last executing test programs:

1m34.537725839s ago: executing program 1 (id=102):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
mincore(&(0x7f0000ffc000/0x4000)=nil, 0x4000, &(0x7f00000004c0)=""/228)

1m34.451988776s ago: executing program 1 (id=103):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='vm_unmapped_area\x00', r1}, 0x10)
io_setup(0x3, &(0x7f0000000340))

1m34.228767347s ago: executing program 1 (id=107):
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
r0 = userfaultfd(0x1)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000180)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00003ab000/0x2000)=nil, 0x400000, 0x2, 0x2})

1m33.731216053s ago: executing program 1 (id=112):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x891018, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='./file0/../file0\x00', 0x0, 0x1adc51, 0x0)
mount$bind(&(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000240)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)

1m33.622446227s ago: executing program 1 (id=115):
unshare(0x22020600)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
fcntl$notify(r0, 0x402, 0x26)
fcntl$notify(r0, 0x402, 0x0)

1m33.072138947s ago: executing program 1 (id=117):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50)
write$FUSE_LK(r2, &(0x7f0000000340)={0x28, 0x0, 0x0, {{0x2, 0x0, 0x1}}}, 0x28)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write$FUSE_IOCTL(r3, &(0x7f0000000180)={0x20, 0x0, 0x0, {0x6, 0x0, 0x8e4, 0x3}}, 0x20)

1m32.549684017s ago: executing program 32 (id=117):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x1}}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50}, 0x50)
write$FUSE_LK(r2, &(0x7f0000000340)={0x28, 0x0, 0x0, {{0x2, 0x0, 0x1}}}, 0x28)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
write$FUSE_IOCTL(r3, &(0x7f0000000180)={0x20, 0x0, 0x0, {0x6, 0x0, 0x8e4, 0x3}}, 0x20)

1m17.802707335s ago: executing program 0 (id=255):
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffc}, 0x0)
r0 = eventfd2(0x0, 0x0)
io_setup(0x6, &(0x7f0000000180)=<r1=>0x0)
ioprio_set$uid(0x3, 0x0, 0x0)
io_submit(r1, 0x1, &(0x7f0000002900)=[&(0x7f0000000200)={0x0, 0x0, 0x30, 0x7, 0x3511, r0, 0x0, 0x0, 0x0, 0x0, 0x1, r0}])

1m17.652590282s ago: executing program 0 (id=256):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0xa0, 0x30, 0x9, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_bpf={0x88, 0x1, 0x0, 0x0, {{0x8}, {0x60, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{0x3}, {}, {0x0, 0x0, 0x0, 0xd05}, {}, {}, {}, {0x6}]}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x0, 0x0, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa0}}, 0x0)

1m17.652305588s ago: executing program 0 (id=257):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f00000000c0)=0x1)
ioctl$VIDIOC_S_AUDIO(r0, 0x40345622, &(0x7f0000000040)={0x2, "984c323de8fed63723b821c9a59a4006f7fe408ee3314cad6c8ad393b58ba111", 0x2})

1m17.582186714s ago: executing program 0 (id=258):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000340)={[{@nojournal_checksum}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@dioread_nolock}, {@usrjquota}, {@oldalloc}, {@sysvgroups}]}, 0x2, 0x44a, &(0x7f0000000880)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, 0x0)

1m17.472714074s ago: executing program 0 (id=259):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001425000000120800030043000040a8002b000a00014006046109d67f6f94007134cf6ee0a000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88a2ddddbbb219c6c09136dd481c4a918d1bc", 0x6d}], 0x1}, 0x4004)
r0 = syz_usb_connect$cdc_ncm(0x0, 0x7a, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902680002010040000904000001020e0000052406000105240000000d240f0100000000000000000006241a0000000c241b4800050000050080050905810300020000000904010000020d00000904010102020d00000905"], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)

1m17.16558224s ago: executing program 0 (id=260):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x2900}})

1m17.117260638s ago: executing program 33 (id=260):
r0 = socket(0x10, 0x2, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x2900}})

17.67634184s ago: executing program 2 (id=847):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

17.580171785s ago: executing program 2 (id=848):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000001540)=ANY=[@ANYBLOB="180000000000000000000000000000001800000020646c2500000000e12036207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70b000000006fd685000000b4000000850000002300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

17.579982463s ago: executing program 2 (id=849):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080))

17.472034917s ago: executing program 2 (id=850):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$eJzs3U1rG0cfAPD/ynbenOeJAyG0PRRDDk1JI8d2X1LoIT2WNjTQ3lNhb0ywHAVLDrEbaHJoLr2UUCilgdIP0HuPoV+gnyLQBkIJpj30orLyylFsyZZtpVaq3w82mdldaXY0+x/PaCQUwMAaz/4pRLwcEV8nEcdajg1HfnB87bzVJ7dmsi2Jev2TP5JI8n3N85P8/9E881JE/PJlxJnC5nKryyvzpXI5XczzE7WF6xPV5ZWzVxdKc+lcem1qevr8W9NT777zds/q+vqlv777+MEH5786tfrtT4+O30viQhzNj7XWYw9ut2bGYzx/TUbiwoYTJ3tQWD9J9vsC2JWhPM5HIusDjsVQHvXAf98XEVEHBlQi/mFANccBzbl9j+bBL4zH769NgDbXf3jtvZE41JgbHVlNnpkZZfPdsR6Un5Xx8+/372Vb9O59CIBt3b4TEeeGhzf3f0ne/+3euS7O2VjGDvu/+g4vCWjxIBv/vNFu/FNYH/9Em/HPaJvY3Y3t47/wqAfFdJSN/95rO/5dX7QaG8pz/2uM+UaSK1fLada3/T8iTsfIwSy/1XrO+dWHHfup1vFftmXlN8eC+XU8Gj747GNmS7XSXurc6vGdiFfajn+T9fZP2rR/9npc6rKMk+n9Vzsd277+z1f9x4jX2rb/0xWtZOv1yYnG/TDRvCs2+/PuyV87lb/f9c/a/8jW9R9LWtdrqzsv44dDf6edju32/j+QfNpIH8j33SzVaouTEQeSjzbvn3r62Ga+eX5W/9Ontu7/2t3/hyPisy7rf/fE3Y6n9kP7z+6o/XeeePjh5993Kr+79n+zkTqd7+mm/+v2Avfy2gEAAAAAAEC/KUTE0UgKxfV0oVAsrn2+40QcKZQr1dqZK5Wla7PR+K7sWIwUmivdoy2fh5jMPw/bzE9tyE9HxPGI+GbocCNfnKmUZ/e78gAAAAAAAAAAAAAAAAAAANAnRjt8/z/z29B+Xx3w3PnJbxhc28Z/L37pCehL/v7D4BL/MLjEPwwu8Q+DS/zD4BL/MLjEPwwu8Q8AAAAAAAAAAAAAAAAAAAAAAAAAAAA9denixWyrrz65NZPlZ28sL81XbpydTavzxYWlmeJMZfF6ca5SmSunxZnKwnbPV65Urk9OxdLNiVparU1Ul1cuL1SWrtUuX10ozaWX05F/pVYAAAAAAAAAAAAAAAAAAADwYqkur8yXyuV0UUJiV4nh/rgMibVEM7D3/IT72y8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQKt/AgAA//+jgjYy")
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000001600)={[{@workdir={'workdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@redirect_dir_nofollow}, {@userxattr}], [], 0x2c})

17.416546148s ago: executing program 2 (id=851):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000016c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001509000000092140000001220f00090581d7"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000001980)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x0, 0x9, 0x6, "008000", "af85c62b"}}, 0x0}, 0x0)

17.049665798s ago: executing program 2 (id=854):
r0 = socket(0x200000000000011, 0x2, 0xd)
socket(0x200000000000011, 0x2, 0xd)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)

16.796987991s ago: executing program 34 (id=854):
r0 = socket(0x200000000000011, 0x2, 0xd)
socket(0x200000000000011, 0x2, 0xd)
bind$packet(r0, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14)

3.499940662s ago: executing program 4 (id=990):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f910, 0x8000, '\x00', @p_u32=&(0x7f0000000300)=0x1}})

3.499799915s ago: executing program 4 (id=991):
r0 = syz_open_dev$vim2m(&(0x7f0000000600), 0x0, 0x2)
ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000002c0)={0x2, @pix={0x7, 0x0, 0x33565348, 0x7, 0xfffffffb, 0x6, 0x5, 0x4, 0x0, 0x4, 0x0, 0x6}})

3.411330104s ago: executing program 4 (id=992):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x80000001, 0x4, 0x32, 0x0, 0xff}, 0x9c)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c)
sendto$inet6(r0, &(0x7f0000000080)='8', 0x1, 0x65014, &(0x7f0000000340)={0xa, 0x4e23, 0x5, @local, 0x7}, 0x1c)

2.46044983s ago: executing program 4 (id=1001):
syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0)
close(r0)

2.381705542s ago: executing program 4 (id=1003):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r0}, 0x10)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r1, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x71}], 0x1, 0xfffffffd, 0x0)

2.311350521s ago: executing program 4 (id=1004):
syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100001a77aa4094225b4210a20102030109022400010000000009"], 0x0)
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in={0x2, 0x4e21, @loopback}], 0x10)
sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000000)="fd", 0x1}], 0x1, 0x0, 0x0, 0x804c044}, 0x881)
socket$packet(0x11, 0x2, 0x300)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket(0x28, 0x5, 0x0)
socket(0x28, 0x5, 0x0)
bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48)
pselect6(0x40, &(0x7f00000001c0)={0x1, 0x9a8, 0x5, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x0, 0x1e}, 0x0, &(0x7f0000000000)={0x3ff, 0xfffffffffffffffe, 0x0, 0xa, 0x2, 0x1, 0x7}, 0x0, 0x0)
r1 = dup(r0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, 0x0, 0x106, 0x2}}, 0x20)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc)
write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000180)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x4}}, 0x29fdf)

2.241000907s ago: executing program 3 (id=1006):
r0 = io_uring_setup(0x1612, &(0x7f0000000200)={0x0, 0x0, 0x3040, 0x0, 0x97})
io_uring_register$IORING_REGISTER_BUFFERS2(r0, 0xf, &(0x7f0000001580)={0x2, 0x0, 0x0, &(0x7f0000001300)=[{0x0}, {&(0x7f0000000280)=""/4086, 0xff6}], 0x0}, 0x20)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00')
read$FUSE(r1, &(0x7f0000000400)={0x2020}, 0x2020)

2.180512103s ago: executing program 3 (id=1007):
socket$key(0xf, 0x3, 0x2)
r0 = socket$kcm(0x2b, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)}, 0x6000000)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(r0, 0x0, 0x20044818)
ioctl$FBIO_WAITFORVSYNC(0xffffffffffffffff, 0x40044620, 0x0)
unshare(0x20020680)
r4 = syz_io_uring_setup(0x10b, &(0x7f00000000c0)={0x0, 0x35c8, 0x4000, 0x80000001, 0x200000c}, 0x0, &(0x7f0000000280)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_LINKAT={0x27, 0x50, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)='./file0/../file0\x00', 0xffffffffffffffff, 0x0, 0x1})
io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', 0x800, &(0x7f0000000440)={[{@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@umask={'umask', 0x3d, 0x9}}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@errors_remount}, {}, {}, {@gid}, {@errors_remount}, {@discard}, {@errors_continue}]}, 0x5, 0x1515, &(0x7f0000000f40)="$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")
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)

1.288566712s ago: executing program 3 (id=1008):
setrlimit(0x40000000000008, &(0x7f0000000000)={0x4848, 0xfffffffffffff005})
capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000040))
syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x204, 0x10100}, 0x0, 0x0)

1.180020127s ago: executing program 3 (id=1010):
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"/2848], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffd78, 0x10, &(0x7f0000000000), 0x143}, 0x48)

851.992405ms ago: executing program 5 (id=1016):
r0 = socket$rxrpc(0x21, 0x2, 0xa)
r1 = syz_io_uring_setup(0x12ab, &(0x7f0000000140)={0x0, 0x7495, 0x0, 0x2, 0x1f7}, &(0x7f0000000380)=<r2=>0x0, &(0x7f0000000000)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r0, 0x80, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @private=0xa010102}}, 0x0, 0x0, 0x1})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0)

591.950628ms ago: executing program 5 (id=1017):
ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000800000000000000000000000000000002"])
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$sock_timeval(r0, 0x1, 0x2, 0x0, 0x0)
getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, &(0x7f0000000000)=""/140, &(0x7f00000000c0)=0x8c)

481.561169ms ago: executing program 5 (id=1018):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xa0020, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000100)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f00000000c0)='./file1\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x80049367, &(0x7f0000000000))

411.750211ms ago: executing program 5 (id=1019):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r0 = socket$packet(0x11, 0x3, 0x300)
getsockopt$packet_int(r0, 0x107, 0xc, 0x0, &(0x7f0000000240))

341.998194ms ago: executing program 5 (id=1020):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000003880)=ANY=[@ANYBLOB="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"/4545], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000001680)={@cgroup=r1, r0, 0x2f}, 0x20)
bpf$BPF_PROG_DETACH(0x9, &(0x7f00000008c0)={@cgroup=r0, r1, 0x2f, 0x2000, 0x4}, 0x20)

270.960758ms ago: executing program 5 (id=1021):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000100)='./file1\x00', 0x8c0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x1, 0x4423, &(0x7f0000004480)="$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")
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0)
setxattr$security_ima(&(0x7f0000000100)='./file1\x00', &(0x7f0000000140), &(0x7f00000013c0)=ANY=[], 0x700, 0x0)
setxattr$security_ima(&(0x7f0000000000)='./file1\x00', &(0x7f0000000080), &(0x7f0000000180)=@v2={0x3, 0x3, 0xc, 0x1800300, 0x28, "2fc859c96d45cbc2452d6e77b807275882dd4bc6e37a4cfa3f9248e8fb41b07cf9ed142de17923b0"}, 0xd7, 0x0)

147.720232ms ago: executing program 3 (id=1022):
syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
fsopen(0x0, 0x0)
r0 = fsopen(&(0x7f0000000100)='sysfs\x00', 0x1)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x10, 0x0, 0x0, 0x0, 0x2}, 0x94)
r1 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r1)
ptrace$setregs(0xd, r1, 0x0, &(0x7f00000003c0))
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0x1c, &(0x7f0000000040)=ANY=[@ANYRESDEC, @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000055090100000000009500000000000000b7020000000000007b88f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0], 0x0, 0x20, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
ptrace$getregset(0x4205, r1, 0x1, &(0x7f0000000080)={&(0x7f00000000c0)=""/120, 0x78})

0s ago: executing program 3 (id=1023):
syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000640)='./file1\x00', 0x3014850, &(0x7f0000001540)={[{@discard}, {@mblk_io_submit}, {@grpjquota}, {@quota}, {@nobarrier}]}, 0x3, 0x4c1, &(0x7f0000000680)="$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")
move_pages(0x0, 0x2064, &(0x7f0000000040)=[&(0x7f0000ff9000/0x2000)=nil], &(0x7f0000001180), &(0x7f0000000000), 0x0)

kernel console output (not intermixed with test programs):

netlink: 'syz.2.180': attribute type 10 has an invalid length.
[   84.692898][ T6344] 8021q: adding VLAN 0 to HW filter on device batadv0
[   84.700391][ T5997] usb 4-1: Using ep0 maxpacket: 32
[   84.705573][ T6344] bond0: (slave batadv0): Enslaving as an active interface with an up link
[   84.723582][ T6344] bond0: entered promiscuous mode
[   84.725610][ T6344] bond_slave_0: entered promiscuous mode
[   84.727978][ T6344] bond_slave_1: entered promiscuous mode
[   84.729979][ T6344] batadv0: entered promiscuous mode
[   84.774099][ T5997] usb 4-1: config 4 has an invalid interface number: 128 but max is 0
[   84.780703][ T5997] usb 4-1: config 4 has no interface number 0
[   84.787234][ T5997] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.791299][ T5997] usb 4-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.833645][ T5997] usb 4-1: New USB device found, idVendor=016d, idProduct=c314, bcdDevice= 0.00
[   84.838772][ T5997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.853362][ T5997] hub 4-1:4.128: USB hub found
[   85.447363][   T33] audit: type=1326 audit(1755506637.067:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6352 comm="syz.2.184" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ef8ebe9 code=0x7ffe0000
[   85.837544][ T5937] Bluetooth: hci0: command tx timeout
[   86.727689][ T6372] TCP: tcp_parse_options: Illegal window scaling value 236 > 14 received
[   86.786886][ T5997] hub 4-1:4.128: config failed, can't read hub descriptor (err -90)
[   86.818977][ T5997] usb 4-1: USB disconnect, device number 2
[   86.890364][ T6379] raw_sendmsg: syz.3.193 forgot to set AF_INET. Fix it!
[   87.224136][ T6394] loop3: detected capacity change from 0 to 2048
[   87.265340][ T6394] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   87.384621][ T6397] loop0: detected capacity change from 0 to 8192
[   87.452424][ T6397] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[   87.463390][ T6406] loop2: detected capacity change from 0 to 512
[   87.485857][ T6406] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   87.500200][ T6406] EXT4-fs (loop2): ext4_check_descriptors: Inode table for group 0 not in group (block 34)!
[   87.504538][ T6406] EXT4-fs (loop2): group descriptors corrupted!
[   87.519164][ T6397] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   87.526107][ T6397] ntfs3(loop0): Failed to load root (-22).
[   87.791052][ T6423] Zero length message leads to an empty skb
[   88.067536][ T5998] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   88.156246][ T6441] loop3: detected capacity change from 0 to 4096
[   88.230143][ T5998] usb 3-1: Using ep0 maxpacket: 8
[   88.238995][ T5998] usb 3-1: New USB device found, idVendor=a257, idProduct=2013, bcdDevice=54.48
[   88.243969][ T5998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.252497][ T6445] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.224'.
[   88.270109][ T5998] usb 3-1: config 0 descriptor??
[   88.738690][    T9] usb 3-1: USB disconnect, device number 2
[   88.847639][ T5997] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   88.996493][ T5997] usb 4-1: Using ep0 maxpacket: 16
[   89.000635][ T5997] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024
[   89.005563][ T5997] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024
[   89.010108][ T5997] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   89.014309][ T5997] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[   89.022937][ T5997] usb 4-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[   89.026929][ T5997] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.030395][ T5997] usb 4-1: Product: syz
[   89.032265][ T5997] usb 4-1: Manufacturer: syz
[   89.034337][ T5997] usb 4-1: SerialNumber: syz
[   89.039414][ T5997] usb 4-1: config 0 descriptor??
[   89.044594][ T6459] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   89.052920][    C0] port100 4-1:0.0: NFC: Urb failure (status -71)
[   89.056131][ T5997] port100 4-1:0.0: NFC: Could not get supported command types
[   89.282745][ T5997] usb 4-1: USB disconnect, device number 3
[   89.339392][ T6463] loop0: detected capacity change from 0 to 1024
[   89.373699][ T6463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   89.412164][ T5942] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   89.735122][ T6487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.240'.
[   89.742218][ T6487] netlink: 24 bytes leftover after parsing attributes in process `syz.0.240'.
[   89.756737][ T5997] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   89.894582][ T6497] loop0: detected capacity change from 0 to 128
[   89.902051][ T6497] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   89.909786][ T6497] ext4 filesystem being mounted at /70/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   90.564971][ T5997] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[   90.626115][ T5997] usb 3-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[   90.655925][ T5997] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66
[   90.664542][ T5997] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[   90.669538][ T5997] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[   90.709472][ T5997] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[   91.142501][ T6508] vim2m vim2m.0: vidioc_s_fmt queue busy
[   91.173152][ T5997] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[   91.175964][ T5942] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   91.176914][ T5997] usb 3-1: Product: syz
[   91.182250][ T5997] usb 3-1: Manufacturer: syz
[   91.207178][ T5997] cdc_wdm 3-1:1.0: skipping garbage
[   91.209465][ T5997] cdc_wdm 3-1:1.0: skipping garbage
[   91.218177][ T5997] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device
[   91.220862][ T5997] cdc_wdm 3-1:1.0: Unknown control protocol
[   91.330793][ T6518] netlink: 'syz.0.249': attribute type 2 has an invalid length.
[   91.431343][ T6524] loop0: detected capacity change from 0 to 512
[   91.436247][ T6524] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[   91.440664][ T6524] UDF-fs: Scanning with blocksize 512 failed
[   91.445521][ T6524] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[   91.449078][ T6524] UDF-fs: Scanning with blocksize 1024 failed
[   91.452796][ T6524] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[   91.456100][ T6524] UDF-fs: Scanning with blocksize 2048 failed
[   91.461449][ T6524] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   91.469960][ T6524] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   91.486506][ T5998] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[   91.647967][ T5998] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   91.651575][ T5998] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[   91.655966][ T5998] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[   91.660536][ T5998] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   91.663408][ T5998] usb 4-1: SerialNumber: syz
[   91.675074][    C1] cdc_wdm 3-1:1.0: Unexpected error -71
[   91.678072][    C1] cdc_wdm 3-1:1.0: nonzero urb status received: -71
[   91.680990][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - 0 bytes
[   91.681343][ T5997] usb 3-1: USB disconnect, device number 3
[   91.683351][    C1] cdc_wdm 3-1:1.0: wdm_int_callback - usb_submit_urb failed with result -19
[   91.809261][ T6538] loop0: detected capacity change from 0 to 512
[   91.819622][ T6538] EXT4-fs: Ignoring removed oldalloc option
[   91.834359][ T6538] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.258: Parent and EA inode have the same ino 15
[   91.842663][ T6538] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   91.848644][ T6538] EXT4-fs error (device loop0): ext4_xattr_inode_iget:433: comm syz.0.258: Parent and EA inode have the same ino 15
[   91.855967][ T6538] EXT4-fs (loop0): 1 orphan inode deleted
[   91.860049][ T6538] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   91.889691][ T5998] usb 4-1: 0:2 : does not exist
[   91.895457][ T5942] EXT4-fs error (device loop0): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[   91.913621][ T5942] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15
[   91.917439][ T5998] usb 4-1: USB disconnect, device number 4
[   91.924378][ T5942] EXT4-fs error (device loop0): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 15
[   91.940905][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[   92.175464][ T5942] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   92.185473][ T5721] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.257947][ T5721] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.321061][ T5721] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.383433][ T5721] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.506288][ T6543] syz.2.262 (6543) used obsolete PPPIOCDETACH ioctl
[   92.510698][   T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.516049][   T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.524361][   T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.526610][ T6547] loop3: detected capacity change from 0 to 64
[   92.531728][   T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.545143][   T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.682334][ T5721] bridge_slave_1: left allmulticast mode
[   92.684733][ T5721] bridge_slave_1: left promiscuous mode
[   92.687941][ T5721] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.729638][ T5721] bridge_slave_0: left allmulticast mode
[   92.732565][ T5721] bridge_slave_0: left promiscuous mode
[   92.735313][ T5721] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.739383][ T6553] atomic_op ffff88801ff00198 conn xmit_atomic 0000000000000000
[   92.893917][ T6562] netlink: 12 bytes leftover after parsing attributes in process `syz.2.271'.
[   92.917925][ T6563] netlink: 24 bytes leftover after parsing attributes in process `syz.3.270'.
[   93.116479][ T5721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   93.123928][ T5721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   93.133999][ T5721] bond0 (unregistering): Released all slaves
[   93.354872][ T6584] netlink: 36 bytes leftover after parsing attributes in process `syz.3.276'.
[   93.612358][ T6592] Illegal XDP return value 65535 on prog  (id 26) dev syz_tun, expect packet loss!
[   93.627751][ T5721] hsr_slave_0: left promiscuous mode
[   93.630703][ T5721] hsr_slave_1: left promiscuous mode
[   93.633572][ T5721] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.639412][ T5721] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.642772][ T6581] loop2: detected capacity change from 0 to 32768
[   93.643471][ T5721] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   93.652424][ T5721] batman_adv: batadv0: Removing interface: batadv_slave_1
[   93.665133][ T5721] veth1_macvtap: left promiscuous mode
[   93.668746][ T5721] veth0_macvtap: left promiscuous mode
[   93.671263][ T5721] veth1_vlan: left promiscuous mode
[   93.673621][ T5721] veth0_vlan: left promiscuous mode
[   94.046176][ T5721] team0 (unregistering): Port device team_slave_1 removed
[   94.077148][ T5721] team0 (unregistering): Port device team_slave_0 removed
[   94.396769][ T6596] netlink: 'syz.2.279': attribute type 3 has an invalid length.
[   94.407473][ T6596] netlink: 'syz.2.279': attribute type 3 has an invalid length.
[   94.622509][ T6544] chnl_net:caif_netlink_parms(): no params data found
[   94.627199][ T5937] Bluetooth: hci2: command tx timeout
[   94.852862][ T6620] cgroup: release_agent respecified
[   94.912398][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.920265][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.923513][ T6544] bridge_slave_0: entered allmulticast mode
[   94.929297][ T6544] bridge_slave_0: entered promiscuous mode
[   94.943853][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.956489][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.968185][ T6544] bridge_slave_1: entered allmulticast mode
[   94.971348][ T6544] bridge_slave_1: entered promiscuous mode
[   95.090426][ T6606] loop2: detected capacity change from 0 to 32768
[   95.108127][ T6606] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.283 (6606)
[   95.117432][ T6544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   95.140393][ T6606] BTRFS info (device loop2): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   95.144554][ T6606] BTRFS info (device loop2): using xxhash64 (xxhash64-generic) checksum algorithm
[   95.152585][ T6544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   95.187311][ T6606] BTRFS info (device loop2): disk space caching is enabled
[   95.190393][ T6606] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   95.279471][ T6606] BTRFS info (device loop2): rebuilding free space tree
[   95.292102][ T6606] BTRFS info (device loop2): disabling free space tree
[   95.295094][ T6606] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   95.299518][ T6606] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   95.313101][ T6606] BTRFS error: failed to open device for path ߖ|J,Q5zxyfnXRYIGEh"jc(_,``jfZaYb)JGO(E(.K(n722V!$.IE
[   95.313101][ T6606] /Luҙ157ŅOv7"#hٶ̞Q
[   95.313101][ T6606] )_`Q͈%xy,R9!R~he(!(}',vouʥ1EqrI)q ;rF7j(V4G7o0WU ~:`?o`jm>+F ^+"a؍mbPcC5neKA[vqׁ)*d1\XrBH' with flags 0x1: -2
[   95.370221][ T6544] team0: Port device team_slave_0 added
[   95.402055][ T5936] BTRFS info (device loop2): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   95.410766][ T6544] team0: Port device team_slave_1 added
[   95.599998][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_0
[   95.607685][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.651794][ T6544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   95.685748][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_1
[   95.728270][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   95.777750][ T6544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   96.014340][ T6544] hsr_slave_0: entered promiscuous mode
[   96.030603][ T6544] hsr_slave_1: entered promiscuous mode
[   96.049912][ T6544] debugfs: 'hsr0' already exists in 'hsr'
[   96.065569][ T6544] Cannot create hsr debugfs directory
[   96.223829][ T6669] loop2: detected capacity change from 0 to 2048
[   96.234053][ T6669] NILFS (loop2): invalid segment: Magic number mismatch
[   96.239822][ T6669] NILFS (loop2): trying rollback from an earlier position
[   96.252532][ T6669] NILFS (loop2): recovery complete
[   96.268234][ T6672] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   96.597670][ T6544] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   96.616196][ T6544] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   96.649473][ T6544] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   96.680945][ T6544] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   96.707405][ T5937] Bluetooth: hci2: command tx timeout
[   96.837699][ T6699] input: syz0 as /devices/virtual/input/input4
[   96.844270][ T6544] 8021q: adding VLAN 0 to HW filter on device bond0
[   96.890586][ T6544] 8021q: adding VLAN 0 to HW filter on device team0
[   96.912972][ T1946] bridge0: port 1(bridge_slave_0) entered blocking state
[   96.916078][ T1946] bridge0: port 1(bridge_slave_0) entered forwarding state
[   96.949042][ T1946] bridge0: port 2(bridge_slave_1) entered blocking state
[   96.952255][ T1946] bridge0: port 2(bridge_slave_1) entered forwarding state
[   97.190616][ T6544] 8021q: adding VLAN 0 to HW filter on device batadv0
[   97.558111][ T6695] loop2: detected capacity change from 0 to 40427
[   97.585760][ T6695] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[   97.611939][ T6695] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[   97.644665][ T6544] veth0_vlan: entered promiscuous mode
[   97.649912][ T6695] F2FS-fs (loop2): invalid crc_offset: 33558524
[   97.664988][ T6544] veth1_vlan: entered promiscuous mode
[   97.849832][ T6544] veth0_macvtap: entered promiscuous mode
[   97.877238][ T6544] veth1_macvtap: entered promiscuous mode
[   97.929723][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_0
[   97.954468][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_1
[   97.985083][ T5721] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   97.994578][ T5721] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   98.000100][ T6695] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   98.023040][ T5721] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   98.029627][ T6695] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[   98.032541][ T6695] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   98.032888][ T5721] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   98.350082][   T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.364046][   T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.511014][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   98.514283][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   98.798174][ T5937] Bluetooth: hci2: command tx timeout
[   99.039493][ T6751] loop2: detected capacity change from 0 to 1024
[   99.135622][ T6758] netlink: 'syz.4.307': attribute type 12 has an invalid length.
[   99.156160][ T6758] netlink: 120 bytes leftover after parsing attributes in process `syz.4.307'.
[  100.402960][ T6797] ./file0: Can't lookup blockdev
[  100.457538][ T6795] netlink: 104 bytes leftover after parsing attributes in process `syz.2.315'.
[  100.475785][ T6805] loop4: detected capacity change from 0 to 512
[  100.546217][ T6805] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.559475][ T6805] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  100.610951][ T6805] EXT4-fs (loop4): shut down requested (2)
[  100.636084][ T6544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.686500][ T5843] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  100.846616][ T5997] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  100.854487][ T5843] usb 4-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  100.864428][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.868183][ T5937] Bluetooth: hci2: command tx timeout
[  100.871766][ T5843] usb 4-1: Product: syz
[  100.876573][ T5843] usb 4-1: Manufacturer: syz
[  100.878635][ T5843] usb 4-1: SerialNumber: syz
[  100.885672][ T5843] usb 4-1: config 0 descriptor??
[  100.999593][ T5997] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86
[  101.007071][ T5997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  101.011469][ T5997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  101.019993][ T5997] usb 3-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87
[  101.025428][ T5997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.032058][ T5997] usb 3-1: Product: syz
[  101.033714][ T5997] usb 3-1: Manufacturer: syz
[  101.036164][ T5997] usb 3-1: SerialNumber: syz
[  101.041033][ T5997] usb 3-1: config 0 descriptor??
[  101.045123][ T5997] port100 3-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  101.252214][  T792] usb 3-1: USB disconnect, device number 4
[  101.927257][ T6856] loop2: detected capacity change from 0 to 32768
[  101.952874][ T6856] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  101.961644][ T6856] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  101.972912][ T6856] (syz.2.327,6856,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: rec_len is too small for name_len - offset=0, inode=65, rec_len=16, name_len=9
[  101.983075][ T6856] (syz.2.327,6856,1):ocfs2_prepare_dir_for_insert:4302 ERROR: status = -2
[  101.988683][ T6856] (syz.2.327,6856,1):ocfs2_mknod:301 ERROR: status = -2
[  101.991760][ T6856] (syz.2.327,6856,1):ocfs2_mknod:505 ERROR: status = -2
[  101.994621][ T6856] (syz.2.327,6856,1):ocfs2_mkdir:661 ERROR: status = -2
[  102.041388][ T5936] ocfs2: Unmounting device (7,2) on (node local)
[  102.104879][ T5843] usb 4-1: f81604_read: reg: 100e failed: -EPROTO
[  102.125691][ T5843] usb 4-1: f81604_read: reg: 200f failed: -EPROTO
[  102.132854][ T5843] usb 4-1: USB disconnect, device number 5
[  102.144513][ T5843] usb 4-1: f81604_read: reg: 100f failed: -ENODEV
[  102.188673][ T5592] usb 4-1: f81604_read: reg: 200f failed: -ENODEV
[  102.245246][ T5843] usb 4-1: f81604_read: reg: 200f failed: -ENODEV
[  102.402132][ T6865] loop2: detected capacity change from 0 to 32768
[  102.408784][ T6865] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.329 (6865)
[  102.433458][ T6865] BTRFS info (device loop2): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  102.439098][ T6865] BTRFS info (device loop2): using blake2b (blake2b-256-generic) checksum algorithm
[  102.442619][ T6865] BTRFS info (device loop2): using free-space-tree
[  102.602356][ T5936] BTRFS info (device loop2): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  103.109941][ T6917] openvswitch: netlink: Flow actions attr not present in new flow.
[  103.175902][ T6906] loop3: detected capacity change from 0 to 32768
[  103.214529][ T6906] (syz.3.334,6906,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  103.215112][ T6906] (syz.3.334,6906,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  103.225214][ T6906] JBD2: Ignoring recovery information on journal
[  103.234531][ T6922] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  103.256977][ T6906] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  103.364948][ T6927] (syz.3.334,6927,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  103.451723][ T6102] ocfs2: Unmounting device (7,3) on (node local)
[  103.540646][ T6936] netlink: 8 bytes leftover after parsing attributes in process `syz.3.343'.
[  103.612296][ T6940] loop3: detected capacity change from 0 to 4096
[  103.645986][ T6942] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  103.716513][ T5998] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  103.876470][ T5998] usb 5-1: Using ep0 maxpacket: 8
[  103.891861][ T5998] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  103.895737][ T5998] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.900149][ T5998] usb 5-1: Product: syz
[  103.902145][ T5998] usb 5-1: Manufacturer: syz
[  103.904498][ T5998] usb 5-1: SerialNumber: syz
[  103.917821][ T5998] usb 5-1: config 0 descriptor??
[  104.040711][ T6948] loop3: detected capacity change from 0 to 32768
[  104.044595][ T6948] btrfs: Deprecated parameter 'usebackuproot'
[  104.048014][ T6948] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  104.052445][ T6948] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.349 (6948)
[  104.067357][ T6948] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  104.071729][ T6948] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  104.076468][ T6948] BTRFS info (device loop3): using free-space-tree
[  104.106165][ T1949] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0
[  104.114140][ T6948] BTRFS error (device loop3): failed to load root extent
[  104.117778][ T6948] BTRFS warning (device loop3): try to load backup roots slot 1
[  104.121464][   T29] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0
[  104.133650][ T6948] BTRFS warning (device loop3): couldn't read tree root
[  104.137485][ T6948] BTRFS warning (device loop3): try to load backup roots slot 2
[  104.139165][ T5998] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  104.148285][ T1946] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1
[  104.155146][ T6948] BTRFS warning (device loop3): couldn't read tree root
[  104.158567][ T6948] BTRFS warning (device loop3): try to load backup roots slot 3
[  104.175037][ T6948] BTRFS info (device loop3): rebuilding free space tree
[  104.205582][ T6948] BTRFS info (device loop3): checking UUID tree
[  104.310419][ T6102] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  104.594519][ T6974] loop2: detected capacity change from 0 to 512
[  104.623854][ T6974] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  104.648418][ T6974] EXT4-fs warning (device loop2): dx_probe:837: inode #2: comm syz.2.352: Unimplemented hash flags: 0x0001
[  104.653589][ T6974] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.352: Corrupt directory, running e2fsck is recommended
[  104.746044][ T5936] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  104.748036][ T6970] loop3: detected capacity change from 0 to 32768
[  104.757399][ T6970] XFS: ikeep mount option is deprecated.
[  104.813598][ T6970] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  104.864658][ T6970] XFS (loop3): Ending clean mount
[  104.872511][ T6970] XFS (loop3): Quotacheck needed: Please wait.
[  104.900445][ T6970] XFS (loop3): Quotacheck: Done.
[  104.929693][ T6102] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  105.076637][ T5997] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  105.226517][ T5997] usb 3-1: Using ep0 maxpacket: 8
[  105.231746][ T5997] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  105.235464][ T5997] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  105.238845][ T5997] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  105.243447][ T5997] usb 3-1: config 1 interface 0 has no altsetting 1
[  105.251074][ T5997] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  105.254777][ T5997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.259521][ T5997] usb 3-1: Product: syz
[  105.261411][ T5997] usb 3-1: Manufacturer: syz
[  105.263386][ T5997] usb 3-1: SerialNumber: syz
[  105.278109][ T5997] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  105.367768][   T24] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  105.485031][ T5997] usb 3-1: USB disconnect, device number 5
[  105.516494][   T24] usb 4-1: Using ep0 maxpacket: 8
[  105.520638][   T24] usb 4-1: config 0 has an invalid interface number: 24 but max is 0
[  105.524218][   T24] usb 4-1: config 0 has no interface number 0
[  105.531889][   T24] usb 4-1: New USB device found, idVendor=050d, idProduct=0122, bcdDevice=5b.65
[  105.535890][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.539595][   T24] usb 4-1: Product: syz
[  105.541486][   T24] usb 4-1: Manufacturer: syz
[  105.543671][   T24] usb 4-1: SerialNumber: syz
[  105.550497][   T24] usb 4-1: config 0 descriptor??
[  105.561707][ T5998] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  105.570888][ T5998] usb 5-1: USB disconnect, device number 2
[  105.763061][   T24] pegasus 4-1:0.24: probe with driver pegasus failed with error -71
[  105.769884][   T24] usb 4-1: USB disconnect, device number 6
[  106.020352][ T6991] process 'syz.2.355' launched './file0' with NULL argv: empty string added
[  106.138485][ T6999] QAT: Device 7 not found
[  106.264759][ T7007] loop4: detected capacity change from 0 to 512
[  106.284093][ T7007] EXT4-fs: Ignoring removed i_version option
[  106.302419][ T7007] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  106.308590][ T7007] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  106.326267][ T7011] loop3: detected capacity change from 0 to 8
[  106.330879][ T7007] EXT4-fs (loop4): 1 truncate cleaned up
[  106.337795][ T7011] SQUASHFS error: lzo decompression failed, data probably corrupt
[  106.340841][ T7011] SQUASHFS error: Failed to read block 0x28d: -5
[  106.341736][ T7007] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  106.348965][ T7011] SQUASHFS error: Unable to read metadata cache entry [28b]
[  106.349969][   T24] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[  106.352166][ T7011] SQUASHFS error: Unable to read inode 0x11f
[  106.528288][   T24] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  106.536432][   T24] usb 3-1: New USB device found, idVendor=056a, idProduct=032b, bcdDevice= 0.00
[  106.540289][   T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  106.552282][   T24] usb 3-1: config 0 descriptor??
[  107.100130][ T7015] loop3: detected capacity change from 0 to 32768
[  107.198973][ T7015] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  107.208903][ T6544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.237861][ T7015] XFS (loop3): Ending clean mount
[  107.253141][ T7015] XFS (loop3): Quotacheck needed: Please wait.
[  107.265763][ T7015] XFS (loop3): Quotacheck: Done.
[  107.359452][   T24] usb 3-1: USB disconnect, device number 6
[  108.130070][ T6102] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  108.347299][ T7045] loop4: detected capacity change from 0 to 1024
[  108.371258][ T7045] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  108.376102][ T7045] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  108.401048][ T7045] EXT4-fs (loop4): stripe (248) is not aligned with cluster size (16), stripe is disabled
[  108.425117][ T7045] EXT4-fs (loop4): can't enable nombcache during remount
[  108.434082][ T7052] loop3: detected capacity change from 0 to 2048
[  108.458309][ T7052] NILFS (loop3): invalid segment: Magic number mismatch
[  108.462163][ T7052] NILFS (loop3): trying rollback from an earlier position
[  108.485233][ T7052] NILFS (loop3): recovery complete
[  108.493448][ T7055] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  108.507515][ T7054] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  109.424424][ T7067] loop2: detected capacity change from 0 to 8
[  109.426275][ T7065] loop3: detected capacity change from 0 to 512
[  109.435958][ T7065] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  109.509702][ T7065] EXT4-fs (loop3): 1 truncate cleaned up
[  109.553733][ T7065] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  109.594438][ T7010] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  109.809788][ T6102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  109.992474][ T6544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.262037][ T7085] syz.4.388 uses obsolete (PF_INET,SOCK_PACKET)
[  110.591497][ T7103] IPv6: sit1: Disabled Multicast RS
[  110.594576][ T7103] sit1: entered allmulticast mode
[  110.651841][ T7105] loop3: detected capacity change from 0 to 256
[  111.334860][ T7145] netlink: 20 bytes leftover after parsing attributes in process `syz.2.413'.
[  111.922522][ T7171] loop2: detected capacity change from 0 to 128
[  111.961597][ T7171] syz.2.422: attempt to access beyond end of device
[  111.961597][ T7171] loop2: rw=2049, sector=145, nr_sectors = 3 limit=128
[  112.045336][ T7171] syz.2.422: attempt to access beyond end of device
[  112.045336][ T7171] loop2: rw=2049, sector=161, nr_sectors = 8 limit=128
[  112.050999][ T7171] syz.2.422: attempt to access beyond end of device
[  112.050999][ T7171] loop2: rw=2049, sector=177, nr_sectors = 24 limit=128
[  112.056022][ T7171] syz.2.422: attempt to access beyond end of device
[  112.056022][ T7171] loop2: rw=2049, sector=209, nr_sectors = 8 limit=128
[  112.061711][ T7171] syz.2.422: attempt to access beyond end of device
[  112.061711][ T7171] loop2: rw=2049, sector=225, nr_sectors = 8 limit=128
[  112.075727][ T7171] syz.2.422: attempt to access beyond end of device
[  112.075727][ T7171] loop2: rw=2049, sector=241, nr_sectors = 8 limit=128
[  112.086481][ T7171] syz.2.422: attempt to access beyond end of device
[  112.086481][ T7171] loop2: rw=2049, sector=257, nr_sectors = 8 limit=128
[  112.090652][ T7171] syz.2.422: attempt to access beyond end of device
[  112.090652][ T7171] loop2: rw=2049, sector=273, nr_sectors = 8 limit=128
[  112.095096][ T7171] syz.2.422: attempt to access beyond end of device
[  112.095096][ T7171] loop2: rw=2049, sector=289, nr_sectors = 8 limit=128
[  112.110200][ T7171] syz.2.422: attempt to access beyond end of device
[  112.110200][ T7171] loop2: rw=2049, sector=305, nr_sectors = 8 limit=128
[  112.350758][ T7185] loop4: detected capacity change from 0 to 32768
[  112.357267][ T7185] (syz.4.425,7185,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  112.362997][ T7185] (syz.4.425,7185,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  112.385309][ T7185] JBD2: Ignoring recovery information on journal
[  112.458667][ T7185] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  112.466268][ T7185] (syz.4.425,7185,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x98842a5e, computed 0xe74db1cd. Applying ECC.
[  112.496908][ T7185] (syz.4.425,7185,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0x1cec3d0f, computed 0xd2ffbdfe. Applying ECC.
[  112.509840][ T7185] (syz.4.425,7185,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xdf8356d3, computed 0xb8c23ae4. Applying ECC.
[  112.515678][ T7185] (syz.4.425,7185,1):ocfs2_block_check_validate:416 ERROR: Fixed CRC32 failed: stored: 0xdf8356d3, computed 0x2acb7e3c
[  112.520847][ T7185] (syz.4.425,7185,1):ocfs2_read_quota_phys_block:160 ERROR: status = -5
[  112.524420][ T7185] (syz.4.425,7185,1):ocfs2_quota_read:201 ERROR: status = -5
[  112.527557][ T7185] Quota error (device loop4): find_block_dqentry: Can't read quota tree block 6
[  112.531317][ T7185] Quota error (device loop4): qtree_read_dquot: Can't read quota structure for id 0
[  112.535120][ T7185] (syz.4.425,7185,1):ocfs2_acquire_dquot:890 ERROR: status = -5
[  112.539609][ T7185] (syz.4.425,7185,1):ocfs2_mknod:317 ERROR: status = -5
[  112.542484][ T7185] (syz.4.425,7185,1):ocfs2_mknod:505 ERROR: status = -5
[  112.618296][ T6544] ocfs2: Unmounting device (7,4) on (node local)
[  113.154842][ T7197] loop2: detected capacity change from 0 to 32768
[  113.376930][   T10] usb 4-1: new full-speed USB device number 7 using dummy_hcd
[  113.541053][   T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0xC has invalid wMaxPacketSize 0
[  113.544367][   T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x84 has invalid wMaxPacketSize 0
[  113.551489][   T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x5 has invalid wMaxPacketSize 0
[  113.555152][   T10] usb 4-1: config 0 interface 0 has no altsetting 0
[  113.562379][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  113.566026][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.576753][   T10] usb 4-1: Product: syz
[  113.578261][   T10] usb 4-1: Manufacturer: syz
[  113.579839][   T10] usb 4-1: SerialNumber: syz
[  113.583966][   T10] usb 4-1: config 0 descriptor??
[  113.593540][   T10] em28xx 4-1:0.0: New device syz syz @ 12 Mbps (2040:0264, interface 0, class 0)
[  113.608488][   T10] em28xx 4-1:0.0: Device initialization failed.
[  113.614448][   T10] em28xx 4-1:0.0: Device must be connected to a high-speed USB 2.0 port.
[  113.724542][ T7264] netlink: 8 bytes leftover after parsing attributes in process `syz.4.444'.
[  113.745255][ T7251] loop2: detected capacity change from 0 to 32768
[  113.805779][  T792] usb 4-1: USB disconnect, device number 7
[  113.852080][ T7251] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  113.852100][ T7251]   allowing incompatible features above 0.0: (unknown version)
[  113.852133][ T7251]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  113.875969][ T7251] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  113.879682][ T7251] bcachefs (loop2): initializing new filesystem
[  113.893987][ T7251] bcachefs (loop2): going read-write
[  113.903066][ T7251] bcachefs (loop2): marking superblocks
[  113.927271][ T7251] bcachefs (loop2): initializing freespace
[  113.933532][ T7251] bcachefs (loop2): done initializing freespace
[  113.943992][ T7251] bcachefs (loop2): reading snapshots table
[  113.947644][ T7251] bcachefs (loop2): reading snapshots done
[  114.014052][ T7251] bcachefs (loop2): done starting filesystem
[  114.633972][ T7295] loop3: detected capacity change from 0 to 8
[  114.788357][ T7297] loop4: detected capacity change from 0 to 1024
[  114.851313][ T7299] netlink: 'syz.3.449': attribute type 5 has an invalid length.
[  114.906261][ T7251] syz.2.440 (7251) used greatest stack depth: 15896 bytes left
[  114.955869][ T5936] bcachefs (loop2): shutting down
[  114.981181][ T5936] bcachefs (loop2): going read-only
[  114.984130][ T5936] bcachefs (loop2): finished waiting for writes to stop
[  115.017889][ T5936] bcachefs (loop2): flushing journal and stopping allocators, journal seq 4
[  115.088960][ T5936] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[  115.097993][ T5936] bcachefs (loop2): clean shutdown complete, journal seq 5
[  115.101083][ T5936] bcachefs (loop2): marking filesystem clean
[  115.170850][ T5936] bcachefs (loop2): shutdown complete
[  115.223172][ T7312] netlink: 'syz.4.456': attribute type 5 has an invalid length.
[  116.070052][ T7330] netlink: 'syz.3.464': attribute type 6 has an invalid length.
[  116.354712][ T7336] loop3: detected capacity change from 0 to 4096
[  117.229432][ T7344] loop2: detected capacity change from 0 to 256
[  117.851712][ T7354] loop4: detected capacity change from 0 to 32768
[  117.950781][ T7354] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc64,noinodes_32bit,nocow
[  117.950798][ T7354]   allowing incompatible features above 0.0: (unknown version)
[  117.950805][ T7354]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  117.967904][ T7354] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  117.972572][ T7354] bcachefs (loop4): initializing new filesystem
[  118.330228][ T7354] bcachefs (loop4): going read-write
[  118.346504][ T7354] bcachefs (loop4): marking superblocks
[  118.367272][ T7354] bcachefs (loop4): initializing freespace
[  118.379226][ T7354] bcachefs (loop4): done initializing freespace
[  118.390252][ T7354] bcachefs (loop4): reading snapshots table
[  118.396735][ T7354] bcachefs (loop4): reading snapshots done
[  118.414498][ T7354] bcachefs (loop4):  loop4: Superblock write was silently dropped! (seq 0 expected 42)
[  118.420287][ T7354] bcachefs (loop4): done starting filesystem
[  118.528510][ T6544] bcachefs (loop4): shutting down
[  118.530905][ T6544] bcachefs (loop4): going read-only
[  118.534397][ T6544] bcachefs (loop4): finished waiting for writes to stop
[  118.539746][ T6544] bcachefs (loop4): flushing journal and stopping allocators, journal seq 2
[  118.571181][ T6544] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  118.575650][ T6544] bcachefs (loop4): clean shutdown complete, journal seq 4
[  118.580589][ T6544] bcachefs (loop4): marking filesystem clean
[  118.608135][ T6544] bcachefs (loop4): shutdown complete
[  118.786627][ T5997] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  118.814131][   T33] audit: type=1326 audit(1755506670.447:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.3.483" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c638ebe9 code=0x7ffc0000
[  118.823441][   T33] audit: type=1326 audit(1755506670.447:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.3.483" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c638ebe9 code=0x7ffc0000
[  118.834824][   T33] audit: type=1326 audit(1755506670.447:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.3.483" exe="/syz-executor" sig=0 arch=c000003e syscall=316 compat=0 ip=0x7f43c638ebe9 code=0x7ffc0000
[  118.845467][   T33] audit: type=1326 audit(1755506670.447:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7384 comm="syz.3.483" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c638ebe9 code=0x7ffc0000
[  118.936482][ T5997] usb 3-1: Using ep0 maxpacket: 8
[  118.942537][ T5997] usb 3-1: New USB device found, idVendor=06cd, idProduct=011a, bcdDevice=39.7d
[  118.946150][ T5997] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.962684][ T5997] usb 3-1: config 0 descriptor??
[  118.968602][ T5997] keyspan 3-1:0.0: Keyspan - (without firmware) converter detected
[  119.190720][ T5997] usb 3-1: USB disconnect, device number 7
[  119.206217][ T5997] keyspan 3-1:0.0: device disconnected
[  120.066680][ T5997] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  120.135478][ T7399] loop3: detected capacity change from 0 to 512
[  120.149416][ T7399] EXT4-fs: Ignoring removed bh option
[  120.159130][ T7399] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  120.197518][ T7399] EXT4-fs (loop3): 1 truncate cleaned up
[  120.202864][ T7399] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  120.216564][ T5997] usb 3-1: Using ep0 maxpacket: 16
[  120.237699][ T5997] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  120.244216][ T5997] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  120.249884][ T5997] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.254209][ T5997] usb 3-1: Product: syz
[  120.255987][ T5997] usb 3-1: Manufacturer: syz
[  120.258395][ T5997] usb 3-1: SerialNumber: syz
[  120.262779][ T5997] usb 3-1: config 0 descriptor??
[  120.269501][ T5997] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  120.276618][ T5997] em28xx 3-1:0.0: DVB interface 0 found: bulk
[  120.453647][ T7409] lo speed is unknown, defaulting to 1000
[  120.456126][ T7409] lo speed is unknown, defaulting to 1000
[  120.468287][ T7409] lo speed is unknown, defaulting to 1000
[  120.482104][ T7409] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  120.501487][ T7409] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[  120.592773][ T7409] lo speed is unknown, defaulting to 1000
[  120.599927][ T7409] lo speed is unknown, defaulting to 1000
[  120.605518][ T7409] lo speed is unknown, defaulting to 1000
[  120.839224][ T5997] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  120.903151][ T5997] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  120.910551][ T5997] em28xx 3-1:0.0: board has no eeprom
[  120.977244][ T5997] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  120.979903][ T5997] em28xx 3-1:0.0: dvb set to bulk mode.
[  120.981898][ T5843] em28xx 3-1:0.0: Binding DVB extension
[  121.025547][ T7394] loop2: detected capacity change from 0 to 1024
[  121.028916][ T5997] usb 3-1: USB disconnect, device number 8
[  121.031819][ T5997] em28xx 3-1:0.0: Disconnecting em28xx
[  121.060851][ T5843] em28xx 3-1:0.0: Registering input extension
[  121.065665][ T5997] em28xx 3-1:0.0: Closing input extension
[  121.076050][ T6102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.091567][ T7394] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.141757][ T5997] em28xx 3-1:0.0: Freeing device
[  121.264759][ T7438] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  121.285569][ T7438] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  121.370065][ T7439] uprobe: syz.3.504:7439 failed to unregister, leaking uprobe
[  121.396683][ T7435] loop4: detected capacity change from 0 to 32768
[  121.501352][ T7435] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  121.501365][ T7435]   allowing incompatible features above 0.0: (unknown version)
[  121.501369][ T7435]   features: 
[  121.515283][ T7435] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  121.518353][ T7435] bcachefs (loop4): initializing new filesystem
[  121.524690][ T7435] bcachefs (loop4): going read-write
[  121.531092][ T7435] bcachefs (loop4): marking superblocks
[  121.545200][ T7435] bcachefs (loop4): initializing freespace
[  121.553671][ T7435] bcachefs (loop4): done initializing freespace
[  121.561387][ T7435] bcachefs (loop4): reading snapshots table
[  121.563624][ T7435] bcachefs (loop4): reading snapshots done
[  121.584799][ T7435] bcachefs (loop4): done starting filesystem
[  121.629290][ T6544] bcachefs (loop4): shutting down
[  121.631433][ T6544] bcachefs (loop4): going read-only
[  121.633662][ T6544] bcachefs (loop4): finished waiting for writes to stop
[  121.639947][ T6544] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3
[  121.689996][ T5936] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  121.692635][ T6544] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 3
[  121.705643][ T6544] bcachefs (loop4): clean shutdown complete, journal seq 4
[  121.716542][ T5843] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  121.726682][ T6544] bcachefs (loop4): marking filesystem clean
[  121.752503][ T6544] bcachefs (loop4): shutdown complete
[  121.843142][ T7457] netlink: 20 bytes leftover after parsing attributes in process `syz.2.508'.
[  121.877671][ T5843] usb 4-1: Using ep0 maxpacket: 8
[  121.894143][ T5843] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  121.898770][ T5843] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.902234][ T5843] usb 4-1: Product: syz
[  121.904042][ T5843] usb 4-1: Manufacturer: syz
[  121.906129][ T5843] usb 4-1: SerialNumber: syz
[  121.916161][ T5843] usb 4-1: config 0 descriptor??
[  121.946946][ T5843] gspca_main: se401-2.14.0 probing 047d:5003
[  122.384424][ T5843] gspca_se401: Bayer format not supported!
[  122.652016][ T5997] usb 4-1: USB disconnect, device number 8
[  123.155404][ T7463] usb usb2: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[  123.161593][   T33] audit: type=1800 audit(1755506674.807:17): pid=7463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.511" name="file1" dev="tmpfs" ino=638 res=0 errno=0
[  123.348820][ T7478] netlink: 8 bytes leftover after parsing attributes in process `syz.3.517'.
[  123.688042][ T7499] loop4: detected capacity change from 0 to 1024
[  123.746921][   T33] audit: type=1800 audit(1755506675.357:18): pid=7499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.527" name="file1" dev="loop4" ino=20 res=0 errno=0
[  124.935612][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.539'.
[  125.001875][ T7533] loop3: detected capacity change from 0 to 64
[  125.241145][   T24] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  125.261559][ T7538] loop3: detected capacity change from 0 to 32768
[  125.281714][ T7538] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  125.312065][ T6102] ocfs2: Unmounting device (7,3) on (node local)
[  125.408162][   T24] usb 3-1: config 0 has an invalid interface number: 50 but max is 0
[  125.410984][   T24] usb 3-1: config 0 has no interface number 0
[  125.413039][   T24] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  125.426459][   T24] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64
[  125.432048][   T24] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  125.435382][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.446478][   T24] usb 3-1: Product: syz
[  125.448169][   T24] usb 3-1: Manufacturer: syz
[  125.451582][   T24] usb 3-1: SerialNumber: syz
[  125.457081][   T24] usb 3-1: config 0 descriptor??
[  125.461033][ T7534] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  125.479642][   T24] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0
[  125.532407][ T7542] loop4: detected capacity change from 0 to 40427
[  125.537698][ T7542] F2FS-fs (loop4): Invalid Fs Meta Ino: node(0) meta(2) root(0)
[  125.550245][ T7542] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  125.574227][ T7542] F2FS-fs (loop4): invalid crc value
[  125.614405][ T7556] loop3: detected capacity change from 0 to 512
[  125.640530][ T7542] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  125.649148][ T7542] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  125.652149][ T7542] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4
[  125.677629][ T7553] bio_check_eod: 86 callbacks suppressed
[  125.677638][ T7553] f2fs_ckpt-7:4: attempt to access beyond end of device
[  125.677638][ T7553] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  125.693739][   T24] usb 3-1: USB disconnect, device number 9
[  125.705257][ T7553] CPU: 0 UID: 0 PID: 7553 Comm: f2fs_ckpt-7:4 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  125.705269][ T7553] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  125.705273][ T7553] Call Trace:
[  125.705276][ T7553]  <TASK>
[  125.705279][ T7553]  dump_stack_lvl+0x189/0x250
[  125.705293][ T7553]  ? __pfx_dump_stack_lvl+0x10/0x10
[  125.705301][ T7553]  ? __pfx_queue_work_on+0x10/0x10
[  125.705329][ T7553]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  125.705338][ T7553]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  125.705351][ T7553]  f2fs_handle_critical_error+0x37c/0x540
[  125.705364][ T7553]  f2fs_write_end_io+0x886/0xb60
[  125.705378][ T7553]  __submit_merged_bio+0x27a/0x6a0
[  125.705395][ T7553]  __submit_merged_write_cond+0x255/0x530
[  125.705412][ T7553]  f2fs_write_data_pages+0x261d/0x3000
[  125.705447][ T7553]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  125.705487][ T7553]  ? __mod_zone_page_state+0xd7/0x140
[  125.705510][ T7553]  ? folios_put_refs+0x560/0x640
[  125.705529][ T7553]  ? __lock_acquire+0xab9/0xd20
[  125.705550][ T7553]  ? do_raw_spin_lock+0x121/0x290
[  125.705570][ T7553]  ? do_raw_spin_unlock+0x4d/0x240
[  125.705583][ T7553]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  125.705600][ T7553]  do_writepages+0x32e/0x550
[  125.705624][ T7553]  ? do_raw_spin_unlock+0x4d/0x240
[  125.705640][ T7553]  filemap_fdatawrite+0x199/0x240
[  125.705655][ T7553]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  125.705701][ T7553]  ? do_raw_spin_unlock+0x4d/0x240
[  125.705717][ T7553]  f2fs_sync_dirty_inodes+0x31f/0x830
[  125.705741][ T7553]  f2fs_write_checkpoint+0x95a/0x1df0
[  125.705766][ T7553]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  125.705800][ T7553]  ? down_write+0x162/0x1f0
[  125.705810][ T7553]  ? __pfx_down_write+0x10/0x10
[  125.705827][ T7553]  ? __pfx___schedule+0x10/0x10
[  125.705838][   T24] yurex 3-1:0.50: USB YUREX #0 now disconnected
[  125.705847][ T7553]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[  125.705863][ T7553]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  125.705887][ T7553]  issue_checkpoint_thread+0xd9/0x260
[  125.705899][ T7553]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  125.705911][ T7553]  ? __pfx_autoremove_wake_function+0x10/0x10
[  125.705927][ T7553]  ? __kthread_parkme+0x7b/0x200
[  125.705939][ T7553]  ? __kthread_parkme+0x1a1/0x200
[  125.705982][ T7553]  kthread+0x711/0x8a0
[  125.705999][ T7553]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  125.706011][ T7553]  ? __pfx_kthread+0x10/0x10
[  125.706026][ T7553]  ? _raw_spin_unlock_irq+0x23/0x50
[  125.706045][ T7553]  ? lockdep_hardirqs_on+0x9c/0x150
[  125.706059][ T7553]  ? __pfx_kthread+0x10/0x10
[  125.706074][ T7553]  ret_from_fork+0x3fc/0x770
[  125.706088][ T7553]  ? __pfx_ret_from_fork+0x10/0x10
[  125.706105][ T7553]  ? __switch_to_asm+0x39/0x70
[  125.706119][ T7553]  ? __switch_to_asm+0x33/0x70
[  125.706132][ T7553]  ? __pfx_kthread+0x10/0x10
[  125.706146][ T7553]  ret_from_fork_asm+0x1a/0x30
[  125.706173][ T7553]  </TASK>
[  125.712123][ T7553] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  126.184808][ T7577] loop4: detected capacity change from 0 to 256
[  126.195566][ T7577] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  126.213430][ T7577] exFAT-fs (loop4): start_clu is invalid cluster(0xffffffff)
[  126.222770][ T7578] netlink: 'syz.3.558': attribute type 2 has an invalid length.
[  126.451718][ T7582] warning: `syz.2.562' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[  127.414066][ T7593] loop4: detected capacity change from 0 to 32768
[  127.479778][ T7593] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  127.486192][ T7586] loop3: detected capacity change from 0 to 32768
[  127.536614][ T7586] ERROR: (device loop3): diRead: i_ino != di_number
[  127.536614][ T7586] 
[  127.563180][ T7593] XFS (loop4): Ending clean mount
[  127.821622][ T6544] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  128.281143][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.570'.
[  128.349326][ T7614] loop2: detected capacity change from 0 to 2048
[  128.379478][ T5933] udevd[5933]: incorrect nilfs2 checksum on /dev/loop2
[  128.386680][ T7606] loop4: detected capacity change from 0 to 65536
[  128.391387][ T7614] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  128.429792][ T7618] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  128.440489][ T7606] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  128.481004][ T7606] XFS (loop4): Ending clean mount
[  128.507016][   T33] audit: type=1800 audit(1755506680.137:19): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.568" name="file2" dev="loop4" ino=42 res=0 errno=0
[  128.528900][ T7618] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  128.534043][ T7618] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  128.558448][ T7618] Remounting filesystem read-only
[  128.562589][ T6544] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  128.569164][ T5936] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  129.128581][ T7624] loop3: detected capacity change from 0 to 40427
[  129.138950][ T7624] F2FS-fs (loop3): invalid crc value
[  129.175663][ T7635] loop4: detected capacity change from 0 to 32768
[  129.195418][ T7635] find_entry called with index = 0
[  129.198580][ T7635] read_mapping_page failed!
[  129.201193][ T7635] ERROR: (device loop4): txCommit: 
[  129.201193][ T7635] 
[  129.255633][ T7644] loop2: detected capacity change from 0 to 256
[  129.286982][ T7644] exfat: Deprecated parameter 'utf8'
[  129.301765][ T7624] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  129.314144][ T7644] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  129.322177][ T7624] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  129.397814][ T6102] syz-executor: attempt to access beyond end of device
[  129.397814][ T6102] loop3: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[  129.408654][ T6102] CPU: 1 UID: 0 PID: 6102 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  129.408676][ T6102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.408683][ T6102] Call Trace:
[  129.408697][ T6102]  <TASK>
[  129.408703][ T6102]  dump_stack_lvl+0x189/0x250
[  129.408725][ T6102]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.408739][ T6102]  ? __pfx_queue_work_on+0x10/0x10
[  129.408751][ T6102]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  129.408765][ T6102]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.408788][ T6102]  f2fs_handle_critical_error+0x37c/0x540
[  129.408808][ T6102]  f2fs_write_end_io+0x886/0xb60
[  129.408829][ T6102]  __submit_merged_bio+0x27a/0x6a0
[  129.408849][ T6102]  __submit_merged_write_cond+0x255/0x530
[  129.408868][ T6102]  f2fs_write_data_pages+0x261d/0x3000
[  129.408938][ T6102]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.408964][ T6102]  ? __pfx_usage_match+0x10/0x10
[  129.408975][ T6102]  ? __bfs+0x154/0x2a0
[  129.408983][ T6102]  ? __pfx_usage_match+0x10/0x10
[  129.409030][ T6102]  ? __lock_acquire+0xab9/0xd20
[  129.409053][ T6102]  ? do_raw_spin_lock+0x121/0x290
[  129.409074][ T6102]  ? do_raw_spin_unlock+0x4d/0x240
[  129.409088][ T6102]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.409104][ T6102]  do_writepages+0x32e/0x550
[  129.409127][ T6102]  ? do_raw_spin_unlock+0x4d/0x240
[  129.409143][ T6102]  filemap_fdatawrite+0x199/0x240
[  129.409160][ T6102]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  129.409206][ T6102]  ? preempt_schedule_thunk+0x16/0x30
[  129.409230][ T6102]  f2fs_sync_dirty_inodes+0x31f/0x830
[  129.409253][ T6102]  f2fs_write_checkpoint+0x95a/0x1df0
[  129.409282][ T6102]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  129.409329][ T6102]  ? kill_f2fs_super+0x298/0x6c0
[  129.409345][ T6102]  kill_f2fs_super+0x2c3/0x6c0
[  129.409361][ T6102]  ? __pfx_kill_f2fs_super+0x10/0x10
[  129.409370][ T6102]  ? radix_tree_delete_item+0x2b6/0x400
[  129.409391][ T6102]  ? shrinker_free+0x2ce/0x3e0
[  129.409406][ T6102]  deactivate_locked_super+0xbc/0x130
[  129.409422][ T6102]  cleanup_mnt+0x425/0x4c0
[  129.409436][ T6102]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.409453][ T6102]  task_work_run+0x1d4/0x260
[  129.409472][ T6102]  ? __pfx_task_work_run+0x10/0x10
[  129.409485][ T6102]  ? __x64_sys_umount+0x122/0x160
[  129.409504][ T6102]  ? exit_to_user_mode_loop+0x40/0x110
[  129.409523][ T6102]  exit_to_user_mode_loop+0xec/0x110
[  129.409539][ T6102]  do_syscall_64+0x2bd/0x3b0
[  129.409555][ T6102]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.409569][ T6102]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.409580][ T6102]  ? exc_page_fault+0x9f/0xf0
[  129.409596][ T6102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.409606][ T6102] RIP: 0033:0x7f43c638ff17
[  129.409618][ T6102] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  129.409628][ T6102] RSP: 002b:00007ffc52309f38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  129.409642][ T6102] RAX: 0000000000000000 RBX: 00007f43c6411c05 RCX: 00007f43c638ff17
[  129.409649][ T6102] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc52309ff0
[  129.409656][ T6102] RBP: 00007ffc52309ff0 R08: 0000000000000000 R09: 0000000000000000
[  129.409662][ T6102] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc5230b080
[  129.409670][ T6102] R13: 00007f43c6411c05 R14: 000000000001f8d5 R15: 00007ffc5230b0c0
[  129.409698][ T6102]  </TASK>
[  129.409703][ T6102] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  129.556841][ T6102] CPU: 0 UID: 0 PID: 6102 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  129.556858][ T6102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.556864][ T6102] Call Trace:
[  129.556868][ T6102]  <TASK>
[  129.556873][ T6102]  dump_stack_lvl+0x189/0x250
[  129.556893][ T6102]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.556947][ T6102]  ? __pfx_queue_work_on+0x10/0x10
[  129.556959][ T6102]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  129.556973][ T6102]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.556994][ T6102]  f2fs_handle_critical_error+0x37c/0x540
[  129.557015][ T6102]  f2fs_write_end_io+0x886/0xb60
[  129.557038][ T6102]  __submit_merged_bio+0x27a/0x6a0
[  129.557058][ T6102]  __submit_merged_write_cond+0x255/0x530
[  129.557075][ T6102]  f2fs_write_data_pages+0x261d/0x3000
[  129.557112][ T6102]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.557136][ T6102]  ? __pfx_usage_match+0x10/0x10
[  129.557145][ T6102]  ? __bfs+0x154/0x2a0
[  129.557152][ T6102]  ? __pfx_usage_match+0x10/0x10
[  129.557195][ T6102]  ? __lock_acquire+0xab9/0xd20
[  129.557216][ T6102]  ? do_raw_spin_lock+0x121/0x290
[  129.557236][ T6102]  ? do_raw_spin_unlock+0x4d/0x240
[  129.557250][ T6102]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.557265][ T6102]  do_writepages+0x32e/0x550
[  129.557288][ T6102]  ? do_raw_spin_unlock+0x4d/0x240
[  129.557304][ T6102]  filemap_fdatawrite+0x199/0x240
[  129.557320][ T6102]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  129.557366][ T6102]  ? preempt_schedule_thunk+0x16/0x30
[  129.557386][ T6102]  f2fs_sync_dirty_inodes+0x31f/0x830
[  129.557405][ T6102]  f2fs_write_checkpoint+0x95a/0x1df0
[  129.557433][ T6102]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  129.557474][ T6102]  ? kill_f2fs_super+0x298/0x6c0
[  129.557489][ T6102]  kill_f2fs_super+0x2c3/0x6c0
[  129.557505][ T6102]  ? __pfx_kill_f2fs_super+0x10/0x10
[  129.557514][ T6102]  ? radix_tree_delete_item+0x2b6/0x400
[  129.557535][ T6102]  ? shrinker_free+0x2ce/0x3e0
[  129.557548][ T6102]  deactivate_locked_super+0xbc/0x130
[  129.557563][ T6102]  cleanup_mnt+0x425/0x4c0
[  129.557577][ T6102]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.557595][ T6102]  task_work_run+0x1d4/0x260
[  129.557612][ T6102]  ? __pfx_task_work_run+0x10/0x10
[  129.557625][ T6102]  ? __x64_sys_umount+0x122/0x160
[  129.557644][ T6102]  ? exit_to_user_mode_loop+0x40/0x110
[  129.557662][ T6102]  exit_to_user_mode_loop+0xec/0x110
[  129.557678][ T6102]  do_syscall_64+0x2bd/0x3b0
[  129.557692][ T6102]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.557705][ T6102]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.557714][ T6102]  ? exc_page_fault+0x9f/0xf0
[  129.557727][ T6102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.557736][ T6102] RIP: 0033:0x7f43c638ff17
[  129.557746][ T6102] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  129.557754][ T6102] RSP: 002b:00007ffc52309f38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  129.557767][ T6102] RAX: 0000000000000000 RBX: 00007f43c6411c05 RCX: 00007f43c638ff17
[  129.557774][ T6102] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc52309ff0
[  129.557780][ T6102] RBP: 00007ffc52309ff0 R08: 0000000000000000 R09: 0000000000000000
[  129.557785][ T6102] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc5230b080
[  129.557792][ T6102] R13: 00007f43c6411c05 R14: 000000000001f8d5 R15: 00007ffc5230b0c0
[  129.557808][ T6102]  </TASK>
[  129.557812][ T6102] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  129.721956][ T6102] CPU: 0 UID: 0 PID: 6102 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  129.721973][ T6102] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  129.721979][ T6102] Call Trace:
[  129.721984][ T6102]  <TASK>
[  129.721990][ T6102]  dump_stack_lvl+0x189/0x250
[  129.722010][ T6102]  ? __pfx_dump_stack_lvl+0x10/0x10
[  129.722024][ T6102]  ? __pfx_queue_work_on+0x10/0x10
[  129.722036][ T6102]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  129.722050][ T6102]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  129.722074][ T6102]  f2fs_handle_critical_error+0x37c/0x540
[  129.722097][ T6102]  f2fs_write_end_io+0x886/0xb60
[  129.722124][ T6102]  __submit_merged_bio+0x27a/0x6a0
[  129.722146][ T6102]  __submit_merged_write_cond+0x255/0x530
[  129.722169][ T6102]  f2fs_write_data_pages+0x261d/0x3000
[  129.722216][ T6102]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.722245][ T6102]  ? __pfx_usage_match+0x10/0x10
[  129.722255][ T6102]  ? __bfs+0x154/0x2a0
[  129.722263][ T6102]  ? __pfx_usage_match+0x10/0x10
[  129.722321][ T6102]  ? __lock_acquire+0xab9/0xd20
[  129.722345][ T6102]  ? do_raw_spin_lock+0x121/0x290
[  129.722369][ T6102]  ? do_raw_spin_unlock+0x4d/0x240
[  129.722384][ T6102]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  129.722402][ T6102]  do_writepages+0x32e/0x550
[  129.722428][ T6102]  ? do_raw_spin_unlock+0x4d/0x240
[  129.722447][ T6102]  filemap_fdatawrite+0x199/0x240
[  129.722463][ T6102]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  129.722518][ T6102]  ? preempt_schedule_thunk+0x16/0x30
[  129.722542][ T6102]  f2fs_sync_dirty_inodes+0x31f/0x830
[  129.722569][ T6102]  f2fs_write_checkpoint+0x95a/0x1df0
[  129.722602][ T6102]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  129.722656][ T6102]  ? kill_f2fs_super+0x298/0x6c0
[  129.722687][ T6102]  kill_f2fs_super+0x2c3/0x6c0
[  129.722704][ T6102]  ? __pfx_kill_f2fs_super+0x10/0x10
[  129.722735][ T6102]  ? radix_tree_delete_item+0x2b6/0x400
[  129.722756][ T6102]  ? shrinker_free+0x2ce/0x3e0
[  129.722772][ T6102]  deactivate_locked_super+0xbc/0x130
[  129.722788][ T6102]  cleanup_mnt+0x425/0x4c0
[  129.722802][ T6102]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.722820][ T6102]  task_work_run+0x1d4/0x260
[  129.722839][ T6102]  ? __pfx_task_work_run+0x10/0x10
[  129.722852][ T6102]  ? __x64_sys_umount+0x122/0x160
[  129.722872][ T6102]  ? exit_to_user_mode_loop+0x40/0x110
[  129.722917][ T6102]  exit_to_user_mode_loop+0xec/0x110
[  129.722942][ T6102]  do_syscall_64+0x2bd/0x3b0
[  129.722957][ T6102]  ? lockdep_hardirqs_on+0x9c/0x150
[  129.722972][ T6102]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.722983][ T6102]  ? exc_page_fault+0x9f/0xf0
[  129.723000][ T6102]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  129.723011][ T6102] RIP: 0033:0x7f43c638ff17
[  129.723022][ T6102] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  129.723031][ T6102] RSP: 002b:00007ffc52309f38 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  129.723044][ T6102] RAX: 0000000000000000 RBX: 00007f43c6411c05 RCX: 00007f43c638ff17
[  129.723051][ T6102] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc52309ff0
[  129.723058][ T6102] RBP: 00007ffc52309ff0 R08: 0000000000000000 R09: 0000000000000000
[  129.723065][ T6102] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffc5230b080
[  129.723072][ T6102] R13: 00007f43c6411c05 R14: 000000000001f8d5 R15: 00007ffc5230b0c0
[  129.723095][ T6102]  </TASK>
[  129.736441][ T6102] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  130.340646][ T7651] Bluetooth: MGMT ver 1.23
[  130.603205][ T7660] loop2: detected capacity change from 0 to 512
[  130.623541][ T7660] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  130.629831][ T7660] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[  130.632990][ T7660] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.587: Corrupt directory, running e2fsck is recommended
[  130.709714][ T7663] 9pnet_fd: Insufficient options for proto=fd
[  130.740219][ T7663] loop3: detected capacity change from 0 to 16
[  130.759634][ T7663] erofs (device loop3): EXPERIMENTAL EROFS subpage compressed block support in use. Use at your own risk!
[  130.765989][ T7663] erofs (device loop3): mounted with root inode @ nid 36.
[  130.857734][ T7660] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117
[  130.860814][ T7660] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.587: corrupted in-inode xattr: invalid ea_ino
[  130.869105][ T7660] EXT4-fs (loop2): Remounting filesystem read-only
[  130.872045][ T7660] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.878265][ T7660] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  130.882456][ T7660] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[  130.886151][ T7660] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.587: Corrupt directory, running e2fsck is recommended
[  130.894605][ T7660] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  130.899215][ T7660] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[  130.903492][ T7660] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.587: Corrupt directory, running e2fsck is recommended
[  130.908849][ T5997] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  130.913010][ T7660] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  130.918544][ T7660] EXT4-fs warning (device loop2): dx_probe:849: Enable large directory feature to access it
[  130.922328][ T7660] EXT4-fs warning (device loop2): dx_probe:934: inode #2: comm syz.2.587: Corrupt directory, running e2fsck is recommended
[  130.928523][ T7660] EXT4-fs warning (device loop2): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  130.949034][ T5936] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.995008][ T7665] loop2: detected capacity change from 0 to 1024
[  131.004800][   T33] audit: type=1800 audit(1755506682.647:20): pid=7665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.588" name="file1" dev="loop2" ino=20 res=0 errno=0
[  131.058643][ T5997] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  131.062504][ T5997] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  131.076410][ T5997] usb 5-1: New USB device found, idVendor=046d, idProduct=ca04, bcdDevice= 0.00
[  131.088010][ T5997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.097226][ T5997] usb 5-1: config 0 descriptor??
[  131.100155][ T7656] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  131.347595][ T7667] loop2: detected capacity change from 0 to 32768
[  131.359132][ T7667] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.589 (7667)
[  131.399823][ T7667] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  131.420998][ T7667] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  131.424832][ T7667] BTRFS info (device loop2): using free-space-tree
[  131.512057][ T5997] logitech 0003:046D:CA04.0002: bogus close delimiter
[  131.518127][ T5997] logitech 0003:046D:CA04.0002: item 0 4 2 10 parsing failed
[  131.521399][ T5997] logitech 0003:046D:CA04.0002: parse failed
[  131.523588][ T5997] logitech 0003:046D:CA04.0002: probe with driver logitech failed with error -22
[  131.582857][ T7667] BTRFS info (device loop2): rebuilding free space tree
[  131.723082][ T5997] usb 5-1: USB disconnect, device number 3
[  132.061364][ T5936] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  132.714939][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.718837][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.737302][ T7718] loop2: detected capacity change from 0 to 512
[  132.741538][ T7718] EXT4-fs: Ignoring removed orlov option
[  132.747070][ T7718] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[  132.757181][ T7718] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  132.761806][ T7718] EXT4-fs error (device loop2): ext4_iget_extra_inode:5104: inode #15: comm syz.2.604: corrupted in-inode xattr: e_value size too large
[  132.771883][ T7718] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.604: couldn't read orphan inode 15 (err -117)
[  132.778443][ T7718] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  132.840715][ T5936] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.845762][ T7721] loop3: detected capacity change from 0 to 4096
[  132.899269][ T7725] program syz.2.607 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  133.097768][ T7731] loop2: detected capacity change from 0 to 4096
[  133.180539][ T7738] loop3: detected capacity change from 0 to 512
[  133.184438][ T7738] EXT4-fs: Ignoring removed mblk_io_submit option
[  133.206591][ T7738] EXT4-fs: inline encryption not supported
[  133.212313][ T7738] EXT4-fs: Ignoring removed mblk_io_submit option
[  133.215772][ T7738] EXT4-fs: Ignoring removed nomblk_io_submit option
[  133.243532][ T7738] EXT4-fs (loop3): Test dummy encryption mode enabled
[  133.251923][ T7738] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  133.283549][ T7738] EXT4-fs (loop3): 1 truncate cleaned up
[  133.288021][ T7738] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  133.411590][ T7749] netlink: 4 bytes leftover after parsing attributes in process `syz.3.611'.
[  134.827719][ T6102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  134.838754][ T7781] netlink: 12 bytes leftover after parsing attributes in process `syz.4.629'.
[  134.912499][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.630'.
[  134.918970][ T7766] loop2: detected capacity change from 0 to 32768
[  134.929958][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.3.630'.
[  134.951717][ T7766] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  134.987923][ T7766] XFS (loop2): Ending clean mount
[  134.997911][ T7766] XFS (loop2): Quotacheck needed: Please wait.
[  135.018227][ T7766] XFS (loop2): Quotacheck: Done.
[  135.043684][ T5936] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  135.140227][ T7803] netlink: 'syz.4.634': attribute type 3 has an invalid length.
[  135.202215][ T7801] loop3: detected capacity change from 0 to 4096
[  135.261015][ T7808] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  135.276522][   T33] audit: type=1800 audit(1755506686.897:21): pid=7801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.632" name="file1" dev="loop3" ino=15 res=0 errno=0
[  135.424412][ T7818] loop2: detected capacity change from 0 to 1764
[  135.473840][ T7822] loop4: detected capacity change from 0 to 8
[  135.486910][ T7822] SQUASHFS error: xz decompression failed, data probably corrupt
[  135.499297][ T7822] SQUASHFS error: Failed to read block 0x108: -5
[  135.501885][ T7822] SQUASHFS error: Unable to read metadata cache entry [106]
[  135.504648][ T7822] SQUASHFS error: Unable to read inode 0x11f
[  135.558299][ T7824] 9pnet: Found fid 0 not clunked
[  135.805209][ T7814] loop3: detected capacity change from 0 to 32768
[  135.864606][ T7814] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  135.926751][ T7814] XFS (loop3): Ending clean mount
[  135.933284][ T7814] XFS (loop3): Quotacheck needed: Please wait.
[  135.961587][ T7814] XFS (loop3): Quotacheck: Done.
[  136.000977][ T6102] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  136.103658][ T7834] loop2: detected capacity change from 0 to 32768
[  136.116520][ T5997] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  136.169603][ T7834] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  136.237067][ T7834] XFS (loop2): Ending clean mount
[  136.249786][ T7834] XFS (loop2): Quotacheck needed: Please wait.
[  136.266520][ T5997] usb 5-1: Using ep0 maxpacket: 16
[  136.275896][ T5997] usb 5-1: config 0 has an invalid interface number: 63 but max is 0
[  136.283271][ T7834] XFS (loop2): Quotacheck: Done.
[  136.287040][ T5997] usb 5-1: config 0 has no interface number 0
[  136.290031][ T5997] usb 5-1: config 0 interface 63 altsetting 150 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.294938][ T5997] usb 5-1: config 0 interface 63 altsetting 150 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.299768][ T5997] usb 5-1: config 0 interface 63 altsetting 150 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  136.315577][ T5997] usb 5-1: config 0 interface 63 has no altsetting 0
[  136.325082][ T5997] usb 5-1: New USB device found, idVendor=28bd, idProduct=0909, bcdDevice= 0.00
[  136.337571][ T5997] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.352529][ T5997] usb 5-1: config 0 descriptor??
[  136.369382][   T33] audit: type=1400 audit(1755506688.007:22): apparmor="DENIED" operation="stack_onexec" class="file" info="label not found" error=-2 profile="unconfined" name="#(%#{//&@\)//&" pid=7857 comm="syz.3.651"
[  136.437186][ T5936] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  136.921323][ T5997] uclogic 0003:28BD:0909.0003: interface is invalid, ignoring
[  137.009504][   T47] usb 5-1: USB disconnect, device number 4
[  137.248606][ T7874] loop2: detected capacity change from 0 to 32768
[  137.256613][ T7874] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.658 (7874)
[  137.356643][ T7874] BTRFS info (device loop2 state S): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  137.361234][ T7874] BTRFS info (device loop2 state S): using blake2b (blake2b-256-generic) checksum algorithm
[  137.379289][ T7874] BTRFS info (device loop2 state S): using free-space-tree
[  137.464519][   T26] BTRFS warning (device loop2 state S): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0x752e265ca9724eb47c3236b0e85f876d1222941063a0a0afe40232d9dc9ca6dd level 0, ignored
[  137.490706][  T804] BTRFS warning (device loop2 state CS): checksum verify failed on logical 5328896 mirror 1 wanted 0xe27e479340067083b74b333c1de55c530774f48d9bb4dbb5f2229db663324412 found 0x95f62be744ba79d2c7edda0b7f35c3ed250500c283e6cfbf6ba5d84a2ae65a3d level 1, ignored
[  137.511545][  T804] BTRFS error (device loop2 state CS): level verify failed on logical 5328896 mirror 1 wanted 0 found 1
[  137.608818][ T5936] BTRFS info (device loop2 state CS): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  137.779209][ T7897] loop4: detected capacity change from 0 to 32768
[  137.793025][ T7897] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.661 (7897)
[  137.821934][ T7897] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  137.848907][ T7897] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  137.852658][ T7897] BTRFS info (device loop4): using free-space-tree
[  137.900655][ T7906] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.664'.
[  137.987342][ T7897] BTRFS info (device loop4): rebuilding free space tree
[  138.213651][   T12] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  138.227239][ T7900] loop2: detected capacity change from 0 to 32768
[  138.242443][ T7900] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.662 (7900)
[  138.291363][ T7900] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  138.302034][ T7900] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  138.312238][ T7900] BTRFS info (device loop2): disk space caching is enabled
[  138.315460][ T7900] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  138.329546][ T6544] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  138.441250][ T7900] BTRFS info (device loop2): rebuilding free space tree
[  138.469028][ T7900] BTRFS info (device loop2): disabling free space tree
[  138.472081][ T7900] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  138.476126][ T7900] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  138.615154][ T5936] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  139.024427][ T7963] netlink: 4 bytes leftover after parsing attributes in process `syz.4.674'.
[  139.443683][ T7969] loop3: detected capacity change from 0 to 32768
[  139.461204][ T7977] loop4: detected capacity change from 0 to 2048
[  139.470911][ T7977] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  139.471372][ T7969] ocfs2: Mounting device (7,3) on (node local, slot 0) with writeback data mode.
[  139.549549][ T6102] ocfs2: Unmounting device (7,3) on (node local)
[  139.949372][   T47] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  140.096643][   T47] usb 4-1: Using ep0 maxpacket: 16
[  140.101322][   T47] usb 4-1: config 0 has an invalid interface number: 157 but max is 0
[  140.106262][   T47] usb 4-1: config 0 has no interface number 0
[  140.109440][   T47] usb 4-1: config 0 interface 157 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  140.113981][   T47] usb 4-1: config 0 interface 157 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  140.121064][   T47] usb 4-1: New USB device found, idVendor=058f, idProduct=9720, bcdDevice=fb.74
[  140.125184][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.129105][ T8000] sp0: Synchronizing with TNC
[  140.131314][   T47] usb 4-1: Product: syz
[  140.133659][   T47] usb 4-1: Manufacturer: syz
[  140.135750][   T47] usb 4-1: SerialNumber: syz
[  140.149676][   T47] usb 4-1: config 0 descriptor??
[  140.152695][ T7988] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  140.156138][ T7988] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  140.163495][   T47] pl2303 4-1:0.157: required interrupt-in endpoint missing
[  140.367366][ T5843] usb 4-1: USB disconnect, device number 9
[  140.715899][ T8012] loop4: detected capacity change from 0 to 1024
[  140.733430][ T8012] syz.4.695: attempt to access beyond end of device
[  140.733430][ T8012] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  140.742440][ T8012] syz.4.695: attempt to access beyond end of device
[  140.742440][ T8012] loop4: rw=0, sector=5778, nr_sectors = 2 limit=1024
[  141.074572][ T8026] netlink: 20 bytes leftover after parsing attributes in process `syz.2.701'.
[  141.222477][ T8024] loop4: detected capacity change from 0 to 4096
[  141.647864][ T8023] loop3: detected capacity change from 0 to 32768
[  141.775240][ T8023] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[  141.775261][ T8023]   allowing incompatible features above 0.0: (unknown version)
[  141.775267][ T8023]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  141.798111][ T8023] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  141.800872][ T8023] bcachefs (loop3): initializing new filesystem
[  141.811079][ T8023] bcachefs (loop3): going read-write
[  141.820143][ T8023] bcachefs (loop3): marking superblocks
[  141.841986][ T8023] bcachefs (loop3): initializing freespace
[  141.847510][ T8023] bcachefs (loop3): done initializing freespace
[  141.852630][ T8023] bcachefs (loop3): reading snapshots table
[  141.854573][ T8023] bcachefs (loop3): reading snapshots done
[  141.871217][ T8023] bcachefs (loop3): done starting filesystem
[  141.946104][ T6102] bcachefs (loop3): shutting down
[  141.948479][ T6102] bcachefs (loop3): going read-only
[  141.950665][ T6102] bcachefs (loop3): finished waiting for writes to stop
[  141.954404][ T6102] bcachefs (loop3): flushing journal and stopping allocators, journal seq 2
[  141.984509][ T6102] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 3
[  141.993852][ T6102] bcachefs (loop3): clean shutdown complete, journal seq 4
[  141.998959][ T6102] bcachefs (loop3): marking filesystem clean
[  142.021228][ T6102] bcachefs (loop3): shutdown complete
[  142.741267][ T8057] loop4: detected capacity change from 0 to 128
[  142.892871][ T8065] C: renamed from team_slave_0 (while UP)
[  142.905254][ T8065] netlink: 'syz.4.715': attribute type 2 has an invalid length.
[  142.910198][ T8065] netlink: 116 bytes leftover after parsing attributes in process `syz.4.715'.
[  142.914073][ T8065] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  143.146158][ T8075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.719'.
[  143.193928][ T5937] Bluetooth: hci2: link tx timeout
[  143.197704][ T5937] Bluetooth: hci2: killing stalled connection 11:aa:aa:aa:aa:aa
[  143.311490][ T8087] loop4: detected capacity change from 0 to 128
[  143.328823][ T8087] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  143.333671][ T8087] ext4 filesystem being mounted at /158/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  143.364656][ T6544] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  143.376426][   T47] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  143.408145][ T8091] loop4: detected capacity change from 0 to 1024
[  143.443098][ T8091] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  143.490462][ T6544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  143.536120][   T47] usb 4-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  143.540847][   T47] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.543888][   T47] usb 4-1: Product: syz
[  143.545436][   T47] usb 4-1: Manufacturer: syz
[  143.548880][   T47] usb 4-1: SerialNumber: syz
[  143.552573][   T47] usb 4-1: config 0 descriptor??
[  143.566908][   T47] gspca_main: sunplus-2.14.0 probing 055f:c230
[  143.816511][   T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  143.964783][   T47] gspca_sunplus: reg_r err -71
[  143.967092][   T47] sunplus 4-1:0.0: probe with driver sunplus failed with error -71
[  143.973133][   T47] usb 4-1: USB disconnect, device number 10
[  143.986571][   T24] usb 5-1: Using ep0 maxpacket: 32
[  143.993242][   T24] usb 5-1: config 0 has an invalid interface number: 89 but max is 0
[  143.997177][   T24] usb 5-1: config 0 has no interface number 0
[  143.999805][   T24] usb 5-1: config 0 interface 89 has no altsetting 0
[  144.004940][   T24] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e
[  144.010554][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  144.014519][   T24] usb 5-1: Product: syz
[  144.017696][   T24] usb 5-1: Manufacturer: syz
[  144.020227][   T24] usb 5-1: SerialNumber: syz
[  144.029384][   T24] usb 5-1: config 0 descriptor??
[  144.036270][   T24] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89)
[  144.046885][   T24] em28xx 5-1:0.89: Video interface 89 found: bulk
[  144.101181][ T8101] loop2: detected capacity change from 0 to 4096
[  144.104790][ T8101] EXT4-fs: Ignoring removed mblk_io_submit option
[  144.122560][ T8101] EXT4-fs (loop2): Test dummy encryption mode enabled
[  144.137467][ T8101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  144.173249][ T5936] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.818731][   T24] em28xx 5-1:0.89: unknown em28xx chip ID (0)
[  144.944342][ T8121] netlink: 44 bytes leftover after parsing attributes in process `syz.3.737'.
[  144.949801][ T8121] netlink: 28 bytes leftover after parsing attributes in process `syz.3.737'.
[  145.237205][ T5998] IPVS: starting estimator thread 0...
[  145.241377][ T8127] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold
[  145.276669][   T10] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  145.279402][ T5937] Bluetooth: hci2: command 0x0406 tx timeout
[  145.336969][ T8128] IPVS: using max 80 ests per chain, 192000 per kthread
[  145.426445][   T10] usb 4-1: Using ep0 maxpacket: 32
[  145.430238][   T10] usb 4-1: config 0 has an invalid interface number: 8 but max is 0
[  145.436429][   T10] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  145.440369][   T10] usb 4-1: config 0 has no interface number 0
[  145.442699][   T10] usb 4-1: config 0 interface 8 altsetting 248 endpoint 0x2 has an invalid bInterval 0, changing to 7
[  145.457413][   T24] em28xx 5-1:0.89: failed to get i2c transfer status from bridge register (error=-5)
[  145.462083][   T10] usb 4-1: config 0 interface 8 altsetting 248 has 2 endpoint descriptors, different from the interface descriptor's value: 10
[  145.462799][   T24] em28xx 5-1:0.89: board has no eeprom
[  145.476649][   T10] usb 4-1: config 0 interface 8 has no altsetting 0
[  145.480908][   T10] usb 4-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=2d.bb
[  145.484509][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  145.496750][   T10] usb 4-1: Product: syz
[  145.498381][   T10] usb 4-1: Manufacturer: syz
[  145.500171][   T10] usb 4-1: SerialNumber: syz
[  145.504754][   T10] usb 4-1: config 0 descriptor??
[  145.526486][   T24] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67)
[  145.529592][   T24] em28xx 5-1:0.89: analog set to bulk mode.
[  145.546735][ T5998] em28xx 5-1:0.89: Registering V4L2 extension
[  145.550304][   T24] usb 5-1: USB disconnect, device number 5
[  145.565473][   T24] em28xx 5-1:0.89: Disconnecting em28xx
[  145.588363][ T5998] em28xx 5-1:0.89: Config register raw data: 0xffffffed
[  145.591607][ T5998] em28xx 5-1:0.89: AC97 chip type couldn't be determined
[  145.594489][ T5998] em28xx 5-1:0.89: No AC97 audio processor
[  145.612405][ T5998] usb 5-1: Decoder not found
[  145.614358][ T5998] em28xx 5-1:0.89: failed to create media graph
[  145.618760][ T5998] em28xx 5-1:0.89: V4L2 device video103 deregistered
[  145.623915][ T5998] em28xx 5-1:0.89: Registering snapshot button...
[  145.632319][ T5998] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input8
[  145.632985][ T8136] loop2: detected capacity change from 0 to 32768
[  145.640190][ T5998] em28xx 5-1:0.89: Remote control support is not available for this card.
[  145.644156][   T24] em28xx 5-1:0.89: Closing input extension
[  145.647645][   T24] em28xx 5-1:0.89: Deregistering snapshot button
[  145.659305][ T8136] (syz.2.744,8136,0):ocfs2_verify_userspace_stack:858 ERROR: cluster stack passed to mount, but this filesystem does not support it
[  145.671373][ T8136] (syz.2.744,8136,0):ocfs2_fill_super:1177 ERROR: status = -22
[  145.680478][   T24] em28xx 5-1:0.89: Freeing device
[  145.767271][   T10] ath6kl: Failed to submit usb control message: -71
[  145.769965][   T10] ath6kl: unable to send the bmi data to the device: -71
[  145.789278][   T10] ath6kl: Unable to send get target info: -71
[  145.808809][   T10] ath6kl: Failed to init ath6kl core: -71
[  145.819215][   T10] ath6kl_usb 4-1:0.8: probe with driver ath6kl_usb failed with error -71
[  145.835477][   T10] usb 4-1: USB disconnect, device number 11
[  146.248034][ T8149] loop4: detected capacity change from 0 to 32768
[  146.288705][ T8149] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  146.309607][ T8149] XFS (loop4): Ending clean mount
[  146.314046][ T8149] XFS (loop4): Quotacheck needed: Please wait.
[  146.347841][ T8149] XFS (loop4): Quotacheck: Done.
[  146.395989][ T6544] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  146.622392][ T8166] cgroup: Invalid name
[  146.835458][ T8181] netlink: 20 bytes leftover after parsing attributes in process `syz.3.757'.
[  146.939732][ T8187] netlink: 'syz.4.761': attribute type 2 has an invalid length.
[  146.988243][ T8189] loop3: detected capacity change from 0 to 1024
[  147.164547][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.759'.
[  147.170893][ T8180] netlink: 12 bytes leftover after parsing attributes in process `syz.2.759'.
[  147.212185][ T8196] loop3: detected capacity change from 0 to 4096
[  147.356858][ T5843] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  147.506610][ T5843] usb 5-1: Using ep0 maxpacket: 16
[  147.510985][ T5843] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  147.526206][ T5843] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  147.533903][ T8211] mmap: syz.3.770 (8211) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  147.534001][ T5843] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  147.554566][ T5843] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  147.564453][ T5843] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  147.579034][ T5843] usb 5-1: Product: syz
[  147.580938][ T5843] usb 5-1: Manufacturer: syz
[  147.582993][ T5843] usb 5-1: SerialNumber: syz
[  147.828433][ T5998] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  147.987070][ T5998] usb 3-1: Using ep0 maxpacket: 32
[  147.994290][ T5998] usb 3-1: config 4 has an invalid interface number: 128 but max is 0
[  147.999323][ T5998] usb 3-1: config 4 has no interface number 0
[  148.001912][ T5998] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  148.013926][ T5843] usb 5-1: 0:2 : does not exist
[  148.016835][ T5998] usb 3-1: config 4 interface 128 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  148.020826][ T5998] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  148.025445][ T5998] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  148.034133][ T5998] hub 3-1:4.128: USB hub found
[  148.114838][ T8235] loop3: detected capacity change from 0 to 512
[  148.147844][ T8235] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.783: invalid indirect mapped block 4294967295 (level 1)
[  148.159596][ T8235] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.783: invalid indirect mapped block 4294967295 (level 1)
[  148.168203][ T8235] EXT4-fs (loop3): 2 truncates cleaned up
[  148.171676][ T8235] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  148.217732][ T6102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  148.253209][ T5998] hub 3-1:4.128: 2 ports detected
[  148.255458][ T5998] hub 3-1:4.128: Using single TT (err -22)
[  148.268163][ T8240] loop3: detected capacity change from 0 to 8
[  148.279511][ T8240] SQUASHFS error: zlib decompression failed, data probably corrupt
[  148.291334][ T8240] SQUASHFS error: Failed to read block 0x9b: -5
[  148.296133][ T8240] SQUASHFS error: Unable to read metadata cache entry [99]
[  148.306961][ T8240] SQUASHFS error: Unable to read inode 0x127
[  148.457887][ T5998] hub 3-1:4.128: hub_hub_status failed (err = -71)
[  148.460915][ T5998] hub 3-1:4.128: config failed, can't get hub status (err -71)
[  148.501119][ T5998] usb 3-1: USB disconnect, device number 10
[  148.605611][ T8250] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  148.643887][ T5843] usb 5-1: USB disconnect, device number 6
[  148.668999][ T5933] udevd[5933]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  149.042285][ T8256] /dev/nullb0: Can't open blockdev
[  149.109941][ T8260] loop2: detected capacity change from 0 to 1024
[  149.148405][ T8260] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  149.284755][ T5936] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  149.288977][ T8272] netlink: 'syz.4.800': attribute type 10 has an invalid length.
[  149.307853][ T8272] macvlan1: entered allmulticast mode
[  149.361447][ T8272] veth1_vlan: entered allmulticast mode
[  149.380355][ T8272] team0: Port device macvlan1 added
[  149.522028][ T8276] loop3: detected capacity change from 0 to 32768
[  149.560043][ T8276] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  149.659224][ T6102] ocfs2: Unmounting device (7,3) on (node local)
[  150.322464][ T8307] netlink: 9 bytes leftover after parsing attributes in process `syz.3.816'.
[  150.326237][ T8307] 0: renamed from hsr0 (while UP)
[  150.352408][ T8307] 0: entered allmulticast mode
[  150.354285][ T8307] hsr_slave_0: entered allmulticast mode
[  150.366146][ T8307] hsr_slave_1: entered allmulticast mode
[  150.371027][ T8307] A link change request failed with some changes committed already. Interface 70 may have been left with an inconsistent configuration, please check.
[  150.396667][   T33] audit: type=1326 audit(1755506702.027:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.2.815" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ef8ebe9 code=0x7ffc0000
[  150.405989][   T33] audit: type=1326 audit(1755506702.027:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.2.815" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ef8ebe9 code=0x7ffc0000
[  150.416307][   T33] audit: type=1326 audit(1755506702.037:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.2.815" exe="/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f9c3ef8ebe9 code=0x7ffc0000
[  150.423783][   T33] audit: type=1326 audit(1755506702.037:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.2.815" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ef8ebe9 code=0x7ffc0000
[  150.440573][   T33] audit: type=1326 audit(1755506702.047:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8308 comm="syz.2.815" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c3ef8ebe9 code=0x7ffc0000
[  150.968829][ T8331] loop4: detected capacity change from 0 to 256
[  150.974897][ T8331] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  150.989062][ T8331] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  151.019708][ T8331] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  151.083789][   T33] audit: type=1800 audit(1755506702.717:28): pid=8331 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.827" name="control" dev="loop4" ino=1048651 res=0 errno=0
[  151.408667][ T8356] netlink: 'syz.4.839': attribute type 10 has an invalid length.
[  151.418775][ T8344] loop2: detected capacity change from 0 to 32768
[  151.420294][ T8356] team0: Port device geneve1 added
[  151.454943][ T8344] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  151.496637][   T12] (kworker/u8:0,12,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #72: rec_len % 4 != 0 - offset=16, inode=66, rec_len=491, name_len=2
[  151.543182][ T8360] team0: entered promiscuous mode
[  151.546701][ T5936] ocfs2: Unmounting device (7,2) on (node local)
[  151.549100][ T8360] C: entered promiscuous mode
[  151.551720][ T8360] team_slave_1: entered promiscuous mode
[  151.554235][ T8360] macvlan1: entered promiscuous mode
[  151.558510][ T8360] geneve1: entered promiscuous mode
[  151.562346][ T8360] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  151.574262][ T8360] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  151.599811][ T5997] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  151.779779][ T5997] usb 4-1: config 8 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  151.783922][ T5997] usb 4-1: config 8 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  151.792492][ T5997] usb 4-1: config 8 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  151.797518][ T5997] usb 4-1: New USB device found, idVendor=07b5, idProduct=0312, bcdDevice= 0.00
[  151.800476][ T5997] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.906237][ T8381] loop2: detected capacity change from 0 to 1024
[  151.929746][ T8381] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  152.011588][ T5936] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  152.021411][ T5936] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[  152.245742][ T5997] megaworld 0003:07B5:0312.0004: hidraw0: USB HID v0.00 Device [HID 07b5:0312] on usb-dummy_hcd.3-1/input0
[  152.250231][ T5997] megaworld 0003:07B5:0312.0004: no inputs found
[  152.252079][ T5936] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  152.318825][ T5951] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.423728][ T5951] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.437512][ T5998] usb 4-1: USB disconnect, device number 12
[  152.564522][ T5951] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.770295][ T5951] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  152.959064][ T5951] bridge_slave_1: left allmulticast mode
[  152.961229][ T5951] bridge_slave_1: left promiscuous mode
[  152.964276][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state
[  152.965803][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  152.973939][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  152.978754][ T5951] bridge_slave_0: left allmulticast mode
[  152.979970][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  152.980607][ T5951] bridge_slave_0: left promiscuous mode
[  152.987119][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  152.987315][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state
[  152.993558][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  153.275198][ T8404] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  153.634156][ T5951] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  153.638276][ T5951] bond_slave_0: left promiscuous mode
[  153.642197][ T5951] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  153.645096][ T5951] bond_slave_1: left promiscuous mode
[  153.648411][ T5951] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  153.651185][ T5951] batadv0: left promiscuous mode
[  153.653645][ T5951] bond0 (unregistering): Released all slaves
[  154.054327][ T5951] hsr_slave_0: left promiscuous mode
[  154.059030][ T5951] hsr_slave_1: left promiscuous mode
[  154.061799][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  154.064685][ T8415] loop3: detected capacity change from 0 to 32768
[  154.064992][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_0
[  154.075806][ T5951] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  154.081258][ T5951] batman_adv: batadv0: Removing interface: batadv_slave_1
[  154.103259][ T5951] veth1_macvtap: left promiscuous mode
[  154.105985][ T5951] veth0_macvtap: left promiscuous mode
[  154.108181][ T8415] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  154.108912][ T5951] veth1_vlan: left promiscuous mode
[  154.114592][ T5951] veth0_vlan: left promiscuous mode
[  154.126196][ T8415] XFS (loop3): Ending clean mount
[  154.160295][ T6102] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  154.280047][ T8432] binder: 8431:8432 ioctl c00c6211 ffffffffffffffff returned -14
[  154.408070][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.3.865'.
[  154.638322][ T8446] loop3: detected capacity change from 0 to 32768
[  154.642533][ T8446] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.869 (8446)
[  154.664946][ T8446] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  154.670412][ T8446] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  154.681739][ T8446] BTRFS info (device loop3): using free-space-tree
[  154.750622][ T8446] BTRFS info (device loop3): rebuilding free space tree
[  154.800925][ T5951] team0 (unregistering): Port device team_slave_1 removed
[  154.870768][ T5951] team0 (unregistering): Port device team_slave_0 removed
[  154.974245][ T6102] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  155.033274][ T5937] Bluetooth: hci1: command tx timeout
[  155.477747][ T8392] chnl_net:caif_netlink_parms(): no params data found
[  155.532744][ T8472] loop4: detected capacity change from 0 to 1024
[  155.825252][ T8392] bridge0: port 1(bridge_slave_0) entered blocking state
[  155.830625][ T8392] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.833162][ T8487] loop3: detected capacity change from 0 to 47
[  155.841130][ T8392] bridge_slave_0: entered allmulticast mode
[  155.866128][ T8392] bridge_slave_0: entered promiscuous mode
[  155.883845][ T8392] bridge0: port 2(bridge_slave_1) entered blocking state
[  155.896824][ T8392] bridge0: port 2(bridge_slave_1) entered disabled state
[  155.899530][ T8392] bridge_slave_1: entered allmulticast mode
[  155.918675][ T8392] bridge_slave_1: entered promiscuous mode
[  155.924819][ T5951] IPVS: stop unused estimator thread 0...
[  156.012772][ T8392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  156.034028][ T8392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  156.103698][ T8392] team0: Port device team_slave_0 added
[  156.115529][ T8392] team0: Port device team_slave_1 added
[  156.172163][ T8392] batman_adv: batadv0: Adding interface: batadv_slave_0
[  156.176745][ T8392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.190268][ T8392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  156.199420][ T8392] batman_adv: batadv0: Adding interface: batadv_slave_1
[  156.202396][ T8392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  156.216243][ T8392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  156.295607][ T8392] hsr_slave_0: entered promiscuous mode
[  156.302560][ T8392] hsr_slave_1: entered promiscuous mode
[  156.589150][ T8392] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  156.598874][ T8392] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  156.605661][ T8392] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  156.629970][ T8392] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  156.803788][ T8392] 8021q: adding VLAN 0 to HW filter on device bond0
[  156.843255][ T8392] 8021q: adding VLAN 0 to HW filter on device team0
[  156.854020][  T804] bridge0: port 1(bridge_slave_0) entered blocking state
[  156.857037][  T804] bridge0: port 1(bridge_slave_0) entered forwarding state
[  156.870134][   T64] bridge0: port 2(bridge_slave_1) entered blocking state
[  156.872921][   T64] bridge0: port 2(bridge_slave_1) entered forwarding state
[  157.108861][ T5937] Bluetooth: hci1: command tx timeout
[  157.110105][ T8542] loop4: detected capacity change from 0 to 2048
[  157.114605][ T8545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.889'.
[  157.181924][ T8392] 8021q: adding VLAN 0 to HW filter on device batadv0
[  157.214894][ T8542] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  157.239867][ T8542] ext4 filesystem being mounted at /197/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.276815][ T5937] Bluetooth: hci2: unexpected event for opcode 0x200a
[  157.318904][ T6544] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.502474][ T8392] veth0_vlan: entered promiscuous mode
[  157.512783][ T8392] veth1_vlan: entered promiscuous mode
[  157.523805][ T8569] loop4: detected capacity change from 0 to 2048
[  157.535300][ T8569] ext4: Unknown parameter 'subj_user'
[  157.579308][ T8392] veth0_macvtap: entered promiscuous mode
[  157.584996][ T8392] veth1_macvtap: entered promiscuous mode
[  157.637460][ T8392] batman_adv: batadv0: Interface activated: batadv_slave_0
[  157.648295][ T8392] batman_adv: batadv0: Interface activated: batadv_slave_1
[  157.655551][   T12] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  157.665208][   T12] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  157.689553][   T12] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  157.711725][   T12] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  157.735354][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.739225][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.782065][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  157.785780][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  157.905489][ T5983] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  158.166436][ T5983] usb 5-1: Using ep0 maxpacket: 8
[  158.172402][ T5983] usb 5-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d
[  158.176140][ T5983] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  158.179795][ T5983] usb 5-1: Product: syz
[  158.181644][ T5983] usb 5-1: Manufacturer: syz
[  158.183632][ T5983] usb 5-1: SerialNumber: syz
[  158.191284][ T5983] usb 5-1: config 0 descriptor??
[  158.198657][ T5983] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  158.519806][   T33] audit: type=1326 audit(1755506710.117:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.3.896" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c638ebe9 code=0x7ffc0000
[  158.578014][   T33] audit: type=1326 audit(1755506710.117:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.3.896" exe="/syz-executor" sig=0 arch=c000003e syscall=66 compat=0 ip=0x7f43c638ebe9 code=0x7ffc0000
[  158.593135][   T33] audit: type=1326 audit(1755506710.117:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.3.896" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c638ebe9 code=0x7ffc0000
[  158.615708][   T33] audit: type=1326 audit(1755506710.117:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8597 comm="syz.3.896" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f43c638ebe9 code=0x7ffc0000
[  159.196769][ T5937] Bluetooth: hci1: command tx timeout
[  159.477621][ T5983] input: sonixj as /devices/platform/dummy_hcd.4/usb5/5-1/input/input9
[  159.672867][   T10] usb 5-1: USB disconnect, device number 7
[  160.002444][ T8639] loop3: detected capacity change from 0 to 32768
[  160.011201][ T8639] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.911 (8639)
[  160.018065][ T8639] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  160.021689][ T8639] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  160.025096][ T8639] BTRFS info (device loop3): using free-space-tree
[  160.090003][ T6102] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  160.298617][ T8663] mmap: syz.4.914 (8663): VmData 175878144 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[  160.521734][ T8674] netlink: 508 bytes leftover after parsing attributes in process `syz.3.918'.
[  161.164361][ T8704] netlink: 10 bytes leftover after parsing attributes in process `syz.5.931'.
[  161.266679][ T5937] Bluetooth: hci1: command tx timeout
[  162.133238][ T8723] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes.
[  162.441175][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'.
[  162.647714][ T8754] loop3: detected capacity change from 0 to 8
[  162.662938][ T8754] SQUASHFS error: Unable to read directory block [1d0:62]
[  162.671719][ T8756] netlink: 'syz.4.955': attribute type 2 has an invalid length.
[  162.768545][ T8765] loop3: detected capacity change from 0 to 256
[  162.789997][ T8765] exFAT-fs (loop3): failed to load upcase table (idx : 0x00011a39, chksum : 0xd54015fb, utbl_chksum : 0xe619d30d)
[  162.858841][ T5843] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[  163.016632][ T5843] usb 6-1: Using ep0 maxpacket: 32
[  163.021758][ T5843] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  163.026074][ T5843] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  163.031275][ T5843] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  163.038673][ T5843] usb 6-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  163.042324][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  163.045679][ T5843] usb 6-1: Product: syz
[  163.047720][ T5843] usb 6-1: Manufacturer: syz
[  163.049831][ T5843] usb 6-1: SerialNumber: syz
[  163.063413][ T5843] input: appletouch as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/input/input10
[  163.116467][   T10] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  163.268837][  T792] usb 6-1: USB disconnect, device number 2
[  163.276796][   T10] usb 4-1: Using ep0 maxpacket: 16
[  163.285342][   T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  163.292034][   T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  163.299760][  T792] appletouch 6-1:1.0: input: appletouch disconnected
[  163.306988][   T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  163.311481][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.315191][   T10] usb 4-1: Product: syz
[  163.318772][   T10] usb 4-1: Manufacturer: syz
[  163.320524][   T10] usb 4-1: SerialNumber: syz
[  163.324681][   T10] usb 4-1: config 0 descriptor??
[  163.332688][   T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  163.335754][   T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  163.934887][   T10] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  164.056984][  T792] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[  164.136634][   T10] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  164.142218][   T10] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  164.144698][   T10] em28xx 4-1:0.0: No AC97 audio processor
[  164.153150][   T10] usb 4-1: USB disconnect, device number 13
[  164.158764][   T10] em28xx 4-1:0.0: Disconnecting em28xx
[  164.169408][   T10] em28xx 4-1:0.0: Freeing device
[  164.207867][  T792] usb 6-1: config 220 has an invalid interface number: 76 but max is 2
[  164.210670][  T792] usb 6-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  164.213570][  T792] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  164.220644][  T792] usb 6-1: config 220 has no interface number 2
[  164.222862][  T792] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  164.227495][  T792] usb 6-1: config 220 interface 0 has no altsetting 0
[  164.231228][  T792] usb 6-1: config 220 interface 76 has no altsetting 0
[  164.233500][  T792] usb 6-1: config 220 interface 1 has no altsetting 0
[  164.238849][  T792] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  164.241925][  T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  164.244927][  T792] usb 6-1: Product: syz
[  164.247208][  T792] usb 6-1: Manufacturer: syz
[  164.249123][  T792] usb 6-1: SerialNumber: syz
[  164.301022][ T8802] netlink: 16 bytes leftover after parsing attributes in process `syz.4.974'.
[  164.479067][  T792] usb 6-1: Found UVC 7.01 device syz (8086:0b07)
[  164.481378][  T792] usb 6-1: No valid video chain found.
[  164.483328][  T792] usb 6-1: selecting invalid altsetting 0
[  164.508792][  T792] usb 6-1: selecting invalid altsetting 0
[  164.511719][  T792] usbtest 6-1:220.1: probe with driver usbtest failed with error -22
[  164.515819][  T792] usb 6-1: USB disconnect, device number 3
[  164.628079][   T33] audit: type=1326 audit(1755506716.267:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8816 comm="syz.4.979" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe32fd8ebe9 code=0x0
[  164.811360][ T8821] loop3: detected capacity change from 0 to 32768
[  164.823374][ T8821] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  164.832998][ T8821] XFS (loop3): Ending clean mount
[  164.837777][ T8821] XFS (loop3): Quotacheck needed: Please wait.
[  164.858516][ T8821] XFS (loop3): Quotacheck: Done.
[  164.874965][ T6102] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  165.096806][ T8838] loop3: detected capacity change from 0 to 2048
[  165.119497][ T8838] UDF-fs: error (device loop3): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4
[  165.126801][ T8838] UDF-fs: warning (device loop3): udf_fill_super: No fileset found
[  165.183409][ T8842] loop3: detected capacity change from 0 to 4096
[  165.188728][ T8842] ntfs3(loop3): ino=3, Correct links count -> 2.
[  165.494349][ T8846] netlink: 'syz.4.987': attribute type 10 has an invalid length.
[  165.622052][ T8846] team0 (unregistering): left promiscuous mode
[  165.624631][ T8846] C: left promiscuous mode
[  165.626739][ T8846] team_slave_1: left promiscuous mode
[  165.629270][ T8846] macvlan1: left promiscuous mode
[  165.631530][ T8846] geneve1: left promiscuous mode
[  165.643703][ T8846] bond0: (slave macvlan2): Releasing backup interface
[  165.659538][ T8846] team0 (unregistering): Port device C removed
[  165.669238][ T8846] team0 (unregistering): Port device team_slave_1 removed
[  165.672887][ T8846] veth1_vlan: left allmulticast mode
[  165.681376][ T8846] team0 (unregistering): Port device macvlan1 removed
[  165.693615][ T8846] team0 (unregistering): Port device geneve1 removed
[  166.009689][ T8857] sctp: Trying to GSO but underlying device doesn't support it.
[  166.083359][ T8863] netlink: 1041 bytes leftover after parsing attributes in process `syz.3.994'.
[  166.172292][ T8868] netlink: 8 bytes leftover after parsing attributes in process `syz.5.998'.
[  166.234162][ T8871] loop5: detected capacity change from 0 to 512
[  166.267028][ T8871] EXT4-fs: Ignoring removed oldalloc option
[  166.276578][ T8871] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode
[  166.294224][ T8871] EXT4-fs (loop5): 1 truncate cleaned up
[  166.302650][ T8871] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.318478][   T33] audit: type=1800 audit(1755506717.957:34): pid=8871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.999" name="bus" dev="loop5" ino=18 res=0 errno=0
[  166.754985][ T8873] loop3: detected capacity change from 0 to 32768
[  166.761560][ T8873] bcachefs (/dev/loop3): error validating superblock: Invalid superblock section downgrade: downgrade entry with mismatched major version (0 != 1)
[  166.761560][ T8873] downgrade (size 2912):
[  166.761560][ T8873] version:	0.0: (unknown version)
[  166.761560][ T8873] recovery passes:	
[  166.761560][ T8873] errors:	sb_clean_missing
[  166.761560][ T8873] version:	0.0: (unknown version)
[  166.761560][ T8873] recovery passes:	snapshots_read,set_may_go_rw,check_alloc_info,check_lrus,check_extents_to_backpointers,check_snapshot_trees,check_snapshots,fs_upgrade_for_subvolumes
[  166.761560][ T8873] errors:	clean_but_journal_not_empty
[  166.761560][ T8873] version:	0.0: (unknown version)
[  166.761560][ T8873] recovery passes:	fs_freespace_init
[  166.761560][ T8873] errors:	
[  166.761560][ T8873] version:	0.1: (unknown version)
[  166.761560][ T8873] recovery passes:	set_may_go_rw,fs_freespace_init,check_snapshot_trees
[  166.761560][ T8873] errors:	sb_clean_missing,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_empty,dirty_but_no_journal_entries,(unknown error 768),sb_clean_missing,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_empty,clean_but_journal_not_
[  166.762020][ T8873] bcachefs: bch2_fs_get_tree() error: invalid_sb_downgrade
[  167.030548][ T8882] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1002'.
[  167.503355][ T8893] loop3: detected capacity change from 0 to 256
[  167.532704][ T8893] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xb107716d, utbl_chksum : 0xe619d30d)
[  168.190117][ T8392] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  168.337402][ T8906] loop5: detected capacity change from 0 to 1024
[  168.377694][   T36] hfsplus: b-tree write err: -5, ino 4
[  168.470863][ T8910] netlink: 'syz.5.1015': attribute type 9 has an invalid length.
[  169.385599][ T8930] loop5: detected capacity change from 0 to 32768
[  169.394926][ T8930] JBD2: Ignoring recovery information on journal
[  169.417428][ T8941] loop3: detected capacity change from 0 to 512
[  169.437546][ T8930] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[  169.446890][ T8941] EXT4-fs: Ignoring removed mblk_io_submit option
[  169.460904][ T8941] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  169.470086][ T8930] 
[  169.471099][ T8930] ======================================================
[  169.473843][ T8930] WARNING: possible circular locking dependency detected
[  169.476687][ T8930] 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 Not tainted
[  169.480664][ T8930] ------------------------------------------------------
[  169.483469][ T8930] syz.5.1021/8930 is trying to acquire lock:
[  169.485504][ T8930] ffff88811a0389c0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  169.489901][ T8930] 
[  169.489901][ T8930] but task is already holding lock:
[  169.492499][ T8930] ffff88803c446c78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  169.495605][ T8930] 
[  169.495605][ T8930] which lock already depends on the new lock.
[  169.495605][ T8930] 
[  169.499063][ T8930] 
[  169.499063][ T8930] the existing dependency chain (in reverse order) is:
[  169.501906][ T8930] 
[  169.501906][ T8930] -> #5 (&oi->ip_xattr_sem){++++}-{4:4}:
[  169.504911][ T8930]        lock_acquire+0x120/0x360
[  169.506652][ T8930]        down_read+0x46/0x2e0
[  169.508520][ T8930]        ocfs2_init_acl+0x2f9/0x720
[  169.510432][ T8930]        ocfs2_mknod+0x1321/0x2050
[  169.512215][ T8930]        vfs_mknod+0x37f/0x3c0
[  169.513865][ T8930]        do_mknodat+0x385/0x4d0
[  169.515529][ T8930]        __x64_sys_mknodat+0xa7/0xc0
[  169.517408][ T8930]        do_syscall_64+0xfa/0x3b0
[  169.519200][ T8930]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.521248][ T8930] 
[  169.521248][ T8930] -> #4 (jbd2_handle){++++}-{0:0}:
[  169.524136][ T8930]        lock_acquire+0x120/0x360
[  169.525854][ T8930]        start_this_handle+0x1fa7/0x21c0
[  169.527740][ T8930]        jbd2__journal_start+0x2c1/0x5b0
[  169.529639][ T8930]        jbd2_journal_start+0x2a/0x40
[  169.531485][ T8930]        ocfs2_start_trans+0x376/0x6d0
[  169.533579][ T8930]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  169.535711][ T8930]        ocfs2_dismount_volume+0x201/0x8d0
[  169.537742][ T8930]        generic_shutdown_super+0x135/0x2c0
[  169.539765][ T8930]        kill_block_super+0x44/0x90
[  169.541614][ T8930]        deactivate_locked_super+0xbc/0x130
[  169.543691][ T8930]        cleanup_mnt+0x425/0x4c0
[  169.545285][ T8930]        task_work_run+0x1d4/0x260
[  169.546990][ T8930]        exit_to_user_mode_loop+0xec/0x110
[  169.548988][ T8930]        do_syscall_64+0x2bd/0x3b0
[  169.550688][ T8930]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.553335][ T8930] 
[  169.553335][ T8930] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  169.556404][ T8930]        lock_acquire+0x120/0x360
[  169.558264][ T8930]        down_read+0x46/0x2e0
[  169.559897][ T8930]        ocfs2_start_trans+0x36a/0x6d0
[  169.561893][ T8930]        ocfs2_shutdown_local_alloc+0x200/0xa10
[  169.564461][ T8930]        ocfs2_dismount_volume+0x201/0x8d0
[  169.566787][ T8930]        generic_shutdown_super+0x135/0x2c0
[  169.569200][ T8930]        kill_block_super+0x44/0x90
[  169.571438][ T8930]        deactivate_locked_super+0xbc/0x130
[  169.573991][ T8930]        cleanup_mnt+0x425/0x4c0
[  169.576048][ T8930]        task_work_run+0x1d4/0x260
[  169.578246][ T8930]        exit_to_user_mode_loop+0xec/0x110
[  169.580798][ T8930]        do_syscall_64+0x2bd/0x3b0
[  169.582719][ T8930]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.584850][ T8930] 
[  169.584850][ T8930] -> #2 (sb_internal#3){.+.+}-{0:0}:
[  169.587395][ T8930]        lock_acquire+0x120/0x360
[  169.589080][ T8930]        ocfs2_start_trans+0x26b/0x6d0
[  169.590913][ T8930]        ocfs2_mknod+0xe93/0x2050
[  169.592670][ T8930]        vfs_mknod+0x37f/0x3c0
[  169.594283][ T8930]        do_mknodat+0x385/0x4d0
[  169.595933][ T8930]        __x64_sys_mknodat+0xa7/0xc0
[  169.597642][ T8930]        do_syscall_64+0xfa/0x3b0
[  169.599249][ T8930]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.601375][ T8930] 
[  169.601375][ T8930] -> #1 (&ocfs2_sysfile_lock_key[LOCAL_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  169.605118][ T8930]        lock_acquire+0x120/0x360
[  169.606826][ T8930]        down_write+0x96/0x1f0
[  169.608600][ T8930]        ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  169.610742][ T8930]        ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  169.613179][ T8930]        ocfs2_mknod+0xe32/0x2050
[  169.614874][ T8930]        vfs_mknod+0x37f/0x3c0
[  169.616473][ T8930]        do_mknodat+0x385/0x4d0
[  169.618280][ T8930]        __x64_sys_mknodat+0xa7/0xc0
[  169.620201][ T8930]        do_syscall_64+0xfa/0x3b0
[  169.622095][ T8930]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.624552][ T8930] 
[  169.624552][ T8930] -> #0 (&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]){+.+.}-{4:4}:
[  169.628099][ T8930]        validate_chain+0xb9b/0x2140
[  169.629887][ T8930]        __lock_acquire+0xab9/0xd20
[  169.631657][ T8930]        lock_acquire+0x120/0x360
[  169.633577][ T8930]        down_write+0x96/0x1f0
[  169.635194][ T8930]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  169.637422][ T8930]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  169.639812][ T8930]        ocfs2_init_xattr_set_ctxt+0x307/0x700
[  169.642407][ T8930]        ocfs2_xattr_set+0xb70/0x11f0
[  169.644232][ T8930]        __vfs_setxattr+0x43c/0x480
[  169.646032][ T8930]        __vfs_setxattr_noperm+0x12d/0x660
[  169.648012][ T8930]        vfs_setxattr+0x16b/0x2f0
[  169.650015][ T8930]        filename_setxattr+0x274/0x600
[  169.652291][ T8930]        path_setxattrat+0x364/0x3a0
[  169.654513][ T8930]        __x64_sys_setxattr+0xbc/0xe0
[  169.656645][ T8930]        do_syscall_64+0xfa/0x3b0
[  169.658754][ T8930]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.661435][ T8930] 
[  169.661435][ T8930] other info that might help us debug this:
[  169.661435][ T8930] 
[  169.665649][ T8930] Chain exists of:
[  169.665649][ T8930]   &ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE] --> jbd2_handle --> &oi->ip_xattr_sem
[  169.665649][ T8930] 
[  169.671431][ T8930]  Possible unsafe locking scenario:
[  169.671431][ T8930] 
[  169.673912][ T8930]        CPU0                    CPU1
[  169.675732][ T8930]        ----                    ----
[  169.677552][ T8930]   lock(&oi->ip_xattr_sem);
[  169.679121][ T8930]                                lock(jbd2_handle);
[  169.681610][ T8930]                                lock(&oi->ip_xattr_sem);
[  169.684471][ T8930]   lock(&ocfs2_sysfile_lock_key[EXTENT_ALLOC_SYSTEM_INODE]);
[  169.687050][ T8930] 
[  169.687050][ T8930]  *** DEADLOCK ***
[  169.687050][ T8930] 
[  169.689879][ T8930] 3 locks held by syz.5.1021/8930:
[  169.691678][ T8930]  #0: ffff888109ac6428 (sb_writers#18){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  169.694810][ T8930]  #1: ffff88803c446f40 (&sb->s_type->i_mutex_key#40){+.+.}-{4:4}, at: vfs_setxattr+0x144/0x2f0
[  169.698377][ T8930]  #2: ffff88803c446c78 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  169.702233][ T8930] 
[  169.702233][ T8930] stack backtrace:
[  169.704490][ T8930] CPU: 0 UID: 0 PID: 8930 Comm: syz.5.1021 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  169.704502][ T8930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  169.704508][ T8930] Call Trace:
[  169.704512][ T8930]  <TASK>
[  169.704517][ T8930]  dump_stack_lvl+0x189/0x250
[  169.704530][ T8930]  ? __pfx_dump_stack_lvl+0x10/0x10
[  169.704538][ T8930]  ? __pfx__printk+0x10/0x10
[  169.704548][ T8930]  ? print_lock_name+0xde/0x100
[  169.704559][ T8930]  print_circular_bug+0x2ee/0x310
[  169.704569][ T8930]  check_noncircular+0x134/0x160
[  169.704578][ T8930]  validate_chain+0xb9b/0x2140
[  169.704586][ T8930]  ? __mutex_unlock_slowpath+0x1a1/0x760
[  169.704597][ T8930]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[  169.704607][ T8930]  __lock_acquire+0xab9/0xd20
[  169.704617][ T8930]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  169.704625][ T8930]  lock_acquire+0x120/0x360
[  169.704633][ T8930]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  169.704642][ T8930]  down_write+0x96/0x1f0
[  169.704648][ T8930]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  169.704655][ T8930]  ? __pfx_down_write+0x10/0x10
[  169.704667][ T8930]  ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  169.704678][ T8930]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  169.704686][ T8930]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.704694][ T8930]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  169.704702][ T8930]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  169.704710][ T8930]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  169.704717][ T8930]  ? stack_depot_save_flags+0x41b/0x860
[  169.704727][ T8930]  ? kasan_save_track+0x4f/0x80
[  169.704734][ T8930]  ? kasan_save_track+0x3e/0x80
[  169.704741][ T8930]  ? __kasan_kmalloc+0x93/0xb0
[  169.704749][ T8930]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  169.704757][ T8930]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  169.704764][ T8930]  ? ocfs2_init_xattr_set_ctxt+0x307/0x700
[  169.704772][ T8930]  ? ocfs2_xattr_set+0xb70/0x11f0
[  169.704780][ T8930]  ? __vfs_setxattr+0x43c/0x480
[  169.704789][ T8930]  ? __vfs_setxattr_noperm+0x12d/0x660
[  169.704798][ T8930]  ? vfs_setxattr+0x16b/0x2f0
[  169.704806][ T8930]  ? filename_setxattr+0x274/0x600
[  169.704814][ T8930]  ? path_setxattrat+0x364/0x3a0
[  169.704821][ T8930]  ? __x64_sys_setxattr+0xbc/0xe0
[  169.704826][ T8930]  ? do_syscall_64+0xfa/0x3b0
[  169.704835][ T8930]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.704847][ T8930]  ? __kasan_kmalloc+0x93/0xb0
[  169.704856][ T8930]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  169.704864][ T8930]  ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  169.704872][ T8930]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  169.704879][ T8930]  ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[  169.704888][ T8930]  ? __lock_acquire+0xab9/0xd20
[  169.704898][ T8930]  ocfs2_init_xattr_set_ctxt+0x307/0x700
[  169.704907][ T8930]  ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[  169.704916][ T8930]  ? ocfs2_xattr_set+0xb36/0x11f0
[  169.704924][ T8930]  ? up_write+0x1c4/0x420
[  169.704930][ T8930]  ? ocfs2_xattr_set+0x334/0x11f0
[  169.704938][ T8930]  ocfs2_xattr_set+0xb70/0x11f0
[  169.704948][ T8930]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  169.704956][ T8930]  ? check_path+0x21/0x40
[  169.704963][ T8930]  ? lockdep_unlock+0x89/0x120
[  169.704975][ T8930]  ? evm_protected_xattr_common+0x170/0x190
[  169.704983][ T8930]  ? evm_protect_xattr+0x71d/0xa90
[  169.704990][ T8930]  ? __pfx_ima_get_hash_algo+0x10/0x10
[  169.704996][ T8930]  ? __pfx_evm_protect_xattr+0x10/0x10
[  169.705004][ T8930]  ? __pfx_ocfs2_xattr_security_set+0x10/0x10
[  169.705012][ T8930]  __vfs_setxattr+0x43c/0x480
[  169.705022][ T8930]  __vfs_setxattr_noperm+0x12d/0x660
[  169.705032][ T8930]  vfs_setxattr+0x16b/0x2f0
[  169.705042][ T8930]  ? __pfx_vfs_setxattr+0x10/0x10
[  169.705051][ T8930]  ? mnt_get_write_access+0x223/0x2a0
[  169.705059][ T8930]  filename_setxattr+0x274/0x600
[  169.705070][ T8930]  ? __pfx_filename_setxattr+0x10/0x10
[  169.705079][ T8930]  ? getname_flags+0x1e5/0x540
[  169.705086][ T8930]  path_setxattrat+0x364/0x3a0
[  169.705094][ T8930]  ? __pfx_path_setxattrat+0x10/0x10
[  169.705100][ T8930]  ? do_futex+0x333/0x420
[  169.705112][ T8930]  ? __pfx___se_sys_futex+0x10/0x10
[  169.705120][ T8930]  ? rcu_is_watching+0x15/0xb0
[  169.705127][ T8930]  __x64_sys_setxattr+0xbc/0xe0
[  169.705133][ T8930]  do_syscall_64+0xfa/0x3b0
[  169.705142][ T8930]  ? lockdep_hardirqs_on+0x9c/0x150
[  169.705150][ T8930]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.705165][ T8930]  ? exc_page_fault+0x9f/0xf0
[  169.705175][ T8930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  169.705182][ T8930] RIP: 0033:0x7ff82918ebe9
[  169.705191][ T8930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  169.705197][ T8930] RSP: 002b:00007ff82a066038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  169.705206][ T8930] RAX: ffffffffffffffda RBX: 00007ff8293b5fa0 RCX: 00007ff82918ebe9
[  169.705211][ T8930] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100
[  169.705215][ T8930] RBP: 00007ff829211e19 R08: 0000000000000000 R09: 0000000000000000
[  169.705220][ T8930] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000
[  169.705224][ T8930] R13: 00007ff8293b6038 R14: 00007ff8293b5fa0 R15: 00007ffd2d45d8a8
[  169.705232][ T8930]  </TASK>
[  169.892026][ T8941] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  169.897536][ T8941] ext4 filesystem being mounted at /309/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  169.913007][ T8392] ocfs2: Unmounting device (7,5) on (node local)
[  169.974084][ T6102] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.

VM DIAGNOSIS:
08:45:21  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000106f RDI=0000000000001070 RBP=00000000000003f8 RSP=ffffc90002a4e4b0
R8 =ffff88801f040237 R9 =1ffff11003e08046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98fc R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007ff82a0666c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00002000000013c0 CR3=0000000115efe000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffff0000000000 XMM01=0101010101010101 0101010000000000
XMM02=695f746e756f6d5f 7a79730032736667 XMM03=0000000000000000 ff00000000000000
XMM04=37b1e5855b06984c 002c6c63616f6e2c XMM05=0d3bdcbda93d0845 20402cc611223bd6
XMM06=8532f384721928d4 8852ba24cd4ed488 XMM07=3cf2d72011e9071e 6f64c7f29a34838b
XMM08=0000000000000000 000036fa28eb7f30 XMM09=0000000000000000 00007ff829212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000008000000a RBX=00000000756e6547 RCX=000000006c65746e RDX=0000000049656e69
RSI=0000000000000007 RDI=00007ffe0f0c6f80 RBP=00007ffe0f0c6fa8 RSP=00007ffe0f0c6f20
R8 =00007ffe0f0c6fa8 R9 =00007ffe0f0c6f88 R10=00007fe810340c40 R11=0000000000000246
R12=00007ffe0f0c70e0 R13=00007ffe0f0c7060 R14=00007ffe0f0c70a0 R15=00007fe81032f858
RIP=00007fe810340f7f RFL=00000206 [-----P-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fe8103534b8 CR3=000000010aa8b000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
