last executing test programs:

15m34.270793534s ago: executing program 32 (id=552):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x2, &(0x7f0000006680))
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0)

8m1.279425748s ago: executing program 33 (id=3556):
r0 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000140)='_', 0x1, 0xfffffffffffffffe)
r1 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
r2 = add_key$user(&(0x7f0000006400), &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000840)="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", 0x101, 0xfffffffffffffffe)
keyctl$dh_compute(0x17, &(0x7f0000000100)={r0, r1, r2}, 0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={'sha256\x00'}})

7m59.722773368s ago: executing program 34 (id=3565):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)

7m13.859028753s ago: executing program 0 (id=3803):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=ANY=[@ANYBLOB="28010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc000000000000000000edff0000000000000000000000000000000000000000020000000000000000000000000000000000001000000000ffffffffffffffff00000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200340000000000000014000e"], 0x128}}, 0x0)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000004c0)=@newsa={0x104, 0x10, 0x7, 0x80000000, 0x0, {{@in6=@mcast2, @in=@multicast2, 0x4e20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x0, 0x2b}, @in6=@private0, {0x0, 0x0, 0x2, 0x0, 0x10000000, 0xffffffffffffffff}, {0x0, 0x200000, 0x7}, {0x40000, 0xfffffffd, 0xae8}, 0x0, 0x0, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in6=@remote}]}, 0x104}}, 0x4000080)

7m13.397666339s ago: executing program 0 (id=3805):
syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x8, 0x0, 0x1, @dev={0xfe, 0x80, '\x00', 0x12}, @loopback, {[@routing={0x32, 0x0, 0x1, 0x4}]}}}}}, 0x0)
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00'}, 0x94)
setns(0xc9, 0x0)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48)

7m12.046921476s ago: executing program 0 (id=3813):
r0 = add_key$keyring(&(0x7f00000000c0), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe)
r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, &(0x7f0000000240)='asymmetric\x00', &(0x7f0000000180)=@keyring={'key_or_keyring:', r0})
add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x1}, 0x0, 0x0, r1)

7m11.767035633s ago: executing program 0 (id=3815):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0xe, &(0x7f0000000780), 0x3, 0x440, &(0x7f0000000280)="$eJzs28tvG8UfAPDv2kn66+uXUJVHH0CgIMoradJSeuACAokDSEhwKMeQpFWo26AmSLSKICBUjqgSJy6IIxJ/ASe4IOCExBXuqFKFcmnhZLT2bmI7thunTlzqz0dad2Z33Jmvd8ee2ckG0LdG05ckYk9E/B4Rw9VsfYHR6j83V5am/15Zmk6iXH7zr6RS7sbK0nReNH/f7jwzEFH4NIlDTepduHT53FSpNHsxy48vnn9vfOHS5Wfnzk+dnT07e2Hy1KkTxyeePzn5XFfiTOO6cfDD+cMHXn376uvTp6++8/O3SR5/QxxdMtru4OPlcper6629NelkoIcNoSPFajeNwUr/H45irJ284Xjlk542DthS5XK5fF/rw8tl4C6WRK9bAPRG/kOfzn/zbZuGHneE6y9WJ0Bp3DezrXpkIApZmcGG+W03jUbE6eV/vkq32Jr7EAAAdb5Pxz/PNBv/FaL2vtD/szWUkYi4JyL2RcTJiNgfEfdGVMreHxEPdFh/4yLJ+vFP4dqmAtugdPz3Qra2VT/+y0d/MVLMcnsr8Q8mZ+ZKs8eyz+RoDO5I8xNt6vjh5d8+b3WsdvyXbmn9+Vgwa8e1gR3175mZWpy6nZhrXf844uBAs/iT1ZWAJCIORMTBTdYx99Q3h1sdu3X8bXRhnan8dcQT1fO/HA3x55L265Pj/4vS7LHx/KpY75dfr7zRqv7bir8L0vO/q+n1vxr/SFK7XrvQyf/+5ZPp65U/Pms5p9ns9T+UvFW374OpxcWLExFDyWvVRtfun2woN7lWPo3/6JHm/X9frH0ShyIivYgfjIiHIuLhrO2PRMSjEXGkzafw00uPvbv5+LdWGv9MR+d/LTEUjXuaJ4rnfvyurtKRTuJPz/+JSupotmcj338baVenVzMAAAD8VxUiYk8khbHVdKEwNlb9G/79satQml9YfPrM/PsXZqrPCIzEYCG/0zVccz90IpvW5/nJhvzx7L7xF8WdlfzY9HxpptfBQ5/b3aL/p/4s9rp1wJbzvBb0L/0f+pf+D/1L/4f+1aT/7+xFO4Dt1+z3/6MetAPYfg3937If9BHzf+hfm+n/vjPg7tC2Lw9tXzuAbbWwM279kLyExLpEFO6IZkhsUaLX30wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADd8W8AAAD//58P56I=")
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
setxattr$trusted_overlay_origin(&(0x7f0000000240)='./file0\x00', &(0x7f0000000340), &(0x7f0000000380), 0x2, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@index_on}]})

7m10.751039072s ago: executing program 0 (id=3828):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
listen(r0, 0x2)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000640)=0x652, 0x4)

7m9.242590786s ago: executing program 0 (id=3840):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x9)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000240)=0x7)

7m8.426645018s ago: executing program 35 (id=3840):
r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040), 0x40042, 0x0)
write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000000)=0x9)
ioctl$SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f0000000240)=0x7)

4m53.69361131s ago: executing program 3 (id=4733):
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = open_tree(r0, &(0x7f0000000640)='\x00', 0x89901)
unshare(0xe060400)
move_mount(r1, 0x0, r0, 0x0, 0x46)

4m53.283682638s ago: executing program 3 (id=4737):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0x3)
bpf$MAP_CREATE(0x0, &(0x7f0000001d00)=ANY=[@ANYBLOB="0b00000005000000050000000900000001"], 0x48)
read(r0, 0x0, 0x0)

4m52.933133289s ago: executing program 3 (id=4741):
r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000d62b00006110600000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x4}, 0x50)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x26}, 0x10)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)=ANY=[], 0x10)

4m52.58334028s ago: executing program 3 (id=4744):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@usrjquota}, {@nobh}, {@acl}]}, 0x2, 0x462, &(0x7f0000001f80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]})

4m51.935005864s ago: executing program 3 (id=4748):
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x800, 0x0)
read(r0, 0x0, 0x0)

4m49.774993502s ago: executing program 3 (id=4755):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000001c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@dax_never}, {@bsdgroups}, {@usrjquota, 0x22}, {@nodioread_nolock}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$eJzs3DtvHEUcAPD/rh+JSYxNeOYBMQSExcOOnWdBAwIpDRIIhEJpbCcKcRIUGymJLGwQCiXKJwBKJD4BFTQIqEC0IFqEFCE3CRRo0d7tOWff+fyIz0dyv5909uzu7M7Mzoy9M6O9ANrWQP4jidgZEb9GRF95c2mEgfKvmwuz438vzI4nkWVv/JWU4t1YmB2vRK2ct6PYGEwj0o+T2Fsn3enLV86OTU1NXiy2h2fOvTc8ffnK82fOjZ2ePD15fvT48cOHeo4dHT2yKeXszfO654ML+3afePvaq+Mnr73zw1d5frPi+PaaM/rXmUJHzZ6BGFh6L6s8tc6r/9/1VoWTzhZmhHXJW21eXV2l/t8XHXGr8vrilY9amjmgqbIsy7bV7F38XzafVUuS8gnAXSLRpaFNVf7R31jIR6qz49Xj+XZw/cUojYDyct8sPuUjnZHmY/j+8tioWR6IiJPz/3yWf2LZfAoAQDN8kz//PFd+7qh8ykfSeKgq3r3F2lB/RNwXEbsi4v7i+eXBiFLchyPikSVXn1s1/YFl27XPPz/3bLhwa5A//71QrG0tff5LK1H6O4qt3lL5u5JTZ6YmDxb3ZDC6tuXbI7WXXpxW+/blXz5dKf2Bque//JOnX3kWLPLxZ+eyCbqJsZmx2y13xfUPS1N6c7XlTxZXAvKRwe6I2LOB6+f37MwzX+6re7ByixuWv4FNWGfKvoh4ulz/87Gs/LnuIlR/fXLk2NHRI8PbY2ry4HClVdT68aerrxXBmqHE6vXfXHn937PY/su/y0cWVy77k+r12un1p3H1t09WHNNstP13J2+Wwt3FvktjMzMXRyK6k/na/aO3zr001rMkfl7+wQP1+/+uiH8/L87bGxF5I340Ih6LiP1F3h+PiCci4kCD8n//0pPv1qv7tZW/ufLyT9T9+7dS/a8/0HH2u69XSn9t9X+4FBos9kyMzdQu1y+z1gzezr0DAACAO8X+iNgZSTpUTMftjDQdGorYsTiDMj3z7KkL75+fKL8j0B9daWWmq69qPnSkmBvOt/OzRqu28+OHSvPGWZZlPaXtofELU72tLTq0vR0r9P/cH7WvtAB3m3Wto630RhtwR9r4Onq2qfkAtp73taF96f/Qvtbc/5v5JhzQEvX6/1zEzRZkBdhi9fr/Wy3IB7D1jP+hfen/0L5q+3/aknwAW+p23utvFNh1okGcpLM5ia4cSKPxtwD0R6zvgr+nEZuTw45NLWnPGup0e2xGWpGuGqezwRcxvF57w/PoW9Qk0q1tfo0D2yJilda72NjmKoErzc5Yq/8yAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAbI7/AgAA//+7BdPO")
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x600061, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000))

4m49.643245689s ago: executing program 9 (id=4756):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@mcast1, 0x800, 0x0, 0x103, 0x9}, 0x20)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x5, 0x4)
sendmsg$inet6(r0, &(0x7f0000000080)={&(0x7f00000001c0)={0xa, 0x4e21, 0x80000, @dev={0xfe, 0x80, '\x00', 0x19}, 0x9}, 0x1c, 0x0, 0x0, &(0x7f0000000200)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x6c}}}], 0x18}, 0xc4)

4m48.885313163s ago: executing program 36 (id=4755):
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x10, &(0x7f00000001c0)={[{@grpjquota, 0x4a}, {@debug}, {@jqfmt_vfsold}, {@dax_never}, {@bsdgroups}, {@usrjquota, 0x22}, {@nodioread_nolock}, {@errors_remount}], [], 0x2c}, 0x84, 0x4c2, &(0x7f0000000980)="$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")
syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x380470a, &(0x7f0000000a00)={[{@quota}, {@bsdgroups}, {@lazytime}, {@errors_remount}, {@jqfmt_vfsv1}, {@oldalloc}, {@stripe={'stripe', 0x3d, 0x5}}]}, 0x2, 0x46b, &(0x7f0000000580)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x600061, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, &(0x7f0000000000))

4m45.793851101s ago: executing program 9 (id=4780):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x10000, &(0x7f0000000080)={[{@quota}, {@delalloc}, {@data_err_ignore}, {@debug}, {@usrjquota}, {@bsdgroups}]}, 0x1, 0x4e8, &(0x7f00000016c0)="$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")
fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0)
socket$igmp6(0xa, 0x3, 0x2)
chown(&(0x7f0000000000)='.\x00', 0x0, 0xffffffffffffffff)

4m44.732642926s ago: executing program 9 (id=4785):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x1000000001de0})
fcntl$lock(r0, 0x7, &(0x7f0000000140)={0x1, 0x1, 0x200007, 0x4})
fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9})

4m44.036246546s ago: executing program 9 (id=4788):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000000c0)='./bus\x00', 0xe, &(0x7f00000002c0)={[{@usrjquota}, {@nobh}, {@acl}]}, 0x2, 0x462, &(0x7f0000001f80)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x0, 0x0, 0x3e, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@userxattr}]})

4m43.154915957s ago: executing program 9 (id=4792):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0)
close(r0)
socket$kcm(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f00000006c0)={'wlan1\x00', @local})

4m42.101459334s ago: executing program 9 (id=4795):
r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

4m41.222732023s ago: executing program 37 (id=4795):
r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e388d640697a01006ba8010203010902270201020010000904"], 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

48.175496531s ago: executing program 8 (id=6392):
syz_clone(0xc200, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

47.230146499s ago: executing program 8 (id=6400):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f0000000680)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x2, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x4000003}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0xffffffffffffff5e, 0x7, 0x3}]}}]}, 0x48}}, 0x0)

46.784710604s ago: executing program 8 (id=6403):
r0 = socket(0x1e, 0x1, 0x0)
listen(r0, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000454ff0)={0x0, 0x2710}, 0x10)
recvmsg(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000440)=""/119, 0x77}], 0x1}, 0x21)

46.464685144s ago: executing program 8 (id=6408):
syz_mount_image$xfs(&(0x7f0000009740), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000140)={[{@bsdgroups}]}, 0x1, 0x97f6, &(0x7f000001c700)="$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")
truncate(&(0x7f0000000200)='./file1\x00', 0x1)
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000100), 0x1, 0x0)
write$binfmt_register(r0, &(0x7f0000000180)={0x3a, 'syz1', 0x3a, 'M', 0x3a, 0xc, 0x3a, 'exfat\x00', 0x3a, 'exfat\x00', 0x3a, './file1', 0x3a, [0x46]}, 0x34)

43.725794388s ago: executing program 8 (id=6421):
r0 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x8, 0x3, 0x4c8, 0x170, 0xffffffff, 0xffffffff, 0x170, 0xffffffff, 0x3f8, 0xffffffff, 0xffffffff, 0x3f8, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0x148, 0x170, 0x0, {}, [@common=@unspec=@helper={{0x48}}, @common=@inet=@hashlimit1={{0x58}, {'bond_slave_1\x00', {0x41, 0x1ff, 0x6, 0xb0e2, 0x10001, 0x84e, 0xfffffffb, 0x18, 0x8}, {0x1}}}]}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'erspan0\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'vcan0\x00', {0x3, 0x0, 0x41, 0x0, 0x2, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x528)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x258, 0x120, 0x1000000, 0xffffffff, 0x120, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @rand_addr=0x640100ff, 0xffffffff, 0x0, 'bond_slave_1\x00', 'geneve1\x00', {}, {}, 0x4, 0x0, 0x28}, 0x0, 0xf0, 0x120, 0x0, {0x0, 0x1c8}, [@common=@inet=@ecn={{0x28}, {0x0, 0x10, 0x1a}}, @common=@inet=@hashlimit1={{0x58}, {'vcan0\x00', {0xa, 0x1eb, 0x8, 0x0, 0x0, 0x5, 0x23}}}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x4, 0x3ff, 0xc15ac56b9c76af00}}}, {{@ip={@loopback, @rand_addr=0x64010101, 0xff, 0xffffff00, 'veth0_to_team\x00', 'vcan0\x00', {}, {0xff}, 0x32, 0x3}, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x9, 0x3, 0x3, 0x55367656ae40811c}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x64}}}}, 0x2b8)

39.144362463s ago: executing program 8 (id=6448):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002340)={0x50, 0x0, r1, {0x7, 0x8, 0xfffffff4, 0x238d117e43691579, 0x4, 0x3, 0x86, 0x1, 0xc00, 0x0, 0x20, 0xffd}}, 0x50)

37.998893739s ago: executing program 38 (id=6448):
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000002280)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
read$FUSE(r0, &(0x7f0000000100)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000002340)={0x50, 0x0, r1, {0x7, 0x8, 0xfffffff4, 0x238d117e43691579, 0x4, 0x3, 0x86, 0x1, 0xc00, 0x0, 0x20, 0xffd}}, 0x50)

5.807128685s ago: executing program 6 (id=6627):
socket$nl_route(0x10, 0x3, 0x0)
r0 = syz_open_dev$dri(&(0x7f0000000200), 0x1, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x9, 0x800, 0x0, 0x100000, 0x4}, 0x0, &(0x7f0000000240)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6a9}, 0x0, 0x0)
ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f0000000080)={0x4000000})

4.476727616s ago: executing program 6 (id=6637):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x19, &(0x7f0000001080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffd}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xa7}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x12, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4b}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r2}, 0xc)

4.468742776s ago: executing program 1 (id=6638):
r0 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$TCSETA(r0, 0x5406, &(0x7f00000006c0)={0x8, 0x800, 0xd95, 0x9, 0x6, "935cefd80215080d"})
write$UHID_INPUT(r0, &(0x7f00000011c0)={0xfc, {"a483885aed0d09f91b5e070987f70e06d038e7ff7fc6e5539b0d3e0e8b089b3f073063030890e0879b0af8c6e70a9b334a959b669a240d0a0af3988f7ef319520100ffe8d178708c523c921b1b5b31070d0773090acd3b78130daa61d8e8040000005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801118c20b8f16bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399ea4727d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9963ac4f4bb3309603f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928f28381aab144a5d429a040200b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a64002bebc2407aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef64ab253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f42355bc7872c827467cfa5c4e72730d56bf068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b813076038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827475e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcb32b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba36b37767b6b45a44957f24d758ed024b3849c11d412a2a03b4047497022d9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b94025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b03512629f46366e7205dd8d6f37525c1a0e94210dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484439ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9154f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1d93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb96d6861aca47da73d6f3144345f48843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b28045634073c9c58c89d9e99c81769177c6d594f88a4facfd4c735a20307c737afa2d603994732d6b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463183b4b87c1050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21396532713e5b69cf767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285e6a89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeaf1ab652f2ef91d4f2b01987b0f46da034e5c3f745a7ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b627cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e46a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5c92441918145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed608000000a006e39336d07c2b80817a28ad2706f48261f7897484c297a1a6613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030f81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c00004f5d374755534d7f68f679c4ff516e9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59554e502dcea39cb313b0000000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00", 0x1000}}, 0xffbc)
ioctl$FIONREAD(r0, 0x541b, &(0x7f0000000040))

4.217504095s ago: executing program 2 (id=6640):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r0, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={<r1=>0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000140)={r1, @in6={{0xa, 0x4e24, 0x9, @private0={0xfc, 0x0, '\x00', 0x1}, 0x2}}}, &(0x7f0000000200)=0x84)

4.162639812s ago: executing program 7 (id=6641):
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)={0x60, r3, 0x1, 0x70bd2c, 0xffe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_SOCKETS={0x34, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r1}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x128}]}, 0x60}}, 0x20000400)

3.935740675s ago: executing program 6 (id=6644):
r0 = socket$inet_tcp(0x2, 0x1, 0x6)
setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000003c0)='espintcp', 0x8)
socket$kcm(0x2, 0x200000000000001, 0x106)
select(0x40, &(0x7f0000000340)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x2e787ec3}, 0x0, 0x0, 0x0)

3.640883674s ago: executing program 2 (id=6646):
r0 = socket$inet_icmp(0x2, 0x2, 0x1)
bind$inet(r0, &(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10)
r1 = syz_open_procfs(0x0, &(0x7f0000000300)='net/icmp\x00')
pread64(r1, &(0x7f0000000140)=""/245, 0xf5, 0x4000000000000004)

3.504550698s ago: executing program 6 (id=6648):
syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000200), 0x1, 0x579, &(0x7f0000004e00)="$eJzs3V1rHNUbAPBnNknf/zSFUv6KSKEXVmo3TeJLBcF6KVos6H1dkmmo2XRLdlOaWGh7YW+8kSKIWBA/gPdeFr+An6KghSIl6IVeRGYzm26T3STdbt3U+f1g0nNmZvvMM2fP2TM7u2wAhXU0+1OKeCFuxFdJxMG2bcORbzy6ut/yw2tT2ZLEysrHvyeR5Ota+yf5v/vzyv8j4ucvIk6UNsatLy7NVqrVdD6vjzXmLo/VF5dOXpyrzKQz6aWJycnTb0xOvP3Wm33L9dVzf3770d33T395bPmbH+8fup3EmTiQb2vP4yncaCsnSRzNz8lInFm343gfgu0kyaAPgJ4M5f18JLIx4GAM5b0e+O+7HhErQEEl+j8UVGse0Lq279N18HPjwXurF0Ab8x9efW8k9jSvjfYtJ49dGWXXu6N9iJ/F+Om3O7ezJbZ4H+J6H+IBtNy4GRGnhoc3jn9JPv717lTzzePNrY9RtNcfGKS72fzntU7zn9La/Cc6zH/2d+i7vdi6/+/tQ5TusvnfOx3nv2tD1+hQXvtfc843kly4WE1Prd3wGNmd1Te7n3N6+d5Kt23t879syeK35oL5cdwf3v34Y6YrjUqP6W7w4GbEi4/mv0ms5f93foWwpznXXd/+2fk4t80YR9I7L3fbtnX+7fo/A175IeKVju3/6I5Wsvn9ybHm82H1b8cYf9w68ku3+E+Wf/9l7b9v8/xH97bfr60/eYzv9/yVdtvW6/N/V/JJs7wrX3e10mjMj0fsSj7cuH7i0WNb9db+Wf7Hj20+/nV6/mfn5NNt5n/r8K2uu+6E9p/eov2Tx9r/yQv3Pvj8u27xt9f+rzdLx/M12xn/tnuAT3PuAAAAAAAAYKcpRcSBSErltXKpVC6vfr7jcOwrVWv1xokLtYVL09H8ruxojJRad7oPtn0eYjz/PGyrPrGuPhkRhyLi66G9zXp5qladHnTyAAAAAAAAAAAAAAAAAAAAsEPs7/L9/8yvQ4M+OuCZ85PfUFxb9v9+/NITsCN5/Yfi6tL/DQtQADo6FJf+D8Wl/0Nx6f9QXPo/FJf+DwAAAAAAAAAAAAAAAAAAAAAAAAAAAH117uzZbFlZfnhtKqtPX1lcmK1dOTmd1mfLcwtT5ana/OXyTK02U03LU7W5rf6/aq12eXwiFq6ONdJ6Y6y+uHR+rrZwqXH+4lxlJj2fjvwrWQEAAAAAAAAAAAAAAAAAAMDzpb64NFupVtN5ha6Fd2PQh/HZS0/z8KRzKydtCa7qKcRwnzLtLbrCsyoMeGACAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgDb/BAAA//+4Vzmt")
chdir(&(0x7f0000000240)='./file0\x00')
r0 = open(&(0x7f00000000c0)='.\x00', 0x101000, 0x190)
getdents(r0, &(0x7f0000000040)=""/48, 0x30)

3.201533946s ago: executing program 2 (id=6650):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x200040c4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000080)={0x0, 0xffffffffffffff20, 0x0, 0x0, 0xffffffffffffffff, 0xa00}, 0x2040)

2.950619338s ago: executing program 6 (id=6653):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000009c0)={'ip6gretap0\x00', <r1=>0x0})
sendto$packet(r0, &(0x7f0000000180)="0b032200e0ff25000200475400f6a13bb10000a8880043054803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r1}, 0x14)

2.900110987s ago: executing program 1 (id=6654):
syz_open_procfs(0x0, &(0x7f0000000500)='mounts\x00')
r0 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=<r1=>0x0, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000080)=<r3=>0x0)
syz_io_uring_submit(r1, r2, r3, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}})
io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0)

2.655929123s ago: executing program 2 (id=6655):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
write$binfmt_elf64(r0, &(0x7f0000001700)=ANY=[@ANYBLOB="7f454c46b9040000ff7f08000000f0ff02003e00ecffffff98030000000000004000000000000000520000000000000000000000000038000100feff020000000300000005000000ffffffffffffff7f0d20000000400000c8010000000000007f00"], 0x78)
close(r0)
execveat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x1000)

2.487086094s ago: executing program 4 (id=6657):
r0 = syz_open_dev$vim2m(&(0x7f0000000040), 0x2000000097, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f00000002c0)=@multiplanar_mmap={0x0, 0x2, 0x4, 0x0, 0x2000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '|^b!'}, 0x0, 0x1, {0x0}})
ioctl$vim2m_VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)=@mmap={0x0, 0x2, 0x4, 0xffffff7f, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "186856f3"}})

2.328834874s ago: executing program 2 (id=6658):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={<r1=>0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000240)={r1, 0x0, 0x47, 0x9, 0x5, 0x8}, &(0x7f0000000280)=0x14)

2.327869152s ago: executing program 1 (id=6670):
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
r1 = fcntl$dupfd(r0, 0x0, r0)
write$sndseq(r1, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, @time={0x2, 0x3}, {0xfd}, {}, @raw32}, {0x0, 0x0, 0x0, 0x0, @time={0x7fff, 0xffffffff}, {0x0, 0x8}, {0x0, 0x1}, @note={0x0, 0x44, 0x3}}], 0x38)
readv(r1, &(0x7f0000000480)=[{&(0x7f0000001140)=""/136, 0x88}], 0x1)

2.264461429s ago: executing program 6 (id=6659):
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94)
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000041436120410e5150e8d5000000010902f98a5c01000000090401001186eee2000905821704"], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xffffffffffffff42, &(0x7f0000000000)=ANY=[])

2.224041309s ago: executing program 5 (id=6660):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8004}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x44}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

2.155942042s ago: executing program 7 (id=6661):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x4c, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x8004, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800)

2.062225009s ago: executing program 1 (id=6662):
mkdirat(0xffffffffffffff9c, &(0x7f0000005a00)='./gadget\x00', 0x930aa59063c1a109)
mount(0x0, &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0)
write(r0, &(0x7f0000005c40)="00000000090209000101008001120100020000004000800000000000000002", 0x1f)

1.969474465s ago: executing program 4 (id=6663):
recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0)
io_uring_setup(0x267a, &(0x7f0000000140)={0x0, 0x52a0, 0x8000, 0x1, 0x8e})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r0, 0x8b19, &(0x7f0000000140)={'wlan1\x00', @random="0100eb00"})

1.825321775s ago: executing program 5 (id=6664):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000000)={'batadv0\x00', <r1=>0x0})
r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r0)
sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="f5af24bd7000000000000e00000008000300", @ANYRES16=r1], 0x1c}, 0x1, 0x0, 0x0, 0xc0d0}, 0x0)

1.750736726s ago: executing program 7 (id=6665):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000180)='./proc\x00', &(0x7f00000001c0)='proc\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/auth.rpcsec.context/channel\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)="01303030303030202d", 0x9)

1.693922946s ago: executing program 1 (id=6666):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000180)='./file0\x00', 0x2, &(0x7f0000000100)=ANY=[@ANYBLOB="71756f74612c696f636861727365743d63703433372c6e6f71756f74612c6572726f72733d636f6e74696e75652c646973636172643d307830303030303030303030303030000001006572726f72733d636f6e74696e75652c71756f74612c646973636172642c67727071756f74612c00"], 0x1, 0x60ed, &(0x7f00000048c0)="$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")
chdir(&(0x7f000000aac0)='./file0\x00')
setxattr$trusted_overlay_nlink(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0), 0x0, 0x0, 0x0)
creat(&(0x7f0000000300)='./bus\x00', 0x0)

1.691605496s ago: executing program 4 (id=6667):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000002100b704000000000000850000005700000095"], 0x0, 0x100}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc)

1.379616013s ago: executing program 5 (id=6668):
r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41)
ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f00000000c0)={0x1, 0x0, 0x3, 0x13, 0x4})
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000040)=0x1)
ioctl$DVB_DEMUX_DMX_REMOVE_PID(r0, 0x40026f34, &(0x7f0000000000)=0x4)

1.313814535s ago: executing program 7 (id=6669):
r0 = socket$unix(0x1, 0x2, 0x0)
bind$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)
connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e)

1.285946671s ago: executing program 4 (id=6671):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r1, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r0, 0x1000000}, 0x20)

954.828485ms ago: executing program 5 (id=6672):
syz_mount_image$hfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x10012, &(0x7f0000001e80)=ANY=[@ANYBLOB='codepage=cp775,umask=00000000007777,iocharset=koi8-ru,\x00'/64, @ANYRES32, @ANYRES16], 0x4, 0x33e, &(0x7f00000007c0)="$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")
r0 = open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0)
ftruncate(r0, 0x2007ffc)
sendfile(r0, r0, 0x0, 0x800000009)

950.512058ms ago: executing program 2 (id=6684):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0)
ppoll(&(0x7f00000002c0)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0xe)
ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000000))

896.762482ms ago: executing program 4 (id=6673):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3)

867.470866ms ago: executing program 7 (id=6674):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="1f003300d0600000080211000001080211000000505050505050"], 0x3c}, 0x1, 0x0, 0x0, 0x2400c881}, 0x10)

512.581922ms ago: executing program 7 (id=6675):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000700)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x80, &(0x7f0000000000)={[{@nogrpid}, {@dioread_lock}, {@nouid32}]}, 0xfe, 0x244, &(0x7f0000000840)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83)
writev(0xffffffffffffffff, 0x0, 0x0)
ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x4008662c, 0x0)

499.111254ms ago: executing program 5 (id=6676):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0xe890, 0x4, 0x4a82, 0x5}, 0x14)

382.630203ms ago: executing program 4 (id=6677):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pselect6(0x900, 0x0, 0x0, &(0x7f0000000240)={0x1f}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0)

165.419038ms ago: executing program 5 (id=6678):
bind$unix(0xffffffffffffffff, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e)
r0 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001d00070f000000000000000007000000", @ANYRES32=r1, @ANYBLOB="00005200060005000100000008000800"], 0x2c}}, 0x20008000)

0s ago: executing program 1 (id=6679):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000003540)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000003740)={0x0, 0x0, &(0x7f0000003700)={&(0x7f0000000a40)={0x4c, r1, 0x1, 0x470bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x2a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @device_a, @device_a, @initial, {0x2, 0xfff}}, 0x8004, 0x8b1, {0x0, 0x6, @default_ibss_ssid}, @val, @void}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20040040}, 0x8800)

kernel console output (not intermixed with test programs):

rval to 400 msecs.
[  963.869696][ T2361] pvrusb2: Invalid write control endpoint
[  963.876831][    T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  963.891033][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  963.927683][    T9] usb 9-1: USB disconnect, device number 16
[  963.940012][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  963.966276][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  963.987960][ T2361] pvrusb2: Device being rendered inoperable
[  964.022837][T22096] loop1: detected capacity change from 0 to 128
[  964.044667][ T2361] cx25840 3-0044: Unable to detect h/w, assuming cx23887
[  964.082587][ T2361] cx25840 3-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  964.101740][T22096] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  964.130116][ T2361] pvrusb2: Attached sub-driver cx25840
[  964.135777][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  964.140442][T22096] ext4 filesystem being mounted at /968/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  964.147081][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  964.168593][    T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  964.231741][T22095] loop2: detected capacity change from 0 to 4096
[  964.277425][T22095] EXT4-fs: inline encryption not supported
[  964.303503][T22095] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  964.314953][T22096] fscrypt (loop1, inode 12): Unsupported encryption flags (0xaf)
[  964.327635][T22095] EXT4-fs (loop2): Test dummy encryption mode enabled
[  964.345703][T22095] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003]
[  964.373414][T22095] System zones: 0-5
[  964.401620][T22095] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  964.494169][ T5636] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  964.781486][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  964.803957][T22104] loop5: detected capacity change from 0 to 512
[  964.943105][T22104] EXT4-fs error (device loop5): __ext4_iget:5533: inode #11: block 1: comm syz.5.5732: invalid block
[  965.024524][T22104] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[  965.025336][T22104] EXT4-fs error (device loop5): ext4_orphan_get:1402: comm syz.5.5732: couldn't read orphan inode 11 (err -117)
[  965.035251][    C1] EXT4-fs (loop5): error count since last fsck: 1
[  965.035287][    C1] EXT4-fs (loop5): initial error at time 1785454522: __ext4_iget:5533: inode 11: block 1
[  965.035354][    C1] EXT4-fs (loop5): last error at time 1785454522: __ext4_iget:5533: inode 11: block 1
[  965.095494][T22106] loop1: detected capacity change from 0 to 4096
[  965.145516][T22104] loop5: lost filesystem error report for type 5 error -117
[  965.167767][T22104] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  965.212458][   T31] audit: type=1800 audit(1785454522.632:226): pid=22111 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.5734" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  965.245376][T22112] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  965.585034][T19332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  966.326808][T22133] HELLO WORLD FROM SYZ
[  967.103516][T22146] loop1: detected capacity change from 0 to 256
[  967.245181][T22148] zero sized request
[  967.347736][   T31] audit: type=1800 audit(1785454524.772:227): pid=22150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.5750" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0
[  967.390906][T22152] netlink: 'syz.2.5752': attribute type 11 has an invalid length.
[  967.433399][T22152] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5752'.
[  967.607956][T22158] netlink: 8 bytes leftover after parsing attributes in process `syz.8.5755'.
[  967.707522][T22155] loop6: detected capacity change from 0 to 4096
[  967.792522][T22155] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  967.934501][T22165] loop5: detected capacity change from 0 to 2048
[  967.978609][T22155] EXT4-fs (loop6): shut down requested (0)
[  968.010504][T22165] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  968.323662][T19460] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  968.497169][T22174] loop8: detected capacity change from 0 to 512
[  968.541387][T22176] loop5: detected capacity change from 0 to 64
[  968.564812][T22174] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  968.678206][T22174] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  968.777015][T22174] ext4 filesystem being mounted at /391/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  968.848082][T22182] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  969.112414][T22156] loop1: detected capacity change from 0 to 32768
[  969.164073][T22156] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  969.306767][T15784] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  969.407850][T22156] XFS (loop1): Ending clean mount
[  969.429900][T22156] XFS (loop1): Quotacheck needed: Please wait.
[  969.441074][T22178] loop6: detected capacity change from 0 to 32768
[  969.504176][   T31] audit: type=1800 audit(1785454526.932:228): pid=22178 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5765" name="file1" dev="loop6" ino=4 res=0 errno=0
[  969.761602][T22156] XFS (loop1): Quotacheck: Done.
[  969.849538][T22156] XFS (loop1): User initiated shutdown received.
[  969.861225][T22156] XFS (loop1): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x139/0x1a0 (fs/xfs/xfs_fsops.c:467).  Shutting down filesystem.
[  969.876144][T22156] XFS (loop1): Please unmount the filesystem and rectify the problem(s)
[  969.929353][ T5636] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  970.033913][T22194] netlink: 28 bytes leftover after parsing attributes in process `syz.8.5770'.
[  970.165218][T22198] loop6: detected capacity change from 0 to 512
[  970.219823][   T31] audit: type=1800 audit(1785454527.642:229): pid=22198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5779" name="file1" dev="loop6" ino=1048919 res=0 errno=0
[  971.413696][T22213] netlink: 'syz.5.5773': attribute type 13 has an invalid length.
[  972.260530][T22218] fuse: Bad value for 'fd'
[  972.371974][T22219] loop6: detected capacity change from 0 to 2048
[  972.424190][T22219] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  972.897283][T22234] loop8: detected capacity change from 0 to 2048
[  972.986408][T22234] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  973.050797][T22234] ext4 filesystem being mounted at /394/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  973.284524][T22250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5788'.
[  973.319469][T15784] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  973.400971][T22232] bridge0: port 3(syz_tun) entered disabled state
[  973.422701][T22232] bridge0: port 2(bridge_slave_1) entered disabled state
[  973.430203][T22232] bridge0: port 1(bridge_slave_0) entered disabled state
[  973.637466][  T185] kernel write not supported for file /sequencer (pid: 185 comm: kworker/0:2)
[  973.814825][T22232] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  973.836052][T22232] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  974.035541][T22248] loop5: detected capacity change from 0 to 32768
[  974.144988][T22248] lbmIODone: I/O error in JFS log
[  974.190957][T22248] *** Log Format Error ! ***
[  974.223791][T22248] lmLogInit: exit(-22)
[  974.261134][T22248] lmLogOpen: exit(-22)
[  974.290290][T21855] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  974.290890][T22260] IPVS: sync thread started: state = BACKUP, mcast_ifn = sit0, syncid = 0, id = 0
[  974.346052][T21855] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  974.387135][T21855] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  974.427709][T21855] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  974.628872][  T185] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[  974.790975][  T185] usb 2-1: Using ep0 maxpacket: 16
[  974.800303][  T185] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  974.818448][  T185] usb 2-1: config 0 interface 0 has no altsetting 0
[  974.832817][  T185] usb 2-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  974.850380][  T185] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  974.858691][  T185] usb 2-1: Product: syz
[  974.863028][  T185] usb 2-1: Manufacturer: syz
[  974.869575][  T185] usb 2-1: SerialNumber: syz
[  974.885158][  T185] usb 2-1: config 0 descriptor??
[  975.127233][  T185] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input54
[  975.424297][  T185] rc_core: IR keymap rc-imon-pad not found
[  975.433177][  T185] Registered IR keymap rc-empty
[  975.438186][  T185] imon 2-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  975.448817][  T185] imon 2-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  975.540285][  T185] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  975.557459][  T185] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input55
[  975.578560][  T185] imon 2-1:0.0: iMON device (15c2:0041, intf0) on usb<2:38> initialized
[  975.736566][    C0] imon 2-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  975.737261][  T803] usb 2-1: USB disconnect, device number 38
[  976.430999][T22278] loop6: detected capacity change from 0 to 256
[  976.445519][T22276] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5796'.
[  976.462836][T22269] loop2: detected capacity change from 0 to 4096
[  976.512319][   T31] audit: type=1800 audit(1785454533.942:230): pid=22278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5808" name="bus" dev="loop6" ino=1048920 res=0 errno=0
[  976.618136][T22279] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  976.631104][T22278] Invalid ELF header magic: != ELF
[  977.263051][T22282] loop8: detected capacity change from 0 to 32768
[  977.294179][T22282] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz"
[  977.302448][T22282] gfs2: fsid=syz:syz: Now mounting FS (format 1801)...
[  977.389728][T22282] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 1ms
[  977.401962][  T803] gfs2: fsid=syz:syz.0: jid=0, already locked for use
[  977.432059][  T803] gfs2: fsid=syz:syz.0: jid=0: Looking at journal...
[  977.900496][T22295] loop6: detected capacity change from 0 to 2048
[  977.960463][T22295] NILFS (loop6): invalid segment: Magic number mismatch
[  978.000736][T22295] NILFS (loop6): trying rollback from an earlier position
[  978.029745][  T803] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 597ms
[  978.072506][  T803] gfs2: fsid=syz:syz.0: jid=0: Done
[  978.108599][T22282] gfs2: fsid=syz:syz.0: first mount done, others may mount
[  978.125518][T22295] NILFS (loop6): recovery complete
[  978.182815][T22303] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  978.436966][T22277] loop7: detected capacity change from 0 to 32768
[  978.515101][T22277] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.5809 (22277)
[  978.617014][T22308] CIFS: bad ip= option (127�0.0.1)
[  978.644967][T22277] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  978.654990][T22308] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  978.702188][T22277] BTRFS info (device loop7): using blake2b checksum algorithm
[  978.836565][T22308] CIFS: Attempting to mount (null)
[  978.931785][T22277] BTRFS info (device loop7): enabling ssd optimizations
[  978.997971][T22277] BTRFS info (device loop7): turning on async discard
[  979.042184][T22277] BTRFS info (device loop7): enabling free space tree
[  979.444417][T22334] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '
'
[  979.444423][T22308] CIFS: VFS: Error connecting to socket. Aborting operation.
[  979.530105][T22336] netlink: 9 bytes leftover after parsing attributes in process `syz.5.5817'.
[  979.541087][T22308] CIFS: VFS: cifs_mount failed w/return code = -4
[  979.552765][T22336] gretap0: entered promiscuous mode
[  979.582909][T22336] netlink: 5 bytes leftover after parsing attributes in process `syz.5.5817'.
[  979.605001][T22336] 0��{X��: renamed from gretap0
[  979.699161][T22336] 0��{X��: left promiscuous mode
[  979.727969][T22336] 0��{X��: entered allmulticast mode
[  979.762746][T22336] A link change request failed with some changes committed already. Interface 
30��{X�� may have been left with an inconsistent configuration, please check.
[  980.131708][T15768] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  980.149007][    T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[  980.340545][    T9] usb 2-1: Using ep0 maxpacket: 16
[  980.368197][T22324] loop6: detected capacity change from 0 to 32768
[  980.421982][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0
[  980.487905][    T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  980.526907][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  980.571264][    T9] usb 2-1: Product: syz
[  980.590310][    T9] usb 2-1: Manufacturer: syz
[  980.621297][    T9] usb 2-1: SerialNumber: syz
[  980.671198][    T9] usb 2-1: config 0 descriptor??
[  980.736088][    T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  980.768978][T22355] loop2: detected capacity change from 0 to 512
[  980.791423][    T9] em28xx 2-1:0.0: DVB interface 0 found: bulk
[  980.816533][T22355] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  980.945810][T22355] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  981.012259][T22355] ext4 filesystem being mounted at /1011/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  981.092067][T22355] EXT4-fs error (device loop2): ext4_validate_block_bitmap:440: comm syz.2.5825: bg 0: block 217: padding at end of block bitmap is not set
[  981.195297][T22355] EXT4-fs (loop2): Remounting filesystem read-only
[  981.333124][    T9] em28xx 2-1:0.0: chip ID is em28174
[  981.413773][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  981.745070][    T9] em28xx 2-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[  981.817519][    T9] em28xx 2-1:0.0: board has no eeprom
[  981.918571][    T9] em28xx 2-1:0.0: Identified as PCTV tripleStick (292e) (card=94)
[  981.956694][    T9] em28xx 2-1:0.0: dvb set to bulk mode.
[  981.980171][  T185] em28xx 2-1:0.0: Binding DVB extension
[  982.030979][    T9] usb 2-1: USB disconnect, device number 39
[  982.089582][    T9] em28xx 2-1:0.0: Disconnecting em28xx
[  982.428199][T22385] loop1: detected capacity change from 0 to 16
[  982.499072][T22385] erofs (device loop1): unidentified algorithms fff0, please upgrade kernel
[  982.517013][  T185] em28xx 2-1:0.0: Registering input extension
[  982.540630][T22357] loop8: detected capacity change from 0 to 32768
[  982.614795][T22357] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  982.802120][T22357] XFS (loop8): Ending clean mount
[  982.871013][  T185] rc_core: IR keymap rc-pinnacle-pctv-hd not found
[  982.897018][  T185] Registered IR keymap rc-empty
[  982.969947][  T185] rc rc0: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  982.992651][  T185] input: PCTV tripleStick (292e) as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input56
[  983.125475][  T185] em28xx 2-1:0.0: Input extension successfully initialized
[  983.157053][    T9] em28xx 2-1:0.0: Closing input extension
[  983.201283][T15784] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  983.229741][T22371] loop7: detected capacity change from 0 to 32768
[  983.389124][T22371] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  983.523712][T22411] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5842'.
[  984.195813][   T31] audit: type=1800 audit(1785454541.621:231): pid=22419 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.5846" name="c_srate" dev="configfs" ino=61127 res=0 errno=0
[  984.584318][T22424] loop6: detected capacity change from 0 to 4096
[  984.614193][T15768] ocfs2: Unmounting device (7,7) on (node local)
[  984.632201][    T9] em28xx 2-1:0.0: Freeing device
[  984.846633][T22431] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  985.046614][T22432] NILFS error (device loop6): nilfs_bmap_lookup_contig: broken bmap (inode number=2)
[  985.137090][T22439] loop5: detected capacity change from 0 to 64
[  985.199022][T22438] overlayfs: upper fs does not support file handles, falling back to index=off.
[  985.238210][T22438] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  985.275592][T22432] Remounting filesystem read-only
[  985.281533][T22439] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  985.489735][T19460] NILFS (loop6): disposed unprocessed dirty file(s) when stopping log writer
[  986.195189][T22461] loop6: detected capacity change from 0 to 1024
[  986.271281][T22461] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  986.371966][T22461] ext4 filesystem being mounted at /143/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  986.400099][   T31] audit: type=1800 audit(1785454543.831:232): pid=22461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5863" name="file1" dev="loop6" ino=15 res=0 errno=0
[  986.434982][T22461] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.5863: lblock 0 mapped to illegal pblock 0 (length 1)
[  986.451792][   T31] audit: type=1800 audit(1785454543.851:233): pid=22461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.5863" name="file1" dev="loop6" ino=15 res=0 errno=0
[  986.498910][T22461] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  986.531299][T22461] EXT4-fs (loop6): This should not happen!! Data will be lost
[  986.531299][T22461] 
[  986.556546][T22461] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: comm syz.6.5863: lblock 0 mapped to illegal pblock 0 (length 1)
[  986.571525][T22461] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  986.595511][T22461] EXT4-fs (loop6): This should not happen!! Data will be lost
[  986.595511][T22461] 
[  986.689129][T19460] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[  986.729782][T19460] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  987.301998][T22477] loop1: detected capacity change from 0 to 512
[  987.311176][T22458] loop2: detected capacity change from 0 to 32768
[  987.388796][T22477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  987.425063][T22458] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  987.487623][T22477] ext4 filesystem being mounted at /991/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  987.844957][T22458] XFS (loop2): Ending clean mount
[  988.006201][T22502] overlayfs: upper fs does not support tmpfile.
[  988.023113][T22458] XFS (loop2): Quotacheck needed: Please wait.
[  988.057647][T22504] netlink: 40 bytes leftover after parsing attributes in process `syz.6.5877'.
[  988.093221][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  988.320467][T22506] loop5: detected capacity change from 0 to 2048
[  988.359793][T22473] loop8: detected capacity change from 0 to 32768
[  988.442081][T22473] 
[  988.442081][T22473]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  988.442081][T22473] 
[  988.442544][T22511] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  988.604098][T22458] XFS (loop2): Quotacheck: Done.
[  988.605440][   T31] audit: type=1800 audit(1785454546.011:234): pid=22473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5868" name="file1" dev="loop8" ino=4 res=0 errno=0
[  988.747954][T22458] XFS (loop2): User initiated shutdown received.
[  988.795366][T22458] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x139/0x1a0 (fs/xfs/xfs_fsops.c:467).  Shutting down filesystem.
[  988.891715][T18699] 
[  988.891715][T18699]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  988.891715][T18699] 
[  988.907705][T22458] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  988.957841][T18699] 
[  988.957841][T18699]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  988.957841][T18699] 
[  989.000397][  T116] 
[  989.000397][  T116]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  989.000397][  T116] 
[  989.028652][T15784] 
[  989.028652][T15784]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  989.028652][T15784] 
[  989.090130][T15784] 
[  989.090130][T15784]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  989.090130][T15784] 
[  989.153825][ T5620] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  990.124494][T22533] bond1: ARP target 9.0.0.0 is already present
[  990.147479][T22533] bond1: option arp_ip_target: invalid value (9)
[  990.179209][ T5627] Bluetooth: hci4: Malformed LE Event: 0x0d
[  990.182632][T22533] bond1 (unregistering): Released all slaves
[  990.298757][T16288] usb 2-1: new full-speed USB device number 40 using dummy_hcd
[  990.347498][T22542] loop6: detected capacity change from 0 to 1024
[  990.365784][T22542] EXT4-fs: Ignoring removed nomblk_io_submit option
[  990.435429][T22542] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  990.507486][T16288] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  990.541355][T16288] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  990.663503][T16288] pvrusb2: Hardware description: Terratec Grabster AV400
[  990.705905][T16288] pvrusb2: **********
[  990.727798][T16288] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  990.770829][T16288] pvrusb2: Important functionality might not be entirely working.
[  990.801979][T16288] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  990.872803][T16288] pvrusb2: **********
[  990.901463][ T2361] pvrusb2: Invalid write control endpoint
[  990.927641][T19460] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  991.106708][T16288] usb 2-1: USB disconnect, device number 40
[  991.164142][ T2361] pvrusb2: Invalid write control endpoint
[  991.213825][ T2361] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  991.240936][ T2361] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  991.271490][ T2361] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  991.300127][ T2361] pvrusb2: Device being rendered inoperable
[  991.326615][ T2361] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  991.371907][ T2361] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_b)
[  991.417592][ T2361] pvrusb2: Attached sub-driver cx25840
[  991.459075][ T2361] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  991.499922][ T2361] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  991.896829][T22578] loop5: detected capacity change from 0 to 2048
[  992.783868][T22603] Bluetooth: hci0: load_link_keys: expected 51203 bytes, got 7 bytes
[  992.842360][T22605] overlayfs: upper fs does not support file handles, falling back to index=off.
[  992.862411][T22605] overlayfs: NFS export requires "index=on", falling back to nfs_export=off.
[  993.147759][T22611] loop1: detected capacity change from 0 to 128
[  993.200800][T22613] input: syz0 as /devices/virtual/input/input58
[  993.208278][T22611] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  993.279881][T22609] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input57
[  993.311881][T22611] ext4 filesystem being mounted at /1000/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  993.531684][ T5636] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  993.593433][T22622] loop5: detected capacity change from 0 to 128
[  993.829870][T22624] netlink: 'syz.1.5922': attribute type 13 has an invalid length.
[  994.027416][T22633] loop8: detected capacity change from 0 to 512
[  994.054658][T22633] FAT-fs (loop8): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  994.643552][T22646] loop5: detected capacity change from 0 to 512
[  994.712778][T22646] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  994.727878][T22646] ext4 filesystem being mounted at /194/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  994.923640][T22655] loop2: detected capacity change from 0 to 64
[  995.094134][T19332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  995.131978][    T9] usb 9-1: new high-speed USB device number 17 using dummy_hcd
[  995.358835][    T9] usb 9-1: Using ep0 maxpacket: 16
[  995.373476][    T9] usb 9-1: config 0 interface 0 altsetting 2 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  995.397448][T22659] input: syz0 as /devices/virtual/input/input59
[  995.427233][    T9] usb 9-1: config 0 interface 0 has no altsetting 0
[  995.459572][    T9] usb 9-1: New USB device found, idVendor=15c2, idProduct=0041, bcdDevice=1f.20
[  995.491180][    T9] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  995.512798][    T9] usb 9-1: Product: syz
[  995.532686][    T9] usb 9-1: Manufacturer: syz
[  995.552149][    T9] usb 9-1: SerialNumber: syz
[  995.571516][    T9] usb 9-1: config 0 descriptor??
[  995.738967][  T185] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[  995.898772][  T185] usb 3-1: Using ep0 maxpacket: 32
[  995.925022][  T185] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[  995.952637][    T9] input: iMON Panel, Knob and Mouse(15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/input/input60
[  995.977673][  T185] usb 3-1: config 0 interface 0 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[  996.005064][  T185] usb 3-1: config 0 interface 0 has no altsetting 0
[  996.030422][  T185] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  996.053848][  T185] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  996.109337][  T185] usb 3-1: Product: syz
[  996.129992][  T185] usb 3-1: Manufacturer: syz
[  996.135047][  T185] usb 3-1: SerialNumber: syz
[  996.199899][  T185] usb 3-1: config 0 descriptor??
[  996.510645][    T9] rc_core: IR keymap rc-imon-pad not found
[  996.527592][T22688] loop5: detected capacity change from 0 to 2048
[  996.541786][    T9] Registered IR keymap rc-empty
[  996.566566][    T9] imon 9-1:0.0: Looks like you're trying to use an IR protocol this device does not support
[  996.586668][T22688] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  996.596098][    T9] imon 9-1:0.0: Unsupported IR protocol specified, overriding to iMON IR protocol
[  996.647063][    T9] rc rc0: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0
[  996.669845][  T185] gs_usb 3-1:0.0: Configuring for 22 interfaces
[  996.760871][    T9] input: iMON Remote (15c2:0041) as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:0.0/rc/rc0/input61
[  996.835637][    C0] imon 9-1:0.0: imon usb_rx_callback_intf0: status(-71)
[  996.858041][    T9] imon 9-1:0.0: iMON device (15c2:0041, intf0) on usb<9:17> initialized
[  996.890005][  T185] gs_usb 3-1:0.0: Couldn't register candev for channel 0 (-EINVAL)
[  996.914901][    T9] usb 9-1: USB disconnect, device number 17
[  996.939237][  T185] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -22
[  996.989433][ T5761] usb 2-1: new full-speed USB device number 41 using dummy_hcd
[  997.105486][T22702] loop5: detected capacity change from 0 to 128
[  997.165421][ T5761] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  997.201682][ T5761] usb 2-1: config 0 has no interface number 0
[  997.229775][ T5761] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  997.246953][T16316] usb 3-1: USB disconnect, device number 34
[  997.288158][ T5761] usb 2-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0
[  997.327343][ T5761] usb 2-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  997.373660][ T5761] usb 2-1: config 0 interface 1 has no altsetting 0
[  997.402902][ T5761] usb 2-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  997.430567][ T5761] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  997.453881][ T5761] usb 2-1: config 0 descriptor??
[  998.015758][T22714] loop8: detected capacity change from 0 to 256
[  998.039638][T22714] exfat: Deprecated parameter 'utf8'
[  998.058760][T22714] exfat: Deprecated parameter 'namecase'
[  998.077403][T22714] exfat: Deprecated parameter 'utf8'
[  998.105997][ T5761] uclogic 0003:145F:0212.0037: pen parameters not found
[  998.140165][ T5761] uclogic 0003:145F:0212.0037: interface is invalid, ignoring
[  998.194889][T22714] exFAT-fs (loop8): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d)
[  998.322195][T22717] loop2: detected capacity change from 0 to 2048
[  998.370863][T22717] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  998.435531][ T5857] usb 2-1: USB disconnect, device number 41
[  998.495820][T22722] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  998.506348][ T5880] udevd[5880]: incorrect nilfs2 checksum on /dev/loop2
[  998.553768][T22721] loop7: detected capacity change from 0 to 512
[  998.645960][T22722] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  998.659948][T22722] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  998.674472][T22722] Remounting filesystem read-only
[  998.675687][T22721] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  998.697854][T22717] NILFS (loop2): mounting fs with errors
[  998.754487][T22721] ext4 filesystem being mounted at /347/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  999.006845][T22722] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  999.062568][T22722] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[  999.115501][T22722] Remounting filesystem read-only
[  999.187424][ T5620] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[  999.311193][T15768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  999.404667][T22711] loop5: detected capacity change from 0 to 32768
[  999.535067][T22711] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 1000.008826][T22748] loop7: detected capacity change from 0 to 4096
[ 1000.151181][T22759] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1000.238615][  T185] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 1000.302938][T22748] NILFS error (device loop7): nilfs_bmap_lookup_contig: broken bmap (inode number=2)
[ 1000.353400][T22748] Remounting filesystem read-only
[ 1000.397715][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[ 1000.405420][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[ 1000.438789][  T185] usb 3-1: Using ep0 maxpacket: 8
[ 1000.448478][  T185] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[ 1000.470357][  T185] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[ 1000.498174][  T185] usb 3-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[ 1000.518291][  T185] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1000.547348][  T185] usb 3-1: config 0 descriptor??
[ 1000.764177][T19332] ocfs2: Unmounting device (7,5) on (node local)
[ 1000.831371][T15768] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer
[ 1000.990315][  T185] sunplus 0003:04FC:05D8.0038: unknown main item tag 0x0
[ 1001.023798][  T185] sunplus 0003:04FC:05D8.0038: unknown main item tag 0x0
[ 1001.055996][  T185] sunplus 0003:04FC:05D8.0038: unknown main item tag 0x0
[ 1001.101256][  T185] sunplus 0003:04FC:05D8.0038: unknown main item tag 0x0
[ 1001.135066][  T185] sunplus 0003:04FC:05D8.0038: unknown main item tag 0x0
[ 1001.172775][  T185] sunplus 0003:04FC:05D8.0038: unknown main item tag 0x0
[ 1001.213643][  T185] sunplus 0003:04FC:05D8.0038: unbalanced collection at end of report description
[ 1001.265703][  T185] sunplus 0003:04FC:05D8.0038: probe with driver sunplus failed with error -22
[ 1001.286898][T22772] macsec1: entered promiscuous mode
[ 1001.296833][T22769] loop8: detected capacity change from 0 to 512
[ 1001.344185][  T185] usb 3-1: USB disconnect, device number 35
[ 1001.383985][T22774] 0��{X��: left allmulticast mode
[ 1001.467991][T22769] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1001.512594][T22769] ext4 filesystem being mounted at /422/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1001.673709][T22780] netlink: 148 bytes leftover after parsing attributes in process `syz.6.5990'.
[ 1001.787422][T15784] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1001.922358][T22786] loop6: detected capacity change from 0 to 512
[ 1001.969410][T22786] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1002.005999][T22786] EXT4-fs (loop6): 1 truncate cleaned up
[ 1002.036283][T22786] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1002.081110][T22790] loop8: detected capacity change from 0 to 2048
[ 1002.232242][T19460] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1002.270242][T22796] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1002.394011][   T31] audit: type=1800 audit(1785454559.811:235): pid=22790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.5993" name="file1" dev="loop8" ino=15 res=0 errno=0
[ 1002.744942][T22796] NILFS (loop8): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[ 1002.786887][T22796] NILFS error (device loop8): nilfs_bmap_propagate: broken bmap (inode number=4)
[ 1002.849294][T22796] Remounting filesystem read-only
[ 1003.084087][T15784] NILFS (loop8): disposed unprocessed dirty file(s) when stopping log writer
[ 1003.436711][T22820] loop6: detected capacity change from 0 to 512
[ 1004.351679][T22833] loop6: detected capacity change from 0 to 764
[ 1004.945381][T22843] input input62: cannot allocate more than FF_MAX_EFFECTS effects
[ 1005.031116][T22845] loop2: detected capacity change from 0 to 64
[ 1005.366720][T22845] syz.2.6019: attempt to access beyond end of device
[ 1005.366720][T22845] loop2: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[ 1005.540670][T22812] loop5: detected capacity change from 0 to 32768
[ 1005.768165][T22812] ocfs2: Mounting device (7,5) on (node local, slot 0) with ordered data mode.
[ 1006.564769][T22858] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1006.573707][T22838] loop1: detected capacity change from 0 to 32768
[ 1006.635472][T22838] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6014 (22838)
[ 1006.752013][T22838] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1006.773828][T22838] BTRFS info (device loop1): using blake2b checksum algorithm
[ 1006.889548][ T5769] libceph: connect (1)[c::]:6789 error -101
[ 1006.919579][ T5769] libceph: mon0 (1)[c::]:6789 connect error
[ 1007.065838][T22838] BTRFS info (device loop1): enabling ssd optimizations
[ 1007.103605][T22838] BTRFS info (device loop1): turning on async discard
[ 1007.130127][T22838] BTRFS info (device loop1): enabling free space tree
[ 1007.145044][T19332] ocfs2: Unmounting device (7,5) on (node local)
[ 1007.213938][ T5769] libceph: connect (1)[c::]:6789 error -101
[ 1007.240500][ T5769] libceph: mon0 (1)[c::]:6789 connect error
[ 1007.551537][T22865] ceph: No mds server is up or the cluster is laggy
[ 1008.001934][T22893] loop8: detected capacity change from 0 to 4096
[ 1008.009610][T22894] loop2: detected capacity change from 0 to 4096
[ 1008.052705][T22893] ntfs3(loop8): Different NTFS sector size (4096) and media sector size (512).
[ 1008.187603][T22900] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1008.213632][T22893] ntfs3(loop8): ino=19, mi_enum_attr
[ 1008.223747][T22894] NILFS error (device loop2): nilfs_check_folio: bad entry in directory #2: rec_len is too small for name_len - offset=32, inode=11, rec_len=24, name_len=77
[ 1008.258188][T22893] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[ 1008.339446][ T5636] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1008.474395][T22894] Remounting filesystem read-only
[ 1008.482445][T22898] loop6: detected capacity change from 0 to 4096
[ 1008.558085][T22903] netlink: 24 bytes leftover after parsing attributes in process `syz.5.6028'.
[ 1008.634324][T22903] lo: Caught tx_queue_len zero misconfig
[ 1008.836534][T22905] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1009.498782][ T5761] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 1009.711776][ T5761] usb 6-1: Using ep0 maxpacket: 8
[ 1009.747441][ T5761] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1009.781088][ T5761] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1009.826333][ T5761] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1009.838812][T22923] ip6_tables: ip6tables: counters copy to user failed while replacing table
[ 1009.876163][ T5761] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1009.974817][ T5761] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1010.017235][ T5761] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1010.308682][ T5761] usb 6-1: GET_CAPABILITIES returned 0
[ 1010.346641][ T5761] usbtmc 6-1:16.0: can't read capabilities
[ 1010.613751][ T5769] usb 6-1: USB disconnect, device number 8
[ 1011.218322][T22944] loop2: detected capacity change from 0 to 4096
[ 1011.239965][T22944] /dev/loop2: Can't open blockdev
[ 1011.975610][T22932] loop8: detected capacity change from 0 to 32768
[ 1012.084170][T22932] XFS (loop8): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1012.203095][T22963] netlink: 8 bytes leftover after parsing attributes in process `syz.7.6062'.
[ 1012.422918][T22932] XFS (loop8): Ending clean mount
[ 1012.868186][T22932] XFS (loop8): Metadata CRC error detected at xfs_rmapbt_read_verify+0x26/0xe0, xfs_rmapbt block 0x14 
[ 1012.960723][T22932] XFS (loop8): Unmount and run xfs_repair
[ 1013.003170][T22932] XFS (loop8): First 128 bytes of corrupted metadata buffer:
[ 1013.044293][T22932] 00000000: 52 4d 42 33 00 00 00 0c ff ff ff ff ff ff ff ff  RMB3............
[ 1013.077770][T22932] 00000010: 00 a7 50 00 00 00 00 14 00 00 00 01 00 00 00 80  ..P.............
[ 1013.101180][T22979] loop5: detected capacity change from 0 to 256
[ 1013.109398][T22932] 00000020: bf dc 47 fc 10 d8 4e ed a5 62 11 a8 31 b3 f7 91  ..G...N..b..1...
[ 1013.144470][T22932] 00000030: 00 00 00 00 5b af 3b 1d 00 00 00 00 00 00 00 01  ....[.;.........
[ 1013.189240][T22932] 00000040: ff ff ff ff ff ff ff fd 00 00 00 00 00 00 00 00  ................
[ 1013.228778][T22932] 00000050: 00 00 00 01 00 00 00 02 ff ff ff ff ff ff ff fb  ................
[ 1013.304012][T22932] 00000060: 00 00 00 00 00 00 00 00 00 00 00 03 00 00 00 02  ................
[ 1013.361228][T22953] loop6: detected capacity change from 0 to 32768
[ 1013.376637][T22932] 00000070: ff ff ff ff ff ff ff fa 00 00 00 00 00 00 00 00  ................
[ 1013.417165][T22932] XFS (loop8): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x14 len 4 error 74
[ 1013.467236][T22932] XFS (loop8): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x4c5/0x8b0 (fs/xfs/xfs_trans_buf.c:280).  Shutting down filesystem.
[ 1013.501234][T22932] XFS (loop8): Please unmount the filesystem and rectify the problem(s)
[ 1013.558973][T22953] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[ 1013.590526][T15784] XFS (loop8): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[ 1013.684898][T22953] (syz.6.6059,22953,0):ocfs2_read_blocks_sync:110 ERROR: status = -12
[ 1013.781450][T22953] (syz.6.6059,22953,0):ocfs2_get_suballoc_slot_bit:3159 ERROR: read block 124554051584 failed -12
[ 1013.824307][T22967] loop1: detected capacity change from 0 to 32768
[ 1013.871488][T22953] (syz.6.6059,22953,1):ocfs2_get_suballoc_slot_bit:3192 ERROR: status = -12
[ 1013.941294][T22967] debugfs: 'B1DE653C5FFC4D88B33B244AAB9EB3E9' already exists in 'ocfs2'
[ 1014.033913][T22953] (syz.6.6059,22953,0):ocfs2_test_inode_bit:3278 ERROR: get alloc slot and bit failed -12
[ 1014.075193][T22953] (syz.6.6059,22953,0):ocfs2_test_inode_bit:3323 ERROR: status = -12
[ 1014.094564][T22953] (syz.6.6059,22953,0):ocfs2_get_dentry:78 ERROR: test inode bit failed -12
[ 1014.108773][T22967] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[ 1014.454397][T22990] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1014.725715][T19460] ocfs2: Unmounting device (7,6) on (node local)
[ 1014.840283][T22975] loop2: detected capacity change from 0 to 32768
[ 1014.943545][T22975] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1015.088857][T22975] XFS (loop2): Ending clean mount
[ 1015.412705][ T5636] ocfs2: Unmounting device (7,1) on (node local)
[ 1015.422266][T23011] loop5: detected capacity change from 0 to 64
[ 1015.680295][ T5620] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1015.970541][T19332] hfs: node 4:3 still has 1 user(s)!
[ 1016.361822][T23017] vlan2: entered allmulticast mode
[ 1016.396610][T23017] batadv_slave_0: entered allmulticast mode
[ 1017.107200][T23001] loop8: detected capacity change from 0 to 32768
[ 1017.259132][T23001] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.6070 (23001)
[ 1017.642566][T23001] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1017.776648][T23001] BTRFS info (device loop8): using blake2b checksum algorithm
[ 1017.858134][T23035] netlink: 40 bytes leftover after parsing attributes in process `syz.7.6085'.
[ 1017.883320][T23001] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR
[ 1017.909549][T23035] sch_fq: defrate 0 ignored.
[ 1017.934351][T23001] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR
[ 1017.953364][T23001] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR
[ 1018.009585][T23001] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR
[ 1018.045053][T23001] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR
[ 1018.071137][T23001] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR
[ 1018.099677][T23001] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR
[ 1018.120785][T23001] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR
[ 1018.131889][T23001] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR
[ 1018.241067][T23001] BTRFS error (device loop8): open_ctree failed: -12
[ 1018.753368][T23015] loop6: detected capacity change from 0 to 32768
[ 1018.767865][T23056] loop2: detected capacity change from 0 to 1764
[ 1018.889187][T23015] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1019.132918][T23015] XFS (loop6): Ending clean mount
[ 1019.337490][T23075] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1019.407665][T19460] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1019.917572][T23027] loop1: detected capacity change from 0 to 32768
[ 1019.964767][T23027] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6084 (23027)
[ 1020.036491][T23090] loop8: detected capacity change from 0 to 64
[ 1020.058221][T23027] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1020.109802][T23027] BTRFS info (device loop1): using crc32c checksum algorithm
[ 1020.266369][T23083] loop5: detected capacity change from 0 to 4096
[ 1020.369113][T23083] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[ 1020.613177][T23083] ntfs3(loop5): ino=19, mi_enum_attr
[ 1020.658327][T23083] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[ 1020.756760][T23027] BTRFS error (device loop1): open_ctree failed: -4
[ 1021.596238][T23122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6107'.
[ 1021.739773][T23126] netlink: 'syz.8.6109': attribute type 1 has an invalid length.
[ 1021.951014][T23128] loop7: detected capacity change from 0 to 256
[ 1022.006263][T23128] exFAT-fs (loop7): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[ 1022.156180][T23136] loop6: detected capacity change from 0 to 64
[ 1022.324261][T23136] syz.6.6114: attempt to access beyond end of device
[ 1022.324261][T23136] loop6: rw=2049, sector=268435468, nr_sectors = 2 limit=64
[ 1022.744381][T23143] loop1: detected capacity change from 0 to 16
[ 1022.778611][ T5857] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 1022.805970][T23143] erofs (device loop1): DAX unsupported by block device. Turning off DAX.
[ 1022.969130][ T5857] usb 3-1: Using ep0 maxpacket: 16
[ 1022.985683][ T5857] usb 3-1: config 0 interface 0 altsetting 64 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1023.031645][ T5857] usb 3-1: config 0 interface 0 has no altsetting 0
[ 1023.087082][ T5857] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[ 1023.120651][ T5857] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1023.176094][ T5857] usb 3-1: config 0 descriptor??
[ 1023.444666][T23151] loop8: detected capacity change from 0 to 4096
[ 1023.564326][T23154] NILFS (loop8): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1023.704273][ T5857] mcp2221 0003:04D8:00DD.0039: USB HID v0.01 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0
[ 1023.824504][T23161] loop7: detected capacity change from 0 to 512
[ 1023.955194][T23161] EXT4-fs error (device loop7): ext4_iget_extra_inode:5179: inode #15: comm syz.7.6121: corrupted in-inode xattr: invalid ea_ino
[ 1024.002377][T23161] loop7: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117
[ 1024.008610][    C0] EXT4-fs (loop7): error count since last fsck: 1
[ 1024.024459][    C0] EXT4-fs (loop7): initial error at time 1785454581: ext4_iget_extra_inode:5179: inode 15
[ 1024.034502][    C0] EXT4-fs (loop7): last error at time 1785454581: ext4_iget_extra_inode:5179: inode 15
[ 1024.099266][T23161] EXT4-fs error (device loop7): ext4_orphan_get:1402: comm syz.7.6121: couldn't read orphan inode 15 (err -117)
[ 1024.136625][ T5857] usb 3-1: USB disconnect, device number 36
[ 1024.158740][T23161] loop7: lost filesystem error report for type 5 error -117
[ 1024.182309][T23161] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1024.215743][T23143] erofs (device loop1): mounted with root inode @ nid 36.
[ 1024.692105][T15768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1025.151775][T23187] loop6: detected capacity change from 0 to 512
[ 1025.199776][T23187] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1025.250217][T23187] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1025.279205][T23187] EXT4-fs: Ignoring removed oldalloc option
[ 1025.318760][T23187] EXT4-fs: Ignoring removed mblk_io_submit option
[ 1025.368335][T23187] EXT4-fs (loop6): Test dummy encryption mode enabled
[ 1025.408082][T23187] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[ 1025.470323][T23187] EXT4-fs (loop6): 1 truncate cleaned up
[ 1025.496907][T23193] loop8: detected capacity change from 0 to 2048
[ 1025.510329][T23187] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1025.540434][T23193] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1025.768608][T16316] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 1025.905286][T19460] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1025.966264][T16316] usb 6-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[ 1026.015912][T16316] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1026.024453][T16316] usb 6-1: Product: syz
[ 1026.029510][T16316] usb 6-1: Manufacturer: syz
[ 1026.034389][T16316] usb 6-1: SerialNumber: syz
[ 1026.417945][T16316] rtl8150 6-1:1.0: couldn't reset the device
[ 1026.443783][T16316] rtl8150 6-1:1.0: probe with driver rtl8150 failed with error -5
[ 1026.477411][T23186] loop2: detected capacity change from 0 to 32768
[ 1026.523625][T23207] block2mtd: error: cannot open device /dev/loop0
[ 1026.539899][T16316] usb 6-1: USB disconnect, device number 9
[ 1026.643171][T23186] jfs_create: dtInsert returned -EIO
[ 1026.668330][T23186] ERROR: (device loop2): txAbort: 
[ 1026.668330][T23186] 
[ 1026.685567][T23186] ERROR: (device loop2): remounting filesystem as read-only
[ 1026.938823][  T803] usb 9-1: new full-speed USB device number 18 using dummy_hcd
[ 1027.135255][  T803] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1027.170521][  T803] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1027.216826][  T803] usb 9-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00
[ 1027.267515][  T803] usb 9-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[ 1027.322624][  T803] usb 9-1: Manufacturer: syz
[ 1027.367435][  T803] usb 9-1: config 0 descriptor??
[ 1027.860825][  T803] cougar 0003:060B:700A.003A: unknown main item tag 0x0
[ 1027.887510][  T803] cougar 0003:060B:700A.003A: unknown main item tag 0x0
[ 1027.928232][  T803] cougar 0003:060B:700A.003A: unknown main item tag 0x0
[ 1027.954779][  T803] cougar 0003:060B:700A.003A: unknown main item tag 0x0
[ 1027.976111][  T803] cougar 0003:060B:700A.003A: unknown main item tag 0x0
[ 1028.009164][  T803] cougar 0003:060B:700A.003A: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.8-1/input0
[ 1028.186455][  T803] usb 9-1: USB disconnect, device number 18
[ 1028.453392][T23210] loop6: detected capacity change from 0 to 32768
[ 1028.473096][ T5769] kernel read not supported for file /dsp1 (pid: 5769 comm: kworker/0:5)
[ 1028.496033][T23210] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6144 (23210)
[ 1028.559833][T23238] fido_id[23238]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory
[ 1028.623475][T23210] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1028.698447][T23210] BTRFS info (device loop6): using blake2b checksum algorithm
[ 1029.028242][T23259] loop5: detected capacity change from 0 to 8
[ 1029.035964][T23210] BTRFS info (device loop6): enabling ssd optimizations
[ 1029.036008][T23210] BTRFS info (device loop6): turning on async discard
[ 1029.036039][T23210] BTRFS info (device loop6): enabling free space tree
[ 1029.036078][T23210] BTRFS info (device loop6): use zlib compression, level 3
[ 1029.361749][T23259] SQUASHFS error: Unable to read directory block [1d0:74]
[ 1029.402148][T19460] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1029.897130][T23267] ubi16: attaching mtd0
[ 1030.093718][T23274] loop7: detected capacity change from 0 to 512
[ 1030.111808][T23273] loop5: detected capacity change from 0 to 256
[ 1030.176496][T23277] netlink: 20 bytes leftover after parsing attributes in process `syz.6.6163'.
[ 1030.331862][T23282] loop2: detected capacity change from 0 to 2048
[ 1030.382156][T23274] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1030.440199][T23282] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1030.449848][T23274] ext4 filesystem being mounted at /391/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1030.473540][T23267] ubi16: scanning is finished
[ 1030.514113][T23267] ubi16: empty MTD device detected
[ 1031.053708][T15768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1032.044919][T23267] ubi16 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt16d", error -4
[ 1032.802203][T23299] loop2: detected capacity change from 0 to 32768
[ 1032.819220][T23299] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.6176 (23299)
[ 1032.877254][T23299] BTRFS info (device loop2): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1032.929657][T23299] BTRFS info (device loop2): using blake2b checksum algorithm
[ 1032.943787][T23327] block2mtd: too many arguments
[ 1033.277297][T23299] BTRFS info (device loop2): enabling ssd optimizations
[ 1033.305428][T23299] BTRFS info (device loop2): turning on async discard
[ 1033.332395][T23299] BTRFS info (device loop2): enabling free space tree
[ 1033.351445][T23299] BTRFS info (device loop2): use zlib compression, level 3
[ 1033.615246][T23349] loop1: detected capacity change from 0 to 512
[ 1033.636773][T23349] EXT4-fs: group quota file already specified
[ 1033.649438][T23348] netlink: 'syz.5.6191': attribute type 1 has an invalid length.
[ 1033.675692][ T5620] BTRFS info (device loop2): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[ 1033.702625][T23348] netlink: 192 bytes leftover after parsing attributes in process `syz.5.6191'.
[ 1033.749147][T23348] netlink: 'syz.5.6191': attribute type 1 has an invalid length.
[ 1033.777590][T23348] netlink: 29 bytes leftover after parsing attributes in process `syz.5.6191'.
[ 1034.414893][T23323] loop6: detected capacity change from 0 to 32768
[ 1034.570415][T23323] 
[ 1034.570415][T23323]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1034.570415][T23323] 
[ 1034.657773][T23325] loop8: detected capacity change from 0 to 32768
[ 1034.766537][T23323] ERROR: (device loop6): xtTruncate_pmap: xt_getpage: xtree page corrupt
[ 1034.766537][T23323] 
[ 1034.836644][T23325] XFS (loop8): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1034.846444][T23323] ERROR: (device loop6): txAbort: 
[ 1034.846444][T23323] 
[ 1034.945258][T23366] ERROR: (device loop6): diWrite: ixpxd invalid
[ 1034.945258][T23366] 
[ 1035.047954][T23366] ERROR: (device loop6): txAbort: 
[ 1035.047954][T23366] 
[ 1035.112956][T23323] ERROR: (device loop6): xtTruncate: xt_getpage: xtree page corrupt
[ 1035.112956][T23323] 
[ 1035.186771][T23325] XFS (loop8): Ending clean mount
[ 1035.251581][T23323] 
[ 1035.251581][T23323]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1035.251581][T23323] 
[ 1035.338568][T16316] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 1035.441478][T23323] 
[ 1035.441478][T23323]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[ 1035.441478][T23323] 
[ 1035.552022][T16316] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1035.581992][T16316] usb 2-1: config 0 has no interface number 0
[ 1035.613404][T16316] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1035.650168][T15784] XFS (loop8): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1035.668300][T16316] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1035.733792][T16316] usb 2-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1035.744356][T23382] loop2: detected capacity change from 0 to 128
[ 1035.817625][T16316] usb 2-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[ 1035.886203][T16316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1035.990440][T16316] usb 2-1: config 0 descriptor??
[ 1036.366161][T23384] loop2: detected capacity change from 0 to 2048
[ 1036.530391][T23387] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1036.700695][T16316] input: HID 28bd:0042 Pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:28BD:0042.003B/input/input64
[ 1036.881126][T23387] NILFS (loop2): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[ 1036.898629][T23392] size and base must be multiples of 4 kiB
[ 1036.909886][T23387] NILFS error (device loop2): nilfs_bmap_propagate: broken bmap (inode number=4)
[ 1036.914180][T23392] CPU: 0 UID: 0 PID: 23392 Comm: syz.6.6204 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1036.914234][T23392] Tainted: [L]=SOFTLOCKUP
[ 1036.914249][T23392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1036.914272][T23392] Call Trace:
[ 1036.914286][T23392]  <TASK>
[ 1036.914300][T23392]  dump_stack_lvl+0x100/0x190
[ 1036.914349][T23392]  mtrr_add.cold+0x74/0x87
[ 1036.914392][T23392]  mtrr_ioctl+0x25a/0xcf0
[ 1036.914440][T23392]  ? __pfx_mtrr_ioctl+0x10/0x10
[ 1036.914495][T23392]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1036.914540][T23392]  ? find_held_lock+0x2b/0x80
[ 1036.914598][T23392]  ? __fget_files+0x215/0x3d0
[ 1036.914659][T23392]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1036.914709][T23392]  ? __fget_files+0x21f/0x3d0
[ 1036.914763][T23392]  ? __pfx_mtrr_ioctl+0x10/0x10
[ 1036.914810][T23392]  proc_reg_unlocked_ioctl+0x229/0x320
[ 1036.914868][T23392]  ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10
[ 1036.914931][T23392]  __x64_sys_ioctl+0x18e/0x210
[ 1036.914981][T23392]  do_syscall_64+0x115/0x870
[ 1036.915041][T23392]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1036.915080][T23392] RIP: 0033:0x7f206e19e019
[ 1036.915110][T23392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 1036.915153][T23392] RSP: 002b:00007f206f133028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 1036.915189][T23392] RAX: ffffffffffffffda RBX: 00007f206e425fa0 RCX: 00007f206e19e019
[ 1036.915214][T23392] RDX: 0000200000000140 RSI: 0000000040104d01 RDI: 0000000000000003
[ 1036.915239][T23392] RBP: 00007f206e23500c R08: 0000000000000000 R09: 0000000000000000
[ 1036.915262][T23392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1036.915286][T23392] R13: 00007f206e426038 R14: 00007f206e425fa0 R15: 00007ffe79af2708
[ 1036.915337][T23392]  </TASK>
[ 1037.152666][T23387] Remounting filesystem read-only
[ 1037.153748][T16316] uclogic 0003:28BD:0042.003B: input,hidraw0: USB HID v0.00 Keypad [HID 28bd:0042] on usb-dummy_hcd.1-1/input1
[ 1037.217670][T16316] usb 2-1: USB disconnect, device number 42
[ 1037.225490][ T5620] NILFS (loop2): disposed unprocessed dirty file(s) when stopping log writer
[ 1037.244019][T23395] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6210'.
[ 1037.493280][T23397] fido_id[23397]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/2-1/report_descriptor': No such file or directory
[ 1037.610879][T23401] loop2: detected capacity change from 0 to 512
[ 1037.721234][T23401] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[ 1037.751817][T23399] loop6: detected capacity change from 0 to 4096
[ 1037.779327][T23401] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[ 1037.874390][T23401] EXT4-fs (loop2): 1 truncate cleaned up
[ 1037.951534][T23401] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1038.003966][T23399] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[ 1038.081779][T23404] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 227 vs 220 free clusters
[ 1038.140585][T23405] loop8: detected capacity change from 0 to 4096
[ 1038.168048][T23399] ntfs3(loop6): Failed to load $Extend (-22).
[ 1038.174825][T23399] ntfs3(loop6): Failed to initialize $Extend.
[ 1038.224242][T23409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6214'.
[ 1038.267323][T23401] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[ 1038.283918][T23409] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6214'.
[ 1038.316017][T23405] ntfs3(loop8): ino=3, ntfs_set_state failed, -22.
[ 1038.378296][T23405] ntfs3(loop8): Failed to initialize $Extend/$ObjId.
[ 1038.402537][T23401] EXT4-fs warning (device loop2): ext4_resize_begin:81: There are errors in the filesystem, so online resizing is not allowed
[ 1038.482187][   T31] audit: type=1800 audit(1785454595.901:236): pid=23405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.6212" name="file1" dev="loop8" ino=30 res=0 errno=0
[ 1038.495852][T23405] ntfs3(loop8): ino=1e, "file1" attr_set_size_ex
[ 1038.543410][T23386] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1038.625239][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1038.833084][T23415] netlink: 'syz.1.6216': attribute type 2 has an invalid length.
[ 1038.862357][T23415] netlink: 67 bytes leftover after parsing attributes in process `syz.1.6216'.
[ 1038.867481][T23402] ntfs3(loop8): ino=1e, "file1" attr_set_size_ex
[ 1039.047692][ T1149] ntfs3(loop8): ino=3, ntfs3_write_inode failed, -22.
[ 1039.057138][T23417] loop7: detected capacity change from 0 to 512
[ 1039.085732][T15784] ntfs3(loop8): ino=3, ntfs_set_state failed, -22.
[ 1039.130139][T23417] EXT4-fs (loop7): warning: mounting unchecked fs, running e2fsck is recommended
[ 1039.145866][T15784] ntfs3(loop8): Mark volume as dirty due to NTFS errors
[ 1039.202115][T15784] ntfs3(loop8): ino=3, ntfs_set_state failed, -22.
[ 1039.246779][T23417] EXT4-fs (loop7): 1 truncate cleaned up
[ 1039.268643][   T12] ntfs3(loop8): ino=3, ntfs3_write_inode failed, -22.
[ 1039.316191][T23417] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1039.463490][T23417] EXT4-fs error (device loop7): ext4_validate_block_bitmap:440: comm syz.7.6218: bg 0: block 465: padding at end of block bitmap is not set
[ 1039.508208][T23417] EXT4-fs (loop7): Remounting filesystem read-only
[ 1039.704418][T23386] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1039.770630][T15768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1040.171641][T23386] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1040.492303][T23446] loop2: detected capacity change from 0 to 2048
[ 1040.534926][T23446] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1040.602070][T23386] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1040.660723][T23452] loop7: detected capacity change from 0 to 2048
[ 1040.718114][T23452] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1040.738955][ T5769] usb 9-1: new full-speed USB device number 19 using dummy_hcd
[ 1040.757678][T23452] ext4 filesystem being mounted at /399/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1040.856306][T23452] fs-verity (loop7, inode 13): Unsupported log_blocksize: 14
[ 1040.903572][ T5769] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[ 1040.952703][ T5769] usb 9-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[ 1041.011917][ T5769] usb 9-1: config 0 interface 0 has no altsetting 0
[ 1041.047278][ T5769] usb 9-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 1041.066974][ T5769] usb 9-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 1041.077126][ T5769] usb 9-1: Product: syz
[ 1041.087596][ T5769] usb 9-1: Manufacturer: syz
[ 1041.096301][ T5769] usb 9-1: SerialNumber: syz
[ 1041.121646][T15768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1041.142488][ T5769] usb 9-1: config 0 descriptor??
[ 1041.157146][ T5769] usb 9-1: selecting invalid altsetting 0
[ 1041.478916][T23460] overlayfs: upper fs does not support file handles, falling back to index=off.
[ 1041.499783][T23030] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1041.703666][T23030] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1041.722963][ T5769] usb 9-1: USB disconnect, device number 19
[ 1041.922442][ T5814] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1042.028841][T14641] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1042.138356][T23458] loop2: detected capacity change from 0 to 32768
[ 1042.235309][   T31] audit: type=1800 audit(1785454599.661:237): pid=23458 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6234" name="file1" dev="loop2" ino=4 res=0 errno=0
[ 1042.628265][T23471] loop7: detected capacity change from 0 to 1024
[ 1042.709646][T23471] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1042.861668][T23475] EXT4-fs warning (device loop7): ext4_rmdir:3189: inode #11: comm syz.7.6240: empty directory 'file0' has too many links (111)
[ 1043.035134][T15768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1043.381077][T23488] loop7: detected capacity change from 0 to 64
[ 1044.778690][ T5761] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 1044.960239][ T5761] usb 6-1: Using ep0 maxpacket: 32
[ 1044.982605][ T5761] usb 6-1: config 0 has an invalid interface number: 51 but max is 0
[ 1045.025398][ T5761] usb 6-1: config 0 has no interface number 0
[ 1045.060843][ T5761] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 1045.128544][ T5761] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1045.195683][ T5761] usb 6-1: Product: syz
[ 1045.238190][ T5761] usb 6-1: Manufacturer: syz
[ 1045.266105][ T5761] usb 6-1: SerialNumber: syz
[ 1045.299415][T23521] loop8: detected capacity change from 0 to 32768
[ 1045.326634][ T5761] usb 6-1: config 0 descriptor??
[ 1045.342317][ T5761] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 1045.348951][T23521] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1045.408994][T23521] XFS (loop8): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[ 1045.431505][T23521] XFS (loop8): Tail block (0x29) overwrite detected. Updated to 0x30
[ 1045.473731][T23521] XFS (loop8): Ending clean mount
[ 1045.576733][T23521] XFS (loop8): Metadata corruption detected at xfs_dinode_verify.part.0+0xa7c/0x16d0, inode 0x1803 dinode
[ 1045.591103][T23521] XFS (loop8): Unmount and run xfs_repair
[ 1045.596863][T23521] XFS (loop8): First 128 bytes of corrupted metadata buffer:
[ 1045.604444][T23521] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1045.613551][T23521] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1045.624378][T23521] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d  4.Xh....4.Xh...=
[ 1045.633369][T23521] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20  4.Xh...=....... 
[ 1045.642354][T23521] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1045.649833][ T5761] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 1045.651313][T23521] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1  ..............=.
[ 1045.669717][T23521] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04  ....n..-........
[ 1045.678748][T23521] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06  ................
[ 1045.817933][ T5761] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 1046.106819][    C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 1046.107489][    T9] usb 6-1: USB disconnect, device number 10
[ 1046.116469][T15784] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1046.197103][    T9] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 1046.295849][    T9] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 1046.329994][    T9] quatech2 6-1:0.51: device disconnected
[ 1046.338591][T23540] loop6: detected capacity change from 0 to 64
[ 1046.465787][T23540] hfs: request for non-existent node 131072 in B*Tree
[ 1046.490760][T23540] hfs: request for non-existent node 131072 in B*Tree
[ 1046.539283][T23542] loop2: detected capacity change from 0 to 256
[ 1046.602868][T23542] exfat: Deprecated parameter 'utf8'
[ 1046.623351][T23542] exfat: Deprecated parameter 'namecase'
[ 1046.634789][T23542] exfat: Deprecated parameter 'namecase'
[ 1046.642071][T23542] exfat: Deprecated parameter 'utf8'
[ 1046.704275][T23542] exFAT-fs (loop2): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[ 1046.775661][T23542] exFAT-fs (loop2): failed to test first cluster bit of root dir(5)
[ 1047.916161][T23567] team0: entered allmulticast mode
[ 1047.947513][T23567] team_slave_0: entered allmulticast mode
[ 1047.983301][T23567] team_slave_1: entered allmulticast mode
[ 1048.027530][T23571] team0: left allmulticast mode
[ 1048.067822][T23568] loop5: detected capacity change from 0 to 4096
[ 1048.079265][T23571] team_slave_0: left allmulticast mode
[ 1048.121574][T23571] team_slave_1: left allmulticast mode
[ 1048.122060][T23568] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[ 1048.220612][T23568] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[ 1048.298866][T23568] ntfs3(loop5): Failed to load $Extend (-2).
[ 1048.331441][T23568] ntfs3(loop5): Failed to initialize $Extend.
[ 1048.376030][T23577] loop7: detected capacity change from 0 to 64
[ 1048.759206][    T9] usb 9-1: new high-speed USB device number 20 using dummy_hcd
[ 1049.045858][T23584] loop1: detected capacity change from 0 to 4096
[ 1049.882396][    T9] usb 9-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice= 0.00
[ 1049.891665][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1049.900464][T23584] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[ 1050.094826][T23584] ntfs3(loop1): Failed to load $Extend (-22).
[ 1050.102130][T23586] loop2: detected capacity change from 0 to 131072
[ 1050.168338][T23584] ntfs3(loop1): Failed to initialize $Extend.
[ 1050.371386][T23586] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1050.402583][T23586] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[ 1050.541167][    T9] usb 9-1: Firmware: major: 0, minor: 100, hardware type: ATUSB (0)
[ 1050.592602][T23586] F2FS-fs (loop2): recover xattr in inode (7), error(0)
[ 1050.600823][T23586] F2FS-fs (loop2): set inode (7) has corrupted xattr
[ 1050.756705][    T9] usb 9-1: failed to fetch extended address, random address set
[ 1051.208218][    T9] usb 9-1: USB disconnect, device number 20
[ 1051.962066][T23621] loop1: detected capacity change from 0 to 2048
[ 1052.122896][T23624] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1052.461445][T23624] NILFS (loop1): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[ 1052.505583][T23624] NILFS error (device loop1): nilfs_bmap_propagate: broken bmap (inode number=4)
[ 1052.549282][T23601] loop7: detected capacity change from 0 to 32768
[ 1052.575517][T23624] Remounting filesystem read-only
[ 1052.606484][ T5636] NILFS (loop1): disposed unprocessed dirty file(s) when stopping log writer
[ 1052.742071][T23601] Bad stbl[5] index:0 (stblindex 9) in dtpage
[ 1052.742071][T23601] 
[ 1052.813713][T23601] ERROR: (device loop7): dtSearch: DT_GETPAGE: dtree page corrupt
[ 1052.813713][T23601] 
[ 1052.904666][T23601] ERROR: (device loop7): remounting filesystem as read-only
[ 1052.969298][T23601] jfs_rename did not expect dtDelete to return rc = -5
[ 1052.990275][T23601] ERROR: (device loop7): txAbort: 
[ 1052.990275][T23601] 
[ 1052.999789][T23614] loop5: detected capacity change from 0 to 32768
[ 1053.080858][T23614] XFS (loop5): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1053.352817][T23614] XFS (loop5): Ending clean mount
[ 1053.435354][T23630] loop1: detected capacity change from 0 to 4096
[ 1053.526004][T23630] ntfs3(loop1): ino=0, mi_enum_attr
[ 1053.651836][T23630] ntfs3(loop1): ino=0, mi_enum_attr
[ 1053.705766][T23630] ntfs3(loop1): ino=0, mi_enum_attr
[ 1053.800803][T23623] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1053.955530][T23630] ntfs3(loop1): failed to convert "0080" to cp864
[ 1054.003940][T23630] ntfs3(loop1): ino=1e, mi_enum_attr
[ 1054.062147][T19332] XFS (loop5): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1054.934397][T23623] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1055.293047][T23658] netlink: 36 bytes leftover after parsing attributes in process `syz.1.6312'.
[ 1055.331836][T23663] loop5: detected capacity change from 0 to 512
[ 1055.371523][T23657] loop7: detected capacity change from 0 to 4096
[ 1055.373469][T23663] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1055.499910][T23663] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:4221: comm syz.5.6308: Allocating blocks 41-42 which overlap fs metadata
[ 1055.627393][T23657] ntfs3(loop7): ino=3, ntfs_set_state failed, -22.
[ 1055.642723][T23663] loop5: lost filesystem error report for type 5 error -117
[ 1055.649193][    C1] EXT4-fs (loop5): error count since last fsck: 1
[ 1055.663290][    C1] EXT4-fs (loop5): initial error at time 1785454613: ext4_mb_mark_diskspace_used:4221
[ 1055.672940][    C1] EXT4-fs (loop5): last error at time 1785454613: ext4_mb_mark_diskspace_used:4221
[ 1055.696328][T23657] ntfs3(loop7): Failed to initialize $Extend/$ObjId.
[ 1055.739007][T23663] EXT4-fs (loop5): Remounting filesystem read-only
[ 1055.781407][T23663] Quota error (device loop5): write_blk: dquota write failed
[ 1055.828146][T23663] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5
[ 1055.857893][   T31] audit: type=1800 audit(1785454613.281:238): pid=23657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6311" name="file1" dev="loop7" ino=30 res=0 errno=0
[ 1055.894067][T23657] ntfs3(loop7): ino=1e, "file1" attr_set_size_ex
[ 1055.917035][T23663] Quota error (device loop5): write_blk: dquota write failed
[ 1055.960210][T23656] ntfs3(loop7): ino=1e, "file1" attr_set_size_ex
[ 1055.977399][T23663] Quota error (device loop5): qtree_write_dquot: Error -117 occurred while creating quota
[ 1056.038207][T23663] EXT4-fs (loop5): 1 truncate cleaned up
[ 1056.062839][T23663] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1056.176612][T23623] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1056.192523][ T1154] ntfs3(loop7): ino=3, ntfs3_write_inode failed, -22.
[ 1056.210688][T15768] ntfs3(loop7): ino=3, ntfs_set_state failed, -22.
[ 1056.242728][T15768] ntfs3(loop7): Mark volume as dirty due to NTFS errors
[ 1056.270169][T15768] ntfs3(loop7): ino=3, ntfs_set_state failed, -22.
[ 1056.304599][   T20] ntfs3(loop7): ino=3, ntfs3_write_inode failed, -22.
[ 1056.903627][T23684] loop7: detected capacity change from 0 to 32768
[ 1056.944582][T23623] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1056.970539][T19332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1057.102472][T23684] XFS (loop7): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1057.163926][T23684] XFS (loop7): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x50.
[ 1057.179899][T23684] XFS (loop7): Tail block (0x29) overwrite detected. Updated to 0x30
[ 1057.241127][T23684] XFS (loop7): Ending clean mount
[ 1057.385140][T23684] XFS (loop7): Metadata corruption detected at xfs_dinode_verify.part.0+0xa7c/0x16d0, inode 0x1803 dinode
[ 1057.396666][T23684] XFS (loop7): Unmount and run xfs_repair
[ 1057.403757][T23684] XFS (loop7): First 128 bytes of corrupted metadata buffer:
[ 1057.411282][T23684] 00000000: 49 4e 41 ed 03 01 00 00 00 00 00 00 00 00 00 00  INA.............
[ 1057.420310][T23684] 00000010: 00 00 00 02 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1057.429662][T23684] 00000020: 34 f7 58 68 a5 a5 b6 11 34 f7 58 68 a5 e2 bf 3d  4.Xh....4.Xh...=
[ 1057.440554][T23684] 00000030: 34 f7 58 68 a5 e2 bf 3d 00 00 00 00 00 00 00 20  4.Xh...=....... 
[ 1057.449608][T23684] 00000040: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1057.458692][T23684] 00000050: 00 00 00 02 00 00 00 00 00 00 00 00 ca e6 3d c1  ..............=.
[ 1057.467576][T23684] 00000060: ff ff ff ff 6e d0 e3 2d 00 00 00 00 00 00 00 04  ....n..-........
[ 1057.476598][T23684] 00000070: 00 00 00 03 00 00 00 10 00 00 00 00 00 00 00 06  ................
[ 1057.572666][T23700] batadv_slave_0: Caught tx_queue_len zero misconfig
[ 1057.625889][T15768] XFS (loop7): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[ 1058.251102][T23713] netlink: 'syz.2.6328': attribute type 6 has an invalid length.
[ 1058.323595][T23707] loop1: detected capacity change from 0 to 4096
[ 1058.378098][T23707] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[ 1058.561139][T23707] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[ 1058.690658][T23707] ntfs3(loop1): Failed to load $Extend (-2).
[ 1058.743157][T23707] ntfs3(loop1): Failed to initialize $Extend.
[ 1058.749652][T16316] usb 9-1: new high-speed USB device number 21 using dummy_hcd
[ 1058.928667][T16316] usb 9-1: Using ep0 maxpacket: 8
[ 1058.956570][T16316] usb 9-1: config 0 has an invalid interface number: 1 but max is 0
[ 1059.000594][T16316] usb 9-1: config 0 has no interface number 0
[ 1059.027512][T16316] usb 9-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1059.093185][T16316] usb 9-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1059.125666][T16316] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1059.164736][T16316] usb 9-1: config 0 descriptor??
[ 1059.194750][T23724] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6333'.
[ 1059.232590][T16316] iowarrior 9-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1059.344574][   T12] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1059.587151][T16316] usb 9-1: USB disconnect, device number 21
[ 1059.623885][ T1149] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1059.764082][T23734] loop2: detected capacity change from 0 to 1024
[ 1059.842190][T23734] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=a016c118, mo2=0002]
[ 1059.850532][T23734] System zones: 0-1, 3-12
[ 1059.860840][T23734] EXT4-fs (loop2): mounted filesystem 00000000-0500-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1059.979740][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0500-0000-0000-000000000000.
[ 1059.995264][   T12] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1060.054718][T23030] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1060.290884][T23741] loop2: detected capacity change from 0 to 1024
[ 1060.334782][T23741] EXT4-fs: Ignoring removed bh option
[ 1060.383572][T23741] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1060.405183][T23749] loop7: detected capacity change from 0 to 512
[ 1060.598753][T23741] EXT4-fs error (device loop2): ext4_read_inline_dir:1493: inode #12: block 7: comm syz.2.6338: path /1090/file1/file0: bad entry in directory: rec_len is too small for name_len - offset=40, inode=14, rec_len=40, size=80 fake=0
[ 1060.738197][T23749] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1060.797594][T23741] EXT4-fs (loop2): Remounting filesystem read-only
[ 1060.824712][T23749] ext4 filesystem being mounted at /419/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1061.084385][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1061.104596][T23764] loop5: detected capacity change from 0 to 7
[ 1061.132036][T23764] buffer_io_error: 138 callbacks suppressed
[ 1061.132063][T23764] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1061.341236][T15768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1061.378521][T23764] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1061.414919][T23764] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1061.469769][T23769] loop2: detected capacity change from 0 to 4096
[ 1061.477804][T23764] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1061.501303][T23769] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[ 1061.557408][T23764] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1061.615364][T23764] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1061.629046][T23769] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[ 1061.644688][T23773] bridge0: entered allmulticast mode
[ 1061.647816][T23764] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1061.685713][T23764] ldm_validate_partition_table(): Disk read failed.
[ 1061.729987][T23764] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1061.758794][T23764] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1061.802998][T23764] Buffer I/O error on dev loop5, logical block 0, async page read
[ 1061.824214][T23769] ntfs3(loop2): Failed to load $Extend (-2).
[ 1061.835894][ T1311] ieee802154 phy0 wpan0: encryption failed: -22
[ 1061.844884][T23764] Dev loop5: unable to read RDB block 0
[ 1061.849037][ T1311] ieee802154 phy1 wpan1: encryption failed: -22
[ 1061.866042][T23769] ntfs3(loop2): Failed to initialize $Extend.
[ 1061.936310][T23764]  loop5: unable to read partition table
[ 1061.974477][T23764] loop5: partition table beyond EOD, truncated
[ 1062.016607][T23764] loop_reread_partitions: partition scan of loop5 (���W������ý�*���	���%���4FLQk݊5) failed (rc=-5)
[ 1062.331943][T23787] loop6: detected capacity change from 0 to 1024
[ 1062.384688][T23787] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1062.399903][T23787] ext4 filesystem being mounted at /217/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1062.448022][T23789] loop8: detected capacity change from 0 to 1024
[ 1062.488649][  T185] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 1062.610436][T23789] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1062.648629][  T185] usb 2-1: Using ep0 maxpacket: 8
[ 1062.660600][  T185] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[ 1062.678490][  T185] usb 2-1: config 0 has no interface number 0
[ 1062.684837][  T185] usb 2-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1062.709583][  T185] usb 2-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1062.722320][  T185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1062.773656][  T185] usb 2-1: config 0 descriptor??
[ 1062.891581][  T185] iowarrior 2-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0
[ 1063.083582][T15784] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1063.114625][  T185] usb 2-1: USB disconnect, device number 43
[ 1063.234123][T23798] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6358'.
[ 1063.245732][T19460] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1063.598268][T23802] loop8: detected capacity change from 0 to 2048
[ 1063.656724][T23802] UDF-fs: error (device loop8): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4
[ 1063.735552][T23806] usb usb6: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1063.736343][T23802] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1063.759221][T23808] loop5: detected capacity change from 0 to 128
[ 1063.803840][T23808] FAT-fs (loop5): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1064.277302][T23823] loop6: detected capacity change from 0 to 8
[ 1064.320675][T23823] unable to read id index table
[ 1065.519413][ T5761] usb 6-1: new full-speed USB device number 11 using dummy_hcd
[ 1065.559243][T23854] loop2: detected capacity change from 0 to 128
[ 1065.578204][T23854] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1065.702784][ T5761] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1065.736558][ T5761] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1065.763468][ T5761] usb 6-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 1065.791767][ T5761] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1065.803694][T23839] loop1: detected capacity change from 0 to 32768
[ 1065.834298][ T5761] usb 6-1: config 0 descriptor??
[ 1065.877524][T23839] XFS (loop1): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1066.017386][T23839] XFS (loop1): Ending clean mount
[ 1066.342872][ T5761] elan 0003:04F3:0755.003C: failed to start in urb: -90
[ 1066.412701][ T5761] elan 0003:04F3:0755.003C: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.5-1/input0
[ 1066.507182][T23873] loop2: detected capacity change from 0 to 512
[ 1066.529379][ T5636] XFS (loop1): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1066.545336][T23873] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[ 1066.603332][T23873] UDF-fs: Scanning with blocksize 512 failed
[ 1066.603670][T23875] loop8: detected capacity change from 0 to 16
[ 1066.667251][T23875] erofs (device loop8): mounted with root inode @ nid 36.
[ 1066.723171][T23873] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[ 1066.781487][T23873] UDF-fs: Scanning with blocksize 1024 failed
[ 1066.785681][T16288] usb 6-1: USB disconnect, device number 11
[ 1066.865893][T23872] fido_id[23872]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/6-1/report_descriptor': No such file or directory
[ 1066.888292][T23873] UDF-fs: warning (device loop2): udf_load_vrs: No VRS found
[ 1066.910284][T23873] UDF-fs: Scanning with blocksize 2048 failed
[ 1066.942940][T23873] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[ 1067.035164][T23873] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1067.150306][T23873] UDF-fs: error (device loop2): udf_verify_fi: directory (ino 21) has entry past directory size at pos 128
[ 1070.568012][T23945] loop6: detected capacity change from 0 to 512
[ 1070.648073][T23945] EXT4-fs (loop6): revision level too high, forcing read-only mode
[ 1070.670074][T23945] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[ 1070.732857][T23945] System zones: 0-1, 15-15, 18-18, 34-34
[ 1070.781541][T23945] EXT4-fs (loop6): orphan cleanup on readonly fs
[ 1070.830170][T23945] Quota error (device loop6): v2_read_header: Failed header read: expected=8 got=0
[ 1070.848339][T23916] loop8: detected capacity change from 0 to 32768
[ 1070.876927][T23945] EXT4-fs warning (device loop6): ext4_enable_quotas:7272: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[ 1070.980985][T23916] XFS (loop8): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[ 1070.991794][T23945] EXT4-fs (loop6): Cannot turn on quotas: error -22
[ 1071.071680][T23945] EXT4-fs (loop6): 1 truncate cleaned up
[ 1071.127124][T23945] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1071.257102][T23916] XFS (loop8): Ending clean mount
[ 1071.289660][T23945] fscrypt (loop6, inode 16): Error -61 getting encryption context
[ 1071.319293][T23945] fscrypt (loop6, inode 16): Error -61 getting encryption context
[ 1071.644971][T19460] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1071.729806][ T5761] XFS (loop8): Metadata CRC error detected at xfs_allocbt_read_verify+0x26/0xe0, xfs_bnobt block 0x4 
[ 1071.792004][ T5761] XFS (loop8): Unmount and run xfs_repair
[ 1071.826671][ T5761] XFS (loop8): First 128 bytes of corrupted metadata buffer:
[ 1071.846324][ T5761] 00000000: 41 42 33 42 00 00 00 03 ff ff ff ff ff ff ff ff  AB3B............
[ 1071.867082][ T5761] 00000010: 00 00 00 00 00 00 00 04 00 00 00 01 00 00 00 10  ................
[ 1071.910335][ T5761] 00000020: ed 37 bf 6e 74 ea 4e 01 f8 ba 5f ee 27 4b 0f 3a  .7.nt.N..._.'K.:
[ 1071.938460][ T5761] 00000030: 00 00 00 00 f6 3b 25 b5 00 00 00 07 00 00 00 01  .....;%.........
[ 1071.961111][ T5761] 00000040: 00 00 0b fe 00 00 00 02 00 00 0c 20 00 00 13 e0  ........... ....
[ 1071.992600][ T5761] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1072.020565][ T5761] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1072.029819][ T5761] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[ 1072.073524][ T5761] XFS (loop8): metadata I/O error in "xfs_btree_read_buf_block+0x24e/0x520" at daddr 0x4 len 4 error 74
[ 1072.235847][T23969] loop5: detected capacity change from 0 to 512
[ 1072.267565][T23972] netlink: 200 bytes leftover after parsing attributes in process `syz.6.6424'.
[ 1072.278035][ T5761] XFS (loop8): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x4c5/0x8b0 (fs/xfs/xfs_trans_buf.c:280).  Shutting down filesystem.
[ 1072.323590][T23969] EXT4-fs error (device loop5): ext4_validate_block_bitmap:431: comm syz.5.6423: bg 0: block 5: invalid block bitmap
[ 1072.351334][ T5761] XFS (loop8): Please unmount the filesystem and rectify the problem(s)
[ 1072.419183][T23969] loop5: lost filesystem error report for type 5 error -117
[ 1072.436370][    C0] EXT4-fs (loop5): error count since last fsck: 1
[ 1072.450263][    C0] EXT4-fs (loop5): initial error at time 1785454629: ext4_validate_block_bitmap:431
[ 1072.459746][    C0] EXT4-fs (loop5): last error at time 1785454629: ext4_validate_block_bitmap:431
[ 1072.560367][T23969] EXT4-fs error (device loop5) in ext4_mb_clear_bb:6679: Corrupt filesystem
[ 1072.590922][T23969] loop5: lost filesystem error report for type 5 error -117
[ 1072.595283][T23969] EXT4-fs error (device loop5): ext4_free_branches:1020: inode #11: comm syz.5.6423: invalid indirect mapped block 3 (level 2)
[ 1072.654316][T23969] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1072.676097][T23969] EXT4-fs (loop5): 1 orphan inode deleted
[ 1072.702835][T23969] EXT4-fs (loop5): 1 truncate cleaned up
[ 1072.761917][T23969] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1072.908920][T23978] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1073.096263][T19332] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1073.485252][T23993] netlink: 168 bytes leftover after parsing attributes in process `syz.7.6429'.
[ 1074.826748][T24020] loop5: detected capacity change from 0 to 512
[ 1074.860856][T24020] EXT4-fs: Ignoring removed nobh option
[ 1074.890257][T24020] EXT4-fs: Invalid want_extra_isize 0
[ 1074.932343][T24022] Bluetooth: MGMT ver 1.23
[ 1074.988139][T24022] Bluetooth: hci1: too big key_count value 8199
[ 1075.222699][T23992] loop1: detected capacity change from 0 to 32768
[ 1075.326526][T23992] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.6430 (23992)
[ 1075.473542][T23992] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1075.517194][T23992] BTRFS info (device loop1): using sha256 checksum algorithm
[ 1075.668968][T16316] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[ 1075.837977][T23992] BTRFS info (device loop1): enabling ssd optimizations
[ 1075.870352][T23992] BTRFS info (device loop1): turning on async discard
[ 1075.899071][T16316] usb 3-1: Using ep0 maxpacket: 8
[ 1075.918616][T23992] BTRFS info (device loop1): enabling free space tree
[ 1075.950559][T16316] usb 3-1: config index 0 descriptor too short (expected 301, got 45)
[ 1075.980838][T16316] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1076.008731][T16316] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1076.044991][T16316] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[ 1076.092667][T16316] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1076.134939][T16316] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 1076.144975][T16288] hid-generic 0006:000E:0001.003D: unknown main item tag 0x0
[ 1076.145020][T16288] hid-generic 0006:000E:0001.003D: unknown main item tag 0x0
[ 1076.145057][T16288] hid-generic 0006:000E:0001.003D: unknown main item tag 0x0
[ 1076.145094][T16288] hid-generic 0006:000E:0001.003D: unknown main item tag 0x0
[ 1076.223752][T16316] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1076.252190][T23992] BTRFS critical (device loop1 state E): emergency shutdown
[ 1076.254719][T16288] hid-generic 0006:000E:0001.003D: unknown main item tag 0x0
[ 1076.303796][T16288] hid-generic 0006:000E:0001.003D: unknown main item tag 0x0
[ 1076.369132][T16288] hid-generic 0006:000E:0001.003D: unknown main item tag 0x0
[ 1076.418531][T16288] hid-generic 0006:000E:0001.003D: unknown main item tag 0x0
[ 1076.443950][T16288] hid-generic 0006:000E:0001.003D: unknown main item tag 0x0
[ 1076.484470][T16288] hid-generic 0006:000E:0001.003D: unknown main item tag 0x0
[ 1076.525397][ T5636] BTRFS info (device loop1 state E): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1076.595872][T16316] usb 3-1: GET_CAPABILITIES returned 0
[ 1076.616904][T16316] usbtmc 3-1:16.0: can't read capabilities
[ 1076.648794][T16288] hid-generic 0006:000E:0001.003D: hidraw0: VIRTUAL HID v0.04 Device [syz1] on syz0
[ 1076.848073][T16288] usb 3-1: USB disconnect, device number 37
[ 1077.490243][T24069] loop7: detected capacity change from 0 to 512
[ 1077.564682][T24069] EXT4-fs (loop7): feature flags set on rev 0 fs, running e2fsck is recommended
[ 1077.757734][T24069] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:4221: comm syz.7.6451: Allocating blocks 41-42 which overlap fs metadata
[ 1077.885077][T24069] loop7: lost filesystem error report for type 5 error -117
[ 1077.888465][    C1] EXT4-fs (loop7): error count since last fsck: 1
[ 1077.902677][    C1] EXT4-fs (loop7): initial error at time 1785454635: ext4_mb_mark_diskspace_used:4221
[ 1077.912355][    C1] EXT4-fs (loop7): last error at time 1785454635: ext4_mb_mark_diskspace_used:4221
[ 1077.934242][T24069] EXT4-fs (loop7): Remounting filesystem read-only
[ 1077.956715][T24069] Quota error (device loop7): write_blk: dquota write failed
[ 1077.977070][T24069] Quota error (device loop7): find_free_dqentry: Can't write quota data block 5
[ 1078.046179][T24069] Quota error (device loop7): write_blk: dquota write failed
[ 1078.090346][T24069] Quota error (device loop7): qtree_write_dquot: Error -117 occurred while creating quota
[ 1078.118213][T24069] EXT4-fs (loop7): 1 truncate cleaned up
[ 1078.156854][T24069] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1078.312969][ T5634] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 1078.334788][ T5634] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 1078.347680][ T5634] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 1078.368155][ T5634] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 1078.383363][ T5634] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 1078.780478][T24098] loop1: detected capacity change from 0 to 512
[ 1078.851345][T24098] EXT4-fs error (device loop1): __ext4_iget:5533: inode #11: block 1: comm syz.1.6460: invalid block
[ 1078.880415][T24098] loop1: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117
[ 1078.888467][    C0] EXT4-fs (loop1): error count since last fsck: 1
[ 1078.904395][    C0] EXT4-fs (loop1): initial error at time 1785454636: __ext4_iget:5533: inode 11: block 1
[ 1078.914347][    C0] EXT4-fs (loop1): last error at time 1785454636: __ext4_iget:5533: inode 11: block 1
[ 1078.931243][T24098] EXT4-fs error (device loop1): ext4_orphan_get:1402: comm syz.1.6460: couldn't read orphan inode 11 (err -117)
[ 1079.052038][T24098] loop1: lost filesystem error report for type 5 error -117
[ 1079.065648][T24098] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1079.183909][T15768] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1079.634927][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1079.653792][T24116] siw: device registration error -23
[ 1080.469140][ T5627] Bluetooth: hci2: command tx timeout
[ 1080.770037][  T803] usb 3-1: new high-speed USB device number 38 using dummy_hcd
[ 1080.992614][  T803] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[ 1081.055943][  T803] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1081.102198][  T803] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1081.174988][  T803] usb 3-1: SerialNumber: syz
[ 1081.737878][T24168] loop6: detected capacity change from 0 to 256
[ 1081.896115][  T803] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[ 1081.926981][T24168] exFAT-fs (loop6): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[ 1082.205904][T16288] usb 3-1: USB disconnect, device number 38
[ 1082.315217][  T185] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 1082.424575][T24087] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1082.462129][T24087] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1082.492234][T24087] bridge_slave_0: entered allmulticast mode
[ 1082.519203][  T185] usb 2-1: Using ep0 maxpacket: 32
[ 1082.523670][T24087] bridge_slave_0: entered promiscuous mode
[ 1082.548909][ T5627] Bluetooth: hci2: command tx timeout
[ 1082.550078][  T185] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[ 1082.582101][T24087] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1082.600612][T24087] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1082.625536][T24087] bridge_slave_1: entered allmulticast mode
[ 1082.652964][T24087] bridge_slave_1: entered promiscuous mode
[ 1083.163328][T24087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1083.348165][T24087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1083.572153][  T185] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1083.594076][  T185] usb 2-1: config 0 descriptor??
[ 1083.986222][T24184] loop6: detected capacity change from 0 to 131072
[ 1083.994576][  T185] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[ 1084.001861][T24087] team0: Port device team_slave_0 added
[ 1084.012911][  T185] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[ 1084.022281][T24184] F2FS-fs (loop6): invalid crc value
[ 1084.055970][  T185] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[ 1084.138356][  T185] usb 2-1: media controller created
[ 1084.162883][T24087] team0: Port device team_slave_1 added
[ 1084.175789][  T185] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1084.240722][T24184] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1084.258770][T24184] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e4
[ 1084.463143][  T185] az6027: usb out operation failed. (-71)
[ 1084.469810][T24184] F2FS-fs (loop6): f2fs_lookup: inode (ino=4) has zero i_nlink
[ 1084.542279][  T185] az6027: usb out operation failed. (-71)
[ 1084.561920][  T185] stb0899_attach: Driver disabled by Kconfig
[ 1084.583640][  T185] az6027: no front-end attached
[ 1084.583640][  T185] 
[ 1084.629298][ T5627] Bluetooth: hci2: command tx timeout
[ 1084.630092][  T185] az6027: usb out operation failed. (-71)
[ 1084.732422][  T185] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[ 1084.748041][T24087] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1084.783700][T24087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1084.823084][  T185] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input65
[ 1084.902723][  T185] dvb-usb: schedule remote query interval to 400 msecs.
[ 1084.941707][  T185] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[ 1084.968509][T24087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1085.005633][  T185] usb 2-1: USB disconnect, device number 44
[ 1085.069084][T24087] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1085.084287][T24219] loop5: detected capacity change from 0 to 128
[ 1085.121298][T24087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 1085.141200][T24219] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256
[ 1085.253001][T24087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1085.281576][T24219] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1085.298596][  T803] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[ 1085.476470][  T185] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[ 1085.525211][  T803] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[ 1085.608495][  T803] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1085.628865][  T803] usb 3-1: Product: syz
[ 1085.651649][  T803] usb 3-1: Manufacturer: syz
[ 1085.687835][  T803] usb 3-1: SerialNumber: syz
[ 1085.810728][T24087] hsr_slave_0: entered promiscuous mode
[ 1085.856091][T24087] hsr_slave_1: entered promiscuous mode
[ 1085.881806][T24087] debugfs: 'hsr0' already exists in 'hsr'
[ 1085.895675][T24087] Cannot create hsr debugfs directory
[ 1085.992401][T24228] usb usb9: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK.
[ 1086.074278][T24228] usb usb9: Requested nonsensical USBDEVFS_URB_ZERO_PACKET.
[ 1086.112584][  T803] rtl8150 3-1:1.0: couldn't reset the device
[ 1086.140495][  T803] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5
[ 1086.208866][  T803] usb 3-1: USB disconnect, device number 39
[ 1086.709223][ T5627] Bluetooth: hci2: command tx timeout
[ 1087.500343][T24254] loop7: detected capacity change from 0 to 128
[ 1087.572524][T24254] FAT-fs (loop7): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1087.675789][T24254] FAT-fs (loop7): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[ 1088.446853][T24277] loop5: detected capacity change from 0 to 2048
[ 1088.502724][T24277] NILFS (loop5): invalid segment: Magic number mismatch
[ 1088.532303][T24277] NILFS (loop5): trying rollback from an earlier position
[ 1088.662892][T24277] NILFS (loop5): recovery complete
[ 1088.698135][T24280] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1088.854976][   T31] audit: type=1800 audit(1785454646.280:239): pid=24277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6511" name="file1" dev="loop5" ino=12 res=0 errno=0
[ 1089.061170][T24286] netlink: 8 bytes leftover after parsing attributes in process `syz.6.6488'.
[ 1090.559602][T24318] input: syz0 as /devices/virtual/input/input66
[ 1092.197536][T24357] loop5: detected capacity change from 0 to 128
[ 1092.237586][T24357] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[ 1092.292376][T24357] hpfs: filesystem error: improperly stopped
[ 1092.320665][T24357] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[ 1092.347860][T24357] hpfs: You really don't want any checks? You are crazy...
[ 1092.375767][T24357] hpfs: hpfs_map_sector(): read error
[ 1092.400993][T24357] hpfs: code page support is disabled
[ 1092.418899][T24357] hpfs: hpfs_map_4sectors(): unaligned read
[ 1092.433689][T24357] hpfs: hpfs_map_4sectors(): unaligned read
[ 1092.447759][T24357] hpfs: filesystem error: unable to find root dir
[ 1092.504414][T24357] hpfs: hpfs_map_4sectors(): unaligned read
[ 1092.531852][T24357] hpfs: hpfs_map_sector(): read error
[ 1093.027742][T24348] loop2: detected capacity change from 0 to 32768
[ 1093.077053][T24348] XFS (loop2): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1093.175928][T24367] lo: entered promiscuous mode
[ 1093.186745][T24367] tunl0: entered promiscuous mode
[ 1093.188001][T24348] XFS (loop2): Ending clean mount
[ 1093.193881][T24367] gre0: entered promiscuous mode
[ 1093.205514][T24367] 0��{X��: entered promiscuous mode
[ 1093.215055][T24367] 0��{X��: left allmulticast mode
[ 1093.229770][T24367] erspan0: entered promiscuous mode
[ 1093.236145][T24367] ip_vti0: entered promiscuous mode
[ 1093.254570][T24367] ip6_vti0: entered promiscuous mode
[ 1093.274867][T24367] sit0: entered promiscuous mode
[ 1093.286895][T24367] ip6tnl0: entered promiscuous mode
[ 1093.299706][T24367] ip6gre0: entered promiscuous mode
[ 1093.306468][T24367] syz_tun: entered promiscuous mode
[ 1093.313735][T24367] ip6gretap0: entered promiscuous mode
[ 1093.322713][T24367] bridge0: entered promiscuous mode
[ 1093.339759][T24367] vcan0: entered promiscuous mode
[ 1093.364012][T24367] bond0: entered promiscuous mode
[ 1093.378967][T24367] bond_slave_0: entered promiscuous mode
[ 1093.392041][T24367] bond_slave_1: entered promiscuous mode
[ 1093.417772][ T5620] XFS (loop2): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[ 1093.426813][T24367] team0: entered promiscuous mode
[ 1093.439492][T24367] team_slave_0: entered promiscuous mode
[ 1093.474894][T24367] team_slave_1: entered promiscuous mode
[ 1093.491629][T24367] dummy0: entered promiscuous mode
[ 1093.523272][T24367] nlmon0: entered promiscuous mode
[ 1093.537074][T24367] batadv0: entered promiscuous mode
[ 1093.568187][T24367] vxcan0: entered promiscuous mode
[ 1093.603765][T24367] vxcan1: entered promiscuous mode
[ 1093.612072][T24367] veth0: entered promiscuous mode
[ 1093.641665][T24367] veth1: entered promiscuous mode
[ 1093.676527][T24367] wg0: entered promiscuous mode
[ 1093.690324][T24367] wg1: entered promiscuous mode
[ 1093.697285][T24367] wg2: entered promiscuous mode
[ 1093.723841][T24367] veth0_to_bridge: entered promiscuous mode
[ 1093.764701][T24367] veth1_to_bridge: entered promiscuous mode
[ 1093.801503][T24367] veth0_to_bond: entered promiscuous mode
[ 1093.857468][T24367] veth1_to_bond: entered promiscuous mode
[ 1093.867453][T24367] veth0_to_team: entered promiscuous mode
[ 1093.914726][T24367] veth1_to_team: entered promiscuous mode
[ 1093.923496][T24367] veth0_to_batadv: entered promiscuous mode
[ 1093.932567][T24367] batadv_slave_0: entered promiscuous mode
[ 1093.986417][T24367] veth1_to_batadv: entered promiscuous mode
[ 1094.021339][T24367] batadv_slave_1: entered promiscuous mode
[ 1094.044540][T24367] xfrm0: entered promiscuous mode
[ 1094.053108][T24367] veth0_to_hsr: entered promiscuous mode
[ 1094.091530][T24367] veth1_to_hsr: entered promiscuous mode
[ 1094.100421][T24367] hsr0: entered promiscuous mode
[ 1094.106575][T24367] veth1_virt_wifi: entered promiscuous mode
[ 1094.114999][T24367] veth0_virt_wifi: entered promiscuous mode
[ 1094.124481][T24367] virt_wifi0: default qdisc (pfifo_fast) fail, fallback to noqueue
[ 1094.170175][T24367] virt_wifi0: entered promiscuous mode
[ 1094.190628][T24367] vlan0: entered promiscuous mode
[ 1094.212632][T24367] vlan1: entered promiscuous mode
[ 1094.220472][T24367] macvlan0: entered promiscuous mode
[ 1094.228156][T24367] macvlan1: entered promiscuous mode
[ 1094.260505][T24367] ipvlan0: entered promiscuous mode
[ 1094.282830][T24367] ipvlan1: entered promiscuous mode
[ 1094.303308][T24391] loop2: detected capacity change from 0 to 2048
[ 1094.350585][T24367] macvtap0: entered promiscuous mode
[ 1094.376504][T24367] macsec0: entered promiscuous mode
[ 1094.399789][T24391] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1094.415227][T24367] geneve0: entered promiscuous mode
[ 1094.427480][T24367] geneve1: entered promiscuous mode
[ 1094.435723][T24367] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode
[ 1094.460627][T24367] mac80211_hwsim hwsim26 wlan1: entered promiscuous mode
[ 1094.508006][T24367] mac80211_hwsim hwsim25 nicvf0: entered promiscuous mode
[ 1094.526520][T24367] A link change request failed with some changes committed already. Interface nicvf0 may have been left with an inconsistent configuration, please check.
[ 1094.572407][ T5814] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1094.579779][ T5814] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1094.762307][ T5620] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1094.905352][T24400] loop5: detected capacity change from 0 to 1024
[ 1094.914171][T24400] hfsplus: Filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  mounting read-only.
[ 1094.975204][T24400] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[ 1095.077445][T24403] hfsplus: filesystem was not cleanly unmounted, running fsck.hfsplus is recommended.  leaving read-only.
[ 1095.631405][T24421] loop2: detected capacity change from 0 to 256
[ 1095.645167][T24087] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1095.710578][T24421] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1095.730221][T24087] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 1095.777745][T24087] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1095.911658][T24087] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 1095.969302][T24087] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1096.037533][T24428] loop7: detected capacity change from 0 to 7
[ 1096.051068][T24087] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 1096.088216][T24087] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1096.124768][    C0] blk_print_req_error: 124 callbacks suppressed
[ 1096.124799][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1096.140966][    C0] buffer_io_error: 9 callbacks suppressed
[ 1096.140995][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1096.160007][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1096.167094][T24433] netlink: 'syz.7.6554': attribute type 1 has an invalid length.
[ 1096.169798][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1096.188336][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1096.198132][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1096.207641][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1096.217445][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1096.229445][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1096.239540][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1096.249985][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1096.259830][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1096.272118][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1096.281962][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1096.290274][T24428] ldm_validate_partition_table(): Disk read failed.
[ 1096.298701][T24433] netlink: 'syz.7.6554': attribute type 7 has an invalid length.
[ 1096.303287][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1096.316302][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1096.342142][    C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1096.351286][T24433] netlink: 'syz.7.6554': attribute type 8 has an invalid length.
[ 1096.352026][    C1] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1096.369426][T24087] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 1096.378265][    C0] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[ 1096.388120][    C0] Buffer I/O error on dev loop7, logical block 0, async page read
[ 1096.410953][T24428] Dev loop7: unable to read RDB block 0
[ 1096.440912][T24433] netlink: 208 bytes leftover after parsing attributes in process `syz.7.6554'.
[ 1096.457739][T24428]  loop7: unable to read partition table
[ 1096.477154][T24428] loop7: partition table beyond EOD, truncated
[ 1096.489533][T24428] loop_reread_partitions: partition scan of loop7 (���������C�j̖�P=ý?�}X���	���%��`��ր���{��֐�ȵ4FLQk݊) failed (rc=-5)
[ 1096.520120][T24433] NCSI netlink: No device for ifindex 119
[ 1097.176908][T24458] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 1097.251031][T24087] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1097.371979][T24461] loop2: detected capacity change from 0 to 64
[ 1097.410367][T24087] 8021q: adding VLAN 0 to HW filter on device team0
[ 1097.483567][T23031] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1097.490857][T23031] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1097.503514][   T31] audit: type=1800 audit(1785454654.930:240): pid=24461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6561" name="file1" dev="loop2" ino=21 res=0 errno=0
[ 1097.570318][T24465] loop5: detected capacity change from 0 to 128
[ 1097.701377][T23031] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1097.708645][T23031] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1097.731077][   T31] audit: type=1800 audit(1785454655.160:241): pid=24465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6562" name="file1" dev="loop5" ino=1048930 res=0 errno=0
[ 1097.896372][T24471] loop1: detected capacity change from 0 to 2048
[ 1098.029447][T24471] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1098.132842][T24471] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 25 vs 150994969 free clusters
[ 1098.224094][T24471] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28
[ 1098.295507][T24471] EXT4-fs (loop1): This should not happen!! Data will be lost
[ 1098.295507][T24471] 
[ 1098.339243][T24471] EXT4-fs (loop1): Total free blocks count 0
[ 1098.396899][T24471] EXT4-fs (loop1): Free/Dirty block details
[ 1098.435166][T24471] EXT4-fs (loop1): free_blocks=2415919104
[ 1098.472938][T24471] EXT4-fs (loop1): dirty_blocks=64
[ 1098.506965][T24471] EXT4-fs (loop1): Block reservation details
[ 1098.552234][T24471] EXT4-fs (loop1): i_reserved_data_blocks=4
[ 1098.554872][T24490] loop7: detected capacity change from 0 to 128
[ 1098.715288][T24490] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1098.812384][T24490] ext4 filesystem being mounted at /461/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1099.030845][T22823] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28
[ 1099.089202][ T5636] EXT4-fs warning (device loop1): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost
[ 1099.200812][T15768] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1099.253625][T24502] loop6: detected capacity change from 0 to 2048
[ 1099.347013][T24502] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1100.178822][T24521] clocksource: Switched to clocksource tsc
[ 1100.671397][T24516] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1100.790740][T24540] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6578'.
[ 1101.217247][T24544] loop5: detected capacity change from 0 to 256
[ 1101.274828][T24544] exfat: Deprecated parameter 'namecase'
[ 1101.347899][T24544] exfat: Deprecated parameter 'namecase'
[ 1101.701541][T24544] exFAT-fs (loop5): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d)
[ 1101.830811][T24549] loop7: detected capacity change from 0 to 1764
[ 1101.939157][T24087] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1101.989092][T24538] loop2: detected capacity change from 0 to 131072
[ 1101.997612][T24538] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[ 1102.006535][T24538] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[ 1102.015825][T24538] F2FS-fs (loop2): invalid crc value
[ 1102.189406][T24538] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1102.211642][T24538] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[ 1102.218892][T24538] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[ 1103.105780][T24574] loop6: detected capacity change from 0 to 512
[ 1103.186853][T16288] kernel read not supported for file /dsp1 (pid: 16288 comm: kworker/0:1)
[ 1103.223599][T24574] EXT4-fs (loop6): orphan cleanup on readonly fs
[ 1103.398114][T24574] EXT4-fs (loop6): 1 orphan inode deleted
[ 1103.442683][T24574] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[ 1103.460548][T24087] veth0_vlan: entered promiscuous mode
[ 1103.554198][T24087] veth1_vlan: entered promiscuous mode
[ 1103.742497][T24087] veth0_macvtap: entered promiscuous mode
[ 1103.809526][T19460] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1103.838627][T24087] veth1_macvtap: entered promiscuous mode
[ 1103.996689][T24087] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1104.088253][T24087] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1104.188507][   T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1104.215544][T24587] loop1: detected capacity change from 0 to 1024
[ 1104.234018][   T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1104.339673][T22823] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1104.340707][T24587] EXT4-fs (loop1): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 1104.361508][T24587] ext4 filesystem being mounted at /1120/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1104.492432][T22823] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1104.847312][ T5636] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 1105.093234][T24602] loop5: detected capacity change from 0 to 4096
[ 1105.102490][ T5814] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1105.145258][T24602] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[ 1105.162616][ T5814] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1105.312920][T24602] ntfs3(loop5): ino=19, mi_enum_attr
[ 1105.350752][T24602] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[ 1105.375465][T14641] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1105.384838][T24602] ntfs3(loop5): ino=1a, mi_enum_attr
[ 1105.402925][T24602] ntfs3(loop5): ino=1a, mi_enum_attr
[ 1105.414412][T14641] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1105.434366][T24602] ntfs3(loop5): Failed to initialize $Extend/$Reparse.
[ 1105.606670][T24602] ntfs3(loop5): ino=5, "/" ntfs_readdir
[ 1106.307859][T24599] loop7: detected capacity change from 0 to 32768
[ 1106.360312][T24599] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.6600 (24599)
[ 1106.479737][T24599] BTRFS info (device loop7): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1106.519387][T24599] BTRFS info (device loop7): using sha256 checksum algorithm
[ 1106.665721][T24623] IPVS: sh: SCTP 172.20.20.187:0 - no destination available
[ 1106.864846][T24599] BTRFS info (device loop7): enabling ssd optimizations
[ 1106.918075][T24599] BTRFS info (device loop7): turning on sync discard
[ 1106.961893][T24599] BTRFS info (device loop7): enabling free space tree
[ 1106.992813][T24599] BTRFS info (device loop7): use zlib compression, level 3
[ 1107.255753][   T31] audit: type=1800 audit(1785454664.683:242): pid=24599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.6600" name="file1" dev="loop7" ino=260 res=0 errno=0
[ 1108.096754][T15768] BTRFS info (device loop7): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1110.222403][T24719] loop4: detected capacity change from 0 to 256
[ 1110.231962][T24721] Format for adding new device is "id port_count num_queues" (uint uint uint).
[ 1110.320524][T24719] exFAT-fs (loop4): failed to load upcase table (idx : 0x0001fe89, chksum : 0xeb34f926, utbl_chksum : 0xe619d30d)
[ 1111.076675][T24736] netlink: 8 bytes leftover after parsing attributes in process `syz.5.6636'.
[ 1111.984354][T24760] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[ 1112.001114][T24759] loop6: detected capacity change from 0 to 1024
[ 1112.062795][T24759] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1112.344131][T19460] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1114.457233][T24832] loop5: detected capacity change from 0 to 64
[ 1114.522005][   T31] audit: type=1800 audit(1785454671.953:243): pid=24832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.6672" name="file1" dev="loop5" ino=21 res=0 errno=0
[ 1114.786489][T24816] loop1: detected capacity change from 0 to 32768
[ 1114.883013][T24816] find_entry called with index = 0
[ 1114.915872][T24843] loop7: detected capacity change from 0 to 128
[ 1114.954510][T24816] read_mapping_page failed!
[ 1115.000452][T24816] ERROR: (device loop1): txAbort: 
[ 1115.000452][T24816] 
[ 1115.017539][T24816] ERROR: (device loop1): diFree: numfree > numinos
[ 1115.017539][T24816] 
[ 1115.031693][T24843] EXT4-fs (loop7): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1115.119685][T24843] ext4 filesystem being mounted at /473/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[ 1115.206057][  T117] BUG at fs/jfs/jfs_txnmgr.c:933 assert(mp->nohomeok > 0)
[ 1115.250234][  T117] ------------[ cut here ]------------
[ 1115.256614][  T117] kernel BUG at fs/jfs/jfs_txnmgr.c:933!
[ 1115.303652][  T117] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI
[ 1115.310266][  T117] CPU: 1 UID: 0 PID: 117 Comm: jfsCommit Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 1115.320983][  T117] Tainted: [L]=SOFTLOCKUP
[ 1115.325490][  T117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 1115.335570][  T117] RIP: 0010:txUnlock.cold+0xaa/0xac
[ 1115.340911][  T117] Code: f6 ff 90 0f 0b e8 d5 ad de 00 48 c7 c1 e0 68 18 8c ba a5 03 00 00 48 c7 c6 20 68 18 8c 48 c7 c7 60 68 18 8c e8 76 a8 f6 ff 90 <0f> 0b e8 ae ad de 00 48 c7 c7 00 6a 18 8c e8 62 a8 f6 ff e9 b9 b1
[ 1115.360555][  T117] RSP: 0018:ffffc90002e0fcd0 EFLAGS: 00010282
[ 1115.366754][  T117] RAX: 0000000000000037 RBX: ffffc90002962240 RCX: 0000000000000000
[ 1115.374834][  T117] RDX: 0000000000000037 RSI: ffffffff81e89e59 RDI: fffff520005c1f8b
[ 1115.382831][  T117] RBP: ffff88804fd0eaa8 R08: 0000000000000005 R09: 0000000000000000
[ 1115.390816][  T117] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000000
[ 1115.398796][  T117] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000008
[ 1115.406779][  T117] FS:  0000000000000000(0000) GS:ffff888123eda000(0000) knlGS:0000000000000000
[ 1115.415726][  T117] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1115.422342][  T117] CR2: 00007f5fc9392000 CR3: 00000000744ff000 CR4: 0000000000350ef0
[ 1115.430426][  T117] Call Trace:
[ 1115.433710][  T117]  <TASK>
[ 1115.436734][  T117]  jfs_lazycommit+0x706/0xab0
[ 1115.441435][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[ 1115.446649][  T117]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1115.452307][  T117]  ? rcu_is_watching+0x12/0xc0
[ 1115.457105][  T117]  ? __pfx_default_wake_function+0x10/0x10
[ 1115.462948][  T117]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1115.468645][  T117]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1115.474318][  T117]  ? __kthread_parkme+0x18c/0x230
[ 1115.479370][  T117]  ? kthread+0x13a/0x450
[ 1115.483648][  T117]  ? __pfx_jfs_lazycommit+0x10/0x10
[ 1115.488896][  T117]  kthread+0x370/0x450
[ 1115.492999][  T117]  ? __pfx_kthread+0x10/0x10
[ 1115.497621][  T117]  ret_from_fork+0x72b/0xd50
[ 1115.502236][  T117]  ? __pfx_ret_from_fork+0x10/0x10
[ 1115.507453][  T117]  ? srso_alias_return_thunk+0x5/0xfbef5
[ 1115.513452][  T117]  ? __switch_to+0x800/0x10f0
[ 1115.518160][  T117]  ? __switch_to_asm+0x39/0x70
[ 1115.522949][  T117]  ? __pfx_kthread+0x10/0x10
[ 1115.527608][  T117]  ret_from_fork_asm+0x1a/0x30
[ 1115.532440][  T117]  </TASK>
[ 1115.535459][  T117] Modules linked in:
[ 1115.541431][  T117] ---[ end trace 0000000000000000 ]---
[ 1115.589511][  T117] RIP: 0010:txUnlock.cold+0xaa/0xac
[ 1115.594998][  T117] Code: f6 ff 90 0f 0b e8 d5 ad de 00 48 c7 c1 e0 68 18 8c ba a5 03 00 00 48 c7 c6 20 68 18 8c 48 c7 c7 60 68 18 8c e8 76 a8 f6 ff 90 <0f> 0b e8 ae ad de 00 48 c7 c7 00 6a 18 8c e8 62 a8 f6 ff e9 b9 b1
[ 1115.614780][  T117] RSP: 0018:ffffc90002e0fcd0 EFLAGS: 00010282
[ 1115.624229][  T117] RAX: 0000000000000037 RBX: ffffc90002962240 RCX: 0000000000000000
[ 1115.632897][  T117] RDX: 0000000000000037 RSI: ffffffff81e89e59 RDI: fffff520005c1f8b
[ 1115.640963][  T117] RBP: ffff88804fd0eaa8 R08: 0000000000000005 R09: 0000000000000000
[ 1115.649253][  T117] R10: 0000000080000000 R11: 0000000000000000 R12: 0000000000000000
[ 1115.657274][  T117] R13: 0000000000000000 R14: dffffc0000000000 R15: 0000000000000008
[ 1115.667071][  T117] FS:  0000000000000000(0000) GS:ffff888123eda000(0000) knlGS:0000000000000000
[ 1115.682051][  T117] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1115.722909][T15768] EXT4-fs (loop7): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1115.734384][  T117] CR2: 00007fef67ee6ff8 CR3: 00000000534b1000 CR4: 0000000000350ef0
[ 1115.744196][  T117] Kernel panic - not syncing: Fatal exception
[ 1115.750571][  T117] Kernel Offset: disabled
[ 1115.755003][  T117] Rebooting in 86400 seconds..