last executing test programs:

1m42.582499998s ago: executing program 1 (id=409):
openat(0xffffffffffffff9c, 0x0, 0x601c2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000480)='./file0\x00', 0x18000, &(0x7f0000000880)=ANY=[@ANYRES32=0x0, @ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="b022fd84099290ab8ebe39cfc17f80bc2926131e9437a1dea9ca1756900531c14b67f7a9edd0d80c7c73649053153a8d8db6d3c0d3b3fa951f57d14071b61a27d968a0ae7bd580d2d9fd9034451c3ecffae80b234e72fb11e3a60c1208bd5262c5009e3e45582ed4203850292ed682fc5e26f5c2af47718ee5b4f2ed68f0b21b813ec22c4c61d3f22f5a01ebea6c484d8ef4ca90180b4587e0bee2f782fef574aa1e0ebc5d9e42452910d03c12feff7848f72ac5430476b9dc2457a09efdc6f181c408abe7b30cccd2c8fb85389e1cacd4f4b29a3d4a55941bf1bb416203732d6712d5a89470876ae6daec66f3fe1b39982c2781b115e20af7ce0a0c7c77db1073adc6e11597bd9f540f90f60b92dc84a5c764379c0b9426ff4f547182502633aa754dcfc63e46c7cef8e3a0c29bf5184ac150e90d884c59cba3dae7c531fb114534292629d8532c0f67ee37f2c349ea8f28199aff2aa335df5db411287a73adfbfff212cf7b6d277a361c55af160d98b5c3db84da37d80e07269c33f60f111ec3c09d8843e1f5499e71de9b48882b9415d45b20393888ec49f307d535580947b5a5b40b465382aa4a579f317d91792f8ed70e9401863bc0a21d7e15f828ae8f13c673a30cba6f10f89c8a018cc8bbe7072ffe1c5d4ef11f0f82cf967faef8608f8b289245f87607917b0c2578dbbe5186ac78b8cd9a5aff567aebe8a73dd547fdc503885a2df4953f3497688b7b1ede6a2e529b25ecc246a7bcb00077059d7e0100aa20cb4d1dbac6eec0a9f803601c799eddb9b271f0530842291167abffb982fe47a496e884ee3c17850f970cb3ac3342b832b8b984e2eb4836afb7727f7310a347add2a1094cfff7b44516593bbf15f3a9e0e2a788e99bdec6706ae9a39b4f8983ae38d4cdf866d9670de91036ea86646f195ec4b4ce462ea624b8875825262a301f9235496b935506109287bbcf4754e3fa637428a2e39a80cd07ffafd756839abddc721421754fcae705ab432fcdd6f3c004dfad9e6bfa87746dd41649dcd2bf1728a3d6d2ddf27a52957422a27f9e478530873d9f1861b71f2378540648b171bcbd44533723ae1a89e56e2f570c0571eb3c66fac65e3abad003a828f2d21cc990e57b80dd3762fe1204eb320591d6a93f9052b80494b2f52ad89d6374cf33040e2484c3384946450bb65835d65bebb4a91c0f82e598e5aa7ff9ba79f27bbd46240287721d2759fa24cec97658d8f17b3f424293f7253b74dae4b966c8089c546936953d8ce63463c26f1e296f56e17e7f890b6001ed5d9f739036842e989b40c02d3fe5227b1fb08a98f1b1f0c336346698e70171e74e40c5304a356b29c947672f8a0535b7ce3a66b276d09ca3d9fff030e41598649a310875f5b5801c471182c1f617c907f06b5f36a1f9294b0f4a95d0fc98682b1e38f2f94fb08f20c5e5c7afaa9fbbd84734a98dd9b33188f6b79334b09ca8e2de56457242f904b114a2c313b193fe421d7fa97da5ab77f363e83b4698bf903022d13826ded79a905f07f97dc0fc4cc290b969ee37075a4a80a0d86d0696eeea2048ebd1a97f8319b3342e515ae5c9e25ee933d926ae0f31af55aeb07da6508756ac9549ba8bbc0095a17cb647df12f926e595a531d7208ef75cfd6239f65a0584121c75e00f7c77990b90e6350b1a84eba4430979bb726ab02050573af29156bed8e243527593dc0c6de41d0b6775818a96ee97d153826a217e8d7e88c6c44baa781a495afeba3882a06f5b1a87b1e8ee1edf404ac3ade6f5af1f6cd22c01506b5f84befb55c86f79b56e4d5754be8f564f57852f991c2275cbf55937666e022c2b2f0d020156152377859b345f74fe66791421e5571a7900df89c9bef5c3cb19113fae5d524ae2edea5ca91baf096c02e1e860c9b5a97882da598ef1e39fcb61d83f997675a772ac37c0fbe65a9d379b9204a915fdb6a7c7cdbd14c0893cd5e8cfd56f4021756d6c6a25b258a69922a41f3c7bc43b69f46293b381a27ae5a3cfcf2526f8eadcb540ec87d6009d6a2939882140f9a447c5be4328a0681aa3002f6a9dfd836b362fb1d423d7c9571aeb50e2a6acb9ab4e85574baf27b1028db0f6647aa7fe995c1fbf8ab422bb15acf9ae6de73972c9549cb601297bbb1c740e8761af16c4785c4827b5dc5e52f4a82000f6f87670ec19fea4e04e564fc83c0ccf1b7fa2bb9ac3e56addfa7f5f6d1d3d3c92dea5de9fa42f1414a769b0cdc40e306fee0ad66573628b83a07fe087fcb3377848e1a7869e592c83bb594284da28a4f5db381059d56e5d4989042dadbbe6000b66184ca8fe9d293f6c70988f3d7b8ee00546a21aaeca498ae06fa7becc5a55914c7a1ab714d955a8b0bd72e8d6bbf4dd451b525fcbc9fb5c10747dee3c755d39be5c2d52345c56185a8d6cee878b72255acabf7dbefafaed94838532fd01ea6244c4ac929de6846084a07d19de7098e62b613775abe326d402f707c4fbb3968b0aac7f1f27537cbdecee19151b310bcbe2c848ef41eea747e85f87d5a160b2cb6b28d137e30c69770c1651e44a66f8e3394bec03c8256b89fd59bec449c6a2bdb351f53d05e463f75b834624b8c7b557dc38a398d726d0846fc2f062b5b32d10af38ce844c6811aaef73ace1d86813bc37433670f6180f9bd112ae00133077fc7a0bd12d7b4b3a53a3c16a9cb0e8112f18691aa3bd2215afdaa1d00c8ea4f4a302ea9ebc94afaad2549f646a8ae66b953fa9cd649a02c4b152cc6c7b55d99ddc3d0fd1fcd84da355eb02581dba9e4d9dd235d2d4c4e094161440e70926221d76ce70c8762485c8b801550cc208e5d1bfd184e622ff0950a912dd47163c838fd562f09ca1690e76da55a471ec67cb83bbb103975bd4683f0393ec8b843f55ba2c0bdc6c90b50031cfe751792bd5d0cb50c8ee93086794e18c4ed66d6bd09b499f8ff2f63a8920701ab0af5b4b75402b1d65b1eb515dc46e181a1699f21e67349c904f02f8358e28faff2ade65703d14dc2774b02acc731eee0941675502d95e0c32a7304f6e9af85ef220daea0de24cf79e35a59412e62835d3032f88d9ed7befd4f708bfd2d236bd188b6f951bbe13e3add84f111e20324a523426611ec15fb376e7306cbec6867f0b945047a4facf78154e68a66a36972d5a18af1403baa9b4b51fddd072ee1f0087add02485b40323bd708b76406e10a927a913d91c5d771d3aeb3cfafb54b1016785c61ed13060d5f1b550676a656b874fd392ae61c5044218df55cbb72b819990ffdb130fb17a14f7cb5a2a8aafedc6526d83762dbf320f15758030eeecf5652dccf04cdc68827400c768a21daff47212b87357ff0bcb36cae4d113a5d9815b07332cb42329321664d93e43e6dcd6115987007fc623088004f8ac943736eb2a045a25b1bbfbbc97571eabf875d924f6b7b0e524b1afa0ff499473aa7976de83b91928e84f8e445728778fe0e5a356a57f09ed254848cec31b7c5c9c7a2fca21befe15ffc9317e96f7ad582684ce625791b99563781bf64983e77be4f1a5893beec4b560fc15e9c21dd0c29bf2879dfaa257ba5ec97957050d5b2c1f25eb4064488c139dbf88f3b7c70850d6fdbf0603cdd4011bf76e0d9ee5c2b128b50dba5689a8f04d4caf62d777eab31aab4b4195da780901352d284885bf417eb05367ee1b5f2f8c5cfe7f0394fb977f3a3f96084375e22ccf6c3ee4659d68d2b1948a4a1783a4db2282c67d39613fa67be4dd144793b76c09dd563ef3d169f34318acbd62d3b2d64f9173d16e9801132918c3390172c6f64d049b4c894d593419e5f4d5a513fc5a64ddcd05b034e6d16fe88ff89a520c464f842ad5a62a6fc46f0e9d56d05d6f5e625d25f537cca62910981dd463255318d8273db13d27fdc6c17c2c54776ba3a246c413957f297b8ecb1adb5c3f1d4d8e4d7705bdb9268f956d2845b68511edd51cdc5d05de5d6d4b3f573592986fed325f1f3c6a9ef7740f9d843e11981d1ca515c7e722ec4d691c5e4d3a146e39bcf407f66418f754bb2508cb4cc843aa9d8eb63850e5b9103682ecc1fc8f972f394be9d31cb9efd0f693d4ec41fe8d0993b45d2f422f9ab604d3371c1bda1daa3206a027c4de5c8f2cf6d1fc7e6d1423a6c71e84f24e0a4dfbf4a331deff2ae649df9681a08846efc9f0001e7ef106f1bfa25ee2799b13f1f076e30e58078d186afb65301497e982478babf143972cc7072f70829b8faee46e56a1451ff7ddd0dd35816bfa29eee361de60fbc3222e89d70f1495be94d0e82072a0e572e3055c905552e6c45d2af3d4f505a99d947667059c1c92ce2d3549077539c4cec4c07337361eeb9f78813bf9e77b0a79f391ae6eb663deb53317f61ef8ddffdbd0ca2d8095c10c106b0968325bc1e88829d92399b809f1b881e9b9f0aeada5c5ee20fd0866070e3d5d41e62f5b6d2d25441babcdf9d3dc8ae3c140a6f352daf00ed38e248b236acd27f24bdebae0f272a5820ef77fb603fe3cc910a9d842129259e61d25dcf546cd770e4cccab470b20fa5f5972a6dd15853483de6e032f9726c166e81e8e0f9db4df397cc4a10b6e58708a31f48d7d2bae4ef92828c37088068b2ae433110dc7c08e6017d8b26e4e0382ca8fa62dc6f53c4cc2f0f78af72335c494f57f2414afe247e2291c395895bb18f701b6f4331feb759110c543dd94a238e782ad552047677558a50e7683d71a9e222fd19a9343e1d64528640a8099dedd19e4c747dda18ff25b15bddf750a54533b6ecfc75ad4a2909485f7fd759d45c74727b2e7300eae71a8784f5dd7f25b4b000ed3254264131cbbae316fb3a3bfbeb309dd2d18104629db354f447791eb882bf0333a520b8dba745b673d071b07e1de3e02fe751a1cf5908435b1a38edbd60483abdb15452c868844ceb96c449ab72999a55c79f9ce7405797142ef7095b4caf99d7bbe51cd4e963e4ffbbd2648761abd3894b5420a0add261ff9c0eff61aafd1ac5195ff15cadb5b0c7ce34d4d2d68146f3dae677e833b8be0f8a876153bb65398def38e4bf539d3a00047b19c483062fc1c2547b7d4f7d99b7035212ccfffeeb21ed7bbd6165ac7fbafbca3cef86fff655305706dd0baa607c50543bb0d66f0f4dbdd9c365fdb7b875dc5e7ee59afccc321ad1e31cc84687afda71231bb2e4dc3ce79ff3ce4bbafed8821a5b71bbf3844f110e2dd9557b596ac792d97506d22c0410bce435e20fa2e2d435361b5b6ac85f44763769723a7b629258f45e10578f70bef2e9c05af8032e357697dfcd30de9b3e953a36d6cb7a03ce69288b663f692793904dd8fb4ab6dc31ddf7f6942ef84c1e68c78bf9974f830ee2fccca84113cee98b47ed41a87fe610c5348dc38d4ada19862772317a70754870347ad87dbbb4c52349b0261aa8e108fcf387b24d4e2a77ba76e8472fd74ab6fa021277a24ef7a48d395b0fd1f9c0cf83bac56b433ffbfe5984a362e337969febf259988162c2b4842bd2fc0b230fee93a085003e615088abfe41889f7b5e0f380ffe55b66c1f7419993c3dd4aac5891494a183ddca2e415e1749489c925715f3c44d94b90d2d735f2b923bdbbbf1646580ab135356a9ee29bc19e73ded9a33798a69d248574e0c9e9f40a1c1ba52bc66a578d08b75f271a9e9f447efede09d6b3b57e0aa6322c18fd6f5e1c9d2753e0a6513cc04124ab89802eb9c504f0e5550868ab597629d7cc7447ed1b01b2ff4cf511aa098710b208b5aa0f595039a2f0e7294c5fe3b0c3e6c40000000000000000000000000000000002588beb10115f4b22f4ac997c86c49201ee9dceb2142ae61555bbbc4ef8cdd468a8ffbe6cbfc8877dd87292c70e10669bc99d8d5710f7719cc2cffc86cd529b6da2511d07aef4a1d9533ab58a76f80ad7fe91a17397d3c83481", @ANYBLOB="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", @ANYRES64], 0x8, 0x2eb, &(0x7f00000004c0)="$eJzs3E1PE10UwPHTF0pbAmXx5DGaGG50o5sJVNdKYyAxNpEgNb4kJgNMtenYkpkGU2NEV26NH8IFYcmORPkCbNzpxo07NiYuZGEc0+kMhTKAlNIi/H8JmcPce6b3zgzk3AnD+r23T4t5W8vrFQnHlYRERDZEBiUsvpC3DbtxTLZ6JZf7fnw+f+f+g1uZbHZsUqnxzNSVtFJqYOjDsxcJr9tKr6wNPlr/nv629v/a2fXfU08KtirYqlSuKF1Nl79W9GnTULMFu6gpNWEaum2oQsk2rHp7ud6eN8tzc1Wll2b7k3OWYdtKL1VV0aiqSllVrKqKPNYLJaVpmupPCvaTW5yc1DMtJs+0eTA4IpaV0SMiktjRklvsyoAAAEBXNdf/YVHtrP+XLqxW+u4uD3j1/0osqP6/+qV+rG31f1xEAut///MD63/9YPX/zorodDlU/Y/jYSi2Y1eoEdYarYye9H5+Xa8fLg27AfU/AAAAAAAAAAAAAAAAAAAAAAD/gg3HSTmOk/K3/leviMRFxP8+IDUiIte7MGS00SGuP06Axot70QER8818bj5X33odVkXEFEOGJSW/3PvBU4v9N49UzaB8NBe8/IX5XMRtyeSl4OaPSKpHmvMdZ/xmdmxE1W3P75Hk1vy0pOS/4Px0YH5MLl3ckq9JSj7NSFlMmXXH0ch/OaLUjdvZpvyE2w8AAAAAgJNAU5sC1++atlt7PX9zfd38fCDSWF8PB67Po3Iu2t25AwAAAABwWtjV50XdNA1rjyAh+/dpPYge0ZH9Gf5tlv+3DEc30z0C/8O3NcW9nW0/LaEDnJZdgrC0kjVUm4067Cz8x0a79ZGJ0c5fQTc48+79z/Yd8NpyfJ+Zth5E9r4Bejr2CwgAAABAxzSKfn/PaHcHBAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAKdSJ/47W7TkCAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAx8WfAAAA//+SWQVN")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0xf0)
pwritev2(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="a271f2", 0x3}, {0x0}], 0x2, 0x5412, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
fdatasync(r0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
ftruncate(r0, 0x5)

1m42.250028283s ago: executing program 1 (id=412):
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)

1m42.159514394s ago: executing program 1 (id=414):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file2\x00', 0x1000404, &(0x7f0000000140)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYRES8], 0x1, 0x1236, &(0x7f00000037c0)="$eJzs3E9rHGUcB/Bf0tRsU/NHrdX2oA968TQ0OXgSJEgKkgWlNkIrCFMy0SXjbsgsgRUx9uTVo69BPHpTxDeQq6/AWy7iKQdxhJ3UZGuDRm222M/nMj/ym+888ycszPI8u//aFx9tblTZRt6PyYmJmNyKSAcpUkzGPS+sNttbt1eX2+2VGyldX765+GpKae7F79/75OuXfuhffPebuW+nY2/h/f2fl37au7x3Zf+3mx92qtSpUrfXT3m60+v18ztlkdY71WaW0ttlkVdF6nSrYnukv1H2trYGKe+uz85sbRdVlfLuIG0Wg9Tvpf72IOUf5J1uyrIszc4EJzr/17usfXVQ199F1PX5eCLquq4vxExMxJMxG3PxWUQ8FU/HM3Epno3L8Vw8H1eGe53F6QMAAAAAAAAAAAAAAAAAAMDj42C4mn90/f/Fw/X/87Fg/T8AAAAAAAAAAAAAAAAAAACcgXdu3V5dbrdXbqTUiig/31nbWWu2TX95IzpRRhHXYj5+jeHq/0ZTX3+zvXItDZ2LiN3D/O7O2rnR/OLw5wQO81PD3r38YpNPcbc8lp+OmSbfiogilmI+Lh0bv3WUX3pgvhWvvHxs/Czm692IXpSxPhz7KP/pYkpvvNW+L391uB8AAAD8H2TpDwuj77/N+3uWndRv8qf4fuC+9+upuDo13msnohp8vJmXZbE9WrT+9JexFdOPxmmcppj8N/HpOLE1OdL68seIk45zIcZ+E44Vdf1Qh2gd/i//FweceDTu2CmLuw/hcY/5g4kzcfTQx30mAAAAAAAAAAAAnMbfmQ/4S/zjWYRT8YCZZa+P51IBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Hd24FgAAAAAQJi/dRodGwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADBUAAAA//8MVMUs")
truncate(&(0x7f0000000a80)='./file2\x00', 0x9)

1m42.007642773s ago: executing program 1 (id=415):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0)
umount2(&(0x7f0000000100)='./file0\x00', 0x8)

1m41.884504408s ago: executing program 1 (id=416):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./bus\x00', 0x41, &(0x7f0000000080), 0x64, 0x52b, &(0x7f0000000f80)="$eJzs3c9rJFkdAPBvdbpjMpPZZNWDLriu7kJm0OlONu5u8LCOIHpaUNf7GJNOCOmkQ7qzOwmLm8E/QBBRwZNevAj+AYIsePG4CAt6VlQU0VkFPejUUt3VmZlMd6cz0/kxyecDlXqvXlV93+tQ1fW6HlUBXFjPRcSNiLibpum1iJjMlxfyKfbaU7be+3feWsymJNL09X8kkeTLOvtK8vnlfLOxiPj6VyK+lTwct7Gzu7ZQq1W38nylub5ZaezsXl9dX1iprlQ35uZmX55/Zf6l+ZmhtPNKRLz6pb/84Ls/+/Krv/rsm3+8+ber386qNZGX39+OIyr2K2w3vXTj4AZbjxjsLMraU+pkxrutMfLQktvHXCcAALrLrvE/HBGfjohrMRkj/S9nAQAAgCdQ+oWJ+F8SkXY32mM5AAAA8AQptMbAFqOcjwWYiEKhXG6P4f1oXCrU6o3mZ5br2xtL7bGyU1EqLK/WqjP5WOGpKCVZfraVvpd/8UB+LiKejojvT4638uXFem3ptH/8AAAAgAvicqvPnxQ6/f9/T7b7/wAAAMA5M3WEdf9zjPUAAAAAjs9R+v8AAADAk0n/HwAAAM61r772WjalnfdfL72xs71Wf+P6UrWxVl7fXiwv1rc2yyv1+krrmX3rh+2vVq9vfi42tm9VmtVGs9LY2b25Xt/eaN5cbb0OHAAAADgFT3/ynd8nEbH3+fHWlBkdbNMBVwPOquJ+KsnnXQ7rPzzVnv/5hCoFnIiRvqWlE6sHcPKKp10B4NT4hgeSQ8p7Dt55N59/arj1AQAAhm/6473v/xf6brnXvxg48xzEcHH1v/8PnGet+/+DjuR1sQDnSskVAFx4g9//P3AR8O6gEdL0yJUCAACGaqI1JYVyfmU/EYVCuRxxpfVagFKyvFqrzkTEUxHxu8nSh7L8bGvL5NA+AwAAAAAAAAAAAAAAAAAAAAAAAADQlqZJpAAAAMC5FlH4a/Lr9rP8pydfmDj4+8Bo8t/JyF8R+uaPX//hrYVmc2s2W/7P/eXNH+XLXzyNXzAAAADgQjjSC/w7/fROPx4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAhun9O28tdqaTjPv3L0bE1IH4SVZSjLGI0YixKEXEpX8lUbxvu0JEjAwh/nj252Pd2p9k1doPeTB+0tn2Me3d7hs/prJPoUf8y0OIDxfZO9n550a3468Qz7Xm3Y+/YsQD+UfV9fyXG8v/jvQ4/q8MGOOZ935R6Rn/dsQzxe7nn078pEf85weM/81v7O72Kkt/EjHd9fsneSBWpbm+WWns7F5fXV9Yqa5UN+bmZl+ef2X+pfmZyvJqrZr/7Rrje5/45d1+7b/UI/7UIe1/YcD2//+9W3c+0k6WusW/+nyX+L/5ab7Gw/Hz77707TydlU930nvt9P2e/flvn+3X/qUe7T/s/391wPZf+9p3/jTgqgDACWjs7K4t1GrVrWEnCse25yMmsl76GajGWftYJKpbjbeHusM0TdPsmHqM/SRxFj6WVuK0z0wAAMCw3bvoP+2aAAAAAAAAAAAAAAAAAAAAwMV1Eo8TOxhzbz+VDOMR2gAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQ/FBAAAA///ROdsN")
r0 = fspick(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0)
fsconfig$FSCONFIG_CMD_RECONFIGURE(r0, 0x7, 0x0, 0x0, 0x0)

1m41.722759818s ago: executing program 1 (id=417):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

1m41.572217958s ago: executing program 32 (id=417):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast2}, 0x10)
connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='cdg\x00', 0x4)
sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x11)
recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25)

1m6.837743954s ago: executing program 0 (id=770):
accept$alg(0xffffffffffffffff, 0x0, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001900)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d04000000000000000000000200000000000000000000000b030000000000"], 0x0, 0x52}, 0x28)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0)
sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce)
sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x7, &(0x7f00000000c0)={0x1, 0x4, 0x8, 0x8})
fcntl$lock(r0, 0x6, &(0x7f0000000180)={0x2, 0x1, 0x400000200})
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8)
r2 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff)
add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f0000000580)='X', 0x1, 0xfffffffffffffffe)
r3 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd)
keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r3, r2}, 0x0, 0x4c, &(0x7f0000000480)={&(0x7f00000001c0)={'sha3-512-generic\x00'}})
r4 = syz_open_dev$loop(&(0x7f0000000140), 0x8, 0x40)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/stat\x00', 0x0, 0x0)
ioctl$LOOP_CONFIGURE(r4, 0x4c0a, &(0x7f00000002c0)={r5, 0x0, {0x2a00, 0x80010000, 0x0, 0x6, 0x8b22, 0x0, 0x0, 0x16, 0x11, "fee8a2ab78fc979fd1e00d96072000000ba89de2b7fb0000e6a180b8785d960001000000000041eb8109af00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f422741b13103e52f400003fe2000000000000000000000000000000002000", [0x0, 0x2000000000001]}})
ioctl$LOOP_CHANGE_FD(r4, 0x4c06, r5)
socket(0x2, 0x4, 0x0)
r6 = socket(0x15, 0x5, 0x0)
r7 = getpid()
ptrace$getsig(0x4202, r7, 0x7fffffff, &(0x7f0000000040))
syz_io_uring_setup(0x49a, 0x0, 0x0, 0x0)
r8 = semget(0x1, 0x4, 0x39c)
semctl$SETALL(r8, 0x0, 0x11, 0x0)
sendmsg$kcm(0xffffffffffffffff, 0x0, 0xe07e872420df6fca)
r9 = socket$kcm(0x10, 0x5, 0x4)
sendmsg$inet(r9, 0x0, 0x4080)
accept(r6, 0x0, &(0x7f0000000300))

1m5.351803542s ago: executing program 0 (id=774):
syz_emit_ethernet(0x66, &(0x7f0000000780)={@broadcast, @random="6487a2bed3d6", @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x6c, 0x0, @private}}}}}, 0x0)

1m5.180243431s ago: executing program 0 (id=775):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
setsockopt$sock_int(r0, 0x1, 0x22, 0x0, 0x0)

1m5.017704723s ago: executing program 0 (id=779):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='./bus\x00', 0x180000c, &(0x7f0000000b00)=ANY=[@ANYBLOB='nls=ascii,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c706172743d3078303030303030303030303030303062622c6e6f626172726965722c6e6f626172726965722c63726561746f723d7fcfb5b72c706172743d3078303030303030303030303030303130312c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c756d61736b3d30303030303030303030303030303030303030303030302c6465636f6d706f73652c666f7263652c6e6f6465636f6d706f73652c626172726965722c6e6f6465636f6d706f73652c747970653db029e1c02c7569643d", @ANYRES32, @ANYBLOB="2c747970653dd2100d1b2c7529643dd4f81c66210bbcbf82440a104ab956f2ba5e36e41ccb1b040fa8b829b0b87078de654c66ac22aebaa2c653ef127e38e0aa2229f9cf6a8503", @ANYRESDEC, @ANYBLOB="ca5ec00d40bc9a442139516045e7e6dcd407cddd7a135914bd7a3296ca462d0d76f211c5402d582cf0bd91b1061504cd1168a65e76f7332f1540e5b40e78c74f2d20debe41993e86b2203b19b671dc97c7d0f7c8171a3d71b4aa0e414c4fa42f8fb1db5d380575b51f2a3bf875e77600c302eeadcb317fd5ac0ba7bd99e0ce002acf70df16da62626a1502b5b6ee97f40e", @ANYRES32, @ANYRES8=0x0], 0x1, 0x6ec, &(0x7f0000000400)="$eJzs3UtoHOcdAPD/rHZXKxccOfEjLYEsMaSlorZkobTqpW4pRYdQQnroeXHkWHgtB0kpsimN0se9hxxKT+lBt9BDSe+G9tyQUnLVMVDIJSfdVGZ2Zh/apyxZUpPfT8zON/M95z+vfSAmgK+tlbkoP4kkVuZe306X93YXm1O7i9N5djMiqhFRiiinszS9Hlnu7XyKb0ZEkpdP2g3/u7efD9aW3/zsy73PW0vlfMrKJz31xqv2r9rJp6hHxFQ+71cZ0uLHh7vvae/O0PYm1dnCNGDXi8DFn4/VKhzbQZ+ddt5H/8leR1U/ynkLnFNJ677ZZzbiQkTUIlp3/fzqUDrd0Z28nbMeAAAAABzVzNGrPLcf+7EdF5/FcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOCrKn/+f5JPpSJdj6R4/n81Xxd5+hwa/yDET6db8yfPfjAAAAAAAAAA8My9vB/7sR0Xi+WDJPvN/5Wu3/i/Ee/GZqzGRtyI7WjEVmzFRixExGxXQ9XtxtbWxkJWM+LyiJq34pMBNW8NH+PtE95mAAAAAAAAADjnamPy71ey2Z+6/2//t7HS+f0fAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADOgyRiqjXLpstFejZK5YioFeV2Ij6JiOrZjvZIkkErn5z+OAAAAOBYar2LSW2COs+9F/uxHReL5YMk+8x/Nfu8XIt3Yz22Yi22ohmr8Vb+GTr91F/a211s7u0uPkin/nZ//MWRhp61GK3vHgb3HBE75Yi4G2vZmhtxJ5I4yJTyVl7c211M5w8Gj+v9dEzJj3IjRjPVlc56vvZxlv5j77cI5SNt4lMqDc2ZzXIr7YjM52NLa1wqItAXieyg6Nk7gw6T8sieFqLU/ubn8tCeMoNj/v7obb5wqNTAb27OxOFI3IpSew9dHR2JiG///aNf3muu3793d3Pu/GzSQO+NLXE4Eotdkbj2FYrEePNZJK60l1fiZ/GLmIsvpt+IjViLX0UjtmK1XuQ38uM5fZ0dHalPL3QvvTFuJOk5WW9fvwaNqR49Y4p6/DRLNeKVbJ9ejLVI4mFErMZr2d+tWGhfDTp7+MoEZ31pgittl+vfyWbtMMXM8LJ/nazJk5LG9VJXXLuvubNZXveaTpSeHxil4l43+f2oS/lbeSJt4Xcj7w+n7XAkFroi8cKw46UV0r9kd5PN5vr9jXuNdybs79V8np5HfzhXd4l0a56PWr5xl7LXJDun5rO8F9p32N54VfNfXFpKfXlX2vVaZ+rP42G81XOmfj+WYimWs9JXs9KVvjtWmnet3VLvNTzNezHNa/+w0/1+62E0W++HADjfLnz3QnXmvzP/mvlw5vcz92Zer/1k+gfTL1Wj8s/KD8vzU6+WXkr+Fh/Gbzqf/wEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgKe3+ejx/UazuboxOFEanJWMrtVoHhQPEhtRpieR5I/KmaBwsvno8cHYBkcnpvPhPWX1k0wUj+EbX7g+sp3ysYaR7BzeX7Xx+6J4ytMEXSR9AU8rP3Xoip47ayrnYFceTtRPrsHigO3KOsrRW+k56XuypiJiUK0xF46p4113gLN3c+vBOzc3Hz3+3tqDxturb6+uV5aWlueXl15bvHl3rbk633rtqnAqD78FTkP324m2akS8PL7uiAe1AgAAAAAAAAAAAM/QafwvxFlvIwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPD/bWUuyk8iiYX5G/Pp8t7uYjOdinSnZDkiShGR/Doi+UfE7WhNMdvVXDKsnw/Wlt/87Mu9zzttlYvypYidofUms5NPUY+IqXx+Uu3dGd9etZOcHpCdtCOTBux6ETg4a/8LAAD//3qh6ms=")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12dc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x1887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

1m4.853077365s ago: executing program 0 (id=784):
ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r0)
r1 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c)
listen(r1, 0x0)
r2 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10)
r3 = accept(r0, 0x0, 0x0)
sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1)
recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10)

1m4.608966786s ago: executing program 0 (id=785):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_team\x00', 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0xb66f)
sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c9629c40f805d6c52d", 0x9}], 0x1}, 0x4004045)
sendfile(r0, r1, 0x0, 0x7ffff006)

1m4.354924837s ago: executing program 33 (id=785):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10)
connect$inet(r0, &(0x7f00000002c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='veth1_to_team\x00', 0x10)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0)
ftruncate(r1, 0xb66f)
sendmsg$inet(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="c9629c40f805d6c52d", 0x9}], 0x1}, 0x4004045)
sendfile(r0, r1, 0x0, 0x7ffff006)

2.530699446s ago: executing program 2 (id=1514):
preadv(0xffffffffffffffff, &(0x7f0000004ec0), 0x0, 0x3, 0x0)
r0 = syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x1200800, &(0x7f00000008c0)=ANY=[@ANYBLOB="706172743d3078303030303030303030303030303031302c6e6c733d69736f383835392d332c747970653d78fa42012c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="00000000f5", @ANYRESHEX=0x0, @ANYBLOB="056c"], 0x3, 0x6ae, &(0x7f0000000e40)="$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")
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
fsopen(0x0, 0x0)
socket$kcm(0xa, 0x2, 0x0)
r5 = socket(0x2, 0x80805, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
setsockopt$IP_VS_SO_SET_ADD(r6, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4dfc, 0x3, 'dh\x00', 0x22, 0x80005, 0x18}, 0x2c)
setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000000)={{0x84, @rand_addr=0x64010101, 0x4e21, 0x3, 'lc\x00', 0x5, 0x8, 0x77}, {@remote, 0x4e20, 0x0, 0xcd, 0xfffffffc}}, 0x44)
sendmsg$sock(r3, &(0x7f0000000400)={&(0x7f0000000580)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x40, 0x1, 0x2}}, 0x80, 0x0, 0x0, &(0x7f0000000000), 0xffffff79}, 0x1080)
bind$802154_dgram(0xffffffffffffffff, 0x0, 0x0)
r7 = openat$vga_arbiter(0xffffffffffffff9c, 0x0, 0x80082, 0x0)
write$vga_arbiter(r7, &(0x7f00000000c0), 0xf)
syz_mount_image$fuse(0x0, &(0x7f00000001c0)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x4000, &(0x7f0000000480)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYRESDEC=0x0, @ANYBLOB], 0x0, 0x0, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0)
r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000580)='/proc/tty/drivers\x00', 0x0, 0x0)
read$FUSE(r8, &(0x7f0000004100)={0x2020}, 0x2020)

1.662514416s ago: executing program 2 (id=1517):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_tcp(0x2, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
setsockopt$IP_VS_SO_SET_ZERO(r3, 0x0, 0x48f, &(0x7f0000000240)={0x32, @local, 0x4e21, 0x4, 'lc\x00', 0x11, 0xe, 0x8}, 0x2c)

1.5929606s ago: executing program 3 (id=1518):
syz_emit_ethernet(0x22, &(0x7f00000002c0)={@broadcast, @random="f5ab325f8d63", @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x38, 0x14, 0x65, 0x0, 0xef, 0x2b, 0x0, @loopback, @loopback}}}}}, 0x0)

1.545958606s ago: executing program 3 (id=1519):
r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xd, 0x17, &(0x7f00000007c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x40}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x20}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x1, 0xe7030000}, {0x16, 0x0, 0x0, 0x6}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}, {0x56}}], {{0x4, 0x1, 0x3, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x2d, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

1.451387334s ago: executing program 4 (id=1520):
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', 0xffffffffffffffff, 0x0, 0x7fff}, 0x18)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$bt_hci(r0, 0x84, 0x84, &(0x7f0000000080)=""/4096, &(0x7f0000001200)=0x1000)

1.391531771s ago: executing program 3 (id=1521):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f00000000c0)={&(0x7f0000000000)='`', 0x1, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000140)={&(0x7f0000000100)=[r1], 0x1, 0x800})

948.893399ms ago: executing program 4 (id=1522):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_DYNSET_SREG_KEY={0x8, 0x4, 0x1, 0x0, 0x12}, @NFTA_DYNSET_FLAGS={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz1\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}, 0x1, 0x0, 0x0, 0x10}, 0x0)

948.480833ms ago: executing program 3 (id=1523):
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0})
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x10000000}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f000007"], 0x48)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10)
bpf$MAP_CREATE(0x0, 0x0, 0x48)
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50)
getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8)

860.374218ms ago: executing program 4 (id=1524):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
mount$overlay(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000100)={[{@lowerdir, 0x5c}]})

860.033234ms ago: executing program 4 (id=1525):
r0 = socket$netlink(0x10, 0x3, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r2, 0x11, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x4000)

421.057696ms ago: executing program 4 (id=1526):
fanotify_init(0x1200, 0x0)

418.118341ms ago: executing program 2 (id=1527):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000800)=@newsa={0x148, 0x10, 0x713, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x3502, 0xa}, [@offload={0xc, 0x1c, {0x0, 0x6}}, @algo_auth_trunc={0x4c, 0x14, {{'sha1\x00'}}}]}, 0x148}}, 0x0)

332.094838ms ago: executing program 4 (id=1528):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x1000400, &(0x7f0000000280)={[{@quota}, {@discard_size={'discard', 0x3d, 0xaff9}}, {@iocharset={'iocharset', 0x3d, 'none'}}, {@errors_continue}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@usrquota}, {@nodiscard}, {@uid}, {@uid={'uid', 0x3d, 0xee01}}]}, 0x21, 0x61b6, &(0x7f00000075c0)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file0/file0\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0)
rename(&(0x7f0000000000)='./file1\x00', &(0x7f00000000c0)='./file0/file0\x00')

281.810828ms ago: executing program 2 (id=1529):
syz_mount_image$romfs(&(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x0, &(0x7f00000001c0)=ANY=[], 0x1, 0x171, &(0x7f0000000480)="$eJzs2rFKw0AYB/DParEUn8Cp0Ax1aJMmWgV3QXDyAcTQ3tXQxEgiSDsFX0BxiI/g6qqbj9DZzU1dXB0kkvRq2zsXCxLB/29o/vTLfXcJ4aarB77X5GGdaC262n8uBL5XaVmbbd7kNo3sElElDcMkuW6Q4vCrPkyihnJD9V5ca9147447LjPVHgAAAAAAAAAAAAAAAAAAAAAA/0T1RYTyUezfcMdlzalq2B/0bNdlQTj+RyNxRod47G9zR2PWTL/aO5GWnd9x4p3ztJ8xU9fSTqUk80byfPqpd6KH/UHd8ewu67Jj07RaxrphbJh61kuXO2qXYk1EpfRnQXo+7XZynujRUM8TUXl0WVp14ouzrHtRfv4CBZMX8YMQzTUKIcdAEdEfWIYIT69E35dK4gNlQVic/lYXR/dsHWSlnBb/keT/6n47yPsHdZat6kO6fzTavttR9k8pjEfPM3lBjO3ZK+kUyo4GkJPPAAAA///+VynD")
link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00')

281.565822ms ago: executing program 2 (id=1530):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10)
io_setup(0x8, &(0x7f00000001c0)=<r1=>0x0)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/disk', 0x1, 0x0)
io_submit(r1, 0x1, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000300)="87", 0x1, 0x4}])

82.397529ms ago: executing program 2 (id=1531):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x406, 0x6}, 0x4)
setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000001c00)={0x2, &(0x7f0000000180)=[{0x80, 0x0, 0x0, 0x3fd}, {0x6}]}, 0x10)

969.513µs ago: executing program 3 (id=1532):
r0 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r0, &(0x7f0000000440), 0x10)
socket$vsock_stream(0x28, 0x1, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0)
ioctl$FS_IOC_SETFLAGS(r1, 0x40186f40, &(0x7f0000000440)=0x1f)

0s ago: executing program 3 (id=1533):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

kernel console output (not intermixed with test programs):

ength 1)
[  107.635789][ T3735] Quota error (device loop0): remove_tree: Can't read quota data block 1
[  107.639402][ T3735] EXT4-fs error (device loop0): ext4_release_dquot:6973: comm kworker/u9:5: Failed to release dquot type 0
[  107.649353][ T6977] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  107.676003][ T6977] EXT4-fs error (device loop0): __ext4_get_inode_loc:4861: comm syz.0.443: Invalid inode table block 1 in block_group 0
[  107.685799][ T6977] EXT4-fs error (device loop0) in ext4_reserve_inode_write:6334: Corrupt filesystem
[  107.695358][ T6977] EXT4-fs error (device loop0): ext4_quota_off:7221: inode #3: comm syz.0.443: mark_inode_dirty error
[  107.818852][ T6986] loop0: detected capacity change from 0 to 1764
[  107.936706][ T5236] Bluetooth: hci0: Unknown advertising packet type: 0x7f
[  107.936756][ T5236] Bluetooth: hci0: Unknown advertising packet type: 0x72
[  107.939695][ T5236] Bluetooth: hci0: Malformed LE Event: 0x0d
[  107.964932][ T6991] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'.
[  108.712309][ T6998] loop0: detected capacity change from 0 to 32768
[  109.046879][ T7012] use of bytesused == 0 is deprecated and will be removed in the future,
[  109.050683][ T7012] use the actual size instead.
[  109.333240][ T5236] Bluetooth: hci0: command tx timeout
[  109.728230][ T6998] jfs_lookup: iget failed on inum 32
[  109.742006][ T6998] jfs_lookup: iget failed on inum 32
[  110.168370][ T7023] syzkaller1: tun_chr_ioctl cmd 1074025678
[  110.169078][ T7021] loop0: detected capacity change from 0 to 4096
[  110.170696][ T7023] syzkaller1: group set to 0
[  110.232045][ T7021] ntfs3(loop0): failed to convert "0080" to maciceland
[  110.242900][ T7021] ntfs3(loop0): failed to convert name for inode 1e.
[  110.246041][ T7021] ntfs3(loop0): ino=1f, mi_enum_attr
[  110.253116][ T7021] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  110.405974][ T7029] loop0: detected capacity change from 0 to 1024
[  110.458978][ T7031] loop2: detected capacity change from 0 to 512
[  110.506318][ T7029] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.589865][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.594660][ T7031] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  110.595396][ T7027] loop3: detected capacity change from 0 to 32768
[  110.598901][ T7031] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  110.602188][ T7027] XFS: ikeep mount option is deprecated.
[  110.621377][ T7031] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.466: Failed to acquire dquot type 1
[  110.657504][ T7031] EXT4-fs (loop2): 1 truncate cleaned up
[  110.660852][ T7027] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  110.677303][ T7031] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  110.689620][ T7031] ext4 filesystem being mounted at /187/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  110.700284][ T7027] XFS (loop3): Ending clean mount
[  110.707075][ T7027] XFS (loop3): Quotacheck needed: Please wait.
[  110.742737][ T7027] XFS (loop3): Quotacheck: Done.
[  110.764858][ T7031] Quota error (device loop2): do_check_range: Getting dqdh_prev_free 1536 out of range 0-5
[  110.770104][ T7031] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota
[  110.777922][ T7031] EXT4-fs error (device loop2): ext4_acquire_dquot:6937: comm syz.2.466: Failed to acquire dquot type 1
[  110.865073][ T7049] loop0: detected capacity change from 0 to 8
[  110.881890][ T7049] squashfs image failed sanity check
[  110.979462][ T5855] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.375453][ T7056] netlink: 20 bytes leftover after parsing attributes in process `syz.0.471'.
[  111.507713][ T7057] sctp: [Deprecated]: syz.2.469 (pid 7057) Use of int in maxseg socket option.
[  111.507713][ T7057] Use struct sctp_assoc_value instead
[  111.795023][ T7063] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  112.054089][ T7069] process 'syz.0.478' launched '/dev/fd/5' with NULL argv: empty string added
[  112.070295][ T6904] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  112.105909][ T7069] loop0: detected capacity change from 0 to 1024
[  112.328215][ T3735] hfsplus: b-tree write err: -5, ino 4
[  112.437339][ T7085] loop3: detected capacity change from 0 to 22
[  112.439827][ T7085] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  112.459485][ T7085] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  112.508780][ T7089] netlink: 196 bytes leftover after parsing attributes in process `syz.2.486'.
[  112.572018][ T7088] tipc: Started in network mode
[  112.574625][ T7088] tipc: Node identity 3af1c930038c, cluster identity 4711
[  112.579638][ T7088] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  112.588129][ T7088] syzkaller0: entered promiscuous mode
[  112.590806][ T7088] syzkaller0: entered allmulticast mode
[  112.617976][ T7088] tipc: Resetting bearer <eth:syzkaller0>
[  112.652548][ T7086] tipc: Resetting bearer <eth:syzkaller0>
[  112.671261][ T7086] tipc: Disabling bearer <eth:syzkaller0>
[  113.069591][ T5236] Bluetooth: hci0: command tx timeout
[  113.413248][  T972] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  113.545831][    T9] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  113.573130][  T972] usb 3-1: Using ep0 maxpacket: 16
[  113.576940][  T972] usb 3-1: config 4 has an invalid interface number: 51 but max is 0
[  113.580086][  T972] usb 3-1: config 4 has no interface number 0
[  113.582412][  T972] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x1 has invalid maxpacket 16
[  113.586447][  T972] usb 3-1: config 4 interface 51 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  113.590174][  T972] usb 3-1: config 4 interface 51 has no altsetting 0
[  113.599022][  T972] usb 3-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76
[  113.602569][  T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.605843][  T972] usb 3-1: Product: syz
[  113.607551][  T972] usb 3-1: Manufacturer: syz
[  113.609361][  T972] usb 3-1: SerialNumber: syz
[  113.618065][ T7103] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  113.621720][ T7103] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  113.673016][ T5972] usb 4-1: new low-speed USB device number 2 using dummy_hcd
[  113.698144][    T9] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[  113.701407][    T9] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  113.705307][    T9] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  113.709458][    T9] usb 1-1: config 220 has no interface number 2
[  113.711942][    T9] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  113.719004][    T9] usb 1-1: config 220 interface 0 has no altsetting 0
[  113.721637][    T9] usb 1-1: config 220 interface 76 has no altsetting 0
[  113.724553][    T9] usb 1-1: config 220 interface 1 has no altsetting 0
[  113.729900][    T9] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  113.733479][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.736811][    T9] usb 1-1: Product: syz
[  113.738752][    T9] usb 1-1: Manufacturer: syz
[  113.740585][    T9] usb 1-1: SerialNumber: syz
[  113.825512][ T5972] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.829742][ T5972] usb 4-1: config 0 has no interfaces?
[  113.838307][ T5972] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.842313][ T5972] usb 4-1: config 0 has no interfaces?
[  113.843137][ T7103] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  113.848198][ T7103] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  113.851658][ T5972] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  113.861798][ T5972] usb 4-1: config 0 has no interfaces?
[  113.873563][  T972] cdc_eem 3-1:4.51 usb0: register 'cdc_eem' at usb-dummy_hcd.2-1, CDC EEM Device, 12:5d:cc:a5:7f:71
[  113.874138][ T5972] usb 4-1: string descriptor 0 read error: -22
[  113.893186][ T5972] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  113.896790][ T5972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.906704][ T5972] usb 4-1: config 0 descriptor??
[  113.969676][    T9] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[  113.972297][    T9] usb 1-1: No valid video chain found.
[  113.977900][    T9] usb 1-1: selecting invalid altsetting 0
[  113.996361][    T9] usb 1-1: selecting invalid altsetting 0
[  113.999177][    T9] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[  114.011537][    T9] usb 1-1: USB disconnect, device number 12
[  114.063861][ T5972] usb 3-1: USB disconnect, device number 10
[  114.070756][ T5972] cdc_eem 3-1:4.51 usb0: unregister 'cdc_eem' usb-dummy_hcd.2-1, CDC EEM Device
[  114.184120][ T7112] loop3: detected capacity change from 0 to 4096
[  114.192339][ T7112] ntfs3(loop3): Different NTFS sector size (1024) and media sector size (512).
[  114.225561][ T7112] ntfs3(loop3): Failed to initialize $Extend/$Reparse.
[  114.260144][    T9] usb 4-1: USB disconnect, device number 2
[  114.609843][   T33] audit: type=1326 audit(1757604514.418:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7126 comm="syz.0.499" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8fb78eba9 code=0x0
[  114.751427][ T7137] A link change request failed with some changes committed already. Interface veth1_to_hsr may have been left with an inconsistent configuration, please check.
[  114.822987][ T7139] loop2: detected capacity change from 0 to 164
[  114.828150][ T7139] Unable to read rock-ridge attributes
[  114.839019][ T7139] Unable to read rock-ridge attributes
[  115.108363][ T7152] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  115.111474][ T7152] batman_adv: batadv0: Removing interface: batadv_slave_0
[  115.117054][ T7152] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  115.119984][ T7152] batman_adv: batadv0: Removing interface: batadv_slave_1
[  115.590242][ T7163] netlink: 104 bytes leftover after parsing attributes in process `syz.0.515'.
[  115.703952][ T7169] loop2: detected capacity change from 0 to 8
[  116.086987][ T7173] loop2: detected capacity change from 0 to 32768
[  116.115966][ T7173] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  116.171140][ T7173] XFS (loop2): Ending clean mount
[  116.217144][ T5855] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  116.737875][ T7206] loop3: detected capacity change from 0 to 4096
[  117.174328][ T7200] loop2: detected capacity change from 0 to 131072
[  117.180412][ T7200] F2FS-fs (loop2): invalid crc value
[  117.212616][ T7206] ntfs3(loop3): Failed to initialize $Extend/$ObjId.
[  117.224754][ T7200] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  117.229232][ T7200] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  117.348768][ T7222] loop3: detected capacity change from 0 to 512
[  117.355067][ T7222] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  117.361814][ T7222] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=2842e12c, mo2=0002]
[  117.366085][ T7222] System zones: 1-12
[  117.367907][ T7222] EXT4-fs (loop3): orphan cleanup on readonly fs
[  117.372198][ T7222] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.537: invalid indirect mapped block 12 (level 1)
[  117.380517][ T7222] EXT4-fs (loop3): Remounting filesystem read-only
[  117.382657][ T7222] EXT4-fs (loop3): 1 truncate cleaned up
[  117.385817][ T7222] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  117.392731][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz.3.537'.
[  117.436959][ T6904] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  117.589632][ T7230] gre1: entered promiscuous mode
[  117.710869][ T7234] loop0: detected capacity change from 0 to 22
[  117.718873][ T7234] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  117.730930][ T7234] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  117.876522][ T7240] loop0: detected capacity change from 0 to 512
[  117.904915][ T7240] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  117.908252][ T7240] EXT4-fs (loop0): orphan cleanup on readonly fs
[  117.921387][ T7240] Quota error (device loop0): v2_read_file_info: Free block number 1 out of range (1, 6).
[  117.927863][ T7240] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  117.937558][ T7240] EXT4-fs (loop0): Cannot turn on quotas: error -117
[  117.942695][ T7240] EXT4-fs (loop0): 1 truncate cleaned up
[  117.947664][ T7240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  117.981644][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  117.997242][  T972] usb 4-1: new full-speed USB device number 3 using dummy_hcd
[  118.105941][ T5899] IPVS: starting estimator thread 0...
[  118.255873][ T7247] IPVS: using max 37 ests per chain, 88800 per kthread
[  118.275299][  T972] usb 4-1: config 0 has an invalid interface number: 189 but max is 0
[  118.278540][  T972] usb 4-1: config 0 has no interface number 0
[  118.280927][  T972] usb 4-1: config 0 interface 189 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  118.285281][  T972] usb 4-1: config 0 interface 189 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83
[  118.289831][  T972] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 64
[  118.294116][  T972] usb 4-1: config 0 interface 189 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0
[  118.297882][  T972] usb 4-1: config 0 interface 189 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  118.306224][  T972] usb 4-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 1.02
[  118.309686][  T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.312708][  T972] usb 4-1: Product: syz
[  118.314730][  T972] usb 4-1: Manufacturer: syz
[  118.316782][  T972] usb 4-1: SerialNumber: syz
[  118.344256][  T972] usb 4-1: config 0 descriptor??
[  118.550243][ T7236] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  118.556038][  T972] ums-alauda 4-1:0.189: USB Mass Storage device detected
[  118.566802][  T972] scsi host6: usb-storage 4-1:0.189
[  118.759388][  T972] usb 4-1: USB disconnect, device number 3
[  119.246179][ T7269] netlink: 348 bytes leftover after parsing attributes in process `syz.0.554'.
[  119.702756][ T7297] PKCS8: Unsupported PKCS#8 version
[  120.380154][ T7311] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check.
[  120.499727][ T7301] loop0: detected capacity change from 0 to 40427
[  120.510060][ T7301] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  120.513454][ T7301] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  120.523723][ T7301] F2FS-fs (loop0): invalid crc value
[  120.621235][ T7301] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  120.636162][ T7301] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  120.642918][ T7301] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  120.973393][ T7329] loop0: detected capacity change from 0 to 4096
[  120.979422][ T7329] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  120.985458][ T7329] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  120.988913][ T7329] ntfs3(loop0): Failed to load $MFT.
[  121.239241][ T7339] comedi comedi0: aio_iiro_16: I/O port conflict (0x5,8)
[  121.380442][ T7345] loop0: detected capacity change from 0 to 1024
[  121.417169][ T1088] hfsplus: b-tree write err: -5, ino 4
[  121.566846][ T7353] netlink: 92 bytes leftover after parsing attributes in process `syz.0.592'.
[  121.627747][ T7355] netlink: 'syz.0.593': attribute type 83 has an invalid length.
[  121.722916][ T5972] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  121.878737][ T7358] loop3: detected capacity change from 0 to 32768
[  121.882927][ T5972] usb 3-1: Using ep0 maxpacket: 32
[  121.892290][ T5972] usb 3-1: config 8 has an invalid interface number: 203 but max is 0
[  121.896275][ T5972] usb 3-1: config 8 has no interface number 0
[  121.898737][ T5972] usb 3-1: config 8 interface 203 has no altsetting 0
[  121.908185][ T7358] jfs_mount: dbMount failed w/rc = -22
[  121.911026][ T7358] Mount JFS Failure: -22
[  121.914408][ T7358] jfs_mount failed w/return code = -22
[  121.918876][ T5972] usb 3-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a
[  121.922470][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.936394][ T5972] usb 3-1: Product: syz
[  121.938138][ T5972] usb 3-1: Manufacturer: syz
[  121.940016][ T5972] usb 3-1: SerialNumber: syz
[  122.077882][ T7365] loop0: detected capacity change from 0 to 32768
[  122.169558][ T7365] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  122.169572][ T7365]   allowing incompatible features above 0.0: (unknown version)
[  122.169578][ T7365]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  122.185305][ T7365] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0
[  122.188623][ T7365] bcachefs (loop0): recovering from clean shutdown, journal seq 10
[  122.192986][ T7365] bcachefs (loop0): Version upgrade required:
[  122.192986][ T7365] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  122.192986][ T7365] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  122.192986][ T7365]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  122.218109][ T5972] port100 3-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint
[  122.224093][ T7365] bcachefs (loop0): dropping and reconstructing all alloc info
[  122.240005][ T7365] bcachefs (loop0): accounting_read...
[  122.244412][ T5972] usb 3-1: USB disconnect, device number 11
[  122.250551][ T7365]  done
[  122.251548][ T7365] bcachefs (loop0): alloc_read... done
[  122.253957][ T7365] bcachefs (loop0): snapshots_read... done
[  122.256548][ T7365] bcachefs (loop0): check_allocations... done
[  122.278543][ T7365] bcachefs (loop0): going read-write
[  122.287867][ T7365] bcachefs (loop0): done starting filesystem
[  122.416122][ T5858] bcachefs (loop0): shutting down
[  122.419057][ T5858] bcachefs (loop0): going read-only
[  122.421903][ T5858] bcachefs (loop0): finished waiting for writes to stop
[  122.438140][ T5858] bcachefs (loop0): flushing journal and stopping allocators, journal seq 10
[  122.442411][ T5858] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 10
[  122.458689][ T5858] bcachefs (loop0): unclean shutdown complete, journal seq 11
[  122.466826][ T5858] bcachefs (loop0): done going read-only, filesystem not clean
[  122.515265][ T5858] bcachefs (loop0): shutdown complete
[  123.646214][ T7416] netlink: 40 bytes leftover after parsing attributes in process `syz.2.616'.
[  123.918804][ T7431] loop3: detected capacity change from 0 to 128
[  123.922226][ T7431] EXT4-fs: Ignoring removed nobh option
[  123.942387][ T7431] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  123.958128][ T7431] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  123.992495][ T6904] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  124.093271][ T5899] usb 3-1: new high-speed USB device number 12 using dummy_hcd
[  124.115274][ T7439] loop3: detected capacity change from 0 to 512
[  124.118077][ T7439] EXT4-fs: Ignoring removed orlov option
[  124.123770][ T7439] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem
[  124.137216][ T7439] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[  124.141149][ T7439] EXT4-fs error (device loop3): ext4_iget_extra_inode:5104: inode #15: comm syz.3.627: corrupted in-inode xattr: e_value size too large
[  124.151228][ T7439] EXT4-fs error (device loop3): ext4_orphan_get:1397: comm syz.3.627: couldn't read orphan inode 15 (err -117)
[  124.169763][ T7439] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.243273][ T5899] usb 3-1: Using ep0 maxpacket: 32
[  124.250879][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.252421][ T6904] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.263757][ T5899] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.268481][ T5899] usb 3-1: New USB device found, idVendor=05ac, idProduct=0265, bcdDevice= 0.00
[  124.271932][ T5899] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.300614][ T5899] usb 3-1: config 0 descriptor??
[  124.627215][ T7454] netlink: 8 bytes leftover after parsing attributes in process `syz.0.633'.
[  124.716486][ T5899] magicmouse 0003:05AC:0265.0003: item fetching failed at offset 6/7
[  124.720756][ T7460] loop0: detected capacity change from 0 to 512
[  124.743745][ T5899] magicmouse 0003:05AC:0265.0003: magicmouse hid parse failed
[  124.746888][ T5899] magicmouse 0003:05AC:0265.0003: probe with driver magicmouse failed with error -22
[  124.768047][ T7460] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  124.783072][ T7460] ext4 filesystem being mounted at /194/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  124.800042][ T7460] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  124.857630][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.922263][ T5899] usb 3-1: USB disconnect, device number 12
[  125.106520][ T7468] loop3: detected capacity change from 0 to 32768
[  125.138000][ T7468] ea_get: invalid extended attribute
[  125.140304][ T7468] ffff888122783148: 04 00 00 00                                      ....
[  125.199574][ T7470] loop0: detected capacity change from 0 to 32768
[  125.233524][ T7470] XFS (loop0): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  125.261177][ T7470] XFS (loop0): Ending clean mount
[  125.277392][ T7470] XFS (loop0): Quotacheck needed: Please wait.
[  125.315272][ T7470] XFS (loop0): Quotacheck: Done.
[  125.324730][   T33] audit: type=1800 audit(1757604525.138:21): pid=7470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.640" name="file1" dev="loop0" ino=4422 res=0 errno=0
[  125.562647][ T5899] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz1
[  125.613615][  T972] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  125.763007][  T972] usb 4-1: Using ep0 maxpacket: 16
[  125.778391][  T972] usb 4-1: New USB device found, idVendor=0483, idProduct=1234, bcdDevice=ff.76
[  125.792046][ T5858] XFS (loop0): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  125.803151][  T972] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.806368][  T972] usb 4-1: Product: syz
[  125.812430][  T972] usb 4-1: Manufacturer: syz
[  125.827451][  T972] usb 4-1: SerialNumber: syz
[  125.843758][  T972] usb 4-1: config 0 descriptor??
[  125.847942][ T7489] loop2: detected capacity change from 0 to 4096
[  125.872969][ T7489] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  125.907179][ T7489] ntfs3(loop2): ino=1a, mi_enum_attr
[  125.909427][ T7489] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  126.072399][  T972] usb 4-1: ignoring: not an USB2CAN converter
[  126.234709][ T7499] loop0: detected capacity change from 0 to 256
[  126.240683][ T7499] exFAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  126.249509][ T7499] exFAT-fs (loop0): Medium has reported failures. Some data may be lost.
[  126.264664][ T7499] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[  126.275850][ T5972] usb 4-1: USB disconnect, device number 4
[  126.376208][ T7505] netlink: 28 bytes leftover after parsing attributes in process `syz.0.653'.
[  126.566968][ T7512] netlink: 8 bytes leftover after parsing attributes in process `syz.0.656'.
[  126.693384][    T9] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  126.843067][    T9] usb 3-1: Using ep0 maxpacket: 32
[  126.869006][    T9] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[  126.884457][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.907626][    T9] usb 3-1: config 0 descriptor??
[  126.957323][ T7514] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  127.141055][    T9] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[  127.168323][    T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  127.174911][    T9] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[  127.186826][    T9] usb 3-1: media controller created
[  127.248690][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  127.366464][    T9] az6027: usb out operation failed. (-71)
[  127.373318][    T9] az6027: usb out operation failed. (-71)
[  127.375813][    T9] stb0899_attach: Driver disabled by Kconfig
[  127.377909][    T9] az6027: no front-end attached
[  127.377909][    T9] 
[  127.398819][    T9] az6027: usb out operation failed. (-71)
[  127.404902][    T9] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[  127.417077][    T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input4
[  127.469832][    T9] dvb-usb: schedule remote query interval to 400 msecs.
[  127.479291][    T9] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[  127.505797][    T9] usb 3-1: USB disconnect, device number 13
[  127.760658][    T9] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[  127.982628][ T5885] tipc: Subscription rejected, illegal request
[  128.187343][ T7530] loop0: detected capacity change from 0 to 4096
[  128.228534][ T7530] ntfs3(loop0): Failed to initialize $Extend/$ObjId.
[  128.430430][ T7549] netlink: 'syz.3.672': attribute type 9 has an invalid length.
[  128.435603][ T7549] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.672'.
[  128.632962][ T7553] loop3: detected capacity change from 0 to 4096
[  128.774127][ T7553] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  128.791070][ T7553] ntfs3(loop3): Failed to load $Secure (-22).
[  128.810987][ T7553] ntfs3(loop3): Failed to initialize $Secure (-22).
[  129.413118][ T5972] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  129.575648][ T5972] usb 3-1: Using ep0 maxpacket: 16
[  129.580484][ T5972] usb 3-1: config 0 has an invalid interface number: 132 but max is 0
[  129.588571][ T5972] usb 3-1: config 0 has no interface number 0
[  129.594820][ T5972] usb 3-1: New USB device found, idVendor=05ac, idProduct=0291, bcdDevice=43.25
[  129.603800][ T5972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  129.606775][ T5972] usb 3-1: Product: syz
[  129.608099][ T5972] usb 3-1: Manufacturer: syz
[  129.609561][ T5972] usb 3-1: SerialNumber: syz
[  129.873823][ T5972] usb 3-1: config 0 descriptor??
[  129.879544][ T5972] hub 3-1:0.132: bad descriptor, ignoring hub
[  129.881405][ T5972] hub 3-1:0.132: probe with driver hub failed with error -5
[  129.886606][ T5972] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.132/input/input5
[  130.234127][ T7592] loop3: detected capacity change from 0 to 32768
[  130.539882][ T7592] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=crc64,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  130.539905][ T7592]   allowing incompatible features above 0.0: (unknown version)
[  130.539914][ T7592]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  130.559590][ T7592] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  130.562962][ T7592] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  130.566500][ T7592] bcachefs (loop3): Version upgrade required:
[  130.566500][ T7592] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  130.566500][ T7592] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  130.566500][ T7592]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  130.596326][ T7592] bcachefs (loop3): dropping and reconstructing all alloc info
[  130.616455][ T7592] bcachefs (loop3): accounting_read... done
[  130.619919][ T7592] bcachefs (loop3): alloc_read... done
[  130.623231][ T7592] bcachefs (loop3): snapshots_read... done
[  130.626564][ T7592] bcachefs (loop3): check_allocations...
[  130.634625][ T7610] loop0: detected capacity change from 0 to 512
[  130.644752][ T7592]  done
[  130.647620][ T7592] bcachefs (loop3): going read-write
[  130.669777][ T7592] bcachefs (loop3): done starting filesystem
[  130.669931][ T7610] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  130.685973][ T7618] raw_sendmsg: syz.2.694 forgot to set AF_INET. Fix it!
[  130.696843][ T7610] ext4 filesystem being mounted at /216/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  130.765956][   T33] audit: type=1800 audit(1757604530.578:22): pid=7610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.693" name="file1" dev="loop0" ino=15 res=0 errno=0
[  130.801013][ T7592] bcachefs (loop3): inode 536870912 i_sectors underflow: 8 + -24 < 0
[  130.825435][ T7592] bcachefs (loop3): inode 536870912 i_blocks underflow: 8 + -24 < 0 (ondisk 8)
[  130.839804][  T759] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  130.839850][  T759]   u64s 5 type deleted 0:30:0 len 0 ver 0, , continuing
[  130.845587][   T33] audit: type=1800 audit(1757604530.588:23): pid=7610 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.693" name="file2" dev="loop0" ino=16 res=0 errno=0
[  130.876954][  T759] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  130.876970][  T759]   u64s 5 type deleted 0:39:0 len 0 ver 0, , continuing
[  130.885933][  T759] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  130.885948][  T759]   u64s 5 type deleted 0:44:0 len 0 ver 0, , continuing
[  130.886706][ T5858] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.891619][  T759] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  130.897573][  T759]   u64s 5 type deleted 0:48:0 len 0 ver 0, , continuing
[  130.913187][ T7592] syz.3.689 (7592) used greatest stack depth: 16568 bytes left
[  130.943134][ T6904] bcachefs (loop3): shutting down
[  130.945317][ T6904] bcachefs (loop3): going read-only
[  130.969404][ T6904] bcachefs (loop3): finished waiting for writes to stop
[  130.982436][ T6904] bcachefs (loop3): flushing journal and stopping allocators, journal seq 11
[  131.005730][   T32] bcachefs (loop3): bucket incorrectly unset in freespace btree
[  131.005741][   T32]   u64s 5 type deleted 0:53:0 len 0 ver 0, , continuing
[  131.153107][ T7622] loop2: detected capacity change from 0 to 40427
[  131.160190][ T7622] F2FS-fs (loop2): invalid crc value
[  131.242024][ T7622] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  131.255448][ T7622] F2FS-fs (loop2): Start checkpoint disabled!
[  131.279458][ T7622] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  131.335450][ T6904] bcachefs (loop3): flushing journal and stopping allocators complete, journal seq 11
[  131.351790][ T6904] bcachefs (loop3): unclean shutdown complete, journal seq 12
[  131.364768][ T6904] bcachefs (loop3): done going read-only, filesystem not clean
[  131.445879][ T6904] bcachefs (loop3): shutdown complete
[  131.835493][   T33] audit: type=1326 audit(1757604531.648:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.697" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb78eba9 code=0x7fc00000
[  131.856079][   T33] audit: type=1326 audit(1757604531.658:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.697" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd8fb78eba9 code=0x7fc00000
[  131.875074][   T33] audit: type=1326 audit(1757604531.658:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.697" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb78eba9 code=0x7fc00000
[  131.883608][   T33] audit: type=1326 audit(1757604531.658:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.697" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb78eba9 code=0x7fc00000
[  131.892252][   T33] audit: type=1326 audit(1757604531.658:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.697" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb78eba9 code=0x7fc00000
[  131.900009][   T33] audit: type=1326 audit(1757604531.658:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.697" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb78eba9 code=0x7fc00000
[  131.907647][   T33] audit: type=1326 audit(1757604531.658:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.697" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb78eba9 code=0x7fc00000
[  131.916439][   T33] audit: type=1326 audit(1757604531.658:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7623 comm="syz.0.697" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd8fb78eba9 code=0x7fc00000
[  132.058931][ T7636] netlink: 24 bytes leftover after parsing attributes in process `syz.2.699'.
[  132.349258][ T7653] netlink: 68 bytes leftover after parsing attributes in process `syz.2.709'.
[  132.776437][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.778672][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.927426][ T7661] loop2: detected capacity change from 0 to 32768
[  132.940897][ T7661] (syz.2.712,7661,0):ocfs2_sb_probe:759 ERROR: incompatible version: 2.33686018
[  132.945311][ T7661] (syz.2.712,7661,0):ocfs2_sb_probe:772 ERROR: This is an ocfs v1 filesystem which must be upgraded before mounting with ocfs v2
[  132.950727][ T7661] (syz.2.712,7661,0):ocfs2_fill_super:989 ERROR: superblock probe failed!
[  132.954729][ T7661] (syz.2.712,7661,0):ocfs2_fill_super:1177 ERROR: status = -22
[  133.378780][ T7665] loop2: detected capacity change from 0 to 32768
[  133.390942][ T7665] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.713 (7665)
[  133.502255][ T7671] loop0: detected capacity change from 0 to 32768
[  133.520971][ T7671] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.715 (7671)
[  133.531561][ T7665] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  133.534600][ T7671] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  133.534669][ T7671] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  133.544679][ T7665] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  133.579172][ T5972] usb 3-1: USB disconnect, device number 14
[  133.633517][ T6009] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  133.654415][ T7671] BTRFS info (device loop0): enabling ssd optimizations
[  133.657180][ T7671] BTRFS info (device loop0): enabling free space tree
[  133.661962][ T7665] BTRFS info (device loop2): rebuilding free space tree
[  133.686910][ T7665] BTRFS info (device loop2): allowing degraded mounts
[  133.689493][ T7665] BTRFS info (device loop2): enabling ssd optimizations
[  133.692043][ T7665] BTRFS info (device loop2): enabling free space tree
[  133.694909][ T7665] BTRFS info (device loop2): force clearing of disk cache
[  133.697535][ T7665] BTRFS info (device loop2): use zstd compression, level 3
[  133.699960][ T7665] BTRFS info (device loop2): max_inline set to 0
[  133.764686][ T7665] BTRFS info (device loop2 state M): max_inline set to 0
[  133.798832][ T5855] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  133.913060][ T6009] usb 4-1: Using ep0 maxpacket: 16
[  133.926307][ T6009] usb 4-1: config 0 has an invalid interface number: 195 but max is 0
[  133.932269][ T6009] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  134.045858][ T6009] usb 4-1: config 0 has no interface number 0
[  134.281027][ T6009] usb 4-1: New USB device found, idVendor=0421, idProduct=0418, bcdDevice=95.ff
[  134.284842][ T6009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.288017][ T6009] usb 4-1: Product: syz
[  134.289744][ T6009] usb 4-1: Manufacturer: syz
[  134.298723][ T6009] usb 4-1: SerialNumber: syz
[  134.342355][ T6009] usb 4-1: config 0 descriptor??
[  134.348803][ T6009] rndis_host 4-1:0.195: More than one union descriptor, skipping ...
[  134.351559][ T6009] usb 4-1: bad CDC descriptors
[  134.353723][ T6009] cdc_acm 4-1:0.195: More than one union descriptor, skipping ...
[  134.364289][ T5858] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  134.564511][ T6009] usb 4-1: USB disconnect, device number 5
[  134.654134][ T7715] loop2: detected capacity change from 0 to 4096
[  134.663442][ T7715] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  134.676921][ T7715] ntfs3(loop2): Failed to initialize MFT zone (-22).
[  135.111995][ T7734] loop3: detected capacity change from 0 to 8
[  135.132625][ T7734] SQUASHFS error: Unable to read directory block [629:26]
[  135.247471][ T7740] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  135.346485][ T7737] loop3: detected capacity change from 0 to 32768
[  135.349657][ T7737] btrfs: Deprecated parameter 'usebackuproot'
[  135.352219][ T7737] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  135.358302][ T7737] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.728 (7737)
[  135.375815][ T7737] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  135.379659][ T7737] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  135.390226][ T7746] trusted_key: encrypted_key: insufficient parameters specified
[  135.431848][ T7762] loop2: detected capacity change from 0 to 16
[  135.437712][ T7762] MTD: Attempt to mount non-MTD device "/dev/loop2"
[  135.468083][ T7737] BTRFS info (device loop3): rebuilding free space tree
[  135.476692][ T7737] BTRFS info (device loop3): allowing degraded mounts
[  135.478721][ T7737] BTRFS info (device loop3): enabling ssd optimizations
[  135.481408][ T7737] BTRFS info (device loop3): enabling free space tree
[  135.484129][ T7737] BTRFS info (device loop3): force clearing of disk cache
[  135.486955][ T7737] BTRFS info (device loop3): trying to use backup root at mount time
[  135.490181][ T7737] BTRFS info (device loop3): use zlib compression, level 3
[  135.579727][ T6904] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  135.753703][ T6733] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  135.792977][  T972] usb 3-1: new full-speed USB device number 15 using dummy_hcd
[  135.908738][ T6733] usb 1-1: config index 0 descriptor too short (expected 45, got 36)
[  135.912203][ T6733] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  135.922605][ T6733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  135.923522][ T7781] netlink: 4 bytes leftover after parsing attributes in process `syz.3.740'.
[  135.939559][ T6733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  135.948199][ T6733] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  135.954621][  T972] usb 3-1: unable to get BOS descriptor or descriptor too short
[  135.958537][  T972] usb 3-1: not running at top speed; connect to a high speed hub
[  135.961797][ T6733] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  135.967596][  T972] usb 3-1: config 7 has an invalid interface number: 6 but max is 0
[  135.971373][ T6733] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  135.976539][  T972] usb 3-1: config 7 has no interface number 0
[  135.979863][  T972] usb 3-1: No eUSB2 isoc ep 15 companion for config 7 interface 6 altsetting 254
[  135.986251][  T972] usb 3-1: config 7 interface 6 has no altsetting 0
[  135.992176][ T6733] usb 1-1: config 0 descriptor??
[  136.004673][ T7766] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  136.011455][  T972] usb 3-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=30.9e
[  136.015182][  T972] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.018098][  T972] usb 3-1: Product: syz
[  136.019622][  T972] usb 3-1: Manufacturer: syz
[  136.027370][  T972] usb 3-1: SerialNumber: syz
[  136.122442][ T7789] netlink: 8 bytes leftover after parsing attributes in process `syz.3.744'.
[  136.133453][ T7789] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  136.243127][ T7792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'.
[  136.246664][ T7792] netlink: 8 bytes leftover after parsing attributes in process `syz.3.745'.
[  136.250306][  T972] option 3-1:7.6: GSM modem (1-port) converter detected
[  136.266014][  T972] usb 3-1: USB disconnect, device number 15
[  136.271277][  T972] option 3-1:7.6: device disconnected
[  136.429419][ T6733] plantronics 0003:047F:FFFF.0005: reserved main item tag 0xd
[  136.443382][ T6733] plantronics 0003:047F:FFFF.0005: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  136.697793][ T6733] usb 1-1: USB disconnect, device number 13
[  137.058851][ T7806] loop3: detected capacity change from 0 to 1024
[  137.257904][   T33] kauditd_printk_skb: 61 callbacks suppressed
[  137.257918][   T33] audit: type=1326 audit(1757604537.068:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7811 comm="syz.0.755" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8fb78eba9 code=0x0
[  137.273712][ T7804] loop2: detected capacity change from 0 to 32768
[  137.692747][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.751'.
[  137.894460][ T6733] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  138.069458][ T6733] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  138.072948][ T6733] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  138.076620][ T6733] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  138.079864][ T6733] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  138.091949][ T6733] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  138.095632][ T6733] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  138.098737][ T6733] usb 4-1: Product: syz
[  138.100761][ T6733] usb 4-1: Manufacturer: syz
[  138.102633][ T6733] usb 4-1: SerialNumber: syz
[  138.215438][ T7827] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.761' sets config #-1
[  138.388776][ T6733] usb 4-1: 0:2 : does not exist
[  138.449962][ T6733] usb 4-1: USB disconnect, device number 6
[  138.462133][ T7831] mmap: syz.0.763 (7831) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  138.575883][ T6481] udevd[6481]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  139.195464][    T9] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  139.353153][    T9] usb 4-1: Using ep0 maxpacket: 16
[  139.364279][    T9] usb 4-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00
[  139.380182][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  139.406255][    T9] usb 4-1: config 0 descriptor??
[  139.419316][    T9] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  139.650020][    T9] usb 4-1: Detected FT232B
[  139.853310][    T9] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  139.858868][    T9] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  139.872464][    T9] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  139.920987][    T9] usb 4-1: USB disconnect, device number 7
[  139.952572][ T7855] binder: BINDER_SET_CONTEXT_MGR already set
[  139.973979][ T7855] binder: 7853:7855 ioctl 4018620d 2000000002c0 returned -16
[  139.983787][    T9] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  140.032305][    T9] ftdi_sio 4-1:0.0: device disconnected
[  140.714591][ T7857] loop3: detected capacity change from 0 to 8
[  140.772244][ T7857] SQUASHFS error: Failed to read block 0x1ec: -5
[  140.785630][ T7857] SQUASHFS error: Unable to read metadata cache entry [1ea]
[  141.052159][ T7872] loop0: detected capacity change from 0 to 1024
[  141.154867][ T5858] hfsplus: bad catalog entry type
[  141.158559][ T5858] hfsplus: bad catalog entry type
[  141.192630][ T1089] hfsplus: b-tree write err: -5, ino 4
[  141.292996][ T6733] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  141.447381][ T5885] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.457103][ T6733] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  141.460819][ T6733] usb 4-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  141.465331][ T7877] loop2: detected capacity change from 0 to 40427
[  141.472697][ T6733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  141.482143][ T6733] usb 4-1: config 0 descriptor??
[  141.487616][ T7877] F2FS-fs (loop2): invalid crc value
[  141.565212][ T7877] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  141.569040][ T7877] F2FS-fs (loop2): Start checkpoint disabled!
[  141.572632][ T7877] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  141.613677][ T7877] F2FS-fs (loop2): Can't enable fs-verity on inode 3: the verity feature is not enabled on this filesystem
[  141.646849][ T5885] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.697382][ T5972] usb 4-1: USB disconnect, device number 8
[  141.770654][ T5885] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.901924][ T5885] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  141.963759][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  141.969270][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  141.973999][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  141.978633][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  141.982160][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  142.101719][ T7886] loop2: detected capacity change from 0 to 128
[  142.111429][ T7886] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  142.116979][ T7886] hpfs: filesystem error: improperly stopped
[  142.124768][ T7886] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  142.129509][ T7886] hpfs: You really don't want any checks? You are crazy...
[  142.144751][ T7886] hpfs: hpfs_map_sector(): read error
[  142.146778][ T7886] hpfs: code page support is disabled
[  142.149734][ T7886] hpfs: hpfs_map_4sectors(): unaligned read
[  142.152212][ T7886] hpfs: hpfs_map_4sectors(): unaligned read
[  142.190812][ T7886] hpfs: filesystem error: unable to find root dir
[  142.216666][ T5885] bridge_slave_1: left allmulticast mode
[  142.218718][ T5885] bridge_slave_1: left promiscuous mode
[  142.222178][ T5885] bridge0: port 2(bridge_slave_1) entered disabled state
[  142.237127][ T5885] bridge_slave_0: left allmulticast mode
[  142.239293][ T5885] bridge_slave_0: left promiscuous mode
[  142.249630][ T5885] bridge0: port 1(bridge_slave_0) entered disabled state
[  142.326606][ T7891] program syz.3.790 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  142.859235][ T5885] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  142.865831][ T5885] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  142.869973][ T5885] bond0 (unregistering): Released all slaves
[  143.053496][ T5885] tipc: Left network mode
[  143.102575][ T7881] chnl_net:caif_netlink_parms(): no params data found
[  143.359646][ T7900] loop2: detected capacity change from 0 to 131072
[  143.365351][ T7900] F2FS-fs (loop2): Test dummy encryption mode enabled
[  143.370257][ T7900] F2FS-fs (loop2): invalid crc value
[  143.434542][ T7900] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  143.440477][ T7900] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  143.504404][ T7881] bridge0: port 1(bridge_slave_0) entered blocking state
[  143.507217][ T7881] bridge0: port 1(bridge_slave_0) entered disabled state
[  143.510113][ T7881] bridge_slave_0: entered allmulticast mode
[  143.515643][ T7881] bridge_slave_0: entered promiscuous mode
[  143.608570][ T7881] bridge0: port 2(bridge_slave_1) entered blocking state
[  143.611498][ T7881] bridge0: port 2(bridge_slave_1) entered disabled state
[  143.634329][ T7881] bridge_slave_1: entered allmulticast mode
[  143.638314][ T7881] bridge_slave_1: entered promiscuous mode
[  143.670234][ T7900] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  143.740300][ T5885] hsr_slave_0: left promiscuous mode
[  143.743317][ T5885] hsr_slave_1: left promiscuous mode
[  143.745984][ T5885] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  143.748889][ T5885] batman_adv: batadv0: Removing interface: batadv_slave_0
[  143.766972][ T5885] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  143.769876][ T5885] batman_adv: batadv0: Removing interface: batadv_slave_1
[  143.836254][ T7921] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  143.862728][ T5885] veth1_macvtap: left promiscuous mode
[  143.868553][ T5885] veth0_macvtap: left promiscuous mode
[  143.871927][ T5885] veth1_vlan: left promiscuous mode
[  143.882234][ T5885] veth0_vlan: left promiscuous mode
[  143.974515][ T7915] loop3: detected capacity change from 0 to 32768
[  144.009666][ T7915] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  144.050487][ T7915] XFS (loop3): Ending clean mount
[  144.054566][ T5851] Bluetooth: hci2: command tx timeout
[  144.070138][ T7915] XFS (loop3): Quotacheck needed: Please wait.
[  144.126848][ T7915] XFS (loop3): Quotacheck: Done.
[  144.251116][ T6904] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  144.646876][ T7945] loop2: detected capacity change from 0 to 2048
[  144.672506][ T7946] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  144.726273][ T7945] NILFS error (device loop2): nilfs_bmap_lookup_at_level: broken bmap (inode number=6)
[  144.733893][ T7945] Remounting filesystem read-only
[  144.755125][ T5855] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  144.939874][ T7956] tmpfs: Bad value for 'mpol'
[  145.031881][ T7954] serio: Serial port ptm0
[  145.108054][ T5885] team0 (unregistering): Port device team_slave_1 removed
[  145.131108][ T7963] loop3: detected capacity change from 0 to 4096
[  145.152364][ T7964] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  145.215937][ T5885] team0 (unregistering): Port device team_slave_0 removed
[  145.456232][ T7975] netlink: 40 bytes leftover after parsing attributes in process `syz.3.811'.
[  145.652120][ T7981] loop3: detected capacity change from 0 to 4096
[  145.659249][ T7981] ntfs3(loop3): ino=3, Correct links count -> 2.
[  145.679243][ T7981] ntfs3(loop3): ino=1a, mi_enum_attr
[  145.681367][ T7981] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  145.684377][    T9] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  145.840071][    T9] usb 3-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e
[  145.843717][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.864617][    T9] usb 3-1: config 0 descriptor??
[  146.076021][ T7881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  146.084400][ T5899] usb 3-1: USB disconnect, device number 16
[  146.109859][ T7881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  146.134190][ T5851] Bluetooth: hci2: command tx timeout
[  146.184100][ T7881] team0: Port device team_slave_0 added
[  146.189351][ T7881] team0: Port device team_slave_1 added
[  146.236539][ T7881] batman_adv: batadv0: Adding interface: batadv_slave_0
[  146.239292][ T7881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.262084][ T7881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  146.270248][ T7881] batman_adv: batadv0: Adding interface: batadv_slave_1
[  146.283110][ T7881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  146.305508][ T7881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  146.440692][ T7881] hsr_slave_0: entered promiscuous mode
[  146.444680][ T7881] hsr_slave_1: entered promiscuous mode
[  146.447523][ T7881] debugfs: 'hsr0' already exists in 'hsr'
[  146.449910][ T7881] Cannot create hsr debugfs directory
[  146.737802][ T7881] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  146.767286][ T7881] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  146.773426][    T9] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  146.799792][ T7881] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  146.808330][ T7881] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  146.912113][ T7881] 8021q: adding VLAN 0 to HW filter on device bond0
[  146.932072][ T7881] 8021q: adding VLAN 0 to HW filter on device team0
[  146.936612][    T9] usb 4-1: Using ep0 maxpacket: 16
[  146.949659][    T9] usb 4-1: config 254 has an invalid descriptor of length 0, skipping remainder of the config
[  146.965934][    T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=2b.f1
[  146.973002][    T9] usb 4-1: New USB device strings: Mfr=1, Product=251, SerialNumber=3
[  146.976133][    T9] usb 4-1: Product: syz
[  146.977946][    T9] usb 4-1: Manufacturer: syz
[  146.979867][    T9] usb 4-1: SerialNumber: syz
[  147.000052][ T1203] bridge0: port 1(bridge_slave_0) entered blocking state
[  147.003011][ T1203] bridge0: port 1(bridge_slave_0) entered forwarding state
[  147.011439][    T9] usbtest 4-1:254.0: couldn't get endpoints, -22
[  147.015414][ T1203] bridge0: port 2(bridge_slave_1) entered blocking state
[  147.018379][ T1203] bridge0: port 2(bridge_slave_1) entered forwarding state
[  147.021485][    T9] usbtest 4-1:254.0: probe with driver usbtest failed with error -22
[  147.212327][ T7881] 8021q: adding VLAN 0 to HW filter on device batadv0
[  147.213556][   T10] usb 4-1: USB disconnect, device number 9
[  147.313039][    T9] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  147.369817][ T7881] veth0_vlan: entered promiscuous mode
[  147.378928][ T7881] veth1_vlan: entered promiscuous mode
[  147.400331][ T7881] veth0_macvtap: entered promiscuous mode
[  147.405543][ T7881] veth1_macvtap: entered promiscuous mode
[  147.421247][ T7881] batman_adv: batadv0: Interface activated: batadv_slave_0
[  147.430215][ T7881] batman_adv: batadv0: Interface activated: batadv_slave_1
[  147.438012][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  147.440749][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  147.445037][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  147.448924][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  147.473518][    T9] usb 3-1: Using ep0 maxpacket: 8
[  147.485094][    T9] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  147.487756][    T9] usb 3-1: config 179 has no interface number 0
[  147.490280][    T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  147.513008][    T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  147.517330][    T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  147.524367][ T1203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.531820][ T1203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.531977][    T9] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  147.544555][    T9] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  147.550070][    T9] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  147.569338][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  147.577074][ T1203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  147.580152][ T1203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  147.581625][ T8022] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  147.859777][    T9] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input7
[  148.020476][ T8022] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  148.029249][ T8022] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  148.166101][ T8040] loop4: detected capacity change from 0 to 40427
[  148.174852][ T8040] F2FS-fs (loop4): Insane cp_payload (553648128 >= 504)
[  148.177434][ T8040] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  148.183778][ T8040] F2FS-fs (loop4): build fault injection type: 0x6b5d
[  148.188495][ T8040] F2FS-fs (loop4): invalid crc value
[  148.213440][ T5236] Bluetooth: hci2: command tx timeout
[  148.291410][ T8040] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  148.305090][ T8040] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  148.308333][ T8040] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  148.351222][ T7881] bio_check_eod: 2 callbacks suppressed
[  148.351247][ T7881] syz-executor: attempt to access beyond end of device
[  148.351247][ T7881] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  148.383948][ T7881] CPU: 0 UID: 0 PID: 7881 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  148.383969][ T7881] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  148.383976][ T7881] Call Trace:
[  148.383981][ T7881]  <TASK>
[  148.383987][ T7881]  dump_stack_lvl+0x189/0x250
[  148.384009][ T7881]  ? __pfx_dump_stack_lvl+0x10/0x10
[  148.384038][ T7881]  ? __pfx_queue_work_on+0x10/0x10
[  148.384052][ T7881]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  148.384070][ T7881]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  148.384094][ T7881]  f2fs_handle_critical_error+0x37c/0x540
[  148.384115][ T7881]  f2fs_write_end_io+0x886/0xb60
[  148.384139][ T7881]  __submit_merged_bio+0x27a/0x6a0
[  148.384160][ T7881]  __submit_merged_write_cond+0x255/0x530
[  148.384181][ T7881]  f2fs_write_data_pages+0x261d/0x3000
[  148.384193][ T7881]  ? validate_chain+0x897/0x2140
[  148.384224][ T7881]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  148.384261][ T7881]  ? __mod_zone_page_state+0xd7/0x140
[  148.384283][ T7881]  ? folios_put_refs+0x560/0x640
[  148.384303][ T7881]  ? __lock_acquire+0xab9/0xd20
[  148.384324][ T7881]  ? do_raw_spin_lock+0x121/0x290
[  148.384345][ T7881]  ? do_raw_spin_unlock+0x4d/0x240
[  148.384359][ T7881]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  148.384371][ T7881]  do_writepages+0x32e/0x550
[  148.384394][ T7881]  ? do_raw_spin_unlock+0x4d/0x240
[  148.384410][ T7881]  filemap_fdatawrite+0x199/0x240
[  148.384428][ T7881]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  148.384472][ T7881]  ? do_raw_spin_unlock+0x4d/0x240
[  148.384489][ T7881]  f2fs_sync_dirty_inodes+0x31f/0x830
[  148.384510][ T7881]  f2fs_write_checkpoint+0x95a/0x1df0
[  148.384538][ T7881]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  148.384578][ T7881]  ? kill_f2fs_super+0x298/0x6c0
[  148.384594][ T7881]  kill_f2fs_super+0x2c3/0x6c0
[  148.384610][ T7881]  ? __pfx_kill_f2fs_super+0x10/0x10
[  148.384621][ T7881]  ? radix_tree_delete_item+0x2b6/0x400
[  148.384651][ T7881]  ? shrinker_free+0x2ce/0x3e0
[  148.384665][ T7881]  deactivate_locked_super+0xbc/0x130
[  148.384710][ T7881]  cleanup_mnt+0x425/0x4c0
[  148.384725][ T7881]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.384737][ T7881]  task_work_run+0x1d4/0x260
[  148.384755][ T7881]  ? __pfx_task_work_run+0x10/0x10
[  148.384769][ T7881]  ? __x64_sys_umount+0x122/0x160
[  148.384787][ T7881]  ? exit_to_user_mode_loop+0x40/0x110
[  148.384806][ T7881]  exit_to_user_mode_loop+0xec/0x110
[  148.384824][ T7881]  do_syscall_64+0x2bd/0x3b0
[  148.384839][ T7881]  ? lockdep_hardirqs_on+0x9c/0x150
[  148.384851][ T7881]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.384864][ T7881]  ? exc_page_fault+0x9f/0xf0
[  148.384879][ T7881]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  148.384911][ T7881] RIP: 0033:0x7f6ca4b8fed7
[  148.384927][ T7881] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  148.384938][ T7881] RSP: 002b:00007fff2d892928 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  148.384950][ T7881] RAX: 0000000000000000 RBX: 00007f6ca4c11c05 RCX: 00007f6ca4b8fed7
[  148.384958][ T7881] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff2d8929e0
[  148.384965][ T7881] RBP: 00007fff2d8929e0 R08: 0000000000000000 R09: 0000000000000000
[  148.384971][ T7881] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff2d893a70
[  148.384979][ T7881] R13: 00007f6ca4c11c05 R14: 00000000000242fb R15: 00007fff2d893ab0
[  148.384997][ T7881]  </TASK>
[  148.385173][ T7881] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  148.740604][ T8054] loop3: detected capacity change from 0 to 40427
[  148.756466][ T8054] F2FS-fs (loop3): build fault injection rate: 14
[  148.759049][ T8054] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  148.780156][ T8054] F2FS-fs (loop3): invalid crc value
[  148.786901][    T9] usb 3-1: USB disconnect, device number 17
[  148.789534][    C0] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  148.789572][    C0] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  148.807358][    C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  148.855590][    C1] F2FS-fs (loop3): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  148.992035][ T8054] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  148.992127][ T8068] IPv6: sit1: Disabled Multicast RS
[  148.996403][ T8054] F2FS-fs (loop3): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  149.005176][ T8054] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  149.220226][ T8078] binder: 8077:8078 ioctl c0306201 200000000080 returned -14
[  149.659775][ T8082] loop4: detected capacity change from 0 to 32768
[  149.672331][ T8082] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.841 (8082)
[  149.717267][ T8082] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  149.721205][ T8082] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  149.733760][ T6733] usb 4-1: new full-speed USB device number 10 using dummy_hcd
[  149.800831][ T8082] BTRFS info (device loop4): rebuilding free space tree
[  149.804021][   T33] audit: type=1326 audit(1757604549.608:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.2.845" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc58eba9 code=0x7ffc0000
[  149.818490][   T33] audit: type=1326 audit(1757604549.618:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.2.845" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc58eba9 code=0x7ffc0000
[  149.826956][   T33] audit: type=1326 audit(1757604549.628:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.2.845" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdfc58d510 code=0x7ffc0000
[  149.839597][ T8082] BTRFS info (device loop4): enabling ssd optimizations
[  149.842261][ T8082] BTRFS info (device loop4): turning on sync discard
[  149.843063][   T33] audit: type=1326 audit(1757604549.628:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.2.845" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc58eba9 code=0x7ffc0000
[  149.855126][ T8082] BTRFS info (device loop4): enabling free space tree
[  149.857806][ T8082] BTRFS info (device loop4): force clearing of disk cache
[  149.860568][ T8082] BTRFS info (device loop4): doing ref verification
[  149.863297][   T33] audit: type=1326 audit(1757604549.628:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.2.845" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcdfc58eba9 code=0x7ffc0000
[  149.863334][   T33] audit: type=1326 audit(1757604549.628:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8091 comm="syz.2.845" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc58eba9 code=0x7ffc0000
[  149.895099][ T8082] BTRFS info (device loop4): max_inline set to 0
[  149.925915][ T6733] usb 4-1: config 8 has an invalid interface number: 177 but max is 0
[  149.929517][ T6733] usb 4-1: config 8 has no interface number 0
[  149.931925][ T6733] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  149.942875][ T6733] usb 4-1: config 8 interface 177 altsetting 9 endpoint 0x5 has invalid wMaxPacketSize 0
[  149.949042][ T6733] usb 4-1: config 8 interface 177 has no altsetting 0
[  149.951739][ T6733] usb 4-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  149.971462][ T6733] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.991860][ T8086] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  150.111579][ T7881] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  150.228686][ T6733] usb 4-1: string descriptor 0 read error: -71
[  150.280427][ T6733] ir_toy 4-1:8.177: required endpoints not found
[  150.297301][ T5236] Bluetooth: hci2: command 0x0419 tx timeout
[  150.321067][ T6733] usb 4-1: USB disconnect, device number 10
[  150.545431][ T8126] loop2: detected capacity change from 0 to 2048
[  150.564594][ T8126] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  150.769964][ T8139] loop3: detected capacity change from 0 to 512
[  150.773199][ T8139] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode
[  150.813085][ T8139] EXT4-fs (loop3): 1 truncate cleaned up
[  150.816196][ T8139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.866891][ T6904] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.435339][ T8153] overlayfs: unescaped trailing colons in lowerdir mount option.
[  152.150434][ T8175] loop3: detected capacity change from 0 to 128
[  152.383254][ T5851] Bluetooth: hci2: command 0x0419 tx timeout
[  153.101735][ T8213] Driver unsupported XDP return value 0 on prog  (id 77) dev N/A, expect packet loss!
[  153.128654][ T8216] openvswitch: netlink: IP tunnel dst address not specified
[  153.157940][ T8218] loop3: detected capacity change from 0 to 512
[  153.160631][ T8218] EXT4-fs: Ignoring removed nomblk_io_submit option
[  153.186637][ T8218] EXT4-fs error (device loop3): ext4_expand_extra_isize_ea:2798: inode #11: comm syz.3.893: corrupted xattr block 95: invalid header
[  153.197903][ T8218] EXT4-fs (loop3): Remounting filesystem read-only
[  153.200576][ T8218] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  153.206175][ T8218] EXT4-fs (loop3): 1 orphan inode deleted
[  153.209931][ T8218] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  153.250685][ T6904] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.330708][ T8227] loop4: detected capacity change from 0 to 8
[  153.345813][ T8227] SQUASHFS error: lzo decompression failed, data probably corrupt
[  153.348878][ T8227] SQUASHFS error: Failed to read block 0x91: -5
[  153.351413][ T8227] SQUASHFS error: Unable to read metadata cache entry [8f]
[  153.358009][ T8227] SQUASHFS error: Unable to read inode 0x11f
[  153.507874][   T46] IPVS: starting estimator thread 0...
[  153.508534][ T8231] IPVS: fo: UDP 224.0.0.2:0 - no destination available
[  153.603009][ T8235] IPVS: using max 38 ests per chain, 91200 per kthread
[  153.825673][ T8243] loop4: detected capacity change from 0 to 164
[  153.849735][ T8243] ISOFS: primary root directory is empty. Disabling Rock Ridge and switching to Joliet.
[  155.197465][ T5850] kernel read not supported for file /audio1 (pid: 5850 comm: kworker/0:3)
[  155.222116][ T8263] loop3: detected capacity change from 0 to 40427
[  155.228296][ T8263] F2FS-fs (loop3): build fault injection type: 0x3bfe8c
[  155.238625][ T8263] F2FS-fs (loop3): invalid crc value
[  155.288611][ T8263] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  155.302711][ T8263] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  155.358564][ T6904] syz-executor: attempt to access beyond end of device
[  155.358564][ T6904] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  155.368512][ T6904] CPU: 1 UID: 0 PID: 6904 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  155.368536][ T6904] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  155.368544][ T6904] Call Trace:
[  155.368551][ T6904]  <TASK>
[  155.368557][ T6904]  dump_stack_lvl+0x189/0x250
[  155.368584][ T6904]  ? __pfx_dump_stack_lvl+0x10/0x10
[  155.368600][ T6904]  ? __pfx_queue_work_on+0x10/0x10
[  155.368616][ T6904]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  155.368639][ T6904]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  155.368668][ T6904]  f2fs_handle_critical_error+0x37c/0x540
[  155.368696][ T6904]  f2fs_write_end_io+0x886/0xb60
[  155.368724][ T6904]  __submit_merged_bio+0x27a/0x6a0
[  155.368750][ T6904]  __submit_merged_write_cond+0x255/0x530
[  155.368776][ T6904]  f2fs_write_data_pages+0x261d/0x3000
[  155.368835][ T6904]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  155.368882][ T6904]  ? __mod_zone_page_state+0xd7/0x140
[  155.368909][ T6904]  ? folios_put_refs+0x560/0x640
[  155.368934][ T6904]  ? __lock_acquire+0xab9/0xd20
[  155.368963][ T6904]  ? do_raw_spin_lock+0x121/0x290
[  155.368989][ T6904]  ? do_raw_spin_unlock+0x4d/0x240
[  155.369033][ T6904]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  155.369048][ T6904]  do_writepages+0x32e/0x550
[  155.369078][ T6904]  ? do_raw_spin_unlock+0x4d/0x240
[  155.369098][ T6904]  filemap_fdatawrite+0x199/0x240
[  155.369118][ T6904]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  155.369180][ T6904]  ? do_raw_spin_unlock+0x4d/0x240
[  155.369201][ T6904]  f2fs_sync_dirty_inodes+0x31f/0x830
[  155.369229][ T6904]  f2fs_write_checkpoint+0x95a/0x1df0
[  155.369263][ T6904]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  155.369314][ T6904]  ? kill_f2fs_super+0x298/0x6c0
[  155.369335][ T6904]  kill_f2fs_super+0x2c3/0x6c0
[  155.369356][ T6904]  ? __pfx_kill_f2fs_super+0x10/0x10
[  155.369369][ T6904]  ? radix_tree_delete_item+0x2b6/0x400
[  155.369396][ T6904]  ? shrinker_free+0x2ce/0x3e0
[  155.369415][ T6904]  deactivate_locked_super+0xbc/0x130
[  155.369434][ T6904]  cleanup_mnt+0x425/0x4c0
[  155.369451][ T6904]  ? lockdep_hardirqs_on+0x9c/0x150
[  155.369468][ T6904]  task_work_run+0x1d4/0x260
[  155.369490][ T6904]  ? __pfx_task_work_run+0x10/0x10
[  155.369506][ T6904]  ? __x64_sys_umount+0x122/0x160
[  155.369530][ T6904]  ? exit_to_user_mode_loop+0x40/0x110
[  155.369553][ T6904]  exit_to_user_mode_loop+0xec/0x110
[  155.369574][ T6904]  do_syscall_64+0x2bd/0x3b0
[  155.369591][ T6904]  ? lockdep_hardirqs_on+0x9c/0x150
[  155.369604][ T6904]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.369618][ T6904]  ? exc_page_fault+0x9f/0xf0
[  155.369633][ T6904]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  155.369647][ T6904] RIP: 0033:0x7fa34558fed7
[  155.369662][ T6904] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  155.369674][ T6904] RSP: 002b:00007ffe7e7043f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  155.369689][ T6904] RAX: 0000000000000000 RBX: 00007fa345611c05 RCX: 00007fa34558fed7
[  155.369700][ T6904] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe7e7044b0
[  155.369708][ T6904] RBP: 00007ffe7e7044b0 R08: 0000000000000000 R09: 0000000000000000
[  155.369718][ T6904] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe7e705540
[  155.369727][ T6904] R13: 00007fa345611c05 R14: 0000000000025e5a R15: 00007ffe7e705580
[  155.369750][ T6904]  </TASK>
[  155.370075][ T6904] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  156.129438][ T8315] loop3: detected capacity change from 0 to 512
[  156.167352][ T8315] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.171758][ T8315] ext4 filesystem being mounted at /152/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  156.366791][ T6904] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  158.200349][ T8391] loop4: detected capacity change from 0 to 4096
[  158.381029][  T759] ntfs3(loop4): ino=5, mi_enum_attr
[  158.447675][ T8406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.967'.
[  158.563286][ T8413] [U] 
[  158.605739][ T8416] [U] 
[  158.607135][ T8416] [U] 
[  158.608247][ T8416] [U] 
[  158.609334][ T8416] [U] 
[  158.617152][ T8416] [U] 
[  158.618251][ T8416] [U] 
[  158.619287][ T8416] [U] 
[  158.620264][ T8416] [U] 
[  158.621309][ T8416] [U] 
[  158.622384][ T8416] [U] 
[  158.623440][ T8416] [U] 
[  158.626730][ T8415] [U] 
[  158.675711][ T8420] netlink: 'syz.4.974': attribute type 1 has an invalid length.
[  158.683040][ T8420] netlink: 224 bytes leftover after parsing attributes in process `syz.4.974'.
[  158.906285][   T33] audit: type=1326 audit(1757604558.718:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8435 comm="syz.2.980" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc58eba9 code=0x0
[  158.963210][ T8438] loop4: detected capacity change from 0 to 128
[  158.977681][ T8438] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  158.997058][ T8438] ext4 filesystem being mounted at /39/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  159.047678][ T7881] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  159.182657][ T8451] loop4: detected capacity change from 0 to 256
[  159.190410][ T8451] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  159.198337][ T8451] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[  159.226918][ T8451] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  159.237712][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.987'.
[  159.306677][ T8458] netlink: 8 bytes leftover after parsing attributes in process `syz.2.990'.
[  159.321238][ T8459] loop4: detected capacity change from 0 to 2048
[  159.642741][ T8484] loop4: detected capacity change from 0 to 2048
[  159.668840][ T8484] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  159.700281][ T7881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  160.784692][ T8504] loop4: detected capacity change from 0 to 32768
[  160.818064][ T8504] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  160.838295][ T8504] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  160.901444][ T7881] ocfs2: Unmounting device (7,4) on (node local)
[  161.204048][ T8521] loop4: detected capacity change from 0 to 32768
[  161.215632][ T8521] (syz.4.1009,8521,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  161.225258][ T8521] (syz.4.1009,8521,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  161.242185][ T8521] JBD2: Ignoring recovery information on journal
[  161.267731][ T8521] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  161.315856][ T8521] (syz.4.1009,8521,1):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[  161.341281][ T8523] loop3: detected capacity change from 0 to 32768
[  161.366584][ T8523] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  161.381725][ T8523] XFS (loop3): Internal error !uuid_equal(&mp->m_sb.sb_uuid, &head->h_fs_uuid) at line 254 of file fs/xfs/xfs_log_recover.c.  Caller xlog_header_check_mount+0x93/0xe0
[  161.387285][ T7881] ocfs2: Unmounting device (7,4) on (node local)
[  161.389610][ T8523] CPU: 0 UID: 0 PID: 8523 Comm: syz.3.1012 Not tainted syzkaller #0 PREEMPT(full) 
[  161.389631][ T8523] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  161.389642][ T8523] Call Trace:
[  161.389649][ T8523]  <TASK>
[  161.389656][ T8523]  dump_stack_lvl+0x189/0x250
[  161.389683][ T8523]  ? __pfx_dump_stack_lvl+0x10/0x10
[  161.389707][ T8523]  ? __phys_addr+0xd3/0x180
[  161.389727][ T8523]  ? __kasan_kmalloc_large+0x85/0xa0
[  161.389749][ T8523]  ? is_vmalloc_addr+0x52/0xb0
[  161.389771][ T8523]  xfs_corruption_error+0x122/0x170
[  161.389791][ T8523]  ? xlog_header_check_mount+0x93/0xe0
[  161.389814][ T8523]  xlog_header_check_mount+0xc6/0xe0
[  161.389835][ T8523]  ? xlog_header_check_mount+0x93/0xe0
[  161.389855][ T8523]  xlog_find_verify_log_record+0x32e/0x500
[  161.389883][ T8523]  xlog_find_zeroed+0x327/0x410
[  161.389907][ T8523]  xlog_find_head+0x5f/0x700
[  161.389924][ T8523]  ? lockdep_hardirqs_on+0x9c/0x150
[  161.389942][ T8523]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  161.389969][ T8523]  xlog_find_tail+0x3d/0x840
[  161.389992][ T8523]  ? try_to_wake_up+0x7f5/0x12b0
[  161.390014][ T8523]  xlog_recover+0x4b/0x3e0
[  161.390038][ T8523]  xfs_log_mount+0x253/0x3e0
[  161.390054][ T8523]  xfs_mountfs+0xe5e/0x2330
[  161.390083][ T8523]  ? __pfx_xfs_mountfs+0x10/0x10
[  161.390108][ T8523]  ? trace_xfs_inode_timestamp_range+0x84/0x200
[  161.390128][ T8523]  xfs_fs_fill_super+0x11b3/0x1600
[  161.390149][ T8523]  get_tree_bdev_flags+0x40e/0x4d0
[  161.390169][ T8523]  ? __pfx_xfs_fs_fill_super+0x10/0x10
[  161.390185][ T8523]  ? __pfx_get_tree_bdev_flags+0x10/0x10
[  161.390215][ T8523]  vfs_get_tree+0x92/0x2b0
[  161.390237][ T8523]  do_new_mount+0x2a2/0x9e0
[  161.390261][ T8523]  ? ns_capable+0x8a/0xf0
[  161.390277][ T8523]  ? __pfx_do_new_mount+0x10/0x10
[  161.390306][ T8523]  ? path_mount+0x61c/0xfe0
[  161.390326][ T8523]  ? user_path_at+0x44/0x60
[  161.390351][ T8523]  __se_sys_mount+0x317/0x410
[  161.390379][ T8523]  ? __pfx___se_sys_mount+0x10/0x10
[  161.390405][ T8523]  ? do_syscall_64+0xbe/0x3b0
[  161.390446][ T8523]  ? __x64_sys_mount+0x20/0xc0
[  161.390471][ T8523]  do_syscall_64+0xfa/0x3b0
[  161.390484][ T8523]  ? lockdep_hardirqs_on+0x9c/0x150
[  161.390495][ T8523]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.390508][ T8523]  ? exc_page_fault+0x9f/0xf0
[  161.390525][ T8523]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  161.390539][ T8523] RIP: 0033:0x7fa34559034a
[  161.390554][ T8523] Code: d8 64 89 02 48 c7 c0 ff ff ff ff eb a6 e8 de 1a 00 00 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  161.390569][ T8523] RSP: 002b:00007fa3437f5e68 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  161.390587][ T8523] RAX: ffffffffffffffda RBX: 00007fa3437f5ef0 RCX: 00007fa34559034a
[  161.390599][ T8523] RDX: 0000200000009740 RSI: 0000200000000240 RDI: 00007fa3437f5eb0
[  161.390609][ T8523] RBP: 0000200000009740 R08: 00007fa3437f5ef0 R09: 0000000000000000
[  161.390619][ T8523] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000240
[  161.390629][ T8523] R13: 00007fa3437f5eb0 R14: 0000000000009873 R15: 0000200000000280
[  161.390653][ T8523]  </TASK>
[  161.390660][ T8523] XFS (loop3): Corruption detected. Unmount and run xfs_repair
[  161.517845][ T8523] XFS (loop3): log has mismatched uuid - can't recover
[  161.520826][ T8523] XFS (loop3): empty log check failed
[  161.523058][ T8523] XFS (loop3): log mount/recovery failed: error -117
[  161.547092][ T8523] XFS (loop3): log mount failed
[  161.981318][ T8558] loop4: detected capacity change from 0 to 256
[  162.028130][ T8558] FAT-fs (loop4): Directory bread(block 64) failed
[  162.031192][ T8558] FAT-fs (loop4): Directory bread(block 65) failed
[  162.035193][ T8558] FAT-fs (loop4): Directory bread(block 66) failed
[  162.037907][ T8558] FAT-fs (loop4): Directory bread(block 67) failed
[  162.044059][ T8558] FAT-fs (loop4): Directory bread(block 68) failed
[  162.051447][ T8558] FAT-fs (loop4): Directory bread(block 69) failed
[  162.056361][ T8558] FAT-fs (loop4): Directory bread(block 70) failed
[  162.059208][ T8558] FAT-fs (loop4): Directory bread(block 71) failed
[  162.062123][ T8558] FAT-fs (loop4): Directory bread(block 72) failed
[  162.069568][ T8558] FAT-fs (loop4): Directory bread(block 73) failed
[  162.625772][ T8566] loop4: detected capacity change from 0 to 65536
[  162.661746][ T8566] XFS (loop4): Mounting V5 Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  162.688055][ T8566] XFS (loop4): Ending clean mount
[  162.702373][ T8566] XFS (loop4): Metadata CRC error detected at xfs_agfl_read_verify+0x126/0x1f0, xfs_agfl block 0x3 
[  162.707192][ T8566] XFS (loop4): Unmount and run xfs_repair
[  162.710221][ T8566] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  162.713393][ T8566] 00000000: 58 41 46 4c 00 00 00 00 d6 f6 9d bd 8c 5d 46 be  XAFL.........]F.
[  162.716739][ T8566] 00000010: b8 8e 92 c0 ae 88 ce b2 00 00 00 00 00 00 00 00  ................
[  162.720183][ T8566] 00000020: 35 fc 5c 25 ff 00 ff ff 00 00 00 05 00 00 00 06  5.\%............
[  162.723789][ T8566] 00000030: 00 00 00 07 00 00 00 08 ff ff ff ff ff ff ff ff  ................
[  162.727316][ T8566] 00000040: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  162.731701][ T8566] 00000050: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  162.735854][ T8566] 00000060: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  162.739241][ T8566] 00000070: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff  ................
[  162.743058][ T8566] XFS (loop4): metadata I/O error in "xfs_alloc_read_agfl+0x202/0x410" at daddr 0x3 len 1 error 74
[  162.747947][ T8566] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  162.753016][ T8566] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  162.763107][ T5899] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  162.781312][ T7881] XFS (loop4): Unmounting Filesystem d6f69dbd-8c5d-46be-b88e-92c0ae88ceb2
[  162.944367][ T5899] usb 4-1: config 0 has no interfaces?
[  162.946583][ T5899] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  162.950219][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  162.969934][ T5899] usb 4-1: config 0 descriptor??
[  163.239215][ T5899] usb 4-1: USB disconnect, device number 11
[  163.293294][ T5850] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  163.453081][ T5850] usb 5-1: Using ep0 maxpacket: 32
[  163.460706][ T5850] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  163.465722][ T5850] usb 5-1: config 0 has no interface number 0
[  163.471190][ T5850] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  163.476969][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  163.480282][ T5850] usb 5-1: Product: syz
[  163.482108][ T5850] usb 5-1: Manufacturer: syz
[  163.484147][ T5850] usb 5-1: SerialNumber: syz
[  163.495004][ T5850] usb 5-1: config 0 descriptor??
[  163.500113][ T5850] smsc95xx v2.0.0
[  163.907203][ T5850] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  163.911533][ T5850] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  163.985782][ T8603] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  164.107851][ T8611] binder_alloc: 8610: binder_alloc_buf size 13336 failed, no address space
[  164.112003][ T8611] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288)
[  164.891285][ T8620] ecryptfs: Unknown parameter '('
[  165.030714][ T8624] loop3: detected capacity change from 0 to 4096
[  165.161565][ T5850] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71
[  165.176698][ T5850] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71
[  165.202423][ T5850] usb 5-1: USB disconnect, device number 2
[  165.991156][ T8642] vlan2: entered allmulticast mode
[  165.993569][ T8642] bond0: entered allmulticast mode
[  165.995640][ T8642] bond_slave_0: entered allmulticast mode
[  165.997966][ T8642] bond_slave_1: entered allmulticast mode
[  166.598439][ T8678] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1075'.
[  166.633029][ T5899] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  166.758876][ T8684] loop4: detected capacity change from 0 to 128
[  166.765797][ T8684] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  166.770290][ T8684] hpfs: filesystem error: improperly stopped
[  166.772737][ T8684] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  166.777978][ T8684] hpfs: You really don't want any checks? You are crazy...
[  166.781628][ T8684] hpfs: hpfs_map_sector(): read error
[  166.787283][ T8684] hpfs: code page support is disabled
[  166.789560][ T8684] hpfs: hpfs_map_4sectors(): unaligned read
[  166.792502][ T8684] hpfs: hpfs_map_4sectors(): unaligned read
[  166.796714][ T8684] hpfs: filesystem error: unable to find root dir
[  166.807600][ T8684] hpfs: hpfs_map_4sectors(): unaligned read
[  166.824358][ T5899] usb 4-1: config 0 has no interfaces?
[  166.826692][ T5899] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  166.830295][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  166.854131][ T5899] usb 4-1: config 0 descriptor??
[  167.081664][   T46] usb 4-1: USB disconnect, device number 12
[  167.272230][ T8706] nvme_fabrics: unknown parameter or missing value 'V' in ctrl creation request
[  167.508130][ T8718] netlink: 'syz.4.1095': attribute type 14 has an invalid length.
[  167.546768][ T8720] netlink: 14593 bytes leftover after parsing attributes in process `syz.2.1096'.
[  167.852926][   T46] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  167.864420][ T8728] loop3: detected capacity change from 0 to 32768
[  167.884479][ T8728] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  167.910623][   T33] audit: type=1800 audit(1757604567.718:101): pid=8728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1100" name="file1" dev="loop3" ino=17058 res=0 errno=0
[  167.941942][ T6904] ocfs2: Unmounting device (7,3) on (node local)
[  168.003185][   T46] usb 5-1: Using ep0 maxpacket: 8
[  168.013751][   T46] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 7
[  168.019971][   T46] usb 5-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b
[  168.027835][   T46] usb 5-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3
[  168.030879][   T46] usb 5-1: Product: syz
[  168.032493][   T46] usb 5-1: Manufacturer: syz
[  168.043358][   T46] usb 5-1: SerialNumber: syz
[  168.049070][ T8740] ref_ctr_offset mismatch. inode: 0x92b offset: 0x0 ref_ctr_offset(old): 0x200000000100 ref_ctr_offset(new): 0x0
[  168.259885][   T46] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  168.273555][   T46] usb 5-1: Handspring Visor / Palm OS: port 0, is for Generic use
[  168.276572][   T46] usb 5-1: Handspring Visor / Palm OS: Number of ports: 2
[  168.465848][   T46] usb 5-1: palm_os_3_probe - error -71 getting bytes available request
[  168.469020][   T46] visor 5-1:1.0: Handspring Visor / Palm OS converter detected
[  168.547908][   T46] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  168.565069][   T46] usb 5-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  168.587608][   T46] usb 5-1: USB disconnect, device number 3
[  168.610940][   T46] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  168.641030][   T46] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  168.661311][   T46] visor 5-1:1.0: device disconnected
[  168.791386][ T8755] loop3: detected capacity change from 0 to 32768
[  168.799232][ T8755] XFS (loop3): Invalid device [./bus], error=-15
[  169.156267][ T8771] netlink: 96 bytes leftover after parsing attributes in process `syz.4.1120'.
[  169.927270][ T8788] netlink: 176 bytes leftover after parsing attributes in process `syz.4.1127'.
[  170.052350][ T8795] loop4: detected capacity change from 0 to 764
[  170.508094][ T8815] netlink: 52 bytes leftover after parsing attributes in process `syz.3.1139'.
[  170.555305][ T8817] loop3: detected capacity change from 0 to 512
[  170.577223][ T8817] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  170.584559][   T33] audit: type=1326 audit(1757604570.398:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.2.1141" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc58eba9 code=0x7ffc0000
[  170.605985][   T33] audit: type=1326 audit(1757604570.398:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.2.1141" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc58eba9 code=0x7ffc0000
[  170.613643][ T8817] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.1140: Unimplemented hash flags: 0x0001
[  170.628738][   T33] audit: type=1326 audit(1757604570.418:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.2.1141" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fcdfc58eba9 code=0x7ffc0000
[  170.637179][ T8817] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1140: Corrupt directory, running e2fsck is recommended
[  170.640379][   T33] audit: type=1326 audit(1757604570.418:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.2.1141" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fcdfc58ebe3 code=0x7ffc0000
[  170.650687][   T33] audit: type=1326 audit(1757604570.418:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.2.1141" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fcdfc58d65f code=0x7ffc0000
[  170.651821][ T8817] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.1140: Unimplemented hash flags: 0x0001
[  170.660699][   T33] audit: type=1326 audit(1757604570.418:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.2.1141" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fcdfc58ec37 code=0x7ffc0000
[  170.677019][ T8817] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1140: Corrupt directory, running e2fsck is recommended
[  170.692645][   T33] audit: type=1326 audit(1757604570.418:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.2.1141" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fcdfc58d510 code=0x7ffc0000
[  170.714299][   T33] audit: type=1326 audit(1757604570.418:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.2.1141" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7fcdfc58d80a code=0x7ffc0000
[  170.722134][   T33] audit: type=1326 audit(1757604570.418:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8820 comm="syz.2.1141" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc58eba9 code=0x7ffc0000
[  170.727619][ T8817] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.1140: Unimplemented hash flags: 0x0001
[  170.743269][ T8817] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1140: Corrupt directory, running e2fsck is recommended
[  170.762976][ T8817] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.1140: Unimplemented hash flags: 0x0001
[  170.774128][ T8817] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1140: Corrupt directory, running e2fsck is recommended
[  170.781313][ T8817] EXT4-fs warning (device loop3): dx_probe:837: inode #2: comm syz.3.1140: Unimplemented hash flags: 0x0001
[  170.792966][ T8817] EXT4-fs warning (device loop3): dx_probe:934: inode #2: comm syz.3.1140: Corrupt directory, running e2fsck is recommended
[  170.818054][ T8817] EXT4-fs error (device loop3): ext4_readdir:264: inode #2: block 3: comm syz.3.1140: path /198/file0: bad entry in directory: rec_len is smaller than minimal - offset=0, inode=4294967295, rec_len=7, size=1024 fake=0
[  170.907615][ T6904] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  171.475199][ T8837] af_packet: tpacket_rcv: packet too big, clamped from 3698 to 4294967272. macoff=96
[  171.536418][ T5899] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  171.695176][ T5899] usb 4-1: Using ep0 maxpacket: 8
[  171.699538][ T5899] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  171.702486][ T5899] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  171.708137][ T5899] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  171.712713][ T5899] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  171.728739][ T5899] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  171.745126][ T5899] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  171.748182][ T5899] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  171.752654][ T5899] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  171.767214][ T5899] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  171.771722][ T5899] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  171.797518][ T5899] usb 4-1: config 168 descriptor has 1 excess byte, ignoring
[  171.800665][ T5899] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  171.805557][ T5899] usb 4-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  171.810990][ T5899] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  171.828835][ T5899] usb 4-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  171.852969][ T5899] usb 4-1: string descriptor 0 read error: -22
[  171.857099][ T5899] usb 4-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  171.860573][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.889796][ T5899] adutux 4-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  172.095598][ T5899] usb 4-1: USB disconnect, device number 13
[  172.318799][ T8835] adutux: No device or device unplugged -19
[  172.916061][ T8853] netlink: 'syz.3.1157': attribute type 24 has an invalid length.
[  173.335926][ T8859] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1159'.
[  173.450142][ T8859] hsr_slave_1 (unregistering): left promiscuous mode
[  173.484439][ T8865] netlink: 'syz.4.1162': attribute type 5 has an invalid length.
[  173.673346][   T46] usb 4-1: new full-speed USB device number 14 using dummy_hcd
[  173.816041][ T8882] loop4: detected capacity change from 0 to 4096
[  173.829974][ T8882] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  173.844089][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 0, changing to 10
[  173.848432][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  173.852732][   T46] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  173.858696][   T46] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  173.869656][   T46] usb 4-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  173.876979][   T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  173.880361][   T46] usb 4-1: Product: syz
[  173.882172][   T46] usb 4-1: Manufacturer: syz
[  173.885916][   T46] usb 4-1: SerialNumber: syz
[  173.892393][   T46] usb 4-1: config 0 descriptor??
[  173.897436][ T7881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.898771][ T8863] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  173.915046][   T46] usb 4-1: ucan: probing device on interface #0
[  173.917542][   T46] usb 4-1: ucan: invalid endpoint configuration
[  173.920036][   T46] usb 4-1: ucan: probe failed; try to update the device firmware
[  174.070972][ T8893] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1174'.
[  174.077864][ T8893] openvswitch: netlink: nsh attribute has unmatched MD type 0.
[  174.081094][ T8893] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  174.117843][ T6009] usb 4-1: USB disconnect, device number 14
[  174.513962][ T8902] loop4: detected capacity change from 0 to 4096
[  174.546972][ T8903] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.592602][ T8902] NILFS error (device loop4): nilfs_dotdot: directory #12 missing '.'
[  174.601655][ T8902] Remounting filesystem read-only
[  174.641680][ T7881] NILFS (loop4): disposed unprocessed dirty file(s) when detaching log writer
[  174.729549][ T8909] loop4: detected capacity change from 0 to 512
[  174.749964][ T8909] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.781541][ T8909] ext4 filesystem being mounted at /110/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  174.826436][   T33] kauditd_printk_skb: 3 callbacks suppressed
[  174.826447][   T33] audit: type=1800 audit(1757604574.638:114): pid=8909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1179" name="bus" dev="loop4" ino=18 res=0 errno=0
[  174.896468][ T7881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.093074][ T5899] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  176.252905][ T5899] usb 4-1: Using ep0 maxpacket: 32
[  176.257434][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.266742][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.270614][ T5899] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  176.275246][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.285886][ T5899] usb 4-1: config 0 descriptor??
[  176.298086][ T5899] hub 4-1:0.0: USB hub found
[  176.507644][ T8971] netlink: 'syz.2.1206': attribute type 11 has an invalid length.
[  176.508635][ T5899] hub 4-1:0.0: 1 port detected
[  176.670241][ T8977] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[  176.857618][ T8987] loop4: detected capacity change from 0 to 128
[  176.884030][ T8987] qnx6: unable to set blocksize
[  176.945805][ T8991] netlink: 'syz.2.1217': attribute type 2 has an invalid length.
[  176.948877][ T8991] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1217'.
[  176.952032][ T8991] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0)
[  176.965642][ T8993] loop4: detected capacity change from 0 to 1024
[  176.997436][ T8993] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  177.182194][ T5899] hub 4-1:0.0: activate --> -90
[  177.723374][ T5899] usb 4-1: USB disconnect, device number 15
[  177.885660][ T7881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  179.123220][ T5850] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  179.246947][ T9072] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1247'.
[  179.283234][ T5850] usb 5-1: Using ep0 maxpacket: 8
[  179.286386][ T5850] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  179.289781][ T5850] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  179.298751][ T5850] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  179.303863][ T5850] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  179.308444][ T5850] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  179.311945][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.325616][ T5850] hub 5-1:1.0: bad descriptor, ignoring hub
[  179.327753][ T5850] hub 5-1:1.0: probe with driver hub failed with error -5
[  179.341759][ T5850] cdc_wdm 5-1:1.0: skipping garbage
[  179.348528][ T5850] cdc_wdm 5-1:1.0: skipping garbage
[  179.360486][ T5850] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  179.363357][ T5850] cdc_wdm 5-1:1.0: Unknown control protocol
[  179.523500][ T9076] loop3: detected capacity change from 0 to 32768
[  179.609877][ T9076] bcachefs (loop3): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,background_compression=lz4,wide_macs,no_splitbrain_check,recovery_pass_last=accounting_read,nojournal_transaction_names,read_only,version_upgrade=incompatible,no_data_io
[  179.609901][ T9076]   allowing incompatible features above 0.0: (unknown version)
[  179.609909][ T9076]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  179.629295][ T9076] bcachefs (loop3): Using encoding defined by superblock: utf8-12.1.0
[  179.633628][ T9076] bcachefs (loop3): invalid bkey in superblock btree=lru level=1: u64s 11 type btree_ptr_v2 SPOS_MAX len 131072 ver 0: seq 28f61e078e70b95c written 16 min_key POS_MIN durability: 1 ptr: 0:28:0 gen 0
[  179.633707][ T9076]   size != 0, deleting
[  179.643171][ T9076] bcachefs (loop3): recovering from clean shutdown, journal seq 10
[  179.646159][ T9076] bcachefs (loop3): Now allowing incompatible features up to 1.28: inode_has_case_insensitive, previously allowed up to 0.0: (unknown version)
[  179.646159][ T9076] 
[  179.653518][ T9076] syz.3.1249: attempt to access beyond end of device
[  179.653518][ T9076] loop3: rw=6145, sector=18446744073709551615, nr_sectors = 10 limit=32768
[  179.662440][ T9076] bcachefs (loop3): superblock write error: I/O
[  179.665153][ T9076] bcachefs (loop3): bch2_write_super(): fatal error : Unable to write superblock to sufficient devices (from bch2_fs_recovery)
[  179.670316][ T9076] bcachefs (loop3): fatal error - emergency read only
[  179.689407][ T9076] bcachefs (loop3): bch2_write_super(): fatal error  loop3: Superblock modified by another process (seq 43 expected 42)
[  179.696056][ T9076] bcachefs (loop3): btree node read error at btree alloc level 0/0
[  179.696096][ T9076]   u64s 11 type btree_ptr_v2 283673999966207:U64_MAX:U32_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[  179.696105][ T9076]   loop3 node offset 0/24 bset u64s 0: incorrect max key SPOS_MAX
[  179.696110][ T9076]   loop3 btree validate error
[  179.696114][ T9076]   flagging btree alloc lost data
[  179.696119][ T9076]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  179.696124][ T9076]   running recovery pass check_allocations (8), currently at recovery_pass_empty (0)
[  179.696129][ T9076]   running recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[  179.696135][ T9076]   running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[  179.696140][ T9076]   running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0)
[  179.696146][ T9076]   ret btree_node_read_err_bad_node
[  179.734664][ T9076] bcachefs (loop3): error reading btree root btree=alloc level=0: btree_node_read_error, fixing
[  179.744729][ T9076] bcachefs (loop3): check_topology...
[  179.746025][ T9076] bcachefs (loop3): bch2_write_super(): fatal error  loop3: Superblock modified by another process (seq 43 expected 42)
[  179.751636][ T9076]  done
[  179.752760][ T9076] bcachefs (loop3): accounting_read...
[  179.753733][ T9076] bcachefs (loop3): bch2_write_super(): fatal error  loop3: Superblock modified by another process (seq 43 expected 42)
[  179.759697][ T9076]  done
[  179.760576][ T9076] bcachefs (loop3): Fixed errors, running fsck a second time to verify fs is clean
[  179.764197][ T9076] bcachefs (loop3): bch2_write_super(): fatal error  loop3: Superblock modified by another process (seq 43 expected 42)
[  179.768509][ T9076] bcachefs (loop3): done starting filesystem
[  179.793399][ T5850] usb 5-1: USB disconnect, device number 4
[  179.797790][ T6904] bcachefs (loop3): shutting down
[  179.826590][ T6904] bcachefs (loop3): shutdown complete
[  180.133384][ T5850] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  180.283040][ T5850] usb 5-1: Using ep0 maxpacket: 8
[  180.286947][ T5850] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  180.290867][ T5850] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2
[  180.297551][ T5850] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  180.301906][ T5850] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  180.306913][ T5850] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  180.310383][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  180.319136][ T5850] hub 5-1:1.0: bad descriptor, ignoring hub
[  180.321504][ T5850] hub 5-1:1.0: probe with driver hub failed with error -5
[  180.334842][ T5850] cdc_wdm 5-1:1.0: skipping garbage
[  180.337155][ T5850] cdc_wdm 5-1:1.0: skipping garbage
[  180.341201][ T5850] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[  180.343985][ T5850] cdc_wdm 5-1:1.0: Unknown control protocol
[  181.617355][ T9121] loop3: detected capacity change from 0 to 32768
[  181.735377][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1269'.
[  182.453033][ T6009] usb 4-1: new high-speed USB device number 16 using dummy_hcd
[  182.614184][ T6009] usb 4-1: Using ep0 maxpacket: 32
[  182.625014][ T6009] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[  182.629081][ T6009] usb 4-1: config 0 has no interface number 0
[  182.639717][ T6009] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  182.644605][ T6009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.647696][ T6009] usb 4-1: Product: syz
[  182.649834][ T6009] usb 4-1: Manufacturer: syz
[  182.652108][ T6009] usb 4-1: SerialNumber: syz
[  182.660931][ T6009] usb 4-1: config 0 descriptor??
[  182.670755][ T6009] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  182.880384][ T6009] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  182.889056][ T6009] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  183.303476][    C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71
[  183.311995][   T24] usb 4-1: USB disconnect, device number 16
[  183.335624][   T24] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  183.354880][   T24] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  183.359900][   T24] quatech2 4-1:0.51: device disconnected
[  184.498909][ T9170] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1282'.
[  185.094939][ T9182] loop4: detected capacity change from 0 to 1024
[  185.228312][ T9182] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  185.285139][ T9182] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  185.378302][ T7881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  185.434393][ T5850] usb 5-1: USB disconnect, device number 5
[  185.775746][ T9200] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1297'.
[  185.974930][ T9202] loop4: detected capacity change from 0 to 32768
[  186.025135][ T9202] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  186.037433][ T9202] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  186.072718][   T33] audit: type=1800 audit(1757604585.878:115): pid=9202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1296" name="file1" dev="loop4" ino=17059 res=0 errno=0
[  186.287556][ T9211] netlink: 'syz.3.1301': attribute type 10 has an invalid length.
[  186.323882][ T9211] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  186.545746][ T9215] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  186.698598][ T7881] ocfs2: Unmounting device (7,4) on (node local)
[  187.084826][ T6009] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  187.241053][ T6009] usb 4-1: config 1 has an invalid interface number: 63 but max is 0
[  187.252906][ T6009] usb 4-1: config 1 has no interface number 0
[  187.255420][ T6009] usb 4-1: config 1 interface 63 has no altsetting 0
[  187.274775][ T6009] usb 4-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=90.56
[  187.286591][ T6009] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.289842][ T6009] usb 4-1: Product: syz
[  187.291529][ T6009] usb 4-1: Manufacturer: syz
[  187.300655][ T6009] usb 4-1: SerialNumber: syz
[  187.436624][ T9249] netlink: 'syz.2.1316': attribute type 1 has an invalid length.
[  187.499218][ T9249] bond1: (slave bridge1): making interface the new active one
[  187.511435][ T9249] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  187.536367][ T6009] ems_usb 4-1:1.63 (unnamed net_device) (uninitialized): couldn't initialize controller: -8
[  187.541540][ T6009] ems_usb 4-1:1.63: probe with driver ems_usb failed with error -8
[  187.553527][ T6009] usb 4-1: USB disconnect, device number 17
[  188.090134][ T9278] 9pnet_fd: Insufficient options for proto=fd
[  188.205448][ T9284] F2FS-fs: Conflicting test_dummy_encryption options
[  188.662956][ T5899] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  188.815221][ T5899] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  188.819729][ T5899] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  188.825601][ T5899] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  188.829543][ T5899] usb 4-1: config 1 has no interface number 1
[  188.834354][ T5899] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  188.839868][ T5899] usb 4-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  188.847717][ T5899] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  188.851122][ T5899] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  188.855283][ T5899] usb 4-1: Product: syz
[  188.857001][ T5899] usb 4-1: Manufacturer: syz
[  188.858856][ T5899] usb 4-1: SerialNumber: syz
[  188.863315][ T5850] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  189.013168][ T5850] usb 5-1: Using ep0 maxpacket: 8
[  189.025454][ T5850] usb 5-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2
[  189.030188][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.034041][ T5850] usb 5-1: Product: syz
[  189.035624][ T5850] usb 5-1: Manufacturer: syz
[  189.037294][ T5850] usb 5-1: SerialNumber: syz
[  189.042452][ T5850] usb 5-1: config 0 descriptor??
[  189.082561][ T5899] usb 4-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  189.085733][ T5899] usb 4-1: MIDIStreaming interface descriptor not found
[  189.136584][ T5899] usb 4-1: USB disconnect, device number 18
[  189.217395][ T9312] udevd[9312]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  189.466317][ T5850] gspca_main: sunplus-2.14.0 probing 04a5:3003
[  189.474642][ T5850] gspca_sunplus: reg_w_riv err -71
[  189.476657][ T5850] sunplus 5-1:0.0: probe with driver sunplus failed with error -71
[  189.481588][ T5850] usb 5-1: USB disconnect, device number 6
[  190.057125][ T9338] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1354'.
[  191.183417][ T5236] Bluetooth: hci1: command 0x0406 tx timeout
[  191.488457][ T9361] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1363'.
[  191.496888][ T9361] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1363'.
[  192.442345][ T9387] loop4: detected capacity change from 0 to 1024
[  192.488566][ T9387] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  192.524540][ T7881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  192.546721][   T33] audit: type=1326 audit(1757604592.358:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9395 comm="syz.2.1378" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fcdfc58eba9 code=0x0
[  193.614824][ T5899] usb 4-1: new full-speed USB device number 19 using dummy_hcd
[  193.721451][ T9431] loop4: detected capacity change from 0 to 512
[  193.749164][ T9431] EXT4-fs (loop4): orphan cleanup on readonly fs
[  193.759232][ T9431] Quota error (device loop4): v2_read_file_info: Block with free entry 9 out of range (1, 6).
[  193.769420][ T9431] EXT4-fs warning (device loop4): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  193.780007][ T9431] EXT4-fs (loop4): Cannot turn on quotas: error -117
[  193.785697][ T5899] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  193.792675][ T5899] usb 4-1: config 1 interface 0 altsetting 93 has 0 endpoint descriptors, different from the interface descriptor's value: 18
[  193.798573][ T9431] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.1393: bg 0: block 248: padding at end of block bitmap is not set
[  193.804565][ T5899] usb 4-1: config 1 interface 0 has no altsetting 0
[  193.805969][ T5899] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  193.811010][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  193.811425][ T9431] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  193.823099][ T5899] usb 4-1: SerialNumber: syz
[  193.826402][ T9431] EXT4-fs (loop4): 1 orphan inode deleted
[  193.835172][ T9431] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  193.835943][ T5899] usb 4-1: bad CDC descriptors
[  193.880775][ T7881] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  194.059324][ T6009] usb 4-1: USB disconnect, device number 19
[  194.216743][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.219312][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  195.268619][ T9467] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1406'.
[  195.858755][ T9497] loop3: detected capacity change from 0 to 256
[  195.869659][ T9497] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  196.269692][ T9501] loop3: detected capacity change from 0 to 32768
[  197.133788][ T9528] loop3: detected capacity change from 0 to 8
[  197.162190][ T9528] SQUASHFS error: Unable to read directory block [2c0:35]
[  197.570294][ T9540] IPVS: rr: UDP 224.0.0.2:0 - no destination available
[  197.639175][ T9543] xt_policy: neither incoming nor outgoing policy selected
[  198.165282][ T9571] netlink: 'syz.3.1453': attribute type 11 has an invalid length.
[  199.041345][ T9593] loop4: detected capacity change from 0 to 4096
[  199.080701][ T9596] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  199.427233][ T9604] loop4: detected capacity change from 0 to 32768
[  199.434227][ T9604] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1468 (9604)
[  199.476075][ T9604] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  199.481539][ T9604] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  199.670289][ T9604] BTRFS info (device loop4): turning off barriers
[  199.679916][ T9604] BTRFS info (device loop4): enabling free space tree
[  199.698907][ T9604] BTRFS info (device loop4): enabling auto defrag
[  199.712903][ T9604] BTRFS info (device loop4): use zstd compression, level 3
[  200.407189][ T7881] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  201.006020][ T9645] loop4: detected capacity change from 0 to 32768
[  201.056497][ T9645] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  201.101789][ T9645] XFS (loop4): Ending clean mount
[  201.110485][ T9645] XFS (loop4): Quotacheck needed: Please wait.
[  201.176046][ T9645] XFS (loop4): Quotacheck: Done.
[  201.253489][ T7881] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  202.109339][ T9681] loop4: detected capacity change from 0 to 32768
[  202.123298][ T9681] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1492 (9681)
[  202.152695][ T9681] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  202.167316][ T9681] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  202.294153][ T9681] BTRFS info (device loop4): enabling ssd optimizations
[  202.296969][ T9681] BTRFS info (device loop4): enabling free space tree
[  202.304952][ T9681] BTRFS info (device loop4): use lzo compression, level 0
[  202.310391][ T9698] : entered promiscuous mode
[  202.342738][ T7881] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  202.602092][ T9687] loop3: detected capacity change from 0 to 32768
[  202.620074][ T9687] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.1495 (9687)
[  202.674968][ T9687] BTRFS info (device loop3): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  202.678921][ T9687] BTRFS info (device loop3): using blake2b (blake2b-256-generic) checksum algorithm
[  202.777251][ T9687] BTRFS info (device loop3): enabling ssd optimizations
[  202.800596][ T9687] BTRFS info (device loop3): enabling free space tree
[  202.975233][ T6904] BTRFS info (device loop3): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  203.273071][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  203.424647][    T9] usb 5-1: Using ep0 maxpacket: 32
[  203.435642][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  203.440128][    T9] usb 5-1: config 7 has an invalid interface number: 128 but max is 0
[  203.443954][    T9] usb 5-1: config 7 contains an unexpected descriptor of type 0x1, skipping
[  203.447626][    T9] usb 5-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  203.451482][    T9] usb 5-1: config 7 has no interface number 0
[  203.455042][    T9] usb 5-1: config 7 interface 128 altsetting 2 has an endpoint descriptor with address 0xD1, changing to 0x81
[  203.459566][    T9] usb 5-1: config 7 interface 128 altsetting 2 bulk endpoint 0x81 has invalid maxpacket 32
[  203.464186][    T9] usb 5-1: config 7 interface 128 altsetting 2 endpoint 0x87 has an invalid bInterval 209, changing to 11
[  203.469995][    T9] usb 5-1: config 7 interface 128 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 6
[  203.475908][    T9] usb 5-1: config 7 interface 128 has no altsetting 0
[  203.481311][    T9] usb 5-1: New USB device found, idVendor=6033, idProduct=4108, bcdDevice=cc.13
[  203.491314][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  203.494852][    T9] usb 5-1: Product: syz
[  203.496769][    T9] usb 5-1: Manufacturer: syz
[  203.498782][    T9] usb 5-1: SerialNumber: syz
[  203.506970][ T9747] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  203.625481][ T9750] loop3: detected capacity change from 0 to 40427
[  203.634738][ T9750] F2FS-fs (loop3): Image doesn't support compression
[  203.637445][ T9750] F2FS-fs (loop3): build fault injection rate: 14
[  203.642281][ T9750] F2FS-fs (loop3): build fault injection type: 0x1
[  203.908079][ T9750] F2FS-fs (loop3): invalid crc value
[  203.922223][ T9750] F2FS-fs (loop3): inject kmalloc in f2fs_kmalloc of f2fs_build_segment_manager+0x30ed/0x49f0
[  203.929046][ T9750] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-12)
[  203.940067][    T9] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  203.945331][    T9] usb 5-1: MIDIStreaming interface descriptor not found
[  203.981718][    T9] usb 5-1: USB disconnect, device number 7
[  204.057436][ T6026] udevd[6026]: setting owner of /dev/dmmidi3 to uid=0, gid=29 failed: No such file or directory
[  204.067482][ T5853] udevd[5853]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:7.128/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  204.267615][ T9764] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1515'.
[  205.127555][ T9784] overlayfs: empty lowerdir
[  205.940868][ T9795] loop4: detected capacity change from 0 to 32768
[  205.988978][ T9801] ubi31: attaching mtd0
[  206.039574][ T9806] read_mapping_page failed!
[  206.041603][ T9806] ERROR: (device loop4): txCommit: 
[  206.041603][ T9806] 
[  206.080726][  T115] BUG at fs/jfs/jfs_txnmgr.c:931 assert(mp->nohomeok > 0)
[  206.084786][  T115] ------------[ cut here ]------------
[  206.087031][  T115] kernel BUG at fs/jfs/jfs_txnmgr.c:931!
[  206.089688][  T115] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[  206.092391][  T115] CPU: 1 UID: 0 PID: 115 Comm: jfsCommit Not tainted syzkaller #0 PREEMPT(full) 
[  206.096841][  T115] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  206.100842][  T115] RIP: 0010:txUnlock+0xdaf/0xdf0
[  206.102917][  T115] Code: e4 fd 90 0f 0b e8 f1 fe 7c fe 48 c7 c7 60 1e c4 8b 48 c7 c6 59 1a c4 8b ba a3 03 00 00 48 c7 c1 60 2b c4 8b e8 c2 ed e4 fd 90 <0f> 0b e8 ca fe 7c fe 48 c7 c7 60 1e c4 8b 48 c7 c6 59 1a c4 8b ba
[  206.110030][  T115] RSP: 0018:ffffc9000243fbc8 EFLAGS: 00010246
[  206.112457][  T115] RAX: 0000000000000037 RBX: 0000000000001000 RCX: ab6fd885c00e3700
[  206.115426][  T115] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  206.118647][  T115] RBP: ffffc90001fa2090 R08: ffffc9000243f8e7 R09: 1ffff92000487f1c
[  206.121764][  T115] R10: dffffc0000000000 R11: fffff52000487f1d R12: dffffc0000000000
[  206.124953][  T115] R13: 1ffff11024de28ee R14: ffff888126f14770 R15: 0000000000000000
[  206.128055][  T115] FS:  0000000000000000(0000) GS:ffff8881a3c15000(0000) knlGS:0000000000000000
[  206.131597][  T115] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  206.133898][  T115] CR2: 00007ffd763d3ff8 CR3: 0000000028d48000 CR4: 00000000000006f0
[  206.137054][  T115] Call Trace:
[  206.138378][  T115]  <TASK>
[  206.139526][  T115]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.141599][  T115]  jfs_lazycommit+0x584/0xa90
[  206.143319][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[  206.145814][  T115]  ? __pfx_default_wake_function+0x10/0x10
[  206.148058][  T115]  ? __kthread_parkme+0x7b/0x200
[  206.149706][  T115]  ? __kthread_parkme+0x1a1/0x200
[  206.151651][  T115]  kthread+0x711/0x8a0
[  206.153315][  T115]  ? __pfx_jfs_lazycommit+0x10/0x10
[  206.155129][  T115]  ? __pfx_kthread+0x10/0x10
[  206.156917][  T115]  ? _raw_spin_unlock_irq+0x23/0x50
[  206.158930][  T115]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.160857][  T115]  ? __pfx_kthread+0x10/0x10
[  206.162373][  T115]  ret_from_fork+0x3fc/0x770
[  206.164030][  T115]  ? __pfx_ret_from_fork+0x10/0x10
[  206.166000][  T115]  ? __switch_to_asm+0x39/0x70
[  206.167651][  T115]  ? __switch_to_asm+0x33/0x70
[  206.169244][  T115]  ? __pfx_kthread+0x10/0x10
[  206.170939][  T115]  ret_from_fork_asm+0x1a/0x30
[  206.172711][  T115]  </TASK>
[  206.173951][  T115] Modules linked in:
[  206.176194][  T115] ---[ end trace 0000000000000000 ]---
[  206.183818][  T115] RIP: 0010:txUnlock+0xdaf/0xdf0
[  206.185605][  T115] Code: e4 fd 90 0f 0b e8 f1 fe 7c fe 48 c7 c7 60 1e c4 8b 48 c7 c6 59 1a c4 8b ba a3 03 00 00 48 c7 c1 60 2b c4 8b e8 c2 ed e4 fd 90 <0f> 0b e8 ca fe 7c fe 48 c7 c7 60 1e c4 8b 48 c7 c6 59 1a c4 8b ba
[  206.193157][  T115] RSP: 0018:ffffc9000243fbc8 EFLAGS: 00010246
[  206.203842][  T115] RAX: 0000000000000037 RBX: 0000000000001000 RCX: ab6fd885c00e3700
[  206.207665][  T115] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000
[  206.210624][  T115] RBP: ffffc90001fa2090 R08: ffffc9000243f8e7 R09: 1ffff92000487f1c
[  206.216472][  T115] R10: dffffc0000000000 R11: fffff52000487f1d R12: dffffc0000000000
[  206.219467][  T115] R13: 1ffff11024de28ee R14: ffff888126f14770 R15: 0000000000000000
[  206.222056][  T115] FS:  0000000000000000(0000) GS:ffff8881a3c15000(0000) knlGS:0000000000000000
[  206.225961][  T115] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  206.228342][  T115] CR2: 00007ffd763d1b48 CR3: 0000000028d48000 CR4: 00000000000006f0
[  206.232221][  T115] Kernel panic - not syncing: Fatal exception
[  206.235314][  T115] Kernel Offset: disabled
[  206.236626][  T115] Rebooting in 86400 seconds..

VM DIAGNOSIS:
15:30:06  Registers:
info registers vcpu 0

CPU#0
RAX=00007fa345193710 RBX=00007fa345137b10 RCX=ffffffff822c8f63 RDX=ffffffff822c8c4a
RSI=ffffffff822e3d9b RDI=00007fa3451a5180 RBP=00007fa34512fcd0 RSP=00007ffe7e705100
R8 =00007fa34516a720 R9 =00007fa3457c2000 R10=00007fa344fff008 R11=0000000000000003
R12=00007fa34512fcc8 R13=000000000000001f R14=00007ffe7e705288 R15=00007fa344fff008
RIP=00007fa345467fe4 RFL=00000297 [--S-APC] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055557c3c6500 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c40fe84 CR3=00000000311cb000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffff822e4738 ffffffff822c895f XMM01=ffffffff822c895f ffffffff822e4738
XMM02=00007fa3457a7498 ffffffff822e4738 XMM03=00007fa3457a74a8 00007fa3457a74a0
XMM04=00007fa34630d100 00007fa3457a7460 XMM05=00007fa3457a7478 00007fa3457a74c0
XMM06=00007fa3457a74b8 00007fa3457a74b0 XMM07=00007fa3457a74a8 00007fa3457a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fa345612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006d RBX=000000000000006d RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000243f2d0
R8 =ffff8881074e0237 R9 =1ffff11020e9c046 R10=dffffc0000000000 R11=ffffffff854f7000
R12=dffffc0000000000 R13=ffffffff99b008fb R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f707c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffd763d3ff8 CR3=0000000028d48000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fcdfc612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
