last executing test programs:

47.074591285s ago: executing program 0 (id=301):
r0 = socket$phonet_pipe(0x23, 0x5, 0x2)
getsockopt$PNPIPE_INITSTATE(r0, 0x113, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4)

46.89371771s ago: executing program 0 (id=303):
bind$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c)
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x3, 0x1}})
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)
ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0x9dc5, 0x0, 0x0, 0xf})

46.814997104s ago: executing program 0 (id=305):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006272696467650000140002800800080088a80000060027"], 0x44}}, 0x0)

46.73205219s ago: executing program 0 (id=306):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680), 0x3, 0x470, &(0x7f0000000dc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

46.682051038s ago: executing program 0 (id=309):
syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file2\x00', 0x14552, &(0x7f0000000b40)=ANY=[], 0xfb, 0x11ff, &(0x7f0000001280)="$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")
truncate(&(0x7f0000000040)='./file2\x00', 0x8000c00)

46.414128087s ago: executing program 0 (id=314):
syz_usb_connect(0x2, 0x10e, &(0x7f00000047c0)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e0100000624060001", @ANYBLOB="7e943709a26e0512574b35a82af5166479"], 0x0)

46.359784636s ago: executing program 32 (id=314):
syz_usb_connect(0x2, 0x10e, &(0x7f00000047c0)=ANY=[@ANYBLOB="120100006a249f08ec1888323a3f010203010902fc0001870000000904e600030e0100000624060001", @ANYBLOB="7e943709a26e0512574b35a82af5166479"], 0x0)

37.423319386s ago: executing program 1 (id=406):
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f0000000080), 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000480)={'vcan0\x00', <r1=>0x0})
sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)={0x5, 0x0, 0x0, {0x77359400}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "5893df66bf3ce816"}}, 0x48}}, 0x0)
sendmsg$can_bcm(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x1d, r1}, 0x10, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="0600"], 0x48}}, 0x0)

37.423132719s ago: executing program 1 (id=407):
r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0x80109, "fa02946a000000001dda524f03000000000000000000003673000000002000", <r1=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r1, 0xc0303e03, &(0x7f0000000080)={"6739669f274d13b691ebe45bebe3f5b53e0ca34dd02acecdc67c5e3126628168", r0})

37.334548281s ago: executing program 1 (id=408):
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1)

37.334441374s ago: executing program 1 (id=409):
syz_mount_image$minix(&(0x7f0000000a80), &(0x7f0000000080)='./file1\x00', 0x1010088, &(0x7f0000000000)=ANY=[], 0x1, 0x1f1, &(0x7f0000000340)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000380)='./bus\x00', 0x1004080, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

37.212761239s ago: executing program 1 (id=410):
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c)
listen(r0, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000140)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x1c, 0x6, 0x0, @local, @local, {[], {{0xfffe, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x200, {[@fastopen={0x1e, 0x8, "351f3275786f"}]}}}}}}}}, 0x0)

37.084455944s ago: executing program 1 (id=412):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x96)
pwrite64(r0, &(0x7f0000000140)='2', 0x155c2, 0x8000c64)
creat(&(0x7f0000000440)='./file1\x00', 0x0)

36.964455813s ago: executing program 33 (id=412):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x3800480, &(0x7f0000002200), 0x45, 0x786, &(0x7f00000007c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2, 0x96)
pwrite64(r0, &(0x7f0000000140)='2', 0x155c2, 0x8000c64)
creat(&(0x7f0000000440)='./file1\x00', 0x0)

2.792208423s ago: executing program 3 (id=791):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040)

2.69480404s ago: executing program 3 (id=792):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@mcast2, 0x300, 0x0, 0x3, 0x9, 0x0, 0x6}, 0x20)
setresuid(0xee00, 0xee00, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00', 0x300, 0x0, 0x3, 0x9, 0x3, 0x6}, 0x20)

2.63360173s ago: executing program 3 (id=794):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x18, 0x40, 0x107, 0xfffffffc, 0x0, {0x4, 0x7c}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)

2.533944037s ago: executing program 3 (id=795):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', <r3=>0x0})
sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r2, @ANYBLOB="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", @ANYRES32=r3, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0)

2.472934663s ago: executing program 3 (id=799):
r0 = syz_open_dev$media(&(0x7f0000000000), 0x100000000, 0x200)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x94)
mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESOCT=r1])

2.402544154s ago: executing program 3 (id=801):
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e010000082405010202050507"], 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000006c0)={0x84, &(0x7f0000000240)={0xa1357a3a39cdb86f, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.032492354s ago: executing program 4 (id=807):
r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000001240)={'wlan1\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000007c0)={0x30, r0, 0x1, 0x71bd25, 0x3, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xe0}]}, {0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x20008001}, 0x4)

2.02993456s ago: executing program 4 (id=813):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000280)='./file1\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@nodatacow}, {@nobarrier}, {@usebackuproot}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x3}}, {@autodefrag}, {@ref_verify}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x65, 0x67, 0x78, 0x6b, 0xb61148b71cab6665]}}]}, 0x3, 0x510e, &(0x7f00000196c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000080)={0x0, 0x1, 0x0, 0xfffc})
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f00000000c0)={0x17c04, 0xffffffffffffffff, 0x7, 0xfff, 0x7})

1.610586703s ago: executing program 4 (id=810):
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000740), 0x101800, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r0, 0xc018620c, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x1000, 0x1, 0x40000333}, &(0x7f00000006c0)=<r4=>0x0, &(0x7f00000001c0)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0)

473.765837ms ago: executing program 4 (id=818):
syz_mount_image$vfat(&(0x7f0000001200), &(0x7f0000000000)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[@ANYRES16=0x0], 0xfd, 0x1227, &(0x7f00000024c0)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(r0, 0xc0185879, &(0x7f0000000080)={@id={0x2, 0x0, @c}})

301.194756ms ago: executing program 4 (id=819):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000040)={[{'fsc,ntext'}]})

194.845612ms ago: executing program 4 (id=821):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000940)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x20108c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRES64, @ANYRESOCT, @ANYRESOCT, @ANYBLOB="34dd0f00135ea23c22845cc5474e7cd7e7ab01d33c4486b62e3b4f9822364f30c34779205bbd653e2b0e7bbbcba1e3dc78833fbb91474ba644d13b9a3bfddc66bfc8ba12f680d556b1b4d4a1ec5b55eeedc8454a11312f3025c08220a36ab6d810b4de0836f341eb18f984b2a7feaef926859b77e733f9bb7220a2460746c81448ccc7a901e32427b8cc656a1b8a1c52fac1524d3a90fc424c13d6cc5708aa1ea205ddd2b967de4068647f1a5fade5146a344fd31daeeaeede8f61b1066ca3a10599230edf07182401e51b28d35033a6f652886ee8d43d7ebf2d546b"], 0x1, 0x61f5, &(0x7f00000075c0)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x185242, 0x0)

194.642795ms ago: executing program 2 (id=822):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x14}, @TCA_FQ_PLIMIT={0x8, 0x1, 0x200}]}}]}, 0x40}}, 0x4048000)

143.766922ms ago: executing program 2 (id=823):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), r0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'ipvlan1\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x802}, 0x4008090)

143.597787ms ago: executing program 2 (id=824):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000250029"], 0x14}}, 0x0)

82.255782ms ago: executing program 2 (id=825):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4)
r1 = memfd_secret(0x0)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x11, r1, 0x0)
ftruncate(r1, 0x51a9497)
connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4)
sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)='2', 0x1}], 0x1}}], 0x1, 0x4000007)

82.02263ms ago: executing program 2 (id=826):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r0, 0x0, 0x30, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x5}}, 0x40)

0s ago: executing program 2 (id=827):
r0 = gettid()
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
futex(&(0x7f000000cffc)=0x4, 0x80000000000b, 0x4, 0x0, &(0x7f0000048000), 0x0)
timer_settime(0x0, 0x1, &(0x7f00000002c0)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0)
r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0)
ioctl$EVIOCGMASK(r1, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"})
ioctl$F2FS_IOC_PRECACHE_EXTENTS(r1, 0x80004509, 0x0)

kernel console output (not intermixed with test programs):

] ntfs3(loop2): try to read out of volume at offset 0x1ffe00
[   58.293254][   T51] usb 1-1: USB disconnect, device number 2
[   58.405946][ T5236] Bluetooth: hci1: command tx timeout
[   58.482504][ T5236] Bluetooth: hci2: command tx timeout
[   58.655080][ T5990] random: crng reseeded on system resumption
[   58.853663][ T5999] loop0: detected capacity change from 0 to 512
[   58.874478][ T5999] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.882095][ T5236] Bluetooth: hci0: command tx timeout
[   58.886431][ T5999] ext4 filesystem being mounted at /7/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   58.915017][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   59.052181][   T51] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   59.232155][   T51] usb 2-1: Using ep0 maxpacket: 32
[   59.243545][   T51] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   59.246656][   T51] usb 2-1: config 0 has no interface number 0
[   59.249004][   T51] usb 2-1: config 0 interface 1 altsetting 9 has an invalid descriptor for endpoint zero, skipping
[   59.260870][   T51] usb 2-1: config 0 interface 1 has no altsetting 0
[   59.273487][   T51] usb 2-1: New USB device found, idVendor=0572, idProduct=58a5, bcdDevice=27.0a
[   59.277010][   T51] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.283460][   T51] usb 2-1: Product: syz
[   59.288749][   T51] usb 2-1: Manufacturer: syz
[   59.290515][   T51] usb 2-1: SerialNumber: syz
[   59.298185][   T51] usb 2-1: config 0 descriptor??
[   59.513583][   T51] cx231xx 2-1:0.1: New device syz syz @ 480 Mbps (0572:58a5) with 1 interfaces
[   59.518182][   T51] cx231xx 2-1:0.1: Not found matching IAD interface
[   59.525141][   T51] usb 2-1: USB disconnect, device number 3
[   60.069083][ T6029] loop0: detected capacity change from 0 to 128
[   60.084883][ T6029] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   60.102336][ T6029] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   60.191599][ T6033] netlink: 132 bytes leftover after parsing attributes in process `syz.1.45'.
[   60.325454][ T6038] loop1: detected capacity change from 0 to 256
[   60.340481][ T6038] exfat: Deprecated parameter 'utf8'
[   60.380694][ T6038] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   60.386894][   T33] audit: type=1800 audit(1755563891.668:3): pid=6038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.47" name="file2" dev="loop1" ino=1048592 res=0 errno=0
[   60.484802][ T5236] Bluetooth: hci1: command tx timeout
[   60.605333][ T5236] Bluetooth: hci2: command tx timeout
[   60.732172][   T51] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   60.920212][   T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   60.927354][   T51] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   60.931692][   T51] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00
[   60.937663][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   60.964747][   T51] usb 1-1: config 0 descriptor??
[   60.973054][ T5236] Bluetooth: hci0: command tx timeout
[   61.395573][ T6057] loop1: detected capacity change from 0 to 32768
[   61.404273][ T6057] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.55 (6057)
[   61.415507][   T51] cm6533_jd 0003:0D8C:0022.0002: invalid report_size -101239751
[   61.419375][   T51] cm6533_jd 0003:0D8C:0022.0002: item 0 4 1 7 parsing failed
[   61.423013][   T51] cm6533_jd 0003:0D8C:0022.0002: parse failed
[   61.426570][ T6057] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   61.430986][ T6057] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   61.441114][   T51] cm6533_jd 0003:0D8C:0022.0002: probe with driver cm6533_jd failed with error -22
[   61.444797][ T6057] BTRFS info (device loop1): using free-space-tree
[   61.617209][   T51] usb 1-1: USB disconnect, device number 3
[   61.667895][ T5848] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[   61.715440][ T6070] loop2: detected capacity change from 0 to 32768
[   61.829938][ T6070] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,usrquota,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[   61.829957][ T6070]   allowing incompatible features above 0.9: (unknown version)
[   61.829965][ T6070]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   61.858703][ T6070] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   61.867716][ T6070] bcachefs (loop2): initializing new filesystem
[   61.885274][ T6070] bcachefs (loop2): going read-write
[   61.896845][ T6070] bcachefs (loop2): marking superblocks
[   61.918669][ T6070] bcachefs (loop2): initializing freespace
[   61.928299][ T6070] bcachefs (loop2): done initializing freespace
[   61.939835][ T6070] bcachefs (loop2): reading snapshots table
[   61.944296][ T6070] bcachefs (loop2): reading snapshots done
[   61.957618][ T6070] bcachefs (loop2):  loop2: Superblock write was silently dropped! (seq 0 expected 42)
[   61.964266][ T6070] bcachefs (loop2): done starting filesystem
[   62.015769][ T6070] syz.2.57 (6070) used greatest stack depth: 15896 bytes left
[   62.020644][ T5850] bcachefs (loop2): shutting down
[   62.032518][ T5850] bcachefs (loop2): going read-only
[   62.035227][ T5850] bcachefs (loop2): finished waiting for writes to stop
[   62.043282][ T5850] bcachefs (loop2): flushing journal and stopping allocators, journal seq 4
[   62.067740][ T5850] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 6
[   62.073895][ T5850] bcachefs (loop2): clean shutdown complete, journal seq 7
[   62.078006][ T5850] bcachefs (loop2): marking filesystem clean
[   62.101888][ T5850] bcachefs (loop2): shutdown complete
[   62.176311][ T6095] loop1: detected capacity change from 0 to 32768
[   62.544074][ T6119] ptrace attach of "/syz-executor exec"[5843] was attempted by "                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                               
[   62.562052][ T5236] Bluetooth: hci1: command tx timeout
[   62.607643][ T6121] loop1: detected capacity change from 0 to 2048
[   62.613926][ T6121] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   62.625867][   T33] audit: type=1800 audit(1755563893.928:4): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.72" name="file2" dev="loop1" ino=1347 res=0 errno=0
[   62.653123][ T5236] Bluetooth: hci2: command tx timeout
[   63.109142][ T6127] loop1: detected capacity change from 0 to 32768
[   63.136213][ T6127] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   63.148810][ T6127] XFS (loop1): Ending clean mount
[   63.155045][ T6127] XFS (loop1): Quotacheck needed: Please wait.
[   63.175652][ T6127] XFS (loop1): Quotacheck: Done.
[   63.236986][ T5848] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   64.339261][ T6152] loop0: detected capacity change from 0 to 32768
[   64.353555][ T6152] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.81 (6152)
[   64.377714][ T6152] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   64.383583][ T6152] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[   64.427569][ T6152] BTRFS info (device loop0): disk space caching is enabled
[   64.430554][ T6152] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   64.505792][ T6152] BTRFS info (device loop0): rebuilding free space tree
[   64.554410][ T6152] BTRFS info (device loop0): disabling free space tree
[   64.556972][ T6152] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   64.560656][ T6152] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   64.577669][ T6176] netlink: 104 bytes leftover after parsing attributes in process `syz.1.84'.
[   64.740699][ T6179] loop2: detected capacity change from 0 to 512
[   64.754200][ T5843] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   64.796624][ T6181] syz.1.86: attempt to access beyond end of device
[   64.796624][ T6181] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0
[   64.822937][ T6181] gfs2: error -5 reading superblock
[   64.992824][ T6189] loop0: detected capacity change from 0 to 1024
[   64.998581][ T6189] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[   65.014301][ T6189] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[   65.017800][ T6189] EXT4-fs (loop0): invalid journal inode
[   65.020088][ T6189] EXT4-fs (loop0): can't get journal size
[   65.041104][ T6189] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   65.063673][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.064957][ T6196] loop2: detected capacity change from 0 to 512
[   65.079870][ T6196] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   65.100910][ T6196] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   65.114947][ T6196] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   65.124044][ T6196] EXT4-fs (loop2): 1 truncate cleaned up
[   65.136668][ T6196] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   65.262741][   T10] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   65.283793][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.367202][ T6206] capability: warning: `syz.2.97' uses 32-bit capabilities (legacy support in use)
[   65.392100][   T51] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[   65.415085][   T10] usb 2-1: Using ep0 maxpacket: 8
[   65.423090][   T10] usb 2-1: config 162 has an invalid interface number: 45 but max is 1
[   65.430325][   T10] usb 2-1: config 162 has an invalid interface number: 87 but max is 1
[   65.436616][   T10] usb 2-1: config 162 has no interface number 0
[   65.439357][   T10] usb 2-1: config 162 has no interface number 1
[   65.443692][   T10] usb 2-1: config 162 interface 45 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[   65.448881][   T10] usb 2-1: config 162 interface 87 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[   65.456222][   T10] usb 2-1: config 162 interface 87 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[   65.466798][   T10] usb 2-1: config 162 interface 87 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 1024
[   65.476072][   T10] usb 2-1: config 162 interface 87 altsetting 1 bulk endpoint 0x86 has invalid maxpacket 1024
[   65.480038][   T10] usb 2-1: config 162 interface 87 altsetting 1 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[   65.485108][   T10] usb 2-1: config 162 interface 45 has no altsetting 0
[   65.487976][   T10] usb 2-1: config 162 interface 87 has no altsetting 0
[   65.504833][   T10] usb 2-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=32.4e
[   65.511444][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.515679][   T10] usb 2-1: Product: syz
[   65.517259][   T10] usb 2-1: Manufacturer: syz
[   65.520687][   T10] usb 2-1: SerialNumber: syz
[   65.553690][   T51] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   65.557518][   T51] usb 1-1: config 0 has no interfaces?
[   65.559587][   T51] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[   65.564502][   T51] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   65.569199][   T51] usb 1-1: config 0 descriptor??
[   65.738004][   T10] pl2303 2-1:162.45: required endpoints missing
[   65.747109][   T10] pl2303 2-1:162.87: required interrupt-in endpoint missing
[   65.757098][   T10] usb 2-1: USB disconnect, device number 4
[   65.780674][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'.
[   65.784683][ T6198] netlink: 'syz.0.94': attribute type 7 has an invalid length.
[   65.787629][ T6198] netlink: 'syz.0.94': attribute type 8 has an invalid length.
[   65.790466][ T6198] netlink: 4 bytes leftover after parsing attributes in process `syz.0.94'.
[   65.796503][    T9] usb 1-1: USB disconnect, device number 4
[   65.886288][ T6222] tipc: Started in network mode
[   65.888250][ T6222] tipc: Node identity 8af7fae7bc56, cluster identity 4711
[   65.891128][ T6222] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   65.896289][ T6222] syzkaller0: entered promiscuous mode
[   65.898395][ T6222] syzkaller0: entered allmulticast mode
[   65.913665][ T6222] tipc: Resetting bearer <eth:syzkaller0>
[   65.917173][ T6221] tipc: Resetting bearer <eth:syzkaller0>
[   65.924268][ T6221] tipc: Disabling bearer <eth:syzkaller0>
[   66.053598][ T6226] loop2: detected capacity change from 0 to 1024
[   66.180122][ T6230] loop2: detected capacity change from 0 to 2048
[   66.184359][ T6230] =======================================================
[   66.184359][ T6230] WARNING: The mand mount option has been deprecated and
[   66.184359][ T6230]          and is ignored by this kernel. Remove the mand
[   66.184359][ T6230]          option from the mount to silence this warning.
[   66.184359][ T6230] =======================================================
[   66.212861][ T6230] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   66.226288][ T6231] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   66.227306][ T6230] syz.2.108: attempt to access beyond end of device
[   66.227306][ T6230] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[   66.253793][ T6230] syz.2.108: attempt to access beyond end of device
[   66.253793][ T6230] loop2: rw=0, sector=9437254, nr_sectors = 2 limit=2048
[   66.258796][ T6230] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=0)
[   66.289894][ T6233] Zero length message leads to an empty skb
[   66.361777][ T6233] loop1: detected capacity change from 0 to 256
[   66.372260][ T6233] exfat: Deprecated parameter 'namecase'
[   66.391051][ T6233] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d)
[   66.726644][ T6246] loop0: detected capacity change from 0 to 32768
[   67.211770][ T6270] loop0: detected capacity change from 0 to 1024
[   67.229128][ T6270] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   67.230270][ T6266] loop1: detected capacity change from 0 to 32768
[   67.234085][ T6270] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   67.288967][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   67.411391][ T6276] loop0: detected capacity change from 0 to 4096
[   67.440647][ T6277] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   67.487573][ T6276] overlayfs: upper fs does not support tmpfile.
[   67.497788][ T6276] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   67.500396][ T6276] overlayfs: failed to set xattr on upper
[   67.504483][ T6276] overlayfs: ...falling back to redirect_dir=nofollow.
[   67.507039][ T6276] overlayfs: ...falling back to index=off.
[   67.509299][ T6276] overlayfs: ...falling back to uuid=null.
[   67.608707][ T6281] netlink: 28 bytes leftover after parsing attributes in process `syz.0.131'.
[   67.638424][ T6283] loop0: detected capacity change from 0 to 256
[   67.712034][   T51] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   67.882496][   T51] usb 3-1: Using ep0 maxpacket: 8
[   67.887849][   T51] usb 3-1: unable to get BOS descriptor or descriptor too short
[   67.892766][   T51] usb 3-1: config 4 interface 0 has no altsetting 0
[   67.899626][   T51] usb 3-1: string descriptor 0 read error: -22
[   67.902491][   T51] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[   67.906324][   T51] usb 3-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[   67.933524][   T51] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[   67.946642][   T51] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[   67.963141][   T51] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[   67.971748][   T51] usb 3-1: media controller created
[   68.018105][ T6288] loop1: detected capacity change from 0 to 764
[   68.037794][ T6288] Symlink component flag not implemented
[   68.040168][ T6288] Symlink component flag not implemented (7)
[   68.128529][   T51] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   68.456077][   T51] usb 3-1: USB disconnect, device number 2
[   69.047576][   T51] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   69.150874][ T6310] warning: `syz.2.144' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   69.204171][   T51] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[   69.210279][   T51] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   69.219464][   T51] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[   69.224702][   T51] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[   69.227961][   T51] usb 2-1: Manufacturer: syz
[   69.231291][ T6312] loop2: detected capacity change from 0 to 512
[   69.233248][   T51] usb 2-1: config 0 descriptor??
[   69.242892][ T6312] EXT4-fs: Ignoring removed oldalloc option
[   69.246772][   T51] igorplugusb 2-1:0.0: incorrect number of endpoints
[   69.255038][ T6312] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   69.276186][ T6312] EXT4-fs (loop2): 1 truncate cleaned up
[   69.293429][ T6312] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   69.315524][   T33] audit: type=1800 audit(1755563900.618:5): pid=6312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.145" name="file2" dev="loop2" ino=16 res=0 errno=0
[   69.333195][ T6316] loop0: detected capacity change from 0 to 128
[   69.444184][ T5878] usb 2-1: USB disconnect, device number 5
[   69.662037][   T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[   69.822103][   T10] usb 1-1: Using ep0 maxpacket: 8
[   69.830122][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[   69.835416][   T10] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config
[   69.839733][   T10] usb 1-1: config 8 interface 0 altsetting 7 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   69.845816][   T10] usb 1-1: config 8 interface 0 altsetting 7 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   69.850144][   T10] usb 1-1: config 8 interface 0 altsetting 7 endpoint 0x8F has invalid wMaxPacketSize 0
[   69.854239][   T10] usb 1-1: config 8 interface 0 altsetting 7 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   69.859272][   T10] usb 1-1: config 8 interface 0 has no altsetting 0
[   69.866436][   T10] usb 1-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=6a.e5
[   69.870149][   T10] usb 1-1: New USB device strings: Mfr=1, Product=66, SerialNumber=3
[   69.874036][   T10] usb 1-1: Product: syz
[   69.875802][   T10] usb 1-1: Manufacturer: syz
[   69.877726][   T10] usb 1-1: SerialNumber: syz
[   70.100211][   T10] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[   70.104561][   T10] usb 1-1: selecting invalid altsetting 0
[   70.137783][   T10] snd-usb-audio 1-1:8.0: probe with driver snd-usb-audio failed with error -12
[   70.146145][   T10] usb 1-1: USB disconnect, device number 5
[   70.196570][ T6323] udevd[6323]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:8.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   70.307523][ T5957] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   70.472037][ T5957] usb 2-1: Using ep0 maxpacket: 16
[   70.481057][ T5957] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   70.486154][ T5957] usb 2-1: New USB device found, idVendor=046d, idProduct=c531, bcdDevice= 0.00
[   70.500466][ T5957] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.507134][ T5957] usb 2-1: config 0 descriptor??
[   70.967394][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[   70.970251][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[   71.019616][ T6340] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[   71.076935][ T6312] Set syz1 is full, maxelem 65536 reached
[   71.104016][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.120154][ T6342] loop0: detected capacity change from 0 to 2048
[   71.133529][ T6342] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[   71.146143][ T5878] usb 2-1: USB disconnect, device number 6
[   71.149146][ T6342] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   71.154047][ T6342] UDF-fs: error (device loop0): udf_read_inode: (ino 1408) failed !bh
[   71.158015][ T6342] UDF-fs: error (device loop0): udf_fill_super: Error in udf_iget, block=96, partition=0
[   71.252398][ T6344] loop2: detected capacity change from 0 to 4096
[   71.267618][ T6345] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   71.282038][   T33] audit: type=1800 audit(1755563902.578:6): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.159" name="file1" dev="loop2" ino=15 res=0 errno=0
[   71.690917][ T6358] input: syz0 as /devices/virtual/input/input4
[   71.698546][ T5957] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[   71.789470][ T6362] syz.2.167 calls setitimer() with new_value NULL pointer. Misfeature support will be removed
[   71.909228][ T5957] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.922378][ T5957] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   71.926351][ T5957] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.929834][ T5957] usb 1-1: Product: syz
[   71.931714][ T5957] usb 1-1: Manufacturer: syz
[   71.935065][ T5957] usb 1-1: SerialNumber: syz
[   72.442070][ T5878] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   72.592176][ T5878] usb 3-1: Using ep0 maxpacket: 8
[   72.665535][ T5878] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   72.670542][ T5878] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   72.682038][ T5878] usb 3-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[   72.685688][ T5878] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.701756][ T6370] loop1: detected capacity change from 0 to 128
[   72.708022][ T5878] usb 3-1: config 0 descriptor??
[   72.708613][ T6370] affs: Invalid blocksize (512, 1024, 2048, 4096 allowed)
[   73.069199][ T5957] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42
[   73.084121][ T5957] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048
[   73.087267][ T5957] cdc_ncm 1-1:1.0: setting rx_max = 2048
[   73.305400][ T5878] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0
[   73.315560][ T5878] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0
[   73.317865][ T5878] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0
[   73.320128][ T5878] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0
[   73.322520][ T5878] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x7
[   73.324853][ T5878] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0
[   73.327722][ T5878] hid-rmi 0003:06CB:81A7.0004: unknown main item tag 0x0
[   73.339591][ T5878] hid-rmi 0003:06CB:81A7.0004: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.2-1/input0
[   73.391256][ T5878] usb 3-1: USB disconnect, device number 3
[   73.593552][ T5957] cdc_ncm 1-1:1.0: setting tx_max = 88
[   73.601331][ T5957] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[   73.617336][ T5957] usb 1-1: USB disconnect, device number 6
[   73.621444][ T5957] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM (NO ZLP)
[   74.188334][ T6383] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   74.243157][ T6385] loop0: detected capacity change from 0 to 64
[   74.379931][ T5843] Trying to free block not in datazone
[   74.385611][ T5843] Trying to free block not in datazone
[   74.394509][ T5843] Trying to free block not in datazone
[   74.398048][ T5843] Trying to free block not in datazone
[   74.400271][ T5843] Trying to free block not in datazone
[   74.403794][ T5843] Trying to free block not in datazone
[   74.406136][ T5843] Trying to free block not in datazone
[   74.408431][ T5843] Trying to free block not in datazone
[   74.410807][ T5843] Trying to free block not in datazone
[   74.437523][ T5843] Trying to free block not in datazone
[   74.440001][ T5843] Trying to free block not in datazone
[   74.452120][ T5843] Trying to free block not in datazone
[   74.459425][ T5843] Trying to free block not in datazone
[   74.472797][ T5843] Trying to free block not in datazone
[   74.526225][ T6392] netlink: 384 bytes leftover after parsing attributes in process `syz.0.178'.
[   74.741165][ T6407] loop0: detected capacity change from 0 to 4096
[   74.753597][ T6410] netlink: 'syz.1.189': attribute type 1 has an invalid length.
[   74.761807][ T6407] ntfs3(loop0): ino=0, mi_enum_attr
[   74.768444][ T6407] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   74.774952][ T6407] ntfs3(loop0): mft corrupted
[   74.779203][ T6407] ntfs3(loop0): Failed to load $MFT.
[   74.786831][ T6412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.190'.
[   74.790596][ T6412] netlink: 28 bytes leftover after parsing attributes in process `syz.1.190'.
[   74.846640][ T6417] loop0: detected capacity change from 0 to 8
[   74.850621][ T6417] MTD: Attempt to mount non-MTD device "/dev/loop0"
[   74.871693][ T6417] cramfs: Error -3 while decompressing!
[   74.875286][ T6417] cramfs: ffffffff99beb5b8(16)->ffff88810fe55000(4096)
[   74.878298][ T6417] cramfs: Error -3 while decompressing!
[   74.880685][ T6417] cramfs: ffffffff99beb5b8(16)->ffff88810fe55000(4096)
[   74.883948][   T33] audit: type=1800 audit(1755563906.188:7): pid=6417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.192" name="file0" dev="loop0" ino=244 res=0 errno=0
[   74.988583][ T6423] loop1: detected capacity change from 0 to 2048
[   74.990801][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.196'.
[   74.999613][ T6423] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   75.162514][ T6434] loop0: detected capacity change from 0 to 2048
[   75.221227][ T6434]  loop0: p1 < > p4
[   75.235724][ T6434] loop0: p4 size 8388608 extends beyond EOD, truncated
[   75.254102][ T5295]  loop0: p1 < > p4
[   75.258222][ T5295] loop0: p4 size 8388608 extends beyond EOD, truncated
[   75.409658][ T6324] udevd[6324]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   75.410687][ T5969] udevd[5969]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   75.504545][ T6323] udevd[6323]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory
[   75.514422][ T6454] netlink: 5 bytes leftover after parsing attributes in process `syz.2.209'.
[   75.514963][ T5969] udevd[5969]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory
[   75.565173][ T6458] loop1: detected capacity change from 0 to 512
[   75.573319][ T6458] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   75.587010][ T6458] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.210: invalid indirect mapped block 4294967295 (level 1)
[   75.627882][ T6458] EXT4-fs error (device loop1): ext4_free_branches:1023: inode #11: comm syz.1.210: invalid indirect mapped block 4294967295 (level 1)
[   75.637562][ T6458] EXT4-fs (loop1): 2 truncates cleaned up
[   75.641723][ T6458] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.688177][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.819679][ T6478] loop2: detected capacity change from 0 to 128
[   75.825337][ T6478] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   75.833557][ T6478] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   75.912761][ T6479] FAT-fs (loop2): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00000400)
[   75.920312][ T6479] FAT-fs (loop2): Filesystem has been set read-only
[   76.322188][    T9] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   76.483167][    T9] usb 1-1: config 0 has too many interfaces: 33, using maximum allowed: 32
[   76.486379][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   76.490281][    T9] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 33
[   76.497072][    T9] usb 1-1: New USB device found, idVendor=1039, idProduct=12b6, bcdDevice=af.00
[   76.500967][    T9] usb 1-1: New USB device strings: Mfr=99, Product=0, SerialNumber=0
[   76.504302][    T9] usb 1-1: Manufacturer: syz
[   76.511553][    T9] usb 1-1: config 0 descriptor??
[   76.731578][    T9] usb 1-1: USB disconnect, device number 7
[   77.000735][ T6489] loop1: detected capacity change from 0 to 128
[   77.024622][ T6489] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[   77.029443][ T6489] System zones: 1-3, 19-19, 35-36
[   77.034424][ T6489] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   77.044056][ T6489] ext4 filesystem being mounted at /87/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   77.119202][ T5848] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   77.752157][ T2346] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   78.033882][ T2346] usb 2-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[   78.037632][ T2346] usb 2-1: config 0 has an invalid interface number: 2 but max is -1
[   78.041081][ T2346] usb 2-1: config 0 has an invalid interface number: 2 but max is -1
[   78.045017][ T2346] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   78.049317][ T2346] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 0
[   78.053520][ T2346] usb 2-1: config 0 has no interface number 0
[   78.058898][ T2346] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   78.063880][ T2346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.067355][ T2346] usb 2-1: Product: syz
[   78.069204][ T2346] usb 2-1: Manufacturer: syz
[   78.071238][ T2346] usb 2-1: SerialNumber: syz
[   78.079051][ T2346] usb 2-1: config 0 descriptor??
[   78.202051][    T9] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   78.293257][ T2346] usb 2-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[   78.296608][ T2346] usb 2-1: MIDIStreaming interface descriptor not found
[   78.316754][ T2346] usb 2-1: USB disconnect, device number 7
[   78.345487][ T5970] udevd[5970]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.2/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   78.357423][    T9] usb 1-1: config 7 descriptor has 1 excess byte, ignoring
[   78.367407][    T9] usb 1-1: config 7 has 1 interface, different from the descriptor's value: 2
[   78.378548][    T9] usb 1-1: New USB device found, idVendor=19d2, idProduct=1275, bcdDevice= 7.84
[   78.385579][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.395925][    T9] usb 1-1: Product: syz
[   78.397878][    T9] usb 1-1: Manufacturer: syz
[   78.400025][    T9] usb 1-1: SerialNumber: syz
[   78.412595][    T9] rndis_host 1-1:7.0: skipping garbage
[   78.415031][    T9] usb 1-1: bad CDC descriptors
[   78.419160][    T9] option 1-1:7.0: GSM modem (1-port) converter detected
[   78.616189][    T9] usb 1-1: USB disconnect, device number 8
[   78.623150][    T9] option 1-1:7.0: device disconnected
[   79.167513][ T6542] loop0: detected capacity change from 0 to 128
[   79.171319][ T6542] EXT4-fs: Ignoring removed nobh option
[   79.188240][ T6542] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   79.194862][ T6545] netlink: 'syz.2.249': attribute type 1 has an invalid length.
[   79.199016][ T6545] netlink: 'syz.2.249': attribute type 4 has an invalid length.
[   79.203034][ T6542] ext4 filesystem being mounted at /75/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   79.261392][ T5843] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   79.398359][ T5957] usb 2-1: new full-speed USB device number 8 using dummy_hcd
[   79.519553][ T6553] netlink: 'syz.0.252': attribute type 1 has an invalid length.
[   79.946314][ T5957] usb 2-1: config 0 has an invalid descriptor of length 89, skipping remainder of the config
[   79.968147][ T5957] usb 2-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80
[   79.972293][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.975783][ T5957] usb 2-1: Product: syz
[   79.977670][ T5957] usb 2-1: Manufacturer: syz
[   79.979751][ T5957] usb 2-1: SerialNumber: syz
[   79.987931][ T5957] usb 2-1: config 0 descriptor??
[   80.218516][ T5957] usb 2-1: bad CDC descriptors
[   80.231180][ T5957] usb 2-1: unsupported MDLM descriptors
[   80.244872][ T5957] usb 2-1: USB disconnect, device number 8
[   81.079011][ T6562] syz_tun: refused to change device tx_queue_len
[   81.081231][ T6562] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[   81.357803][  T973] cfg80211: failed to load regulatory.db
[   81.498594][ T6570] netlink: 'syz.2.259': attribute type 10 has an invalid length.
[   81.504013][ T6570] batman_adv: batadv0: Adding interface: wlan0
[   81.506506][ T6570] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   81.516319][ T6570] batman_adv: batadv0: Interface activated: wlan0
[   81.547845][ T6572] loop1: detected capacity change from 0 to 512
[   81.551495][ T6572] EXT4-fs: Ignoring removed oldalloc option
[   81.565074][ T6572] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[   81.587318][ T6572] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #11: comm syz.1.260: corrupted in-inode xattr: invalid ea_ino
[   81.598110][ T6572] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.260: couldn't read orphan inode 11 (err -117)
[   81.608385][ T6572] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.656999][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.055773][ T6596] process 'syz.2.266' launched '/dev/fd/7' with NULL argv: empty string added
[   83.219502][ T6614] loop1: detected capacity change from 0 to 512
[   83.230391][ T6614] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   83.295822][ T6614] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   83.306935][ T6614] ext4 filesystem being mounted at /102/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   83.316817][ T6614] capability: warning: `syz.1.277' uses deprecated v2 capabilities in a way that may be insecure
[   83.329925][ T5848] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   83.434882][ T6621] syz.0.275 uses obsolete (PF_INET,SOCK_PACKET)
[   83.738152][ T6628] loop1: detected capacity change from 0 to 32768
[   83.744684][ T6628] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.282 (6628)
[   83.752649][ T6628] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   83.756971][ T6628] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[   83.760167][ T6628] BTRFS info (device loop1): using free-space-tree
[   83.801736][ T6641] loop2: detected capacity change from 0 to 256
[   83.810744][ T6641] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x205ad3fc, utbl_chksum : 0xe619d30d)
[   84.376929][   T33] audit: type=1326 audit(1755563915.678:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907a58ebe9 code=0x7ffc0000
[   84.387982][   T33] audit: type=1326 audit(1755563915.678:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907a58ebe9 code=0x7ffc0000
[   84.397736][   T33] audit: type=1326 audit(1755563915.688:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.292" exe="/syz-executor" sig=0 arch=c000003e syscall=272 compat=0 ip=0x7f907a58ebe9 code=0x7ffc0000
[   84.418004][   T33] audit: type=1326 audit(1755563915.688:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907a58ebe9 code=0x7ffc0000
[   84.426709][   T33] audit: type=1326 audit(1755563915.688:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907a58ebe9 code=0x7ffc0000
[   84.435636][   T33] audit: type=1326 audit(1755563915.688:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.292" exe="/syz-executor" sig=0 arch=c000003e syscall=334 compat=0 ip=0x7f907a58ebe9 code=0x7ffc0000
[   84.449818][   T33] audit: type=1326 audit(1755563915.688:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907a58ebe9 code=0x7ffc0000
[   84.516906][ T6673] netdevsim netdevsim2 netdevsim0: entered promiscuous mode
[   84.519340][ T6673] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   84.531077][   T33] audit: type=1326 audit(1755563915.688:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907a58ebe9 code=0x7ffc0000
[   84.541097][   T33] audit: type=1326 audit(1755563915.698:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.292" exe="/syz-executor" sig=0 arch=c000003e syscall=459 compat=0 ip=0x7f907a58ebe9 code=0x7ffc0000
[   84.550012][   T33] audit: type=1326 audit(1755563915.698:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6667 comm="syz.2.292" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907a58ebe9 code=0x7ffc0000
[   84.558347][ T5848] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   84.717270][ T6681] input: syz0 as /devices/virtual/input/input5
[   84.859836][ T6679] loop2: detected capacity change from 0 to 32768
[   84.863299][ T6679] XFS: ikeep mount option is deprecated.
[   84.865243][ T6679] XFS: ikeep mount option is deprecated.
[   84.867203][ T6679] XFS: noikeep mount option is deprecated.
[   84.884323][ T6679] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   84.889921][ T6677] loop0: detected capacity change from 0 to 32768
[   84.966882][ T6677] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[   84.976912][ T6683] loop1: detected capacity change from 0 to 32768
[   84.984361][ T6683] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2'
[   84.994163][ T6679] XFS (loop2): Ending clean mount
[   84.997118][ T5860] (kworker/u8:2,5860,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[   85.010360][ T6683] ocfs2: Mounting device (7,1) on (node local, slot 0) with writeback data mode.
[   85.023824][   T13] (kworker/u8:1,13,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[   85.076364][ T5848] ocfs2: Unmounting device (7,1) on (node local)
[   85.078333][ T5843] ocfs2: Unmounting device (7,0) on (node local)
[   85.155305][ T5850] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   85.291782][ T6701] loop1: detected capacity change from 0 to 256
[   85.368381][ T6706] netlink: 'syz.0.305': attribute type 8 has an invalid length.
[   85.378697][ T6708] tipc: Enabled bearer <eth:vlan0>, priority 10
[   85.409804][ T6711] loop0: detected capacity change from 0 to 512
[   85.417155][ T6711] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   85.429865][ T6711] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.306: bad orphan inode 131083
[   85.439110][ T6711] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   85.464688][ T6711] overlayfs: upper fs needs to support d_type.
[   85.543911][ T6718] loop2: detected capacity change from 0 to 16
[   85.561314][ T6718] erofs (device loop2): mounted with root inode @ nid 36.
[   85.609400][ T6705] loop1: detected capacity change from 0 to 40427
[   85.620287][ T6705] F2FS-fs (loop1): Corrupted extension count (64 + 1 > 64)
[   85.624544][ T6705] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   85.689110][ T6705] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   85.700925][ T5843] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   85.704755][ T6705] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   85.710282][ T6727] sch_tbf: burst 8256 is lower than device lo mtu (65550) !
[   85.717241][ T6705] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   85.754350][   T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.821191][   T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   85.852933][ T6731] loop2: detected capacity change from 0 to 512
[   85.860106][ T6731] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   85.914665][   T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.025627][   T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   86.027392][   T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   86.033982][   T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   86.039142][   T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   86.052389][   T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   86.056007][   T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   86.226686][   T13] bridge_slave_1: left allmulticast mode
[   86.229576][   T13] bridge_slave_1: left promiscuous mode
[   86.232299][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   86.262470][   T13] bridge_slave_0: left allmulticast mode
[   86.264494][   T13] bridge_slave_0: left promiscuous mode
[   86.266587][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   86.298019][ T6751] loop2: detected capacity change from 0 to 128
[   86.308297][ T6751] FAT-fs (loop2): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[   86.340615][ T6753] loop1: detected capacity change from 0 to 16
[   86.384085][  T973] tipc: Node number set to 916585191
[   86.663214][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   86.670015][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   86.675797][   T13] bond0 (unregistering): Released all slaves
[   86.950824][ T6734] chnl_net:caif_netlink_parms(): no params data found
[   86.987805][ T6778] ref_ctr increment failed for inode: 0x285 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff88810e68b5c0
[   87.137492][ T6765] loop2: detected capacity change from 0 to 32768
[   87.184267][ T6765] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   87.200964][   T13] hsr_slave_0: left promiscuous mode
[   87.216433][   T13] hsr_slave_1: left promiscuous mode
[   87.219442][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   87.221464][ T6765] XFS (loop2): Ending clean mount
[   87.229209][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   87.234461][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   87.236911][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   87.264172][   T13] veth1_macvtap: left promiscuous mode
[   87.266749][   T13] veth0_macvtap: left promiscuous mode
[   87.269180][   T13] veth1_vlan: left promiscuous mode
[   87.270746][ T5850] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   87.279543][   T13] veth0_vlan: left promiscuous mode
[   87.431354][ T6796] netlink: 32 bytes leftover after parsing attributes in process `syz.2.337'.
[   87.435693][ T6796] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[   87.513776][ T6791] loop1: detected capacity change from 0 to 40427
[   87.518818][ T6791] F2FS-fs (loop1): build fault injection rate: 25
[   87.520924][ T6791] F2FS-fs (loop1): build fault injection type: 0x7698c
[   87.531759][ T6791] F2FS-fs (loop1): invalid crc value
[   87.535143][ T6791] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1cb/0x970
[   87.554381][ T6791] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[   87.589755][ T6802] loop2: detected capacity change from 0 to 16
[   87.600407][ T6802] erofs (device loop2): mounted with root inode @ nid 36.
[   87.610453][ T6802] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36
[   87.614854][ T6802] erofs (device loop2): failed to decompress -46 in[60, 4036] out[1851]
[   87.617628][ T6802] erofs (device loop2): read error -117 @ 43 of nid 36
[   87.621765][ T6791] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   87.634083][ T6791] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   87.675675][ T6791] F2FS-fs (loop1): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0
[   87.741283][ T5848] syz-executor: attempt to access beyond end of device
[   87.741283][ T5848] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   87.758763][   T13] team0 (unregistering): Port device team_slave_1 removed
[   87.768832][ T5848] CPU: 0 UID: 0 PID: 5848 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   87.768843][ T5848] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.768847][ T5848] Call Trace:
[   87.768850][ T5848]  <TASK>
[   87.768854][ T5848]  dump_stack_lvl+0x189/0x250
[   87.768865][ T5848]  ? preempt_schedule_thunk+0x16/0x30
[   87.768876][ T5848]  ? __pfx_dump_stack_lvl+0x10/0x10
[   87.768883][ T5848]  ? __pfx_queue_work_on+0x10/0x10
[   87.768890][ T5848]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[   87.768898][ T5848]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   87.768910][ T5848]  f2fs_handle_critical_error+0x37c/0x540
[   87.768923][ T5848]  f2fs_write_end_io+0x886/0xb60
[   87.768959][ T5848]  __submit_merged_bio+0x27a/0x6a0
[   87.768972][ T5848]  __submit_merged_write_cond+0x255/0x530
[   87.768983][ T5848]  f2fs_write_data_pages+0x261d/0x3000
[   87.768992][ T5848]  ? __lock_acquire+0xab9/0xd20
[   87.769012][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   87.769036][ T5848]  ? __mod_zone_page_state+0xd7/0x140
[   87.769049][ T5848]  ? folios_put_refs+0x560/0x640
[   87.769061][ T5848]  ? __lock_acquire+0xab9/0xd20
[   87.769072][ T5848]  ? do_raw_spin_lock+0x121/0x290
[   87.769084][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[   87.769091][ T5848]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   87.769100][ T5848]  do_writepages+0x32e/0x550
[   87.769113][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[   87.769122][ T5848]  filemap_fdatawrite+0x199/0x240
[   87.769131][ T5848]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   87.769156][ T5848]  ? do_raw_spin_unlock+0x4d/0x240
[   87.769165][ T5848]  f2fs_sync_dirty_inodes+0x31f/0x830
[   87.769183][ T5848]  f2fs_write_checkpoint+0x95a/0x1df0
[   87.769198][ T5848]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   87.769221][ T5848]  ? kill_f2fs_super+0x298/0x6c0
[   87.769230][ T5848]  kill_f2fs_super+0x2c3/0x6c0
[   87.769238][ T5848]  ? __pfx_kill_f2fs_super+0x10/0x10
[   87.769244][ T5848]  ? radix_tree_delete_item+0x2b6/0x400
[   87.769255][ T5848]  ? shrinker_free+0x2ce/0x3e0
[   87.769263][ T5848]  deactivate_locked_super+0xbc/0x130
[   87.769272][ T5848]  cleanup_mnt+0x425/0x4c0
[   87.769280][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[   87.769290][ T5848]  task_work_run+0x1d4/0x260
[   87.769300][ T5848]  ? __pfx_task_work_run+0x10/0x10
[   87.769307][ T5848]  ? __x64_sys_umount+0x122/0x160
[   87.769317][ T5848]  ? exit_to_user_mode_loop+0x40/0x110
[   87.769328][ T5848]  exit_to_user_mode_loop+0xec/0x110
[   87.769336][ T5848]  do_syscall_64+0x2bd/0x3b0
[   87.769345][ T5848]  ? lockdep_hardirqs_on+0x9c/0x150
[   87.769353][ T5848]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.769359][ T5848]  ? exc_page_fault+0x9f/0xf0
[   87.769368][ T5848]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.769374][ T5848] RIP: 0033:0x7f6e9b98ff17
[   87.769382][ T5848] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   87.769387][ T5848] RSP: 002b:00007ffee798d428 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   87.769396][ T5848] RAX: 0000000000000000 RBX: 00007f6e9ba11c05 RCX: 00007f6e9b98ff17
[   87.769400][ T5848] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffee798d4e0
[   87.769404][ T5848] RBP: 00007ffee798d4e0 R08: 0000000000000000 R09: 0000000000000000
[   87.769408][ T5848] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffee798e570
[   87.769412][ T5848] R13: 00007f6e9ba11c05 R14: 000000000001562b R15: 00007ffee798e5b0
[   87.769423][ T5848]  </TASK>
[   87.769426][ T5848] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   87.918569][   T13] team0 (unregistering): Port device team_slave_0 removed
[   88.082088][   T54] Bluetooth: hci0: command tx timeout
[   88.432207][ T6734] bridge0: port 1(bridge_slave_0) entered blocking state
[   88.435341][ T6734] bridge0: port 1(bridge_slave_0) entered disabled state
[   88.437818][ T6734] bridge_slave_0: entered allmulticast mode
[   88.440598][ T6734] bridge_slave_0: entered promiscuous mode
[   88.448301][ T6734] bridge0: port 2(bridge_slave_1) entered blocking state
[   88.451182][ T6734] bridge0: port 2(bridge_slave_1) entered disabled state
[   88.455087][ T6734] bridge_slave_1: entered allmulticast mode
[   88.458734][ T6734] bridge_slave_1: entered promiscuous mode
[   88.494204][ T6734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   88.509379][ T6734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   88.523875][ T2346] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   88.548713][ T6734] team0: Port device team_slave_0 added
[   88.557217][ T6734] team0: Port device team_slave_1 added
[   88.588664][ T6734] batman_adv: batadv0: Adding interface: batadv_slave_0
[   88.591513][ T6734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.603017][ T6734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   88.608737][ T6734] batman_adv: batadv0: Adding interface: batadv_slave_1
[   88.611708][ T6734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   88.622723][ T6734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   88.681443][ T6734] hsr_slave_0: entered promiscuous mode
[   88.686372][ T2346] usb 2-1: config 0 has no interfaces?
[   88.690036][ T2346] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   88.696069][ T2346] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   88.699463][ T2346] usb 2-1: SerialNumber: syz
[   88.703180][ T6734] hsr_slave_1: entered promiscuous mode
[   88.706871][ T2346] usb 2-1: config 0 descriptor??
[   88.823627][ T6826] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.346'.
[   88.913625][ T5957] usb 2-1: USB disconnect, device number 9
[   88.952137][ T6734] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   88.956276][ T6734] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   88.960165][ T6734] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   88.965784][ T6734] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   89.008440][ T6734] 8021q: adding VLAN 0 to HW filter on device bond0
[   89.020371][ T6734] 8021q: adding VLAN 0 to HW filter on device team0
[   89.027531][  T604] bridge0: port 1(bridge_slave_0) entered blocking state
[   89.029793][  T604] bridge0: port 1(bridge_slave_0) entered forwarding state
[   89.037512][  T604] bridge0: port 2(bridge_slave_1) entered blocking state
[   89.039716][  T604] bridge0: port 2(bridge_slave_1) entered forwarding state
[   89.132195][  T973] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   89.168419][ T6734] 8021q: adding VLAN 0 to HW filter on device batadv0
[   89.207964][ T6734] veth0_vlan: entered promiscuous mode
[   89.214466][ T6734] veth1_vlan: entered promiscuous mode
[   89.230229][ T6734] veth0_macvtap: entered promiscuous mode
[   89.235261][ T6734] veth1_macvtap: entered promiscuous mode
[   89.246418][ T6734] batman_adv: batadv0: Interface activated: batadv_slave_0
[   89.253614][ T6734] batman_adv: batadv0: Interface activated: batadv_slave_1
[   89.260374][ T5860] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   89.266824][ T5860] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   89.276789][ T5860] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   89.280276][ T5860] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   89.287505][  T973] usb 3-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[   89.290433][  T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.296774][  T973] usb 3-1: config 0 descriptor??
[   89.352808][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.364244][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.387098][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   89.390444][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   89.520077][  T973] usb 3-1: Cannot read MAC address
[   89.521865][  T973] MOSCHIP usb-ethernet driver 3-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[   89.532468][  T973] usb 3-1: USB disconnect, device number 4
[   89.703028][ T5878] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   89.854469][ T5878] usb 4-1: config 0 has no interfaces?
[   89.862145][ T5957] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   89.868821][ T5878] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   89.879676][ T5878] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   89.884559][ T5878] usb 4-1: Product: syz
[   89.886294][ T5878] usb 4-1: Manufacturer: syz
[   89.890284][ T5878] usb 4-1: config 0 descriptor??
[   90.015312][ T5957] usb 2-1: config 0 has no interfaces?
[   90.022344][ T5957] usb 2-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[   90.026699][ T5957] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.030021][ T5957] usb 2-1: Product: syz
[   90.035216][ T5957] usb 2-1: Manufacturer: syz
[   90.037472][ T5957] usb 2-1: SerialNumber: syz
[   90.050362][ T5957] usb 2-1: config 0 descriptor??
[   90.113410][ T5957] usb 4-1: USB disconnect, device number 2
[   90.162776][   T54] Bluetooth: hci0: command tx timeout
[   90.269038][  T973] usb 2-1: USB disconnect, device number 10
[   90.516666][ T6911] loop2: detected capacity change from 0 to 256
[   90.529794][ T6911] exfat: Deprecated parameter 'utf8'
[   90.536574][ T6911] exfat: Deprecated parameter 'utf8'
[   90.539002][ T6911] exfat: Deprecated parameter 'utf8'
[   90.547463][ T6911] exFAT-fs (loop2): failed to load upcase table (idx : 0x00011f3f, chksum : 0x96b62a4c, utbl_chksum : 0xe619d30d)
[   90.569642][ T6911] exFAT-fs (loop2): error, exfat_zeroed_cluster: out of range(sect:184 len:8)
[   90.576511][ T6911] exFAT-fs (loop2): Filesystem has been set read-only
[   90.692542][ T6918] loop3: detected capacity change from 0 to 64
[   90.714442][ T6920] loop2: detected capacity change from 0 to 64
[   90.753732][ T6920] overlayfs: upper fs needs to support d_type.
[   90.761259][ T6920] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   90.768251][ T6920] overlayfs: failed to set xattr on upper
[   90.770709][ T6920] overlayfs: ...falling back to redirect_dir=nofollow.
[   90.775696][ T6920] overlayfs: ...falling back to index=off.
[   90.783062][ T6920] overlayfs: ...falling back to uuid=null.
[   90.860275][ T5850] Trying to free block not in datazone
[   90.868314][ T5850] Trying to free block not in datazone
[   90.883130][ T5850] Trying to free block not in datazone
[   90.996544][ T6935] kernel read not supported for file /   (pid: 6935 comm: syz.3.370)
[   91.008076][   T33] kauditd_printk_skb: 1 callbacks suppressed
[   91.008089][   T33] audit: type=1800 audit(1755563922.308:19): pid=6935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.370" name=200120 dev="mqueue" ino=10252 res=0 errno=0
[   91.054091][ T6938] netem: change failed
[   91.432208][ T5878] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   91.594612][ T5878] usb 2-1: config 0 has an invalid interface number: 57 but max is 0
[   91.598227][ T5878] usb 2-1: config 0 has no interface number 0
[   91.601077][ T5878] usb 2-1: New USB device found, idVendor=093a, idProduct=010f, bcdDevice=c6.63
[   91.605838][ T5878] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   91.611452][ T5878] usb 2-1: config 0 descriptor??
[   91.616509][ T5878] gspca_main: mr97310a-2.14.0 probing 093a:010f
[   91.619406][ T5878] gspca_mr97310a: reg write [21] error -22
[   91.622180][ T5878] mr97310a 2-1:0.57: probe with driver mr97310a failed with error -22
[   91.818086][ T5957] usb 2-1: USB disconnect, device number 11
[   92.242376][   T54] Bluetooth: hci0: command tx timeout
[   93.861032][ T7011] loop1: detected capacity change from 0 to 40427
[   93.863808][ T7011] F2FS-fs: heap/no_heap options were deprecated
[   93.869289][ T7011] F2FS-fs (loop1): build fault injection rate: 19
[   93.871818][ T7011] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[   93.876280][ T7011] F2FS-fs (loop1): invalid crc value
[   93.884725][ T7011] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[   93.917455][ T7011] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[   93.924474][ T7011] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   93.929277][ T7011] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   93.944501][ T7011] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[   93.949992][ T7011] syz.1.392: attempt to access beyond end of device
[   93.949992][ T7011] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   93.956444][ T7011] CPU: 1 UID: 0 PID: 7011 Comm: syz.1.392 Not tainted syzkaller #0 PREEMPT(full) 
[   93.956455][ T7011] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   93.956460][ T7011] Call Trace:
[   93.956464][ T7011]  <TASK>
[   93.956467][ T7011]  dump_stack_lvl+0x189/0x250
[   93.956480][ T7011]  ? __pfx_dump_stack_lvl+0x10/0x10
[   93.956489][ T7011]  ? __pfx_queue_work_on+0x10/0x10
[   93.956496][ T7011]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   93.956507][ T7011]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   93.956520][ T7011]  f2fs_handle_critical_error+0x37c/0x540
[   93.956534][ T7011]  f2fs_write_end_io+0x886/0xb60
[   93.956549][ T7011]  __submit_merged_bio+0x27a/0x6a0
[   93.956561][ T7011]  __submit_merged_write_cond+0x255/0x530
[   93.956573][ T7011]  f2fs_write_data_pages+0x261d/0x3000
[   93.956582][ T7011]  ? lockdep_unlock+0x89/0x120
[   93.956606][ T7011]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   93.956635][ T7011]  ? check_path+0x21/0x40
[   93.956642][ T7011]  ? check_noncircular+0xe0/0x160
[   93.956671][ T7011]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   93.956681][ T7011]  do_writepages+0x32e/0x550
[   93.956695][ T7011]  ? do_raw_spin_unlock+0x4d/0x240
[   93.956705][ T7011]  filemap_fdatawrite+0x199/0x240
[   93.956713][ T7011]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   93.956743][ T7011]  ? do_raw_spin_unlock+0x4d/0x240
[   93.956752][ T7011]  f2fs_sync_dirty_inodes+0x31f/0x830
[   93.956766][ T7011]  f2fs_write_checkpoint+0x95a/0x1df0
[   93.956783][ T7011]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   93.956807][ T7011]  ? down_write+0x162/0x1f0
[   93.956813][ T7011]  ? __pfx_down_write+0x10/0x10
[   93.956827][ T7011]  f2fs_issue_checkpoint+0x3ac/0x570
[   93.956835][ T7011]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[   93.956842][ T7011]  ? __lock_acquire+0xab9/0xd20
[   93.956859][ T7011]  ? __up_read+0x280/0x680
[   93.956870][ T7011]  ? f2fs_sync_fs+0x200/0x3d0
[   93.956880][ T7011]  f2fs_do_sync_file+0x869/0x1860
[   93.956892][ T7011]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[   93.956942][ T7011]  ? f2fs_file_write_iter+0x4ac/0x2410
[   93.956954][ T7011]  ? vfs_fsync_range+0x12c/0x1c0
[   93.956960][ T7011]  ? f2fs_sync_file+0xe9/0x160
[   93.956968][ T7011]  f2fs_file_write_iter+0x753/0x2410
[   93.956995][ T7011]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[   93.957004][ T7011]  ? rcu_read_lock_any_held+0xb3/0x120
[   93.957030][ T7011]  vfs_write+0x5c9/0xb30
[   93.957050][ T7011]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[   93.957062][ T7011]  ? __pfx_vfs_write+0x10/0x10
[   93.957086][ T7011]  ? __fget_files+0x2a/0x420
[   93.957106][ T7011]  ksys_write+0x145/0x250
[   93.957119][ T7011]  ? __pfx_ksys_write+0x10/0x10
[   93.957125][ T7011]  ? rcu_is_watching+0x15/0xb0
[   93.957135][ T7011]  ? do_syscall_64+0xbe/0x3b0
[   93.957146][ T7011]  do_syscall_64+0xfa/0x3b0
[   93.957153][ T7011]  ? lockdep_hardirqs_on+0x9c/0x150
[   93.957161][ T7011]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.957168][ T7011]  ? exc_page_fault+0x9f/0xf0
[   93.957177][ T7011]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   93.957185][ T7011] RIP: 0033:0x7f6e9b98ebe9
[   93.957192][ T7011] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   93.957198][ T7011] RSP: 002b:00007f6e9c89c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[   93.957206][ T7011] RAX: ffffffffffffffda RBX: 00007f6e9bbb5fa0 RCX: 00007f6e9b98ebe9
[   93.957211][ T7011] RDX: 0000000000000078 RSI: 0000200000000180 RDI: 0000000000000004
[   93.957215][ T7011] RBP: 00007f6e9ba11e19 R08: 0000000000000000 R09: 0000000000000000
[   93.957219][ T7011] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   93.957223][ T7011] R13: 00007f6e9bbb6038 R14: 00007f6e9bbb5fa0 R15: 00007ffee798e198
[   93.957236][ T7011]  </TASK>
[   93.957239][ T7011] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   94.324546][   T54] Bluetooth: hci0: command tx timeout
[   94.390800][ T7027] loop1: detected capacity change from 0 to 1024
[   94.492311][ T5957] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   94.544375][ T7035] loop1: detected capacity change from 0 to 1024
[   94.646186][ T5957] usb 3-1: config 201 has an invalid interface number: 249 but max is 0
[   94.649024][ T5957] usb 3-1: config 201 has an invalid descriptor of length 0, skipping remainder of the config
[   94.654268][ T5957] usb 3-1: config 201 has no interface number 0
[   94.658726][ T5957] usb 3-1: config 201 interface 249 altsetting 4 has an endpoint descriptor with address 0xF1, changing to 0x81
[   94.667219][ T5957] usb 3-1: config 201 interface 249 altsetting 4 endpoint 0x3 has an invalid bInterval 0, changing to 10
[   94.674423][ T5957] usb 3-1: config 201 interface 249 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64
[   94.679822][ T5957] usb 3-1: config 201 interface 249 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   94.684399][ T5957] usb 3-1: config 201 interface 249 has no altsetting 0
[   94.688706][ T5957] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=fa.df
[   94.691658][ T5957] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.694959][ T5957] usb 3-1: Product: syz
[   94.696447][ T5957] usb 3-1: Manufacturer: syz
[   94.698083][ T5957] usb 3-1: SerialNumber: syz
[   94.701857][ T7021] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   94.855483][ T7050] loop1: detected capacity change from 0 to 64
[   94.877532][ T7050] overlayfs: upper fs needs to support d_type.
[   94.881113][ T7050] overlayfs: upper fs does not support RENAME_WHITEOUT.
[   94.885367][ T7050] overlayfs: failed to set xattr on upper
[   94.887742][ T7050] overlayfs: ...falling back to redirect_dir=nofollow.
[   94.890594][ T7050] overlayfs: ...falling back to index=off.
[   94.893186][ T7050] overlayfs: ...falling back to uuid=null.
[   94.916341][ T5957] ath6kl: Failed to submit usb control message: -71
[   94.918748][ T5957] ath6kl: unable to send the bmi data to the device: -71
[   94.922331][ T5957] ath6kl: Unable to send get target info: -71
[   94.924793][ T5848] VFS: Lookup of '' in minix loop1 would have caused loop
[   94.932848][ T5957] ath6kl: Failed to init ath6kl core: -71
[   94.933053][ T5848] VFS: Lookup of '' in minix loop1 would have caused loop
[   94.935593][ T5957] ath6kl_usb 3-1:201.249: probe with driver ath6kl_usb failed with error -71
[   94.947072][ T5957] usb 3-1: USB disconnect, device number 5
[   95.099478][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.175940][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.254714][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.330928][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   95.332514][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   95.337833][ T5236] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   95.341019][ T5236] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   95.345209][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   95.347947][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   95.514147][   T13] bridge_slave_1: left allmulticast mode
[   95.516985][   T13] bridge_slave_1: left promiscuous mode
[   95.519725][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.526097][   T13] bridge_slave_0: left allmulticast mode
[   95.528142][   T13] bridge_slave_0: left promiscuous mode
[   95.530734][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.817410][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   95.824558][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   95.830621][   T13] bond0 (unregistering): Released all slaves
[   95.866257][ T7056] chnl_net:caif_netlink_parms(): no params data found
[   96.116533][ T7056] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.123587][ T7056] bridge0: port 1(bridge_slave_0) entered disabled state
[   96.126088][ T7056] bridge_slave_0: entered allmulticast mode
[   96.130260][ T7056] bridge_slave_0: entered promiscuous mode
[   96.146351][ T7056] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.150512][ T7056] bridge0: port 2(bridge_slave_1) entered disabled state
[   96.173685][ T7056] bridge_slave_1: entered allmulticast mode
[   96.202738][ T7056] bridge_slave_1: entered promiscuous mode
[   96.214812][ T7077] loop3: detected capacity change from 0 to 8
[   96.360991][ T7056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   96.363454][ T7077] SQUASHFS error: xz decompression failed, data probably corrupt
[   96.367846][ T7077] SQUASHFS error: Failed to read block 0x108: -5
[   96.370635][ T7077] SQUASHFS error: Unable to read metadata cache entry [106]
[   96.374146][ T7077] SQUASHFS error: Unable to read inode 0x11f
[   96.374684][ T7056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   96.468129][   T13] hsr_slave_0: left promiscuous mode
[   96.486432][   T13] hsr_slave_1: left promiscuous mode
[   96.496981][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   96.512257][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[   96.522340][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   96.530711][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[   96.567692][   T13] veth1_macvtap: left promiscuous mode
[   96.569820][   T13] veth0_macvtap: left promiscuous mode
[   96.571847][   T13] veth1_vlan: left promiscuous mode
[   96.576433][   T13] veth0_vlan: left promiscuous mode
[   97.364783][ T5236] Bluetooth: hci1: command tx timeout
[   97.597761][   T13] team0 (unregistering): Port device team_slave_1 removed
[   97.657286][   T13] team0 (unregistering): Port device team_slave_0 removed
[   97.762404][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'.
[   97.765437][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.3.423'.
[   98.006648][ T7087] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[   98.010835][ T7087] ip6gretap1: entered allmulticast mode
[   98.022796][ T7056] team0: Port device team_slave_0 added
[   98.029725][ T7056] team0: Port device team_slave_1 added
[   98.059319][ T7056] batman_adv: batadv0: Adding interface: batadv_slave_0
[   98.061506][ T7056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.072138][ T7056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   98.076619][ T7056] batman_adv: batadv0: Adding interface: batadv_slave_1
[   98.079087][ T7056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   98.088596][ T7056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   98.097249][ T7089] bond0: Error: Cannot enslave bond to itself.
[   98.129827][ T7092] Bluetooth: MGMT ver 1.23
[   98.143703][ T7056] hsr_slave_0: entered promiscuous mode
[   98.145874][ T7056] hsr_slave_1: entered promiscuous mode
[   98.156183][ T7056] debugfs: 'hsr0' already exists in 'hsr'
[   98.158154][ T7056] Cannot create hsr debugfs directory
[   98.433075][ T7056] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   98.438339][ T7056] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   98.450505][ T7056] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   98.454799][ T7056] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   98.527028][ T7056] 8021q: adding VLAN 0 to HW filter on device bond0
[   98.560873][ T7056] 8021q: adding VLAN 0 to HW filter on device team0
[   98.568777][   T52] bridge0: port 1(bridge_slave_0) entered blocking state
[   98.571189][   T52] bridge0: port 1(bridge_slave_0) entered forwarding state
[   98.603550][   T52] bridge0: port 2(bridge_slave_1) entered blocking state
[   98.605949][   T52] bridge0: port 2(bridge_slave_1) entered forwarding state
[   98.645230][ T7056] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   98.776079][ T7056] 8021q: adding VLAN 0 to HW filter on device batadv0
[   98.892113][   T51] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   98.924953][ T7166] loop2: detected capacity change from 0 to 128
[   98.933363][ T7166] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   98.940814][ T7166] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   98.947760][ T7056] veth0_vlan: entered promiscuous mode
[   98.955720][ T7056] veth1_vlan: entered promiscuous mode
[   98.978044][ T7056] veth0_macvtap: entered promiscuous mode
[   98.981853][ T7056] veth1_macvtap: entered promiscuous mode
[   99.002402][ T7056] batman_adv: batadv0: Interface activated: batadv_slave_0
[   99.012706][ T7056] batman_adv: batadv0: Interface activated: batadv_slave_1
[   99.025213][   T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   99.028276][   T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   99.031070][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   99.043193][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   99.055541][   T51] usb 4-1: config 0 has an invalid interface number: 168 but max is 0
[   99.058533][   T51] usb 4-1: config 0 has no interface number 0
[   99.062008][   T51] usb 4-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[   99.071126][   T51] usb 4-1: config 0 interface 168 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[   99.086737][   T51] usb 4-1: config 0 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[   99.090522][   T51] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4
[   99.094983][   T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.098777][   T51] usb 4-1: config 0 descriptor??
[   99.101026][ T7139] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   99.114953][ T1091] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.117783][ T1091] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.157931][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   99.161267][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   99.305198][ T7184] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (1136)
[   99.308267][ T7184] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023
[   99.313783][ T7173] loop2: detected capacity change from 0 to 32768
[   99.322637][   T51] usb 4-1: string descriptor 0 read error: -71
[   99.326957][   T51] keyspan 4-1:0.168: Keyspan 2 port adapter converter detected
[   99.329606][   T51] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 1
[   99.346713][   T51] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 84
[   99.349472][   T51] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 2
[   99.358124][ T7173] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[   99.367331][   T51] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[   99.375712][ T7173] (syz.2.443,7173,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry overrun - offset=16, inode=65, rec_len=64016, name_len=255
[   99.390431][   T51] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 88
[   99.395953][ T7173] (syz.2.443,7173,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[   99.405238][   T51] keyspan 4-1:0.168: found no endpoint descriptor for endpoint 6
[   99.411265][ T7173] (syz.2.443,7173,1):ocfs2_mknod:301 ERROR: status = -2
[   99.415980][ T7190] netlink: 24 bytes leftover after parsing attributes in process `syz.4.446'.
[   99.417930][   T51] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[   99.425570][ T7173] (syz.2.443,7173,1):ocfs2_mknod:505 ERROR: status = -2
[   99.429314][ T7173] (syz.2.443,7173,1):ocfs2_create:678 ERROR: status = -2
[   99.437080][   T51] usb 4-1: USB disconnect, device number 3
[   99.445424][ T5236] Bluetooth: hci1: command tx timeout
[   99.447355][   T51] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[   99.457760][   T51] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[   99.461705][   T51] keyspan 4-1:0.168: device disconnected
[   99.504807][ T5850] ocfs2: Unmounting device (7,2) on (node local)
[   99.505807][ T7195] loop4: detected capacity change from 0 to 256
[   99.551411][ T7195] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[   99.578072][ T7195] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=512, location=512
[   99.583807][ T7195] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found
[   99.586803][ T7195] UDF-fs: Scanning with blocksize 512 failed
[   99.596412][ T7195] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[   99.601445][ T7195] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   99.766199][ T7210] loop2: detected capacity change from 0 to 512
[   99.769988][ T7210] EXT4-fs (loop2): unsupported inode size: 269
[   99.775643][ T7210] EXT4-fs (loop2): blocksize: 1024
[   99.874580][ T7216] loop4: detected capacity change from 0 to 8
[   99.885951][ T7216] squashfs image failed sanity check
[   99.918971][ T7218] loop3: detected capacity change from 0 to 128
[   99.939955][ T7218] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[   99.963704][ T7218] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  100.008565][ T7226] loop4: detected capacity change from 0 to 64
[  100.561050][ T7244] loop2: detected capacity change from 0 to 256
[  100.593141][ T7244] exfat: Deprecated parameter 'utf8'
[  100.705399][ T7244] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  100.921103][ T7251] cgroup: Unknown subsys name 'cpuset'
[  101.580037][ T5236] Bluetooth: hci1: command tx timeout
[  101.583076][ T5313] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  101.734056][ T5313] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  101.737295][ T5313] usb 3-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00
[  101.740315][ T5313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.762410][ T5313] usb 3-1: config 0 descriptor??
[  102.184028][ T5313] pantherlord 0003:0810:0001.0005: unknown main item tag 0x0
[  102.193025][ T5313] pantherlord 0003:0810:0001.0005: unknown main item tag 0x0
[  102.213281][ T5313] pantherlord 0003:0810:0001.0005: hidraw0: USB HID v0.03 Device [HID 0810:0001] on usb-dummy_hcd.2-1/input0
[  102.217207][ T5313] pantherlord 0003:0810:0001.0005: no output reports found
[  102.387680][   T51] usb 3-1: USB disconnect, device number 6
[  102.822372][ T5313] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  102.972048][ T5313] usb 4-1: Using ep0 maxpacket: 32
[  102.987948][ T5313] usb 4-1: config 0 has an invalid interface number: 136 but max is 0
[  102.990638][ T5313] usb 4-1: config 0 has no interface number 0
[  102.998947][ T5313] usb 4-1: New USB device found, idVendor=1a0a, idProduct=0101, bcdDevice=ee.df
[  103.002165][ T5313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.004809][ T5313] usb 4-1: Product: syz
[  103.006199][ T5313] usb 4-1: Manufacturer: syz
[  103.013079][ T5313] usb 4-1: SerialNumber: syz
[  103.020355][ T5313] usb 4-1: config 0 descriptor??
[  103.027756][ T5313] usb_ehset_test 4-1:0.136: probe with driver usb_ehset_test failed with error -32
[  103.087430][ T7342] loop4: detected capacity change from 0 to 2048
[  103.123201][ T5969]  loop4: p1 < > p4
[  103.123201][ T5969]  p4: <solaris:  cannot handle version 793669 vtoc>
[  103.129533][ T5969] loop4: p4 size 722688 extends beyond EOD, truncated
[  103.138215][ T7342]  loop4: p1 < > p4
[  103.138215][ T7342]  p4: <solaris:  cannot handle version 793669 vtoc>
[  103.143096][ T7342] loop4: p4 size 722688 extends beyond EOD, truncated
[  103.186831][ T6323] udevd[6323]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory
[  103.187784][ T5969] udevd[5969]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory
[  103.236916][ T2346] usb 4-1: USB disconnect, device number 4
[  103.355383][ T7363] loop4: detected capacity change from 0 to 32768
[  103.366399][ T7363] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  103.384087][ T7056] ocfs2: Unmounting device (7,4) on (node local)
[  103.565732][ T7390] loop4: detected capacity change from 0 to 32768
[  103.602905][ T5236] Bluetooth: hci1: command tx timeout
[  103.659866][ T7390] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  103.659910][ T7390]   allowing incompatible features above 0.0: (unknown version)
[  103.659917][ T7390]   features: lz4
[  103.670970][ T7390] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  103.673617][ T7390] bcachefs (loop4): initializing new filesystem
[  103.679184][ T7390] bcachefs (loop4): going read-write
[  103.684867][ T7390] bcachefs (loop4): marking superblocks
[  103.696835][ T7390] bcachefs (loop4): initializing freespace
[  103.702143][ T7390] bcachefs (loop4): done initializing freespace
[  103.705779][ T7390] bcachefs (loop4): reading snapshots table
[  103.707967][ T7390] bcachefs (loop4): reading snapshots done
[  103.730585][ T7390] bcachefs (loop4): done starting filesystem
[  103.847361][ T7056] bcachefs (loop4): shutting down
[  103.849347][ T7056] bcachefs (loop4): going read-only
[  103.851092][ T7056] bcachefs (loop4): finished waiting for writes to stop
[  103.867263][ T7056] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[  103.913529][ T7056] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  103.921858][ T7056] bcachefs (loop4): clean shutdown complete, journal seq 4
[  103.932248][ T7056] bcachefs (loop4): marking filesystem clean
[  103.950736][ T7056] bcachefs (loop4): shutdown complete
[  104.051465][ T7424] loop2: detected capacity change from 0 to 32768
[  104.058453][ T7424] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section journal_seq_blacklist: entry 1 out of order with next entry (56 > 0)
[  104.058453][ T7424] journal_seq_blacklist (size 640):
[  104.058453][ T7424] 0-56 0-0 0-34 0-0 0-0 45-0 45-26 6-11 0-0 0-11 33-11 5-0 0-0 0-4 4-8 0-0 0-0 0-0 0-0 0-0 0-2 0-0 0-0 0-0 0-0 0-0 0-0 1-12 0-2 0-0 0-0 0-0 0-0 0-1 0-0 2-17 182-41 0-0 0-0
[  104.058453][ T7424] 
[  104.088901][ T7424] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal_seq_blacklist
[  104.143596][ T2346] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  104.277571][ T7455] loop2: detected capacity change from 0 to 32768
[  104.280685][ T7455] btrfs: Deprecated parameter 'usebackuproot'
[  104.286088][ T7455] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  104.290154][ T7455] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.491 (7455)
[  104.313092][ T2346] usb 4-1: Using ep0 maxpacket: 8
[  104.325805][ T7455] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  104.326842][ T2346] usb 4-1: config 93 has an invalid interface number: 31 but max is 0
[  104.335584][ T2346] usb 4-1: config 93 has no interface number 0
[  104.339458][ T2346] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[  104.340475][ T7455] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  104.343444][ T2346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.346047][ T7455] BTRFS info (device loop2): using free-space-tree
[  104.353255][ T2346] usb 4-1: Product: syz
[  104.354672][ T2346] usb 4-1: Manufacturer: syz
[  104.356222][ T2346] usb 4-1: SerialNumber: syz
[  104.369005][ T2346] usb 4-1: Found UVC 0.00 device syz (046d:08c3)
[  104.371114][ T2346] usb 4-1: No valid video chain found.
[  104.457020][ T1089] BTRFS warning (device loop2): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  104.466980][ T7455] BTRFS error (device loop2): failed to load root extent
[  104.469836][ T7455] BTRFS warning (device loop2): try to load backup roots slot 1
[  104.475710][   T52] BTRFS warning (device loop2): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  104.480126][ T7455] BTRFS warning (device loop2): couldn't read tree root
[  104.483419][ T7455] BTRFS warning (device loop2): try to load backup roots slot 2
[  104.486735][ T1089] BTRFS error (device loop2): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  104.490996][ T7455] BTRFS warning (device loop2): couldn't read tree root
[  104.493925][ T7455] BTRFS warning (device loop2): try to load backup roots slot 3
[  104.502669][ T7455] BTRFS info (device loop2): rebuilding free space tree
[  104.511823][ T7455] BTRFS info (device loop2): checking UUID tree
[  104.549767][ T5850] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  104.593071][    T9] usb 4-1: USB disconnect, device number 5
[  104.696019][ T7504] C: renamed from lo (while UP)
[  104.699170][ T7504] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  104.780757][ T7510] loop2: detected capacity change from 0 to 1024
[  104.814455][ T7510] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  104.818956][ T7510] ext4 filesystem being mounted at /163/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.828812][ T7510] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: comm syz.2.494: lblock 0 mapped to illegal pblock 0 (length 6)
[  104.835472][ T7510] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 6 with error 117
[  104.839534][ T7510] EXT4-fs (loop2): This should not happen!! Data will be lost
[  104.839534][ T7510] 
[  104.852355][   T26] EXT4-fs error (device loop2): ext4_map_blocks:814: inode #15: block 8: comm kworker/u9:0: lblock 8 mapped to illegal pblock 8 (length 8)
[  104.860120][   T26] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 8 with error 117
[  104.870068][   T26] EXT4-fs (loop2): This should not happen!! Data will be lost
[  104.870068][   T26] 
[  104.884114][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  104.910170][ T7520] loop2: detected capacity change from 0 to 512
[  104.930536][ T7520] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  104.944684][ T7520] ext4 filesystem being mounted at /164/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  104.966060][ T7520] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  105.010044][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  105.150513][ T7539] loop3: detected capacity change from 0 to 8
[  105.244370][ T7552] loop2: detected capacity change from 0 to 128
[  105.257829][ T7552] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  105.353767][ T7551] loop3: detected capacity change from 0 to 32768
[  105.375796][ T7559] autofs: Bad value for 'fd'
[  105.404089][ T7552] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  105.556868][ T7568] loop2: detected capacity change from 0 to 4096
[  105.614861][ T7568] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  105.616985][ T7581] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  105.625807][ T7568] NILFS (loop2): mounting fs with errors
[  105.793364][ T7578] loop3: detected capacity change from 0 to 32768
[  105.807828][ T7578] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  105.830364][ T7578] XFS (loop3): totally zeroed log
[  105.833104][ T7578] XFS (loop3): Corruption warning: Metadata has LSN (1:384) ahead of current LSN (1:0). Please unmount and run xfs_repair (>= v4.3) to resolve.
[  105.839430][ T7578] XFS (loop3): log mount/recovery failed: error -22
[  105.850075][ T7578] XFS (loop3): log mount failed
[  106.077044][ T7630] loop3: detected capacity change from 0 to 512
[  106.083909][ T7630] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement.
[  106.091666][ T7624] loop4: detected capacity change from 0 to 32768
[  106.099682][ T2346] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  106.105846][ T7624] ocfs2: Mounting device (7,4) on (node local, slot 0) with writeback data mode.
[  106.111796][   T33] audit: type=1800 audit(1755563937.408:20): pid=7624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.512" name="bus" dev="loop4" ino=17058 res=0 errno=0
[  106.172936][ T7639] (syz.4.512,7639,1):ocfs2_file_write_iter:2446 ERROR: status = -27
[  106.262812][ T2346] usb 3-1: Using ep0 maxpacket: 16
[  106.268222][ T2346] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  106.277704][ T2346] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.288384][ T2346] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  106.295905][ T2346] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  106.305769][ T2346] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.309151][ T2346] usb 3-1: Product: syz
[  106.310906][ T2346] usb 3-1: Manufacturer: syz
[  106.315862][ T2346] usb 3-1: SerialNumber: syz
[  106.799506][ T2346] usb 3-1: 0:2 : does not exist
[  107.547151][ T2346] usb 3-1: 1:0: bogus dB values (-12637/-11528), disabling dB reporting
[  107.573193][ T2346] usb 3-1: 1:0: failed to get current value for ch 0 (-22)
[  107.620460][ T7661] loop3: detected capacity change from 0 to 8192
[  107.658587][ T2346] usb 3-1: USB disconnect, device number 7
[  107.713836][ T5969] udevd[5969]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  107.812803][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.3.519'.
[  108.199888][ T7709] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  108.380697][ T7056] ocfs2: Unmounting device (7,4) on (node local)
[  108.981565][ T7734] loop4: detected capacity change from 0 to 32768
[  109.014673][ T7734] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  109.051255][ T7734] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  109.060035][   T12] (kworker/u8:0,12,0):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=312, inode=13845347915746889, rec_len=25793, name_len=214
[  109.065969][   T33] audit: type=1800 audit(1755563940.358:21): pid=7734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.531" name="file2" dev="loop4" ino=17058 res=0 errno=0
[  109.084516][   T33] audit: type=1800 audit(1755563940.378:22): pid=7734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.531" name="file2" dev="loop4" ino=17058 res=0 errno=0
[  109.162235][ T7747] syz.3.532: attempt to access beyond end of device
[  109.162235][ T7747] nbd3: rw=6144, sector=128, nr_sectors = 8 limit=0
[  109.167291][ T7747] gfs2: error -5 reading superblock
[  109.205746][ T7056] ocfs2: Unmounting device (7,4) on (node local)
[  109.542972][ T7757] netlink: 36 bytes leftover after parsing attributes in process `syz.2.536'.
[  109.545635][ T7760] loop4: detected capacity change from 0 to 2048
[  109.565022][ T7760] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  109.691005][ T7765] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000)
[  110.559767][ T7797] netlink: 16 bytes leftover after parsing attributes in process `syz.3.546'.
[  110.732260][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  110.898931][    T9] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  110.903794][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.906725][    T9] usb 5-1: Product: syz
[  110.908383][    T9] usb 5-1: Manufacturer: syz
[  110.910261][    T9] usb 5-1: SerialNumber: syz
[  110.921105][    T9] usb 5-1: config 0 descriptor??
[  110.929218][    T9] gspca_main: sunplus-2.14.0 probing 055f:c230
[  111.204703][ T5313] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  111.365620][    T9] gspca_sunplus: reg_r err -71
[  111.367537][    T9] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  111.390807][    T9] usb 5-1: USB disconnect, device number 2
[  111.473943][ T5313] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  111.477979][ T5313] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  111.481257][ T5313] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  111.504580][ T5313] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.519436][ T7806] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  111.535572][ T5313] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  111.656946][ T7849] loop2: detected capacity change from 0 to 2048
[  111.662468][ T7849] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  111.667629][ T7849] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  111.676988][ T7849] fuse: Unknown parameter '0xffffffffffffffff0000000000000000000000000000000000000000'
[  112.053220][ T7864] syz.2.557(7864): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  112.348869][ T7891] overlayfs: failed to clone upperpath
[  112.479301][ T7898] loop4: detected capacity change from 0 to 4096
[  112.526373][ T7898] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  112.548749][ T7898] ntfs3(loop4): ino=0, "file0" The size of extended attributes must not exceed 64KiB
[  112.637958][ T7913] netlink: 'syz.2.575': attribute type 3 has an invalid length.
[  112.648018][ T7913] netlink: 'syz.2.575': attribute type 3 has an invalid length.
[  112.651577][ T7915] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported
[  112.720205][ T7923] loop4: detected capacity change from 0 to 256
[  114.066372][   T51] usb 4-1: USB disconnect, device number 6
[  114.429021][ T7987] loop4: detected capacity change from 0 to 40427
[  114.443675][ T7987] F2FS-fs (loop4): build fault injection rate: 14
[  114.445920][ T7987] F2FS-fs (loop4): build fault injection type: 0x3bfe8c
[  114.462371][ T7987] F2FS-fs (loop4): invalid crc value
[  114.474739][    C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  114.491237][    C1] F2FS-fs (loop4): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  114.555698][ T7987] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  114.569241][ T7987] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  114.586803][ T7987] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  114.602674][ T7987] F2FS-fs (loop4): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  114.607614][   T33] audit: type=1800 audit(1755563945.908:23): pid=7987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.583" name="file1" dev="loop4" ino=10 res=0 errno=0
[  114.614905][ T7987] F2FS-fs (loop4): inject dquot initialize in f2fs_dquot_initialize of f2fs_mkdir+0xfa/0x570
[  114.625701][   T33] audit: type=1800 audit(1755563945.928:24): pid=7987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.583" name="file1" dev="loop4" ino=10 res=0 errno=0
[  114.633082][ T7992] loop3: detected capacity change from 0 to 40427
[  114.633622][ T7987] F2FS-fs (loop4): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0
[  114.643421][ T7992] F2FS-fs (loop3): build fault injection rate: 771
[  114.647684][ T7987] F2FS-fs (loop4): inconsistent node block, node_type:1, nid:10, node_footer[nid:10,ino:10,ofs:0,cpver:0,blkaddr:0]
[  114.663935][ T7992] F2FS-fs (loop3): invalid crc value
[  114.694987][ T7056] syz-executor: attempt to access beyond end of device
[  114.694987][ T7056] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  114.716595][ T7056] CPU: 0 UID: 0 PID: 7056 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  114.716614][ T7056] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.716620][ T7056] Call Trace:
[  114.716625][ T7056]  <TASK>
[  114.716631][ T7056]  dump_stack_lvl+0x189/0x250
[  114.716653][ T7056]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.716667][ T7056]  ? __pfx_queue_work_on+0x10/0x10
[  114.716678][ T7056]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  114.716694][ T7056]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  114.716716][ T7056]  f2fs_handle_critical_error+0x37c/0x540
[  114.716738][ T7056]  f2fs_write_end_io+0x886/0xb60
[  114.716763][ T7056]  __submit_merged_bio+0x27a/0x6a0
[  114.716783][ T7056]  __submit_merged_write_cond+0x255/0x530
[  114.716804][ T7056]  f2fs_write_data_pages+0x261d/0x3000
[  114.716819][ T7056]  ? __lock_acquire+0xab9/0xd20
[  114.716882][ T7056]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  114.716927][ T7056]  ? __mod_zone_page_state+0xd7/0x140
[  114.716950][ T7056]  ? folios_put_refs+0x560/0x640
[  114.716970][ T7056]  ? __pfx_folios_put_refs+0x10/0x10
[  114.716981][ T7056]  ? rcu_is_watching+0x15/0xb0
[  114.716998][ T7056]  ? __lock_acquire+0xab9/0xd20
[  114.717022][ T7056]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  114.717039][ T7056]  do_writepages+0x32e/0x550
[  114.717062][ T7056]  ? do_raw_spin_unlock+0x4d/0x240
[  114.717079][ T7056]  filemap_fdatawrite+0x199/0x240
[  114.717095][ T7056]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  114.717144][ T7056]  ? do_raw_spin_unlock+0x4d/0x240
[  114.717161][ T7056]  f2fs_sync_dirty_inodes+0x31f/0x830
[  114.717183][ T7056]  f2fs_write_checkpoint+0x95a/0x1df0
[  114.717211][ T7056]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  114.717256][ T7056]  ? kill_f2fs_super+0x298/0x6c0
[  114.717271][ T7056]  kill_f2fs_super+0x2c3/0x6c0
[  114.717287][ T7056]  ? __pfx_kill_f2fs_super+0x10/0x10
[  114.717316][ T7056]  ? radix_tree_delete_item+0x2b6/0x400
[  114.717341][ T7056]  ? shrinker_free+0x2ce/0x3e0
[  114.717357][ T7056]  deactivate_locked_super+0xbc/0x130
[  114.717373][ T7056]  cleanup_mnt+0x425/0x4c0
[  114.717386][ T7056]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.717403][ T7056]  task_work_run+0x1d4/0x260
[  114.717421][ T7056]  ? __pfx_task_work_run+0x10/0x10
[  114.717434][ T7056]  ? __x64_sys_umount+0x122/0x160
[  114.717452][ T7056]  ? exit_to_user_mode_loop+0x40/0x110
[  114.717471][ T7056]  exit_to_user_mode_loop+0xec/0x110
[  114.717487][ T7056]  do_syscall_64+0x2bd/0x3b0
[  114.717501][ T7056]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.717515][ T7056]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.717526][ T7056]  ? exc_page_fault+0x9f/0xf0
[  114.717542][ T7056]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.717553][ T7056] RIP: 0033:0x7fa2bb18ff17
[  114.717564][ T7056] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  114.717573][ T7056] RSP: 002b:00007ffd538f8d78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  114.717586][ T7056] RAX: 0000000000000000 RBX: 00007fa2bb211c05 RCX: 00007fa2bb18ff17
[  114.717594][ T7056] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd538f8e30
[  114.717600][ T7056] RBP: 00007ffd538f8e30 R08: 0000000000000000 R09: 0000000000000000
[  114.717607][ T7056] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd538f9ec0
[  114.717614][ T7056] R13: 00007fa2bb211c05 R14: 000000000001bf82 R15: 00007ffd538f9f00
[  114.717634][ T7056]  </TASK>
[  114.717689][ T7056] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  114.805330][ T7992] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  114.855877][ T7992] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  114.894219][ T7992] syz.3.585: attempt to access beyond end of device
[  114.894219][ T7992] loop3: rw=2049, sector=53248, nr_sectors = 8 limit=40427
[  114.907759][ T7992] CPU: 1 UID: 0 PID: 7992 Comm: syz.3.585 Not tainted syzkaller #0 PREEMPT(full) 
[  114.907771][ T7992] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  114.907777][ T7992] Call Trace:
[  114.907780][ T7992]  <TASK>
[  114.907784][ T7992]  dump_stack_lvl+0x189/0x250
[  114.907797][ T7992]  ? __pfx_dump_stack_lvl+0x10/0x10
[  114.907806][ T7992]  ? __pfx_queue_work_on+0x10/0x10
[  114.907813][ T7992]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  114.907822][ T7992]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  114.907861][ T7992]  f2fs_handle_critical_error+0x37c/0x540
[  114.907878][ T7992]  f2fs_write_end_io+0x886/0xb60
[  114.907893][ T7992]  __submit_merged_bio+0x27a/0x6a0
[  114.907907][ T7992]  __submit_merged_write_cond+0x44c/0x530
[  114.907920][ T7992]  f2fs_write_data_pages+0x261d/0x3000
[  114.907946][ T7992]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  114.908000][ T7992]  ? __lock_acquire+0xab9/0xd20
[  114.908014][ T7992]  ? do_raw_spin_lock+0x121/0x290
[  114.908027][ T7992]  ? do_raw_spin_unlock+0x4d/0x240
[  114.908034][ T7992]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  114.908044][ T7992]  do_writepages+0x32e/0x550
[  114.908058][ T7992]  ? do_raw_spin_unlock+0x4d/0x240
[  114.908068][ T7992]  filemap_write_and_wait_range+0x21f/0x320
[  114.908085][ T7992]  ? __pfx_filemap_write_and_wait_range+0x10/0x10
[  114.908111][ T7992]  ? down_write+0x162/0x1f0
[  114.908117][ T7992]  ? __pfx_down_write+0x10/0x10
[  114.908131][ T7992]  f2fs_collapse_range+0x348/0x3e0
[  114.908145][ T7992]  f2fs_fallocate+0x55d/0x990
[  114.908157][ T7992]  vfs_fallocate+0x669/0x7e0
[  114.908166][ T7992]  ? __fget_files+0x2a/0x420
[  114.908175][ T7992]  ? __pfx_vfs_fallocate+0x10/0x10
[  114.908186][ T7992]  ? __fget_files+0x2a/0x420
[  114.908204][ T7992]  __x64_sys_fallocate+0xc0/0x110
[  114.908216][ T7992]  do_syscall_64+0xfa/0x3b0
[  114.908225][ T7992]  ? lockdep_hardirqs_on+0x9c/0x150
[  114.908232][ T7992]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.908239][ T7992]  ? exc_page_fault+0x9f/0xf0
[  114.908248][ T7992]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  114.908255][ T7992] RIP: 0033:0x7fe379d8ebe9
[  114.908262][ T7992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  114.908269][ T7992] RSP: 002b:00007fe37ac10038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d
[  114.908277][ T7992] RAX: ffffffffffffffda RBX: 00007fe379fb5fa0 RCX: 00007fe379d8ebe9
[  114.908282][ T7992] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004
[  114.908286][ T7992] RBP: 00007fe379e11e19 R08: 0000000000000000 R09: 0000000000000000
[  114.908290][ T7992] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000
[  114.908294][ T7992] R13: 00007fe379fb6038 R14: 00007fe379fb5fa0 R15: 00007ffd7acb99b8
[  114.908307][ T7992]  </TASK>
[  114.908310][ T7992] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  114.982902][ T8019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.589'.
[  115.007538][ T7992] syz.3.585: attempt to access beyond end of device
[  115.007538][ T7992] loop3: rw=0, sector=53248, nr_sectors = 8 limit=40427
[  115.126877][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'.
[  115.185339][ T8029] netlink: 4 bytes leftover after parsing attributes in process `syz.4.588'.
[  115.538499][ T8040] netlink: 4 bytes leftover after parsing attributes in process `syz.3.593'.
[  115.635657][ T8046] loop3: detected capacity change from 0 to 4096
[  115.678770][ T8046] ntfs3(loop3): ino=9, attr_set_size
[  116.152092][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  116.271172][ T8080] netlink: 'syz.4.604': attribute type 10 has an invalid length.
[  116.274809][ T8080] netlink: 1948 bytes leftover after parsing attributes in process `syz.4.604'.
[  116.278469][ T8080] netlink: 24 bytes leftover after parsing attributes in process `syz.4.604'.
[  116.302151][    T9] usb 4-1: Using ep0 maxpacket: 32
[  116.306442][    T9] usb 4-1: New USB device found, idVendor=04cb, idProduct=013d, bcdDevice=a4.42
[  116.311536][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  116.318141][    T9] usb 4-1: config 0 descriptor??
[  116.327554][    T9] gspca_main: finepix-2.14.0 probing 04cb:013d
[  116.528572][    T9] usb 4-1: USB disconnect, device number 7
[  117.309231][ T8127] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.616'.
[  117.528231][ T8136] netlink: 'syz.4.617': attribute type 3 has an invalid length.
[  117.531475][ T8136] netlink: 'syz.4.617': attribute type 1 has an invalid length.
[  117.534772][ T8136] netlink: 216 bytes leftover after parsing attributes in process `syz.4.617'.
[  117.539121][ T8136] NCSI netlink: No device for ifindex 33022
[  118.052824][ T8145] loop3: detected capacity change from 0 to 32768
[  118.692046][    T9] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  118.828635][ T5882] tipc: Subscription rejected, illegal request
[  118.844122][    T9] usb 5-1: config 0 has no interfaces?
[  118.846018][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c71b, bcdDevice= 0.00
[  118.848906][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.856555][    T9] usb 5-1: config 0 descriptor??
[  118.888959][ T8186] team0: Port device team_slave_0 removed
[  119.067365][    T9] usb 5-1: USB disconnect, device number 3
[  119.118916][ T8218] netlink: 12 bytes leftover after parsing attributes in process `syz.3.642'.
[  119.185613][ T8218] 8021q: adding VLAN 0 to HW filter on device bond0
[  119.191527][ T8218] bond0: (slave rose0): Enslaving as an active interface with an up link
[  119.362860][ T8234] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  119.367996][ T8234] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  120.799418][ T8298] netlink: 52 bytes leftover after parsing attributes in process `syz.2.664'.
[  120.806285][ T8298] netlink: 16 bytes leftover after parsing attributes in process `syz.2.664'.
[  120.809935][ T8298] netlink: 52 bytes leftover after parsing attributes in process `syz.2.664'.
[  120.957382][ T8297] loop3: detected capacity change from 0 to 32768
[  120.963597][ T8297] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.665 (8297)
[  120.973956][ T8297] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  120.981017][ T8297] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  120.985615][ T8297] BTRFS info (device loop3): disk space caching is enabled
[  120.989365][ T8297] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  121.064161][ T8297] BTRFS info (device loop3): rebuilding free space tree
[  121.087946][ T8297] BTRFS info (device loop3): disabling free space tree
[  121.095333][ T8297] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  121.102553][ T8297] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  121.171573][ T6734] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  121.212306][ T8302] loop4: detected capacity change from 0 to 40427
[  121.224366][ T8302] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  121.234843][ T8302] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  121.279760][ T8302] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  121.292681][ T8302] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  121.295126][ T8302] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  121.319536][ T8302] F2FS-fs (loop4): Can't flush 2 in 0 for SEGS_PER_SEC 1 != 1
[  121.351385][ T8334] loop3: detected capacity change from 0 to 4096
[  121.390242][ T8334] ntfs3(loop3): ino=9, attr_set_size
[  121.527103][ T8347] netlink: 'syz.3.670': attribute type 1 has an invalid length.
[  121.713867][ T8360] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  121.718315][ T8349] loop4: detected capacity change from 0 to 40427
[  121.721685][ T8349] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  121.724393][ T8349] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  121.746543][ T8349] F2FS-fs (loop4): invalid crc value
[  121.785238][ T8349] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  121.790260][ T8349] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  121.793139][ T8349] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  121.912053][   T51] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  122.043612][ T8373] syz.4.668: attempt to access beyond end of device
[  122.043612][ T8373] loop4: rw=2049, sector=77824, nr_sectors = 520 limit=40427
[  122.309006][ T8379] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.678'.
[  122.315237][   T51] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  122.318839][   T51] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  122.326639][   T51] usb 4-1: config 0 descriptor??
[  122.340215][   T51] gspca_main: cpia1-2.14.0 probing 0813:0001
[  122.503032][ T7056] syz-executor: attempt to access beyond end of device
[  122.503032][ T7056] loop4: rw=2051, sector=77824, nr_sectors = 520 limit=40427
[  122.508908][ T7056] F2FS-fs (loop4): Issue discard(9728, 9728, 65) failed, ret: -5
[  122.736561][   T51] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[  123.132067][ T8410] loop4: detected capacity change from 0 to 32768
[  123.138346][ T8410] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.688 (8410)
[  123.143660][   T51] gspca_cpia1: usb_control_msg 02, error -32
[  123.146123][    C1] raw-gadget.0 gadget.3: ignoring, device is not running
[  123.155250][   T51] gspca_cpia1: usb_control_msg 02, error -32
[  123.160731][   T51] gspca_cpia1: usb_control_msg 02, error -71
[  123.171987][   T51] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  123.172146][ T8410] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  123.175460][   T51] usb 4-1: USB disconnect, device number 8
[  123.186893][ T8410] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  123.233301][ T8410] BTRFS info (device loop4): rebuilding free space tree
[  123.251797][ T8410] BTRFS info (device loop4): disabling free space tree
[  123.258994][ T8410] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  123.262803][ T8410] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  123.304467][ T7056] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  123.811627][ T8456] loop4: detected capacity change from 0 to 32768
[  123.819675][ T8456] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  123.860610][ T8456] XFS (loop4): Ending clean mount
[  123.867163][ T8456] XFS (loop4): Quotacheck needed: Please wait.
[  123.888520][ T8456] XFS (loop4): Quotacheck: Done.
[  123.904945][ T8459] loop3: detected capacity change from 0 to 32768
[  123.918711][ T8459] btrfs: Deprecated parameter 'usebackuproot'
[  123.920688][ T8459] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  123.942297][ T8459] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.696 (8459)
[  123.946764][ T7056] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  123.960925][ T8459] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  123.970463][ T8459] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  123.974473][ T8459] BTRFS info (device loop3): using free-space-tree
[  124.025456][ T1090] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  124.047889][ T8459] BTRFS error (device loop3): failed to load root extent
[  124.050375][ T8459] BTRFS warning (device loop3): try to load backup roots slot 1
[  124.076207][   T27] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  124.080310][ T8459] BTRFS warning (device loop3): couldn't read tree root
[  124.086208][ T8459] BTRFS warning (device loop3): try to load backup roots slot 2
[  124.092869][   T27] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  124.102393][ T8459] BTRFS warning (device loop3): couldn't read tree root
[  124.104861][ T8459] BTRFS warning (device loop3): try to load backup roots slot 3
[  124.122669][ T8459] BTRFS info (device loop3): rebuilding free space tree
[  124.134012][ T8459] BTRFS info (device loop3): checking UUID tree
[  124.254001][ T6734] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  125.026463][ T8544] netlink: 24 bytes leftover after parsing attributes in process `syz.3.716'.
[  125.239747][ T8553] 8021q: adding VLAN 0 to HW filter on device bond1
[  125.248944][ T8553] bond0: (slave bond1): Enslaving as an active interface with an up link
[  125.357042][   T33] audit: type=1326 audit(1755563956.658:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8604 comm="syz.4.726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bb18ebe9 code=0x7ffc0000
[  125.366680][   T33] audit: type=1326 audit(1755563956.658:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8604 comm="syz.4.726" exe="/syz-executor" sig=0 arch=c000003e syscall=220 compat=0 ip=0x7fa2bb18ebe9 code=0x7ffc0000
[  125.375576][   T33] audit: type=1326 audit(1755563956.658:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8604 comm="syz.4.726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bb18ebe9 code=0x7ffc0000
[  125.382630][   T33] audit: type=1326 audit(1755563956.668:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8604 comm="syz.4.726" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bb18ebe9 code=0x7ffc0000
[  125.411992][   T33] audit: type=1326 audit(1755563956.708:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.4.727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bb18ebe9 code=0x7ffc0000
[  125.423782][   T33] audit: type=1326 audit(1755563956.718:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.4.727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bb18ebe9 code=0x7ffc0000
[  125.439136][   T33] audit: type=1326 audit(1755563956.718:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.4.727" exe="/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7fa2bb18ebe9 code=0x7ffc0000
[  125.447652][   T33] audit: type=1326 audit(1755563956.718:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.4.727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bb18ebe9 code=0x7ffc0000
[  125.454864][   T33] audit: type=1326 audit(1755563956.718:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8607 comm="syz.4.727" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa2bb18ebe9 code=0x7ffc0000
[  125.582089][ T2346] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  125.742121][ T2346] usb 4-1: Using ep0 maxpacket: 32
[  125.748419][ T2346] usb 4-1: config 0 has an invalid interface number: 111 but max is 1
[  125.751770][ T2346] usb 4-1: config 0 has no interface number 1
[  125.754613][ T2346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  125.760787][ T2346] usb 4-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=4a.83
[  125.766144][ T2346] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.779792][ T2346] usb 4-1: Product: syz
[  125.781500][ T2346] usb 4-1: Manufacturer: syz
[  125.785369][ T2346] usb 4-1: SerialNumber: syz
[  125.792736][ T2346] usb 4-1: config 0 descriptor??
[  125.997924][ T8644] netlink: 'syz.4.738': attribute type 6 has an invalid length.
[  126.009386][ T8644] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.738'.
[  126.009582][ T2346] snd-usb-6fire 4-1:0.111: unable to receive device firmware state.
[  126.028057][ T2346] snd-usb-6fire 4-1:0.111: probe with driver snd-usb-6fire failed with error -71
[  126.033573][ T8649] netlink: 20 bytes leftover after parsing attributes in process `syz.2.739'.
[  126.040735][ T8649] netlink: 'syz.2.739': attribute type 2 has an invalid length.
[  126.045458][ T8649] netlink: 'syz.2.739': attribute type 2 has an invalid length.
[  126.050495][ T8649] netlink: 'syz.2.739': attribute type 1 has an invalid length.
[  126.055894][ T8649] netlink: 'syz.2.739': attribute type 2 has an invalid length.
[  126.059179][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.739'.
[  126.086664][ T2346] usb 4-1: USB disconnect, device number 9
[  126.160900][ T8666] tc_dump_action: action bad kind
[  126.591489][ T8682] netlink: 12 bytes leftover after parsing attributes in process `syz.2.749'.
[  127.259542][ T8707] netlink: 'syz.3.759': attribute type 6 has an invalid length.
[  127.264605][ T8707] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.759'.
[  127.591112][ T8728] netlink: 104 bytes leftover after parsing attributes in process `syz.4.767'.
[  128.543598][ T8745] No source specified
[  128.555657][ T5236] Bluetooth: Unexpected start frame (len 16)
[  128.557081][ T8749] nftables ruleset with unbound chain
[  128.558158][ T5236] Bluetooth: Frame is too long (len 16, expected len 4)
[  128.662562][ T8752] nbd0: detected capacity change from 0 to 127
[  128.673650][ T6093] block nbd0: Receive control failed (result -104)
[  129.022971][ T8776] loop4: detected capacity change from 0 to 512
[  129.049775][ T8776] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  129.056079][ T8776] ext4 filesystem being mounted at /106/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.078904][ T8776] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  129.168852][ T7056] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.382881][ T8800] C: renamed from lo (while UP)
[  129.387963][ T8800] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  129.458521][ T8793] loop4: detected capacity change from 0 to 32768
[  129.719689][    T9] kernel write not supported for file bpf-prog (pid: 9 comm: kworker/0:0)
[  129.899564][ T8838] loop4: detected capacity change from 0 to 512
[  129.921696][ T8838] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  129.938776][ T8838] EXT4-fs (loop4): #clusters per group too big: 268443648
[  129.992838][    T9] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  130.058279][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.4.805'.
[  130.142090][    T9] usb 4-1: Using ep0 maxpacket: 16
[  130.156094][    T9] usb 4-1: config 0 has an invalid interface number: 105 but max is 0
[  130.159311][    T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  130.169903][    T9] usb 4-1: config 0 has no interface number 0
[  130.174458][    T9] usb 4-1: New USB device found, idVendor=046d, idProduct=08d3, bcdDevice= b.28
[  130.177945][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  130.191371][    T9] usb 4-1: Product: syz
[  130.202452][    T9] usb 4-1: Manufacturer: syz
[  130.204249][    T9] usb 4-1: SerialNumber: syz
[  130.207067][    T9] usb 4-1: config 0 descriptor??
[  130.210572][    T9] usb 4-1: Found UVC 0.00 device syz (046d:08d3)
[  130.213348][    T9] usb 4-1: No valid video chain found.
[  130.391630][ T8858] loop4: detected capacity change from 0 to 32768
[  130.402438][ T8858] btrfs: Deprecated parameter 'usebackuproot'
[  130.405000][ T8858] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  130.409036][ T8858] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.813 (8858)
[  130.428082][ T8858] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  130.432422][ T8858] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  130.435957][ T8858] BTRFS info (device loop4): using free-space-tree
[  130.463112][  T604] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  130.470616][ T8858] BTRFS error (device loop4): failed to load root extent
[  130.474470][ T8858] BTRFS warning (device loop4): try to load backup roots slot 1
[  130.477901][ T7560] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  130.485817][ T8858] BTRFS warning (device loop4): couldn't read tree root
[  130.488671][ T8858] BTRFS warning (device loop4): try to load backup roots slot 2
[  130.492771][ T7560] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  130.499098][ T8858] BTRFS warning (device loop4): couldn't read tree root
[  130.502644][ T8858] BTRFS warning (device loop4): try to load backup roots slot 3
[  130.515469][ T8858] BTRFS info (device loop4): rebuilding free space tree
[  130.524642][ T8858] BTRFS info (device loop4): checking UUID tree
[  130.572820][ T7056] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  130.645051][ T8891] binder: 8890:8891 ioctl c018620c 0 returned -14
[  131.785043][ T8913] loop4: detected capacity change from 0 to 8192
[  131.805120][   T33] audit: type=1800 audit(1755563963.108:34): pid=8913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.818" name="file1" dev="loop4" ino=1048615 res=0 errno=0
[  131.904256][ T8919] nfs: Unknown parameter 'ntext'
[  132.153122][ T8929] loop4: detected capacity change from 0 to 32768
[  132.170073][   T33] audit: type=1800 audit(1755563963.468:35): pid=8929 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.821" name="file1" dev="loop4" ino=4 res=0 errno=0
[  132.194948][  T114] ------------[ cut here ]------------
[  132.198096][  T114] WARNING: CPU: 1 PID: 114 at fs/jfs/jfs_dmap.c:2875 dbAdjTree+0x454/0x4e0
[  132.201725][  T114] Modules linked in:
[  132.204024][  T114] CPU: 1 UID: 0 PID: 114 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  132.208663][  T114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.213908][  T114] RIP: 0010:dbAdjTree+0x454/0x4e0
[  132.218030][  T114] Code: 5a ff ff ff e8 2d 33 81 fe eb 05 e8 26 33 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 0d 33 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[  132.226598][  T114] RSP: 0000:ffffc900023ff988 EFLAGS: 00010293
[  132.229212][  T114] RAX: ffffffff833e8103 RBX: ffff8881151e4010 RCX: ffff88801eea5640
[  132.233024][  T114] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  132.236397][  T114] RBP: 0000000000020056 R08: ffffea0004547907 R09: 1ffffd40008a8f20
[  132.239761][  T114] R10: dffffc0000000000 R11: fffff940008a8f21 R12: ffff8881151e4018
[  132.243514][  T114] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  132.246897][  T114] FS:  0000000000000000(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  132.250649][  T114] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  132.253588][  T114] CR2: 00007fff8ae50c48 CR3: 000000003e86c000 CR4: 00000000000006f0
[  132.256884][  T114] Call Trace:
[  132.258353][  T114]  <TASK>
[  132.259648][  T114]  ? __pfx_lock_metapage+0x10/0x10
[  132.261869][  T114]  dbJoin+0x238/0x300
[  132.263730][  T114]  ? do_read_cache_folio+0x4c6/0x590
[  132.266020][  T114]  dbFreeBits+0x4e1/0xdb0
[  132.267873][  T114]  dbFree+0x336/0x650
[  132.269602][  T114]  txFreeMap+0x7ff/0xde0
[  132.271454][  T114]  txUpdateMap+0x308/0x9c0
[  132.273522][  T114]  jfs_lazycommit+0x43f/0xa90
[  132.275563][  T114]  ? __pfx_jfs_lazycommit+0x10/0x10
[  132.277807][  T114]  ? __pfx_default_wake_function+0x10/0x10
[  132.280318][  T114]  ? __kthread_parkme+0x7b/0x200
[  132.282561][  T114]  ? __kthread_parkme+0x1a1/0x200
[  132.284902][  T114]  kthread+0x711/0x8a0
[  132.286672][  T114]  ? __pfx_jfs_lazycommit+0x10/0x10
[  132.288927][  T114]  ? __pfx_kthread+0x10/0x10
[  132.290925][  T114]  ? _raw_spin_unlock_irq+0x23/0x50
[  132.293250][  T114]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.295484][  T114]  ? __pfx_kthread+0x10/0x10
[  132.297487][  T114]  ret_from_fork+0x3fc/0x770
[  132.299456][  T114]  ? __pfx_ret_from_fork+0x10/0x10
[  132.301651][  T114]  ? __switch_to_asm+0x39/0x70
[  132.303911][  T114]  ? __switch_to_asm+0x33/0x70
[  132.305998][  T114]  ? __pfx_kthread+0x10/0x10
[  132.308027][  T114]  ret_from_fork_asm+0x1a/0x30
[  132.310114][  T114]  </TASK>
[  132.311501][  T114] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  132.314628][  T114] CPU: 1 UID: 0 PID: 114 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  132.318378][  T114] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.322639][  T114] Call Trace:
[  132.324090][  T114]  <TASK>
[  132.325388][  T114]  dump_stack_lvl+0x99/0x250
[  132.327430][  T114]  ? __asan_memcpy+0x40/0x70
[  132.329430][  T114]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.331665][  T114]  ? __pfx__printk+0x10/0x10
[  132.333669][  T114]  vpanic+0x281/0x750
[  132.335415][  T114]  ? __pfx__printk+0x10/0x10
[  132.337411][  T114]  ? __pfx_vpanic+0x10/0x10
[  132.339405][  T114]  ? is_bpf_text_address+0x26/0x2b0
[  132.341664][  T114]  panic+0xb9/0xc0
[  132.343291][  T114]  ? __pfx_panic+0x10/0x10
[  132.345226][  T114]  __warn+0x31b/0x4b0
[  132.346963][  T114]  ? dbAdjTree+0x454/0x4e0
[  132.348923][  T114]  ? dbAdjTree+0x454/0x4e0
[  132.350860][  T114]  report_bug+0x2be/0x4f0
[  132.352719][  T114]  ? dbAdjTree+0x454/0x4e0
[  132.354650][  T114]  ? dbAdjTree+0x454/0x4e0
[  132.356578][  T114]  ? dbAdjTree+0x456/0x4e0
[  132.358518][  T114]  handle_bug+0x84/0x160
[  132.360362][  T114]  exc_invalid_op+0x1a/0x50
[  132.362322][  T114]  asm_exc_invalid_op+0x1a/0x20
[  132.364414][  T114] RIP: 0010:dbAdjTree+0x454/0x4e0
[  132.366575][  T114] Code: 5a ff ff ff e8 2d 33 81 fe eb 05 e8 26 33 81 fe 48 83 c4 28 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 0d 33 81 fe 90 <0f> 0b 90 eb e1 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c e1 fb ff ff
[  132.374723][  T114] RSP: 0000:ffffc900023ff988 EFLAGS: 00010293
[  132.377323][  T114] RAX: ffffffff833e8103 RBX: ffff8881151e4010 RCX: ffff88801eea5640
[  132.380688][  T114] RDX: 0000000000000000 RSI: 0000000000000155 RDI: 0000000000020056
[  132.384055][  T114] RBP: 0000000000020056 R08: ffffea0004547907 R09: 1ffffd40008a8f20
[  132.387435][  T114] R10: dffffc0000000000 R11: fffff940008a8f21 R12: ffff8881151e4018
[  132.390801][  T114] R13: dffffc0000000000 R14: 0000000000000004 R15: 0000000000000155
[  132.394166][  T114]  ? dbAdjTree+0x453/0x4e0
[  132.396095][  T114]  ? dbAdjTree+0x453/0x4e0
[  132.398021][  T114]  ? __pfx_lock_metapage+0x10/0x10
[  132.400223][  T114]  dbJoin+0x238/0x300
[  132.401952][  T114]  ? do_read_cache_folio+0x4c6/0x590
[  132.404221][  T114]  dbFreeBits+0x4e1/0xdb0
[  132.406107][  T114]  dbFree+0x336/0x650
[  132.407765][  T114]  txFreeMap+0x7ff/0xde0
[  132.409500][  T114]  txUpdateMap+0x308/0x9c0
[  132.411432][  T114]  jfs_lazycommit+0x43f/0xa90
[  132.413461][  T114]  ? __pfx_jfs_lazycommit+0x10/0x10
[  132.415691][  T114]  ? __pfx_default_wake_function+0x10/0x10
[  132.418184][  T114]  ? __kthread_parkme+0x7b/0x200
[  132.420305][  T114]  ? __kthread_parkme+0x1a1/0x200
[  132.422464][  T114]  kthread+0x711/0x8a0
[  132.424227][  T114]  ? __pfx_jfs_lazycommit+0x10/0x10
[  132.426455][  T114]  ? __pfx_kthread+0x10/0x10
[  132.428472][  T114]  ? _raw_spin_unlock_irq+0x23/0x50
[  132.430695][  T114]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.432929][  T114]  ? __pfx_kthread+0x10/0x10
[  132.434927][  T114]  ret_from_fork+0x3fc/0x770
[  132.436930][  T114]  ? __pfx_ret_from_fork+0x10/0x10
[  132.439129][  T114]  ? __switch_to_asm+0x39/0x70
[  132.441187][  T114]  ? __switch_to_asm+0x33/0x70
[  132.443239][  T114]  ? __pfx_kthread+0x10/0x10
[  132.445239][  T114]  ret_from_fork_asm+0x1a/0x30
[  132.447336][  T114]  </TASK>
[  132.449449][  T114] Kernel Offset: disabled
[  132.451329][  T114] Rebooting in 86400 seconds..

VM DIAGNOSIS:
00:39:23  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000001 RBX=0000000000000000 RCX=ffffffff8b7a1ef5 RDX=0000000000000000
RSI=0000000000000008 RDI=ffffffff8fa37e30 RBP=ffffc900001ef5f8 RSP=ffffc900001ef3e0
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffff88801caa002c R13=0000000000000000 R14=dffffc0000000000 R15=ffff88801caa1288
RIP=ffffffff8b7a1efd RFL=00000257 [---ZAPC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32422ff8 CR3=0000000025398000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=0a0a0a0a0a0a0a0a 0a0a0a0a0a0a0a0a
XMM02=ffff000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 000000000000ff00
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc900023ff130
R8 =ffff888020a00237 R9 =1ffff11004140046 R10=dffffc0000000000 R11=ffffffff854f0c30
R12=dffffc0000000000 R13=ffffffff99af98dc R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f0cac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff8ae50c48 CR3=000000003e86c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=2f2f2f2f2f2f2f2f 2f2f2f2f2f2f2f2f XMM01=622f617461642f76 6564752f6e75722f
XMM02=0000000000000000 00ff00000000ff00 XMM03=ff00000000000000 0000000000000000
XMM04=0000000000000000 000000ff00000000 XMM05=612d306466342d62 3065352d33613964
XMM06=306235346632785c 646975752d796266 XMM07=32785c6b73696466 32785c2f736b6e69
XMM08=00000000ffffffff 0000000000000000 XMM09=3034373262366666 322d353065612d30
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
