last executing test programs:

3m2.860794433s ago: executing program 1 (id=55):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x4, 0x1, 0x3, 0x0, 0x0, {0x7, 0x0, 0x83}}, 0x14}, 0x1, 0x0, 0x0, 0x40008c1}, 0x800)

3m2.789780355s ago: executing program 1 (id=59):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
write$UHID_INPUT(r0, &(0x7f0000001040)={0xc, {"a2e3ad21ed0d52f91b5d520887f70e06d038e7ff7fc6e5539b3272298b089b07081b4d090890e0878f0e1ac6e7049b334a959bfc9a240d2567f3988f7ef319520100ffe8d178708c523c921b1b9b39070d075d0936cd3b78130daa61d8e809ea882f5802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb056d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498be0800000000000000f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc825d8e524b2451138e495bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546850a27af9544ae15a7e454dea05918b4fd42513f000000000000000a3621c56cea8d20fa911a0c41db6efcffac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ec126c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce3803f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a04a6a2b8247068ae949ed06e288e810bac9c76600025e19c9000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cfe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d97b9a6d6d5495c198045651cf4778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdc80c47ee4f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2691491abf8ab9c015073014d9e08d4338b8780bdecd436cf0541e4505bc3a45237f104b962102de9efed496f42355bc7872c827467cfa5c4e72730d56bd068ed211cf847535edecb7b373f78ff95b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd735892892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af0000807e0000000002d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40426db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c5409711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5407000000e3ad038f2211f1033195563c7f93cd54b9094f226e78b271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b4051db55e0510a6e4114a53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005008000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e24919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afae5136651b1b9bd522d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02dae17b118e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a6d8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546def271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7348663a52190202c7af288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f00000000000000000000b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652770711935f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f42f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d53588a0f9455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d664130bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e39336d07c2b8081c128ad2706f48261f7899484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599af40005b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fd30d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb84d9a88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ea4cd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f031755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c7e36bb2fc4c40e9cf96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb24ee72e4363f51af62af6fb2a6df3bec89822a7a0b678458fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000000000000000000000000bd700", 0x1000}}, 0x375)

3m2.707341011s ago: executing program 1 (id=61):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='wchan\x00')
pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
preadv(r0, &(0x7f0000002280)=[{&(0x7f0000002780)=""/133, 0x85}], 0x1, 0x10001, 0x7)

3m1.753130978s ago: executing program 1 (id=72):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800702, &(0x7f0000000100)={[{@max_batch_time={'max_batch_time', 0x3d, 0x8001}}, {@bsdgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x40}}, {@noauto_da_alloc}, {@noload}, {@oldalloc}, {@resuid}]}, 0x2, 0x470, &(0x7f0000000dc0)="$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")
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
chdir(&(0x7f0000000080)='./file0\x00')
openat(0xffffffffffffff9c, &(0x7f0000001300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x40042, 0x7f)

3m1.669518963s ago: executing program 1 (id=74):
r0 = gettid()
timer_create(0x0, &(0x7f0000000000)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440), 0x10)
listen(r1, 0xf)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10)
r3 = accept4$unix(r1, 0x0, 0x0, 0x0)
recvmsg(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000b00)=""/77, 0x4d}], 0x1}, 0x4c2003a0)
timer_settime(0x0, 0x1, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

3m1.377547721s ago: executing program 1 (id=76):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x18)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x6000c181)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019ef00000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)

3m1.122081333s ago: executing program 32 (id=76):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000180)='sched_switch\x00', r0}, 0x18)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x6000c181)
r1 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019ef00000000000000002000000000000000800010001000000040004"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0)

1m39.676351829s ago: executing program 0 (id=1152):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r2 = socket(0x21, 0x2, 0x2)
sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000a40)={0x3c, r1, 0x1, 0x70bd28, 0x25dfdbf7, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004000}, 0x0)

1m39.128118802s ago: executing program 0 (id=1153):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)={0x0, 0x0, 0x7})
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401)
ioctl$SG_IO(r0, 0x2285, &(0x7f00000001c0)={0x53, 0xfffffffffffffffc, 0x6, 0x7, @buffer={0x0, 0x0, 0x0}, &(0x7f00000002c0)="a6ff2ab899ec", 0x0, 0xee2, 0x10013, 0x0, 0x0})

1m39.127974809s ago: executing program 0 (id=1154):
r0 = syz_open_dev$usbfs(&(0x7f0000000140), 0x77, 0x1501)
ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_control={0x2, {}, 0xffffffff, 0x41, &(0x7f00000004c0)={0x4b5a9da54893e123, 0xf, 0x4, 0x4000, 0x3}, 0x26, 0x200, 0x8, 0x0, 0x0, 0x6, 0x0})
ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f0000000380))

1m38.934368118s ago: executing program 0 (id=1157):
socket$nl_netfilter(0x10, 0x3, 0xc)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0)

1m38.380158089s ago: executing program 0 (id=1161):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x80, &(0x7f0000000180)=ANY=[@ANYBLOB='decompose,nobarrier,barrier,nobarrier,part=0x0000000000000003,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6e6c733d6b6f69382d722c00c21250cad8f823e24e4c490d525c88545e09dee659b17067e9f50f6192f1cb9db1c810950fd8ee49814be397f3943ed071f9e69ea9410a0e48ce0d8d832175d176b083b59dc831f46f6edd4013d86813e69719e385c4859f40407ca65d608bcee3db0e94f74f77cb2a084c49dfb6b1899e92e46c823cf81194259ccdf621b5a37f6f5d739e8fd26162036bcb7ea8cb647e7c6fb0c2bd437f50187e5832880ee906001a56ea41f53ace0d", @ANYRESHEX, @ANYBLOB="9012dba460e2eb272db2f2de29b696d160e297e60eff9d4f870b0e700e96afe2c872ccc0d5dd938ba2e4506fb0cba04388569d3ffbc037db6f58f8bea1b835070bad900e7881ee956a75746e54099a9ca3e990260f80017e184ebe5d"], 0x40, 0x71b, &(0x7f0000001f80)="$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")
mount$afs(&(0x7f0000000040)=@cell={0x2a, 'syz1:', 'syz1', '', 0x7c}, &(0x7f0000000080)='./file0\x00', 0x0, 0x181000, 0x0)

1m38.064663429s ago: executing program 0 (id=1164):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
alarm(0x1)

1m37.932486551s ago: executing program 33 (id=1164):
timer_create(0x0, &(0x7f0000000200)={0x0, 0x21}, &(0x7f0000000300))
fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x4370, 0x5})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0)
alarm(0x1)

2.076013164s ago: executing program 3 (id=2232):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x439, 0x0, 0x25dfdbfc, {0x0, 0x0, 0xe403, 0x0, 0x1087d, 0x610c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@vti_common_policy=[@IFLA_VTI_IKEY={0x8, 0x2, 0x1}]]}}}]}, 0x38}}, 0x0)

1.945956661s ago: executing program 3 (id=2234):
syz_emit_ethernet(0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa86dd6745208e00183aff00000000000000000000ffffac1414aaff08000000"], 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f00000002c0)='GPL\x00'}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff62, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)

1.574097665s ago: executing program 3 (id=2236):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000050000000000000000000024000a20000000000a1f000000000000000000010000000900010073797a300000000058000000030a0104000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088000000060a010400000000000000000100000008000b400000000014000480100001800b0001006e756d67656e00000900010073797a30000000004c000480480001800800"], 0x122}}, 0x4008090)

1.573914339s ago: executing program 2 (id=2237):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv4/vs/secure_tcp\x00', 0x2, 0x0)
sendfile(r0, r0, 0x0, 0x8)

1.517402412s ago: executing program 3 (id=2238):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8)
setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0)
setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000400)={0x0, 0x0, 0x7316}, 0x8)

1.517201454s ago: executing program 2 (id=2239):
syz_usb_connect(0x0, 0x49, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xc8, 0x2b, 0xe7, 0x40, 0x421, 0x46e, 0x33f0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x37, 0x1, 0x54, 0x1, 0x10, 0x6, [{{0x9, 0x4, 0x6f, 0x4, 0x0, 0x2, 0x2, 0xff, 0x4, [@uac_as={[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0x5b, 0x2, 0x7, 0x9}]}, @cdc_ncm={{0x5}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x6, 0x1, 0x6}, {0x6, 0x24, 0x1a, 0x6, 0x1c}}]}}]}}]}}, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x5, [{0x2, &(0x7f0000000100)=@string={0x2}}, {0x0, 0x0}, {0x4, &(0x7f0000000000)=@lang_id={0x4, 0x3, 0x42a}}, {0x6b, &(0x7f0000000280)=@string={0x6b, 0x3, "a19ecf7332fb3ac9eead7276e7a21723f9ce7cc5f09a4f8ecf940e078e45eb9b7c6ed8c05c5a64a06f9f191f43e8b11897bc43e3b7de2f00edff3e882fcbefa08b257bbdb185a12f224d9f346feb2a7060618fe5176b43f285c079f6efd04c77940832f347fbf47217"}}, {0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x1401}}]})

798.634907ms ago: executing program 4 (id=2248):
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
setsockopt$WPAN_SECURITY_LEVEL(r0, 0x0, 0x2, &(0x7f0000003c80)=0x40005, 0x28)

798.325944ms ago: executing program 4 (id=2249):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000003c0)={[{@treelog}, {@nodatacow}, {@nodatacow}, {@space_cache}, {@nodatasum}, {@nobarrier}, {@noflushoncommit}, {@user_subvol_rm}, {@ref_verify}, {@noenospc_debug}, {@clear_cache}, {@commit={'commit', 0x3d, 0x3}}, {@ssd}, {@nobarrier}, {@max_inline={'max_inline', 0x3d, [0x32, 0x36, 0x38, 0x35, 0x36, 0x65]}}]}, 0x1, 0x50f3, &(0x7f000000a2c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141042, 0x0)
pwritev2(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)="ff", 0x1}], 0x1, 0xe7b, 0x0, 0x0)
rename(&(0x7f0000000000)='./file2\x00', &(0x7f0000000040)='./file1\x00')

636.79146ms ago: executing program 3 (id=2250):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'tunl0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x6}, {0xffff, 0xffff}, {0x0, 0xfff2}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_FLOWS={0x8, 0x5, 0xff}]}}]}, 0x40}}, 0x4004050)
sendmmsg$inet(r0, &(0x7f0000005200)=[{{0x0, 0x4b, &(0x7f0000000000), 0x1}}], 0x1, 0x0)

578.120259ms ago: executing program 3 (id=2251):
socket$kcm(0x21, 0x2, 0xa)
r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r1, 0x0, 0x0)
syz_usb_disconnect(r0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)

489.176391ms ago: executing program 4 (id=2252):
socket$nl_route(0x10, 0x3, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_sctp(0xa, 0x1, 0x84)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
pipe(&(0x7f0000000080)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r1, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

250.12345ms ago: executing program 2 (id=2253):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x2}, 0x50)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r1}, &(0x7f0000000180), &(0x7f00000001c0)=r0}, 0x20)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x15, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffd}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f00000004c0)="630b008646dc3f0adf33c9f7b986", 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x50)

249.902917ms ago: executing program 2 (id=2254):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x13101}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x4}]}, 0x44}}, 0x4000)

168.978407ms ago: executing program 2 (id=2255):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000014800)={0x0, 0x0, &(0x7f00000147c0)={&(0x7f0000000000)=@allocspi={0x104, 0x16, 0x1, 0x70bd25, 0x25dfdbff, {{{@in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x4e23, 0x0, 0x4e20, 0x3, 0x2, 0x20, 0x10, 0x3a}, {@in=@loopback, 0x4d5, 0x33}, @in=@local, {0x1, 0x10, 0x4, 0x8001, 0x8, 0x7f7, 0xaaf0, 0x2}, {0x500000, 0x4, 0x4, 0x2}, {0xc908, 0x2127268a, 0x8}, 0x70bd2b, 0x3507, 0xa, 0x0, 0x0, 0x10}, 0xff, 0x80000002}, [@offload={0xc}]}, 0x104}, 0x1, 0x0, 0x0, 0x880}, 0x48000)

168.797844ms ago: executing program 4 (id=2256):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x3, 0x0, 0x9, 0xe, 0x0, 0x0, 0x25dfdbfd, [@sadb_address={0x5, 0x17, 0x0, 0x0, 0xe, @in6={0xa, 0x4e23, 0xbd3e, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x3f3d680e}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x2}, @sadb_address={0x3, 0x5, 0x6c, 0x20, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_sec_ctx={0x1, 0x18, 0xe, 0x2}, @sadb_x_nat_t_type={0x1, 0x14, 0x3}]}, 0x70}}, 0x0)

106.623472ms ago: executing program 2 (id=2257):
syz_mount_image$xfs(&(0x7f00000000c0), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000009b00)={[{@noikeep}, {@sysvgroups}]}, 0x4, 0x9864, &(0x7f0000000140)="$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")
r0 = open(&(0x7f0000000040)='./file1\x00', 0x20142, 0x10)
fallocate(r0, 0x40, 0x3, 0x2000007ff)

106.445081ms ago: executing program 4 (id=2258):
r0 = socket$igmp(0x2, 0x3, 0x2)
ioctl$sock_netdev_private(r0, 0x8948, &(0x7f0000000140)="a6cc04e2d8f1c38afbf14b29b86e3a")

0s ago: executing program 4 (id=2259):
write$binfmt_aout(0xffffffffffffffff, 0x0, 0xfd06)
mmap$IORING_OFF_SQ_RING(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x6, 0x11, 0xffffffffffffffff, 0x0)
dup2(0xffffffffffffffff, 0xffffffffffffffff)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0xfffffffffffffff3, 0x2)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)

kernel console output (not intermixed with test programs):

red instead of data journaling mode
[  140.129222][ T8836] EXT4-fs (loop2): 1 truncate cleaned up
[  140.134175][ T8836] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.164383][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.213214][ T8841] loop2: detected capacity change from 0 to 512
[  140.229117][ T8841] EXT4-fs: Ignoring removed bh option
[  140.247168][ T8841] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  140.261326][ T8841] EXT4-fs (loop2): 1 truncate cleaned up
[  140.264094][ T8841] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  140.284776][   T33] audit: type=1800 audit(2000000045.452:31): pid=8841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1079" name="file1" dev="loop2" ino=15 res=0 errno=0
[  140.326197][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  140.383246][ T8845] loop2: detected capacity change from 0 to 128
[  140.390960][ T8845] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  140.412603][ T8845] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  140.679293][ T8847] loop2: detected capacity change from 0 to 32768
[  140.703400][   T33] audit: type=1800 audit(2000000045.872:32): pid=8847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1081" name="file1" dev="loop2" ino=4 res=0 errno=0
[  141.173307][ T8868] loop0: detected capacity change from 0 to 2048
[  143.324805][ T8919] loop0: detected capacity change from 0 to 32768
[  143.331388][ T8919] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1111 (8919)
[  143.339474][ T8919] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  143.342690][ T8919] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  143.345394][ T8919] BTRFS info (device loop0): disk space caching is enabled
[  143.354047][ T8919] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  143.456285][ T8919] BTRFS info (device loop0): rebuilding free space tree
[  143.474738][ T8919] BTRFS info (device loop0): disabling free space tree
[  143.479340][ T8919] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  143.487999][ T8919] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  143.557259][ T5848] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  143.562301][ T5873] BTRFS info (device loop0): qgroup scan completed (inconsistency flag cleared)
[  143.819570][ T8955] netlink: 'syz.3.1119': attribute type 66 has an invalid length.
[  143.895646][ T8963] loop0: detected capacity change from 0 to 512
[  143.908978][ T8963] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  143.915221][ T8963] UDF-fs: Scanning with blocksize 512 failed
[  143.926825][ T8963] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  143.930022][ T8963] UDF-fs: Scanning with blocksize 1024 failed
[  143.932783][ T8963] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[  143.935617][ T8963] UDF-fs: Scanning with blocksize 2048 failed
[  143.939377][ T8963] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  143.944722][ T8963] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  144.089102][ T5850] Bluetooth: hci0: unexpected event for opcode 0x2035
[  144.725438][ T8995] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  145.061188][ T9009] 9pnet_fd: Insufficient options for proto=fd
[  145.066023][ T9009] lo speed is unknown, defaulting to 1000
[  145.069675][ T9009] lo speed is unknown, defaulting to 1000
[  145.073227][ T9009] lo speed is unknown, defaulting to 1000
[  145.078977][ T9009] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  145.087602][ T9009] infiniband 3yz0: RDMA CMA: cma_listen_on_dev, error -98
[  145.109703][ T9009] lo speed is unknown, defaulting to 1000
[  145.110510][ T9021] loop0: detected capacity change from 0 to 512
[  145.112996][ T9009] lo speed is unknown, defaulting to 1000
[  145.118284][ T9009] lo speed is unknown, defaulting to 1000
[  145.121857][ T5850] Bluetooth: hci0: unexpected event for opcode 0x0c7a
[  145.133884][ T9021] EXT4-fs (loop0): orphan cleanup on readonly fs
[  145.141343][ T9021] EXT4-fs error (device loop0): ext4_orphan_get:1418: comm syz.0.1150: bad orphan inode 13
[  145.145431][ T9021] ext4_test_bit(bit=12, block=18) = 1
[  145.147607][ T9021] is_bad_inode(inode)=0
[  145.150987][ T9021] NEXT_ORPHAN(inode)=2130706432
[  145.152921][ T9021] max_ino=32
[  145.154292][ T9021] i_nlink=1
[  145.157262][ T9021] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  145.195471][ T5848] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  145.665557][ T9029] block nbd0: server does not support multiple connections per device.
[  145.676760][ T9029] block nbd0: shutting down sockets
[  145.781428][ T9037] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  145.784344][ T9037] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[  146.429121][   T33] audit: type=1326 audit(2000000051.602:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.3.1159" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd066b8ebe9 code=0x7ffc0000
[  146.454105][   T33] audit: type=1326 audit(2000000051.602:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.3.1159" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd066b8ebe9 code=0x7ffc0000
[  146.464872][   T33] audit: type=1326 audit(2000000051.602:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.3.1159" exe="/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7fd066b8ebe9 code=0x7ffc0000
[  146.474027][   T33] audit: type=1326 audit(2000000051.602:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.3.1159" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd066b8ebe9 code=0x7ffc0000
[  146.492278][   T33] audit: type=1326 audit(2000000051.602:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9047 comm="syz.3.1159" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd066b8ebe9 code=0x7ffc0000
[  146.736902][ T9053] program syz.2.1162 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  146.814059][   T12] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.879688][   T12] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  146.954434][   T12] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.003262][   T12] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  147.007981][ T5313] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  147.064800][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  147.071649][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  147.074627][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  147.080952][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  147.084334][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  147.160317][ T5313] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  147.167177][ T5313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.182411][ T5313] usb 3-1: config 0 descriptor??
[  147.184780][   T12] bridge_slave_1: left allmulticast mode
[  147.187343][ T9057] lo speed is unknown, defaulting to 1000
[  147.190233][   T12] bridge_slave_1: left promiscuous mode
[  147.193298][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[  147.198243][ T5313] cp210x 3-1:0.0: cp210x converter detected
[  147.209058][   T12] bridge_slave_0: left allmulticast mode
[  147.211608][   T12] bridge_slave_0: left promiscuous mode
[  147.214249][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[  147.612852][ T5313] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32
[  147.628438][ T5313] usb 3-1: cp210x converter now attached to ttyUSB0
[  147.650669][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  147.656283][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  147.661642][   T12] bond0 (unregistering): Released all slaves
[  147.671579][   T12] bond1 (unregistering): Released all slaves
[  147.832098][ T5892] usb 3-1: USB disconnect, device number 15
[  147.852265][ T5892] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  147.872729][ T5892] cp210x 3-1:0.0: device disconnected
[  148.076891][ T9057] chnl_net:caif_netlink_parms(): no params data found
[  148.422079][   T12] hsr_slave_0: left promiscuous mode
[  148.425351][   T12] hsr_slave_1: left promiscuous mode
[  148.429368][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  148.432160][   T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[  148.435750][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  148.439325][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[  148.451356][   T12] veth1_macvtap: left promiscuous mode
[  148.453713][   T12] veth0_macvtap: left promiscuous mode
[  148.456030][   T12] veth1_vlan: left promiscuous mode
[  148.461671][   T12] veth0_vlan: left promiscuous mode
[  148.691797][ T9088] loop2: detected capacity change from 0 to 32768
[  148.856149][   T12] team0 (unregistering): Port device team_slave_1 removed
[  149.017221][ T9096] loop2: detected capacity change from 0 to 4096
[  149.031880][ T9096] NILFS (loop2): invalid segment: Checksum error in segment payload
[  149.035454][ T9096] NILFS (loop2): trying rollback from an earlier position
[  149.060848][ T9096] NILFS (loop2): recovery complete
[  149.071320][ T9098] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  149.118238][   T55] Bluetooth: hci1: command tx timeout
[  149.440914][ T9101] loop2: detected capacity change from 0 to 32768
[  149.453616][ T9101] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1175 (9101)
[  149.465384][ T9101] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  149.469772][ T9101] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  149.473182][ T9101] BTRFS info (device loop2): using free-space-tree
[  149.576984][ T9101] BTRFS info (device loop2): rebuilding free space tree
[  149.668469][ T5894] BTRFS info (device loop2): qgroup scan completed (inconsistency flag cleared)
[  149.813664][ T9057] bridge0: port 1(bridge_slave_0) entered blocking state
[  149.816748][ T9057] bridge0: port 1(bridge_slave_0) entered disabled state
[  149.827090][ T9057] bridge_slave_0: entered allmulticast mode
[  149.831318][ T9057] bridge_slave_0: entered promiscuous mode
[  149.839717][ T9057] bridge0: port 2(bridge_slave_1) entered blocking state
[  149.848604][ T9057] bridge0: port 2(bridge_slave_1) entered disabled state
[  149.851220][ T9057] bridge_slave_1: entered allmulticast mode
[  149.859883][ T9057] bridge_slave_1: entered promiscuous mode
[  149.929991][ T5853] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  149.955078][ T9057] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  149.982374][ T9057] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  150.161544][ T9057] team0: Port device team_slave_0 added
[  150.165450][ T9057] team0: Port device team_slave_1 added
[  150.197375][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1179'.
[  150.209023][ T9134] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1179'.
[  150.220329][ T9134] netlink: 'syz.3.1179': attribute type 18 has an invalid length.
[  150.254616][ T9057] batman_adv: batadv0: Adding interface: batadv_slave_0
[  150.257214][ T9057] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.283778][ T9057] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  150.289945][ T9057] batman_adv: batadv0: Adding interface: batadv_slave_1
[  150.292528][ T9057] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  150.303852][ T9136] loop2: detected capacity change from 0 to 1764
[  150.325086][ T9057] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  150.366843][   T12] IPVS: stop unused estimator thread 0...
[  150.427495][ T9057] hsr_slave_0: entered promiscuous mode
[  150.436857][ T9057] hsr_slave_1: entered promiscuous mode
[  150.446070][ T9057] debugfs: 'hsr0' already exists in 'hsr'
[  150.457956][ T9057] Cannot create hsr debugfs directory
[  150.733244][ T9057] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  150.739298][ T9057] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  150.760535][ T9057] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  150.771429][ T9057] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  150.835881][ T9158] loop2: detected capacity change from 0 to 32768
[  150.864075][ T9170] erspan1: entered allmulticast mode
[  150.913747][ T9057] 8021q: adding VLAN 0 to HW filter on device bond0
[  150.943363][ T9057] 8021q: adding VLAN 0 to HW filter on device team0
[  150.973977][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[  150.976982][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[  151.046264][   T27] bridge0: port 2(bridge_slave_1) entered blocking state
[  151.049244][   T27] bridge0: port 2(bridge_slave_1) entered forwarding state
[  151.188413][   T55] Bluetooth: hci1: command tx timeout
[  151.253091][ T9057] 8021q: adding VLAN 0 to HW filter on device batadv0
[  151.460043][ T9057] veth0_vlan: entered promiscuous mode
[  151.472996][ T9057] veth1_vlan: entered promiscuous mode
[  151.494684][ T9057] veth0_macvtap: entered promiscuous mode
[  151.500369][ T9057] veth1_macvtap: entered promiscuous mode
[  151.517967][ T9057] batman_adv: batadv0: Interface activated: batadv_slave_0
[  151.527406][ T9057] batman_adv: batadv0: Interface activated: batadv_slave_1
[  151.547473][ T5873] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  151.552621][ T5873] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  151.556450][ T5873] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  151.570686][ T5873] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  151.660683][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.663273][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.672620][ T9225] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1200'.
[  151.684211][ T9225] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1200'.
[  151.686637][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  151.692430][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  151.836937][ T9228] io-wq is not configured for unbound workers
[  151.862091][ T9233] QAT: Stopping all acceleration devices.
[  152.101243][ T9244] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1205'.
[  153.279224][   T55] Bluetooth: hci1: command tx timeout
[  153.540897][ T9265] netlink: 'syz.2.1209': attribute type 1 has an invalid length.
[  153.600960][ T9268] loop2: detected capacity change from 0 to 1024
[  153.735243][ T9268] hfsplus: extend alloc file! (8192,8,110)
[  154.285554][ T9273] loop2: detected capacity change from 0 to 65536
[  154.308898][ T9273] XFS (loop2): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  154.350435][ T9273] XFS (loop2): Ending clean mount
[  154.882023][ T9293] netlink: 'syz.4.1213': attribute type 29 has an invalid length.
[  154.926225][ T5853] XFS (loop2): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  155.381929][   T55] Bluetooth: hci1: command tx timeout
[  155.768487][ T9302] loop2: detected capacity change from 0 to 32768
[  155.773889][ T9302] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1215 (9302)
[  156.098862][ T9302] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  156.103239][ T9302] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  156.106187][ T9302] BTRFS info (device loop2): using free-space-tree
[  156.171422][ T9325] overlayfs: missing 'lowerdir'
[  156.237722][   T33] audit: type=1800 audit(2000000061.402:38): pid=9302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1215" name="file1" dev="loop2" ino=260 res=0 errno=0
[  156.282271][ T5853] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  156.612485][ T9361] netlink: 'syz.3.1234': attribute type 1 has an invalid length.
[  156.616446][ T9361] nbd: couldn't find a device at index 393224
[  156.729082][ T9351] loop4: detected capacity change from 0 to 32768
[  156.746265][ T9351] (syz.4.1229,9351,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  156.751016][ T9351] (syz.4.1229,9351,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  156.769021][ T9351] JBD2: Ignoring recovery information on journal
[  156.785927][ T9351] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  156.829592][ T2320] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  156.872760][ T9057] ocfs2: Unmounting device (7,4) on (node local)
[  156.981155][ T2320] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  156.985335][ T2320] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  156.994268][ T2320] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  157.000758][ T2320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.008044][ T2320] usb 3-1: Product: syz
[  157.009813][ T2320] usb 3-1: Manufacturer: syz
[  157.013461][ T2320] usb 3-1: SerialNumber: syz
[  157.205043][ T9384] netlink: 'syz.4.1244': attribute type 21 has an invalid length.
[  157.208889][ T9384] netlink: 'syz.4.1244': attribute type 4 has an invalid length.
[  157.226673][ T9359] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  157.234956][ T9359] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  157.253319][ T2320] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  157.277602][ T2320] usb 3-1: USB disconnect, device number 16
[  157.335192][ T9386] loop4: detected capacity change from 0 to 4096
[  157.809193][ T2320] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  157.962749][ T2320] usb 3-1: Using ep0 maxpacket: 8
[  157.995349][ T2320] usb 3-1: config index 0 descriptor too short (expected 301, got 72)
[  158.013411][ T2320] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  158.038596][ T2320] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  158.058150][ T2320] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  158.079813][ T2320] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  158.097098][ T2320] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  158.125493][ T2320] usb 3-1: config 16 interface 0 altsetting 0 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  158.153456][ T2320] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  158.174251][ T2320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  158.338381][ T9411] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1254'.
[  158.438031][ T2320] usb 3-1: usb_control_msg returned -32
[  158.441970][ T2320] usbtmc 3-1:16.0: can't read capabilities
[  158.444878][    C1] usbtmc 3-1:16.0: invalid notification: 14
[  158.447617][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.450465][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.453124][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.455772][    C1] usbtmc 3-1:16.0: invalid notification: 11
[  158.458496][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.461340][    C1] usbtmc 3-1:16.0: invalid notification: 2
[  158.463926][    C1] usbtmc 3-1:16.0: invalid notification: 5
[  158.466558][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.469346][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.471941][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.474529][    C1] usbtmc 3-1:16.0: invalid notification: 60
[  158.477441][    C1] usbtmc 3-1:16.0: invalid notification: 12
[  158.480577][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.483115][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.485725][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.488394][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.491008][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.493562][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.496180][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.498854][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.501523][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.504200][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.506760][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.509415][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.512411][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.515448][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.518050][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.520712][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.523333][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.526018][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.528679][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.531312][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.533933][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.536506][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.539168][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.541815][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.544442][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.547095][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.549752][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.552366][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.554918][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.557551][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.568393][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.571108][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.573647][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.576305][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.579024][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.581723][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.584444][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.587177][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.596925][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.599809][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.602583][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.605252][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.608012][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.611309][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.614057][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.617232][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.627906][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.630824][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.633767][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.636186][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.638246][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.640364][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.642434][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.644472][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.647033][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.649638][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.651756][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.654051][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.656200][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.658407][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.660525][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.662554][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.664749][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.667124][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.669735][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.672372][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.674878][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.677459][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.680027][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.682504][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.685030][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.687562][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.690178][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.692951][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.695327][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.697587][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.699771][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.702406][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.705003][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.707092][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.709329][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.711712][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.713745][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.715797][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.717867][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.720083][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.722101][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.724178][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.726804][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.729432][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.734100][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.736277][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.738539][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.740665][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.742738][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.745127][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.747519][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.749851][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.752478][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.755101][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.757625][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.760161][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.762810][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.765424][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.768086][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.771356][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.774176][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.776923][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.779713][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.782357][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.785168][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.790766][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.793992][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.796773][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.799587][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.802381][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.805181][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.807967][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.810730][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.813514][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.816281][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.819272][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.822291][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.825229][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.828122][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.830907][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.833698][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.836452][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.847991][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.853316][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.858506][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.868908][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.871905][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.874610][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.877365][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.880125][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.882905][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.886047][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.888731][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.891501][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.894294][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.897071][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.899859][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.902655][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.905365][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.908199][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.910960][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.913610][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.916370][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.919103][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.921696][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.925142][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.927886][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.931128][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.933926][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.936501][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.939152][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.941736][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.944381][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.946977][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.949608][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.952226][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.954867][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.957597][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.960438][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.963271][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.965930][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.968619][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.971396][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.974156][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.976910][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.980104][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.982677][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.987073][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.989851][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.992604][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.995369][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  158.998147][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  159.000934][    C1] usbtmc 3-1:16.0: invalid notification: 0
[  159.191072][ T9427] loop4: detected capacity change from 0 to 2048
[  159.212404][ T9427] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  159.256352][   T95] usb 3-1: USB disconnect, device number 17
[  160.190174][ T9448] loop4: detected capacity change from 0 to 128
[  160.271941][ T9445] loop2: detected capacity change from 0 to 4096
[  161.349099][ T9458] syz.4.1269 (9458): drop_caches: 2
[  161.943719][ T9462] IPv6: NLM_F_CREATE should be specified when creating new route
[  162.058702][ T9467] loop4: detected capacity change from 0 to 128
[  162.134835][ T9467] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  162.153341][ T9467] ext4 filesystem being mounted at /32/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  163.246098][ T9501] ip6erspan0: entered promiscuous mode
[  163.330752][ T9502] tipc: Started in network mode
[  163.332911][ T9502] tipc: Node identity 03000000000000004879ffffffffffff, cluster identity 4711
[  164.025561][ T9057] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  164.802944][ T9545] loop2: detected capacity change from 0 to 32768
[  164.805513][ T9545] XFS: noikeep mount option is deprecated.
[  164.835923][ T9545] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  164.866042][ T9545] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  164.882153][ T9545] XFS (loop2): Starting recovery (logdev: internal)
[  164.900234][ T9545] XFS (loop2): Ending recovery (logdev: internal)
[  164.955844][ T5853] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  166.014719][ T9616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1318'.
[  166.023402][ T9616] bridge0: port 2(bridge_slave_1) entered disabled state
[  166.027186][ T9616] bridge0: port 1(bridge_slave_0) entered disabled state
[  166.069103][ T9618] loop4: detected capacity change from 0 to 164
[  166.085439][ T9618] Unable to read rock-ridge attributes
[  166.102689][ T9618] Unable to read rock-ridge attributes
[  166.149353][ T9624] netlink: 'syz.3.1322': attribute type 2 has an invalid length.
[  166.185024][ T9624] : entered promiscuous mode
[  166.192870][ T9623] loop2: detected capacity change from 0 to 4096
[  166.215030][ T9623] NILFS (loop2): invalid segment: Checksum error in segment payload
[  166.223698][ T9623] NILFS (loop2): trying rollback from an earlier position
[  166.247707][ T9623] NILFS (loop2): recovery complete
[  166.258423][ T9629] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  166.293899][ T9631] loop4: detected capacity change from 0 to 512
[  166.302573][ T9631] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  166.319825][ T9631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.325106][ T9631] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  166.367276][ T9631] EXT4-fs error (device loop4): ext4_xattr_block_list:762: inode #15: comm syz.4.1324: corrupted xattr block 19: overlapping e_value 
[  166.383908][ T9631] EXT4-fs (loop4): Remounting filesystem read-only
[  166.414256][ T9057] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.748009][ T5313] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  166.908030][ T5313] usb 5-1: Using ep0 maxpacket: 32
[  166.918859][ T5313] usb 5-1: config 252 has an invalid interface number: 91 but max is 0
[  166.922084][ T5313] usb 5-1: config 252 has no interface number 0
[  166.924320][ T5313] usb 5-1: config 252 interface 91 has no altsetting 0
[  166.933180][ T5313] usb 5-1: New USB device found, idVendor=07ca, idProduct=a309, bcdDevice=7f.92
[  166.936036][ T5313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  166.938916][ T5313] usb 5-1: Product: syz
[  166.940233][ T5313] usb 5-1: Manufacturer: syz
[  166.941770][ T5313] usb 5-1: SerialNumber: syz
[  167.163267][ T5313] usb 5-1: USB disconnect, device number 2
[  167.296095][ T9670] ip6tnl1: entered promiscuous mode
[  167.589787][ T9680] geneve2: entered promiscuous mode
[  167.799701][ T9690] loop4: detected capacity change from 0 to 256
[  167.806643][ T2320] lo speed is unknown, defaulting to 1000
[  167.892335][ T9695] loop4: detected capacity change from 0 to 512
[  167.895655][ T9695] EXT4-fs: Ignoring removed mblk_io_submit option
[  167.909530][ T9695] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  167.921100][ T9695] EXT4-fs (loop4): 1 truncate cleaned up
[  167.925439][ T9695] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.962959][ T9057] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.329662][   T24] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  168.604940][   T24] usb 5-1: config index 0 descriptor too short (expected 63524, got 36)
[  168.611417][   T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  168.619432][   T24] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  168.623214][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  168.626600][   T24] usb 5-1: Product: syz
[  168.629462][   T24] usb 5-1: Manufacturer: syz
[  168.631472][   T24] usb 5-1: SerialNumber: syz
[  168.635574][   T24] usb 5-1: config 0 descriptor??
[  168.643811][   T24] usb 5-1: 0:0 : invalid sync pipe. bmAttributes 00, bLength 9, bSynchAddress 00
[  169.138635][   T24] usb 5-1: USB disconnect, device number 3
[  169.186623][ T6111] udevd[6111]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  169.789189][ T9738] netlink: 'syz.4.1366': attribute type 4 has an invalid length.
[  170.268422][ T9772] xfrm0: entered promiscuous mode
[  170.270840][ T9772] xfrm0: entered allmulticast mode
[  170.482423][ T9790] loop2: detected capacity change from 0 to 2048
[  170.494059][ T9790] EXT4-fs error (device loop2): __ext4_fill_super:5500: inode #2: comm syz.2.1391: iget: bad extended attribute block 281474976710655
[  170.506355][ T9790] EXT4-fs (loop2): get root inode failed
[  170.510840][ T9790] EXT4-fs (loop2): mount failed
[  171.513491][ T9812] vivid-000: =================  START STATUS  =================
[  171.517671][ T9812] vivid-000: Test Pattern: 75% Colorbar
[  171.522717][ T9815] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1400'.
[  171.523561][ T9812] vivid-000: Fill Percentage of Frame: 100
[  171.531202][ T9812] vivid-000: Horizontal Movement: No Movement
[  171.533718][ T9812] vivid-000: Vertical Movement: No Movement
[  171.538978][ T9812] vivid-000: OSD Text Mode: All
[  171.540894][ T9812] vivid-000: Show Border: false
[  171.542827][ T9812] vivid-000: Show Square: false
[  171.544725][ T9812] vivid-000: Sensor Flipped Horizontally: false
[  171.547152][ T9812] vivid-000: Sensor Flipped Vertically: false
[  171.559428][ T9812] vivid-000: Insert SAV Code in Image: false
[  171.561863][ T9812] vivid-000: Insert EAV Code in Image: false
[  171.565086][ T9812] vivid-000: Insert Video Guard Band: false
[  171.568632][ T9812] vivid-000: Reduced Framerate: false
[  171.571057][ T9812] vivid-000: HDMI 000-0 Is Connected To: Test Pattern Generator
[  171.573909][ T9812] vivid-000: S-Video 000-0 Is Connected To: Test Pattern Generator
[  171.576776][ T9812] vivid-000: Enable Capture Cropping: true grabbed
[  171.582280][ T9812] vivid-000: Enable Capture Composing: true grabbed
[  171.585445][ T9812] vivid-000: Enable Capture Scaler: true grabbed
[  171.587649][ T9812] vivid-000: Timestamp Source: End of Frame
[  171.590451][ T9812] vivid-000: Colorspace: sRGB
[  171.592164][ T9812] vivid-000: Transfer Function: Default
[  171.594046][ T9812] vivid-000: Y'CbCr Encoding: Default
[  171.595926][ T9812] vivid-000: HSV Encoding: Hue 0-179
[  171.598156][ T9812] vivid-000: Quantization: Default
[  171.600075][ T9812] vivid-000: Apply Alpha To Red Only: false
[  171.602191][ T9812] vivid-000: Standard Aspect Ratio: 4x3
[  171.604146][ T9812] vivid-000: DV Timings Signal Mode: Current DV Timings inactive
[  171.607386][ T9812] vivid-000: DV Timings: 640x480p59 inactive
[  171.611160][ T9812] vivid-000: DV Timings Aspect Ratio: Source Width x Height
[  171.613703][ T9812] vivid-000: Maximum EDID Blocks: 2
[  171.615675][ T9812] vivid-000: Limited RGB Range (16-235): false
[  171.618469][ T9812] vivid-000: Rx RGB Quantization Range: Automatic
[  171.620881][ T9812] vivid-000: Power Present: 0x00000001
[  171.622899][ T9812] tpg source WxH: 320x240 (Y'CbCr)
[  171.624677][ T9812] tpg field: 1
[  171.626234][ T9812] tpg crop: (0,0)/320x240
[  171.629486][ T9812] tpg compose: (0,0)/320x240
[  171.631476][ T9812] tpg colorspace: 8
[  171.633188][ T9812] tpg transfer function: 0/2
[  171.635224][ T9812] tpg Y'CbCr encoding: 0/1
[  171.637315][ T9812] tpg quantization: 0/2
[  171.639468][ T9812] tpg RGB range: 0/2
[  171.641283][ T9812] vivid-000: ==================  END STATUS  ==================
[  171.711520][ T9806] Bluetooth: hci0: Opcode 0x0c20 failed: -4
[  172.262242][ T9838] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  172.285914][ T9840] loop2: detected capacity change from 0 to 128
[  172.289706][ T9840] EXT4-fs (loop2): Test dummy encryption mode enabled
[  172.323222][ T9840] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  172.329211][ T9840] ext4 filesystem being mounted at /408/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  172.376048][ T9840] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  172.444285][ T9840] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  172.490648][ T5853] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  172.726308][ T9853] infiniband syz1: set active
[  172.731195][ T9853] infiniband syz1: added veth0_vlan
[  172.759966][ T9853] RDS/IB: syz1: added
[  172.762352][ T9853] smc: adding ib device syz1 with port count 1
[  172.765171][ T9853] smc:    ib device syz1 port 1 has pnetid 
[  172.948421][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  172.950226][ T9870] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1421'.
[  173.222959][   T33] audit: type=1326 audit(2000000078.392:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9877 comm="syz.3.1425" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd066b8ebe9 code=0x0
[  173.240225][ T9880] loop4: detected capacity change from 0 to 1764
[  173.260299][ T9880] iso9660: Corrupted directory entry in block 2 of inode 1920
[  173.522047][ T9887] loop2: detected capacity change from 0 to 32768
[  173.536130][ T9887] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  173.577905][   T33] audit: type=1800 audit(2000000078.742:40): pid=9887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1430" name="file1" dev="loop2" ino=17059 res=0 errno=0
[  173.643364][ T5853] ocfs2: Unmounting device (7,2) on (node local)
[  173.730966][ T9902] loop2: detected capacity change from 0 to 1024
[  173.750173][ T9902] hfsplus: bad catalog entry type
[  173.776396][ T1089] hfsplus: b-tree write err: -5, ino 4
[  173.885151][ T9905] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  173.894807][ T9905] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  174.161942][ T9907] netlink: 'syz.3.1435': attribute type 12 has an invalid length.
[  174.276897][ T9911] netlink: 'syz.3.1437': attribute type 3 has an invalid length.
[  174.283579][ T9911] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1437'.
[  174.626944][ T9934] netlink: 'syz.3.1448': attribute type 40 has an invalid length.
[  174.708187][   T95] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  174.861144][   T95] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  174.866459][   T95] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  174.870935][   T95] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  174.876628][   T95] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  174.882499][   T95] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.116864][   T95] usb 5-1: config 0 descriptor??
[  175.387857][ T5313] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  175.529314][   T95] plantronics 0003:047F:FFFF.0004: reserved main item tag 0xd
[  175.538576][ T5313] usb 3-1: Using ep0 maxpacket: 8
[  175.541746][   T95] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  175.558699][ T5313] usb 3-1: unable to get BOS descriptor or descriptor too short
[  175.562374][ T5313] usb 3-1: unable to read config index 0 descriptor/start: -71
[  175.566433][ T5313] usb 3-1: can't read configurations, error -71
[  175.657565][ T9950] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1455'.
[  175.810762][   T95] usb 5-1: USB disconnect, device number 4
[  176.381762][ T9969] tmpfs: Bad value for 'mpol'
[  176.460881][ T9972] netlink: 'syz.4.1464': attribute type 20 has an invalid length.
[  176.531858][ T9972] dvmrp1: entered allmulticast mode
[  176.539714][ T9972] dvmrp1: left allmulticast mode
[  176.624689][ T9977] loop2: detected capacity change from 0 to 512
[  176.635542][ T9977] EXT4-fs: Ignoring removed bh option
[  176.671657][ T9977] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  176.830715][ T9977] EXT4-fs (loop2): 1 truncate cleaned up
[  176.833602][ T9977] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.605836][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  177.766169][ T9989] dvmrp5: entered allmulticast mode
[  177.777086][ T9989] pimreg: entered allmulticast mode
[  178.308291][ T9999] loop2: detected capacity change from 0 to 4096
[  178.321945][ T9999] ntfs3(loop2): ino=1a, mi_enum_attr
[  178.323937][ T9999] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  178.464494][   T55] Bluetooth: hci2: ISO packet for unknown connection handle 0
[  178.566055][T10011] loop2: detected capacity change from 0 to 512
[  178.574702][T10011] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.616856][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.831877][T10026] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1487'.
[  178.841865][T10026] geneve2: entered promiscuous mode
[  178.844279][T10026] geneve2: entered allmulticast mode
[  178.904804][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1489'.
[  178.912419][T10031] loop2: detected capacity change from 0 to 512
[  178.934443][T10031] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  178.961270][T10031] EXT4-fs (loop2): 1 truncate cleaned up
[  178.964647][T10031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  179.001804][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  180.138008][ T5313] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  180.310931][ T5313] usb 5-1: unable to get BOS descriptor or descriptor too short
[  180.320568][ T5313] usb 5-1: not running at top speed; connect to a high speed hub
[  180.329534][ T5313] usb 5-1: config 1 has an invalid interface number: 4 but max is 0
[  180.338342][ T5313] usb 5-1: config 1 has no interface number 0
[  180.346365][ T5313] usb 5-1: config 1 interface 4 has no altsetting 0
[  180.355341][ T5313] usb 5-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=1a.d0
[  180.360385][ T5313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  180.368199][ T5313] usb 5-1: Product: syz
[  180.371156][ T5313] usb 5-1: Manufacturer: syz
[  180.375442][ T5313] usb 5-1: SerialNumber: syz
[  180.602566][ T5313] qmi_wwan 5-1:1.4: probe with driver qmi_wwan failed with error -22
[  180.624106][ T5313] usb 5-1: USB disconnect, device number 5
[  180.629427][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  180.960745][T10056] loop2: detected capacity change from 0 to 512
[  180.972424][T10056] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  180.990414][T10056] EXT4-fs (loop2): 1 truncate cleaned up
[  180.992929][T10056] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  181.016550][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.209449][T10070] loop4: detected capacity change from 0 to 128
[  181.216621][T10070] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  181.221033][T10070] ext4 filesystem being mounted at /85/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  181.254191][T10070] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12
[  181.336345][ T9057] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  181.369463][T10066] could not allocate digest TFM handle cryptd(blake2b-160)
[  181.602980][T10089] loop4: detected capacity change from 0 to 40427
[  181.614301][T10089] F2FS-fs (loop4): invalid crc value
[  181.664066][T10089] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  181.668779][T10089] F2FS-fs (loop4): Start checkpoint disabled!
[  181.678356][T10089] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  182.616403][T10102] loop2: detected capacity change from 0 to 512
[  182.619371][T10102] EXT4-fs: journaled quota format not specified
[  182.862852][T10120] loop2: detected capacity change from 0 to 2048
[  182.865661][T10120] udf: Unknown parameter 'GzubAZWσ'
[  183.292612][ T2320] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  183.449610][ T2320] usb 5-1: Using ep0 maxpacket: 16
[  183.457041][ T2320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  183.468730][ T2320] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  183.472577][ T2320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.492863][ T2320] usb 5-1: config 0 descriptor??
[  183.522877][   T33] audit: type=1326 audit(2000000088.692:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10139 comm="syz.3.1531" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd066b8ebe9 code=0x7ffc0000
[  183.546312][   T33] audit: type=1326 audit(2000000088.702:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10139 comm="syz.3.1531" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd066b8ebe9 code=0x7ffc0000
[  183.566348][   T33] audit: type=1326 audit(2000000088.702:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10139 comm="syz.3.1531" exe="/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7fd066b8ebe9 code=0x7ffc0000
[  183.575727][   T33] audit: type=1326 audit(2000000088.702:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10139 comm="syz.3.1531" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd066b8ebe9 code=0x7ffc0000
[  183.604318][   T33] audit: type=1326 audit(2000000088.702:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10139 comm="syz.3.1531" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd066b8ebe9 code=0x7ffc0000
[  183.616807][   T33] audit: type=1326 audit(2000000088.702:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10139 comm="syz.3.1531" exe="/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fd066b8ebe9 code=0x7ffc0000
[  183.638305][   T33] audit: type=1326 audit(2000000088.702:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10139 comm="syz.3.1531" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd066b8ebe9 code=0x7ffc0000
[  183.649777][   T33] audit: type=1326 audit(2000000088.702:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10139 comm="syz.3.1531" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd066b8ebe9 code=0x7ffc0000
[  183.934886][ T2320] mcp2221 0003:04D8:00DD.0005: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0
[  184.336915][ T2320] usb 5-1: USB disconnect, device number 6
[  186.134992][T10203] loop4: detected capacity change from 0 to 32768
[  186.145087][T10203] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1558 (10203)
[  186.180881][T10203] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  186.189810][T10203] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  186.193749][T10203] BTRFS info (device loop4): using free-space-tree
[  186.603144][   T33] audit: type=1800 audit(2000000091.772:49): pid=10203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1558" name="file1" dev="loop4" ino=260 res=0 errno=0
[  186.621496][ T9057] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  187.326387][T10227] loop2: detected capacity change from 0 to 32768
[  187.329994][T10227] XFS: ikeep mount option is deprecated.
[  187.339361][T10227] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  187.373964][T10227] XFS (loop2): Ending clean mount
[  187.378532][T10227] XFS (loop2): Quotacheck needed: Please wait.
[  187.413952][T10227] XFS (loop2): Quotacheck: Done.
[  187.450634][ T5853] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  187.847870][ T5313] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  188.055739][T10263] loop2: detected capacity change from 0 to 736
[  188.348634][ T5313] usb 5-1: Using ep0 maxpacket: 16
[  188.354643][ T5313] usb 5-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  188.359710][ T5313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.363038][ T5313] usb 5-1: Product: syz
[  188.365624][ T5313] usb 5-1: Manufacturer: syz
[  188.368079][ T5313] usb 5-1: SerialNumber: syz
[  188.376684][ T5313] usb 5-1: config 0 descriptor??
[  188.383647][ T5313] ftdi_sio 5-1:0.0: FTDI USB Serial Device converter detected
[  188.389115][ T5313] usb 5-1: Detected FT232H
[  188.586898][ T5313] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[  188.931341][   T33] audit: type=1326 audit(2000000094.072:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.2.1574" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44afb8ebe9 code=0x7ffc0000
[  188.994315][   T33] audit: type=1326 audit(2000000094.072:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.2.1574" exe="/syz-executor" sig=0 arch=c000003e syscall=106 compat=0 ip=0x7f44afb8ebe9 code=0x7ffc0000
[  189.007887][   T33] audit: type=1326 audit(2000000094.072:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.2.1574" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44afb8ebe9 code=0x7ffc0000
[  189.015775][ T5313] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  189.018208][   T33] audit: type=1326 audit(2000000094.072:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.2.1574" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f44afb8ebe9 code=0x7ffc0000
[  189.025764][   T33] audit: type=1326 audit(2000000094.082:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.2.1574" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44afb8ebe9 code=0x7ffc0000
[  189.041115][   T33] audit: type=1326 audit(2000000094.082:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.2.1574" exe="/syz-executor" sig=0 arch=c000003e syscall=250 compat=0 ip=0x7f44afb8ebe9 code=0x7ffc0000
[  189.055123][   T33] audit: type=1326 audit(2000000094.082:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.2.1574" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44afb8ebe9 code=0x7ffc0000
[  189.066244][   T33] audit: type=1326 audit(2000000094.082:57): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.2.1574" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f44afb8ebe9 code=0x7ffc0000
[  189.076530][   T33] audit: type=1326 audit(2000000094.082:58): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.2.1574" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44afb8ebe9 code=0x7ffc0000
[  189.086974][   T33] audit: type=1326 audit(2000000094.082:59): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10270 comm="syz.2.1574" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f44afb8d550 code=0x7ffc0000
[  189.214279][   T95] usb 5-1: USB disconnect, device number 7
[  189.221563][   T95] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  189.225197][   T95] ftdi_sio 5-1:0.0: device disconnected
[  189.288107][   T10] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  189.490583][   T10] usb 3-1: Using ep0 maxpacket: 32
[  189.525338][   T10] usb 3-1: config 0 has an invalid interface number: 155 but max is 0
[  189.534262][   T10] usb 3-1: config 0 has no interface number 0
[  189.556162][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=0274, bcdDevice=a7.4c
[  189.560646][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.563972][   T10] usb 3-1: Product: syz
[  189.565722][   T10] usb 3-1: Manufacturer: syz
[  189.567708][   T10] usb 3-1: SerialNumber: syz
[  189.576368][   T10] usb 3-1: config 0 descriptor??
[  191.234397][T10315] loop4: detected capacity change from 0 to 2048
[  191.256380][T10315] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  191.749042][   T10] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.155/input/input10
[  191.760383][   T10] usb 3-1: USB disconnect, device number 20
[  192.256235][T10336] loop2: detected capacity change from 0 to 4096
[  192.267063][T10336] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  192.321419][T10336] ntfs3(loop2): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  192.336258][T10336] ntfs3(loop2): ino=1e, "file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" ni_find_attr
[  192.663058][T10359] netlink: 27 bytes leftover after parsing attributes in process `syz.2.1610'.
[  193.870290][T10381] loop4: detected capacity change from 0 to 32768
[  193.883945][T10381] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  193.895858][T10381] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  193.911227][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  193.913713][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  193.986905][ T9057] ocfs2: Unmounting device (7,4) on (node local)
[  194.437945][   T24] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  194.589560][   T24] usb 3-1: config 0 has an invalid interface number: 69 but max is 0
[  194.592894][   T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  194.597306][   T24] usb 3-1: config 0 has no interface number 0
[  194.602074][   T24] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 255
[  194.606287][   T24] usb 3-1: config 0 interface 69 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  194.615975][   T24] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[  194.621614][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  194.624913][   T24] usb 3-1: Product: syz
[  194.626531][   T24] usb 3-1: Manufacturer: syz
[  194.629098][ T5909] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  194.632466][   T24] usb 3-1: SerialNumber: syz
[  194.641713][   T24] usb 3-1: config 0 descriptor??
[  194.648628][T10398] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  194.654157][   T24] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[  194.667748][   T24] cyberjack ttyUSB0: usb_submit_urb(read int) failed
[  194.671908][   T24] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[  194.863488][ T5313] usb 3-1: USB disconnect, device number 21
[  194.877007][ T5313] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[  194.889559][ T5313] cyberjack 3-1:0.69: device disconnected
[  195.557919][ T5909] usb 5-1: Using ep0 maxpacket: 16
[  195.561498][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 92, changing to 10
[  195.565875][ T5909] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 17487, setting to 1024
[  195.571511][ T5909] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  195.575990][ T5909] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  195.579206][ T5909] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  195.584767][ T5909] usb 5-1: config 0 descriptor??
[  195.587355][T10412] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  196.374018][ T5909] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input11
[  196.470625][T10436] openvswitch: netlink: IP tunnel dst address not specified
[  196.569728][ T5313] usb 5-1: USB disconnect, device number 8
[  198.072032][T10505] loop4: detected capacity change from 0 to 8
[  198.076939][T10505] SQUASHFS error: lzo decompression failed, data probably corrupt
[  198.082203][T10505] SQUASHFS error: Failed to read block 0x91: -5
[  198.084796][T10505] SQUASHFS error: Unable to read metadata cache entry [8f]
[  198.089125][T10505] SQUASHFS error: Unable to read inode 0x11f
[  198.165615][T10509] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1679'.
[  198.286114][T10513] netlink: 'syz.4.1681': attribute type 10 has an invalid length.
[  198.305244][T10513] team0: Port device geneve1 added
[  198.308129][   T55] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  198.752196][T10529] loop4: detected capacity change from 0 to 32768
[  198.794646][T10529] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  198.828921][T10529] XFS (loop4): Ending clean mount
[  198.848607][T10529] XFS (loop4): Quotacheck needed: Please wait.
[  198.863364][T10534] loop2: detected capacity change from 0 to 32768
[  198.900046][T10534] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  198.915477][T10529] XFS (loop4): Quotacheck: Done.
[  198.954585][ T9057] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  199.064828][ T5853] ocfs2: Unmounting device (7,2) on (node local)
[  199.436782][T10546] loop4: detected capacity change from 0 to 32768
[  199.510188][T10550] loop2: detected capacity change from 0 to 32768
[  199.514353][T10550] XFS: ikeep mount option is deprecated.
[  199.516745][T10550] XFS: ikeep mount option is deprecated.
[  199.607715][T10550] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  199.626860][T10550] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  199.641599][T10546] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  199.641615][T10546]   allowing incompatible features above 0.0: (unknown version)
[  199.641622][T10546]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  199.667219][T10550] XFS (loop2): Ending clean mount
[  199.680278][T10550] XFS (loop2): Quotacheck needed: Please wait.
[  199.706011][T10546] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  199.709727][T10546] bcachefs (loop4): initializing new filesystem
[  199.713919][T10550] XFS (loop2): Quotacheck: Done.
[  199.723155][T10546] bcachefs (loop4): going read-write
[  199.730261][T10574] IPVS: wlc: UDP 224.0.0.2:0 - no destination available
[  199.744161][ T5853] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  199.752796][T10546] bcachefs (loop4): marking superblocks
[  199.839046][T10546] bcachefs (loop4): initializing freespace
[  199.854322][T10546] bcachefs (loop4): done initializing freespace
[  199.895975][T10546] bcachefs (loop4): reading snapshots table
[  199.900973][T10546] bcachefs (loop4): reading snapshots done
[  199.960142][T10546] bcachefs (loop4): done starting filesystem
[  200.035874][T10546] syz.4.1690 (10546) used greatest stack depth: 16056 bytes left
[  200.050372][ T9057] bcachefs (loop4): shutting down
[  200.052861][ T9057] bcachefs (loop4): going read-only
[  200.056744][ T9057] bcachefs (loop4): finished waiting for writes to stop
[  200.065158][ T9057] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[  200.129983][ T9057] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  200.136513][ T9057] bcachefs (loop4): clean shutdown complete, journal seq 4
[  200.140593][ T9057] bcachefs (loop4): marking filesystem clean
[  200.166938][ T9057] bcachefs (loop4): shutdown complete
[  200.255241][T10586] loop2: detected capacity change from 0 to 32768
[  200.260926][T10586] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1697 (10586)
[  200.287689][T10586] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  200.292842][T10586] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  200.296351][T10586] BTRFS info (device loop2): using free-space-tree
[  200.323072][T10586] BTRFS info (device loop2): rebuilding free space tree
[  200.397099][ T5853] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  200.711789][T10617] smc: net device bond0 applied user defined pnetid SYZ2
[  200.715224][T10617] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1706'.
[  200.846014][T10617] smc: removing net device bond0 with user defined pnetid SYZ2
[  200.852057][T10617] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  200.860604][T10617] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  200.866582][T10617] bond0 (unregistering): Released all slaves
[  200.882854][T10622] lo: entered allmulticast mode
[  200.887353][T10620] lo: left allmulticast mode
[  203.153200][T10658] loop2: detected capacity change from 0 to 32768
[  203.162194][T10658] 
[  203.162194][T10658]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.162194][T10658] 
[  203.175196][T10658] 
[  203.175196][T10658]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.175196][T10658] 
[  203.190952][ T5853] 
[  203.190952][ T5853]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.190952][ T5853] 
[  203.196201][ T5853] 
[  203.196201][ T5853]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  203.196201][ T5853] 
[  203.277461][T10668] dummy0: entered promiscuous mode
[  203.284008][T10668] dummy0: left promiscuous mode
[  203.619553][T10685] loop2: detected capacity change from 0 to 128
[  203.626618][T10685] adfs: Bad value for 'uid'
[  203.628849][T10685] adfs: Bad value for 'uid'
[  204.051198][T10681] loop2: detected capacity change from 0 to 1024
[  204.285086][   T53] hfsplus: b-tree write err: -5, ino 4
[  204.340196][T10697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1736'.
[  204.491831][T10713] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1742'.
[  204.710491][T10733] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1753'.
[  204.772806][T10735] loop2: detected capacity change from 0 to 1024
[  204.784143][T10735] EXT4-fs: Ignoring removed orlov option
[  204.787475][T10735] EXT4-fs: Ignoring removed nomblk_io_submit option
[  204.908033][T10735] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  204.996538][   T33] kauditd_printk_skb: 31 callbacks suppressed
[  204.996548][   T33] audit: type=1800 audit(2000000110.162:91): pid=10735 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1754" name="file1" dev="overlay" ino=15 res=0 errno=0
[  205.022633][T10735] evm: overlay not supported
[  205.749684][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.761846][T10751] loop4: detected capacity change from 0 to 128
[  206.644085][T10810] loop4: detected capacity change from 0 to 16
[  206.660230][T10810] erofs (device loop4): mounted with root inode @ nid 36.
[  206.853783][T10814] loop4: detected capacity change from 0 to 32768
[  207.045982][T10818] loop4: detected capacity change from 0 to 4096
[  207.256332][T10826] sctp: [Deprecated]: syz.4.1793 (pid 10826) Use of struct sctp_assoc_value in delayed_ack socket option.
[  207.256332][T10826] Use struct sctp_sack_info instead
[  207.426562][T10832] loop4: detected capacity change from 0 to 512
[  207.429657][T10832] EXT4-fs: Ignoring removed nomblk_io_submit option
[  207.432113][T10832] EXT4-fs: Ignoring removed bh option
[  207.451994][T10832] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 11: block 64:freeing already freed block (bit 63); block bitmap corrupt.
[  207.463214][T10832] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.1796: corrupted inode contents
[  207.472157][T10832] EXT4-fs error (device loop4): ext4_dirty_inode:6538: inode #11: comm syz.4.1796: mark_inode_dirty error
[  207.478379][T10832] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1796: invalid indirect mapped block 1 (level 1)
[  207.484443][T10832] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.1796: corrupted inode contents
[  207.499368][T10832] EXT4-fs error (device loop4) in ext4_orphan_del:305: Corrupt filesystem
[  207.503058][T10832] EXT4-fs error (device loop4): ext4_do_update_inode:5653: inode #11: comm syz.4.1796: corrupted inode contents
[  207.509055][T10832] EXT4-fs error (device loop4): ext4_truncate:4666: inode #11: comm syz.4.1796: mark_inode_dirty error
[  207.520187][T10832] EXT4-fs error (device loop4) in ext4_process_orphan:347: Corrupt filesystem
[  207.523327][T10832] EXT4-fs (loop4): 1 truncate cleaned up
[  207.529614][T10832] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  207.805919][T10844] EXT4-fs error (device loop4): ext4_readdir:264: inode #2: block 13: comm syz.4.1796: path /147/file0: bad entry in directory: directory entry too close to block end - offset=76, inode=16, rec_len=940, size=1024 fake=0
[  208.260079][ T9057] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.333359][T10877] loop4: detected capacity change from 0 to 4096
[  208.349380][T10877] ntfs3(loop4): Failed to initialize $Extend/$ObjId.
[  208.477889][ T5892] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  208.632055][ T5892] usb 3-1: config 0 has an invalid interface number: 1 but max is 0
[  208.634813][ T5892] usb 3-1: config 0 has no interface number 0
[  208.637384][ T5892] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  208.651023][ T5892] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  208.654184][ T5892] usb 3-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  208.659841][ T5892] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  208.663044][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  208.670143][ T5892] usb 3-1: config 0 descriptor??
[  208.692773][T10900] loop4: detected capacity change from 0 to 32768
[  208.695716][T10900] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1825 (10900)
[  208.719653][T10900] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  208.726600][T10900] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  208.736749][T10900] BTRFS info (device loop4): using free-space-tree
[  208.809664][ T9057] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  209.032499][T10926] random: crng reseeded on system resumption
[  209.075763][ T5892] hid (null): report_id 35660 is invalid
[  209.978552][ T5892] input: HID 28bd:0042 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.1/0003:28BD:0042.0006/input/input14
[  210.252472][ T5892] uclogic 0003:28BD:0042.0006: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.2-1/input1
[  210.257935][ T5892] usb 3-1: USB disconnect, device number 22
[  210.483860][T10951] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1841'.
[  211.050276][T10963] loop2: detected capacity change from 0 to 32768
[  211.107396][T10963] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  211.107416][T10963]   allowing incompatible features above 0.0: (unknown version)
[  211.107420][T10963]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  211.124818][T10963] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  211.143416][T10963] bcachefs (loop2): initializing new filesystem
[  211.165163][T10963] bcachefs (loop2): going read-write
[  211.171178][T10963] bcachefs (loop2): marking superblocks
[  211.190475][T10963] bcachefs (loop2): initializing freespace
[  211.200038][T10963] bcachefs (loop2): done initializing freespace
[  211.216312][T10963] bcachefs (loop2): reading snapshots table
[  211.223915][T10963] bcachefs (loop2): reading snapshots done
[  211.253028][T10963] bcachefs (loop2): done starting filesystem
[  211.369229][ T5853] bcachefs (loop2): shutting down
[  211.370916][ T5853] bcachefs (loop2): going read-only
[  211.372592][ T5853] bcachefs (loop2): finished waiting for writes to stop
[  211.375558][ T5853] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  211.404531][ T5853] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[  211.411545][ T5853] bcachefs (loop2): clean shutdown complete, journal seq 5
[  211.414273][ T5853] bcachefs (loop2): marking filesystem clean
[  211.433869][ T5853] bcachefs (loop2): shutdown complete
[  211.487985][   T33] audit: type=1800 audit(2000000116.652:92): pid=10987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1853" name="nullb0" dev="tmpfs" ino=1756 res=0 errno=0
[  211.634550][T10994] 9pnet_virtio: no channels available for device syz
[  212.527966][ T5892] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[  212.780730][ T5892] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[  212.784784][ T5892] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  212.801186][ T5892] usb 5-1: config 0 descriptor??
[  213.462461][T11025] loop2: detected capacity change from 0 to 512
[  213.470203][T11025] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters
[  213.477766][T11025] EXT4-fs (loop2): Remounting filesystem read-only
[  213.485483][T11025] EXT4-fs (loop2): 1 truncate cleaned up
[  213.490759][T11025] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  213.503473][T11025] EXT4-fs (loop2): shut down requested (2)
[  213.530103][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  213.686144][T11031] loop2: detected capacity change from 0 to 4096
[  213.692363][T11031] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  213.709509][T11031] ntfs3(loop2): $Volume is corrupted.
[  213.820638][ T5892] usb 5-1: Cannot set autoneg
[  213.824022][ T5892] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[  213.831348][ T5892] usb 5-1: USB disconnect, device number 9
[  214.511462][T11051] netlink: 'syz.4.1878': attribute type 5 has an invalid length.
[  215.352564][T11082] loop2: detected capacity change from 0 to 32768
[  215.356713][T11082] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.1890 (11082)
[  215.727062][T11092] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.1895'.
[  215.967912][T11082] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  215.985775][T11082] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  215.994238][T11082] BTRFS info (device loop2): disk space caching is enabled
[  216.007078][T11082] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  216.097974][   T55] Bluetooth: hci0: link tx timeout
[  216.100469][   T55] Bluetooth: hci0: killing stalled connection 10:aa:aa:aa:aa:aa
[  216.219644][T11082] BTRFS info (device loop2): rebuilding free space tree
[  216.226883][T11082] BTRFS info (device loop2): disabling free space tree
[  216.234547][T11082] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  216.239387][T11082] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  216.250662][T11116] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1897'.
[  216.267126][ T5853] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  216.637288][T11141] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1908'.
[  216.757974][ T2320] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[  216.907885][ T2320] usb 3-1: Using ep0 maxpacket: 32
[  216.914870][ T2320] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice=67.fe
[  216.919435][ T2320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  216.922997][ T2320] usb 3-1: Product: syz
[  216.924928][ T2320] usb 3-1: Manufacturer: syz
[  216.926941][ T2320] usb 3-1: SerialNumber: syz
[  216.931660][ T2320] usb 3-1: config 0 descriptor??
[  217.142028][ T2320] snd-usb-6fire 3-1:0.0: unknown device firmware state received from device:
[  217.145824][ T2320] eb 9a 47 80 9b f8 7a f0 
[  217.147731][ T2320] snd-usb-6fire 3-1:0.0: probe with driver snd-usb-6fire failed with error -5
[  217.227335][T11148] overlayfs: failed to clone upperpath
[  217.354879][ T2320] usb 3-1: USB disconnect, device number 23
[  217.445461][T11146] loop4: detected capacity change from 0 to 32768
[  217.461859][T11146] ERROR: (device loop4): dbAlloc: the hint is outside the map
[  217.461859][T11146] 
[  217.478217][T11146] ERROR: (device loop4): remounting filesystem as read-only
[  218.229249][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  218.281272][T11172] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1921'.
[  218.300067][T11172] smc: adding net device bond0 with user defined pnetid SYZ2
[  218.329046][T11172] bond0: (slave geneve2): Enslaving as an active interface with an up link
[  218.332213][   T12] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0
[  218.335456][   T12] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0
[  218.345706][   T12] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0
[  218.351568][   T12] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0
[  218.354791][T11172] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1921'.
[  218.360410][T11172] 8021q: adding VLAN 0 to HW filter on device bond0
[  218.513253][T11181] wg1: entered promiscuous mode
[  218.523275][T11181] wg1: entered allmulticast mode
[  218.660345][T11200] loop4: detected capacity change from 0 to 4096
[  218.829147][T11214] loop4: detected capacity change from 0 to 64
[  220.459631][ T2320] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  220.471063][T11245] loop4: detected capacity change from 0 to 32768
[  220.495215][T11245] (syz.4.1944,11245,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  220.514987][T11245] (syz.4.1944,11245,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  220.541986][T11245] JBD2: Ignoring recovery information on journal
[  220.587748][T11245] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  220.629122][ T2320] usb 3-1: Using ep0 maxpacket: 16
[  220.635435][ T2320] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  220.639502][ T2320] usb 3-1: config 0 has no interfaces?
[  220.641770][ T2320] usb 3-1: New USB device found, idVendor=0458, idProduct=0153, bcdDevice= 0.00
[  220.645284][ T2320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  220.658375][ T2320] usb 3-1: config 0 descriptor??
[  220.727207][ T9057] ocfs2: Unmounting device (7,4) on (node local)
[  221.412785][ T2320] usb 3-1: USB disconnect, device number 24
[  221.493449][T11281] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  221.788904][T11287] loop2: detected capacity change from 0 to 32768
[  221.817534][T11287] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  221.843440][T11297] loop4: detected capacity change from 0 to 8
[  221.854322][T11287] XFS (loop2): Ending clean mount
[  221.864164][T11287] XFS (loop2): Quotacheck needed: Please wait.
[  221.897769][T11287] XFS (loop2): Quotacheck: Done.
[  221.976304][ T5853] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  222.389279][T11312] loop4: detected capacity change from 0 to 40427
[  222.398203][T11312] F2FS-fs (loop4): invalid crc value
[  222.427731][T11312] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  222.432019][T11312] F2FS-fs (loop4): Start checkpoint disabled!
[  222.443199][T11312] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  222.528322][   T10] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  222.554138][T11315] syz.4.1960: attempt to access beyond end of device
[  222.554138][T11315] loop4: rw=2049, sector=77824, nr_sectors = 3048 limit=40427
[  222.570267][T11315] syz.4.1960: attempt to access beyond end of device
[  222.570267][T11315] loop4: rw=2049, sector=80872, nr_sectors = 1048 limit=40427
[  222.591094][T11315] syz.4.1960: attempt to access beyond end of device
[  222.591094][T11315] loop4: rw=2049, sector=49152, nr_sectors = 2416 limit=40427
[  222.598377][T11315] syz.4.1960: attempt to access beyond end of device
[  222.598377][T11315] loop4: rw=2049, sector=51568, nr_sectors = 536 limit=40427
[  222.744598][ T1089] kworker/u10:4: attempt to access beyond end of device
[  222.744598][ T1089] loop4: rw=1, sector=52104, nr_sectors = 1144 limit=40427
[  222.768813][ T1089] kworker/u10:4: attempt to access beyond end of device
[  222.768813][ T1089] loop4: rw=1, sector=57344, nr_sectors = 3368 limit=40427
[  222.777942][   T10] usb 3-1: Using ep0 maxpacket: 32
[  222.781437][ T1089] kworker/u10:4: attempt to access beyond end of device
[  222.781437][ T1089] loop4: rw=1, sector=60712, nr_sectors = 2048 limit=40427
[  222.787562][   T10] usb 3-1: config 0 has an invalid interface number: 196 but max is 0
[  222.790851][   T10] usb 3-1: config 0 has no interface number 0
[  222.793062][   T10] usb 3-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  222.795044][ T1089] kworker/u10:4: attempt to access beyond end of device
[  222.795044][ T1089] loop4: rw=1, sector=62760, nr_sectors = 3512 limit=40427
[  222.797015][   T10] usb 3-1: config 0 interface 196 has no altsetting 0
[  222.809993][   T10] usb 3-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a
[  222.813983][   T10] usb 3-1: New USB device strings: Mfr=1, Product=226, SerialNumber=3
[  222.815060][ T1089] kworker/u10:4: attempt to access beyond end of device
[  222.815060][ T1089] loop4: rw=1, sector=66272, nr_sectors = 3360 limit=40427
[  222.817631][   T10] usb 3-1: Product: syz
[  222.825358][   T10] usb 3-1: Manufacturer: syz
[  222.827442][   T10] usb 3-1: SerialNumber: syz
[  222.833732][ T1089] kworker/u10:4: attempt to access beyond end of device
[  222.833732][ T1089] loop4: rw=1, sector=69632, nr_sectors = 8 limit=40427
[  222.834321][   T10] usb 3-1: config 0 descriptor??
[  222.842338][T11310] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  223.074049][ T1089] CPU: 1 UID: 0 PID: 1089 Comm: kworker/u10:4 Not tainted syzkaller #0 PREEMPT(full) 
[  223.074067][ T1089] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  223.074076][ T1089] Workqueue: writeback wb_workfn (flush-7:4)
[  223.074094][ T1089] Call Trace:
[  223.074099][ T1089]  <TASK>
[  223.074104][ T1089]  dump_stack_lvl+0x189/0x250
[  223.074124][ T1089]  ? __pfx_dump_stack_lvl+0x10/0x10
[  223.074135][ T1089]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  223.074151][ T1089]  ? __pfx_queue_work_on+0x10/0x10
[  223.074164][ T1089]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  223.074178][ T1089]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  223.074193][ T1089]  ? f2fs_hw_is_readonly+0x39b/0x470
[  223.074213][ T1089]  f2fs_handle_critical_error+0x37c/0x540
[  223.074233][ T1089]  f2fs_write_end_io+0x886/0xb60
[  223.074257][ T1089]  __submit_merged_bio+0x27a/0x6a0
[  223.074273][ T1089]  ? _raw_spin_unlock+0x28/0x50
[  223.074290][ T1089]  f2fs_submit_page_write+0x208c/0x21b0
[  223.074320][ T1089]  ? __f2fs_is_valid_blkaddr+0xd2a/0x14f0
[  223.074342][ T1089]  do_write_page+0x6a6/0x940
[  223.074361][ T1089]  f2fs_outplace_write_data+0x11a/0x220
[  223.074378][ T1089]  f2fs_do_write_data_page+0x113e/0x1650
[  223.074404][ T1089]  ? __pfx_f2fs_do_write_data_page+0x10/0x10
[  223.074418][ T1089]  ? css_rstat_updated+0x23a/0x4f0
[  223.074445][ T1089]  f2fs_write_single_data_page+0xa68/0x16a0
[  223.074474][ T1089]  ? __pfx_f2fs_write_single_data_page+0x10/0x10
[  223.074501][ T1089]  ? mlock_drain_local+0x79/0x490
[  223.074514][ T1089]  ? mlock_drain_local+0x28e/0x490
[  223.074528][ T1089]  f2fs_write_data_pages+0x195b/0x3000
[  223.074594][ T1089]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  223.074671][ T1089]  ? f2fs_write_meta_pages+0x357/0x450
[  223.074695][ T1089]  ? __lock_acquire+0xab9/0xd20
[  223.074714][ T1089]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  223.074732][ T1089]  do_writepages+0x32e/0x550
[  223.074751][ T1089]  ? reacquire_held_locks+0x127/0x1d0
[  223.074762][ T1089]  ? writeback_sb_inodes+0x384/0x1010
[  223.074781][ T1089]  __writeback_single_inode+0x145/0xff0
[  223.074797][ T1089]  ? do_raw_spin_unlock+0x4d/0x240
[  223.074812][ T1089]  writeback_sb_inodes+0x6c7/0x1010
[  223.074854][ T1089]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  223.074900][ T1089]  ? rcu_is_watching+0x15/0xb0
[  223.074920][ T1089]  wb_writeback+0x43b/0xaf0
[  223.074941][ T1089]  ? queue_io+0x391/0x590
[  223.074959][ T1089]  ? __pfx_wb_writeback+0x10/0x10
[  223.074979][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[  223.074997][ T1089]  wb_workfn+0x409/0xef0
[  223.075021][ T1089]  ? __pfx_wb_workfn+0x10/0x10
[  223.075037][ T1089]  ? __lock_acquire+0xab9/0xd20
[  223.075061][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[  223.075076][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[  223.075090][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[  223.075099][ T1089]  ? process_scheduled_works+0x9ef/0x17b0
[  223.075111][ T1089]  process_scheduled_works+0xae1/0x17b0
[  223.075145][ T1089]  ? __pfx_process_scheduled_works+0x10/0x10
[  223.075171][ T1089]  worker_thread+0x8a0/0xda0
[  223.075203][ T1089]  kthread+0x711/0x8a0
[  223.075221][ T1089]  ? __pfx_worker_thread+0x10/0x10
[  223.075233][ T1089]  ? __pfx_kthread+0x10/0x10
[  223.075246][ T1089]  ? _raw_spin_unlock_irq+0x23/0x50
[  223.075261][ T1089]  ? lockdep_hardirqs_on+0x9c/0x150
[  223.075273][ T1089]  ? __pfx_kthread+0x10/0x10
[  223.075288][ T1089]  ret_from_fork+0x3fc/0x770
[  223.075302][ T1089]  ? __pfx_ret_from_fork+0x10/0x10
[  223.075319][ T1089]  ? __switch_to_asm+0x39/0x70
[  223.075331][ T1089]  ? __switch_to_asm+0x33/0x70
[  223.075345][ T1089]  ? __pfx_kthread+0x10/0x10
[  223.075358][ T1089]  ret_from_fork_asm+0x1a/0x30
[  223.075386][ T1089]  </TASK>
[  223.075391][ T1089] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  223.466994][   T10] ipheth 3-1:0.196: ipheth_enable_ncm: usb_control_msg: 0
[  223.500490][   T10] ipheth 3-1:0.196: Apple iPhone USB Ethernet device attached
[  223.586095][T11333] netlink: 'syz.4.1968': attribute type 17 has an invalid length.
[  223.714030][ T5909] usb 3-1: USB disconnect, device number 25
[  223.790842][ T5909] ipheth 3-1:0.196: Apple iPhone USB Ethernet now disconnected
[  224.547078][T11388] loop2: detected capacity change from 0 to 1764
[  224.558331][T11368] loop4: detected capacity change from 0 to 32768
[  224.566376][T11368] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section members_v2: section too small (1104 > 152)
[  224.566376][T11368] members_v2 (size 152):
[  224.566376][T11368] nr_devices mismatch: have 1 entries, should be 8Device:0
[  224.566376][T11368]   Label:                       (none)
[  224.566376][T11368]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[  224.566376][T11368]   Size:                        16777216
[  224.566376][T11368]   read errors:                 0
[  224.566376][T11368]   write errors:                0
[  224.566376][T11368]   checksum errors:             0
[  224.566376][T11368]   seqread iops:                0
[  224.566376][T11368]   seqwrite iops:               0
[  224.566376][T11368]   randread iops:               0
[  224.566376][T11368]   randwrite iops:              0
[  224.566376][T11368]   Bucket size:                 131072
[  224.566376][T11368]   First bucket:                0
[  224.566376][T11368]   Buckets:                     128
[  224.566376][T11368]   Last mount:                  1714681267
[  224.566376][T11368]   Last superblock write:       42
[  224.566376][T11368]   State:                       rw
[  224.566376][T11368]   Data allowed:                journal,btree,user
[  224.566376][T11368]   Has data:                    (none)
[  224.566376][T11368]   Btree allocated bitmap blocksize:256
[  224.566376][T11368]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  224.566376][T11368]   D
[  224.566511][T11368] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  224.580484][T11388] iso9660: Corrupted directory entry in block 2 of inode 1920
[  224.621857][    C0] vkms_vblank_simulate: vblank timer overrun
[  224.743823][T11393] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1991'.
[  224.881822][   T33] audit: type=1800 audit(2000000130.042:93): pid=11401 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1995" name="bus" dev="overlay" ino=3079 res=0 errno=0
[  225.132233][T11399] loop4: detected capacity change from 0 to 32768
[  225.156810][T11399] JBD2: Ignoring recovery information on journal
[  225.170385][T11399] jbd2_journal_bmap: journal block not found at offset 32 on loop4-75
[  225.174193][T11399] JBD2: bad block at offset 32
[  225.197253][T11399] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  225.225954][T11399] OCFS2: ERROR (device loop4): int ocfs2_claim_suballoc_bits(struct ocfs2_alloc_context *, handle_t *, u32, u32, struct ocfs2_suballoc_result *): Chain allocator dinode 71 has 16777215 used bits but only 1024 total
[  225.238718][T11399] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[  225.246319][T11399] OCFS2: File system is now read-only.
[  225.257908][T11399] (syz.4.1993,11399,0):ocfs2_claim_suballoc_bits:2063 ERROR: status = -30
[  225.261330][T11399] (syz.4.1993,11399,0):__ocfs2_claim_clusters:2438 ERROR: status = -30
[  225.265449][T11399] (syz.4.1993,11399,0):__ocfs2_claim_clusters:2446 ERROR: status = -30
[  225.270746][T11399] (syz.4.1993,11399,0):ocfs2_block_group_alloc_contig:437 ERROR: status = -30
[  225.274367][T11399] (syz.4.1993,11399,0):ocfs2_block_group_alloc:711 ERROR: status = -30
[  225.283807][T11399] (syz.4.1993,11399,0):ocfs2_block_group_alloc:764 ERROR: status = -30
[  225.290554][T11399] (syz.4.1993,11399,0):ocfs2_reserve_suballoc_bits:839 ERROR: status = -30
[  225.294876][T11399] (syz.4.1993,11399,0):ocfs2_reserve_suballoc_bits:856 ERROR: status = -30
[  225.299903][T11399] (syz.4.1993,11399,0):ocfs2_reserve_new_metadata_blocks:996 ERROR: status = -30
[  225.300408][T11411] ip6erspan0: entered promiscuous mode
[  225.303317][T11399] (syz.4.1993,11399,0):ocfs2_reserve_new_metadata_blocks:1019 ERROR: status = -30
[  225.314539][T11399] (syz.4.1993,11399,0):ocfs2_expand_inline_dir:2847 ERROR: status = -30
[  225.317315][T11399] (syz.4.1993,11399,0):ocfs2_extend_dir:3211 ERROR: status = -30
[  225.321395][T11399] (syz.4.1993,11399,0):ocfs2_prepare_dir_for_insert:4316 ERROR: status = -30
[  225.324842][T11399] (syz.4.1993,11399,0):ocfs2_mknod:301 ERROR: status = -30
[  225.327271][T11399] (syz.4.1993,11399,0):ocfs2_mknod:505 ERROR: status = -30
[  225.331675][T11399] (syz.4.1993,11399,0):ocfs2_create:678 ERROR: status = -30
[  225.355676][ T9057] ocfs2: Unmounting device (7,4) on (node local)
[  225.628958][T11423] loop2: detected capacity change from 0 to 4096
[  225.785791][T11429] loop2: detected capacity change from 0 to 2048
[  225.802162][T11429] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  225.854683][T11431] loop4: detected capacity change from 0 to 4096
[  225.863026][T11431] ntfs3(loop4): It is recommened to use chkdsk.
[  225.866040][T11431] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  225.869775][T11431] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  225.872797][T11431] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  225.876075][T11431] ntfs3(loop4): try to read out of volume at offset 0x3fffffc0c00
[  225.886066][T11431] ntfs3(loop4): try to read out of volume at offset 0x3fffffc1c00
[  225.905773][T11431] ntfs3(loop4): try to read out of volume at offset 0x3fffffc2c00
[  225.912297][T11431] ntfs3(loop4): try to read out of volume at offset 0x3fffffc4c00
[  225.918346][T11431] ntfs3(loop4): try to read out of volume at offset 0x3fffffc8c00
[  225.921431][T11431] ntfs3(loop4): try to read out of volume at offset 0x3fffffd0c00
[  225.970888][T11435] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2010'.
[  226.094675][T11445] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2015'.
[  226.126919][T11447] Device name not specified.
[  226.126919][T11447] 
[  226.186700][T11452] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2019'.
[  226.274491][T11440] loop2: detected capacity change from 0 to 32768
[  226.311373][T11440] JBD2: Ignoring recovery information on journal
[  226.322849][ T2320] IPVS: starting estimator thread 0...
[  226.379665][T11440] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  226.422332][ T5853] ocfs2: Unmounting device (7,2) on (node local)
[  226.440684][T11461] IPVS: using max 45 ests per chain, 108000 per kthread
[  227.160866][T11485] loop4: detected capacity change from 0 to 512
[  227.166022][T11485] EXT4-fs: Ignoring removed nomblk_io_submit option
[  227.200526][T11485] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  227.204018][T11485] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  227.242716][T11485] Quota error (device loop4): do_insert_tree: Free block already used in tree: block 1
[  227.249863][T11485] Quota error (device loop4): qtree_write_dquot: Error -5 occurred while creating quota
[  227.253547][T11485] EXT4-fs error (device loop4): ext4_acquire_dquot:6933: comm syz.4.2032: Failed to acquire dquot type 1
[  227.261458][T11485] EXT4-fs (loop4): Remounting filesystem read-only
[  227.264014][T11485] EXT4-fs (loop4): 1 truncate cleaned up
[  227.270429][T11485] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  227.336182][ T9057] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  227.624193][T11498] tipc: Resetting bearer <eth:bridge0>
[  227.627070][T11498] bridge0: port 2(bridge_slave_1) entered disabled state
[  227.629786][T11498] bridge0: port 1(bridge_slave_0) entered disabled state
[  228.368971][T11509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2041'.
[  228.372660][T11509] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2041'.
[  228.764224][T11527] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2050'.
[  228.900668][T11539] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(4)
[  228.902965][T11539] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  228.908801][T11539] vhci_hcd vhci_hcd.0: Device attached
[  228.914287][T11539] vhci_hcd vhci_hcd.0: pdev(4) rhport(1) sockfd(6)
[  228.916545][T11539] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  228.920484][T11539] vhci_hcd vhci_hcd.0: Device attached
[  228.925071][T11539] vhci_hcd vhci_hcd.0: pdev(4) rhport(2) sockfd(8)
[  228.927585][T11539] vhci_hcd vhci_hcd.0: devid(0) speed(2) speed_str(full-speed)
[  228.930272][T11539] vhci_hcd vhci_hcd.0: Device attached
[  228.960958][T11544] vhci_hcd: connection closed
[  228.962437][T11540] vhci_hcd: connection closed
[  228.964918][T11542] vhci_hcd: connection closed
[  228.966479][ T5873] vhci_hcd: stop threads
[  228.970905][ T5873] vhci_hcd: release socket
[  228.972420][ T5873] vhci_hcd: disconnect device
[  228.974319][ T5873] vhci_hcd: stop threads
[  228.976233][ T5873] vhci_hcd: release socket
[  228.978137][ T5873] vhci_hcd: disconnect device
[  228.980176][ T5873] vhci_hcd: stop threads
[  228.981667][ T5873] vhci_hcd: release socket
[  228.983209][ T5873] vhci_hcd: disconnect device
[  229.067945][ T2320] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  229.217997][ T2320] usb 3-1: Using ep0 maxpacket: 16
[  229.224067][ T2320] usb 3-1: config index 0 descriptor too short (expected 292, got 36)
[  229.227381][ T2320] usb 3-1: config 0 has an invalid interface number: 161 but max is 0
[  229.230794][ T2320] usb 3-1: config 0 has no interface number 0
[  229.233431][ T2320] usb 3-1: config 0 interface 161 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  229.238329][ T2320] usb 3-1: config 0 interface 161 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[  229.241950][ T2320] usb 3-1: config 0 interface 161 has no altsetting 0
[  229.244210][ T2320] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b34, bcdDevice= 0.00
[  229.247364][ T2320] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  229.251808][ T2320] usb 3-1: config 0 descriptor??
[  229.424513][T11547] netlink: 'syz.3.2057': attribute type 2 has an invalid length.
[  229.544463][T11555] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2061'.
[  229.672500][ T2320] corsair 0003:1B1C:1B34.0007: unknown main item tag 0x0
[  229.676344][ T2320] corsair 0003:1B1C:1B34.0007: unknown main item tag 0x0
[  229.683945][ T2320] corsair 0003:1B1C:1B34.0007: unknown main item tag 0x0
[  229.686385][ T2320] corsair 0003:1B1C:1B34.0007: unknown main item tag 0x0
[  229.692742][ T2320] corsair 0003:1B1C:1B34.0007: unknown main item tag 0x0
[  229.695490][ T2320] corsair 0003:1B1C:1B34.0007: failed to start in urb: -90
[  229.703045][ T2320] corsair 0003:1B1C:1B34.0007: hidraw0: USB HID v0.05 Device [HID 1b1c:1b34] on usb-dummy_hcd.2-1/input161
[  229.884924][ T2320] usb 3-1: USB disconnect, device number 26
[  230.735827][   T10] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  230.846401][T11589] loop2: detected capacity change from 0 to 40427
[  230.856202][T11589] F2FS-fs (loop2): build fault injection rate: 771
[  230.868126][T11589] F2FS-fs (loop2): invalid crc value
[  230.907140][T11589] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  230.914459][T11589] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  230.935783][T11590] bio_check_eod: 1515 callbacks suppressed
[  230.935793][T11590] f2fs_ckpt-7:2: attempt to access beyond end of device
[  230.935793][T11590] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  230.948356][T11590] CPU: 1 UID: 0 PID: 11590 Comm: f2fs_ckpt-7:2 Not tainted syzkaller #0 PREEMPT(full) 
[  230.948368][T11590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  230.948373][T11590] Call Trace:
[  230.948376][T11590]  <TASK>
[  230.948379][T11590]  dump_stack_lvl+0x189/0x250
[  230.948393][T11590]  ? __pfx_dump_stack_lvl+0x10/0x10
[  230.948401][T11590]  ? __pfx_queue_work_on+0x10/0x10
[  230.948408][T11590]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  230.948418][T11590]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  230.948430][T11590]  f2fs_handle_critical_error+0x37c/0x540
[  230.948443][T11590]  f2fs_write_end_io+0x886/0xb60
[  230.948457][T11590]  __submit_merged_bio+0x27a/0x6a0
[  230.948465][T11590]  ? up_write+0x1c4/0x420
[  230.948475][T11590]  __submit_merged_write_cond+0x44c/0x530
[  230.948486][T11590]  f2fs_sync_node_pages+0x1479/0x15e0
[  230.948502][T11590]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  230.948521][T11590]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  230.948530][T11590]  ? up_write+0x1c4/0x420
[  230.948536][T11590]  ? do_raw_spin_unlock+0x4d/0x240
[  230.948569][T11590]  f2fs_write_checkpoint+0xe6f/0x1df0
[  230.948587][T11590]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  230.948608][T11590]  ? down_write+0x162/0x1f0
[  230.948614][T11590]  ? __pfx_down_write+0x10/0x10
[  230.948623][T11590]  ? __pfx___schedule+0x10/0x10
[  230.948634][T11590]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[  230.948643][T11590]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  230.948657][T11590]  issue_checkpoint_thread+0xd9/0x260
[  230.948665][T11590]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  230.948672][T11590]  ? __pfx_autoremove_wake_function+0x10/0x10
[  230.948680][T11590]  ? __kthread_parkme+0x7b/0x200
[  230.948688][T11590]  ? __kthread_parkme+0x1a1/0x200
[  230.948697][T11590]  kthread+0x711/0x8a0
[  230.948706][T11590]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  230.948713][T11590]  ? __pfx_kthread+0x10/0x10
[  230.948722][T11590]  ? _raw_spin_unlock_irq+0x23/0x50
[  230.948729][T11590]  ? lockdep_hardirqs_on+0x9c/0x150
[  230.948737][T11590]  ? __pfx_kthread+0x10/0x10
[  230.948745][T11590]  ret_from_fork+0x3fc/0x770
[  230.948754][T11590]  ? __pfx_ret_from_fork+0x10/0x10
[  230.948763][T11590]  ? __switch_to_asm+0x39/0x70
[  230.948771][T11590]  ? __switch_to_asm+0x33/0x70
[  230.948778][T11590]  ? __pfx_kthread+0x10/0x10
[  230.948786][T11590]  ret_from_fork_asm+0x1a/0x30
[  230.948800][T11590]  </TASK>
[  230.948803][T11590] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  231.050764][T11590] CPU: 1 UID: 0 PID: 11590 Comm: f2fs_ckpt-7:2 Not tainted syzkaller #0 PREEMPT(full) 
[  231.050775][T11590] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  231.050780][T11590] Call Trace:
[  231.050784][T11590]  <TASK>
[  231.050787][T11590]  dump_stack_lvl+0x189/0x250
[  231.050801][T11590]  ? __pfx_dump_stack_lvl+0x10/0x10
[  231.050809][T11590]  ? __pfx_queue_work_on+0x10/0x10
[  231.050818][T11590]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  231.050827][T11590]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  231.050857][T11590]  f2fs_handle_critical_error+0x37c/0x540
[  231.050874][T11590]  f2fs_write_end_io+0x886/0xb60
[  231.050889][T11590]  __submit_merged_bio+0x27a/0x6a0
[  231.050897][T11590]  ? up_write+0x1c4/0x420
[  231.050908][T11590]  __submit_merged_write_cond+0x44c/0x530
[  231.050920][T11590]  f2fs_sync_node_pages+0x1479/0x15e0
[  231.050938][T11590]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  231.050961][T11590]  ? f2fs_write_checkpoint+0xe43/0x1df0
[  231.050970][T11590]  ? up_write+0x1c4/0x420
[  231.050976][T11590]  ? do_raw_spin_unlock+0x4d/0x240
[  231.050986][T11590]  f2fs_write_checkpoint+0xe6f/0x1df0
[  231.051004][T11590]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  231.051035][T11590]  ? down_write+0x162/0x1f0
[  231.051041][T11590]  ? __pfx_down_write+0x10/0x10
[  231.051051][T11590]  ? __pfx___schedule+0x10/0x10
[  231.051063][T11590]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[  231.051072][T11590]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  231.051087][T11590]  issue_checkpoint_thread+0xd9/0x260
[  231.051096][T11590]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  231.051104][T11590]  ? __pfx_autoremove_wake_function+0x10/0x10
[  231.051114][T11590]  ? __kthread_parkme+0x7b/0x200
[  231.051121][T11590]  ? __kthread_parkme+0x1a1/0x200
[  231.051132][T11590]  kthread+0x711/0x8a0
[  231.051141][T11590]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  231.051148][T11590]  ? __pfx_kthread+0x10/0x10
[  231.051158][T11590]  ? _raw_spin_unlock_irq+0x23/0x50
[  231.051165][T11590]  ? lockdep_hardirqs_on+0x9c/0x150
[  231.051174][T11590]  ? __pfx_kthread+0x10/0x10
[  231.051182][T11590]  ret_from_fork+0x3fc/0x770
[  231.051191][T11590]  ? __pfx_ret_from_fork+0x10/0x10
[  231.051201][T11590]  ? __switch_to_asm+0x39/0x70
[  231.051209][T11590]  ? __switch_to_asm+0x33/0x70
[  231.051216][T11590]  ? __pfx_kthread+0x10/0x10
[  231.051227][T11590]  ret_from_fork_asm+0x1a/0x30
[  231.051243][T11590]  </TASK>
[  231.051802][T11590] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  231.271165][T11594] smc: removing ib device syz1
[  231.334025][T11596] loop2: detected capacity change from 0 to 512
[  231.337700][T11596] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  231.368853][   T10] usb 5-1: Using ep0 maxpacket: 16
[  231.380043][T11596] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  231.385605][T11596] ext4 filesystem being mounted at /611/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  231.385774][   T10] usb 5-1: config 0 descriptor has 1 excess byte, ignoring
[  231.396198][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024
[  231.411694][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024
[  231.415784][   T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 223
[  231.433246][T11596] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  231.441224][T11596] Quota error (device loop2): write_blk: dquota write failed
[  231.445651][   T10] usb 5-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47
[  231.448072][T11596] Quota error (device loop2): qtree_write_dquot: Error -28 occurred while creating quota
[  231.451926][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  231.452248][T11596] EXT4-fs error (device loop2): ext4_acquire_dquot:6933: comm syz.2.2079: Failed to acquire dquot type 0
[  231.454852][   T10] usb 5-1: Product: syz
[  231.454861][   T10] usb 5-1: Manufacturer: syz
[  231.454867][   T10] usb 5-1: SerialNumber: syz
[  231.470748][   T10] usb 5-1: config 0 descriptor??
[  231.474745][T11559] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  231.478142][T11559] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  231.506901][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  231.515022][   T10] mcba_usb 5-1:0.0: Microchip CAN BUS Analyzer connected
[  231.517429][    C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71)
[  231.517473][    C0] mcba_usb 5-1:0.0 can0: Tx URB aborted (-71)
[  231.713787][ T5313] usb 5-1: USB disconnect, device number 10
[  231.722692][ T5313] mcba_usb 5-1:0.0 can0: device disconnected
[  232.428917][T11633] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  232.530837][T11635] tipc: Can't bind to reserved service type 1
[  233.054931][T11655] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2102'.
[  233.246634][T11661] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2105'.
[  233.468890][   T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  233.620467][   T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  233.623970][   T10] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  233.627201][   T10] usb 5-1: config 1 has no interface number 1
[  233.670481][   T10] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  233.679623][   T10] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x6 has an invalid bInterval 0, changing to 7
[  233.689692][   T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  233.700112][   T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  233.893849][   T10] usb 5-1: Product: syz
[  233.895272][   T10] usb 5-1: Manufacturer: syz
[  233.896819][   T10] usb 5-1: SerialNumber: syz
[  233.909018][T11659] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  233.914281][ T5313] libceph: connect (1)[c::]:6789 error -101
[  233.916407][ T5313] libceph: mon0 (1)[c::]:6789 connect error
[  233.941960][T11687] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2115'.
[  234.176086][   T10] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  234.186668][ T5313] libceph: connect (1)[c::]:6789 error -101
[  234.204664][   T10] usb 5-1: 2:1 : no or invalid class specific endpoint descriptor
[  234.207751][ T5313] libceph: mon0 (1)[c::]:6789 connect error
[  234.379855][T11680] ceph: No mds server is up or the cluster is laggy
[  234.462075][   T10] usb 5-1: USB disconnect, device number 11
[  234.527420][ T6111] udevd[6111]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  235.310621][T11712] loop2: detected capacity change from 0 to 2048
[  235.314092][T11712] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  235.328168][T11713] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  235.332352][T11712] syz.2.2126: attempt to access beyond end of device
[  235.332352][T11712] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  235.429315][T11717] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2128'.
[  235.432634][T11717] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  235.618012][ T5909] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[  235.626495][T11726] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  235.787927][ T5909] usb 3-1: Using ep0 maxpacket: 32
[  235.794758][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  235.800942][ T5909] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  235.805236][ T5909] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  235.810372][ T5909] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  235.826631][ T5909] usb 3-1: config 0 descriptor??
[  235.856737][ T5909] hub 3-1:0.0: USB hub found
[  236.047977][ T5909] hub 3-1:0.0: config failed, hub has too many ports! (err -19)
[  236.197406][T11732] nft_compat: unsupported protocol 0
[  236.258214][ T5909] usbhid 3-1:0.0: can't add hid device: -71
[  236.263449][ T5909] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  236.304889][ T5909] usb 3-1: USB disconnect, device number 27
[  237.197326][T11752] loop4: detected capacity change from 0 to 1024
[  237.224869][T11752] hfsplus: bad catalog entry type
[  237.253952][   T40] hfsplus: b-tree write err: -5, ino 4
[  237.304651][T11758] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2147'.
[  237.377353][T11764] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  237.458217][   T33] audit: type=1326 audit(2000000142.632:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11768 comm="syz.2.2152" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44afb8ebe9 code=0x0
[  237.623667][T11767] loop4: detected capacity change from 0 to 32768
[  237.702897][T11767] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,metadata_target=invalid label 246,noinodes_use_key_cache,journal_flush_delay=3,journal_reclaim_delay=1000,nocow
[  237.702911][T11767]   allowing incompatible features above 0.0: (unknown version)
[  237.702915][T11767]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  237.721202][T11767] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  237.724588][T11767] bcachefs (loop4): initializing new filesystem
[  237.725079][T11770] loop2: detected capacity change from 0 to 32768
[  237.729979][T11770] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2152 (11770)
[  237.739079][T11770] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  237.743009][T11770] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  237.746519][T11770] BTRFS info (device loop2): using free-space-tree
[  237.753516][T11767] bcachefs (loop4): going read-write
[  237.766229][T11767] bcachefs (loop4): marking superblocks
[  237.794405][T11767] bcachefs (loop4): initializing freespace
[  237.801243][T11767] bcachefs (loop4): done initializing freespace
[  237.809049][T11767] bcachefs (loop4): reading snapshots table
[  237.811490][T11767] bcachefs (loop4): reading snapshots done
[  237.812600][T11770] BTRFS info (device loop2): rebuilding free space tree
[  237.830520][T11767] bcachefs (loop4): done starting filesystem
[  237.836820][T11770] BTRFS info (device loop2): checking UUID tree
[  237.877140][ T9057] bcachefs (loop4): shutting down
[  237.882893][ T9057] bcachefs (loop4): going read-only
[  237.887443][ T9057] bcachefs (loop4): finished waiting for writes to stop
[  237.892757][ T9057] bcachefs (loop4): flushing journal and stopping allocators, journal seq 5
[  237.925777][ T9057] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 7
[  237.930000][ T9057] bcachefs (loop4): clean shutdown complete, journal seq 8
[  237.932903][ T9057] bcachefs (loop4): marking filesystem clean
[  237.960895][ T9057] bcachefs (loop4): shutdown complete
[  238.230225][   T33] audit: type=1326 audit(2000000143.402:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11800 comm="syz.3.2154" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd066b8ebe9 code=0x0
[  238.296632][ T5853] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  238.831937][T11808] loop2: detected capacity change from 0 to 40427
[  238.850920][T11808] F2FS-fs (loop2): build fault injection rate: 14
[  238.853730][T11808] F2FS-fs (loop2): build fault injection type: 0x3bfe8c
[  238.869437][T11808] F2FS-fs (loop2): invalid crc value
[  238.897188][    C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  238.917927][    C0] F2FS-fs (loop2): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  238.983712][T11808] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  238.992644][T11808] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  239.006350][T11808] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  239.041847][T11808] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  239.078106][ T5853] F2FS-fs (loop2): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xab1/0x1cf0
[  239.089658][T11821] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  239.092042][T11821] IPv6: NLM_F_CREATE should be set when creating new route
[  239.094368][T11821] IPv6: NLM_F_CREATE should be set when creating new route
[  239.098500][ T5853] F2FS-fs (loop2): inconsistent node block, node_type:0, nid:12, node_footer[nid:12,ino:3,ofs:191576,cpver:0,blkaddr:0]
[  239.141561][    C0] F2FS-fs (loop2): inject write IO error in f2fs_write_end_io of blk_update_request+0x57e/0xe60
[  239.147297][    C0] CPU: 0 UID: 0 PID: 15 Comm: ksoftirqd/0 Not tainted syzkaller #0 PREEMPT(full) 
[  239.147324][    C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  239.147332][    C0] Call Trace:
[  239.147338][    C0]  <TASK>
[  239.147343][    C0]  dump_stack_lvl+0x189/0x250
[  239.147364][    C0]  ? __pfx_dump_stack_lvl+0x10/0x10
[  239.147378][    C0]  ? __pfx_queue_work_on+0x10/0x10
[  239.147391][    C0]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  239.147406][    C0]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  239.147421][    C0]  ? f2fs_hw_is_readonly+0x39b/0x470
[  239.147441][    C0]  f2fs_handle_critical_error+0x37c/0x540
[  239.147460][    C0]  f2fs_write_end_io+0x886/0xb60
[  239.147482][    C0]  blk_update_request+0x57e/0xe60
[  239.147505][    C0]  blk_mq_end_request+0x3e/0x70
[  239.147550][    C0]  blk_flush_complete_seq+0x678/0xcc0
[  239.147571][    C0]  flush_end_io+0xbaf/0xe60
[  239.147593][    C0]  __blk_mq_end_request+0x426/0x600
[  239.147610][    C0]  blk_done_softirq+0x10a/0x160
[  239.147625][    C0]  handle_softirqs+0x286/0x870
[  239.147639][    C0]  ? run_ksoftirqd+0x9b/0x100
[  239.147655][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[  239.147669][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  239.147681][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  239.147691][    C0]  run_ksoftirqd+0x9b/0x100
[  239.147703][    C0]  ? __pfx_run_ksoftirqd+0x10/0x10
[  239.147720][    C0]  smpboot_thread_fn+0x542/0xa60
[  239.147732][    C0]  ? smpboot_thread_fn+0x4d/0xa60
[  239.147749][    C0]  kthread+0x711/0x8a0
[  239.147772][    C0]  ? __pfx_smpboot_thread_fn+0x10/0x10
[  239.147802][    C0]  ? __pfx_kthread+0x10/0x10
[  239.147818][    C0]  ? _raw_spin_unlock_irq+0x23/0x50
[  239.147832][    C0]  ? lockdep_hardirqs_on+0x9c/0x150
[  239.147846][    C0]  ? __pfx_kthread+0x10/0x10
[  239.147860][    C0]  ret_from_fork+0x3fc/0x770
[  239.147876][    C0]  ? __pfx_ret_from_fork+0x10/0x10
[  239.147892][    C0]  ? __switch_to_asm+0x39/0x70
[  239.147906][    C0]  ? __switch_to_asm+0x33/0x70
[  239.147919][    C0]  ? __pfx_kthread+0x10/0x10
[  239.147935][    C0]  ret_from_fork_asm+0x1a/0x30
[  239.147959][    C0]  </TASK>
[  239.147964][    C0] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  239.236062][ T5853] F2FS-fs (loop2): do_checkpoint failed err:-5, stop checkpoint
[  239.236305][    C0] vkms_vblank_simulate: vblank timer overrun
[  240.417112][T11862] loop4: detected capacity change from 0 to 8
[  240.424583][T11862] MTD: Attempt to mount non-MTD device "/dev/loop4"
[  240.432158][T11863] loop2: detected capacity change from 0 to 512
[  240.661327][T11873] cramfs: Error -3 while decompressing!
[  240.663498][T11873] cramfs: ffffffff99beb628(26)->ffff888033ea6000(4096)
[  240.665896][T11873] cramfs: Error -3 while decompressing!
[  240.667925][T11873] cramfs: ffffffff99beb642(26)->ffff888033ea5000(4096)
[  240.670273][T11873] cramfs: Error -3 while decompressing!
[  240.672219][T11873] cramfs: ffffffff99beb65c(16)->ffff888033ea4000(4096)
[  240.675006][T11873] cramfs: Error -3 while decompressing!
[  240.677238][T11873] cramfs: ffffffff99beb628(26)->ffff888033ea6000(4096)
[  240.872579][T11886] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2190'.
[  241.837930][   T24] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  241.882578][T11939] netlink: 'syz.2.2214': attribute type 1 has an invalid length.
[  241.886091][T11939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2214'.
[  241.989109][   T24] usb 5-1: Using ep0 maxpacket: 8
[  242.014641][   T24] usb 5-1: unable to get BOS descriptor or descriptor too short
[  242.022466][   T24] usb 5-1: unable to read config index 0 descriptor/start: -71
[  242.026111][   T24] usb 5-1: can't read configurations, error -71
[  243.034869][T11985] loop2: detected capacity change from 0 to 512
[  243.038341][T11985] EXT4-fs: Ignoring removed i_version option
[  243.045291][T11985] EXT4-fs: Ignoring removed mblk_io_submit option
[  243.054657][T11985] EXT4-fs (loop2): Test dummy encryption mode enabled
[  243.080165][T11985] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8842c018, mo2=0103]
[  243.087344][T11985] EXT4-fs error (device loop2): ext4_orphan_get:1392: comm syz.2.2235: inode #13: comm syz.2.2235: iget: illegal inode #
[  243.102545][T11985] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.2235: couldn't read orphan inode 13 (err -117)
[  243.222384][T11985] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  243.235026][T11985] EXT4-fs (loop2): shut down requested (1)
[  243.255751][T11989] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2236'.
[  243.260829][ T5853] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.264458][T11989] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2236'.
[  243.587896][ T5909] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  243.641291][T12005] loop4: detected capacity change from 0 to 8
[  243.650888][T12005] SQUASHFS error: zlib decompression failed, data probably corrupt
[  243.654218][T12005] SQUASHFS error: Failed to read block 0x9b: -5
[  243.656856][T12005] SQUASHFS error: Unable to read metadata cache entry [99]
[  243.660601][T12005] SQUASHFS error: Unable to read inode 0x127
[  243.700963][T12007] loop4: detected capacity change from 0 to 1024
[  243.710679][T12007] EXT4-fs: Ignoring removed nobh option
[  243.729240][T12007] EXT4-fs: Ignoring removed bh option
[  243.743039][T12007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  243.762250][ T5909] usb 3-1: unable to get BOS descriptor or descriptor too short
[  243.766435][ T5909] usb 3-1: config 84 has an invalid interface number: 111 but max is 0
[  243.770452][ T5909] usb 3-1: config 84 has no interface number 0
[  243.774701][ T5909] usb 3-1: config 84 interface 111 has no altsetting 0
[  243.780024][ T5909] usb 3-1: language id specifier not provided by device, defaulting to English
[  243.781963][ T9057] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  243.801426][ T5909] usb 3-1: New USB device found, idVendor=0421, idProduct=046e, bcdDevice=33.f0
[  243.804909][ T5909] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.809176][ T5909] usb 3-1: Product: Ъ
[  243.811371][ T5909] usb 3-1: SerialNumber: 麡珏גּ줺귮癲ꋧ⌗컹야髰蹏铏܎䖎鯫湼샘婜ꁤ齯Ἑᢱ벗/￭蠾쬯ꃯ▋뵻薱⾡䴢㒟瀪慠欗삅탯睌࢔קּ狴
[  243.961738][T12015] pim6reg: tun_chr_ioctl cmd 2147767507
[  244.037569][ T5909] usb 3-1: bad CDC descriptors
[  244.044081][ T5909] usb 3-1: USB disconnect, device number 28
[  244.190166][T12019] loop4: detected capacity change from 0 to 32768
[  244.193925][T12019] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2249 (12019)
[  244.212442][T12019] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  244.216828][T12019] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  244.221210][T12019] BTRFS info (device loop4): disk space caching is enabled
[  244.224877][T12019] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  244.300113][T12019] BTRFS info (device loop4): rebuilding free space tree
[  244.311260][T12019] BTRFS info (device loop4): disabling free space tree
[  244.314258][T12019] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  244.318493][T12019] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  244.393143][ T9057] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  244.922297][T12051] loop2: detected capacity change from 0 to 32768
[  244.930977][T12051] XFS: noikeep mount option is deprecated.
[  244.993348][T12051] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  244.997006][T12064] 
[  244.998905][T12064] =============================
[  245.001002][T12064] WARNING: suspicious RCU usage
[  245.003064][T12064] syzkaller #0 Not tainted
[  245.005669][T12064] -----------------------------
[  245.008871][T12064] kernel/events/callchain.c:163 suspicious rcu_dereference_check() usage!
[  245.012437][T12064] 
[  245.012437][T12064] other info that might help us debug this:
[  245.012437][T12064] 
[  245.013403][T12051] XFS (loop2): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51.
[  245.016765][T12064] 
[  245.016765][T12064] rcu_scheduler_active = 2, debug_locks = 1
[  245.016783][T12064] 1 lock held by syz.4.2260/12064:
[  245.016791][T12064]  #0: ffffffff8e13a080 (rcu_read_lock_trace){....}-{0:0}, at: rcu_read_lock_trace+0x38/0x80
[  245.028710][T12051] XFS (loop2): Starting recovery (logdev: internal)
[  245.028826][T12064] 
[  245.028826][T12064] stack backtrace:
[  245.038159][T12064] CPU: 1 UID: 0 PID: 12064 Comm: syz.4.2260 Not tainted syzkaller #0 PREEMPT(full) 
[  245.038178][T12064] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  245.038186][T12064] Call Trace:
[  245.038193][T12064]  <TASK>
[  245.038199][T12064]  dump_stack_lvl+0x189/0x250
[  245.038221][T12064]  ? __pfx_dump_stack_lvl+0x10/0x10
[  245.038237][T12064]  ? __pfx__printk+0x10/0x10
[  245.038265][T12064]  lockdep_rcu_suspicious+0x140/0x1d0
[  245.038282][T12064]  get_callchain_entry+0x2b6/0x3c0
[  245.038302][T12064]  get_perf_callchain+0xa1/0x6b0
[  245.038324][T12064]  ? __pfx_get_perf_callchain+0x10/0x10
[  245.038339][T12064]  ? futex_unqueue+0x22/0x240
[  245.038354][T12064]  ? futex_unqueue+0x211/0x240
[  245.038366][T12064]  ? __futex_wait+0x1d1/0x3e0
[  245.038383][T12064]  ? __futex_wait+0x34f/0x3e0
[  245.038401][T12064]  __bpf_get_stack+0x3fc/0xa60
[  245.038427][T12064]  ? __pfx___bpf_get_stack+0x10/0x10
[  245.038446][T12064]  ? __lock_acquire+0xab9/0xd20
[  245.038467][T12064]  bpf_get_stack+0x33/0x50
[  245.038484][T12064]  ? bpf_prog_d43750871481577d+0x46/0x4e
[  245.038525][T12064]  bpf_get_stack_raw_tp+0x1a9/0x220
[  245.038547][T12064]  bpf_prog_d43750871481577d+0x46/0x4e
[  245.038560][T12064]  bpf_prog_run_pin_on_cpu+0x6a/0x150
[  245.038582][T12064]  bpf_prog_test_run_syscall+0x312/0x4b0
[  245.038602][T12064]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  245.038617][T12064]  ? __fget_files+0x2a/0x420
[  245.038631][T12064]  ? __pfx_bpf_prog_test_run_syscall+0x10/0x10
[  245.038649][T12064]  bpf_prog_test_run+0x2c7/0x340
[  245.038669][T12064]  __sys_bpf+0x581/0x870
[  245.038685][T12064]  ? __pfx___sys_bpf+0x10/0x10
[  245.038710][T12064]  ? __pfx___se_sys_futex+0x10/0x10
[  245.038725][T12064]  ? rcu_is_watching+0x15/0xb0
[  245.038742][T12064]  __x64_sys_bpf+0x7c/0x90
[  245.038757][T12064]  do_syscall_64+0xfa/0x3b0
[  245.038774][T12064]  ? lockdep_hardirqs_on+0x9c/0x150
[  245.038788][T12064]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.038799][T12064]  ? exc_page_fault+0x9f/0xf0
[  245.038816][T12064]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  245.038827][T12064] RIP: 0033:0x7fb2daf8ebe9
[  245.038839][T12064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  245.038849][T12064] RSP: 002b:00007fb2dbda7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141
[  245.038863][T12064] RAX: ffffffffffffffda RBX: 00007fb2db1b5fa0 RCX: 00007fb2daf8ebe9
[  245.038871][T12064] RDX: 0000000000000010 RSI: 0000200000000740 RDI: 000000000000000a
[  245.038879][T12064] RBP: 00007fb2db011e19 R08: 0000000000000000 R09: 0000000000000000
[  245.038887][T12064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  245.038895][T12064] R13: 00007fb2db1b6038 R14: 00007fb2db1b5fa0 R15: 00007ffe0e8be628
[  245.038916][T12064]  </TASK>
[  245.056124][T12051] XFS (loop2): Ending recovery (logdev: internal)
[  245.194885][ T5853] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb

VM DIAGNOSIS:
00:02:36  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81c73cb9 RBX=ffff8880263a5640 RCX=0000000000000002 RDX=ffff88801af13980
RSI=0000000000000001 RDI=0000000000000000 RBP=ffff8880263a5640 RSP=ffffc9000357eb38
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=dffffc0000000000 R13=ffff88804b039f80 R14=ffff88801af13980 R15=0000000000000001
RIP=ffffffff81c73cb9 RFL=00000097 [--S-APC] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f44b0ad56c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32722ff8 CR3=00000000388b6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=6161616161616161 6161616161616161
XMM06=6161616161616161 6161616161616161 XMM07=6161616161616161 6161616161616161
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fd066c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffffff90368201 RCX=0d37b02d8d06bb00 RDX=ffffc900001e0701
RSI=ffffffff8be332e0 RDI=ffffffff8be332a0 RBP=dffffc0000000000 RSP=ffffc900001e0668
R8 =ffffc90003f6f7d0 R9 =0000000000000000 R10=ffffc900001e07f8 R11=fffff5200003c101
R12=ffffc90003f6f7e0 R13=ffffffff8172c195 R14=ffffffff8e139ea0 R15=ffffffff8172c195
RIP=ffffffff81a66674 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fb2dbda76c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fd0678e56c0 CR3=000000001fae6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fb2db187498 00007fb2db187470 XMM03=00007fb2db1874a8 00007fb2db1874a0
XMM04=00007fb2dbced100 00007fb2db187460 XMM05=00007fb2db187478 00007fb2db1874c0
XMM06=00007fb2db1874b8 00007fb2db1874b0 XMM07=00007fb2db1874a8 00007fb2db1874a0
XMM08=0000000000000000 00007fb2db012ee7 XMM09=0000000000000000 00007fb2db012fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
