002060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c00050001000600000024000780080008400000137906000440fffff0000600054000000000080006"], 0x6c}}, 0x0)

1.131052119s ago: executing program 6 (id=2655):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000d00)=0x2b56, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x20000080, &(0x7f0000000080)={0x11, 0xf8, r1, 0x1, 0x1f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}}, 0x14)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f00000000c0)=0x2, 0x4)
setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f00000007c0)=0x57, 0x4)
recvfrom$packet(r0, 0x0, 0x0, 0x2000, 0x0, 0x0)

1.058851522s ago: executing program 3 (id=2656):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x1002, @loopback, 0xffdfffff}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000000d80)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x4, @loopback, 0x1}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x4080)
getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x9, 0x0, 0x1001a, 0xfffffffd, 0x2151a564, 0x80000000, 0x80000000, 0xd3}, &(0x7f00000001c0)=0x20)

1.058690818s ago: executing program 6 (id=2657):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='mnt\x00', 0xe, &(0x7f0000000040)={[{@noauto_da_alloc}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x40)
pwritev2(r0, &(0x7f0000000100)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x5405, 0x800, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f00000001c0)={0x404043000, 0x3ff, 0x5, 0x2})

820.939102ms ago: executing program 6 (id=2658):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0)
sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={0x80, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x42, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac=@broadcast}, 0xfffffffffffffffe, @random=0x7, 0x1, @void, @void, @void, @val={0x4, 0x6, {0xf0, 0x2, 0x7f, 0xa706}}, @void, @val={0x5, 0x3, {0x58, 0xe0, 0x7}}, @val={0x25, 0x3, {0x4, 0x95}}, @void, @void, @void, @val={0x72, 0x6}, @void, @void}}, @NL80211_ATTR_BEACON_TAIL={0x6, 0xf, [@random={0x1}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0xdcb}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x20000045}, 0x0)

628.70565ms ago: executing program 6 (id=2659):
syz_usb_connect(0x2, 0x2d, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x6d, 0x24, 0xae, 0x10, 0x17cc, 0x1000, 0x2d0a, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x4, 0x0, 0x0, [{{0x9, 0x4, 0x23, 0x0, 0x1, 0x38, 0x7e, 0xc6, 0x8, [], [{{0x9, 0x5, 0x4, 0x0, 0x400, 0x5, 0x2, 0xd5}}]}}]}}]}}, 0x0)

522.395196ms ago: executing program 1 (id=2661):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0x3, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast})
write$tun(r0, &(0x7f0000001240)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x14}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xfc0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010101, @broadcast, {[@timestamp_addr={0x44, 0x4, 0x7e, 0x1, 0x5}]}}, {0x4e20, 0x4e22, 0xfa8, 0x0, @wg=@data={0x4, 0x2, 0x8, "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"}}}}, 0xfce)

366.326595ms ago: executing program 1 (id=2662):
syz_mount_image$squashfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4, &(0x7f0000000280)=ANY=[], 0x82, 0x1b4, &(0x7f0000000640)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x80000, 0x0)

365.896644ms ago: executing program 1 (id=2663):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000001000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats})

300.677658ms ago: executing program 1 (id=2664):
r0 = socket$rds(0x15, 0x5, 0x0)
bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @local}, 0x10)
sendmsg$inet(r0, &(0x7f0000000500)={&(0x7f0000000080)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x31}}, 0x10, 0x0}, 0x40)
sendmsg$rds(r0, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000640)=[{&(0x7f00000009c0)=""/4076, 0xfec}], 0x1}, 0x0)

300.527758ms ago: executing program 1 (id=2665):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=r0, @ANYBLOB="557b000000000000280012800b00010067656e6572650000180002"], 0x48}}, 0x0)

230.895618ms ago: executing program 1 (id=2666):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1)
r1 = dup(r0)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f00000012c0)={0x0, @in={{0x2, 0x4c24, @empty}}, 0x6, 0x6}, 0x90)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @local}}, 0x99, 0x4001}, 0x90)

141.118347ms ago: executing program 3 (id=2667):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3800}, [@RTA_DST={0x8, 0x1, @remote}]}, 0x24}}, 0x0)

90.635472ms ago: executing program 3 (id=2668):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000640)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x9}, @union={0x0, 0x1, 0x0, 0x5, 0x0, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, 0x0, 0x52, 0x0, 0x1}, 0x28)

90.268923ms ago: executing program 3 (id=2669):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x34, 0x3e, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\xab#'}]}, @nested={0x10, 0x2, 0x0, 0x1, [@nested={0xc, 0x17, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x15}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x2000c000)

0s ago: executing program 3 (id=2670):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file3\x00', 0xcc0, &(0x7f00000001c0)=ANY=[@ANYBLOB="61636c2c6865617274626561743d6e6f6e652c6865617274626561743d6e6f6e652c636f686572656e63793d66756c6c2c636f686572656e63793d66756c6c2c636f686572656e63793d62756666657265642c6572726f72733d636f6e74696e75652c757365725f78617474722c626172726965723d30303030303030303030303030303032363131352c6469725f726573765f6c6576656c3d30303030303030303030303030303030303030362c696e74722c6a6f75726e616c5f6173796e635f636f6d6d69742c00535d4e036013ec9e6e7ecdee3849b40884b95e94f35cec9600cd19beb0"], 0x1, 0x442a, &(0x7f0000008940)="$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")
setxattr$system_posix_acl(&(0x7f00000000c0)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {}, [], {0x4, 0x4}}, 0x24, 0x0)

kernel console output (not intermixed with test programs):

.140206][ T5850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.140213][ T5850]  ? exc_page_fault+0x9f/0xf0
[  230.140224][ T5850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  230.140230][ T5850] RIP: 0033:0x7fc07458ff17
[  230.140238][ T5850] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  230.140266][ T5850] RSP: 002b:00007ffe92485638 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  230.140276][ T5850] RAX: 0000000000000000 RBX: 00007fc074611c05 RCX: 00007fc07458ff17
[  230.140281][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe924856f0
[  230.140285][ T5850] RBP: 00007ffe924856f0 R08: 0000000000000000 R09: 0000000000000000
[  230.140289][ T5850] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe92486780
[  230.140294][ T5850] R13: 00007fc074611c05 R14: 00000000000381e0 R15: 00007ffe924867c0
[  230.140308][ T5850]  </TASK>
[  230.140312][ T5850] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  230.208343][T10819] loop3: detected capacity change from 0 to 512
[  231.379603][T10828] loop5: detected capacity change from 0 to 32768
[  231.466386][T10828] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  231.545085][T10828] XFS (loop5): Ending clean mount
[  231.625126][T10278] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  231.724771][T10832] loop1: detected capacity change from 0 to 32768
[  231.776035][T10832] ERROR: (device loop1): dtSearch: DT_GETPAGE: dtree page corrupt
[  231.776035][T10832] 
[  231.796610][T10832] ERROR: (device loop1): remounting filesystem as read-only
[  231.806137][T10832] jfs_lookup: dtSearch returned -5
[  231.815825][T10832] ERROR: (device loop1): dtReadFirst: DT_GETPAGE: dtree page corrupt
[  231.815825][T10832] 
[  231.836098][T10832] jfs_readdir: unexpected rc = -5 from dtReadNext
[  232.072615][T10844] loop3: detected capacity change from 0 to 8192
[  232.077822][T10844] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  232.188347][   T47] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[  232.362674][   T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  232.366864][   T47] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  232.372279][   T47] usb 6-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[  232.376732][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  232.397664][   T47] usb 6-1: config 0 descriptor??
[  232.574158][   T33] audit: type=1326 audit(1756823285.286:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.1.1842" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07458ebe9 code=0x7ffc0000
[  232.599464][   T33] audit: type=1326 audit(1756823285.286:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.1.1842" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07458ebe9 code=0x7ffc0000
[  232.607763][   T33] audit: type=1326 audit(1756823285.306:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.1.1842" exe="/syz-executor" sig=0 arch=c000003e syscall=233 compat=0 ip=0x7fc07458ebe9 code=0x7ffc0000
[  232.616938][   T33] audit: type=1326 audit(1756823285.316:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.1.1842" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07458ebe9 code=0x7ffc0000
[  232.624765][   T33] audit: type=1326 audit(1756823285.316:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10858 comm="syz.1.1842" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07458ebe9 code=0x7ffc0000
[  232.713694][   T95] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  232.773087][T10867] loop1: detected capacity change from 0 to 256
[  232.784782][T10867] FAT-fs (loop1): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000001)
[  232.842251][   T47] lenovo 0003:17EF:60EE.0009: hidraw0: USB HID v0.00 Device [HID 17ef:60ee] on usb-dummy_hcd.5-1/input0
[  232.847792][T10869] loop1: detected capacity change from 0 to 1024
[  232.854646][T10869] EXT4-fs: Ignoring removed orlov option
[  232.874330][T10869] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (52289!=20869)
[  232.878418][T10869] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  232.884106][T10869] EXT4-fs (loop1): invalid journal inode
[  232.890415][   T95] usb 4-1: Using ep0 maxpacket: 8
[  232.916865][   T95] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  232.935880][   T95] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.941343][   T95] usb 4-1: Product: syz
[  232.943191][   T95] usb 4-1: Manufacturer: syz
[  232.945116][   T95] usb 4-1: SerialNumber: syz
[  232.966071][   T95] usb 4-1: config 0 descriptor??
[  233.018792][   T47] lenovo 0003:17EF:60EE.0009: Failed to switch middle button: -71
[  233.024663][   T47] lenovo 0003:17EF:60EE.0009: Fn-lock setting failed: -71
[  233.028362][   T47] lenovo 0003:17EF:60EE.0009: Sensitivity setting failed: -71
[  233.038916][   T47] usb 6-1: USB disconnect, device number 4
[  233.168066][ T5897] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[  233.180489][   T95] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  233.318461][ T5897] usb 2-1: Using ep0 maxpacket: 8
[  233.327275][ T5897] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  233.332318][ T5897] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid wMaxPacketSize 0
[  233.336000][ T5897] usb 2-1: config 0 interface 0 has no altsetting 0
[  233.341362][ T5897] usb 2-1: New USB device found, idVendor=0b43, idProduct=0003, bcdDevice= 0.00
[  233.345166][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  233.356944][ T5897] usb 2-1: config 0 descriptor??
[  233.663115][   T33] audit: type=1326 audit(1756823286.376:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10874 comm="syz.5.1850" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bd98ebe9 code=0x7ffc0000
[  233.687744][   T33] audit: type=1326 audit(1756823286.376:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10874 comm="syz.5.1850" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bd98ebe9 code=0x7ffc0000
[  233.706591][   T33] audit: type=1326 audit(1756823286.376:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10874 comm="syz.5.1850" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36bd98ebe9 code=0x7ffc0000
[  233.706754][ T5296] udevd[5296]: worker [5978] terminated by signal 33 (Unknown signal 33)
[  233.716137][   T33] audit: type=1326 audit(1756823286.386:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10874 comm="syz.5.1850" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36bd98ebe9 code=0x7ffc0000
[  233.720264][ T5296] udevd[5296]: worker [5978] failed while handling '/devices/virtual/block/loop5'
[  233.751746][   T33] audit: type=1326 audit(1756823286.386:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10874 comm="syz.5.1850" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f36bd98ebe9 code=0x7ffc0000
[  233.771174][ T5897] smartjoyplus 0003:0B43:0003.000A: ignoring exceeding usage max
[  233.782985][ T5897] smartjoyplus 0003:0B43:0003.000A: item fetching failed at offset 10/11
[  233.786695][ T5897] smartjoyplus 0003:0B43:0003.000A: parse failed
[  233.792543][ T5897] smartjoyplus 0003:0B43:0003.000A: probe with driver smartjoyplus failed with error -22
[  233.978287][ T5897] usb 2-1: USB disconnect, device number 34
[  234.199450][   T95] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  234.209920][   T95] usb 4-1: USB disconnect, device number 13
[  234.541004][T10891] loop5: detected capacity change from 0 to 2048
[  234.557613][T10891] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  234.620065][T10891] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters
[  234.628872][T10891] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[  234.633661][T10891] EXT4-fs (loop5): This should not happen!! Data will be lost
[  234.633661][T10891] 
[  234.637222][T10891] EXT4-fs (loop5): Total free blocks count 0
[  234.639636][T10891] EXT4-fs (loop5): Free/Dirty block details
[  234.643324][T10891] EXT4-fs (loop5): free_blocks=4096
[  234.648234][T10891] EXT4-fs (loop5): dirty_blocks=512
[  234.650076][T10891] EXT4-fs (loop5): Block reservation details
[  234.652334][T10891] EXT4-fs (loop5): i_reserved_data_blocks=32
[  234.682283][ T7031] EXT4-fs (loop5): Delayed block allocation failed for inode 15 at logical offset 18 with max blocks 480 with error 28
[  235.135104][T10918] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1863'.
[  235.145011][T10918] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1863'.
[  235.418151][ T5897] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  235.916529][T10930] loop5: detected capacity change from 0 to 131072
[  235.937054][T10930] F2FS-fs (loop5): Invalid log sectorsize (67108873)
[  235.939606][T10930] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  235.951643][T10930] F2FS-fs (loop5): invalid crc value
[  236.033824][ T5897] usb 4-1: Using ep0 maxpacket: 32
[  236.040312][T10930] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  236.055586][ T5897] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.062670][T10930] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  236.065656][T10930] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  236.079644][ T5897] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 32
[  236.083676][ T5897] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  236.087479][ T5897] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  236.125003][ T5897] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  236.129097][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  236.132538][ T5897] usb 4-1: Product: syz
[  236.134411][ T5897] usb 4-1: Manufacturer: syz
[  236.136427][ T5897] usb 4-1: SerialNumber: syz
[  236.226121][T10938] loop1: detected capacity change from 0 to 4096
[  236.236190][T10938] ntfs3(loop1): Primary boot: invalid bytes per MFT record 12288 (3).
[  236.258872][T10938] ntfs3(loop1): try to read out of volume at offset 0x1ffe00
[  236.392441][T10920] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  236.918279][   T10] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[  237.005859][T10920] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  237.071044][   T10] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  237.075480][   T10] usb 2-1: config 0 has no interface number 0
[  237.091003][   T10] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[  237.099913][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  237.103211][   T10] usb 2-1: Product: syz
[  237.104689][   T10] usb 2-1: Manufacturer: syz
[  237.116880][   T10] usb 2-1: SerialNumber: syz
[  237.130564][   T10] usb 2-1: config 0 descriptor??
[  237.217465][ T5897] cdc_ncm 4-1:1.0: bind() failure
[  237.235699][ T5897] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found
[  237.244579][ T5897] cdc_ncm 4-1:1.1: bind() failure
[  237.334606][   T10] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state
[  237.343673][   T10] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  237.347120][   T10] dvbdev: DVB: registering new adapter (E3C EC168 reference design)
[  237.355184][   T10] usb 2-1: media controller created
[  237.379441][   T10] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  237.429680][ T5897] usb 4-1: USB disconnect, device number 14
[  239.178808][ T5897] usb 2-1: USB disconnect, device number 35
[  239.431369][T10984] loop5: detected capacity change from 0 to 512
[  239.461526][T10984] EXT4-fs: Ignoring removed bh option
[  239.463862][T10984] EXT4-fs: Ignoring removed mblk_io_submit option
[  239.487367][T10984] EXT4-fs (loop5): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  239.496022][T10984] EXT4-fs (loop5): revision level too high, forcing read-only mode
[  239.500451][T10984] EXT4-fs (loop5): orphan cleanup on readonly fs
[  239.503688][T10984] __quota_error: 17 callbacks suppressed
[  239.503699][T10984] Quota error (device loop5): v2_read_file_info: Block with free entry 252928 out of range (1, 6).
[  239.515130][T10984] EXT4-fs warning (device loop5): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  239.525093][T10984] EXT4-fs (loop5): Cannot turn on quotas: error -117
[  239.532204][T10984] EXT4-fs error (device loop5): ext4_read_block_bitmap_nowait:483: comm syz.5.1895: Invalid block bitmap block 0 in block_group 0
[  239.544826][T10984] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  239.552148][T10984] EXT4-fs (loop5): 1 orphan inode deleted
[  239.555766][T10984] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  239.628292][T10278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.045155][T10995] loop5: detected capacity change from 0 to 512
[  240.089182][T10995] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  240.097273][T10995] ext4 filesystem being mounted at /83/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  240.125319][T10278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  240.448153][   T95] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[  240.509127][T11009] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1136)
[  240.513872][T11009] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[  240.609774][   T95] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  240.613869][   T95] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  240.617687][   T95] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  240.625962][   T95] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  240.658774][   T95] usb 2-1: config 0 descriptor??
[  240.775485][T11015] loop3: detected capacity change from 0 to 8
[  240.790951][T11015] unable to read fragment index table
[  241.095506][   T95] cp2112 0003:10C4:EA90.000B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  241.276392][   T95] cp2112 0003:10C4:EA90.000B: Part Number: 0x00 Device Version: 0x00
[  241.683961][   T95] cp2112 0003:10C4:EA90.000B: error setting SMBus config
[  241.698562][   T95] cp2112 0003:10C4:EA90.000B: probe with driver cp2112 failed with error -71
[  241.711001][   T95] usb 2-1: USB disconnect, device number 36
[  242.329984][T11036] loop1: detected capacity change from 0 to 512
[  242.333601][T11036] EXT4-fs: Value of option "test_dummy_encryption" is unrecognized
[  242.443391][T11042] loop1: detected capacity change from 0 to 128
[  242.514916][T11045] syz.1.1920: attempt to access beyond end of device
[  242.514916][T11045] loop1: rw=2049, sector=145, nr_sectors = 16 limit=128
[  242.521122][T11045] syz.1.1920: attempt to access beyond end of device
[  242.521122][T11045] loop1: rw=2049, sector=169, nr_sectors = 8 limit=128
[  242.526930][T11045] syz.1.1920: attempt to access beyond end of device
[  242.526930][T11045] loop1: rw=2049, sector=185, nr_sectors = 8 limit=128
[  242.534703][T11045] syz.1.1920: attempt to access beyond end of device
[  242.534703][T11045] loop1: rw=2049, sector=201, nr_sectors = 8 limit=128
[  242.540006][T11045] syz.1.1920: attempt to access beyond end of device
[  242.540006][T11045] loop1: rw=2049, sector=217, nr_sectors = 8 limit=128
[  242.545032][T11045] syz.1.1920: attempt to access beyond end of device
[  242.545032][T11045] loop1: rw=2049, sector=233, nr_sectors = 8 limit=128
[  242.552451][T11045] syz.1.1920: attempt to access beyond end of device
[  242.552451][T11045] loop1: rw=2049, sector=249, nr_sectors = 8 limit=128
[  242.557711][T11045] syz.1.1920: attempt to access beyond end of device
[  242.557711][T11045] loop1: rw=2049, sector=265, nr_sectors = 8 limit=128
[  242.565724][T11045] syz.1.1920: attempt to access beyond end of device
[  242.565724][T11045] loop1: rw=2049, sector=281, nr_sectors = 8 limit=128
[  242.575648][T11045] syz.1.1920: attempt to access beyond end of device
[  242.575648][T11045] loop1: rw=2049, sector=297, nr_sectors = 8 limit=128
[  242.949293][   T10] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[  242.958708][ T5897] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[  243.103762][   T10] usb 2-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  243.107317][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.112162][   T10] usb 2-1: Product: syz
[  243.114609][   T10] usb 2-1: Manufacturer: syz
[  243.117203][   T10] usb 2-1: SerialNumber: syz
[  243.121454][ T5897] usb 6-1: config 0 has an invalid interface number: 170 but max is 0
[  243.124854][ T5897] usb 6-1: config 0 has no interface number 0
[  243.127389][ T5897] usb 6-1: config 0 interface 170 altsetting 0 endpoint 0x3 has an invalid bInterval 31, changing to 7
[  243.135599][ T5897] usb 6-1: New USB device found, idVendor=07b0, idProduct=0007, bcdDevice=17.c6
[  243.143342][   T10] usb 2-1: config 0 descriptor??
[  243.146223][ T5897] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  243.153741][   T10] gspca_main: sunplus-2.14.0 probing 055f:c230
[  243.165860][ T5897] usb 6-1: config 0 descriptor??
[  243.174474][ T5897] HFC-S_USB 6-1:0.170: probe with driver HFC-S_USB failed with error -5
[  243.416282][ T5964] usb 6-1: USB disconnect, device number 5
[  243.784006][   T10] gspca_sunplus: reg_r err -71
[  243.786215][   T10] sunplus 2-1:0.0: probe with driver sunplus failed with error -71
[  243.796241][   T10] usb 2-1: USB disconnect, device number 37
[  244.170716][T11077] loop5: detected capacity change from 0 to 32768
[  244.690209][T11110] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1951'.
[  244.778060][ T5964] usb 6-1: new full-speed USB device number 6 using dummy_hcd
[  244.791396][T11106] loop1: detected capacity change from 0 to 32768
[  244.804700][T11106] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1948 (11106)
[  244.841530][T11106] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  244.845960][T11106] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  244.864609][T11118] loop3: detected capacity change from 0 to 8
[  244.881523][T11118] SQUASHFS error: zlib decompression failed, data probably corrupt
[  244.890316][T11118] SQUASHFS error: Failed to read block 0x9b: -5
[  244.897225][T11118] SQUASHFS error: Unable to read metadata cache entry [99]
[  244.912581][T11118] SQUASHFS error: Unable to read inode 0x127
[  244.933857][ T5964] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  244.948280][ T5964] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  244.956726][ T5964] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[  244.960732][ T5964] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  244.974317][ T5964] usb 6-1: SerialNumber: syz
[  244.981782][T11106] BTRFS info (device loop1): enabling ssd optimizations
[  244.985132][T11106] BTRFS info (device loop1): enabling free space tree
[  245.000808][ T5964] usb 6-1: 0:2 : does not exist
[  245.144309][   T12] BTRFS info (device loop1): qgroup scan completed (inconsistency flag cleared)
[  245.404608][   T47] usb 6-1: USB disconnect, device number 6
[  245.438701][ T5850] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  245.618510][T11146] vlan2: entered promiscuous mode
[  245.620721][T11146] vlan2: entered allmulticast mode
[  245.622757][T11146] hsr_slave_1: entered allmulticast mode
[  245.843817][T11154] loop1: detected capacity change from 0 to 4096
[  245.850642][T11154] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  246.004887][T11165] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1968'.
[  246.010490][T11163] loop1: detected capacity change from 0 to 1024
[  246.026549][T11163] hfsplus: failed to load root directory
[  246.165389][T11175] loop1: detected capacity change from 0 to 16
[  246.177423][T11175] erofs (device loop1): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  246.193329][T11175] erofs (device loop1): mounted with root inode @ nid 36.
[  246.215337][T11175] erofs (device loop1): read error -5 @ 0 of nid 36
[  246.527578][T11194] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1983'.
[  246.658143][   T95] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  246.811069][   T95] usb 4-1: config 0 has an invalid interface number: 189 but max is 0
[  246.818049][   T95] usb 4-1: config 0 has no interface number 0
[  246.820603][   T95] usb 4-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  246.835165][   T95] usb 4-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  246.841304][   T95] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64
[  246.845759][   T95] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  246.850269][   T95] usb 4-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  246.857452][T11200] loop1: detected capacity change from 0 to 32768
[  246.861790][   T95] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[  246.866640][   T95] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.866660][T11200] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1986 (11200)
[  246.870096][   T95] usb 4-1: Product: syz
[  246.877193][   T95] usb 4-1: Manufacturer: syz
[  246.879259][   T95] usb 4-1: SerialNumber: syz
[  246.886459][   T95] usb 4-1: config 0 descriptor??
[  246.889701][T11200] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  246.893908][T11200] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  246.905384][T11188] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  246.910501][   T95] ums-alauda 4-1:0.189: USB Mass Storage device detected
[  246.943213][   T95] scsi host6: usb-storage 4-1:0.189
[  247.001888][T11200] BTRFS info (device loop1): allowing degraded mounts
[  247.004842][T11200] BTRFS info (device loop1): enabling ssd optimizations
[  247.007793][T11200] BTRFS info (device loop1): enabling free space tree
[  247.013351][T11200] BTRFS info (device loop1): use zlib compression, level 3
[  247.076322][ T5850] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  247.156649][   T10] usb 4-1: USB disconnect, device number 15
[  247.372215][T11223] netlink: 172 bytes leftover after parsing attributes in process `syz.1.1988'.
[  247.376142][T11223] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  248.380767][T11245] loop1: detected capacity change from 0 to 4096
[  248.387616][T11245] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  248.407650][T11245] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  248.748801][T11255] loop3: detected capacity change from 0 to 1024
[  248.752212][T11255] EXT4-fs: Ignoring removed nomblk_io_submit option
[  248.769857][T11255] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  248.774778][T11255] ext4 filesystem being mounted at /396/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  248.804778][T11255] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  248.819737][T11255] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 5 with max blocks 3 with error 28
[  248.825130][T11255] EXT4-fs (loop3): This should not happen!! Data will be lost
[  248.825130][T11255] 
[  248.832112][T11255] EXT4-fs (loop3): Total free blocks count 0
[  248.834587][T11255] EXT4-fs (loop3): Free/Dirty block details
[  248.837169][T11255] EXT4-fs (loop3): free_blocks=4293918720
[  248.861881][T11255] EXT4-fs (loop3): dirty_blocks=0
[  248.875007][T11255] EXT4-fs (loop3): Block reservation details
[  248.882242][T11255] EXT4-fs (loop3): i_reserved_data_blocks=0
[  248.922617][T11253] loop1: detected capacity change from 0 to 32768
[  248.937074][T11253] bcachefs (/dev/loop1): error validating superblock: Not a bcachefs superblock layout
[  248.943950][T11253] bcachefs: bch2_fs_get_tree() error: invalid_sb_layout
[  249.022660][T11262] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  249.292237][T11278] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.2012'.
[  249.425399][ T8139] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  249.513877][T11286] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2017'.
[  249.960767][T11295] loop3: detected capacity change from 0 to 512
[  249.963914][T11295] EXT4-fs: Ignoring removed mblk_io_submit option
[  249.966244][T11295] EXT4-fs: Ignoring removed nomblk_io_submit option
[  249.975209][T11295] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  249.990693][T11295] EXT4-fs (loop3): feature flags set on rev 0 fs, running e2fsck is recommended
[  250.064648][T11295] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4183: comm syz.3.2019: Allocating blocks 41-42 which overlap fs metadata
[  250.076897][T11295] Quota error (device loop3): write_blk: dquota write failed
[  250.091441][T11295] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5
[  250.100600][T11295] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota
[  250.105329][T11295] EXT4-fs error (device loop3): ext4_acquire_dquot:6937: comm syz.3.2019: Failed to acquire dquot type 1
[  250.112566][T11295] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 12: block 14:freeing already freed block (bit 14); block bitmap corrupt.
[  250.125265][T11295] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.2019: corrupted inode contents
[  250.133770][T11295] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #12: comm syz.3.2019: mark_inode_dirty error
[  250.138245][T11295] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.2019: corrupted inode contents
[  250.143356][T11295] EXT4-fs error (device loop3): __ext4_ext_dirty:206: inode #12: comm syz.3.2019: mark_inode_dirty error
[  250.147771][T11295] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.2019: corrupted inode contents
[  250.155292][T11295] EXT4-fs error (device loop3) in ext4_orphan_del:305: Corrupt filesystem
[  250.159124][T11295] EXT4-fs error (device loop3): ext4_do_update_inode:5653: inode #12: comm syz.3.2019: corrupted inode contents
[  250.163774][T11295] EXT4-fs error (device loop3): ext4_truncate:4666: inode #12: comm syz.3.2019: mark_inode_dirty error
[  250.168751][T11295] EXT4-fs error (device loop3) in ext4_process_orphan:347: Corrupt filesystem
[  250.429628][T11295] EXT4-fs (loop3): 1 truncate cleaned up
[  250.438868][T11295] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  250.511924][ T8139] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  250.938216][ T5964] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  250.947240][T11319] loop3: detected capacity change from 0 to 32768
[  250.960930][T11319] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  250.982151][T11319] XFS (loop3): Ending clean mount
[  250.985234][T11319] XFS (loop3): Quotacheck needed: Please wait.
[  251.015861][   T36] XFS (loop3): WARNING: Reset corrupted AGFL on AG 0. 1 blocks leaked. Please unmount and run xfs_repair.
[  251.050606][T11319] XFS (loop3): Quotacheck: Done.
[  251.093002][ T5964] usb 2-1: Using ep0 maxpacket: 8
[  251.099612][ T5964] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  251.116590][ T5964] usb 2-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68
[  251.126708][ T5964] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  251.133783][ T5964] usb 2-1: Product: syz
[  251.140294][ T8139] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  251.144633][ T5964] usb 2-1: Manufacturer: syz
[  251.147009][ T5964] usb 2-1: SerialNumber: syz
[  251.158801][ T5964] usb 2-1: config 0 descriptor??
[  251.177385][ T5964] redrat3 2-1:0.0: Couldn't find all endpoints
[  251.374929][   T95] usb 2-1: USB disconnect, device number 38
[  251.411610][T11334] loop5: detected capacity change from 0 to 32768
[  251.431893][T11334] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  251.456905][T11334] XFS (loop5): Ending clean mount
[  251.484439][T10278] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  251.624097][T11336] loop3: detected capacity change from 0 to 32768
[  251.656951][T11336] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  251.693036][T11336] XFS (loop3): Ending clean mount
[  251.697175][T11336] XFS (loop3): Quotacheck needed: Please wait.
[  251.735125][T11336] XFS (loop3): Quotacheck: Done.
[  251.767154][ T8139] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  252.167224][T11374] loop1: detected capacity change from 0 to 256
[  252.180508][T11374] exfat: Deprecated parameter 'namecase'
[  252.191117][T11374] exfat: Deprecated parameter 'namecase'
[  252.206066][T11374] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[  252.360856][T11386] loop3: detected capacity change from 0 to 256
[  252.373604][T11378] loop5: detected capacity change from 0 to 32768
[  252.381783][T11378] bcachefs (/dev/loop5): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  252.381783][T11378] clean (size 2912):
[  252.381783][T11378] flags:          0
[  252.381783][T11378] journal_seq:    8
[  252.381783][T11378] prio_ptrs: 
[  252.381783][T11378] usage: type=key_version v=0
[  252.381783][T11378] usage: type=reserved v=0
[  252.381783][T11378] usage: type=reserved v=0
[  252.381783][T11378] usage: type=reserved v=0
[  252.381783][T11378] usage: type=reserved v=0
[  252.381783][T11378] data_usage: btree: 1/1 [0]=2816
[  252.381783][T11378] data_usage: journal: 1/1 [0]=0
[  252.381783][T11378] data_usage: user: 1/1 [0]=32
[  252.381783][T11378] dev_usage: dev=0  
[  252.381783][T11378]   free: buckets=83 sectors=0 fragmented=0
[  252.381783][T11378]   sb: buckets=25 sectors=6152 fragmented=248
[  252.381783][T11378]   journal: buckets=8 sectors=2048 fragmented=0
[  252.381783][T11378]   btree: buckets=11 sectors=2816 fragmented=0
[  252.381783][T11378]   user: buckets=1 sectors=32 fragmented=224
[  252.381783][T11378]   cached: buckets=0 sectors=0 fragmented=0
[  252.381783][T11378]   parity: buckets=0 sectors=0 fragmented=0
[  252.381783][T11378]   stripe: buckets=0 sectors=0 fragmented=0
[  252.381783][T11378]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  252.381783][T11378]   need_discard: buckets=0 sectors=0 fragmented=0
[  252.381783][T11378] clock: read=0
[  252.381783][T11378] clock: write=1288
[  252.381783][T11378] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee3
[  252.381873][T11378] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  252.462558][T11386] bio_check_eod: 37 callbacks suppressed
[  252.462569][T11386] syz.3.2049: attempt to access beyond end of device
[  252.462569][T11386] loop3: rw=2049, sector=256, nr_sectors = 100 limit=256
[  252.556355][T11392] loop3: detected capacity change from 0 to 128
[  252.559111][   T47] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  252.625823][T11398] loop5: detected capacity change from 0 to 256
[  252.631125][T11398] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  252.635039][T11398] exFAT-fs (loop5): Medium has reported failures. Some data may be lost.
[  252.642180][T11398] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  252.682141][T11400] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  252.709418][   T47] usb 2-1: config 0 has an invalid interface number: 194 but max is 0
[  252.713004][   T47] usb 2-1: config 0 has no interface number 0
[  252.729459][   T47] usb 2-1: New USB device found, idVendor=2c42, idProduct=16f8, bcdDevice=7d.d2
[  252.732450][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  252.734993][   T47] usb 2-1: Product: syz
[  252.736465][   T47] usb 2-1: Manufacturer: syz
[  252.747205][   T47] usb 2-1: SerialNumber: syz
[  252.779155][   T47] usb 2-1: config 0 descriptor??
[  253.251199][   T47] usb 2-1: USB disconnect, device number 39
[  253.273722][   T47] f81534a_ctrl 2-1:0.194: failed to set register 0x116: -19
[  253.282292][   T47] f81534a_ctrl 2-1:0.194: failed to enable ports: -19
[  253.289555][T11417] loop5: detected capacity change from 0 to 2048
[  253.303782][T11417] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  253.345600][ T8662] udevd[8662]: incorrect nilfs2 checksum on /dev/loop5
[  253.373081][T11418] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  253.453114][T11417] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  253.476460][T11417] Remounting filesystem read-only
[  253.481418][T11417] NILFS (loop5): DAT doesn't have a block to manage vblocknr = 3044605952
[  253.485186][T11417] NILFS error (device loop5): nilfs_bmap_truncate: broken bmap (inode number=15)
[  253.491965][T11417] NILFS (loop5): error -5 truncating bmap (ino=15)
[  253.529231][T10278] NILFS (loop5): disposed unprocessed dirty file(s) when detaching log writer
[  254.204076][T11429] loop3: detected capacity change from 0 to 512
[  254.214090][T11429] EXT4-fs (loop3): filesystem is read-only
[  254.218050][   T47] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[  254.390098][   T47] usb 2-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config
[  254.394468][   T47] usb 2-1: config 36 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  254.402331][   T47] usb 2-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29
[  254.406218][   T47] usb 2-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16
[  254.411112][   T47] usb 2-1: Manufacturer: syz
[  254.413129][   T47] usb 2-1: SerialNumber: syz
[  254.558076][    T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  254.628323][   T47] usbhid 2-1:36.0: couldn't find an input interrupt endpoint
[  254.634693][   T47] usb 2-1: USB disconnect, device number 40
[  254.708477][    T9] usb 4-1: Using ep0 maxpacket: 16
[  254.720672][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  254.725181][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  254.744807][    T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  254.770084][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.776152][    T9] usb 4-1: config 0 descriptor??
[  254.998127][   T95] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[  255.152573][   T95] usb 6-1: New USB device found, idVendor=046d, idProduct=08b6, bcdDevice=ca.8e
[  255.168108][   T95] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  255.190955][   T95] pwc: Logitech/Cisco VT Camera webcam detected.
[  255.206643][    T9] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.000C/input/input21
[  255.298309][    T9] appleir 0003:05AC:8241.000C: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0
[  255.402088][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  255.402129][    T9] usb 4-1: USB disconnect, device number 16
[  255.404770][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  255.593472][   T95] pwc: send_video_command error -71
[  255.595842][   T95] pwc: Failed to set video mode VGA@30 fps; return code = -71
[  255.602529][   T95] Philips webcam 6-1:127.0: probe with driver Philips webcam failed with error -71
[  255.609266][   T95] usb 6-1: USB disconnect, device number 7
[  256.117261][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2078'.
[  256.122252][T11449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2078'.
[  256.126109][T11449] netlink: 'syz.1.2078': attribute type 18 has an invalid length.
[  256.142450][T11449] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2078'.
[  256.150436][T11449] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2078'.
[  256.154207][T11449] netlink: 'syz.1.2078': attribute type 18 has an invalid length.
[  256.198434][   T95] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  256.348573][   T95] usb 4-1: Using ep0 maxpacket: 16
[  256.352362][   T95] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  256.356010][   T95] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  256.361058][   T95] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  256.367178][   T95] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  256.372450][   T95] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.375819][   T95] usb 4-1: Product: syz
[  256.377639][   T95] usb 4-1: Manufacturer: syz
[  256.380197][   T95] usb 4-1: SerialNumber: syz
[  256.461959][T11455] loop5: detected capacity change from 0 to 32768
[  256.477236][T11455] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.2081 (11455)
[  256.486455][T11455] BTRFS info (device loop5): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  256.490469][T11455] BTRFS info (device loop5): using sha256 (sha256-lib) checksum algorithm
[  256.536258][T11455] BTRFS info (device loop5): enabling ssd optimizations
[  256.540101][T11455] BTRFS info (device loop5): enabling free space tree
[  256.568276][   T24] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[  256.577246][T10278] BTRFS info (device loop5): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  256.738361][   T24] usb 2-1: Using ep0 maxpacket: 32
[  256.754132][   T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[  256.771117][   T24] usb 2-1: unable to read config index 0 descriptor/start: -71
[  256.774528][   T24] usb 2-1: can't read configurations, error -71
[  256.803204][   T95] usb 4-1: 0:2 : does not exist
[  257.007608][T11484] loop5: detected capacity change from 0 to 1024
[  257.292447][T11495] loop1: detected capacity change from 0 to 512
[  257.297407][T11495] EXT4-fs (loop1): Test dummy encryption mode enabled
[  257.307137][T11495] EXT4-fs (loop1): ext4_check_descriptors: Inode table for group 0 not in group (block 0)!
[  257.316376][T11495] EXT4-fs (loop1): group descriptors corrupted!
[  257.383713][T11497] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2092'.
[  257.446815][   T95] usb 4-1: USB disconnect, device number 17
[  257.472137][ T5848] udevd[5848]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  257.858056][   T24] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[  258.023327][T11506] loop5: detected capacity change from 0 to 256
[  258.029579][   T24] usb 2-1: Using ep0 maxpacket: 32
[  258.045288][   T24] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  258.056703][   T24] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[  258.062930][T11506] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  258.068211][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  258.071517][   T24] usb 2-1: Product: syz
[  258.073272][   T24] usb 2-1: Manufacturer: syz
[  258.075197][   T24] usb 2-1: SerialNumber: syz
[  258.086532][   T24] usb 2-1: config 0 descriptor??
[  258.091944][   T24] usb 2-1: bad CDC descriptors
[  258.228552][   T24] usb 2-1: unsupported MDLM descriptors
[  258.577029][ T5964] usb 2-1: USB disconnect, device number 42
[  258.614011][    T9] IPVS: starting estimator thread 0...
[  258.708106][T11520] IPVS: using max 58 ests per chain, 139200 per kthread
[  258.882745][T11522] loop3: detected capacity change from 0 to 32768
[  258.893263][T11522] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value
[  259.202231][T11540] loop5: detected capacity change from 0 to 128
[  259.256918][T11540] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  259.265768][T11540] ext4 filesystem being mounted at /148/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  259.284897][T11538] loop1: detected capacity change from 0 to 32768
[  259.291918][T11538] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2111 (11538)
[  259.306048][T10278] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  259.306446][T11538] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  259.313083][T11538] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  259.418656][ T5964] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  259.430699][T11538] BTRFS info (device loop1): enabling ssd optimizations
[  259.433730][T11538] BTRFS info (device loop1): enabling free space tree
[  259.707197][ T5964] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  259.804232][ T5964] usb 4-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  259.896105][   T33] audit: type=1800 audit(1756823312.466:161): pid=11571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2111" name="file1" dev="loop1" ino=260 res=0 errno=0
[  259.918255][ T5964] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  259.921915][ T5964] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.152161][ T5964] usbtmc 4-1:16.0: bulk endpoints not found
[  260.154968][ T5850] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  260.207625][T11570] loop5: detected capacity change from 0 to 40427
[  260.221593][T11570] F2FS-fs (loop5): build fault injection rate: 14
[  260.224336][T11570] F2FS-fs (loop5): build fault injection type: 0x1dff
[  260.241541][T11570] F2FS-fs (loop5): invalid crc value
[  260.258931][T11570] F2FS-fs (loop5): inject kmalloc in f2fs_kmalloc of f2fs_fill_super+0x4429/0x6ff0
[  260.262071][T11570] F2FS-fs (loop5): Failed to initialize F2FS segment manager (-12)
[  260.341182][   T95] usb 4-1: USB disconnect, device number 18
[  260.425153][T11577] loop1: detected capacity change from 0 to 2048
[  260.435934][T11577] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  260.468897][   T33] audit: type=1800 audit(1756823313.176:162): pid=11577 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2118" name="file1" dev="loop1" ino=1415 res=0 errno=0
[  260.480240][T11579] mmap: syz.5.2119 (11579) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  260.798333][ T5964] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[  260.968702][ T5964] usb 6-1: Using ep0 maxpacket: 32
[  260.972683][T11605] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2130'.
[  260.977428][T11604] tipc: Enabling of bearer </h:s> rejected, media not registered
[  260.977581][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 255, changing to 11
[  260.997543][ T5964] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 59391, setting to 1024
[  261.009241][ T5964] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[  261.012959][ T5964] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.016050][ T5964] usb 6-1: Product: syz
[  261.017688][ T5964] usb 6-1: Manufacturer: syz
[  261.027887][ T5964] usb 6-1: SerialNumber: syz
[  261.032743][ T5964] usb 6-1: config 0 descriptor??
[  261.039757][T11583] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  261.084487][ T5964] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  261.276847][   T12] usb 6-1: Failed to submit usb control message: -71
[  261.276926][ T5964] usb 6-1: USB disconnect, device number 8
[  261.286599][   T12] usb 6-1: unable to send the bmi data to the device: -71
[  261.289534][   T12] usb 6-1: unable to get target info from device
[  261.291907][   T12] usb 6-1: could not get target info (-71)
[  261.294189][   T12] usb 6-1: could not probe fw (-71)
[  261.524307][T11617] loop1: detected capacity change from 0 to 32768
[  261.565467][T11617] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  261.603579][T11617] XFS (loop1): Ending clean mount
[  261.616372][T11617] XFS (loop1): Quotacheck needed: Please wait.
[  261.662113][T11617] XFS (loop1): Quotacheck: Done.
[  261.722636][ T5850] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  262.268999][T11647] : entered promiscuous mode
[  262.314507][T11649] netlink: 'syz.1.2147': attribute type 1 has an invalid length.
[  262.352335][T11649] 8021q: adding VLAN 0 to HW filter on device bond2
[  262.389219][T11649] bond2: (slave geneve2): making interface the new active one
[  262.393926][T11649] bond2: (slave geneve2): Enslaving as an active interface with an up link
[  262.508253][T11645] loop5: detected capacity change from 0 to 32768
[  262.665953][T11645] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  262.665975][T11645]   allowing incompatible features above 0.0: (unknown version)
[  262.665981][T11645]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  262.684412][T11665] loop1: detected capacity change from 0 to 1024
[  262.729691][T11645] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  262.733470][T11667] ALSA: seq fatal error: cannot create timer (-19)
[  262.736143][T11645] bcachefs (loop5): initializing new filesystem
[  262.746526][T11665] hfsplus: b-tree write err: -5, ino 3
[  262.754109][T11645] bcachefs (loop5): going read-write
[  262.759861][T11665] hfsplus: bad catalog file entry
[  262.759916][T11645] bcachefs (loop5): marking superblocks
[  262.795011][ T1099] hfsplus: bad catalog file entry
[  262.813817][T11645] bcachefs (loop5): initializing freespace
[  262.828585][T11645] bcachefs (loop5): done initializing freespace
[  262.833853][T11645] bcachefs (loop5): reading snapshots table
[  262.836347][T11645] bcachefs (loop5): reading snapshots done
[  262.880703][T11645] bcachefs (loop5): done starting filesystem
[  262.892707][T11675] loop1: detected capacity change from 0 to 1024
[  262.991732][T10278] bcachefs (loop5): shutting down
[  262.996158][T10278] bcachefs (loop5): going read-only
[  262.998977][T10278] bcachefs (loop5): finished waiting for writes to stop
[  263.006903][T10278] bcachefs (loop5): flushing journal and stopping allocators, journal seq 2
[  263.016623][T11682] loop3: detected capacity change from 0 to 512
[  263.024678][T11682] EXT4-fs: Ignoring removed bh option
[  263.027478][T11682] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  263.039084][T11682] EXT4-fs (loop3): 1 truncate cleaned up
[  263.042781][T11682] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.097526][T10278] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  263.106737][T10278] bcachefs (loop5): clean shutdown complete, journal seq 4
[  263.111287][T10278] bcachefs (loop5): marking filesystem clean
[  263.129600][ T8139] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.175930][T10278] bcachefs (loop5): shutdown complete
[  263.723042][T11710] loop3: detected capacity change from 0 to 512
[  263.728942][T11710] EXT4-fs: Ignoring removed oldalloc option
[  263.731445][T11710] EXT4-fs: Ignoring removed bh option
[  263.758854][T11710] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a842c118, mo2=0002]
[  263.763556][T11710] System zones: 1-12
[  263.766409][T11710] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.2171: corrupted in-inode xattr: e_value size too large
[  263.773148][T11710] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.2171: couldn't read orphan inode 15 (err -117)
[  263.779523][T11710] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  263.818474][ T8139] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.013555][T11708] loop1: detected capacity change from 0 to 32768
[  264.043953][T11708] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  264.083008][T11708] XFS (loop1): Ending clean mount
[  264.124208][ T5850] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  264.207070][T11719] loop3: detected capacity change from 0 to 32768
[  264.218598][T11719] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2175 (11719)
[  264.243488][T11719] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  264.259470][T11719] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  264.431402][T11719] BTRFS info (device loop3): rebuilding free space tree
[  264.459872][T11719] BTRFS info (device loop3): checking UUID tree
[  264.465987][T11719] BTRFS info (device loop3): enabling ssd optimizations
[  264.469419][T11719] BTRFS info (device loop3): turning on async discard
[  264.472174][T11719] BTRFS info (device loop3): enabling free space tree
[  264.474978][T11719] BTRFS info (device loop3): force clearing of disk cache
[  264.477800][T11719] BTRFS info (device loop3): force zstd compression, level 3
[  264.642026][ T8139] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  264.878179][    T9] usb 2-1: new low-speed USB device number 43 using dummy_hcd
[  265.033674][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  265.040004][    T9] usb 2-1: config 7 has an invalid interface number: 199 but max is 0
[  265.044800][    T9] usb 2-1: config 7 has no interface number 0
[  265.051964][    T9] usb 2-1: config 7 interface 199 altsetting 1 endpoint 0x3 has an invalid bInterval 0, changing to 4
[  265.062137][    T9] usb 2-1: config 7 interface 199 altsetting 1 endpoint 0x3 has invalid maxpacket 32, setting to 0
[  265.073261][    T9] usb 2-1: No eUSB2 isoc ep 3 companion for config 7 interface 199 altsetting 1
[  265.087264][    T9] usb 2-1: config 7 interface 199 altsetting 1 endpoint 0xD has invalid maxpacket 1023, setting to 8
[  265.091985][    T9] usb 2-1: config 7 interface 199 has no altsetting 0
[  265.101484][    T9] usb 2-1: string descriptor 0 read error: -22
[  265.104045][    T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=6282, bcdDevice=cb.15
[  265.117870][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  265.128946][    T9] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:6282
[  265.334014][    T9] gspca_sn9c20x: Write register 1000 failed -71
[  265.341601][    T9] gspca_sn9c20x: Device initialization failed
[  265.347885][    T9] gspca_sn9c20x 2-1:7.199: probe with driver gspca_sn9c20x failed with error -71
[  265.364462][    T9] usb 2-1: USB disconnect, device number 43
[  265.426990][T11774] loop5: detected capacity change from 0 to 256
[  265.450773][T11774] FAT-fs (loop5): Directory bread(block 64) failed
[  265.453801][T11774] FAT-fs (loop5): Directory bread(block 65) failed
[  265.456877][T11774] FAT-fs (loop5): Directory bread(block 66) failed
[  265.462398][T11774] FAT-fs (loop5): Directory bread(block 67) failed
[  265.465424][T11774] FAT-fs (loop5): Directory bread(block 68) failed
[  265.468702][T11774] FAT-fs (loop5): Directory bread(block 69) failed
[  265.471621][T11774] FAT-fs (loop5): Directory bread(block 70) failed
[  265.474447][T11774] FAT-fs (loop5): Directory bread(block 71) failed
[  265.477439][T11774] FAT-fs (loop5): Directory bread(block 72) failed
[  265.481079][T11774] FAT-fs (loop5): Directory bread(block 73) failed
[  266.413902][T11793] loop3: detected capacity change from 0 to 40427
[  266.420086][T11793] F2FS-fs (loop3): invalid crc value
[  266.483092][T11793] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  266.487281][T11793] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  266.580424][T11804] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2201'.
[  266.584238][T11804] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2201'.
[  266.853358][T11812] loop1: detected capacity change from 0 to 1024
[  266.877558][T11812] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  266.996969][T11819] Invalid source name
[  267.004094][T11819] UBIFS error (pid: 11819): cannot open "./file0", error -22
[  267.108069][   T10] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[  267.117302][T11817] loop3: detected capacity change from 0 to 32768
[  267.138797][T11817] jfs_lookup: iget failed on inum 4
[  267.141589][T11817] jfs_lookup: iget failed on inum 4
[  267.265240][   T10] usb 6-1: unable to get BOS descriptor or descriptor too short
[  267.276282][   T10] usb 6-1: config 3 has an invalid interface number: 51 but max is 0
[  267.285733][   T10] usb 6-1: config 3 has no interface number 0
[  267.315078][   T10] usb 6-1: New USB device found, idVendor=0b57, idProduct=2c68, bcdDevice=6e.32
[  267.324354][   T10] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.337673][   T10] usb 6-1: Product: syz
[  267.344651][   T10] usb 6-1: Manufacturer: syz
[  267.356852][   T10] usb 6-1: SerialNumber: syz
[  267.390863][   T10] usbhid 6-1:3.51: couldn't find an input interrupt endpoint
[  267.767292][   T95] usb 6-1: USB disconnect, device number 9
[  267.835681][   T33] audit: type=1326 audit(1756823320.546:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11836 comm="syz.3.2216" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6dcc18ebe9 code=0x0
[  268.387132][T11846] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2220'.
[  268.393136][T11846] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2220'.
[  268.396737][T11846] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2220'.
[  268.402582][T11846] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2220'.
[  268.462099][   T95] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[  268.628267][   T95] usb 2-1: Using ep0 maxpacket: 8
[  268.641038][   T95] usb 2-1: unable to get BOS descriptor or descriptor too short
[  268.645543][   T95] usb 2-1: config 7 has an invalid interface number: 148 but max is 0
[  268.649435][   T95] usb 2-1: config 7 has no interface number 0
[  268.655505][   T95] usb 2-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice=1c.76
[  268.666447][   T95] usb 2-1: New USB device strings: Mfr=27, Product=2, SerialNumber=3
[  268.672666][   T95] usb 2-1: Product: syz
[  268.677376][   T95] usb 2-1: Manufacturer: syz
[  268.681633][   T95] usb 2-1: SerialNumber: syz
[  268.683091][T11861] netlink: 'syz.5.2227': attribute type 1 has an invalid length.
[  268.686959][T11861] netlink: 'syz.5.2227': attribute type 1 has an invalid length.
[  268.735715][T11863] trusted_key: syz.3.2228 sent an empty control message without MSG_MORE.
[  268.955890][   T95] ldusb 2-1:7.148: Interrupt in endpoint not found
[  268.976819][   T95] usb 2-1: USB disconnect, device number 44
[  269.142367][T11867] loop3: detected capacity change from 0 to 65536
[  269.169524][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/9b7348e5-2fa0-41a5-9526-c53a678b01f3.tmp-b7:3' failed: Read-only file system
[  269.190084][T11867] XFS (loop3): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  269.210238][T11867] XFS (loop3): Ending clean mount
[  269.230525][T11867] XFS (loop3): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x6 
[  269.235143][T11867] XFS (loop3): Unmount and run xfs_repair
[  269.237363][T11867] XFS (loop3): First 128 bytes of corrupted metadata buffer:
[  269.240177][T11867] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  269.243141][T11867] 00000010: 00 00 00 00 00 00 00 06 00 00 00 01 00 00 00 10  ................
[  269.246417][T11867] 00000020: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  269.249522][T11867] 00000030: 00 00 00 00 b2 4a d0 a1 00 00 00 0d 00 00 00 03  .....J..........
[  269.252715][T11867] 00000040: 00 00 00 39 00 00 3f c7 00 00 00 00 00 00 00 00  ...9..?.........
[  269.256179][T11867] 00000050: 00 00 00 00 00 00 00 00 00 00 00 3f 00 00 00 00  ...........?....
[  269.259602][T11867] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  269.263208][T11867] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  269.266878][T11867] XFS (loop3): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x6 len 2 error 74
[  269.283287][T11867] XFS (loop3): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  269.290058][T11867] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  269.330151][ T8139] XFS (loop3): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  270.179244][T11904] sch_tbf: burst 0 is lower than device veth1 mtu (1514) !
[  270.231768][T11906] openvswitch: netlink: IP tunnel TTL not specified.
[  271.559887][ T5898] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[  271.732236][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  271.736284][ T5898] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  271.742459][ T5898] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  271.760611][ T5898] usb 6-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  271.764365][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  271.769830][ T5898] usb 6-1: config 0 descriptor??
[  271.861488][T11938] loop3: detected capacity change from 0 to 4096
[  271.874053][T11938] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  271.884171][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  271.898463][T11938] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  271.902483][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:3' failed: Read-only file system
[  271.934065][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  271.955861][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/68CE0ED73BAA5F78.tmp-b7:3' failed: Read-only file system
[  272.131919][T11935] loop1: detected capacity change from 0 to 32768
[  272.143033][T11935] jfs_mount: Failed to read AGGREGATE_I
[  272.146100][T11935] Mount JFS Failure: -5
[  272.147896][T11935] jfs_mount failed w/return code = -5
[  272.157547][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-uuid/45b0d9a3-5e0b-4fd0-ae05-2ff6b274033b.tmp-b7:1' failed: Read-only file system
[  272.223016][ T5898] plantronics 0003:047F:FFFF.000D: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.5-1/input0
[  272.253258][T11948] netlink: 'syz.1.2262': attribute type 16 has an invalid length.
[  272.262039][T11948] netlink: 'syz.1.2262': attribute type 3 has an invalid length.
[  272.272158][T11948] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2262'.
[  272.286618][T11946] loop3: detected capacity change from 0 to 4096
[  272.307877][ T6373] udevd[6373]: symlink '../../loop3' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:3' failed: Read-only file system
[  272.334371][T11949] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  272.387474][T11946] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed
[  272.513543][T11958] loop3: detected capacity change from 0 to 512
[  272.523575][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  272.529259][T11958] EXT4-fs: Ignoring removed orlov option
[  272.534381][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/00000005-0000-0000-0000-000000000000.tmp-b7:3' failed: Read-only file system
[  272.540734][T11958] EXT4-fs (loop3): Test dummy encryption mode enabled
[  272.562252][T11958] EXT4-fs (loop3): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  272.573804][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  272.593810][T11958] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  272.601599][T11958] EXT4-fs error (device loop3): ext4_add_entry:2417: inode #2: comm syz.3.2266: Directory hole found for htree leaf block 0
[  272.611144][T11958] EXT4-fs (loop3): Remounting filesystem read-only
[  272.649748][ T8139] EXT4-fs (loop3): unmounting filesystem 00000005-0000-0000-0000-000000000000.
[  272.969775][T11979] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  273.035832][T11971] loop1: detected capacity change from 0 to 40427
[  273.055428][T11971] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64)
[  273.057886][T11971] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  273.125296][T11971] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  273.131444][T11971] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  273.134210][T11971] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  273.497305][T12005] netlink: 'syz.3.2287': attribute type 1 has an invalid length.
[  273.503412][T12005] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2287'.
[  273.646345][T12015] overlayfs: fs on './cgroup' does not support file handles, falling back to index=off,nfs_export=off.
[  273.655590][T12015] overlayfs: maximum fs stacking depth exceeded
[  273.988127][ T5898] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[  274.160166][ T5898] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e
[  274.164062][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.174371][ T5898] usb 2-1: config 0 descriptor??
[  274.281096][   T10] usb 6-1: USB disconnect, device number 10
[  274.796032][ T5898] ath6kl: Failed to read usb control message: -71
[  274.799371][ T5898] ath6kl: Unable to read the bmi data from the device: -71
[  274.802291][ T5898] ath6kl: unable to read target info byte count: -71
[  274.814315][ T5898] ath6kl: Failed to init ath6kl core: -71
[  274.817017][ T5898] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[  274.833040][ T5898] usb 2-1: USB disconnect, device number 45
[  275.110076][   T33] audit: type=1326 audit(1756823327.816:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12042 comm="syz.5.2304" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f36bd98ebe9 code=0x0
[  275.218151][   T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  275.368071][   T10] usb 4-1: Using ep0 maxpacket: 8
[  275.375016][   T10] usb 4-1: New USB device found, idVendor=10c4, idProduct=8244, bcdDevice=dc.00
[  275.380234][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  275.384287][   T10] usb 4-1: Product: syz
[  275.386190][   T10] usb 4-1: Manufacturer: syz
[  275.388502][   T10] usb 4-1: SerialNumber: syz
[  275.397371][   T10] usb 4-1: config 0 descriptor??
[  275.410253][   T10] radio-usb-si4713 4-1:0.0: Si4713 development board discovered: (10C4:8244)
[  275.626181][   T10] radio-usb-si4713 4-1:0.0: probe with driver radio-usb-si4713 failed with error -71
[  275.631049][   T10] usbhid 4-1:0.0: couldn't find an input interrupt endpoint
[  275.641433][   T10] usb 4-1: USB disconnect, device number 19
[  276.044129][T12080] loop1: detected capacity change from 0 to 32768
[  276.051980][T12080] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[  276.074482][   T33] audit: type=1800 audit(1756823328.786:165): pid=12080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2319" name="file1" dev="loop1" ino=17058 res=0 errno=0
[  276.083932][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:1' failed: Read-only file system
[  276.109131][ T5850] ocfs2: Unmounting device (7,1) on (node local)
[  276.297666][T12090] @: renamed from vlan0 (while UP)
[  276.506267][T12088] loop3: detected capacity change from 0 to 32768
[  276.529471][T12088] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  276.532209][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:3' failed: Read-only file system
[  276.549931][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:3' failed: Read-only file system
[  276.559225][T12088] XFS (loop3): Ending clean mount
[  276.591685][ T8139] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  277.162309][T12108] binder: 12104:12108 ioctl c0306201 0 returned -14
[  277.407343][T12103] loop5: detected capacity change from 0 to 40427
[  277.411471][T12103] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12
[  277.414625][T12103] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  277.420514][T12103] F2FS-fs (loop5): invalid crc value
[  277.437175][ T5848] udevd[5848]: symlink '../../loop5' '/dev/disk/by-uuid/922c7623-35ee-4af3-bdd7-07040bb1b7db.tmp-b7:5' failed: Read-only file system
[  277.460961][T12103] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  277.468483][T12103] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  277.471314][T12103] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  277.732208][T12114] loop3: detected capacity change from 0 to 16
[  277.745910][T12114] erofs (device loop3): mounted with root inode @ nid 36.
[  277.757262][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:3' failed: Read-only file system
[  277.774405][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/dc99752b-953d-459c-b2db-a5c46e0e7dba.tmp-b7:3' failed: Read-only file system
[  278.016604][T12126] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 4, id = 0
[  278.173402][T12131] netlink: 277 bytes leftover after parsing attributes in process `syz.3.2333'.
[  278.924183][T12139] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2339'.
[  279.071754][T12141] loop5: detected capacity change from 0 to 2048
[  279.104127][ T5848] udevd[5848]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000000900.tmp-b7:5' failed: Read-only file system
[  279.131055][T12141] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000900 r/w without journal. Quota mode: none.
[  279.142301][ T5848] udevd[5848]: symlink '../../loop5' '/dev/disk/by-uuid/00000000-0000-0000-0000-000000000900.tmp-b7:5' failed: Read-only file system
[  279.224000][T10278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000900.
[  279.390490][ T5964] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[  279.561204][ T5964] usb 2-1: Using ep0 maxpacket: 8
[  279.583294][ T5964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  279.605073][ T5964] usb 2-1: New USB device found, idVendor=0458, idProduct=5015, bcdDevice= 0.00
[  279.606503][T12161] block nbd3: Attempted send on invalid socket
[  279.614538][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.622032][T12161] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  279.639335][ T5964] usb 2-1: config 0 descriptor??
[  279.644015][T12161] block nbd3: Attempted send on invalid socket
[  279.655654][T12161] I/O error, dev nbd3, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  279.685380][T12161] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  279.722995][T12161] block nbd3: Attempted send on invalid socket
[  279.731487][T12161] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  279.746897][T12161] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  279.765078][T12161] block nbd3: Attempted send on invalid socket
[  279.767882][T12161] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  279.773345][T12161] block nbd3: Attempted send on invalid socket
[  279.776246][T12161] I/O error, dev nbd3, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  279.785350][T12161] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  279.790491][T12161] block nbd3: Attempted send on invalid socket
[  279.793352][T12161] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  279.797494][T12161] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  279.806866][T12161] block nbd3: Attempted send on invalid socket
[  279.812161][T12161] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  279.821326][T12161] block nbd3: Attempted send on invalid socket
[  279.829212][T12161] I/O error, dev nbd3, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  279.837619][T12161] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  279.854754][T12161] block nbd3: Attempted send on invalid socket
[  279.867186][T12161] I/O error, dev nbd3, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  279.886491][T12161] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  279.906271][T12161] block nbd3: Attempted send on invalid socket
[  279.910869][T12161] I/O error, dev nbd3, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  279.920042][T12161] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=256, location=256
[  279.924486][T12161] UDF-fs: error (device nbd3): udf_read_tagged: read failed, block=512, location=512
[  279.929549][T12161] UDF-fs: warning (device nbd3): udf_fill_super: No partition found (1)
[  280.128404][ T5964] kye 0003:0458:5015.000E: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[  280.135895][ T5964] kye 0003:0458:5015.000E: item fetching failed at offset 0/2
[  280.158099][ T5964] kye 0003:0458:5015.000E: parse failed
[  280.160144][ T5964] kye 0003:0458:5015.000E: probe with driver kye failed with error -22
[  280.348214][ T5898] usb 2-1: USB disconnect, device number 46
[  280.883459][T12177] loop5: detected capacity change from 0 to 8
[  280.895730][T12177] unable to read inode lookup table
[  281.094749][T12184] loop1: detected capacity change from 0 to 4096
[  281.112095][T12184] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  281.112916][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  281.122358][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:1' failed: Read-only file system
[  281.124398][T12184] ntfs3(loop1): Failed to load $Extend (-22).
[  281.129558][T12184] ntfs3(loop1): Failed to initialize $Extend.
[  281.144110][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-label/syzkaller.tmp-b7:1' failed: Read-only file system
[  281.150195][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-uuid/0B506D495F2D248F.tmp-b7:1' failed: Read-only file system
[  281.269379][T12187] loop5: detected capacity change from 0 to 32768
[  281.279237][T12187] XFS (loop5): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  281.293618][ T5848] udevd[5848]: symlink '../../loop5' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:5' failed: Read-only file system
[  281.296476][T12187] XFS (loop5): Ending clean mount
[  281.300547][   T10] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  281.313520][ T5848] udevd[5848]: symlink '../../loop5' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:5' failed: Read-only file system
[  281.317868][T12187] XFS (loop5): Quotacheck needed: Please wait.
[  281.348830][T12187] XFS (loop5): Quotacheck: Done.
[  281.391413][T10278] XFS (loop5): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  281.454348][   T10] usb 4-1: config 0 has an invalid interface number: 120 but max is 0
[  281.457792][   T10] usb 4-1: config 0 has no interface number 0
[  281.472652][   T10] usb 4-1: config 0 interface 120 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  281.484292][   T10] usb 4-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  281.489449][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.503932][   T10] usb 4-1: config 0 descriptor??
[  281.526915][   T10] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.120/input/input22
[  281.549384][T12207] loop5: detected capacity change from 0 to 256
[  281.561434][T12207] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  281.567085][T12207] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=512, location=512
[  281.573074][T12207] UDF-fs: warning (device loop5): udf_load_vrs: No anchor found
[  281.575881][T12207] UDF-fs: Scanning with blocksize 512 failed
[  281.591595][T12207] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[  281.609004][T12207] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  281.640041][ T5898] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[  281.730191][   T24] usb 4-1: USB disconnect, device number 20
[  281.797371][ T5898] usb 2-1: config 0 has an invalid interface number: 3 but max is 0
[  281.801091][ T5898] usb 2-1: config 0 has no interface number 0
[  281.803629][ T5898] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0xD has an invalid bInterval 104, changing to 10
[  281.810992][ T5898] usb 2-1: config 0 interface 3 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  281.817165][ T5898] usb 2-1: New USB device found, idVendor=1660, idProduct=1921, bcdDevice=1f.84
[  281.821239][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  281.824536][ T5898] usb 2-1: Product: syz
[  281.826378][ T5898] usb 2-1: Manufacturer: syz
[  281.828953][ T5898] usb 2-1: SerialNumber: syz
[  281.846219][ T5898] usb 2-1: config 0 descriptor??
[  282.081955][ T5898] dvb-usb: found a 'Medion CTX1921 DVB-T USB' in warm state.
[  282.092726][ T5898] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  282.097293][ T5898] dvbdev: DVB: registering new adapter (Medion CTX1921 DVB-T USB)
[  282.100690][ T5898] usb 2-1: media controller created
[  282.115551][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  282.151601][ T5898] DVB: Unable to find symbol dib7000p_attach()
[  282.153730][ T5898] dvb-usb: no frontend was attached by 'Medion CTX1921 DVB-T USB'
[  282.198113][ T5898] rc_core: IR keymap rc-dib0700-rc5 not found
[  282.200831][ T5898] Registered IR keymap rc-empty
[  282.203512][ T5898] dvb-usb: could not initialize remote control.
[  282.206391][ T5898] dvb-usb: Medion CTX1921 DVB-T USB successfully initialized and connected.
[  282.282913][ T5898] dib0700: There's no endpoint for remote controller
[  282.326987][T12215] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2367'.
[  282.486177][ T5898] usb 2-1: USB disconnect, device number 47
[  282.523697][ T5898] dvb-usb: Medion CTX1921 DVB-T USB successfully deinitialized and disconnected.
[  282.757656][T12227] loop3: detected capacity change from 0 to 32768
[  282.768699][T12227] XFS (loop3): Mounting V5 Filesystem ca7e2101-b8f1-4838-8e2d-7637b90620e6
[  282.776218][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/ca7e2101-b8f1-4838-8e2d-7637b90620e6.tmp-b7:3' failed: Read-only file system
[  282.783969][T12227] XFS (loop3): Log size 624 blocks too small, minimum size is 816 blocks
[  282.786868][T12227] XFS (loop3): AAIEEE! Log failed size checks. Abort!
[  282.799039][T12227] XFS (loop3): log mount failed
[  282.848039][   T47] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  283.006104][T12246] loop3: detected capacity change from 0 to 512
[  283.012382][   T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  283.023136][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  283.028315][   T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  283.038409][   T47] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  283.040225][T12246] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.053627][   T47] usb 6-1: New USB device found, idVendor=0eef, idProduct=72d0, bcdDevice= 0.00
[  283.057293][   T47] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  283.058187][T12246] ext4 filesystem being mounted at /527/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  283.074381][   T47] usb 6-1: config 0 descriptor??
[  283.082114][T12251] loop1: detected capacity change from 0 to 512
[  283.100433][T12251] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  283.106154][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-label/\x86\x5b.tmp-b7:1' failed: Read-only file system
[  283.108167][T12251] EXT4-fs (loop1): Cannot turn on journaled quota: type 1: error -2
[  283.125793][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-label/\x86\x5b.tmp-b7:1' failed: Read-only file system
[  283.142297][ T8139] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.147242][T12251] EXT4-fs (loop1): 1 truncate cleaned up
[  283.161628][T12251] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  283.180368][T12251] EXT4-fs error (device loop1): ext4_map_blocks:778: inode #2: block 4: comm syz.1.2380: lblock 0 mapped to illegal pblock 4 (length 1)
[  283.205305][T12251] EXT4-fs (loop1): Remounting filesystem read-only
[  283.243785][ T5850] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  283.262840][T12254] loop3: detected capacity change from 0 to 4096
[  283.278194][T12254] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512).
[  283.336044][T12254] ntfs3(loop3): ino=1a, mi_enum_attr
[  283.339184][T12254] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  283.342365][T12254] ntfs3(loop3): ino=1a, mi_enum_attr
[  283.344676][T12254] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  283.519774][   T47] hid-multitouch 0003:0EEF:72D0.000F: hidraw0: USB HID v0.00 Device [HID 0eef:72d0] on usb-dummy_hcd.5-1/input0
[  283.635348][T12270] loop3: detected capacity change from 0 to 128
[  283.748136][ T5898] usb 6-1: USB disconnect, device number 11
[  284.004004][T12289] 9pnet_virtio: no channels available for device syz
[  284.130416][T12286] loop1: detected capacity change from 0 to 32768
[  284.158107][T12286] JBD2: Ignoring recovery information on journal
[  284.196727][T12286] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  284.383241][ T5850] ocfs2: Unmounting device (7,1) on (node local)
[  284.516007][T12298] loop5: detected capacity change from 0 to 1024
[  284.522070][T12298] EXT4-fs: Ignoring removed nomblk_io_submit option
[  284.557099][T12298] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  284.586415][T12302] openvswitch: netlink: nsh attribute has 65532 unknown bytes.
[  284.593243][T12302] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  284.655504][T10278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  284.842236][T12310] netlink: 'syz.5.2406': attribute type 29 has an invalid length.
[  284.850702][T12310] netlink: 'syz.5.2406': attribute type 29 has an invalid length.
[  284.855010][T12310] netlink: 'syz.5.2406': attribute type 29 has an invalid length.
[  284.881087][T12312] loop7: detected capacity change from 0 to 16384
[  285.008147][ T5964] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[  285.048950][T12313] loop7: detected capacity change from 16384 to 0
[  285.133682][T12317] loop5: detected capacity change from 0 to 4096
[  285.158655][T12317] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  285.159950][ T5964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  285.178186][ T5964] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  285.182199][ T5964] usb 2-1: New USB device found, idVendor=0419, idProduct=0600, bcdDevice= 0.00
[  285.184176][T12317] Quota error (device loop5): do_check_range: Getting block 327682 out of range 1-5
[  285.186011][ T5964] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.192412][T12317] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  285.198570][T12317] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.2409: Failed to acquire dquot type 1
[  285.199544][ T5964] usb 2-1: config 0 descriptor??
[  285.223126][T12317] Quota error (device loop5): do_check_range: Getting block 327682 out of range 1-5
[  285.228395][T12317] Quota error (device loop5): qtree_read_dquot: Can't read quota structure for id 0
[  285.231999][T12317] EXT4-fs error (device loop5): ext4_acquire_dquot:6937: comm syz.5.2409: Failed to acquire dquot type 1
[  285.262369][T10278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  285.623667][ T5964] samsung 0003:0419:0600.0010: unknown main item tag 0x0
[  285.629148][ T5964] samsung 0003:0419:0600.0010: hidraw0: USB HID v0.80 Device [HID 0419:0600] on usb-dummy_hcd.1-1/input0
[  285.648296][ T5898] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  285.688208][   T10] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  285.799820][ T5898] usb 6-1: config 0 has no interfaces?
[  285.802168][ T5898] usb 6-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  285.805762][ T5898] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  285.815073][ T5898] usb 6-1: config 0 descriptor??
[  285.841199][ T5964] usb 2-1: USB disconnect, device number 48
[  285.848082][   T10] usb 4-1: Using ep0 maxpacket: 32
[  285.855845][   T10] usb 4-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a1.4f
[  285.860004][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  285.864198][   T10] usb 4-1: Product: syz
[  285.866204][   T10] usb 4-1: Manufacturer: syz
[  285.868591][   T10] usb 4-1: SerialNumber: syz
[  285.872810][   T10] usb 4-1: config 0 descriptor??
[  286.030088][ T5898] usb 6-1: USB disconnect, device number 12
[  286.277858][   T10] airspy 4-1:0.0: usb_control_msg() failed -71 request 0a
[  286.280539][   T10] airspy 4-1:0.0: Could not detect board
[  286.283250][   T10] airspy 4-1:0.0: probe with driver airspy failed with error -71
[  286.287362][   T10] usb 4-1: USB disconnect, device number 21
[  286.685662][T12347] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2423'.
[  286.689279][T12347] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2423'.
[  286.692602][T12347] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2423'.
[  286.696067][T12347] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2423'.
[  286.814475][T12351] loop3: detected capacity change from 0 to 128
[  286.837731][T12355] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2426'.
[  286.839694][T12351] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  286.848186][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:3' failed: Read-only file system
[  286.859685][T12342] loop1: detected capacity change from 0 to 32768
[  286.862784][T12342] btrfs: Deprecated parameter 'usebackuproot'
[  286.865167][T12342] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  286.873816][T12351] ext4 filesystem being mounted at /538/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  286.885861][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/76b65be2-f6da-4727-8c75-0525a5b65a09.tmp-b7:3' failed: Read-only file system
[  286.894244][T12342] BTRFS error: unrecognized compression value n
[  286.900329][T12351] EXT4-fs (loop3): shut down requested (1)
[  286.905334][   T33] audit: type=1800 audit(1756823339.616:166): pid=12351 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2425" name="file1" dev="loop3" ino=12 res=0 errno=0
[  286.923200][ T8662] udevd[8662]: symlink '../../loop1' '/dev/disk/by-uuid/a6a605fc-d5f1-4e66-8595-3726e2b761d6.tmp-b7:1' failed: Read-only file system
[  286.936183][ T8139] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  287.040801][T12365] usb usb8: usbfs: interface 0 claimed by hub while 'syz.3.2430' resets device
[  287.137316][T12371] openvswitch: netlink: Unknown key attributes 2
[  287.186080][T12367] loop5: detected capacity change from 0 to 4096
[  287.219044][ T5848] udevd[5848]: symlink '../../loop5' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:5' failed: Read-only file system
[  287.267428][T12376] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  287.276015][ T5848] udevd[5848]: symlink '../../loop5' '/dev/disk/by-uuid/ab2f6cf2-a99d-4328-b186-08168e7a6b7e.tmp-b7:5' failed: Read-only file system
[  287.287358][T12367] NILFS error (device loop5): nilfs_bmap_lookup_contig: broken bmap (inode number=12)
[  287.314594][T12367] Remounting filesystem read-only
[  287.714877][T12381] loop1: detected capacity change from 0 to 32768
[  287.754395][T12381] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  287.766197][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:1' failed: Read-only file system
[  287.811445][T12381] XFS (loop1): Ending clean mount
[  287.815620][T12381] XFS (loop1): Quotacheck needed: Please wait.
[  287.860900][T12381] XFS (loop1): Quotacheck: Done.
[  287.889432][ T5850] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  288.200816][T12412] program syz.1.2447 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  288.418690][    T9] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  288.568097][   T10] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  288.571250][    T9] usb 4-1: Using ep0 maxpacket: 32
[  288.577448][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  288.593963][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  288.602937][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  288.606064][    T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  288.611201][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  288.614748][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  288.626796][    T9] usb 4-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  288.632127][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.634770][    T9] usb 4-1: Product: syz
[  288.636196][    T9] usb 4-1: Manufacturer: syz
[  288.640058][    T9] usb 4-1: SerialNumber: syz
[  288.643457][    T9] usb 4-1: config 0 descriptor??
[  288.718169][   T10] usb 6-1: Using ep0 maxpacket: 8
[  288.722341][   T10] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30
[  288.731042][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  288.735431][   T10] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  288.741607][   T10] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 255
[  288.746776][   T10] usb 6-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00
[  288.751523][   T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.756760][   T10] usb 6-1: config 0 descriptor??
[  288.851120][   T95] usb 4-1: USB disconnect, device number 22
[  288.858129][   T24] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[  289.008886][   T24] usb 2-1: Using ep0 maxpacket: 8
[  289.015832][   T24] usb 2-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10
[  289.020217][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.023488][   T24] usb 2-1: Product: syz
[  289.025260][   T24] usb 2-1: Manufacturer: syz
[  289.027146][   T24] usb 2-1: SerialNumber: syz
[  289.031675][   T24] usb 2-1: config 0 descriptor??
[  289.035728][   T24] radioshark2 2-1:0.0: Invalid radioSHARK2 device
[  289.038183][   T24] radioshark2 2-1:0.0: probe with driver radioshark2 failed with error -22
[  289.041499][   T24] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  289.171721][   T10] redragon 0003:0C45:760B.0011: unknown main item tag 0x6
[  289.174458][   T10] redragon 0003:0C45:760B.0011: item fetching failed at offset 7/133
[  289.178100][   T10] redragon 0003:0C45:760B.0011: probe with driver redragon failed with error -22
[  289.240346][   T24] usb 2-1: USB disconnect, device number 49
[  289.378421][ T5898] usb 6-1: USB disconnect, device number 13
[  289.437299][T12433] genirq: Flags mismatch irq 5. 00200000 (pcl818) vs. 00200000 (pcl812)
[  289.481644][T12435] netlink: 'syz.3.2459': attribute type 2 has an invalid length.
[  289.805032][T12443] loop3: detected capacity change from 0 to 32768
[  289.809544][T12443] XFS: noikeep mount option is deprecated.
[  289.825146][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/c496e05e-540d-4c72-b591-04d79d8b4eeb.tmp-b7:3' failed: Read-only file system
[  289.835559][T12443] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  289.848807][T12443] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  289.856905][T12443] XFS (loop3): Starting recovery (logdev: internal)
[  289.865780][T12443] XFS (loop3): Ending recovery (logdev: internal)
[  289.902356][ T8139] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  289.927211][T12455] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2465'.
[  290.013709][T12459] loop5: detected capacity change from 0 to 256
[  290.041126][T12459] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x46ae1815, utbl_chksum : 0xe619d30d)
[  290.045720][T12459] exFAT-fs (loop5): bogus allocation bitmap size(need : 2, cur : 17179869186)
[  290.204751][T12471] netlink: 212376 bytes leftover after parsing attributes in process `syz.5.2473'.
[  290.267201][T12473] loop5: detected capacity change from 0 to 4096
[  290.277539][T12473] EXT4-fs: Ignoring removed i_version option
[  290.282772][ T5848] udevd[5848]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  290.308197][T12473] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003]
[  290.311885][T12473] System zones: 0-5
[  290.321152][T12473] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  290.357155][T10278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  290.384406][T12467] loop1: detected capacity change from 0 to 32768
[  290.416857][ T6373] udevd[6373]: symlink '../../loop1' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:1' failed: Read-only file system
[  290.423411][T12467] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  290.449495][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:1' failed: Read-only file system
[  290.482507][T12467] XFS (loop1): Ending clean mount
[  290.497642][T12467] XFS (loop1): Quotacheck needed: Please wait.
[  290.568152][T12467] XFS (loop1): Quotacheck: Done.
[  290.668150][   T33] audit: type=1804 audit(1756823343.366:167): pid=12467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2471" name="/newroot/840/file0/file1" dev="loop1" ino=9286 res=1 errno=0
[  290.754467][ T5850] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  291.337122][T12489] loop3: detected capacity change from 0 to 32768
[  292.292553][T12504] loop3: detected capacity change from 0 to 32768
[  292.312621][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:3' failed: Read-only file system
[  292.342504][T12504] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  292.382000][T12504] XFS (loop3): Ending clean mount
[  292.386486][T12504] XFS (loop3): Quotacheck needed: Please wait.
[  292.445969][T12504] XFS (loop3): Quotacheck: Done.
[  292.481949][T12524] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96
[  292.507413][ T8139] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  292.736875][T12532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2494'.
[  292.863423][T12543] loop5: detected capacity change from 0 to 512
[  292.883868][ T6373] udevd[6373]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  292.901661][ T5848] udevd[5848]: symlink '../../loop5' '/dev/disk/by-label/syzkaller.tmp-b7:5' failed: Read-only file system
[  292.911163][T12543] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  292.916385][T12543] ext4 filesystem being mounted at /273/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  292.926245][T12543] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2498: corrupted inode contents
[  292.931035][T12543] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.2498: mark_inode_dirty error
[  292.935600][T12543] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.2498: corrupted inode contents
[  292.941771][T12543] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.2498: mark_inode_dirty error
[  292.986457][T10278] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  293.033348][   T95] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  293.058429][T12552] loop5: detected capacity change from 0 to 2048
[  293.073551][T12554] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  293.087005][ T5848] udevd[5848]: symlink '../../loop5' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:5' failed: Read-only file system
[  293.106530][ T5848] udevd[5848]: symlink '../../loop5' '/dev/disk/by-uuid/1a95d291-cd32-4c4d-814a-8221d1aa3beb.tmp-b7:5' failed: Read-only file system
[  293.158938][    C0] hrtimer: interrupt took 17857 ns
[  293.211360][   T95] usb 4-1: config 2 has an invalid interface number: 211 but max is 0
[  293.214660][   T95] usb 4-1: config 2 has no interface number 0
[  293.217801][   T95] usb 4-1: config 2 interface 211 altsetting 0 endpoint 0x4 has invalid maxpacket 512, setting to 64
[  293.224277][   T95] usb 4-1: config 2 interface 211 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 4
[  293.235791][   T95] usb 4-1: New USB device found, idVendor=2040, idProduct=8268, bcdDevice=27.95
[  293.241800][   T95] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.245507][   T95] usb 4-1: Product: syz
[  293.247355][   T95] usb 4-1: Manufacturer: syz
[  293.250472][   T95] usb 4-1: SerialNumber: syz
[  293.264699][T12538] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  293.277149][   T95] em28xx 4-1:2.211: New device syz syz @ 12 Mbps (2040:8268, interface 211, class 211)
[  293.282810][   T95] em28xx 4-1:2.211: Device initialization failed.
[  293.285093][   T95] em28xx 4-1:2.211: Device must be connected to a high-speed USB 2.0 port.
[  293.513033][    T9] usb 4-1: USB disconnect, device number 23
[  294.381141][T12568] tmpfs: Bad value for 'mpol'
[  294.969894][ T5884] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.080948][ T5884] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.138041][   T95] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  295.171995][ T5884] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.245501][ T5884] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.295667][   T95] usb 4-1: Using ep0 maxpacket: 16
[  295.302573][   T95] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  295.305618][   T95] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  295.316003][   T95] usb 4-1: Product: syz
[  295.317449][   T95] usb 4-1: Manufacturer: syz
[  295.328359][   T95] usb 4-1: SerialNumber: syz
[  295.340511][   T95] r8152-cfgselector 4-1: Unknown version 0x0000
[  295.342604][   T95] r8152-cfgselector 4-1: config 0 descriptor??
[  295.362553][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  295.368780][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  295.376767][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  295.381918][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  295.385247][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  295.489610][ T5884] bridge_slave_1: left allmulticast mode
[  295.492394][ T5884] bridge_slave_1: left promiscuous mode
[  295.495455][ T5884] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.518445][ T5884] bridge_slave_0: left allmulticast mode
[  295.524132][ T5884] bridge_slave_0: left promiscuous mode
[  295.526416][ T5884] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.553129][   T95] r8152-cfgselector 4-1: Needed 2 retries to read version
[  295.555394][   T95] r8152-cfgselector 4-1: Unknown version 0x0000
[  295.557578][   T95] r8152-cfgselector 4-1: bad CDC descriptors
[  295.766422][    T9] r8152-cfgselector 4-1: USB disconnect, device number 24
[  295.962299][ T5884] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  295.968739][ T5884] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  295.973566][ T5884] bond0 (unregistering): Released all slaves
[  296.112840][ T5884] IPVS: stopping backup sync thread 12126 ...
[  296.221406][T12598] chnl_net:caif_netlink_parms(): no params data found
[  296.494922][T12607] loop1: detected capacity change from 0 to 32768
[  296.559895][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:1' failed: Read-only file system
[  296.587542][T12607] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  296.622989][ T5884] hsr_slave_0: left promiscuous mode
[  296.643329][ T5884] hsr_slave_1: left promiscuous mode
[  296.651371][ T5884] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  296.653992][T12607] XFS (loop1): Ending clean mount
[  296.654625][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_0
[  296.668616][T12607] XFS (loop1): Quotacheck needed: Please wait.
[  296.684445][ T5884] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  296.701719][ T5884] batman_adv: batadv0: Removing interface: batadv_slave_1
[  296.764120][T12607] XFS (loop1): Quotacheck: Done.
[  296.827561][ T5884] veth1_macvtap: left promiscuous mode
[  296.867768][ T5884] veth0_macvtap: left promiscuous mode
[  296.878455][ T5884] veth1_vlan: left promiscuous mode
[  296.880934][ T5884] veth0_vlan: left promiscuous mode
[  296.881401][ T5850] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  297.345481][   T33] audit: type=1326 audit(1756823350.046:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.1.2526" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07458ebe9 code=0x7ffc0000
[  297.376928][   T33] audit: type=1326 audit(1756823350.056:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.1.2526" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fc07458ebe9 code=0x7ffc0000
[  297.401220][   T33] audit: type=1326 audit(1756823350.056:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.1.2526" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07458ebe9 code=0x7ffc0000
[  297.418025][   T33] audit: type=1326 audit(1756823350.056:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.1.2526" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07458ebe9 code=0x7ffc0000
[  297.432371][   T33] audit: type=1326 audit(1756823350.056:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.1.2526" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fc07458ebe9 code=0x7ffc0000
[  297.453558][   T33] audit: type=1326 audit(1756823350.056:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.1.2526" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07458ebe9 code=0x7ffc0000
[  297.466070][   T33] audit: type=1326 audit(1756823350.076:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12639 comm="syz.1.2526" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc07458ebe9 code=0x7ffc0000
[  297.488969][   T54] Bluetooth: hci2: command tx timeout
[  298.232460][ T5884] team0 (unregistering): Port device team_slave_1 removed
[  298.321029][ T5884] team0 (unregistering): Port device team_slave_0 removed
[  298.428212][   T24] usb 2-1: new high-speed USB device number 50 using dummy_hcd
[  298.595872][   T24] usb 2-1: New USB device found, idVendor=2770, idProduct=9052, bcdDevice=15.f5
[  298.613647][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  298.630079][   T24] usb 2-1: Product: syz
[  298.631932][   T24] usb 2-1: Manufacturer: syz
[  298.633920][   T24] usb 2-1: SerialNumber: syz
[  298.646482][   T24] usb 2-1: config 0 descriptor??
[  298.670030][   T24] gspca_main: sq905c-2.14.0 probing 2770:9052
[  298.862402][   T24] gspca_sq905c: sq905c_command: usb_control_msg failed (-71)
[  298.865201][   T24] sq905c 2-1:0.0: Get version command failed
[  298.867554][   T24] sq905c 2-1:0.0: probe with driver sq905c failed with error -71
[  298.873647][   T24] usb 2-1: USB disconnect, device number 50
[  299.136699][T12598] bridge0: port 1(bridge_slave_0) entered blocking state
[  299.148318][T12598] bridge0: port 1(bridge_slave_0) entered disabled state
[  299.155095][T12598] bridge_slave_0: entered allmulticast mode
[  299.166940][T12598] bridge_slave_0: entered promiscuous mode
[  299.178115][T12598] bridge0: port 2(bridge_slave_1) entered blocking state
[  299.181262][T12598] bridge0: port 2(bridge_slave_1) entered disabled state
[  299.184371][T12598] bridge_slave_1: entered allmulticast mode
[  299.192697][T12598] bridge_slave_1: entered promiscuous mode
[  299.263627][T12598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  299.270151][T12598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  299.359383][T12598] team0: Port device team_slave_0 added
[  299.364275][T12598] team0: Port device team_slave_1 added
[  299.561738][   T54] Bluetooth: hci2: command tx timeout
[  299.631513][T12598] batman_adv: batadv0: Adding interface: batadv_slave_0
[  299.634435][T12598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.696886][T12598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  299.763688][T12598] batman_adv: batadv0: Adding interface: batadv_slave_1
[  299.766475][T12598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  299.804370][T12598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  299.827766][ T5884] IPVS: stop unused estimator thread 0...
[  300.035881][T12598] hsr_slave_0: entered promiscuous mode
[  300.050544][T12598] hsr_slave_1: entered promiscuous mode
[  300.053443][T12598] debugfs: 'hsr0' already exists in 'hsr'
[  300.055771][T12598] Cannot create hsr debugfs directory
[  300.080830][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2546'.
[  300.102421][T12686] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2546'.
[  300.434548][T12598] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  300.441185][T12598] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  300.455731][T12598] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  300.465529][T12598] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  300.571508][T12598] 8021q: adding VLAN 0 to HW filter on device bond0
[  300.583890][T12711] tc_dump_action: action bad kind
[  300.608370][T12598] 8021q: adding VLAN 0 to HW filter on device team0
[  300.621175][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[  300.624262][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  300.639328][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[  300.642496][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  300.869761][T12598] 8021q: adding VLAN 0 to HW filter on device batadv0
[  301.115949][T12598] veth0_vlan: entered promiscuous mode
[  301.140513][T12598] veth1_vlan: entered promiscuous mode
[  301.176003][T12598] veth0_macvtap: entered promiscuous mode
[  301.181810][T12598] veth1_macvtap: entered promiscuous mode
[  301.188166][   T10] usb 4-1: new high-speed USB device number 25 using dummy_hcd
[  301.192040][T12598] batman_adv: batadv0: Interface activated: batadv_slave_0
[  301.206249][T12598] batman_adv: batadv0: Interface activated: batadv_slave_1
[  301.218573][   T12] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  301.237820][   T12] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  301.241390][   T12] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  301.247489][T12746] loop1: detected capacity change from 0 to 128
[  301.252270][   T12] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  301.323913][   T33] audit: type=1800 audit(1756823354.036:175): pid=12746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2563" name="file2" dev="loop1" ino=1048697 res=0 errno=0
[  301.334321][T12746] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  301.337546][T12746] FAT-fs (loop1): Filesystem has been set read-only
[  301.344107][T12746] syz.1.2563: attempt to access beyond end of device
[  301.344107][T12746] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  301.350354][T12746] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  301.352924][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.353515][T12746] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  301.356852][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.370768][   T10] usb 4-1: config 220 has an invalid interface number: 76 but max is 2
[  301.375690][   T10] usb 4-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  301.380058][   T10] usb 4-1: config 220 has no interface number 2
[  301.382636][   T10] usb 4-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  301.389381][T12746] syz.1.2563: attempt to access beyond end of device
[  301.389381][T12746] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128
[  301.401353][   T10] usb 4-1: config 220 interface 0 has no altsetting 0
[  301.404041][   T10] usb 4-1: config 220 interface 76 has no altsetting 0
[  301.410471][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  301.413927][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  301.414697][   T10] usb 4-1: config 220 interface 1 has no altsetting 0
[  301.421328][T12746] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  301.427194][T12746] syz.1.2563: attempt to access beyond end of device
[  301.427194][T12746] loop1: rw=524288, sector=2065, nr_sectors = 8 limit=128
[  301.436551][   T10] usb 4-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  301.437180][T12746] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  301.440831][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.450764][T12746] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100)
[  301.452656][T12745] syz.1.2563: attempt to access beyond end of device
[  301.452656][T12745] loop1: rw=0, sector=2065, nr_sectors = 1 limit=128
[  301.459684][   T10] usb 4-1: Product: syz
[  301.461529][   T10] usb 4-1: Manufacturer: syz
[  301.463524][T12745] Buffer I/O error on dev loop1, logical block 2065, async page read
[  301.466617][   T10] usb 4-1: SerialNumber: syz
[  301.470788][T12745] syz.1.2563: attempt to access beyond end of device
[  301.470788][T12745] loop1: rw=0, sector=2066, nr_sectors = 1 limit=128
[  301.481370][T12745] Buffer I/O error on dev loop1, logical block 2066, async page read
[  301.484436][T12745] syz.1.2563: attempt to access beyond end of device
[  301.484436][T12745] loop1: rw=0, sector=2067, nr_sectors = 1 limit=128
[  301.491137][T12745] Buffer I/O error on dev loop1, logical block 2067, async page read
[  301.498874][T12745] syz.1.2563: attempt to access beyond end of device
[  301.498874][T12745] loop1: rw=0, sector=2068, nr_sectors = 1 limit=128
[  301.506824][T12745] Buffer I/O error on dev loop1, logical block 2068, async page read
[  301.511183][T12745] syz.1.2563: attempt to access beyond end of device
[  301.511183][T12745] loop1: rw=0, sector=2069, nr_sectors = 1 limit=128
[  301.520223][T12745] Buffer I/O error on dev loop1, logical block 2069, async page read
[  301.530023][T12745] syz.1.2563: attempt to access beyond end of device
[  301.530023][T12745] loop1: rw=0, sector=2070, nr_sectors = 1 limit=128
[  301.534974][T12745] Buffer I/O error on dev loop1, logical block 2070, async page read
[  301.541234][T12745] syz.1.2563: attempt to access beyond end of device
[  301.541234][T12745] loop1: rw=0, sector=2071, nr_sectors = 1 limit=128
[  301.546640][T12745] Buffer I/O error on dev loop1, logical block 2071, async page read
[  301.553820][T12745] Buffer I/O error on dev loop1, logical block 2072, async page read
[  301.557359][T12745] Buffer I/O error on dev loop1, logical block 2065, async page read
[  301.562606][T12745] Buffer I/O error on dev loop1, logical block 2066, async page read
[  301.638364][   T54] Bluetooth: hci2: command tx timeout
[  301.681457][   T10] usb 4-1: selecting invalid altsetting 0
[  301.697563][   T10] usb 4-1: Found UVC 7.01 device syz (8086:0b07)
[  301.700293][   T10] usb 4-1: No valid video chain found.
[  301.705990][   T10] usb 4-1: selecting invalid altsetting 0
[  301.708556][   T10] usbtest 4-1:220.1: probe with driver usbtest failed with error -22
[  301.715952][   T10] usb 4-1: USB disconnect, device number 25
[  301.762073][ T5898] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  301.921978][ T5898] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  301.925441][ T5898] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  301.932475][ T5898] usb 7-1: config 220 has no interface number 2
[  301.935416][ T5898] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  301.941287][ T5898] usb 7-1: config 220 interface 0 has no altsetting 0
[  301.944315][ T5898] usb 7-1: config 220 interface 76 has no altsetting 0
[  301.947242][ T5898] usb 7-1: config 220 interface 1 has no altsetting 0
[  301.957677][ T5898] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  301.964757][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  301.978679][ T5898] usb 7-1: Product: syz
[  301.982796][ T5898] usb 7-1: Manufacturer: syz
[  301.984879][ T5898] usb 7-1: SerialNumber: syz
[  302.213460][T12755] loop1: detected capacity change from 0 to 256
[  302.214115][ T5898] usb 7-1: selecting invalid altsetting 0
[  302.220705][ T5898] usb 7-1: Found UVC 7.01 device syz (8086:0b07)
[  302.223559][ T5898] usb 7-1: No valid video chain found.
[  302.234844][T12755] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x2eabf3fa, utbl_chksum : 0xe619d30d)
[  302.240283][ T5898] usb 7-1: selecting invalid altsetting 0
[  302.242567][ T5898] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[  302.248529][ T5898] usb 7-1: USB disconnect, device number 2
[  302.495045][T12761] loop1: detected capacity change from 0 to 32768
[  302.509512][T12761] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  302.514563][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:1' failed: Read-only file system
[  302.527351][T12761] XFS (loop1): Ending clean mount
[  302.534075][T12761] XFS (loop1): Quotacheck needed: Please wait.
[  302.535170][ T5848] udevd[5848]: symlink '../../loop1' '/dev/disk/by-uuid/bfdc47fc-10d8-4eed-a562-11a831b3f791.tmp-b7:1' failed: Read-only file system
[  302.579230][T12761] XFS (loop1): Quotacheck: Done.
[  302.615499][ T5850] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  303.501683][T12790] loop1: detected capacity change from 0 to 512
[  303.718964][   T54] Bluetooth: hci2: command tx timeout
[  303.747086][T12802] IPv6: NLM_F_CREATE should be specified when creating new route
[  303.797698][T12801] loop3: detected capacity change from 0 to 2048
[  303.817479][T12801] hpfs: Bad magic ... probably not HPFS
[  304.132631][T12817] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2589'.
[  304.145145][T12817] ipvlan2: entered allmulticast mode
[  304.157743][T12817] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  304.546025][T12825] loop3: detected capacity change from 0 to 1024
[  304.550869][T12825] EXT4-fs: Ignoring removed oldalloc option
[  304.557005][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-label/syzkaller.tmp-b7:3' failed: Read-only file system
[  304.561701][T12825] EXT4-fs: Ignoring removed orlov option
[  304.565831][T12825] EXT4-fs (loop3): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  304.582138][T12825] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  304.613297][T12825] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 369:freeing already freed block (bit 23); block bitmap corrupt.
[  304.644628][ T8139] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  304.724665][T12832] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2596'.
[  304.967303][T12842] loop3: detected capacity change from 0 to 2048
[  304.979910][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-label/LinuxUDF.tmp-b7:3' failed: Read-only file system
[  304.984534][T12842] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  304.992837][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/1234567812345678.tmp-b7:3' failed: Read-only file system
[  304.998828][T12842] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  305.310396][T12813] loop6: detected capacity change from 0 to 262144
[  305.319910][T12813] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2588 (12813)
[  305.330425][T12813] BTRFS info (device loop6): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  305.334571][T12813] BTRFS info (device loop6): using xxhash64 (xxhash64-generic) checksum algorithm
[  305.373103][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-uuid/7e32c2af-f87a-45a1-bcba-64dea7c56a53.tmp-b7:6' failed: Read-only file system
[  305.462463][T12813] BTRFS info (device loop6): enabling ssd optimizations
[  305.465336][T12813] BTRFS info (device loop6): using spread ssd allocation scheme
[  305.468484][T12813] BTRFS info (device loop6): enabling free space tree
[  305.664714][T12813] BTRFS warning (device loop6): failed to trim 1 device(s), last error -512
[  305.665835][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-uuid/7e32c2af-f87a-45a1-bcba-64dea7c56a53.tmp-b7:6' failed: Read-only file system
[  305.750683][T12598] BTRFS info (device loop6): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  305.931258][T12879] sit1: entered promiscuous mode
[  305.933585][T12879] sit1: entered allmulticast mode
[  306.047530][T12882] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2609'.
[  306.242026][T12890] loop3: detected capacity change from 0 to 1024
[  306.252321][T12890] hfsplus: invalid extent max_key_len 0
[  306.254882][T12890] hfsplus: failed to load extents file
[  306.261115][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-label/untitled.tmp-b7:3' failed: Read-only file system
[  306.277736][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/4da50ae9-7d30-3220-a998-cec1f675fd4a.tmp-b7:3' failed: Read-only file system
[  306.392917][T12899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  306.535433][T12905] binder_alloc: binder_alloc_mmap_handler: 12904 200000ffc000-200000ffd000 already mapped failed -16
[  306.997059][T12928] binder: 12927:12928 ioctl c018620c 200000000380 returned -22
[  307.001085][ T5883] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  307.103305][ T2284] IPVS: starting estimator thread 0...
[  307.155523][ T5883] usb 4-1: config 0 has an invalid interface number: 41 but max is 0
[  307.159245][ T5883] usb 4-1: config 0 has no interface number 0
[  307.161881][ T5883] usb 4-1: config 0 interface 41 has no altsetting 0
[  307.174168][ T5883] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  307.180858][ T5883] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.184105][ T5883] usb 4-1: Product: syz
[  307.185835][ T5883] usb 4-1: Manufacturer: syz
[  307.187780][ T5883] usb 4-1: SerialNumber: syz
[  307.188556][T12935] IPVS: using max 80 ests per chain, 192000 per kthread
[  307.198261][ T5883] usb 4-1: config 0 descriptor??
[  307.214333][T12939] bridge1: entered promiscuous mode
[  307.216774][T12939] bridge1: entered allmulticast mode
[  307.224502][T12939] team0: Port device bridge1 added
[  307.378296][   T47] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  307.530232][   T47] usb 7-1: Using ep0 maxpacket: 8
[  307.537188][   T47] usb 7-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  307.541235][   T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  307.544515][   T47] usb 7-1: Product: syz
[  307.546256][   T47] usb 7-1: Manufacturer: syz
[  307.548411][   T47] usb 7-1: SerialNumber: syz
[  307.552444][   T47] usb 7-1: config 0 descriptor??
[  307.615546][T12954] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  307.622738][T12954] overlayfs: failed to set xattr on upper
[  307.625176][T12954] overlayfs: ...falling back to redirect_dir=nofollow.
[  307.629050][T12954] overlayfs: ...falling back to index=off.
[  307.631560][T12954] overlayfs: ...falling back to uuid=null.
[  307.634216][T12954] overlayfs: maximum fs stacking depth exceeded
[  307.648378][ T5883] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71
[  307.774743][   T47] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  307.976805][ T5883] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71
[  308.271250][T12956] netlink: 'syz.3.2641': attribute type 83 has an invalid length.
[  308.466495][ T5883] usb 4-1: USB disconnect, device number 26
[  308.647771][T12971] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2644'.
[  308.655632][T12971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2644'.
[  308.781752][   T47] gspca_sunplus: reg_w_riv err -71
[  308.783936][   T47] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[  308.811325][   T47] usb 7-1: USB disconnect, device number 3
[  309.319607][   T10] kernel write not supported for file /uinput (pid: 10 comm: kworker/0:1)
[  309.748538][T12990] loop6: detected capacity change from 0 to 512
[  309.757900][T12990] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  309.778422][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  309.787259][T12990] EXT4-fs (loop6): 1 truncate cleaned up
[  309.799715][T12990] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  309.802684][ T5848] udevd[5848]: symlink '../../loop6' '/dev/disk/by-label/syzkaller.tmp-b7:6' failed: Read-only file system
[  309.921335][T12598] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  310.191674][T13000] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  310.235909][T13004] syzkaller1: entered promiscuous mode
[  310.238724][T13004] syzkaller1: entered allmulticast mode
[  310.343044][T13009] loop1: detected capacity change from 0 to 8
[  310.398050][   T24] usb 7-1: new full-speed USB device number 4 using dummy_hcd
[  310.562716][   T24] usb 7-1: config 1 has an invalid interface number: 35 but max is 0
[  310.565452][   T24] usb 7-1: config 1 has no interface number 0
[  310.567501][   T24] usb 7-1: config 1 interface 35 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  310.576420][   T24] usb 7-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=2d.0a
[  310.581515][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  310.584250][   T24] usb 7-1: Product: syz
[  310.585651][   T24] usb 7-1: Manufacturer: syz
[  310.587228][   T24] usb 7-1: SerialNumber: syz
[  310.673250][T13025] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  310.807473][   T24] snd-usb-audio 7-1:1.35: probe with driver snd-usb-audio failed with error -71
[  310.816782][   T24] usb 7-1: USB disconnect, device number 4
[  310.898927][T13027] loop3: detected capacity change from 0 to 32768
[  310.916497][T13027] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  310.927206][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:3' failed: Read-only file system
[  310.936949][T13027] 
[  310.937811][T13027] ======================================================
[  310.940257][T13027] WARNING: possible circular locking dependency detected
[  310.943165][T13027] syzkaller #0 Not tainted
[  310.945011][T13027] ------------------------------------------------------
[  310.945230][ T5848] udevd[5848]: symlink '../../loop3' '/dev/disk/by-uuid/b1de653c-5ffc-4d88-b33b-244aab9eb3e9.tmp-b7:3' failed: Read-only file system
[  310.948446][T13027] syz.3.2670/13027 is trying to acquire lock:
[  310.948460][T13027] ffff888113ad43c0 (&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_xattr_set+0xadd/0x11f0
[  310.948502][T13027] 
[  310.948502][T13027] but task is already holding lock:
[  310.948508][T13027] ffff888113ac5df8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  310.968438][T13027] 
[  310.968438][T13027] which lock already depends on the new lock.
[  310.968438][T13027] 
[  310.972564][T13027] 
[  310.972564][T13027] the existing dependency chain (in reverse order) is:
[  310.976423][T13027] 
[  310.976423][T13027] -> #2 (&oi->ip_xattr_sem){++++}-{4:4}:
[  310.979579][T13027]        lock_acquire+0x120/0x360
[  310.981676][T13027]        down_read+0x46/0x2e0
[  310.983612][T13027]        ocfs2_init_acl+0x2f9/0x720
[  310.985807][T13027]        ocfs2_mknod+0x1321/0x2050
[  310.987868][T13027]        ocfs2_mkdir+0x191/0x440
[  310.989862][T13027]        vfs_mkdir+0x306/0x510
[  310.991857][T13027]        do_mkdirat+0x247/0x590
[  310.993870][T13027]        __x64_sys_mkdirat+0x87/0xa0
[  310.996110][T13027]        do_syscall_64+0xfa/0x3b0
[  310.998177][T13027]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.000847][T13027] 
[  311.000847][T13027] -> #1 (jbd2_handle){++++}-{0:0}:
[  311.003949][T13027]        lock_acquire+0x120/0x360
[  311.006033][T13027]        jbd2_journal_lock_updates+0xaa/0x360
[  311.008533][T13027]        __ocfs2_flush_truncate_log+0x2ba/0x10e0
[  311.011201][T13027]        ocfs2_flush_truncate_log+0x4f/0x70
[  311.013776][T13027]        ocfs2_sync_fs+0x116/0x310
[  311.015845][T13027]        sync_filesystem+0x1cf/0x230
[  311.017903][T13027]        generic_shutdown_super+0x6f/0x2c0
[  311.020310][T13027]        kill_block_super+0x44/0x90
[  311.022459][T13027]        deactivate_locked_super+0xbc/0x130
[  311.024852][T13027]        cleanup_mnt+0x425/0x4c0
[  311.026887][T13027]        task_work_run+0x1d4/0x260
[  311.028988][T13027]        exit_to_user_mode_loop+0xec/0x110
[  311.031463][T13027]        do_syscall_64+0x2bd/0x3b0
[  311.033587][T13027]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.036204][T13027] 
[  311.036204][T13027] -> #0 (&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]){+.+.}-{4:4}:
[  311.040377][T13027]        validate_chain+0xb9b/0x2140
[  311.042597][T13027]        __lock_acquire+0xab9/0xd20
[  311.044758][T13027]        lock_acquire+0x120/0x360
[  311.046805][T13027]        down_write+0x96/0x1f0
[  311.048869][T13027]        ocfs2_xattr_set+0xadd/0x11f0
[  311.051118][T13027]        ocfs2_set_acl+0x701/0x7b0
[  311.053327][T13027]        ocfs2_iop_set_acl+0x1aa/0x2a0
[  311.055631][T13027]        vfs_set_acl+0x887/0xb00
[  311.057786][T13027]        do_set_acl+0xf6/0x190
[  311.059879][T13027]        filename_setxattr+0x2e0/0x600
[  311.062266][T13027]        path_setxattrat+0x364/0x3a0
[  311.064418][T13027]        __x64_sys_setxattr+0xbc/0xe0
[  311.066602][T13027]        do_syscall_64+0xfa/0x3b0
[  311.068625][T13027]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.071184][T13027] 
[  311.071184][T13027] other info that might help us debug this:
[  311.071184][T13027] 
[  311.075396][T13027] Chain exists of:
[  311.075396][T13027]   &ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE] --> jbd2_handle --> &oi->ip_xattr_sem
[  311.075396][T13027] 
[  311.081686][T13027]  Possible unsafe locking scenario:
[  311.081686][T13027] 
[  311.084814][T13027]        CPU0                    CPU1
[  311.086954][T13027]        ----                    ----
[  311.089092][T13027]   lock(&oi->ip_xattr_sem);
[  311.091084][T13027]                                lock(jbd2_handle);
[  311.093759][T13027]                                lock(&oi->ip_xattr_sem);
[  311.096662][T13027]   lock(&ocfs2_sysfile_lock_key[TRUNCATE_LOG_SYSTEM_INODE]);
[  311.099663][T13027] 
[  311.099663][T13027]  *** DEADLOCK ***
[  311.099663][T13027] 
[  311.102969][T13027] 3 locks held by syz.3.2670/13027:
[  311.105075][T13027]  #0: ffff88803a8e6428 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  311.108682][T13027]  #1: ffff888113ac60c0 (&type->i_mutex_dir_key#15){++++}-{4:4}, at: vfs_set_acl+0x3cd/0xb00
[  311.112934][T13027]  #2: ffff888113ac5df8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  311.116985][T13027] 
[  311.116985][T13027] stack backtrace:
[  311.119413][T13027] CPU: 0 UID: 0 PID: 13027 Comm: syz.3.2670 Not tainted syzkaller #0 PREEMPT(full) 
[  311.119428][T13027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  311.119437][T13027] Call Trace:
[  311.119444][T13027]  <TASK>
[  311.119451][T13027]  dump_stack_lvl+0x189/0x250
[  311.119471][T13027]  ? __pfx_dump_stack_lvl+0x10/0x10
[  311.119486][T13027]  ? __pfx__printk+0x10/0x10
[  311.119502][T13027]  ? print_lock_name+0xde/0x100
[  311.119519][T13027]  print_circular_bug+0x2ee/0x310
[  311.119532][T13027]  check_noncircular+0x134/0x160
[  311.119545][T13027]  validate_chain+0xb9b/0x2140
[  311.119559][T13027]  ? look_up_lock_class+0x74/0x170
[  311.119577][T13027]  ? register_lock_class+0x51/0x320
[  311.119595][T13027]  __lock_acquire+0xab9/0xd20
[  311.119612][T13027]  ? ocfs2_xattr_set+0xadd/0x11f0
[  311.119627][T13027]  lock_acquire+0x120/0x360
[  311.119644][T13027]  ? ocfs2_xattr_set+0xadd/0x11f0
[  311.119660][T13027]  ? ocfs2_xattr_block_find+0x153/0x4c0
[  311.119674][T13027]  down_write+0x96/0x1f0
[  311.119687][T13027]  ? ocfs2_xattr_set+0xadd/0x11f0
[  311.119699][T13027]  ? __pfx_down_write+0x10/0x10
[  311.119706][T13027]  ? ocfs2_xattr_ibody_find+0xcb/0x7c0
[  311.119717][T13027]  ? ocfs2_xattr_set+0x334/0x11f0
[  311.119727][T13027]  ocfs2_xattr_set+0xadd/0x11f0
[  311.119741][T13027]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  311.119750][T13027]  ? vfs_set_acl+0x887/0xb00
[  311.119760][T13027]  ? filename_setxattr+0x2e0/0x600
[  311.119774][T13027]  ? path_setxattrat+0x364/0x3a0
[  311.119787][T13027]  ? __x64_sys_setxattr+0xbc/0xe0
[  311.119798][T13027]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.119819][T13027]  ? rcu_is_watching+0x15/0xb0
[  311.119831][T13027]  ? trace_kmalloc+0x1f/0xd0
[  311.119843][T13027]  ? __kmalloc_noprof+0x29b/0x4f0
[  311.119858][T13027]  ? ocfs2_set_acl+0x11c/0x7b0
[  311.119870][T13027]  ocfs2_set_acl+0x701/0x7b0
[  311.119885][T13027]  ocfs2_iop_set_acl+0x1aa/0x2a0
[  311.119898][T13027]  ? __pfx_ocfs2_iop_set_acl+0x10/0x10
[  311.119911][T13027]  ? __pfx_evm_inode_set_acl+0x10/0x10
[  311.119926][T13027]  ? __pfx_down_write+0x10/0x10
[  311.119938][T13027]  ? evm_revalidate_status+0x4f/0xb0
[  311.119951][T13027]  ? posix_acl_valid+0x352/0x3e0
[  311.119964][T13027]  vfs_set_acl+0x887/0xb00
[  311.119981][T13027]  do_set_acl+0xf6/0x190
[  311.119994][T13027]  filename_setxattr+0x2e0/0x600
[  311.120014][T13027]  ? __pfx_filename_setxattr+0x10/0x10
[  311.120032][T13027]  ? getname_flags+0x1e5/0x540
[  311.120044][T13027]  path_setxattrat+0x364/0x3a0
[  311.120088][T13027]  ? __pfx_path_setxattrat+0x10/0x10
[  311.120101][T13027]  ? do_futex+0x333/0x420
[  311.120124][T13027]  ? rcu_is_watching+0x15/0xb0
[  311.120146][T13027]  __x64_sys_setxattr+0xbc/0xe0
[  311.120157][T13027]  do_syscall_64+0xfa/0x3b0
[  311.120169][T13027]  ? lockdep_hardirqs_on+0x9c/0x150
[  311.120185][T13027]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.120196][T13027]  ? exc_page_fault+0x9f/0xf0
[  311.120213][T13027]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  311.120225][T13027] RIP: 0033:0x7f6dcc18ebe9
[  311.120238][T13027] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  311.120248][T13027] RSP: 002b:00007f6dccfe2038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  311.120260][T13027] RAX: ffffffffffffffda RBX: 00007f6dcc3c5fa0 RCX: 00007f6dcc18ebe9
[  311.120270][T13027] RDX: 0000200000000700 RSI: 0000200000002a40 RDI: 00002000000000c0
[  311.120277][T13027] RBP: 00007f6dcc211e19 R08: 0000000000000000 R09: 0000000000000000
[  311.120285][T13027] R10: 0000000000000024 R11: 0000000000000246 R12: 0000000000000000
[  311.120292][T13027] R13: 00007f6dcc3c6038 R14: 00007f6dcc3c5fa0 R15: 00007ffc79c0e8c8
[  311.120305][T13027]  </TASK>
[  311.314619][ T8139] ocfs2: Unmounting device (7,3) on (node local)
[  316.840818][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  316.844798][ T1364] ieee802154 phy1 wpan1: encryption failed: -22

VM DIAGNOSIS:
14:29:24  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000002d RBX=000000000000002d RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000013b3 RDI=00000000000013b4 RBP=00000000000003f8 RSP=ffffc90007206b30
R8 =ffff888107ca0237 R9 =1ffff11020f94046 R10=dffffc0000000000 R11=ffffffff854f3180
R12=dffffc0000000000 R13=ffffffff99afd8fd R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f31fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6dccfe26c0 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000002a40 CR3=0000000040ace000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffff0000000000 XMM01=0101010101010101 0101010000000000
XMM02=695f746e756f6d5f 7a79730032736667 XMM03=ffffffffffffffff ffffffffffffffff
XMM04=1360034e5d53002c 74696d6d6f635f63 XMM05=5cf3945eb98408b4 4938eecd7e6e9eec
XMM06=0000000000000000 00b0be19cd0096ec XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 00001b7d1475bf98 XMM09=0000000000000000 00007f6dcc212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81a02615 RBX=ffffffff81a025d4 RCX=ffff888107711cc0 RDX=0000000000000000
RSI=ffffffff8be337e0 RDI=ffffffff8be337a0 RBP=ffffc9000307f930 RSP=ffffc9000307f820
R8 =0000000000000001 R9 =0000000000000000 R10=dffffc0000000000 R11=fffffbfff1c25c21
R12=dffffc0000000000 R13=1ffff9200060ff08 R14=0000000000000200 R15=0000000000000082
RIP=ffffffff81a02603 RFL=00000093 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fc123512c80 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f6dc1e6b000 CR3=00000001160e2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffff0000000000 0000000000000000
XMM02=ffff000000000000 ffff000000000000 XMM03=ffffffffffffffff ffffffffffffff00
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000001 0000000000000d4a
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffff0000 XMM09=0000000000000006 00333a37622d706d
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
