last executing test programs:

2m10.122131188s ago: executing program 2 (id=272):
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file0\x00', 0x40, &(0x7f0000000100)=ANY=[@ANYBLOB="00ea2eb34e7ea51c9446c55a2d8fd8149af9faf44ad5b7b6ad1c94490d970e81143918946b559ce53bffdfdc795aac1209898e5826eda1962cf6e3c4c0ade52151923a70cb6eacfc"], 0x1, 0x177, &(0x7f0000000240)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
lsetxattr$trusted_overlay_origin(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, 0x0, 0x1)

2m9.972402391s ago: executing program 2 (id=273):
r0 = syz_open_dev$video4linux(&(0x7f00000000c0), 0x5, 0x80882)
r1 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=<r2=>0x0, &(0x7f00000001c0)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x4000, @fd=r0, 0x7fffffff, &(0x7f0000000500)=[{&(0x7f0000000580)="96", 0x1}], 0x1, 0x10, 0x1, {0x2}})
io_uring_enter(r1, 0x847ba, 0x0, 0xf, 0x0, 0x0)

2m9.821175129s ago: executing program 2 (id=274):
r0 = syz_open_dev$video(&(0x7f0000000080), 0x7, 0x0)
ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000100)={0x1000000, 0x59455247, 0x140, 0xf0, 0x0, @discrete={0x7fff, 0xfff}})

2m9.820767228s ago: executing program 2 (id=275):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./file0\x00', 0x20044e, &(0x7f0000000340)={[{@minixdf}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1ff}}, {@stripe}, {@noblock_validity}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6}}]}, 0x3, 0x451, &(0x7f0000000f80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000c00)='./bus\x00', 0xa00400, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000680)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

2m9.436304151s ago: executing program 2 (id=280):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0)
r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8)
ioctl$SIOCSIFHWADDR(r2, 0x5760, 0x0)

2m8.944783392s ago: executing program 2 (id=287):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x800, 0x3, 0x285}, &(0x7f00000004c0)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0})
io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0xf5)

2m8.764820779s ago: executing program 32 (id=287):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, 0x0, 0x0)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000100), 0x80000)
r2 = socket$qrtr(0x2a, 0x2, 0x0)
connect$qrtr(r2, &(0x7f0000000200)={0x2a, 0xffffffffffffffff, 0xfffffffe}, 0xc)
r3 = syz_io_uring_setup(0x497, &(0x7f0000000540)={0x0, 0x4660, 0x800, 0x3, 0x285}, &(0x7f00000004c0)=<r4=>0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd=r2, 0x0, 0x0})
io_uring_enter(r3, 0x40f9, 0x217, 0xa5, 0x0, 0xf5)

2.980222797s ago: executing program 0 (id=1604):
writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000fa461ad7e48489bffa560200130011", 0x12}], 0x1)
r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01)
setreuid(0x0, 0xee00)
ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0])

2.862609493s ago: executing program 0 (id=1605):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000500)='./file0\x00', 0x8044c0, &(0x7f0000000200), 0x3, 0x4be, &(0x7f0000000a00)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x836d9fb164f927b3)

2.44290034s ago: executing program 0 (id=1606):
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0xec, 0x62, 0xf9, 0x40, 0xf3d, 0x68aa, 0xb4ca, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xb, 0x0, 0x3, 0xf, 0x1f, 0xe7, 0x0, [], [{{0x9, 0x5, 0x5, 0x2, 0x8, 0x0, 0x3, 0x1}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x2, 0x86, 0x3}}, {{0x9, 0x5, 0x87, 0x2, 0x400, 0xb, 0x7f, 0x14}}]}}]}}]}}, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)

1.025042142s ago: executing program 3 (id=1616):
r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5)
ioctl$SG_IO(r0, 0x2285, 0x0)
writev(r0, &(0x7f0000000400)=[{&(0x7f0000000080)="aefdda9d240300005a90f57f07703aeff0f64ebbee07962c22772e11b44e65d76641cb010052f436dd2a", 0x2a}, {&(0x7f0000000040)="aa1d484ea0fb0000f7fc08fcd111fbdf23ea32db0e8f21d5bc27bd49eb067a0689fff2a41cfbf0e9d85e44", 0x2b}], 0x2)

879.448353ms ago: executing program 3 (id=1617):
r0 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)={@private1, @remote, @private0={0xfc, 0x0, '\x00', 0x1}, 0x800001, 0x6, 0xfffe, 0x100, 0x5ffffffe, 0x6820213})
setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f00000000c0)=0x8, 0x4)
r1 = dup(r0)
bind$unix(r1, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)
r2 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000040)=0x7, 0x4)
r3 = dup(r2)
bind$unix(r3, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e)

712.762862ms ago: executing program 3 (id=1618):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', <r2=>0x0})
bind$can_raw(r0, &(0x7f0000000000)={0x1d, r2}, 0x10)

626.276127ms ago: executing program 0 (id=1619):
r0 = socket$nl_sock_diag(0x10, 0x3, 0x4)
r1 = dup(r0)
sendmsg$NFT_BATCH(r1, &(0x7f0000002700)={0x0, 0x0, &(0x7f00000026c0)={&(0x7f0000002240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x28}, 0x1, 0x0, 0x0, 0x20000011}, 0x8000)

521.962033ms ago: executing program 3 (id=1620):
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'sit0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x10, 0x1, 0xa}}]}}, @TCA_RATE={0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x4)

442.144593ms ago: executing program 0 (id=1621):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f00000006c0)={[{@journal_ioprio={'journal_ioprio', 0x3d, 0x1}}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0xeb0}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@nombcache}, {@noload}, {@noquota}]}, 0x3, 0x440, &(0x7f0000000280)="$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")
setuid(0xee01)
utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x0, 0x2710}})

441.823975ms ago: executing program 3 (id=1622):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_int(r0, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4)
bind$inet6(r0, &(0x7f0000000280)={0xa, 0x4e22, 0x9, @loopback, 0x6}, 0x1c)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000040)=0x42, 0x4)
connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x23, @loopback, 0x23}, 0x1c)
sendmmsg$inet6(r0, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000003640)=[{&(0x7f0000002440)="4137a29b", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000006c0)="04124c", 0x3}], 0x1}}], 0x2, 0x4000001)
r1 = dup(r0)
read$FUSE(r1, &(0x7f00000075c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_BMAP(r1, &(0x7f0000000080)={0x18, 0x0, r2, {0x366e938f}}, 0x18)

366.342605ms ago: executing program 1 (id=1623):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c040, 0x0)
sendmsg$unix(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001600)=[{0x0}], 0x1, 0x0, 0x0, 0x20000820}, 0x890)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='nfs4\x00', 0x0, &(0x7f00000001c0)='\x01')

295.91261ms ago: executing program 1 (id=1624):
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x891e, 0x0)

295.224392ms ago: executing program 3 (id=1625):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f00000000c0)='./file1\x00', 0x1010006, &(0x7f00000002c0)={[{@quota}, {@noquota}, {@nointegrity}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'cp863'}}, {@noquota}, {@gid}, {@iocharset={'iocharset', 0x3d, 'koi8-u'}}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x24, 0x61b6, &(0x7f00000075c0)="$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")
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0xff, 0x0, &(0x7f00000007c0))
rename(&(0x7f0000000180)='./file0\x00', &(0x7f0000000a00)='./bus/file0\x00')

294.785167ms ago: executing program 0 (id=1626):
sched_setscheduler(0x0, 0x2, 0x0)
syz_mount_image$bcachefs(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x200414, &(0x7f0000000400)=ANY=[@ANYRES16], 0xff, 0x5ad0, &(0x7f000000bec0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x441, 0x108)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000001200)="18", 0x1}, {&(0x7f0000000600)="662e40f764321494290677fa286cb3", 0xf}, {&(0x7f0000000640)="d337eea44d4ecef1ba3847d72b626d63dace93fe979a769ec5d1f18b7c479660476f8aa86b1d463c1968001caec82f7e045f49ba03f1338ae2bf8fb6f7f56a091d51fcfc9e6ab2d715a7e05de5103a99a3c652183b1227c4d2a482189fa0cc499b2498329416fa18ca834ee1d84da666e1", 0x71}, {&(0x7f0000000780)="85ffe1c181fb6960658a87547185d0b366d5ec94f9eb5ca540f1cbb986d4dc0781fa6d026df76cdf4c8f0d5d6d99e2af548eda27d1a1c1fda4a22f2d008ea396580f68d23521754a422c4b7a9eb07b2f6b016d90d891d7f1", 0x58}], 0x4)

239.974416ms ago: executing program 1 (id=1627):
r0 = socket$nl_crypto(0x10, 0x3, 0x15)
sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000005940)={0xe0, 0x10, 0x50b, 0x0, 0x200, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @nested={0xc0, 0x3f, 0x0, 0x1, [@typed={0xa, 0x12d, 0x0, 0x0, @str='\x7flan1\x00'}, @nested={0xad, 0x6c, 0x0, 0x1, [@typed={0x8, 0xb5, 0x0, 0x0, @fd}, @generic="98fbed031208d914678b4dfa950c2e1f9f73532c303c9f8dc424d4220e41a298b10b260ad41aab07f25d1d65dc66b3beb3591defea88cd06b90595788bf8c75ba0099ed72f0ce2aea6a297fe555accc416309bc98c032ed7ad3e9d7fb422d0e66dc80504372f3da1d62c7813ef96196d5984e610f9d22e537ea6e72d3087d90e4cbec39e5e8e00b86a7348be68a48093119dbf21d6aa32a892f9aaf62f14da0419"]}]}]}, 0xe0}], 0x1, 0x0, 0x0, 0x804}, 0x80)

168.915816ms ago: executing program 1 (id=1628):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000540)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x301c40a, &(0x7f00000005c0)={[{@utf8}, {@utf8no}, {@shortname_winnt}, {@utf8no}, {@iocharset={'iocharset', 0x3d, 'cp936'}}, {@rodir}, {@uni_xlateno}, {@fat=@codepage={'codepage', 0x3d, '1251'}}, {@shortname_mixed}, {@uni_xlate}, {@uni_xlate}, {@utf8no}, {@shortname_lower}, {@shortname_win95}, {@shortname_mixed}, {@shortname_lower}, {@fat=@errors_continue}, {@uni_xlate}]}, 0x6, 0x2d5, &(0x7f0000000240)="$eJzs3T+LHGUcB/Df7O3tTrTYLaxEcEALq5BLa7OHJCBeZdhCLfQwCcjtIiRw4B+cTWUl2FhY+AoEwRdi4zsQbAU7IwRGZnYmM5vbXPbk9sTc59PcM8883+f5zdxwO1fccx+9Mj+6ncXdB1/+FmmaRG8Sk3iYxDh60VgUS/nycPJtAAD/Zw+LIv6sP9/PkksiIt1eWQDAFm32+d9vmz9fSFkAwBbdeu/9d/YPDm68m2Vp3Jx/fTwtf7Mvvy7P79+NT2IWd+JajOJRRPWisBvV20LZvFkURd7PSuN4fZ4fT8vk/MNf6vn3/4io8nsxinHV9fhto8q/fXBjL1vq5POyjhfq9Sdl/nqM4qXH4ZX89TX5mA7ijdc69V+NUfz6cXwas7hdFdHmv9rLsreK7/764oOyvDKf5MfTYTWuVex0j65czLcHAAAAAAAAAAAAAAAAAAAAAIDn1NV675xhVPv3lF31/js7j8qD3cga49X9eZb5pJmouz9QURR5ET80++tcy7KsqAe2+X683O9uLAgAAAAAAAAAAAAAAAAAAACX1/3PPj86nM3u3DuXRrMbQD8i/r4V8W/nmXR6Xo3TBw/rNQ9ns17dXB3T7/bETjMmiTi1jPIizum2PKtx5UTNdePHnzaaJ4lY1D3psxfdXb/WeTaap+voMFl/D4fR9KT1Q/L9IKIdM4inLbFY7Rk8rYwizvL4DdaeGm0W/6a+2nKeF6uevDm1OJmK5InCkqQz5s3fl3PVPcmTVzGo7uq6MiJtGm18dUy60fMc6TJ+8mdFYrcOAAAAAAAAAAAAAAAAAADYqvavf9ecfHBqtFcMt1YWAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFyo9v//n6GR1+ENBg/i3v3/+BIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC4BP4JAAD//47KXt4=")
syz_mount_image$fuse(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800, 0x0, 0x0, 0x0, 0x0)

89.437406ms ago: executing program 1 (id=1629):
r0 = syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = gettid()
kcmp(r1, r0, 0x5, 0xffffffffffffffff, 0xffffffffffffffff)

0s ago: executing program 1 (id=1630):
r0 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x10, 0x1, 0x22a}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000040)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x11, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1})
io_uring_enter(r0, 0x627, 0xc1040000, 0x43, 0x0, 0x0)
ioctl$I2C_RDWR(0xffffffffffffffff, 0x707, &(0x7f0000000280)={&(0x7f0000000140)=[{0x4, 0x810, 0xc9, &(0x7f0000000040)="85aed96f6e8031f08c935c11140081440ff309f6e9bf0209298e52a5b9c4513570ce06707a02d5764f1b9fc270b7232fba5de4b75fe097fec67dfe495f09f3690e592dbfce67377f9f6ae3c3d5180b0d9f83605a412549bd1442ea993b94f49388a762b18f3e86d8e199485a5b719c851dbc19df31450305912f6e32e0b884fce0aa6d8fcaa89e10bad4f236097a91b1bfd21331dbf0140f668c9229e67d9de6e038f1c210e4da2bf6581bb6ba42f39eec5bbe33f1f539df9a336e3af66098beee120c00c898418281"}], 0x1})

kernel console output (not intermixed with test programs):

][ T7629] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.587: couldn't read orphan inode 15 (err -117)
[  127.754379][ T7629] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.901675][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  128.212358][ T7642] loop1: detected capacity change from 0 to 24
[  128.421746][ T7646] loop1: detected capacity change from 0 to 16
[  128.439298][ T7646] erofs (device loop1): mounted with root inode @ nid 36.
[  128.477298][ T7646] erofs (device loop1): read error -95 @ 8200 of nid 36
[  128.562729][   T97] usb 4-1: USB disconnect, device number 5
[  128.624639][ T7654] loop0: detected capacity change from 0 to 1024
[  129.241720][ T7666] ALSA: mixer_oss: invalid OSS volume ''
[  129.337824][ T7673] loop1: detected capacity change from 0 to 256
[  129.379005][ T7673] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  129.473066][ T7679] loop1: detected capacity change from 0 to 128
[  129.709943][ T7688] loop1: detected capacity change from 0 to 4096
[  129.762176][ T7688] overlayfs: upper fs does not support tmpfile.
[  129.767983][ T7688] overlayfs: workdir/#8 already exists
[  129.920170][   T33] audit: type=1326 audit(1757323961.361:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.3.618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaf58ebe9 code=0x7ffc0000
[  129.933625][   T33] audit: type=1326 audit(1757323961.361:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.3.618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaf58ebe9 code=0x7ffc0000
[  129.960234][   T33] audit: type=1326 audit(1757323961.361:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.3.618" exe="/syz-executor" sig=0 arch=c000003e syscall=237 compat=0 ip=0x7f6aaf58ebe9 code=0x7ffc0000
[  129.968282][   T33] audit: type=1326 audit(1757323961.361:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.3.618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaf58ebe9 code=0x7ffc0000
[  129.985161][   T33] audit: type=1326 audit(1757323961.371:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.3.618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaf58ebe9 code=0x7ffc0000
[  130.012671][   T33] audit: type=1326 audit(1757323961.371:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.3.618" exe="/syz-executor" sig=0 arch=c000003e syscall=450 compat=0 ip=0x7f6aaf58ebe9 code=0x7ffc0000
[  130.022474][   T33] audit: type=1326 audit(1757323961.371:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.3.618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaf58ebe9 code=0x7ffc0000
[  130.032483][   T33] audit: type=1326 audit(1757323961.371:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7696 comm="syz.3.618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6aaf58ebe9 code=0x7ffc0000
[  130.160052][ T7708] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  130.176307][ T7708] batman_adv: batadv0: Removing interface: batadv_slave_0
[  130.189394][ T7708] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  130.242629][ T7710] loop0: detected capacity change from 0 to 1024
[  130.292467][ T7710] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  130.298542][ T7710] ext4 filesystem being mounted at /236/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.388393][ T7363] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u10:40: bg 0: block 393: padding at end of block bitmap is not set
[  130.401684][ T7363] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 1 with error 28
[  130.408239][ T7363] EXT4-fs (loop0): This should not happen!! Data will be lost
[  130.408239][ T7363] 
[  130.412442][ T7363] EXT4-fs (loop0): Total free blocks count 0
[  130.414919][ T7363] EXT4-fs (loop0): Free/Dirty block details
[  130.417274][ T7363] EXT4-fs (loop0): free_blocks=0
[  130.419346][ T7363] EXT4-fs (loop0): dirty_blocks=0
[  130.425313][ T7363] EXT4-fs (loop0): Block reservation details
[  130.428204][ T7363] EXT4-fs (loop0): i_reserved_data_blocks=0
[  130.443780][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.503604][ T7719] loop0: detected capacity change from 0 to 256
[  130.546075][ T7703] loop1: detected capacity change from 0 to 32768
[  130.600450][ T7703] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  130.671836][ T7703] XFS (loop1): Ending clean mount
[  130.687931][ T7703] XFS (loop1): Quotacheck needed: Please wait.
[  130.705844][ T7729] loop0: detected capacity change from 0 to 1024
[  130.747848][ T7703] XFS (loop1): Quotacheck: Done.
[  130.752160][ T7717] loop3: detected capacity change from 0 to 32768
[  130.784605][ T7717] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.625 (7717)
[  130.809084][ T7717] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  130.813981][ T7729] hfsplus: xattr searching failed
[  130.817993][ T7717] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  130.835062][ T7368] hfsplus: b-tree write err: -5, ino 3
[  130.853707][ T5845] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  130.931306][  T390] BTRFS warning (device loop3): checksum verify failed on logical 5328896 mirror 1 wanted 0xac8366d3d2e6f7dc04e332773638acafeccdac9b39be662d19e98924efedf548 found 0x09baaddde01c70d9f564d40d40bbd1072cb01ca9c506f6ee2b940aea4af18207 level 0
[  130.948771][ T7717] BTRFS warning (device loop3): failed to read root (objectid=4): -5
[  130.952592][ T7717] BTRFS warning (device loop3): try to load backup roots slot 1
[  130.979036][ T7717] BTRFS warning (device loop3): global root 2 0 already exists
[  130.984689][ T7717] BTRFS error (device loop3): failed to load root extent
[  130.987322][ T7717] BTRFS warning (device loop3): try to load backup roots slot 2
[  131.017959][  T390] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  131.040451][ T7717] BTRFS warning (device loop3): couldn't read tree root
[  131.043229][ T7717] BTRFS warning (device loop3): try to load backup roots slot 3
[  131.061599][ T1096] BTRFS warning (device loop3): checksum verify failed on logical 5251072 mirror 1 wanted 0x3733e4df68c3b780deac4f047b3ac85a180e047a8c6c5314b53c1b8a9369ce12 found 0x14b35fdb1819392a43b7915d2192f571ea07cbff49835ef44835d3e0976a7a91 level 0
[  131.086917][ T7717] BTRFS error (device loop3): failed to load root extent
[  131.141427][ T7717] BTRFS error (device loop3): open_ctree failed: -5
[  131.468469][ T7762] loop1: detected capacity change from 0 to 4096
[  131.475943][ T7764] comedi comedi3: 8255: I/O port conflict (0x40404f26,4)
[  131.481398][ T7764] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  131.483511][ T7764] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  131.486296][ T7764] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  131.488643][ T7764] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff7,4)
[  131.492403][ T7764] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  131.494717][ T7764] comedi comedi3: 8255: I/O port conflict (0x21,4)
[  131.496371][ T7765] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  131.497136][ T7764] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  131.508896][ T7764] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  131.512904][ T7764] comedi comedi3: 8255: I/O port conflict (0x400,4)
[  131.515467][ T7764] comedi comedi3: 8255: I/O port conflict (0x800006,4)
[  131.519283][ T7764] comedi comedi3: 8255: I/O port conflict (0x7,4)
[  131.523662][ T7764] comedi comedi3: 8255: I/O port conflict (0xb,4)
[  131.526439][ T7764] comedi comedi3: 8255: I/O port conflict (0x80402,4)
[  131.545301][ T7764] comedi comedi3: 8255: I/O port conflict (0xd,4)
[  131.551369][ T7764] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  131.557640][ T7764] comedi comedi3: 8255: I/O port conflict (0x41,4)
[  131.568164][ T7764] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  131.578319][ T7764] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  131.585539][ T7764] comedi comedi3: 8255: I/O port conflict (0x8000003,4)
[  131.589451][ T7764] comedi comedi3: 8255: I/O port conflict (0xffffffffdffffffa,4)
[  131.736783][ T7780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.644'.
[  131.902461][ T7789] loop3: detected capacity change from 0 to 4096
[  131.917188][ T7789] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  131.980322][  T795] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  132.093355][ T7795] loop3: detected capacity change from 0 to 512
[  132.132479][  T795] usb 2-1: Using ep0 maxpacket: 8
[  132.147402][  T795] usb 2-1: unable to get BOS descriptor or descriptor too short
[  132.163715][  T795] usb 2-1: config 7 has an invalid interface number: 67 but max is 0
[  132.166840][  T795] usb 2-1: config 7 has no interface number 0
[  132.183045][  T795] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  132.187035][  T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.190737][  T795] usb 2-1: Product: syz
[  132.192502][  T795] usb 2-1: Manufacturer: syz
[  132.194351][  T795] usb 2-1: SerialNumber: syz
[  132.443614][  T795] usb 2-1: USB disconnect, device number 12
[  132.523574][ T7801] loop0: detected capacity change from 0 to 32768
[  132.536660][ T7801] 
[  132.536660][ T7801]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  132.536660][ T7801] 
[  132.562694][ T7801] 
[  132.562694][ T7801]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  132.562694][ T7801] 
[  132.568971][ T7801] 
[  132.568971][ T7801]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  132.568971][ T7801] 
[  132.579854][  T117] 
[  132.579854][  T117]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  132.579854][  T117] 
[  132.592582][ T5851] 
[  132.592582][ T5851]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  132.592582][ T5851] 
[  132.598313][ T5851] 
[  132.598313][ T5851]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  132.598313][ T5851] 
[  132.613730][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  132.615657][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  132.820046][ T7812] tipc: Started in network mode
[  132.824921][ T7812] tipc: Node identity 1a88a9029de4, cluster identity 4711
[  132.828876][ T7812] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  132.833443][ T7811] tipc: Resetting bearer <eth:syzkaller0>
[  132.851472][ T7811] tipc: Disabling bearer <eth:syzkaller0>
[  132.989304][ T7808] loop0: detected capacity change from 0 to 40427
[  133.003116][ T7808] F2FS-fs (loop0): Small segment_count (9 < 1 * 24)
[  133.005652][ T7808] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  133.522436][ T7808] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  133.533838][ T7808] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  133.536901][ T7808] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  133.621569][ T5851] syz-executor: attempt to access beyond end of device
[  133.621569][ T5851] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  133.627653][ T5851] CPU: 0 UID: 0 PID: 5851 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  133.627665][ T5851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  133.627670][ T5851] Call Trace:
[  133.627674][ T5851]  <TASK>
[  133.627679][ T5851]  dump_stack_lvl+0x189/0x250
[  133.627697][ T5851]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.627707][ T5851]  ? __pfx_queue_work_on+0x10/0x10
[  133.627715][ T5851]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  133.627728][ T5851]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  133.627746][ T5851]  f2fs_handle_critical_error+0x37c/0x540
[  133.627762][ T5851]  f2fs_write_end_io+0x886/0xb60
[  133.627779][ T5851]  __submit_merged_bio+0x27a/0x6a0
[  133.627799][ T5851]  __submit_merged_write_cond+0x255/0x530
[  133.627813][ T5851]  f2fs_write_data_pages+0x261d/0x3000
[  133.627842][ T5851]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  133.627879][ T5851]  ? folio_unqueue_deferred_split+0x93/0x230
[  133.627890][ T5851]  ? folios_put_refs+0x584/0x670
[  133.627904][ T5851]  ? __pfx_folios_put_refs+0x10/0x10
[  133.627911][ T5851]  ? rcu_is_watching+0x15/0xb0
[  133.627925][ T5851]  ? __lock_acquire+0xab9/0xd20
[  133.627954][ T5851]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  133.627967][ T5851]  do_writepages+0x32e/0x550
[  133.627984][ T5851]  ? do_raw_spin_unlock+0x4d/0x240
[  133.627995][ T5851]  filemap_fdatawrite+0x199/0x240
[  133.628007][ T5851]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  133.628060][ T5851]  ? do_raw_spin_unlock+0x4d/0x240
[  133.628076][ T5851]  f2fs_sync_dirty_inodes+0x31f/0x830
[  133.628103][ T5851]  f2fs_write_checkpoint+0x93e/0x2440
[  133.628128][ T5851]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  133.628134][ T5851]  ? kasan_record_aux_stack+0xbd/0xd0
[  133.628192][ T5851]  kill_f2fs_super+0x2cc/0x6d0
[  133.628212][ T5851]  ? __pfx_kill_f2fs_super+0x10/0x10
[  133.628243][ T5851]  ? shrinker_free+0x2ce/0x3e0
[  133.628255][ T5851]  deactivate_locked_super+0xbc/0x130
[  133.628266][ T5851]  cleanup_mnt+0x425/0x4c0
[  133.628279][ T5851]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.628296][ T5851]  task_work_run+0x1d4/0x260
[  133.628315][ T5851]  ? __pfx_task_work_run+0x10/0x10
[  133.628327][ T5851]  ? __x64_sys_umount+0x122/0x160
[  133.628347][ T5851]  ? exit_to_user_mode_loop+0x40/0x130
[  133.628370][ T5851]  exit_to_user_mode_loop+0xec/0x130
[  133.628384][ T5851]  do_syscall_64+0x2bd/0xfa0
[  133.628393][ T5851]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.628404][ T5851]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.628417][ T5851]  ? exc_page_fault+0xab/0x100
[  133.628432][ T5851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  133.628443][ T5851] RIP: 0033:0x7f6932f8ff17
[  133.628482][ T5851] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  133.628493][ T5851] RSP: 002b:00007fffcb938708 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  133.628506][ T5851] RAX: 0000000000000000 RBX: 00007f6933011c05 RCX: 00007f6932f8ff17
[  133.628515][ T5851] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffcb9387c0
[  133.628522][ T5851] RBP: 00007fffcb9387c0 R08: 0000000000000000 R09: 0000000000000000
[  133.628529][ T5851] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffcb939850
[  133.628537][ T5851] R13: 00007f6933011c05 R14: 0000000000020964 R15: 00007fffcb939890
[  133.628562][ T5851]  </TASK>
[  133.628566][ T5851] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  133.741545][  T795] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  133.920239][  T795] usb 2-1: Using ep0 maxpacket: 8
[  133.925587][  T795] usb 2-1: unable to get BOS descriptor or descriptor too short
[  133.931836][  T795] usb 2-1: config 7 has an invalid interface number: 67 but max is 0
[  133.934484][  T795] usb 2-1: config 7 has no interface number 0
[  133.943798][  T795] usb 2-1: string descriptor 0 read error: -22
[  133.946546][  T795] usb 2-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  133.953371][  T795] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.112226][ T7839] loop0: detected capacity change from 0 to 2048
[  134.132048][ T7839] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  134.171986][ T7842] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  134.182952][ T5879] usb 2-1: USB disconnect, device number 13
[  135.485553][ T7873] loop1: detected capacity change from 0 to 4096
[  135.498670][ T7873] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  135.639225][ T7873] ntfs3(loop1): ino=19, mi_enum_attr
[  135.653520][ T7873] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  135.698026][ T7873] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  136.060160][ T5893] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  136.225082][ T5893] usb 4-1: New USB device found, idVendor=7de0, idProduct=676e, bcdDevice=77.db
[  136.229928][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.276903][ T5893] usb 4-1: config 0 descriptor??
[  136.376181][ T7893] ieee802154 phy0 wpan0: encryption failed: -22
[  136.501187][  T795] usb 4-1: USB disconnect, device number 6
[  136.650435][   T97] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  136.800305][   T97] usb 2-1: Using ep0 maxpacket: 8
[  136.807073][   T97] usb 2-1: unable to get BOS descriptor or descriptor too short
[  136.813133][   T97] usb 2-1: config 4 interface 0 has no altsetting 0
[  136.819201][   T97] usb 2-1: string descriptor 0 read error: -22
[  136.821943][   T97] usb 2-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  136.825535][   T97] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  136.842212][   T97] usb 2-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  136.852549][   T97] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  136.857149][   T97] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  136.859532][   T97] usb 2-1: media controller created
[  136.874853][   T97] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  137.044099][   T97] zl10353_read_register: readreg error (reg=127, ret==0)
[  137.069288][ T7900] netlink: 'syz.3.696': attribute type 1 has an invalid length.
[  137.093152][   T97] usb 2-1: USB disconnect, device number 14
[  137.279081][ T7908] loop3: detected capacity change from 0 to 16
[  137.288146][ T7908] erofs (device loop3): mounted with root inode @ nid 36.
[  137.311330][ T7908] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36
[  137.319943][ T7908] erofs (device loop3): read error -117 @ 43 of nid 36
[  137.344243][ T7912] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  137.353449][ T5879] kernel write not supported for file bpf-prog (pid: 5879 comm: kworker/0:4)
[  137.391883][ T7916] loop0: detected capacity change from 0 to 512
[  137.394897][ T7916] EXT4-fs: Ignoring removed nomblk_io_submit option
[  137.397325][ T7916] EXT4-fs: Ignoring removed bh option
[  137.438495][ T7916] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  137.452023][ T7916] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #11: comm syz.0.704: corrupted inode contents
[  137.462928][ T7916] EXT4-fs error (device loop0): ext4_dirty_inode:6538: inode #11: comm syz.0.704: mark_inode_dirty error
[  137.469429][ T7916] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.704: invalid indirect mapped block 1 (level 1)
[  137.480944][ T7916] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #11: comm syz.0.704: corrupted inode contents
[  137.505954][ T7916] EXT4-fs error (device loop0) in ext4_orphan_del:305: Corrupt filesystem
[  137.509167][ T7916] EXT4-fs error (device loop0): ext4_do_update_inode:5653: inode #11: comm syz.0.704: corrupted inode contents
[  137.520787][ T7916] EXT4-fs error (device loop0): ext4_truncate:4666: inode #11: comm syz.0.704: mark_inode_dirty error
[  137.536764][ T7916] EXT4-fs error (device loop0) in ext4_process_orphan:347: Corrupt filesystem
[  137.545896][ T7916] EXT4-fs (loop0): 1 truncate cleaned up
[  137.548538][ T7916] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  137.555557][ T7916] EXT4-fs (loop0): shut down requested (2)
[  137.602122][ T7922] sock: sock_timestamping_bind_phc: sock not bind to device
[  137.624390][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  137.956593][ T7920] loop3: detected capacity change from 0 to 32768
[  137.966069][ T7920] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.705 (7920)
[  137.990015][ T7920] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  138.041600][ T7920] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  138.334350][ T7935] loop1: detected capacity change from 0 to 4096
[  138.351768][ T7936] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  138.444831][ T7920] BTRFS info (device loop3): enabling ssd optimizations
[  138.451149][ T7920] BTRFS info (device loop3): enabling free space tree
[  138.676549][ T6660] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  138.941408][ T7957] netlink: 212264 bytes leftover after parsing attributes in process `syz.1.713'.
[  138.945154][ T7957] openvswitch: netlink: Message has 46 unknown bytes.
[  139.324236][ T7973] loop1: detected capacity change from 0 to 512
[  139.330023][ T7973] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  139.345968][ T7973] EXT4-fs (loop1): 1 truncate cleaned up
[  139.354119][ T7973] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  139.380852][ T7973] EXT4-fs error (device loop1): ext4_read_inline_dir:1476: inode #12: block 7: comm syz.1.720: path /newroot/253/bus/file0: bad entry in directory: rec_len is smaller than minimal - offset=40, inode=2085390, rec_len=0, size=80 fake=0
[  139.392231][ T7973] EXT4-fs (loop1): Remounting filesystem read-only
[  139.430512][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  139.781584][   T10] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  139.935732][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.003700][   T10] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  140.007841][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.011767][   T10] usb 2-1: Product: syz
[  140.013785][   T10] usb 2-1: Manufacturer: syz
[  140.015803][   T10] usb 2-1: SerialNumber: syz
[  140.023391][   T10] usb 2-1: config 0 descriptor??
[  140.045405][   T10] usb 2-1: ucan: probing device on interface #0
[  140.048784][   T10] usb 2-1: ucan: invalid EP count (0)
[  140.055245][   T10] usb 2-1: ucan: probe failed; try to update the device firmware
[  140.246743][   T10] usb 2-1: USB disconnect, device number 15
[  140.645358][ T8026] sctp: [Deprecated]: syz.0.744 (pid 8026) Use of struct sctp_assoc_value in delayed_ack socket option.
[  140.645358][ T8026] Use struct sctp_sack_info instead
[  141.090541][ T8042] loop0: detected capacity change from 0 to 4096
[  141.119235][ T8042] NILFS (loop0): invalid segment: Checksum error in segment payload
[  141.125291][ T8042] NILFS (loop0): trying rollback from an earlier position
[  141.146479][ T8042] NILFS (loop0): recovery complete
[  141.159256][ T8043] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  141.436873][ T8048] netlink: 60 bytes leftover after parsing attributes in process `syz.0.751'.
[  141.455321][ T8048] unsupported nlmsg_type 40
[  141.704191][ T8052] comedi comedi3: no devices specified
[  141.844306][ T8060] tipc: Started in network mode
[  141.846323][ T8060] tipc: Node identity fc02, cluster identity 4711
[  141.848518][ T8060] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  141.900359][ T8061] loop3: detected capacity change from 0 to 256
[  141.941806][ T8061] exfat: Deprecated parameter 'utf8'
[  141.943669][ T8061] exfat: Invalid uid '0xffffffff'
[  142.482427][ T8067] netlink: 'syz.0.760': attribute type 1 has an invalid length.
[  142.506170][ T8065] loop1: detected capacity change from 0 to 32768
[  142.547699][ T8065] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  142.645532][ T8065] XFS (loop1): Ending clean mount
[  142.666529][ T8065] XFS (loop1): Quotacheck needed: Please wait.
[  142.684022][ T8065] XFS (loop1): Quotacheck: Done.
[  142.713862][ T8077] loop0: detected capacity change from 0 to 2048
[  142.725756][ T8077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  142.750024][   T33] audit: type=1800 audit(1757324230.192:26): pid=8077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.761" name="file1" dev="loop0" ino=15 res=0 errno=0
[  142.763038][ T8076] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[  142.773119][ T5845] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  142.776680][   T33] audit: type=1800 audit(1757324230.202:27): pid=8077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.761" name="file1" dev="loop0" ino=15 res=0 errno=0
[  142.781584][ T8076] EXT4-fs (loop0): Remounting filesystem read-only
[  142.787105][ T8076] EXT4-fs (loop0): error restoring inline_data for inode -- potential data loss! (inode 15, error -30)
[  142.893520][ T8086] loop3: detected capacity change from 0 to 764
[  142.903261][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.156363][ T8102] loop0: detected capacity change from 0 to 256
[  143.192920][ T8102] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xf6e00961, utbl_chksum : 0xe619d30d)
[  143.278407][ T8093] loop1: detected capacity change from 0 to 32768
[  143.291973][ T8093] read_mapping_page failed!
[  143.293893][ T8093] diRead: diIAGRead returned -5
[  143.457390][ T8117] loop1: detected capacity change from 0 to 256
[  143.475647][   T10] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  143.502118][ T8117] FAT-fs (loop1): Directory bread(block 64) failed
[  143.507445][ T8117] FAT-fs (loop1): Directory bread(block 65) failed
[  143.513938][ T8117] FAT-fs (loop1): Directory bread(block 66) failed
[  143.517177][ T8117] FAT-fs (loop1): Directory bread(block 67) failed
[  143.526510][ T8117] FAT-fs (loop1): Directory bread(block 68) failed
[  143.529224][ T8117] FAT-fs (loop1): Directory bread(block 69) failed
[  143.540369][ T8117] FAT-fs (loop1): Directory bread(block 70) failed
[  143.543074][ T8117] FAT-fs (loop1): Directory bread(block 71) failed
[  143.545814][ T8117] FAT-fs (loop1): Directory bread(block 72) failed
[  143.548552][ T8117] FAT-fs (loop1): Directory bread(block 73) failed
[  143.735851][   T10] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[  143.739166][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.753603][   T10] usb 4-1: Product: syz
[  143.755333][   T10] usb 4-1: Manufacturer: syz
[  143.756981][   T10] usb 4-1: SerialNumber: syz
[  143.926839][   T10] usb 4-1: config 0 descriptor??
[  143.984225][   T10] ch341 4-1:0.0: ch341-uart converter detected
[  144.224704][ T8131] loop1: detected capacity change from 0 to 32768
[  144.244248][ T8131] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  144.276816][ T8131] XFS (loop1): Ending clean mount
[  144.318723][ T5845] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  144.641746][ T8147] loop0: detected capacity change from 0 to 128
[  144.814127][   T97] IPVS: starting estimator thread 0...
[  144.816795][ T8151] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  145.164890][   T10] usb 4-1: failed to send control message: -71
[  145.167452][   T10] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[  145.177717][   T10] usb 4-1: USB disconnect, device number 7
[  145.181473][   T10] ch341 4-1:0.0: device disconnected
[  145.240274][ T8155] IPVS: using max 64 ests per chain, 153600 per kthread
[  145.347904][ T8166] loop1: detected capacity change from 0 to 16
[  145.354985][ T8166] erofs (device loop1): mounted with root inode @ nid 36.
[  147.176222][ T8189] loop1: detected capacity change from 0 to 128
[  147.177844][ T8190] loop3: detected capacity change from 0 to 256
[  147.179402][ T8189] EXT4-fs: Ignoring removed nobh option
[  147.185670][ T8190] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  147.205860][ T8189] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  147.226438][ T8189] ext4 filesystem being mounted at /278/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  147.388366][ T5845] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  147.394629][ T8195] loop0: detected capacity change from 0 to 4096
[  147.418049][ T8195] ntfs3(loop0): ino=3, Correct links count -> 2.
[  147.831125][   T10] IPVS: starting estimator thread 0...
[  147.867332][ T8195] ntfs3(loop0): ino=1a, mi_enum_attr
[  147.869526][ T8195] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  147.920978][ T8200] IPVS: using max 43 ests per chain, 103200 per kthread
[  148.290567][ T8204] loop1: detected capacity change from 0 to 32768
[  148.330353][ T8204] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  148.393288][ T8208] loop0: detected capacity change from 0 to 32768
[  148.398411][ T8204] XFS (loop1): Ending clean mount
[  148.432282][ T8208] JBD2: Ignoring recovery information on journal
[  148.554988][ T8208] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  148.577061][ T8208] (syz.0.810,8208,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is smaller than minimal - offset=0, inode=51539607617, rec_len=0, name_len=0
[  148.594651][ T5845] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  148.692459][ T5851] ocfs2: Unmounting device (7,0) on (node local)
[  149.073836][ T8241] loop0: detected capacity change from 0 to 8
[  149.127682][ T8241] SQUASHFS error: xz decompression failed, data probably corrupt
[  149.145708][ T8241] SQUASHFS error: Failed to read block 0x108: -5
[  149.148549][ T8241] SQUASHFS error: Unable to read metadata cache entry [106]
[  149.155154][ T8241] SQUASHFS error: Unable to read inode 0x11f
[  149.739736][ T8254] loop0: detected capacity change from 0 to 2048
[  149.798681][ T8254] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.347344][ T8266] loop0: detected capacity change from 0 to 40427
[  150.358576][ T8266] F2FS-fs (loop0): Image doesn't support compression
[  150.363860][ T8266] F2FS-fs (loop0): invalid crc value
[  150.458985][ T8266] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  150.467136][ T8266] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  150.519067][ T5851] syz-executor: attempt to access beyond end of device
[  150.519067][ T5851] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  150.535866][ T5851] CPU: 0 UID: 0 PID: 5851 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  150.535886][ T5851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  150.535895][ T5851] Call Trace:
[  150.535901][ T5851]  <TASK>
[  150.535907][ T5851]  dump_stack_lvl+0x189/0x250
[  150.535931][ T5851]  ? __pfx_dump_stack_lvl+0x10/0x10
[  150.535947][ T5851]  ? __pfx_queue_work_on+0x10/0x10
[  150.535958][ T5851]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  150.535978][ T5851]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  150.536008][ T5851]  f2fs_handle_critical_error+0x37c/0x540
[  150.536033][ T5851]  f2fs_write_end_io+0x886/0xb60
[  150.536063][ T5851]  __submit_merged_bio+0x27a/0x6a0
[  150.536087][ T5851]  __submit_merged_write_cond+0x255/0x530
[  150.536111][ T5851]  f2fs_write_data_pages+0x261d/0x3000
[  150.536158][ T5851]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  150.536210][ T5851]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.536262][ T5851]  ? folios_put_refs+0x58b/0x670
[  150.536283][ T5851]  ? __pfx_folios_put_refs+0x10/0x10
[  150.536296][ T5851]  ? rcu_is_watching+0x15/0xb0
[  150.536317][ T5851]  ? __lock_acquire+0xab9/0xd20
[  150.536347][ T5851]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  150.536388][ T5851]  do_writepages+0x32e/0x550
[  150.536417][ T5851]  ? do_raw_spin_unlock+0x4d/0x240
[  150.536437][ T5851]  filemap_fdatawrite+0x199/0x240
[  150.536456][ T5851]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  150.536520][ T5851]  ? do_raw_spin_unlock+0x4d/0x240
[  150.536539][ T5851]  f2fs_sync_dirty_inodes+0x31f/0x830
[  150.536566][ T5851]  f2fs_write_checkpoint+0x93e/0x2440
[  150.536579][ T5851]  ? __lock_acquire+0xab9/0xd20
[  150.536622][ T5851]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  150.536689][ T5851]  kill_f2fs_super+0x2cc/0x6d0
[  150.536709][ T5851]  ? __pfx_kill_f2fs_super+0x10/0x10
[  150.536738][ T5851]  ? shrinker_free+0x2ce/0x3e0
[  150.536756][ T5851]  deactivate_locked_super+0xbc/0x130
[  150.536773][ T5851]  cleanup_mnt+0x425/0x4c0
[  150.536787][ T5851]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.536802][ T5851]  task_work_run+0x1d4/0x260
[  150.536823][ T5851]  ? __pfx_task_work_run+0x10/0x10
[  150.536837][ T5851]  ? __x64_sys_umount+0x122/0x160
[  150.536857][ T5851]  ? exit_to_user_mode_loop+0x40/0x130
[  150.536878][ T5851]  exit_to_user_mode_loop+0xec/0x130
[  150.536896][ T5851]  do_syscall_64+0x2bd/0xfa0
[  150.536908][ T5851]  ? lockdep_hardirqs_on+0x9c/0x150
[  150.536919][ T5851]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.536932][ T5851]  ? exc_page_fault+0xab/0x100
[  150.536948][ T5851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  150.536960][ T5851] RIP: 0033:0x7f6932f8ff17
[  150.536973][ T5851] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  150.536984][ T5851] RSP: 002b:00007fffcb938708 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  150.536998][ T5851] RAX: 0000000000000000 RBX: 00007f6933011c05 RCX: 00007f6932f8ff17
[  150.537007][ T5851] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffcb9387c0
[  150.537014][ T5851] RBP: 00007fffcb9387c0 R08: 0000000000000000 R09: 0000000000000000
[  150.537022][ T5851] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffcb939850
[  150.537031][ T5851] R13: 00007f6933011c05 R14: 0000000000024b62 R15: 00007fffcb939890
[  150.537058][ T5851]  </TASK>
[  150.540041][ T5851] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  150.934011][ T8299] netlink: 8 bytes leftover after parsing attributes in process `syz.3.843'.
[  151.119853][ T8311] loop1: detected capacity change from 0 to 256
[  151.128020][ T8311] exfat: Deprecated parameter 'namecase'
[  151.150326][ T8311] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  151.222976][ T8309] veth3: entered promiscuous mode
[  151.224936][ T8309] veth3: entered allmulticast mode
[  152.417437][ T8329] loop0: detected capacity change from 0 to 1764
[  152.451162][ T8329] iso9660: Corrupted directory entry in block 2 of inode 1920
[  152.477023][ T8335] loop3: detected capacity change from 0 to 2048
[  152.487938][ T8335] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  152.523822][ T6660] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.662390][ T8344] loop3: detected capacity change from 0 to 2048
[  152.667698][ T8344] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found
[  152.679197][ T8344] UDF-fs: Scanning with blocksize 512 failed
[  152.695933][ T8344] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  152.815973][ T8346] loop0: detected capacity change from 0 to 16384
[  152.852895][ T8346] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section journal_v2: journal bucket at sector 0
[  152.852895][ T8346] journal_v2 (size 24):
[  152.852895][ T8346] Buckets:  0-8
[  152.852895][ T8346] 
[  152.920482][ T8346] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[  153.248048][ T8361] macvlan2: entered promiscuous mode
[  153.252574][ T8361] macvlan2: entered allmulticast mode
[  153.256336][ T8362] netlink: 'syz.0.869': attribute type 4 has an invalid length.
[  153.280895][ T8362] netlink: 'syz.0.869': attribute type 4 has an invalid length.
[  153.315797][ T8365] vivid-003: disconnect
[  153.322143][ T8364] vivid-003: reconnect
[  153.379576][ T8369] loop3: detected capacity change from 0 to 256
[  153.422105][ T8369] FAT-fs (loop3): Directory bread(block 64) failed
[  153.424115][ T8369] FAT-fs (loop3): Directory bread(block 65) failed
[  153.426577][ T8369] FAT-fs (loop3): Directory bread(block 66) failed
[  153.453032][ T8369] FAT-fs (loop3): Directory bread(block 67) failed
[  153.455513][ T8369] FAT-fs (loop3): Directory bread(block 68) failed
[  153.457594][ T8369] FAT-fs (loop3): Directory bread(block 69) failed
[  153.464430][ T8369] FAT-fs (loop3): Directory bread(block 70) failed
[  153.465460][ T8376] loop0: detected capacity change from 0 to 256
[  153.467468][ T8369] FAT-fs (loop3): Directory bread(block 71) failed
[  153.480799][ T8369] FAT-fs (loop3): Directory bread(block 72) failed
[  153.483421][ T8369] FAT-fs (loop3): Directory bread(block 73) failed
[  153.514078][ T8376] FAT-fs (loop0): Directory bread(block 64) failed
[  153.516847][ T8376] FAT-fs (loop0): Directory bread(block 65) failed
[  153.519568][ T8376] FAT-fs (loop0): Directory bread(block 66) failed
[  153.526089][ T8376] FAT-fs (loop0): Directory bread(block 67) failed
[  153.528748][ T8376] FAT-fs (loop0): Directory bread(block 68) failed
[  153.532196][ T8376] FAT-fs (loop0): Directory bread(block 69) failed
[  153.534846][ T8376] FAT-fs (loop0): Directory bread(block 70) failed
[  153.538708][ T8376] FAT-fs (loop0): Directory bread(block 71) failed
[  153.548902][ T8376] FAT-fs (loop0): Directory bread(block 72) failed
[  153.554298][ T8376] FAT-fs (loop0): Directory bread(block 73) failed
[  153.579909][ T8380] loop1: detected capacity change from 0 to 16
[  153.743353][ T8380] erofs (device loop1): mounted with root inode @ nid 36.
[  154.209734][ T8389] loop0: detected capacity change from 0 to 32768
[  154.218195][ T8389] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  154.267682][ T8389] XFS (loop0): Ending clean mount
[  154.273808][ T8389] XFS (loop0): Quotacheck needed: Please wait.
[  154.313768][ T8389] XFS (loop0): Quotacheck: Done.
[  154.372834][ T8412] warning: `syz.3.888' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  154.402966][ T5851] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  154.576098][ T8416] loop3: detected capacity change from 0 to 1024
[  154.632732][ T8416] hfsplus: catalog searching failed
[  155.086792][ T8426] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  156.285577][ T8433] netlink: 'syz.3.897': attribute type 1 has an invalid length.
[  156.288136][ T8433] netlink: 'syz.3.897': attribute type 2 has an invalid length.
[  156.413925][ T8428] loop0: detected capacity change from 0 to 32768
[  156.439279][   T33] audit: type=1800 audit(1757324243.882:28): pid=8428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.895" name="file1" dev="loop0" ino=4 res=0 errno=0
[  156.448343][ T8428] ERROR: (device loop0): xtSearch: xt_getpage: xtree page corrupt
[  156.448343][ T8428] 
[  156.456944][ T8428] ERROR: (device loop0): remounting filesystem as read-only
[  156.459842][ T8428] xtLookup: xtSearch returned -5
[  156.472113][ T8428] ERROR: (device loop0): xtSearch: xt_getpage: xtree page corrupt
[  156.472113][ T8428] 
[  156.476243][ T8428] xtLookup: xtSearch returned -5
[  156.482578][ T8428] ERROR: (device loop0): xtSearch: xt_getpage: xtree page corrupt
[  156.482578][ T8428] 
[  156.486962][ T8428] ERROR: (device loop0): xtSearch: xt_getpage: xtree page corrupt
[  156.486962][ T8428] 
[  156.491233][ T8428] xtLookup: xtSearch returned -5
[  156.493286][ T8428] ERROR: (device loop0): xtSearch: xt_getpage: xtree page corrupt
[  156.493286][ T8428] 
[  156.584288][   T52] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  156.730328][   T52] usb 4-1: Using ep0 maxpacket: 32
[  156.736847][   T52] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  156.740674][   T52] usb 4-1: config 0 has no interface number 0
[  156.752397][   T52] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  156.756340][   T52] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.759391][   T52] usb 4-1: Product: syz
[  156.763225][   T52] usb 4-1: Manufacturer: syz
[  156.764996][   T52] usb 4-1: SerialNumber: syz
[  156.778130][   T52] usb 4-1: config 0 descriptor??
[  156.784204][   T52] smsc95xx v2.0.0
[  157.000279][ T5893] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  157.172278][ T5893] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  157.175536][ T5893] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  157.181229][ T5893] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  157.184648][ T5893] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67
[  157.187273][ T5893] usb 1-1: SerialNumber: syz
[  157.282669][ T8447] netlink: 'syz.1.904': attribute type 1 has an invalid length.
[  157.405996][ T5893] usb 1-1: 0:2 : does not exist
[  157.407988][ T8453] netlink: 'syz.1.907': attribute type 5 has an invalid length.
[  157.417028][ T8453] netlink: 176 bytes leftover after parsing attributes in process `syz.1.907'.
[  157.428729][ T5893] usb 1-1: USB disconnect, device number 9
[  157.472910][ T8457] capability: warning: `syz.1.909' uses deprecated v2 capabilities in a way that may be insecure
[  157.493458][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  157.602454][   T52] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout
[  157.804990][   T52] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  157.810310][   T52] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[  157.815434][   T52] usb 4-1: USB disconnect, device number 8
[  158.028130][ T8463] loop0: detected capacity change from 0 to 1024
[  158.060393][ T8463] hfsplus: bad catalog entry type
[  158.078329][ T7368] hfsplus: b-tree write err: -5, ino 4
[  158.980396][ T5893] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  159.196976][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  159.208896][ T5893] usb 4-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  159.231973][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  159.320590][ T5893] usb 4-1: config 0 descriptor??
[  159.734580][ T5893] dragonrise 0003:0079:0006.0005: item fetching failed at offset 4/5
[  159.738046][ T5893] dragonrise 0003:0079:0006.0005: parse failed
[  159.742347][ T5893] dragonrise 0003:0079:0006.0005: probe with driver dragonrise failed with error -22
[  159.945192][ T5893] usb 4-1: USB disconnect, device number 9
[  160.070219][   T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  160.240317][   T10] usb 1-1: Using ep0 maxpacket: 32
[  160.244890][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  160.248987][   T10] usb 1-1: config 128 has an invalid interface number: 127 but max is 3
[  160.252719][   T10] usb 1-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config
[  160.256768][   T10] usb 1-1: config 128 has 1 interface, different from the descriptor's value: 4
[  160.260739][   T10] usb 1-1: config 128 has no interface number 0
[  160.263263][   T10] usb 1-1: config 128 interface 127 altsetting 14 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  160.268394][   T10] usb 1-1: config 128 interface 127 has no altsetting 0
[  160.275300][   T10] usb 1-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55
[  160.278865][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.282420][   T10] usb 1-1: Product: syz
[  160.284141][   T10] usb 1-1: Manufacturer: syz
[  160.285987][   T10] usb 1-1: SerialNumber: syz
[  160.425952][ T8514] loop1: detected capacity change from 0 to 1024
[  160.445071][ T8514] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  160.515707][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.524861][ T8518] loop3: detected capacity change from 0 to 512
[  160.545215][ T8518] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  160.554950][ T8518] UDF-fs: Scanning with blocksize 512 failed
[  160.568147][ T8518] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  160.572914][ T8518] UDF-fs: Scanning with blocksize 1024 failed
[  160.575957][ T8518] UDF-fs: warning (device loop3): udf_load_vrs: No VRS found
[  160.579866][   T10] usb 1-1: USB disconnect, device number 10
[  160.583583][ T8518] UDF-fs: Scanning with blocksize 2048 failed
[  160.598399][ T8518] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  160.612272][ T8518] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  160.630039][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:128.127/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  160.908292][ T8535] loop3: detected capacity change from 0 to 256
[  160.927617][ T8535] FAT-fs (loop3): Directory bread(block 64) failed
[  160.930960][ T8535] FAT-fs (loop3): Directory bread(block 65) failed
[  160.933601][ T8535] FAT-fs (loop3): Directory bread(block 66) failed
[  160.936424][ T8535] FAT-fs (loop3): Directory bread(block 67) failed
[  160.939050][ T8535] FAT-fs (loop3): Directory bread(block 68) failed
[  160.945242][ T8535] FAT-fs (loop3): Directory bread(block 69) failed
[  160.948005][ T8535] FAT-fs (loop3): Directory bread(block 70) failed
[  160.950909][ T8535] FAT-fs (loop3): Directory bread(block 71) failed
[  160.953502][ T8535] FAT-fs (loop3): Directory bread(block 72) failed
[  160.954363][ T8536] loop1: detected capacity change from 0 to 4096
[  160.956076][ T8535] FAT-fs (loop3): Directory bread(block 73) failed
[  160.970021][ T8536] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  160.986832][ T8536] ntfs3(loop1): ino=1a, mi_enum_attr
[  160.990488][ T8536] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  161.010544][   T33] audit: type=1800 audit(1757324248.452:29): pid=8536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.944" name="file1" dev="loop1" ino=30 res=0 errno=0
[  161.025979][ T8536] ntfs3(loop1): ino=1e, "file1" ntfs3_write_inode failed, -22.
[  161.041440][   T33] audit: type=1800 audit(1757324248.462:30): pid=8536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.944" name="file1" dev="loop1" ino=30 res=0 errno=0
[  161.056135][ T8536] ntfs3(loop1): ino=1e, "file1" ntfs3_write_inode failed, -22.
[  161.204266][ T8546] loop1: detected capacity change from 0 to 128
[  161.220965][ T8546] EXT4-fs (loop1): Test dummy encryption mode enabled
[  161.231492][ T8546] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  161.236322][ T8546] ext4 filesystem being mounted at /333/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  161.259214][ T8549] vivid-001: disconnect
[  161.270811][ T8548] vivid-001: reconnect
[  161.320589][ T5893] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  161.508532][ T5893] usb 4-1: Using ep0 maxpacket: 32
[  161.529438][ T5893] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  161.558504][ T8546] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  161.579537][ T5893] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  161.603078][ T5893] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  161.623533][ T5893] usb 4-1: Product: syz
[  161.629964][ T5893] usb 4-1: Manufacturer: syz
[  161.641163][ T5893] usb 4-1: SerialNumber: syz
[  161.653120][ T5893] usb 4-1: config 0 descriptor??
[  161.657961][ T8538] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  161.722907][ T8561] loop0: detected capacity change from 0 to 4096
[  161.802850][ T8562] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  162.049544][ T5893] usb 4-1: USB disconnect, device number 10
[  162.632844][ T5845] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  162.927532][ T8580] netlink: 8 bytes leftover after parsing attributes in process `syz.3.961'.
[  163.149190][ T8585] loop3: detected capacity change from 0 to 4096
[  163.416847][ T8576] loop1: detected capacity change from 0 to 131072
[  163.423237][ T8576] F2FS-fs (loop1): Wrong CP boundary, start(512) end(1536) blocks(0)
[  163.425963][ T8576] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  163.440646][ T8576] F2FS-fs (loop1): invalid crc value
[  163.474998][ T8585] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  163.479925][ T8576] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  163.484956][ T8576] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  163.487482][ T8576] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4
[  163.508382][ T8585] ntfs3(loop3): ino=0, "file0" ni_find_attr
[  163.792718][ T8597] loop3: detected capacity change from 0 to 128
[  163.830638][   T33] audit: type=1800 audit(1757324251.272:31): pid=8597 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.967" name="bus" dev="loop3" ino=1048672 res=0 errno=0
[  163.878320][ T8597] syz.3.967: attempt to access beyond end of device
[  163.878320][ T8597] loop3: rw=0, sector=121, nr_sectors = 920 limit=128
[  163.972207][ T8603] loop0: detected capacity change from 0 to 2048
[  164.002999][ T8603] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  164.053905][ T5851] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz-executor: bg 0: block 234: padding at end of block bitmap is not set
[  164.065130][ T5851] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  164.091033][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  164.197681][ T8614] netlink: 'syz.0.974': attribute type 5 has an invalid length.
[  164.212395][ T8614] netlink: 'syz.0.974': attribute type 9 has an invalid length.
[  164.215443][ T8614] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.974'.
[  164.227250][ T8616] loop3: detected capacity change from 0 to 1024
[  164.272703][ T8616] hfsplus: extend alloc file! (8192,8,110)
[  164.526167][ T8628] loop3: detected capacity change from 0 to 1024
[  164.536167][ T8628] hfsplus: bad catalog entry type
[  165.142113][ T8649] loop3: detected capacity change from 0 to 1024
[  165.572435][ T8673] MTD: Attempt to mount non-MTD device "/dev/nullb0"
[  165.578065][ T8673] cramfs: wrong magic
[  166.009282][ T8685] loop1: detected capacity change from 0 to 512
[  166.058291][ T8685] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm syz.1.1007: bg 0: block 5: invalid block bitmap
[  166.067758][ T8685] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  166.073372][ T8685] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1007: invalid indirect mapped block 3 (level 2)
[  166.080468][ T8685] EXT4-fs (loop1): 2 truncates cleaned up
[  166.083365][ T8685] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.115974][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.646484][   T33] audit: type=1326 audit(1757324254.092:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.1.1017" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a238ebe9 code=0x7fc00000
[  167.269412][   T33] audit: type=1326 audit(1757324254.712:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.1.1017" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a238ebe9 code=0x7fc00000
[  167.276738][   T33] audit: type=1326 audit(1757324254.712:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.1.1017" exe="/syz-executor" sig=0 arch=c000003e syscall=293 compat=0 ip=0x7f93a238ebe9 code=0x7fc00000
[  167.285216][   T33] audit: type=1326 audit(1757324254.712:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.1.1017" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a238ebe9 code=0x7fc00000
[  167.291792][   T33] audit: type=1326 audit(1757324254.712:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.1.1017" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a238ebe9 code=0x7fc00000
[  167.299090][   T33] audit: type=1326 audit(1757324254.712:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.1.1017" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a238ebe9 code=0x7fc00000
[  167.308409][   T33] audit: type=1326 audit(1757324254.712:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.1.1017" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a238ebe9 code=0x7fc00000
[  167.321803][   T33] audit: type=1326 audit(1757324254.712:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.1.1017" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a238ebe9 code=0x7fc00000
[  167.334850][   T33] audit: type=1326 audit(1757324254.712:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8708 comm="syz.1.1017" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a238ebe9 code=0x7fc00000
[  167.401365][   T52] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  167.580241][   T52] usb 1-1: Using ep0 maxpacket: 32
[  167.584541][   T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  167.588681][   T52] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  167.594632][   T52] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  167.598115][   T52] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.605412][   T52] usb 1-1: config 0 descriptor??
[  167.774233][ T8730] loop3: detected capacity change from 0 to 32768
[  167.780266][   T97] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  167.816101][ T8730] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  167.828382][ T8730] (syz.3.1026,8730,0):ocfs2_reconfigure:634 ERROR: Cannot change data mode on remount
[  167.858668][ T6660] ocfs2: Unmounting device (7,3) on (node local)
[  167.933337][   T97] usb 2-1: config 0 has an invalid interface number: 176 but max is 0
[  167.936652][   T97] usb 2-1: config 0 has no interface number 0
[  167.939159][   T97] usb 2-1: config 0 interface 176 altsetting 25 has 1 endpoint descriptor, different from the interface descriptor's value: 23
[  167.961179][   T97] usb 2-1: config 0 interface 176 has no altsetting 0
[  167.967874][   T97] usb 2-1: New USB device found, idVendor=0499, idProduct=1039, bcdDevice= c.76
[  167.972612][   T97] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.975833][   T97] usb 2-1: Product: syz
[  167.977506][   T97] usb 2-1: Manufacturer: syz
[  167.979344][   T97] usb 2-1: SerialNumber: syz
[  168.002717][   T97] usb 2-1: config 0 descriptor??
[  168.005623][ T8728] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  168.033383][   T52] savu 0003:1E7D:2D5A.0006: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  168.214291][   T97] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  168.443621][   T52] usb 1-1: USB disconnect, device number 11
[  168.612755][   T97] usb 2-1: USB disconnect, device number 16
[  169.026828][ T8740] binder_alloc: binder_alloc_mmap_handler: 8739 200000ffc000-200000ffd000 already mapped failed -16
[  169.173374][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  169.173385][   T33] audit: type=1326 audit(1757324256.622:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8745 comm="syz.1.1032" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f93a238ebe9 code=0x0
[  169.362804][ T8761] Device name not specified.
[  169.362804][ T8761] 
[  169.373016][ T8742] loop3: detected capacity change from 0 to 32768
[  169.417533][ T8742] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  169.464210][ T8767] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  169.467065][ T8742] XFS (loop3): Ending clean mount
[  169.536344][ T8777] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1043'.
[  169.552779][ T6660] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  169.839314][ T8791] loop1: detected capacity change from 0 to 2048
[  169.848076][ T8789] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1051'.
[  169.874371][ T8791] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  170.108187][   T33] audit: type=1326 audit(1757324257.552:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.0.1060" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6932f8ebe9 code=0x7ffc0000
[  170.115937][   T33] audit: type=1326 audit(1757324257.552:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.0.1060" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6932f8ebe9 code=0x7ffc0000
[  170.122832][   T33] audit: type=1326 audit(1757324257.552:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.0.1060" exe="/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f6932f8ebe9 code=0x7ffc0000
[  170.129389][   T33] audit: type=1326 audit(1757324257.552:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.0.1060" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6932f8ebe9 code=0x7ffc0000
[  170.139170][   T33] audit: type=1326 audit(1757324257.562:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8810 comm="syz.0.1060" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6932f8ebe9 code=0x7ffc0000
[  170.300948][ T8821] loop0: detected capacity change from 0 to 1024
[  170.436579][   T33] audit: type=1326 audit(1757324257.882:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8827 comm="syz.0.1068" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6932f8ebe9 code=0x7ffc0000
[  170.451988][   T33] audit: type=1326 audit(1757324257.882:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8827 comm="syz.0.1068" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6932f8ebe9 code=0x7ffc0000
[  170.459359][   T33] audit: type=1326 audit(1757324257.892:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8827 comm="syz.0.1068" exe="/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f6932f8ebe9 code=0x7ffc0000
[  170.468142][   T33] audit: type=1326 audit(1757324257.892:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8827 comm="syz.0.1068" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6932f8ebe9 code=0x7ffc0000
[  170.937416][ T8841] loop3: detected capacity change from 0 to 512
[  171.069374][ T8841] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  171.073375][ T8841] ext4 filesystem being mounted at /210/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  171.086403][ T8841] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.162279][ T8838] could not allocate digest TFM handle md5-generic
[  171.278914][ T8852] loop1: detected capacity change from 0 to 4096
[  171.285969][ T8852] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  171.304393][ T8852] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  171.736853][ T8865] loop0: detected capacity change from 0 to 8
[  171.780344][ T8865] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  172.008912][ T8868] comedi comedi3: aio_aio12_8: I/O port conflict (0x4f27,32)
[  172.090992][ T8869] cramfs: Error -5 while decompressing!
[  172.093310][ T8869] cramfs: ffffffff99e118c8(26)->ffff888128966000(4096)
[  172.095485][ T8869] cramfs: Error -3 while decompressing!
[  172.097304][ T8869] cramfs: ffffffff99e118e2(26)->ffff888128967000(4096)
[  172.099754][ T8869] cramfs: Error -3 while decompressing!
[  172.101838][ T8869] cramfs: ffffffff99e118fc(16)->ffff888128968000(4096)
[  172.104362][ T8869] cramfs: Error -5 while decompressing!
[  172.106457][ T8869] cramfs: ffffffff99e118c8(26)->ffff888128966000(4096)
[  172.676664][ T8877] netlink: 'syz.0.1084': attribute type 1 has an invalid length.
[  172.782514][ T8881] loop0: detected capacity change from 0 to 1024
[  172.853991][  T390] hfsplus: b-tree write err: -5, ino 4
[  173.504172][ T8913] IPv6: sit1: Disabled Multicast RS
[  173.511836][ T8913] sit1: entered allmulticast mode
[  173.542701][ T8894] loop0: detected capacity change from 0 to 32768
[  173.547143][ T8894] bcachefs (/dev/loop0): error validating superblock: Invalid superblock section replicas: no devices in entry sb: 0/0 []
[  173.547143][ T8894] replicas (size 24):
[  173.547143][ T8894] btree: 0/1 [2] sb: 4/0 [] sb: 0/0 []
[  173.547143][ T8894] 
[  173.556678][ T8894] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  173.856455][ T8924] loop1: detected capacity change from 0 to 128
[  173.915081][ T8916] loop0: detected capacity change from 0 to 40427
[  173.924636][ T8916] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  173.938079][ T8916] F2FS-fs (loop0): invalid crc value
[  174.136564][ T8916] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  174.144856][ T8916] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  174.180540][   T33] kauditd_printk_skb: 244 callbacks suppressed
[  174.180553][   T33] audit: type=1326 audit(1757324261.622:296): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.1.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93a23c14a5 code=0x7ffc0000
[  174.196434][   T33] audit: type=1326 audit(1757324261.632:297): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.1.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93a23c14a5 code=0x7ffc0000
[  174.206041][   T33] audit: type=1326 audit(1757324261.632:298): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.1.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93a23c14a5 code=0x7ffc0000
[  174.215473][   T33] audit: type=1326 audit(1757324261.632:299): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.1.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93a23c14a5 code=0x7ffc0000
[  174.225105][   T33] audit: type=1326 audit(1757324261.632:300): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.1.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93a23c14a5 code=0x7ffc0000
[  174.235630][   T33] audit: type=1326 audit(1757324261.632:301): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.1.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93a23c14a5 code=0x7ffc0000
[  174.248073][   T33] audit: type=1326 audit(1757324261.632:302): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.1.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93a23c14a5 code=0x7ffc0000
[  174.270210][   T33] audit: type=1326 audit(1757324261.632:303): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.1.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93a23c14a5 code=0x7ffc0000
[  174.294701][   T33] audit: type=1326 audit(1757324261.642:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.1.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93a23c14a5 code=0x7ffc0000
[  174.305153][   T33] audit: type=1326 audit(1757324261.642:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8923 comm="syz.1.1107" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f93a23c14a5 code=0x7ffc0000
[  174.348389][ T5851] syz-executor: attempt to access beyond end of device
[  174.348389][ T5851] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  174.358977][ T5851] CPU: 1 UID: 0 PID: 5851 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  174.358990][ T5851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  174.358995][ T5851] Call Trace:
[  174.358999][ T5851]  <TASK>
[  174.359004][ T5851]  dump_stack_lvl+0x189/0x250
[  174.359020][ T5851]  ? __pfx_dump_stack_lvl+0x10/0x10
[  174.359031][ T5851]  ? __pfx_queue_work_on+0x10/0x10
[  174.359038][ T5851]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  174.359051][ T5851]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  174.359067][ T5851]  f2fs_handle_critical_error+0x37c/0x540
[  174.359082][ T5851]  f2fs_write_end_io+0x886/0xb60
[  174.359097][ T5851]  __submit_merged_bio+0x27a/0x6a0
[  174.359111][ T5851]  __submit_merged_write_cond+0x255/0x530
[  174.359124][ T5851]  f2fs_write_data_pages+0x261d/0x3000
[  174.359134][ T5851]  ? __lock_acquire+0xab9/0xd20
[  174.359160][ T5851]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  174.359177][ T5851]  ? __pfx_usage_match+0x10/0x10
[  174.359187][ T5851]  ? __bfs+0x154/0x2a0
[  174.359196][ T5851]  ? __pfx_usage_match+0x10/0x10
[  174.359220][ T5851]  ? __switch_to+0xdc8/0x1690
[  174.359239][ T5851]  ? __lock_acquire+0xab9/0xd20
[  174.359252][ T5851]  ? do_raw_spin_lock+0x121/0x290
[  174.359266][ T5851]  ? do_raw_spin_unlock+0x4d/0x240
[  174.359274][ T5851]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  174.359286][ T5851]  do_writepages+0x32e/0x550
[  174.359302][ T5851]  ? do_raw_spin_unlock+0x4d/0x240
[  174.359312][ T5851]  filemap_fdatawrite+0x199/0x240
[  174.359323][ T5851]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  174.359353][ T5851]  ? preempt_schedule_thunk+0x16/0x30
[  174.359364][ T5851]  f2fs_sync_dirty_inodes+0x31f/0x830
[  174.359378][ T5851]  f2fs_write_checkpoint+0x93e/0x2440
[  174.359385][ T5851]  ? __lock_acquire+0xab9/0xd20
[  174.359408][ T5851]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  174.359440][ T5851]  kill_f2fs_super+0x2cc/0x6d0
[  174.359450][ T5851]  ? __pfx_kill_f2fs_super+0x10/0x10
[  174.359492][ T5851]  ? shrinker_free+0x2ce/0x3e0
[  174.359508][ T5851]  deactivate_locked_super+0xbc/0x130
[  174.359523][ T5851]  cleanup_mnt+0x425/0x4c0
[  174.359534][ T5851]  ? lockdep_hardirqs_on+0x9c/0x150
[  174.359547][ T5851]  task_work_run+0x1d4/0x260
[  174.359564][ T5851]  ? __pfx_task_work_run+0x10/0x10
[  174.359577][ T5851]  ? __x64_sys_umount+0x122/0x160
[  174.359594][ T5851]  ? exit_to_user_mode_loop+0x40/0x130
[  174.359614][ T5851]  exit_to_user_mode_loop+0xec/0x130
[  174.359629][ T5851]  do_syscall_64+0x2bd/0xfa0
[  174.359641][ T5851]  ? lockdep_hardirqs_on+0x9c/0x150
[  174.359652][ T5851]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.359665][ T5851]  ? exc_page_fault+0xab/0x100
[  174.359679][ T5851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  174.359690][ T5851] RIP: 0033:0x7f6932f8ff17
[  174.359704][ T5851] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  174.359713][ T5851] RSP: 002b:00007fffcb938708 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  174.359726][ T5851] RAX: 0000000000000000 RBX: 00007f6933011c05 RCX: 00007f6932f8ff17
[  174.359734][ T5851] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffcb9387c0
[  174.359740][ T5851] RBP: 00007fffcb9387c0 R08: 0000000000000000 R09: 0000000000000000
[  174.359747][ T5851] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffcb939850
[  174.359754][ T5851] R13: 00007f6933011c05 R14: 000000000002a7fc R15: 00007fffcb939890
[  174.359777][ T5851]  </TASK>
[  174.361131][ T5851] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  174.840534][   T57] Bluetooth: hci0: command tx timeout
[  175.293244][ T8936] loop3: detected capacity change from 0 to 32768
[  177.172729][ T8964] loop3: detected capacity change from 0 to 32768
[  177.777590][ T8981] smc: net device bond0 applied user defined pnetid SYZ0
[  178.070798][   T97] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  178.146677][ T8989] loop0: detected capacity change from 0 to 32768
[  178.157617][ T8989] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1133 (8989)
[  178.178312][ T8989] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  178.202016][ T8989] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  178.220367][   T97] usb 4-1: Using ep0 maxpacket: 16
[  178.226745][ T8993] loop1: detected capacity change from 0 to 128
[  178.231538][   T97] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  178.253292][   T97] usb 4-1: config 0 interface 0 has no altsetting 0
[  178.255956][   T97] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00
[  178.279698][   T97] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.296276][ T8993] affs: No valid root block on device loop1
[  178.321894][   T97] usb 4-1: config 0 descriptor??
[  178.357158][ T8989] BTRFS info (device loop0): enabling ssd optimizations
[  178.383389][ T8989] BTRFS info (device loop0): enabling free space tree
[  178.396879][ T9009] loop1: detected capacity change from 0 to 136
[  178.452922][ T5851] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  178.778904][   T97] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0
[  178.847892][ T9019] loop0: detected capacity change from 0 to 2048
[  178.863881][ T9020] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  179.009022][ T9013] loop1: detected capacity change from 0 to 32768
[  179.021845][ T9013] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1138 (9013)
[  179.035082][ T9013] BTRFS error: invalid seeding and uuid-changed device detected
[  179.249364][   T97] usb 4-1: USB disconnect, device number 11
[  179.265150][ T9031] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1145'.
[  179.275820][ T9031] netlink: 15 bytes leftover after parsing attributes in process `syz.0.1145'.
[  180.025932][ T9046] loop3: detected capacity change from 0 to 4096
[  180.073975][ T9046] ntfs3(loop3): ino=1f, mi_enum_attr
[  180.076444][ T9046] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  180.079613][ T9046] ntfs3(loop3): ino=1f, mi_enum_attr
[  180.315218][ T9044] loop1: detected capacity change from 0 to 32768
[  180.374124][ T9044] XFS (loop1): Mounting V5 Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b
[  180.403921][ T9061] syz.0.1154 uses obsolete (PF_INET,SOCK_PACKET)
[  180.426452][ T9044] XFS (loop1): Ending clean mount
[  180.456672][ T5845] XFS (loop1): Unmounting Filesystem 6b3d8c96-b8b2-4f73-8344-2893082bca0b
[  180.943862][   T57] Bluetooth: hci2: connection err: -111
[  181.791605][ T9079] loop1: detected capacity change from 0 to 32768
[  181.852961][ T9079] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  181.896494][ T9079] XFS (loop1): Ending clean mount
[  181.920696][ T9079] XFS (loop1): Quotacheck needed: Please wait.
[  181.945834][ T7273] XFS (loop1): Metadata corruption detected at xfs_dinode_verify+0x1a6/0x1570, inode 0x1806 dinode
[  181.962495][ T7273] XFS (loop1): Unmount and run xfs_repair
[  181.964793][ T7273] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  181.967698][ T7273] 00000000: 49 4e 81 ed 03 02 00 00 00 00 00 00 00 00 00 00  IN..............
[  181.990211][ T7273] 00000010: 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  181.993647][ T7273] 00000020: 34 f7 58 68 a5 e2 bf 3d 34 f7 58 68 a5 e2 bf 3d  4.Xh...=4.Xh...=
[  181.997121][ T7273] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 0a  4.Xh...=........
[  182.009544][ T9095] loop0: detected capacity change from 0 to 32768
[  182.016317][ T9095] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1170 (9095)
[  182.028741][ T7273] 00000040: 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 01  ................
[  182.037618][ T9095] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  182.042478][ T7273] 00000050: 00 00 65 01 00 00 00 00 00 00 00 00 2c 50 36 f0  ..e.........,P6.
[  182.050243][ T9095] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  182.053451][ T7273] 00000060: ff ff ff ff cb 1f f2 eb 00 00 00 00 00 00 00 08  ................
[  182.060402][ T7273] 00000070: 00 00 00 01 00 00 00 0d 00 00 00 00 00 00 00 08  ................
[  182.107934][ T9079] XFS (loop1): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  182.156219][ T7363] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  182.169726][ T9095] BTRFS error (device loop0): failed to load root extent
[  182.173299][ T9095] BTRFS warning (device loop0): try to load backup roots slot 1
[  182.176530][ T5845] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  182.193390][ T7352] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  182.195436][ T5845] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  182.217130][ T9095] BTRFS warning (device loop0): couldn't read tree root
[  182.219796][ T9095] BTRFS warning (device loop0): try to load backup roots slot 2
[  182.245174][ T7352] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  182.249137][ T9095] BTRFS warning (device loop0): couldn't read tree root
[  182.252569][ T9095] BTRFS warning (device loop0): try to load backup roots slot 3
[  182.281058][ T9095] BTRFS info (device loop0): checking UUID tree
[  182.296223][ T9095] BTRFS info (device loop0): setting nodatasum
[  182.298112][ T9095] BTRFS info (device loop0): setting nodatacow
[  182.336445][ T9095] BTRFS info (device loop0): enabling ssd optimizations
[  182.350419][ T9095] BTRFS info (device loop0): turning on flush-on-commit
[  182.363176][ T9095] BTRFS info (device loop0): enabling free space tree
[  182.365174][ T9095] BTRFS info (device loop0): enabling auto defrag
[  182.367406][ T9095] BTRFS info (device loop0): trying to use backup root at mount time
[  182.400347][ T9095] BTRFS info (device loop0): max_inline set to 0
[  182.510701][ T5851] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  182.980233][   T97] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  183.030286][ T5893] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  183.039632][ T9156] loop1: detected capacity change from 0 to 32768
[  183.118438][ T9156] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  183.118453][ T9156]   allowing incompatible features above 0.0: (unknown version)
[  183.118458][ T9156]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  183.133558][   T97] usb 4-1: Using ep0 maxpacket: 32
[  183.136385][ T9156] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  183.142072][ T9156] bcachefs (loop1): initializing new filesystem
[  183.144185][   T97] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  183.147076][   T97] usb 4-1: config 0 has no interface number 0
[  183.149307][   T97] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  183.159330][ T9156] bcachefs (loop1): going read-write
[  183.162853][   T97] usb 4-1: config 0 interface 85 has no altsetting 0
[  183.170540][   T97] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  183.173570][   T97] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.176233][   T97] usb 4-1: Product: syz
[  183.177761][   T97] usb 4-1: Manufacturer: syz
[  183.179516][   T97] usb 4-1: SerialNumber: syz
[  183.179850][ T9156] bcachefs (loop1): marking superblocks
[  183.184477][   T97] usb 4-1: config 0 descriptor??
[  183.190873][ T5893] usb 1-1: Using ep0 maxpacket: 16
[  183.210397][ T5893] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[  183.213615][ T5893] usb 1-1: config 0 has no interface number 0
[  183.221255][ T5893] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  183.227694][ T5893] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  183.232716][ T5893] usb 1-1: Product: syz
[  183.234409][ T5893] usb 1-1: Manufacturer: syz
[  183.235753][ T9156] bcachefs (loop1): initializing freespace
[  183.236280][ T5893] usb 1-1: SerialNumber: syz
[  183.238660][ T5893] usb 1-1: config 0 descriptor??
[  183.251915][ T5893] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  183.258733][ T9156] bcachefs (loop1): done initializing freespace
[  183.269588][ T9156] bcachefs (loop1): reading snapshots table
[  183.273324][ T9156] bcachefs (loop1): reading snapshots done
[  183.312191][ T9156] bcachefs (loop1): done starting filesystem
[  183.404995][ T9156] syz.1.1187 (9156) used greatest stack depth: 15656 bytes left
[  183.418015][ T5845] bcachefs (loop1): shutting down
[  183.420774][ T5845] bcachefs (loop1): going read-only
[  183.424283][ T5845] bcachefs (loop1): finished waiting for writes to stop
[  183.433074][ T5845] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[  183.488409][ T5845] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[  183.494628][ T5845] bcachefs (loop1): clean shutdown complete, journal seq 4
[  183.497821][ T5845] bcachefs (loop1): marking filesystem clean
[  183.530468][ T5845] bcachefs (loop1): shutdown complete
[  183.659593][ T5893] gspca_spca1528: reg_w err -71
[  183.682533][ T5893] spca1528 1-1:0.1: probe with driver spca1528 failed with error -71
[  183.688685][ T5893] usb 1-1: USB disconnect, device number 12
[  183.947718][   T97] appletouch 4-1:0.85: Geyser mode initialized.
[  183.952333][   T97] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input12
[  183.961807][    C1] appletouch 4-1:0.85: appletouch: OVERFLOW with data length 64, actual length is 64
[  184.165221][ T5893] usb 4-1: USB disconnect, device number 12
[  184.186306][ T5893] appletouch 4-1:0.85: input: appletouch disconnected
[  184.277135][ T9172] loop0: detected capacity change from 0 to 256
[  184.302674][ T9172] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  184.790441][ T9190] loop0: detected capacity change from 0 to 2048
[  184.803341][ T9190] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  184.826035][ T5854] udevd[5854]: incorrect nilfs2 checksum on /dev/loop0
[  184.845416][ T9190] NILFS (loop0): corrupt root inode
[  184.852599][ T5854] udevd[5854]: incorrect nilfs2 checksum on /dev/loop0
[  184.996725][ T9206] loop1: detected capacity change from 0 to 256
[  185.001977][ T9205] macvtap0: refused to change device tx_queue_len
[  185.008596][ T9206] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011e5d, chksum : 0x63a11b78, utbl_chksum : 0xe619d30d)
[  185.188148][ T9218] loop1: detected capacity change from 0 to 8
[  185.232605][ T9218] SQUASHFS error: Failed to read block 0x33c: -5
[  185.235200][ T9218] SQUASHFS error: Unable to read metadata cache entry [33a]
[  185.248847][ T9218] SQUASHFS error: Unable to read inode 0xa7
[  185.264906][ T9224] netlink: 'syz.3.1211': attribute type 1 has an invalid length.
[  185.328642][ T9224] bond1: entered promiscuous mode
[  185.335851][ T9224] 8021q: adding VLAN 0 to HW filter on device bond1
[  185.378097][ T9229] 8021q: adding VLAN 0 to HW filter on device bond1
[  185.384910][ T9229] bond1: (slave wireguard0): The slave device specified does not support setting the MAC address
[  185.389077][ T9229] bond1: (slave wireguard0): Setting fail_over_mac to active for active-backup mode
[  185.407292][ T9229] bond1: (slave wireguard0): making interface the new active one
[  185.412039][ T9229] wireguard0: entered promiscuous mode
[  185.431146][ T9229] bond1: (slave wireguard0): Enslaving as an active interface with an up link
[  185.712591][ T5930] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  185.892252][ T5930] usb 1-1: Using ep0 maxpacket: 8
[  185.896963][ T5930] usb 1-1: unable to get BOS descriptor or descriptor too short
[  185.907491][ T5930] usb 1-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice= e.bf
[  185.913871][ T5930] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  185.917255][ T5930] usb 1-1: Product: syz
[  185.919997][ T5930] usb 1-1: Manufacturer: syz
[  185.927443][ T5930] usb 1-1: SerialNumber: syz
[  186.141088][ T5930] usb 1-1: selecting invalid altsetting 1
[  186.143491][ T5930] catc 1-1:8.0: Can't set altsetting 1.
[  186.145776][ T5930] catc 1-1:8.0: probe with driver catc failed with error -5
[  186.165445][ T5930] usb 1-1: USB disconnect, device number 13
[  186.391008][   T33] kauditd_printk_skb: 201 callbacks suppressed
[  186.391023][   T33] audit: type=1800 audit(1757324273.842:507): pid=9265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1226" name="file1" dev="tmpfs" ino=2235 res=0 errno=0
[  187.085053][ T9273] loop0: detected capacity change from 0 to 8
[  187.392029][ T9277] mmap: syz.0.1231 (9277) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  188.456958][ T9295] loop1: detected capacity change from 0 to 2048
[  188.573745][ T9295] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  188.596160][ T9295] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 25 vs 4128793 free clusters
[  188.622255][ T9295] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 28
[  188.639153][ T9295] EXT4-fs (loop1): This should not happen!! Data will be lost
[  188.639153][ T9295] 
[  188.647136][ T9295] EXT4-fs (loop1): Total free blocks count 0
[  188.651150][ T9295] EXT4-fs (loop1): Free/Dirty block details
[  188.653360][ T9295] EXT4-fs (loop1): free_blocks=66060288
[  188.655218][ T9295] EXT4-fs (loop1): dirty_blocks=16
[  188.657174][ T9295] EXT4-fs (loop1): Block reservation details
[  188.659347][ T9295] EXT4-fs (loop1): i_reserved_data_blocks=1
[  188.761625][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.788282][ T9285] loop0: detected capacity change from 0 to 131072
[  188.791569][ T9285] F2FS-fs (loop0): Invalid log sectorsize (67108873)
[  188.794428][ T9285] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  188.814551][ T9285] F2FS-fs (loop0): invalid crc value
[  188.832327][ T9307] loop3: detected capacity change from 0 to 256
[  188.897289][ T9285] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  188.905909][ T9285] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  188.908504][ T9285] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e4
[  188.944930][ T9285] F2FS-fs (loop0): sanity_check_inode: inode (ino=4, mode=1773) should not have inline_dentry, run fsck to fix
[  189.057177][ T9320] loop1: detected capacity change from 0 to 1024
[  189.189602][ T7344] hfsplus: b-tree write err: -5, ino 4
[  189.214609][ T7352] Bluetooth: hci3: Frame reassembly failed (-84)
[  189.348607][ T9332] loop1: detected capacity change from 0 to 4096
[  189.356950][ T9332] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  189.519019][ T9339] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000000004
[  189.676418][ T9344] evm: overlay not supported
[  189.747910][ T9346] loop1: detected capacity change from 0 to 4096
[  189.882190][ T9350] loop1: detected capacity change from 0 to 8
[  189.887792][ T9350] Major/Minor mismatch, older Squashfs 0.0 filesystems are unsupported
[  190.554682][ T9357] loop0: detected capacity change from 0 to 32768
[  190.561650][ T9357] 
[  190.561650][ T9357]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  190.561650][ T9357] 
[  190.576981][ T9357] ERROR: (device loop0): diWrite: ixpxd invalid
[  190.576981][ T9357] 
[  190.584408][ T9357] ERROR: (device loop0): txCommit: 
[  190.584408][ T9357] 
[  190.588506][ T9357] 
[  190.588506][ T9357]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  190.588506][ T9357] 
[  190.594104][ T9357] 
[  190.594104][ T9357]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  190.594104][ T9357] 
[  190.602063][ T9357] ERROR: (device loop0): diWrite: ixpxd invalid
[  190.602063][ T9357] 
[  190.607202][ T9357] ERROR: (device loop0): txCommit: 
[  190.607202][ T9357] 
[  190.632089][ T5851] 
[  190.632089][ T5851]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  190.632089][ T5851] 
[  190.638085][ T5851] 
[  190.638085][ T5851]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  190.638085][ T5851] 
[  191.009582][ T5846] Bluetooth: hci2: command 0x0406 tx timeout
[  191.013276][ T9327] Bluetooth: hci0: command 0x0406 tx timeout
[  191.112697][ T9370] IPv6: NLM_F_REPLACE set, but no existing node found!
[  191.260615][ T9314] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  191.417844][ T5892] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  191.570690][ T5892] usb 2-1: Using ep0 maxpacket: 8
[  191.577866][ T5892] usb 2-1: unable to get BOS descriptor or descriptor too short
[  191.582782][ T5892] usb 2-1: config 0 has an invalid interface number: 88 but max is 0
[  191.586164][ T5892] usb 2-1: config 0 has no interface number 0
[  191.588692][ T5892] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  191.595490][ T5892] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  191.600311][ T9374] loop3: detected capacity change from 0 to 32768
[  191.600741][ T5892] usb 2-1: config 0 interface 88 has no altsetting 0
[  191.603234][ T9374] btrfs: Deprecated parameter 'usebackuproot'
[  191.607580][ T9374] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  191.613922][ T5892] usb 2-1: string descriptor 0 read error: -22
[  191.615029][ T9374] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1269 (9374)
[  191.624248][ T5892] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  191.625670][ T9374] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  191.631522][ T9374] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  191.641790][ T5892] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  191.664441][ T5892] usb 2-1: config 0 descriptor??
[  191.772156][ T5892] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.88/input/input14
[  191.812298][ T9374] BTRFS info (device loop3): rebuilding free space tree
[  191.832739][ T9374] BTRFS info (device loop3): allowing degraded mounts
[  191.835553][ T9374] BTRFS info (device loop3): enabling ssd optimizations
[  191.838304][ T9374] BTRFS info (device loop3): enabling free space tree
[  191.841289][ T9374] BTRFS info (device loop3): force clearing of disk cache
[  191.845079][ T9374] BTRFS info (device loop3): trying to use backup root at mount time
[  191.847825][ T9374] BTRFS info (device loop3): use zlib compression, level 3
[  191.917623][ T5927] udevd[5927]: Error opening device "/dev/input/event3": Input/output error
[  191.921456][ T5892] usb 2-1: USB disconnect, device number 17
[  191.929128][ T5927] udevd[5927]: Unable to EVIOCGABS device "/dev/input/event3"
[  191.936477][ T5927] udevd[5927]: Unable to EVIOCGABS device "/dev/input/event3"
[  191.977485][ T6660] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  192.264589][ T9399] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  192.286275][ T9399] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  192.452606][ T9409] loop0: detected capacity change from 0 to 256
[  192.810444][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1285'.
[  192.821485][ T9427] tipc: Started in network mode
[  192.823381][ T9427] tipc: Node identity ff000000000000000000000000000001, cluster identity 4711
[  192.826542][ T9427] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  193.320901][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1296'.
[  193.324410][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1296'.
[  193.327490][ T9448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1296'.
[  193.435802][ T9440] loop0: detected capacity change from 0 to 40427
[  193.443186][ T9440] F2FS-fs (loop0): Image doesn't support compression
[  193.452257][ T9440] F2FS-fs (loop0): build fault injection rate: 690
[  193.471848][ T9440] F2FS-fs (loop0): invalid crc value
[  193.523313][ T9440] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  193.526779][ T9440] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  193.659457][ T9462] loop1: detected capacity change from 0 to 1024
[  193.703160][ T9462] hfsplus: xattr searching failed
[  193.734767][ T7368] hfsplus: b-tree write err: -5, ino 3
[  194.046661][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[  194.049209][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[  194.188934][ T9493] syz_tun: entered allmulticast mode
[  194.206999][ T9493] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1317'.
[  194.240730][ T9493] syz_tun (unregistering): left allmulticast mode
[  194.412025][ T9504] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  194.418784][ T9508] loop1: detected capacity change from 0 to 512
[  194.464668][ T9508] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.1322: invalid indirect mapped block 4294967295 (level 1)
[  194.472153][ T9508] EXT4-fs (loop1): Remounting filesystem read-only
[  194.475419][ T9508] EXT4-fs (loop1): 2 truncates cleaned up
[  194.477953][ T9512] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1323'.
[  194.486103][ T9508] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  194.538210][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.546902][ T9516] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1325'.
[  194.743847][ T9528] loop0: detected capacity change from 0 to 8192
[  195.231857][ T9537] binder: 9536:9537 ioctl c018620c 0 returned -14
[  195.288400][ T9539] loop0: detected capacity change from 0 to 128
[  195.302662][ T9539] FAT-fs (loop0): bread failed, FSINFO block (sector = 54136)
[  195.708875][ T5714] nci: nci_rf_intf_activated_ntf_packet: unsupported activation_rf_tech_and_mode 0xc8
[  195.745952][ T9560] loop3: detected capacity change from 0 to 4096
[  195.763760][ T9562] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  195.807981][ T9560] NILFS (loop3): nilfs_palloc_commit_free_entry (ino=6): entry number 15 already freed
[  196.005796][ T9572] loop0: detected capacity change from 0 to 1024
[  196.029315][ T9572] hfsplus: bad catalog entry type
[  196.048791][  T390] hfsplus: b-tree write err: -5, ino 4
[  196.107668][ T9578] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1352'.
[  196.169370][ T9582] loop3: detected capacity change from 0 to 16
[  196.178259][ T9582] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  196.293482][ T9585] netlink: 'syz.0.1355': attribute type 1 has an invalid length.
[  196.296635][ T9585] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1355'.
[  196.801359][   T97] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  196.973945][   T97] usb 1-1: Using ep0 maxpacket: 32
[  196.978470][   T97] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  196.982161][   T97] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  196.985513][   T97] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  196.988830][   T97] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  197.810566][   T97] usb 1-1: config 0 descriptor??
[  198.399837][ T9619] loop1: detected capacity change from 0 to 32768
[  198.488663][ T9619] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  198.500402][ T9619] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  198.639082][ T5845] ocfs2: Unmounting device (7,1) on (node local)
[  198.823976][   T97] savu 0003:1E7D:2D5A.0008: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.0-1/input0
[  198.958629][   T52] usb 1-1: USB disconnect, device number 14
[  199.239519][ T9645] Bluetooth: hci0: expected 2 bytes, got 7 bytes
[  199.573310][ T9649] 8021q: adding VLAN 0 to HW filter on device bond0
[  199.588002][ T9649] bond0: (slave rose0): Enslaving as an active interface with an up link
[  199.822480][ T9655] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1372'.
[  200.089875][ T9658] loop0: detected capacity change from 0 to 1024
[  200.500341][ T9670] sctp: [Deprecated]: syz.3.1378 (pid 9670) Use of int in maxseg socket option.
[  200.500341][ T9670] Use struct sctp_assoc_value instead
[  201.227103][ T9684] loop3: detected capacity change from 0 to 40427
[  201.266263][ T9684] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  201.273832][ T9684] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  201.358294][ T9684] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  201.363428][ T9684] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  201.366761][ T9684] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  201.509857][ T9705] loop1: detected capacity change from 0 to 128
[  201.517074][ T9705] zonefs (loop1) ERROR: Not a zoned block device
[  201.953219][ T9723] loop3: detected capacity change from 0 to 256
[  202.052987][ T9728] loop3: detected capacity change from 0 to 2048
[  202.061577][ T9728] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  202.087974][   T33] audit: type=1800 audit(1757324289.532:508): pid=9728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1396" name="file2" dev="loop3" ino=1347 res=0 errno=0
[  202.157067][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1399'.
[  202.247113][ T9741] sctp: [Deprecated]: syz.3.1402 (pid 9741) Use of struct sctp_assoc_value in delayed_ack socket option.
[  202.247113][ T9741] Use struct sctp_sack_info instead
[  202.373098][ T9748] loop3: detected capacity change from 0 to 4096
[  202.398729][ T9751] loop1: detected capacity change from 0 to 256
[  202.407902][ T9751] vfat: Bad value for 'nonumtail'
[  202.637642][ T9765] loop3: detected capacity change from 0 to 16
[  202.646600][ T9765] erofs (device loop3): mounted with root inode @ nid 36.
[  202.650709][   T97] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  202.806036][   T97] usb 2-1: Using ep0 maxpacket: 8
[  202.813896][   T97] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD9, changing to 0x89
[  202.817633][   T97] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 99, changing to 10
[  202.822643][   T97] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 34391, setting to 1024
[  202.826213][   T97] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  202.829063][   T97] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.835579][   T97] usb 2-1: config 0 descriptor??
[  202.841429][ T9751] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  202.845004][   T57] Bluetooth: hci1: command 0x0405 tx timeout
[  203.023323][ T9777] block nbd3: Attempted send on invalid socket
[  203.029005][ T9777] blk_print_req_error: 138 callbacks suppressed
[  203.029022][ T9777] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 2
[  203.037300][ T9777] SQUASHFS error: Failed to read block 0x0: -5
[  203.042199][ T9777] unable to read squashfs_super_block
[  203.151097][   T97] iowarrior 2-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  203.159527][   T97] usb 2-1: USB disconnect, device number 18
[  203.454049][ T9783] loop3: detected capacity change from 0 to 32768
[  203.463658][ T9783] (syz.3.1422,9783,0):ocfs2_verify_volume:2320 ERROR: Superblock slots found greater than file system maximum: found 65535, max 255
[  203.469033][ T9783] (syz.3.1422,9783,0):ocfs2_verify_volume:2329 ERROR: status = -22
[  203.477791][ T9783] (syz.3.1422,9783,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  203.481433][ T9783] (syz.3.1422,9783,0):ocfs2_fill_super:1177 ERROR: status = -22
[  203.704134][ T9793] loop3: detected capacity change from 0 to 1024
[  203.707809][ T9793] EXT4-fs: Ignoring removed nobh option
[  203.712918][ T9793] EXT4-fs: Ignoring removed bh option
[  203.726256][ T9793] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  203.758373][ T9793] overlayfs: option "workdir=./file0" is useless in a non-upper mount, ignore
[  203.771818][ T9793] overlayfs: missing 'lowerdir'
[  203.836821][ T6660] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.232406][ T9831] loop1: detected capacity change from 0 to 256
[  205.300283][ T9831] FAT-fs (loop1): Directory bread(block 64) failed
[  205.308671][ T9831] FAT-fs (loop1): Directory bread(block 65) failed
[  205.314076][ T9831] FAT-fs (loop1): Directory bread(block 66) failed
[  205.316874][ T9831] FAT-fs (loop1): Directory bread(block 67) failed
[  205.319698][ T9831] FAT-fs (loop1): Directory bread(block 68) failed
[  205.325702][ T9831] FAT-fs (loop1): Directory bread(block 69) failed
[  205.328590][ T9831] FAT-fs (loop1): Directory bread(block 70) failed
[  205.332630][ T9831] FAT-fs (loop1): Directory bread(block 71) failed
[  205.335500][ T9831] FAT-fs (loop1): Directory bread(block 72) failed
[  205.338136][ T9831] FAT-fs (loop1): Directory bread(block 73) failed
[  205.513323][ T9828] loop3: detected capacity change from 0 to 32768
[  205.715091][ T9853] loop3: detected capacity change from 0 to 128
[  205.732497][   T33] audit: type=1800 audit(1757324293.172:509): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1452" name="file2" dev="loop3" ino=1048696 res=0 errno=0
[  205.733812][ T9853] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  205.758019][   T33] audit: type=1326 audit(1757324293.202:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.1.1453" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a238ebe9 code=0x7ffc0000
[  205.769142][   T33] audit: type=1326 audit(1757324293.202:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.1.1453" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a238ebe9 code=0x7ffc0000
[  205.770515][ T9853] FAT-fs (loop3): Filesystem has been set read-only
[  205.778668][   T33] audit: type=1326 audit(1757324293.202:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.1.1453" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93a238d550 code=0x7ffc0000
[  205.797249][   T33] audit: type=1326 audit(1757324293.202:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.1.1453" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f93a238d550 code=0x7ffc0000
[  205.801457][ T9853] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000100)
[  205.809109][   T33] audit: type=1326 audit(1757324293.202:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.1.1453" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a238ebe9 code=0x7ffc0000
[  205.809774][ T9853] syz.3.1452: attempt to access beyond end of device
[  205.809774][ T9853] loop3: rw=2049, sector=2065, nr_sectors = 8 limit=128
[  205.818958][   T33] audit: type=1326 audit(1757324293.202:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.1.1453" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a238ebe9 code=0x7ffc0000
[  205.832691][   T33] audit: type=1326 audit(1757324293.202:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.1.1453" exe="/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f93a238ebe9 code=0x7ffc0000
[  205.840905][   T33] audit: type=1326 audit(1757324293.202:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9854 comm="syz.1.1453" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a238ebe9 code=0x7ffc0000
[  205.930596][   T97] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  206.080434][   T97] usb 1-1: Using ep0 maxpacket: 8
[  206.094803][   T97] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  206.099069][   T97] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint descriptor of length 2, skipping
[  206.121351][   T97] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  206.129559][   T97] usb 1-1: New USB device found, idVendor=04e8, idProduct=ff30, bcdDevice=a6.d1
[  206.137319][   T97] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.140610][   T97] usb 1-1: Product: syz
[  206.142449][   T97] usb 1-1: Manufacturer: syz
[  206.144416][   T97] usb 1-1: SerialNumber: syz
[  206.150614][   T97] usb 1-1: config 0 descriptor??
[  206.169507][   T97] imon_raw 1-1:0.0: IR endpoint missing
[  206.320320][   T10] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  206.381333][ T5809] usb 1-1: USB disconnect, device number 15
[  206.482453][   T10] usb 2-1: config 0 has an invalid interface number: 93 but max is 0
[  206.486481][   T10] usb 2-1: config 0 has no interface number 0
[  206.494189][   T10] usb 2-1: New USB device found, idVendor=1a0a, idProduct=0104, bcdDevice=3f.ac
[  206.497783][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.510301][   T10] usb 2-1: Product: syz
[  206.512093][   T10] usb 2-1: Manufacturer: syz
[  206.513980][   T10] usb 2-1: SerialNumber: syz
[  206.518230][   T10] usb 2-1: config 0 descriptor??
[  206.762899][   T10] usb_ehset_test 2-1:0.93: probe with driver usb_ehset_test failed with error -32
[  206.788333][   T10] usb 2-1: USB disconnect, device number 19
[  206.790000][ T9893] input: syz1 as /devices/virtual/input/input15
[  207.368564][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  207.368644][   T33] audit: type=1326 audit(1757324294.812:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.1.1475" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a238ebe9 code=0x7ffc0000
[  207.385032][   T33] audit: type=1326 audit(1757324294.812:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.1.1475" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f93a238ebe9 code=0x7ffc0000
[  207.394242][   T33] audit: type=1326 audit(1757324294.832:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9903 comm="syz.1.1475" exe="/syz-executor" sig=0 arch=c000003e syscall=34 compat=0 ip=0x7f93a238ebe9 code=0x7ffc0000
[  208.422356][ T9917] loop0: detected capacity change from 0 to 4096
[  208.426812][ T9917] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  208.453204][ T9917] ntfs3(loop0): ino=1a, mi_enum_attr
[  208.455516][ T9917] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  208.560448][ T5809] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  208.712863][ T5809] usb 4-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[  208.716901][ T5809] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  208.730201][ T5809] usb 4-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  208.735202][ T5809] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  208.739627][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.760633][ T5809] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  208.764170][ T5809] usb 4-1: invalid MIDI out EP 0
[  208.827342][ T6659] udevd[6659]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  208.837693][ T5809] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22
[  208.906040][ T9923] loop0: detected capacity change from 0 to 40427
[  208.917661][ T9923] F2FS-fs (loop0): build fault injection rate: 14
[  208.921079][ T9923] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  208.925848][ T9923] F2FS-fs (loop0): invalid crc value
[  208.929890][    C0] f2fs_printk: 2 callbacks suppressed
[  208.929901][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  208.942450][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  208.964023][   T52] usb 4-1: USB disconnect, device number 13
[  209.001258][ T9923] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  209.004793][ T9923] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  209.014302][ T9923] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  209.454279][ T9934] loop1: detected capacity change from 0 to 32768
[  209.477234][ T9934] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  209.548217][ T9934] XFS (loop1): Ending clean mount
[  209.644757][ T5845] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  209.859792][ T9962] loop3: detected capacity change from 0 to 32768
[  209.933378][ T9962] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  209.945302][ T9962] XFS (loop3): Ending clean mount
[  210.015519][ T6660] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  210.231054][ T9974] loop3: detected capacity change from 0 to 256
[  210.410666][ T9972] loop1: detected capacity change from 0 to 32768
[  210.429668][ T9972] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  210.475420][ T9972] XFS (loop1): Ending clean mount
[  210.503947][ T5845] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  211.697209][T10007] capability: warning: `syz.0.1507' uses 32-bit capabilities (legacy support in use)
[  212.263164][T10019] loop3: detected capacity change from 0 to 2048
[  212.286245][T10019] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  212.410880][   T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  212.562826][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  212.571807][   T10] usb 1-1: config 0 has an invalid interface number: 238 but max is 0
[  212.575081][   T10] usb 1-1: config 0 has no interface number 0
[  212.580435][   T10] usb 1-1: config 0 interface 238 has no altsetting 0
[  212.590284][   T10] usb 1-1: New USB device found, idVendor=1776, idProduct=501c, bcdDevice=f1.0d
[  212.593910][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  212.597117][   T10] usb 1-1: Product: syz
[  212.609190][   T10] usb 1-1: Manufacturer: syz
[  212.612490][   T10] usb 1-1: SerialNumber: syz
[  212.616803][   T10] usb 1-1: config 0 descriptor??
[  212.642617][T10024] loop3: detected capacity change from 0 to 32768
[  212.650970][T10024] bcachefs (/dev/loop3): error validating superblock: Invalid superblock: optional field extends past end of superblock (type 1497488896)
[  212.657955][T10024] bcachefs: bch2_fs_get_tree() error: invalid_sb_field_size
[  212.848150][   T10] gspca_main: spca501-2.14.0 probing 1776:501c
[  212.867568][   T10] gspca_spca501: reg write: error -71
[  212.869806][   T10] spca501 1-1:0.238: Reg write failed for 0x02,0x07,0x05
[  212.878103][   T10] spca501 1-1:0.238: probe with driver spca501 failed with error -22
[  212.904140][   T10] usb 1-1: USB disconnect, device number 16
[  212.984377][T10026] loop1: detected capacity change from 0 to 32768
[  213.006053][T10026] JBD2: Ignoring recovery information on journal
[  213.036447][T10026] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  213.125302][T10044] loop3: detected capacity change from 0 to 1024
[  213.201655][ T7258] hfsplus: b-tree write err: -5, ino 4
[  213.220353][ T5845] ocfs2: Unmounting device (7,1) on (node local)
[  213.395304][T10048] netlink: 'syz.0.1523': attribute type 1 has an invalid length.
[  213.398446][T10048] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1523'.
[  213.861781][T10058] loop1: detected capacity change from 0 to 512
[  213.892387][T10058] EXT4-fs (loop1): Cannot turn on journaled quota: type 0: error -2
[  213.909260][T10058] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #13: comm syz.1.1522: invalid indirect mapped block 2683928664 (level 1)
[  213.947402][T10058] EXT4-fs (loop1): Remounting filesystem read-only
[  213.952631][T10058] EXT4-fs (loop1): 1 truncate cleaned up
[  213.956254][T10058] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  213.968206][T10058] EXT4-fs (loop1): shut down requested (2)
[  213.999255][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.196578][T10075] loop1: detected capacity change from 0 to 512
[  214.222955][T10074] loop3: detected capacity change from 0 to 4096
[  214.234843][T10074] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  214.243330][T10074] ntfs3(loop3): Failed to load $Extend (-22).
[  214.247797][T10075] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  214.252785][T10074] ntfs3(loop3): Failed to initialize $Extend.
[  214.264287][T10075] ext4 filesystem being mounted at /522/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  214.335744][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  214.624477][T10081] loop0: detected capacity change from 0 to 32768
[  214.629737][T10081] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1535 (10081)
[  214.671662][T10081] BTRFS info (device loop0): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  214.684140][T10081] BTRFS info (device loop0): using blake2b (blake2b-256-generic) checksum algorithm
[  215.041207][T10081] BTRFS info (device loop0): enabling ssd optimizations
[  215.045775][T10081] BTRFS info (device loop0): enabling free space tree
[  215.048754][T10081] BTRFS info (device loop0): use zstd compression, level 3
[  215.068432][   T33] audit: type=1800 audit(1757324302.512:522): pid=10081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1535" name="file1" dev="loop0" ino=260 res=0 errno=0
[  215.109895][   T33] audit: type=1804 audit(1757324302.552:523): pid=10081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1535" name="/newroot/546/file0/file1" dev="loop0" ino=260 res=1 errno=0
[  215.214023][ T5851] BTRFS info (device loop0): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  215.592167][ T5809] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  215.679421][T10126] loop3: detected capacity change from 0 to 1764
[  215.743103][ T5809] usb 1-1: Using ep0 maxpacket: 16
[  215.749023][ T5809] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  215.760503][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  215.769725][ T5809] usb 1-1: Product: syz
[  215.773746][ T5809] usb 1-1: Manufacturer: syz
[  215.775220][ T5809] usb 1-1: SerialNumber: syz
[  215.785178][ T5809] usb 1-1: config 0 descriptor??
[  215.798225][ T5809] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected
[  215.809090][ T5809] usb 1-1: Detected FT232H
[  216.000738][ T5809] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  216.432278][ T5809] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  216.450681][T10147] loop1: detected capacity change from 0 to 128
[  216.456211][T10147] ufs: You didn't specify the type of your ufs filesystem
[  216.456211][T10147] 
[  216.456211][T10147] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ...
[  216.456211][T10147] 
[  216.456211][T10147] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old
[  216.518181][T10147] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2
[  216.620757][ T5809] usb 1-1: USB disconnect, device number 17
[  216.633890][ T5809] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  216.638158][ T5809] ftdi_sio 1-1:0.0: device disconnected
[  216.674728][T10155] IPVS: Error joining to the multicast group
[  216.830235][ T5930] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  216.883398][T10157] loop3: detected capacity change from 0 to 32768
[  216.901712][T10157] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  216.914970][T10157] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  216.947876][ T6660] ocfs2: Unmounting device (7,3) on (node local)
[  217.002305][ T5930] usb 2-1: Using ep0 maxpacket: 16
[  217.006842][ T5930] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  217.013114][ T5930] usb 2-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice=f6.59
[  217.016763][ T5930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  217.019916][ T5930] usb 2-1: Product: syz
[  217.024170][ T5930] usb 2-1: Manufacturer: syz
[  217.026081][ T5930] usb 2-1: SerialNumber: syz
[  217.039447][ T5930] usb 2-1: config 0 descriptor??
[  217.065632][ T5930] peak_usb 2-1:0.0 can0: sending cmd f=0x6 n=0x1 failure: -22
[  217.068653][ T5930] peak_usb 2-1:0.0: unable to read PCAN-USB serial number (err -22)
[  217.121659][ T5930] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -22
[  217.256616][ T5930] usb 2-1: USB disconnect, device number 20
[  217.449943][T10170] loop3: detected capacity change from 0 to 32768
[  217.470472][T10170] JBD2: Ignoring recovery information on journal
[  217.507959][T10170] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  217.554102][ T6660] ocfs2: Unmounting device (7,3) on (node local)
[  217.671107][T10183] lo: entered allmulticast mode
[  217.706710][T10183] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1570'.
[  217.711545][T10182] lo: left allmulticast mode
[  217.804198][T10189] loop3: detected capacity change from 0 to 512
[  217.809058][T10189] EXT4-fs (loop3): bad s_want_extra_isize: 11962
[  218.174198][T10192] loop1: detected capacity change from 0 to 32768
[  218.186146][T10192] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  218.218488][T10192] XFS (loop1): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  218.230426][ T5930] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  218.232965][T10192] XFS (loop1): Starting recovery (logdev: internal)
[  218.266473][T10192] XFS (loop1): Ending recovery (logdev: internal)
[  218.304811][ T5845] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  218.392746][ T5930] usb 4-1: Using ep0 maxpacket: 8
[  218.412013][ T5930] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15
[  218.414880][ T5930] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x1C, changing to 0xC
[  218.428780][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has an invalid bInterval 0, changing to 7
[  218.438968][ T5930] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  218.470769][ T5930] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8
[  218.474194][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.477386][ T5930] usb 4-1: Product: syz
[  218.479043][ T5930] usb 4-1: Manufacturer: syz
[  218.506826][ T5930] usb 4-1: SerialNumber: syz
[  218.517956][ T5930] usb 4-1: config 0 descriptor??
[  218.527897][ T5930] powermate 4-1:0.0: probe with driver powermate failed with error -5
[  218.742755][T10223] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1585'.
[  218.747903][ T5930] usb 4-1: USB disconnect, device number 14
[  218.812977][T10221] loop1: detected capacity change from 0 to 8192
[  218.851653][ T5854]  loop1: p3 p4
[  218.853164][ T5854] loop1: partition table partially beyond EOD, truncated
[  218.859079][ T5854] loop1: p3 start 8323105 is beyond EOD, truncated
[  218.873936][T10221]  loop1: p3 p4
[  218.874090][T10225] loop0: detected capacity change from 0 to 1024
[  218.876377][T10221] loop1: partition table partially beyond EOD, truncated
[  218.876564][T10221] loop1: p3 start 8323105 is beyond EOD, truncated
[  218.914774][T10225] hfsplus: bad catalog entry type
[  218.961731][ T7258] hfsplus: b-tree write err: -5, ino 4
[  219.015096][ T5854] udevd[5854]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  219.052383][T10229] loop1: detected capacity change from 0 to 2048
[  219.081945][T10229] FAT-fs (loop1): error, fat_get_cluster: detected the cluster chain loop (i_pos 1)
[  219.085892][T10229] FAT-fs (loop1): Filesystem has been set read-only
[  219.517816][T10236] loop1: detected capacity change from 0 to 512
[  219.539094][T10236] EXT4-fs: Ignoring removed nomblk_io_submit option
[  219.573894][T10236] EXT4-fs: Mount option(s) incompatible with ext3
[  219.607315][T10236] gfs2: Unexpected value for 'barrier'
[  219.897558][T10250] loop1: detected capacity change from 0 to 8
[  219.937801][T10250] SQUASHFS error: xz decompression failed, data probably corrupt
[  219.941661][T10250] SQUASHFS error: Failed to read block 0x108: -5
[  219.944613][T10250] SQUASHFS error: Unable to read metadata cache entry [106]
[  219.947627][T10250] SQUASHFS error: Unable to read inode 0x11f
[  220.030200][ T5930] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  220.051084][T10252] loop1: detected capacity change from 0 to 512
[  220.069228][T10252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  220.076277][T10252] ext4 filesystem being mounted at /541/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  220.160250][ T5845] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.203313][ T5930] usb 4-1: Using ep0 maxpacket: 32
[  220.212173][ T5930] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  220.215504][ T5930] usb 4-1: config 0 interface 0 has no altsetting 0
[  220.223885][ T5930] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1c09, bcdDevice= 0.00
[  220.232285][ T5930] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.259990][ T5930] usb 4-1: config 0 descriptor??
[  220.813272][T10266] program syz.0.1604 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  220.954213][T10269] loop0: detected capacity change from 0 to 512
[  221.005073][T10269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  221.019092][T10269] ext4 filesystem being mounted at /563/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  221.059432][T10269] Quota error (device loop0): find_tree_dqentry: Cycle in quota tree detected: block 3 index 0
[  221.085654][T10269] Quota error (device loop0): qtree_read_dquot: Can't read quota structure for id 0
[  221.108438][T10269] EXT4-fs error (device loop0): ext4_acquire_dquot:6943: comm syz.0.1605: Failed to acquire dquot type 0
[  221.289909][ T5930] corsair-psu 0003:1B1C:1C09.0009: unknown main item tag 0x0
[  221.292974][ T5930] corsair-psu 0003:1B1C:1C09.0009: unknown main item tag 0x0
[  221.295809][ T5930] corsair-psu 0003:1B1C:1C09.0009: unknown main item tag 0x0
[  221.298079][ T5930] corsair-psu 0003:1B1C:1C09.0009: unknown main item tag 0x0
[  221.300330][ T5930] corsair-psu 0003:1B1C:1C09.0009: unknown main item tag 0x0
[  221.308564][ T5930] corsair-psu 0003:1B1C:1C09.0009: hidraw0: USB HID v4.08 Device [HID 1b1c:1c09] on usb-dummy_hcd.3-1/input0
[  221.349399][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  221.589986][T10276] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1607'.
[  221.630277][ T5930] corsair-psu 0003:1B1C:1C09.0009: unable to initialize device (-110)
[  221.631224][T10278] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  221.641826][ T5930] corsair-psu 0003:1B1C:1C09.0009: probe with driver corsair-psu failed with error -110
[  221.646608][   T52] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  221.660581][ T5930] usb 4-1: USB disconnect, device number 15
[  221.736128][T10282] loop1: detected capacity change from 0 to 128
[  221.743790][T10282] EXT4-fs: Ignoring removed nomblk_io_submit option
[  221.752969][T10282] EXT4-fs (loop1): Test dummy encryption mode enabled
[  221.758935][T10282] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  221.764568][T10282] ext4 filesystem being mounted at /549/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  221.798669][T10282] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  221.815015][   T52] usb 1-1: config 0 has an invalid interface number: 11 but max is 0
[  221.818560][   T52] usb 1-1: config 0 has no interface number 0
[  221.821325][   T52] usb 1-1: config 0 interface 11 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 8
[  221.824831][   T52] usb 1-1: config 0 interface 11 altsetting 0 endpoint 0xE has invalid maxpacket 1023, setting to 64
[  221.833117][   T52] usb 1-1: config 0 interface 11 altsetting 0 bulk endpoint 0x87 has invalid maxpacket 1024
[  221.839508][   T52] usb 1-1: New USB device found, idVendor=0f3d, idProduct=68aa, bcdDevice=b4.ca
[  221.839752][ T5845] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  221.846849][   T52] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  221.850504][   T52] usb 1-1: Product: syz
[  221.852178][   T52] usb 1-1: Manufacturer: syz
[  221.854008][   T52] usb 1-1: SerialNumber: syz
[  221.865602][   T52] usb 1-1: config 0 descriptor??
[  221.870727][T10274] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  221.890431][T10274] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  222.215748][T10274] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  222.221076][T10274] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  222.244278][T10298] loop3: detected capacity change from 0 to 16
[  222.259033][   T52] usb 1-1: No status endpoint found
[  222.262210][T10298] erofs (device loop3): mounted with root inode @ nid 36.
[  222.500698][   T52] usb 1-1: USB disconnect, device number 18
[  222.635280][T10298] erofs (device loop3): corrupted dir block 72 @ nid 36
[  222.777204][T10301] sg_write: data in/out 64380/1 bytes for SCSI command 0x1c-- guessing data in;
[  222.777204][T10301]    program syz.3.1616 not setting count and/or reply_len properly
[  223.376723][T10312] loop0: detected capacity change from 0 to 512
[  223.400354][T10312] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  223.409802][T10312] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  223.419508][T10312] EXT4-fs (loop0): 1 truncate cleaned up
[  223.422330][T10312] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  223.473112][ T5851] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  223.601822][T10326] loop1: detected capacity change from 0 to 256
[  223.620824][T10326] FAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  223.727386][T10320] loop3: detected capacity change from 0 to 32768
[  223.764800][T10320] read_mapping_page failed!
[  223.766445][T10320] ERROR: (device loop3): txCommit: 
[  223.766445][T10320] 
[  223.788002][    C0] hrtimer: interrupt took 9812 ns
[  223.795606][  T117] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0)
[  223.798030][  T117] ------------[ cut here ]------------
[  223.799803][  T117] kernel BUG at fs/jfs/jfs_txnmgr.c:931!
[  223.804454][  T117] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  223.807380][  T117] CPU: 1 UID: 0 PID: 117 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  223.810149][  T117] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  223.813381][  T117] RIP: 0010:txUnlock+0xdaf/0xdf0
[  223.815264][  T117] Code: e2 fd 90 0f 0b e8 71 1b 7c fe 48 c7 c7 e0 4f e4 8b 48 c7 c6 d9 4b e4 8b ba a3 03 00 00 48 c7 c1 e0 5c e4 8b e8 22 f3 e2 fd 90 <0f> 0b e8 4a 1b 7c fe 48 c7 c7 e0 4f e4 8b 48 c7 c6 d9 4b e4 8b ba
[  223.821325][  T117] RSP: 0018:ffffc90002457ba8 EFLAGS: 00010246
[  223.823323][  T117] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 4f1aaa86a6882100
[  223.826166][  T117] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  223.828502][  T117] RBP: ffffc90001fba1f8 R08: ffffc900024578c7 R09: 1ffff9200048af18
[  223.830937][  T117] R10: dffffc0000000000 R11: fffff5200048af19 R12: dffffc0000000000
[  223.833305][  T117] R13: 1ffff11021a7214b R14: ffff88810d390a58 R15: 0000000000000000
[  223.836079][  T117] FS:  0000000000000000(0000) GS:ffff8881a39fa000(0000) knlGS:0000000000000000
[  223.838763][  T117] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  223.840795][  T117] CR2: 0000001b32520ff8 CR3: 000000010e996000 CR4: 00000000000006f0
[  223.843270][  T117] Call Trace:
[  223.844529][  T117]  <TASK>
[  223.845718][  T117]  ? lockdep_hardirqs_on+0x9c/0x150
[  223.847665][  T117]  jfs_lazycommit+0x584/0xa90
[  223.849547][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[  223.851522][  T117]  ? __pfx_default_wake_function+0x10/0x10
[  223.853770][  T117]  ? __kthread_parkme+0x7b/0x200
[  223.855739][  T117]  ? __kthread_parkme+0x1a1/0x200
[  223.857679][  T117]  kthread+0x711/0x8a0
[  223.859271][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[  223.861319][  T117]  ? __pfx_kthread+0x10/0x10
[  223.863128][  T117]  ? _raw_spin_unlock_irq+0x23/0x50
[  223.865157][  T117]  ? lockdep_hardirqs_on+0x9c/0x150
[  223.867186][  T117]  ? __pfx_kthread+0x10/0x10
[  223.869009][  T117]  ret_from_fork+0x47f/0x820
[  223.870801][  T117]  ? __pfx_ret_from_fork+0x10/0x10
[  223.872745][  T117]  ? __switch_to_asm+0x39/0x70
[  223.874631][  T117]  ? __switch_to_asm+0x33/0x70
[  223.876558][  T117]  ? __pfx_kthread+0x10/0x10
[  223.878385][  T117]  ret_from_fork_asm+0x1a/0x30
[  223.880264][  T117]  </TASK>
[  223.881523][  T117] Modules linked in:
[  223.883735][  T117] ---[ end trace 0000000000000000 ]---
[  223.897269][T10324] loop0: detected capacity change from 0 to 32768
[  223.901569][  T117] RIP: 0010:txUnlock+0xdaf/0xdf0
[  223.903647][  T117] Code: e2 fd 90 0f 0b e8 71 1b 7c fe 48 c7 c7 e0 4f e4 8b 48 c7 c6 d9 4b e4 8b ba a3 03 00 00 48 c7 c1 e0 5c e4 8b e8 22 f3 e2 fd 90 <0f> 0b e8 4a 1b 7c fe 48 c7 c7 e0 4f e4 8b 48 c7 c6 d9 4b e4 8b ba
[  223.912543][  T117] RSP: 0018:ffffc90002457ba8 EFLAGS: 00010246
[  223.914965][  T117] RAX: 0000000000000037 RBX: 0000000000001000 RCX: 4f1aaa86a6882100
[  223.918125][  T117] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  223.921312][  T117] RBP: ffffc90001fba1f8 R08: ffffc900024578c7 R09: 1ffff9200048af18
[  223.924397][  T117] R10: dffffc0000000000 R11: fffff5200048af19 R12: dffffc0000000000
[  223.927414][  T117] R13: 1ffff11021a7214b R14: ffff88810d390a58 R15: 0000000000000000
[  223.930945][  T117] FS:  0000000000000000(0000) GS:ffff8881a39fa000(0000) knlGS:0000000000000000
[  223.934557][  T117] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  223.937090][  T117] CR2: 00007f6932f733e0 CR3: 00000001072d6000 CR4: 00000000000006f0
[  223.943878][  T117] Kernel panic - not syncing: Fatal exception
[  223.946967][  T117] Kernel Offset: disabled
[  223.948684][  T117] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:34:15  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=0000000000000000 RCX=0000000000000000 RDX=1ffff11024e3768c
RSI=1ffff920009d0fb1 RDI=1ffff920009d0fb0 RBP=ffffc90004e87b10 RSP=ffffc90004e87960
R8 =ffff888110b658af R9 =1ffff1102216cb15 R10=dffffc0000000000 R11=ffffed102216cb16
R12=dffffc0000000000 R13=ffff88802bfb3000 R14=0000000000001000 R15=0000000000001000
RIP=ffffffff84c939be RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6933e5e6c0 ffffffff 00c00000
GS =0000 ffff8880b83fa000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffff876cff8 CR3=000000002ed8c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 ff000000000000ff XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f6aaf612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000030 RBX=0000000000000030 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900024572f0
R8 =ffff888106958237 R9 =1ffff11020d2b046 R10=dffffc0000000000 R11=ffffffff85526070
R12=dffffc0000000000 R13=ffffffff99d1b930 R14=ffffffff9a02e080 R15=0000000000000000
RIP=ffffffff855260ec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a39fa000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32520ff8 CR3=000000010e996000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=5fa4688fc4ef4a45 ebb60c1e277229b7
XMM02=e1b931e4df3ed2b6 acd4540391661d25 XMM03=c07fcb162c58b162 c58b162c58b1dcf3
XMM04=80040e0174ee4d55 c040ffff000000bf XMM05=0121800406bc1000 02be02000480040a
XMM06=10000380040b8004 0e0174ee4d55c040 XMM07=ffff000000bfc07f cb162c58b162c58b
XMM08=162c58b1dcf3e1b9 31e4df3ed2b6acd4 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
