last executing test programs:

3m19.345013677s ago: executing program 2 (id=324):
bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x9, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x1}, 0x50)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff})
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[], 0x48)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1, <r2=>0xffffffffffffffff}, &(0x7f0000000340), &(0x7f0000000380)=r0}, 0x20)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000640)={r2, &(0x7f00000004c0), 0x0}, 0x20)

3m19.301677295s ago: executing program 2 (id=325):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x60, 0x2, 0x6, 0x201, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x4}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0)

3m19.215147907s ago: executing program 2 (id=327):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000212c0011800a0001006c696d69740000001c0002800c00024000000000000000030c0001400000000200000101480000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000001c0003800c00008008000340000000020c0000800800034000000002"], 0xf8}}, 0x0)

3m19.125174931s ago: executing program 2 (id=328):
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000400)={[{@shortname_winnt}, {@shortname_winnt}, {@rodir}, {@fat=@quiet}, {@fat=@flush}, {@shortname_winnt}, {@fat=@showexec}, {@fat=@dmask={'dmask', 0x3d, 0x100}}, {@fat=@tz_utc}, {@uni_xlate}, {@utf8no}, {@shortname_winnt}]}, 0x0, 0x27f, &(0x7f0000000e00)="$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")
r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000500)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2100)

3m19.04458501s ago: executing program 2 (id=330):
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x80243, 0x0)
ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6)
ioctl$PPPIOCSNPMODE(r0, 0x4008744b, 0x0)

3m18.471410401s ago: executing program 2 (id=333):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x5599, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

3m18.272529296s ago: executing program 32 (id=333):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000240), 0x1, 0x5599, &(0x7f0000005680)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, 0x0, 0x0)

2m55.934615259s ago: executing program 3 (id=551):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x16}, 0x80)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfe99, 0x0, &(0x7f00000001c0)='N', 0x0}, 0x48)

2m55.862076814s ago: executing program 3 (id=552):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
preadv(r0, 0x0, 0x0, 0xfff, 0x0)

2m55.783044262s ago: executing program 3 (id=554):
mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2002}}, &(0x7f00000000c0)='GPL\x00', 0x9, 0x100d, &(0x7f00000038c0)=""/4109, 0x41000, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94)

2m55.689996712s ago: executing program 3 (id=558):
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000001c0), 0x1, 0x4bc, &(0x7f0000000a40)="$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")
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)='./file1\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000140)='./file1\x00', 0x100, 0x110)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0)

2m55.3593618s ago: executing program 3 (id=564):
syz_emit_ethernet(0x46, &(0x7f0000000080)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3}, @void, {@ipv6={0x86dd, @generic={0x6, 0x6, "f6fbe2", 0x10, 0x0, 0x0, @empty, @mcast2, {[@dstopts={0x17, 0x1, '\x00', [@ra={0x5, 0x2, 0x4}, @padn={0x1, 0x2, [0x0, 0x0]}]}]}}}}}, 0x0)

2m54.406494312s ago: executing program 3 (id=573):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x50, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x48040)

2m54.278171721s ago: executing program 33 (id=573):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff)
sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x50, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bridge_slave_0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x50}}, 0x48040)

1m25.359348441s ago: executing program 0 (id=1451):
r0 = open(&(0x7f0000000200)='./file0\x00', 0x40, 0x0)
fcntl$setlease(r0, 0x400, 0x0)
open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
fcntl$setlease(r0, 0x400, 0x1)

1m25.358881436s ago: executing program 0 (id=1453):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x4, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xcd}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94)

1m25.261382423s ago: executing program 0 (id=1454):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000500)="fe", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="b656fa", 0x3}], 0x1, &(0x7f00000009c0)=[{0xc, 0x1, 0x7}], 0xc}}], 0x2, 0x40002)

1m25.261027728s ago: executing program 0 (id=1455):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
pipe2(&(0x7f0000000840)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={<r2=>0xffffffffffffffff})
splice(r2, 0x0, r1, 0x0, 0x1, 0x0)
ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000000))
close_range(r1, 0xffffffffffffffff, 0x0)

1m25.045144977s ago: executing program 0 (id=1459):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/unix\x00')
read$FUSE(r0, &(0x7f0000002140)={0x2020}, 0x2020)
pread64(r0, &(0x7f0000000000)=""/81, 0x51, 0x2f)

1m24.966828768s ago: executing program 0 (id=1460):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, <r1=>0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x2, 0x9, 0x5, r2})

1m23.599268433s ago: executing program 4 (id=1489):
r0 = socket$inet6(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x1, @local, 0xfffffff9}, 0x18)

1m23.598962611s ago: executing program 4 (id=1490):
r0 = io_uring_setup(0x51d2, &(0x7f0000000100)={0x0, 0x631d, 0x800, 0x2, 0x3e0})
io_uring_register$IORING_REGISTER_FILES_UPDATE(r0, 0x6, &(0x7f00000005c0)={0x7, 0x1000000, &(0x7f0000000580)=[0xffffffffffffffff]}, 0x1)

1m23.596722952s ago: executing program 4 (id=1491):
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=@bridge_setlink={0x38, 0x13, 0xa2f, 0x70bd2b, 0x25cfdbfd, {0x7, 0x0, 0x68, r1, 0x16318}, [@IFLA_LINKINFO={0x18, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x8, 0x4, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4}]}}}]}, 0x38}}, 0x8004)

1m23.59640888s ago: executing program 4 (id=1492):
syz_open_dev$video4linux(&(0x7f0000000040), 0xc, 0x0)
pipe(&(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = socket$inet_udp(0x2, 0x2, 0x0)
close(r2)
socket$nl_route(0x10, 0x3, 0x0)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x40304580, &(0x7f0000000040)={0x0, 0x2000, 0x0, {0x0, 0xa}, {0x1}, @const={0x0, {0x0, 0x8, 0x2, 0x81}}})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4808000010001fff3a4ee9bfd5c3a3696c40af0b", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x3}}, 0x0)
write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc)
splice(r0, 0x0, r2, 0x0, 0x4ffe6, 0x0)

1m22.840177705s ago: executing program 1 (id=1494):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x94b, 0x4)
syz_emit_ethernet(0x6e, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x1, 0x6, '\x00\'$', 0x38, 0x3a, 0xff, @private0, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x500, {0x6, 0x6, ':yE', 0x2, 0x3a, 0x0, @empty, @mcast1, [], "8029335287b7a081"}}}}}}}, 0x0)
recvmmsg(r0, &(0x7f0000001740)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x2000, 0x0)

1m22.839651097s ago: executing program 1 (id=1495):
r0 = socket(0x2, 0x80805, 0x0)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={<r3=>r2, @in6={{0xa, 0x4e21, 0x4, @empty, 0xa}}}, &(0x7f0000000040)=0x84)
getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r3, 0x4, 0x7, 0xfffffff7}, &(0x7f0000000180)=0x10)

1m22.748980904s ago: executing program 1 (id=1496):
r0 = syz_open_dev$video4linux(&(0x7f0000000080), 0x82, 0x2800)
ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000000)={0x1, 0x0, {0xffffffff, 0x9b, 0x2017, 0x8, 0x1, 0xa, 0x2, 0x700}})

1m22.748712855s ago: executing program 1 (id=1497):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x1f, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x7}, [@call={0x85, 0x0, 0x0, 0x75}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x34}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48)

1m22.661799902s ago: executing program 1 (id=1498):
syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x3000000, &(0x7f0000000080), 0x1, 0x533, &(0x7f0000000b00)="$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")

1m22.661407489s ago: executing program 4 (id=1499):
recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, &(0x7f0000003b00)=[{&(0x7f0000002500)=""/192, 0x97}], 0x1}}], 0x1, 0x0, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)
r1 = fcntl$dupfd(r0, 0x0, r0)
sendmmsg$inet6(r1, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}]}}], 0x40000000000010e, 0x8001)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94)
poll(&(0x7f0000000000), 0x20000000000000b5, 0x9)

1m15.331930723s ago: executing program 4 (id=1500):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0)

1m7.116854347s ago: executing program 1 (id=1501):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f0000000200)=[{r0}, {r0, 0x5020}], 0x2, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1020affff20c311df259149e300", 0x10)
listen(r0, 0x0)
shutdown(r0, 0x0)

57.907688563s ago: executing program 34 (id=1460):
mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, <r1=>0x0, 0x0, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x10408, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f00000021c0)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003dc150f4000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f50000000000000000000000000000000000000000000000000000000000000000000000000000000000c6d90000000000001354c4b6000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a00", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x80101, 0x0)
fcntl$lock(r3, 0x7, &(0x7f0000000180)={0x1, 0x2, 0x9, 0x5, r2})

18.849865157s ago: executing program 35 (id=1501):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
ppoll(&(0x7f0000000200)=[{r0}, {r0, 0x5020}], 0x2, 0x0, 0x0, 0x0)
setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5766b1020affff20c311df259149e300", 0x10)
listen(r0, 0x0)
shutdown(r0, 0x0)

0s ago: executing program 36 (id=1500):
r0 = socket$nl_route(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x10)
sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@ipv4_newroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x0, 0xff}}, 0x1c}}, 0x0)

kernel console output (not intermixed with test programs):

[  115.986656][ T7153] loop0: detected capacity change from 0 to 1024
[  115.993416][ T7153] hfsplus: Unknown parameter '{
[  115.993416][ T7153] OB诗r4|K!BZ"Ek(a3.<8'
[  116.063209][   T47] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  116.237563][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  116.241750][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has an invalid bInterval 0, changing to 7
[  116.247227][   T47] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xDA, changing to 0x8A
[  116.251926][   T47] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid wMaxPacketSize 0
[  116.261895][   T47] usb 2-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  116.265839][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  116.269877][   T47] usb 2-1: SerialNumber: syz
[  116.279760][   T47] usb 2-1: config 0 descriptor??
[  116.389639][ T7162] Zero length message leads to an empty skb
[  116.519785][   T47] usb 2-1: USB disconnect, device number 10
[  116.678287][ T7166] loop3: detected capacity change from 0 to 512
[  118.001261][ T5951] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  118.165622][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 52, changing to 7
[  118.169290][ T5951] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 9272, setting to 1024
[  118.173064][ T5951] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  118.182977][ T5951] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  118.193606][ T5951] usb 1-1: config 0 descriptor??
[  118.428097][ T5951] ath6kl: Failed to submit usb control message: -71
[  118.433419][ T5951] ath6kl: unable to send the bmi data to the device: -71
[  118.438189][ T5951] ath6kl: Unable to send get target info: -71
[  118.457899][ T5951] ath6kl: Failed to init ath6kl core: -71
[  118.462095][ T5951] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  118.470552][ T5951] usb 1-1: USB disconnect, device number 8
[  119.057648][ T7295] process 'syz.0.528' launched './file0' with NULL argv: empty string added
[  119.835101][ T7310] F2FS-fs: Value of option "test_dummy_encryption" is unrecognized
[  120.232302][   T24] usb 4-1: new low-speed USB device number 3 using dummy_hcd
[  120.319758][ T7324] geneve2: entered promiscuous mode
[  120.322270][ T7324] geneve2: entered allmulticast mode
[  120.407991][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  120.411290][   T24] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  120.415483][   T24] usb 4-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  120.423068][   T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  120.428345][   T24] usb 4-1: config 0 descriptor??
[  120.436654][   T24] qmi_wwan 4-1:0.0: probe with driver qmi_wwan failed with error -22
[  120.565500][ T7333] loop0: detected capacity change from 0 to 4096
[  120.652101][ T5951] usb 4-1: USB disconnect, device number 3
[  120.844706][ T7335] loop0: detected capacity change from 0 to 32768
[  120.856533][ T7335] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.544 (7335)
[  120.873631][ T7335] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  120.877285][ T7335] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  120.913824][ T7335] BTRFS info (device loop0): enabling ssd optimizations
[  120.917018][ T7335] BTRFS info (device loop0): enabling free space tree
[  120.947028][ T5961] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  121.731193][ T7383] loop3: detected capacity change from 0 to 512
[  121.768208][ T7383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  121.774557][ T7383] ext4 filesystem being mounted at /53/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  121.818437][ T7388] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[  121.821858][ T7388] macsec1: entered promiscuous mode
[  121.828380][ T7388] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[  121.841291][ T7383] loop3: detected capacity change from 512 to 64
[  121.872624][ T7391] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Out of memory
[  121.884822][ T7391] EXT4-fs error (device loop3): ext4_ext_tree_init:883: inode #18: comm syz.3.558: mark_inode_dirty error
[  121.904137][ T7391] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Out of memory
[  121.924038][ T7391] EXT4-fs error (device loop3): __ext4_new_inode:1342: inode #18: comm syz.3.558: mark_inode_dirty error
[  121.930467][ T7391] EXT4-fs error (device loop3) in __ext4_new_inode:1344: Out of memory
[  121.938088][ T7391] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Out of memory
[  121.950363][ T7391] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #18: comm syz.3.558: mark_inode_dirty error
[  121.954404][ T7391] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -12)
[  121.996977][ T6695] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6334: Out of memory
[  122.032945][ T6695] EXT4-fs error (device loop3): ext4_dirty_inode:6538: inode #2: comm syz-executor: mark_inode_dirty error
[  122.066935][ T7400] capability: warning: `syz.1.565' uses deprecated v2 capabilities in a way that may be insecure
[  122.178169][ T7407] loop1: detected capacity change from 0 to 512
[  122.190934][ T7407] EXT4-fs warning (device loop1): ext4_multi_mount_protect:292: Invalid MMP block in superblock
[  122.304085][  T793] libceph: connect (1)[c::]:6789 error -101
[  122.307678][  T793] libceph: mon0 (1)[c::]:6789 connect error
[  122.313754][  T793] libceph: connect (1)[c::]:6789 error -101
[  122.316462][  T793] libceph: mon0 (1)[c::]:6789 connect error
[  122.467680][ T7419] 9pnet_fd: Insufficient options for proto=fd
[  122.483770][ T7419] loop0: detected capacity change from 0 to 16
[  122.489863][ T7419] erofs: Unknown parameter 'K،jxIE'
[  122.519677][ T5966] Bluetooth: hci2: command 0x0405 tx timeout
[  122.678961][ T7418] 9pnet_fd: Insufficient options for proto=fd
[  122.682437][ T5951] libceph: connect (1)[c::]:6789 error -101
[  122.684933][ T5951] libceph: mon0 (1)[c::]:6789 connect error
[  122.686900][   T33] audit: type=1326 audit(1757264564.755:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7410 comm="syz.1.571" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f3403f8ebe9 code=0x0
[  122.739532][ T7411] ceph: No mds server is up or the cluster is laggy
[  122.886807][ T6695] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  122.936367][ T5714] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  122.998228][ T5714] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.054716][ T5714] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.118223][ T5714] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  123.386296][ T5966] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  123.400003][ T5966] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  123.404162][ T5966] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  123.409778][ T5966] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  123.413855][ T5714] bridge_slave_1: left allmulticast mode
[  123.416047][ T5714] bridge_slave_1: left promiscuous mode
[  123.418576][ T5966] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  123.432124][ T5714] bridge0: port 2(bridge_slave_1) entered disabled state
[  123.449067][ T5714] bridge_slave_0: left allmulticast mode
[  123.455506][ T5714] bridge_slave_0: left promiscuous mode
[  123.459428][ T5714] bridge0: port 1(bridge_slave_0) entered disabled state
[  123.649336][ T7425] loop0: detected capacity change from 0 to 32768
[  123.679210][ T7425] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.575 (7425)
[  123.718319][ T7425] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  123.923581][ T7425] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  124.040015][ T7425] BTRFS info (device loop0): rebuilding free space tree
[  124.073257][ T7425] BTRFS info (device loop0): enabling ssd optimizations
[  124.076198][ T7425] BTRFS info (device loop0): using spread ssd allocation scheme
[  124.092059][ T7425] BTRFS info (device loop0): enabling free space tree
[  124.094926][ T7425] BTRFS info (device loop0): force clearing of disk cache
[  124.162508][ T5961] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  124.312701][ T5714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  124.328576][ T5714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  124.343157][ T5714] bond0 (unregistering): Released all slaves
[  124.441770][ T5714] tipc: Disabling bearer <udp:s>
[  124.452452][ T5714] tipc: Left network mode
[  124.536353][ T7455] loop1: detected capacity change from 0 to 512
[  124.546459][ T7455] EXT4-fs: Ignoring removed oldalloc option
[  124.594608][ T7455] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.580: Parent and EA inode have the same ino 15
[  124.602939][ T7455] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  124.608359][ T7455] EXT4-fs error (device loop1): ext4_xattr_inode_iget:433: comm syz.1.580: Parent and EA inode have the same ino 15
[  124.629947][ T7455] EXT4-fs (loop1): 1 orphan inode deleted
[  124.636582][ T7455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  124.665823][ T7455] EXT4-fs error (device loop1): ext4_lookup:1787: inode #15: comm syz.1.580: unexpected EA_INODE flag
[  124.740789][   T47] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  124.757334][ T5958] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  124.912584][   T47] usb 1-1: Using ep0 maxpacket: 32
[  124.917524][   T47] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  124.921555][ T5714] hsr_slave_0: left promiscuous mode
[  124.922529][   T47] usb 1-1: config 0 has no interface number 0
[  124.928352][ T5714] hsr_slave_1: left promiscuous mode
[  124.929456][   T47] usb 1-1: config 0 interface 12 has no altsetting 0
[  124.931704][ T5714] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  124.938304][   T47] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40
[  124.943069][   T47] usb 1-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3
[  124.945076][ T5714] batman_adv: batadv0: Removing interface: batadv_slave_0
[  124.946786][   T47] usb 1-1: Product: syz
[  124.951378][   T47] usb 1-1: Manufacturer: syz
[  124.952234][ T5714] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  124.953360][   T47] usb 1-1: SerialNumber: syz
[  124.961028][   T47] usb 1-1: config 0 descriptor??
[  124.965893][ T5714] batman_adv: batadv0: Removing interface: batadv_slave_1
[  125.002577][ T5714] veth1_macvtap: left promiscuous mode
[  125.005184][ T5714] veth0_macvtap: left promiscuous mode
[  125.022927][ T5714] veth1_vlan: left promiscuous mode
[  125.025137][ T5714] veth0_vlan: left promiscuous mode
[  125.456751][ T5714] team0 (unregistering): Port device team_slave_1 removed
[  125.503990][ T5714] team0 (unregistering): Port device team_slave_0 removed
[  125.616923][ T5236] Bluetooth: hci2: command tx timeout
[  126.110694][ T7426] chnl_net:caif_netlink_parms(): no params data found
[  126.343337][ T7426] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.355916][ T7426] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.359883][ T7426] bridge_slave_0: entered allmulticast mode
[  126.371619][ T7426] bridge_slave_0: entered promiscuous mode
[  126.381292][ T7426] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.384013][ T7426] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.392094][ T7426] bridge_slave_1: entered allmulticast mode
[  126.398824][ T7426] bridge_slave_1: entered promiscuous mode
[  126.459671][ T7426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  126.467866][ T7426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  126.503887][   T47] f81534 1-1:0.12: f81534_set_register: reg: 1002 data: 2f failed: -71
[  126.509629][   T47] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  126.512354][   T47] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  126.517000][   T47] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  126.522299][   T47] usb 1-1: USB disconnect, device number 9
[  126.542190][ T7426] team0: Port device team_slave_0 added
[  126.550721][ T7426] team0: Port device team_slave_1 added
[  126.575939][ T7426] batman_adv: batadv0: Adding interface: batadv_slave_0
[  126.578562][ T7426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.587519][ T7426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  126.595775][ T7426] batman_adv: batadv0: Adding interface: batadv_slave_1
[  126.598233][ T7426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  126.607278][ T7426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  126.640959][ T7426] hsr_slave_0: entered promiscuous mode
[  126.643654][ T7426] hsr_slave_1: entered promiscuous mode
[  126.646365][ T7426] debugfs: 'hsr0' already exists in 'hsr'
[  126.648497][ T7426] Cannot create hsr debugfs directory
[  126.781620][ T7426] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  126.786440][ T7426] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  126.792440][ T7426] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  126.797738][  T792] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  126.798999][ T7426] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  126.830318][ T7426] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.832945][ T7426] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.836147][ T7426] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.838685][ T7426] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.886697][ T7426] 8021q: adding VLAN 0 to HW filter on device bond0
[  126.898866][   T53] bridge0: port 1(bridge_slave_0) entered disabled state
[  126.902630][   T53] bridge0: port 2(bridge_slave_1) entered disabled state
[  126.911587][ T7426] 8021q: adding VLAN 0 to HW filter on device team0
[  126.922332][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  126.924852][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  126.941372][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  126.943991][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  126.965708][  T792] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  126.975296][  T792] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  126.990181][  T792] usb 2-1: config 0 descriptor??
[  127.202401][ T7520] loop0: detected capacity change from 0 to 1024
[  127.239841][ T7426] 8021q: adding VLAN 0 to HW filter on device batadv0
[  127.274135][   T53] hfsplus: b-tree write err: -5, ino 4
[  127.450164][  T792] ath6kl: Failed to submit usb control message: -71
[  127.452866][  T792] ath6kl: unable to send the bmi data to the device: -71
[  127.455610][  T792] ath6kl: Unable to send get target info: -71
[  127.474661][  T792] ath6kl: Failed to init ath6kl core: -71
[  127.477844][  T792] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71
[  127.510046][  T792] usb 2-1: USB disconnect, device number 11
[  127.632675][ T7426] veth0_vlan: entered promiscuous mode
[  127.639902][ T7426] veth1_vlan: entered promiscuous mode
[  127.673524][ T7426] veth0_macvtap: entered promiscuous mode
[  127.682615][ T7426] veth1_macvtap: entered promiscuous mode
[  127.699850][ T7426] batman_adv: batadv0: Interface activated: batadv_slave_0
[  127.714937][ T7426] batman_adv: batadv0: Interface activated: batadv_slave_1
[  127.723845][ T5714] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  127.730628][ T5714] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  127.735957][ T5714] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  127.741664][ T5714] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  127.823962][ T1093] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.834000][ T1093] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.864778][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  127.868757][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  127.872362][ T5236] Bluetooth: hci2: command tx timeout
[  128.300893][ T7573] loop0: detected capacity change from 0 to 256
[  128.317039][ T7573] exfat: Deprecated parameter 'namecase'
[  128.319370][ T7573] exfat: Deprecated parameter 'utf8'
[  128.337564][ T7573] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x22785e93, utbl_chksum : 0xe619d30d)
[  128.393831][   T47] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  128.639629][   T47] usb 5-1: Using ep0 maxpacket: 8
[  128.646143][   T47] usb 5-1: config 8 has an invalid interface number: 170 but max is 0
[  128.657912][   T47] usb 5-1: config 8 has no interface number 0
[  128.665903][   T47] usb 5-1: config 8 interface 170 altsetting 1 bulk endpoint 0xA has invalid maxpacket 32
[  128.669817][   T47] usb 5-1: config 8 interface 170 has no altsetting 0
[  128.675988][   T47] usb 5-1: New USB device found, idVendor=0d81, idProduct=1900, bcdDevice=1b.e1
[  128.679843][   T47] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  128.685113][   T47] usb 5-1: Product: syz
[  128.686839][   T47] usb 5-1: Manufacturer: syz
[  128.688753][   T47] usb 5-1: SerialNumber: syz
[  128.697097][ T7560] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  129.047899][ T7581] loop0: detected capacity change from 0 to 32768
[  129.077991][   T47] cdc_wdm 5-1:8.170: probe with driver cdc_wdm failed with error -22
[  129.124378][   T47] usb 5-1: USB disconnect, device number 2
[  129.192930][ T7581] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  129.237810][ T7581] XFS (loop0): Ending clean mount
[  129.265496][ T5961] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  129.604333][ T7602] loop0: detected capacity change from 0 to 32768
[  129.762130][ T7614] loop0: detected capacity change from 0 to 64
[  129.804982][ T7614] Trying to free block not in datazone
[  129.810545][ T7614] Trying to free block not in datazone
[  129.817914][ T7614] Trying to free block not in datazone
[  129.835138][ T7614] Trying to free block not in datazone
[  129.837648][ T7614] minix_free_inode: bit 5 already cleared
[  130.138145][ T5236] Bluetooth: hci2: command tx timeout
[  130.176446][ T7634] loop4: detected capacity change from 0 to 2048
[  130.208445][ T7634] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  130.230317][ T7636] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  130.243892][   T33] audit: type=1800 audit(1757264571.723:27): pid=7634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.631" name="file1" dev="loop4" ino=1346 res=0 errno=0
[  130.455946][ T7646] netlink: 'syz.4.637': attribute type 2 has an invalid length.
[  130.480127][ T7646] netlink: 24 bytes leftover after parsing attributes in process `syz.4.637'.
[  130.580972][ T7653] netlink: 'syz.1.640': attribute type 3 has an invalid length.
[  130.584451][ T7653] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.640'.
[  131.495252][ T7681] loop4: detected capacity change from 0 to 32768
[  131.513450][ T7690] loop0: detected capacity change from 0 to 1024
[  131.516274][ T7690] EXT4-fs: Ignoring removed nomblk_io_submit option
[  131.550405][ T7681] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  131.622256][ T7681] XFS (loop4): Ending clean mount
[  131.632152][ T7681] XFS (loop4): Quotacheck needed: Please wait.
[  131.642549][ T7690] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  131.669677][ T7681] XFS (loop4): Quotacheck: Done.
[  131.710744][ T5961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.754577][ T7426] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  132.061516][ T7709] loop4: detected capacity change from 0 to 1024
[  132.075512][ T7709] hfsplus: bad catalog entry type
[  132.144510][ T7713] mkiss: ax0: crc mode is auto.
[  132.182321][    T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  132.355168][    T9] usb 1-1: config 0 has an invalid interface number: 168 but max is 0
[  132.359862][    T9] usb 1-1: config 0 has no interface number 0
[  132.362365][    T9] usb 1-1: config 0 interface 168 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81
[  132.375835][    T9] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11
[  132.387003][    T9] usb 1-1: config 0 interface 168 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024
[  132.396435][    T9] usb 1-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=a8.a4
[  132.404895][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.408651][ T5236] Bluetooth: hci2: command tx timeout
[  132.412876][    T9] usb 1-1: config 0 descriptor??
[  132.415248][ T7707] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  132.441843][ T7723] loop4: detected capacity change from 0 to 32768
[  132.560692][ T7723] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  132.560713][ T7723]   allowing incompatible features above 0.0: (unknown version)
[  132.560721][ T7723]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  132.577506][ T7723] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  132.580909][ T7723] bcachefs (loop4): initializing new filesystem
[  132.594440][ T7723] bcachefs (loop4): going read-write
[  132.607183][ T7723] bcachefs (loop4): marking superblocks
[  132.622678][ T7723] bcachefs (loop4): initializing freespace
[  132.629560][ T7723] bcachefs (loop4): done initializing freespace
[  132.634526][ T7723] bcachefs (loop4): reading snapshots table
[  132.637612][ T7723] bcachefs (loop4): reading snapshots done
[  132.643872][    T9] usb 1-1: string descriptor 0 read error: -71
[  132.656235][    T9] keyspan 1-1:0.168: Keyspan 2 port adapter converter detected
[  132.665643][    T9] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 1
[  132.674806][ T7723] bcachefs (loop4): done starting filesystem
[  132.675458][    T9] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 84
[  132.689077][    T9] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 2
[  132.737270][    T9] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB0
[  132.758585][    T9] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 88
[  132.767337][    T9] keyspan 1-1:0.168: found no endpoint descriptor for endpoint 6
[  132.773146][    T9] usb 1-1: Keyspan 2 port adapter converter now attached to ttyUSB1
[  132.787518][    T9] usb 1-1: USB disconnect, device number 10
[  132.820898][ T7742] netlink: 24 bytes leftover after parsing attributes in process `syz.4.666'.
[  132.835177][    T9] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0
[  132.860809][    T9] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1
[  132.870527][    T9] keyspan 1-1:0.168: device disconnected
[  133.550271][ T7750] loop1: detected capacity change from 0 to 64
[  134.081506][ T7723] syz.4.666 (7723) used greatest stack depth: 16760 bytes left
[  134.102093][ T7426] bcachefs (loop4): shutting down
[  134.104525][ T7426] bcachefs (loop4): going read-only
[  134.106887][ T7426] bcachefs (loop4): finished waiting for writes to stop
[  134.114455][ T7426] bcachefs (loop4): flushing journal and stopping allocators, journal seq 3
[  134.140856][ T7426] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 4
[  134.147546][ T7426] bcachefs (loop4): clean shutdown complete, journal seq 5
[  134.153672][ T7426] bcachefs (loop4): marking filesystem clean
[  134.203521][ T7426] bcachefs (loop4): shutdown complete
[  134.287959][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  134.290641][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  134.315186][ T7769] netlink: 'syz.0.681': attribute type 6 has an invalid length.
[  134.582424][ T7787] loop1: detected capacity change from 0 to 128
[  134.945142][ T5946] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  134.966720][    T9] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  135.108688][ T5946] usb 1-1: Using ep0 maxpacket: 8
[  135.113368][ T5946] usb 1-1: config 11 has an invalid interface number: 95 but max is 0
[  135.116901][ T5946] usb 1-1: config 11 has no interface number 0
[  135.119838][ T5946] usb 1-1: config 11 interface 95 has no altsetting 0
[  135.126116][ T5946] usb 1-1: language id specifier not provided by device, defaulting to English
[  135.130269][    T9] usb 2-1: Using ep0 maxpacket: 16
[  135.137418][    T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[  135.141667][    T9] usb 2-1: config 0 has no interface number 0
[  135.145301][ T5946] usb 1-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d
[  135.149285][ T5946] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.154434][ T5946] usb 1-1: Product: syz
[  135.156321][ T5946] usb 1-1: SerialNumber: syz
[  135.158423][    T9] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[  135.164599][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  135.167990][    T9] usb 2-1: Product: syz
[  135.170065][    T9] usb 2-1: Manufacturer: syz
[  135.172095][    T9] usb 2-1: SerialNumber: syz
[  135.186975][    T9] usb 2-1: config 0 descriptor??
[  135.193467][    T9] gspca_main: spca1528-2.14.0 probing 04fc:1528
[  135.366842][ T7799] erspan0: entered promiscuous mode
[  135.413571][ T5946] usb 1-1: USB disconnect, device number 11
[  135.565570][ T7803] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.594003][ T7803] bridge_slave_0 (unregistering): left allmulticast mode
[  135.596885][ T7803] bridge_slave_0 (unregistering): left promiscuous mode
[  135.599727][ T7803] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.934307][ T7805] loop4: detected capacity change from 0 to 32768
[  135.940464][ T7805] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.698 (7805)
[  135.955100][ T7805] BTRFS info (device loop4): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  135.959308][ T7805] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  136.036321][ T7805] BTRFS info (device loop4): enabling ssd optimizations
[  136.042093][ T7805] BTRFS info (device loop4): enabling free space tree
[  136.045288][ T7805] BTRFS info (device loop4): use zstd compression, level 3
[  136.088372][    T9] gspca_spca1528: reg_w err -71
[  136.105295][    T9] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71
[  136.123793][    T9] usb 2-1: USB disconnect, device number 12
[  136.205955][ T7426] BTRFS info (device loop4): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  136.406307][ T7833] loop4: detected capacity change from 0 to 256
[  136.410435][ T7833] exfat: Deprecated parameter 'utf8'
[  136.412407][ T7833] exfat: Deprecated parameter 'namecase'
[  136.414385][ T7833] exfat: Deprecated parameter 'utf8'
[  136.421892][ T7833] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  136.467956][   T24] IPVS: starting estimator thread 0...
[  136.502878][ T7838] loop4: detected capacity change from 0 to 1024
[  136.506550][ T7838] EXT4-fs: Ignoring removed nomblk_io_submit option
[  136.509328][ T7838] EXT4-fs: Ignoring removed nomblk_io_submit option
[  136.522372][ T7838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  136.534676][ T7838] ext4 filesystem being mounted at /26/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  136.554410][ T7838] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  136.564962][ T7838] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 5 with error 28
[  136.572252][ T7838] EXT4-fs (loop4): This should not happen!! Data will be lost
[  136.572252][ T7838] 
[  136.572663][ T7836] IPVS: using max 89 ests per chain, 213600 per kthread
[  136.576226][ T7838] EXT4-fs (loop4): Total free blocks count 0
[  136.581422][ T7838] EXT4-fs (loop4): Free/Dirty block details
[  136.583981][ T7838] EXT4-fs (loop4): free_blocks=4293918720
[  136.586473][ T7838] EXT4-fs (loop4): dirty_blocks=16
[  136.588806][ T7838] EXT4-fs (loop4): Block reservation details
[  136.591419][ T7838] EXT4-fs (loop4): i_reserved_data_blocks=1
[  136.627113][ T7426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.706803][ T7845] netlink: 'syz.1.707': attribute type 8 has an invalid length.
[  136.780611][ T7847] loop1: detected capacity change from 0 to 128
[  136.796359][ T7847] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a84ec018, mo2=0002]
[  136.803642][ T7847] System zones: 1-3, 19-19, 35-36
[  136.810197][ T7847] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  136.818444][ T7847] ext4 filesystem being mounted at /230/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  136.842466][ T7847] EXT4-fs warning (device loop1): verify_group_input:137: Cannot add at group 809004035 (only 1 groups)
[  136.874446][ T5958] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  137.111807][   T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  137.269492][ T7861] loop1: detected capacity change from 0 to 16
[  137.282064][ T7861] erofs (device loop1): mounted with root inode @ nid 36.
[  137.290442][ T7861] erofs (device loop1): readahead error at folio 2 @ nid 89
[  137.293587][ T7861] erofs (device loop1): readahead error at folio 1 @ nid 89
[  137.297858][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  137.300387][ T7861] erofs (device loop1): readahead error at folio 0 @ nid 89
[  137.302807][   T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8E has invalid maxpacket 0
[  137.305367][ T7861] bio_check_eod: 73 callbacks suppressed
[  137.305379][ T7861] syz.1.713: attempt to access beyond end of device
[  137.305379][ T7861] loop1: rw=524288, sector=524296, nr_sectors = 8 limit=16
[  137.308953][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  137.311615][ T7861] erofs (device loop1): read error -117 @ 0 of nid 89
[  137.315818][   T24] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0xA has invalid maxpacket 0
[  137.322750][   T33] audit: type=1800 audit(1757264578.268:28): pid=7861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.713" name="file2" dev="loop1" ino=89 res=0 errno=0
[  137.331030][   T24] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  137.338411][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.343405][   T24] usb 1-1: Product: syz
[  137.345223][   T24] usb 1-1: Manufacturer: syz
[  137.347223][   T24] usb 1-1: SerialNumber: syz
[  137.352207][   T24] usb 1-1: config 0 descriptor??
[  137.358789][   T24] ums-isd200 1-1:0.0: USB Mass Storage device detected
[  137.596982][   T24] scsi host6: usb-storage 1-1:0.0
[  137.845183][    T9] usb 1-1: USB disconnect, device number 12
[  138.235905][ T7892] overlayfs: The uuid=off requires a single fs for lower and upper, falling back to uuid=null.
[  138.241980][ T7892] overlayfs: overlapping lowerdir path
[  138.761430][ T7894] loop4: detected capacity change from 0 to 32768
[  138.923483][ T7894] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[  138.923576][ T7894]   allowing incompatible features above 0.0: (unknown version)
[  138.923584][ T7894]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  138.939798][ T7894] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[  138.942856][ T7894] bcachefs (loop4): recovering from clean shutdown, journal seq 10
[  138.946314][ T7894] bcachefs (loop4): Version upgrade required:
[  138.946314][ T7894] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[  138.946314][ T7894] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[  138.946314][ T7894]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[  138.977656][ T7894] bcachefs (loop4): dropping and reconstructing all alloc info
[  139.018079][ T7894] bcachefs (loop4): accounting_read... done
[  139.024567][ T7894] bcachefs (loop4): alloc_read... done
[  139.028529][ T7894] bcachefs (loop4): snapshots_read... done
[  139.032386][ T7894] bcachefs (loop4): check_allocations... done
[  139.061032][ T7894] bcachefs (loop4): going read-write
[  139.082245][ T7894] bcachefs (loop4): done starting filesystem
[  139.440677][ T7921] program syz.1.731 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  139.444736][ T7426] bcachefs (loop4): shutting down
[  139.454718][ T7426] bcachefs (loop4): going read-only
[  139.456506][ T7426] bcachefs (loop4): finished waiting for writes to stop
[  139.470140][ T7426] bcachefs (loop4): flushing journal and stopping allocators, journal seq 10
[  139.483514][ T7426] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 10
[  139.525856][ T7426] bcachefs (loop4): unclean shutdown complete, journal seq 11
[  139.535652][ T7426] bcachefs (loop4): done going read-only, filesystem not clean
[  139.607800][ T7426] bcachefs (loop4): shutdown complete
[  139.820978][   T47] usb 2-1: new full-speed USB device number 13 using dummy_hcd
[  140.002460][   T47] usb 2-1: unable to get BOS descriptor or descriptor too short
[  140.008902][   T47] usb 2-1: not running at top speed; connect to a high speed hub
[  140.018593][   T47] usb 2-1: config 3 has an invalid interface number: 106 but max is 0
[  140.022636][   T47] usb 2-1: config 3 has no interface number 0
[  140.025546][   T47] usb 2-1: config 3 interface 106 altsetting 10 endpoint 0xD has invalid maxpacket 512, setting to 64
[  140.031411][   T47] usb 2-1: config 3 interface 106 has no altsetting 0
[  140.045763][   T47] usb 2-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice=e8.8a
[  140.049889][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.053259][   T47] usb 2-1: Product: syz
[  140.055096][   T47] usb 2-1: Manufacturer: syz
[  140.057045][   T47] usb 2-1: SerialNumber: syz
[  140.086128][ T7926] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  140.346428][   T47] kobil_sct 2-1:3.106: KOBIL USB smart card terminal converter detected
[  140.382021][   T47] usb 2-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  140.418521][   T47] usb 2-1: USB disconnect, device number 13
[  140.440786][   T47] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  140.446974][   T47] kobil_sct 2-1:3.106: device disconnected
[  141.178788][ T7949] netlink: 4 bytes leftover after parsing attributes in process `syz.1.736'.
[  141.182445][ T7949] netlink: 6 bytes leftover after parsing attributes in process `syz.1.736'.
[  143.210303][ T7981] loop1: detected capacity change from 0 to 256
[  143.247180][ T7981] FAT-fs (loop1): Directory bread(block 64) failed
[  143.250275][ T7981] FAT-fs (loop1): Directory bread(block 65) failed
[  143.253191][ T7981] FAT-fs (loop1): Directory bread(block 66) failed
[  143.256809][ T7981] FAT-fs (loop1): Directory bread(block 67) failed
[  143.260063][ T7981] FAT-fs (loop1): Directory bread(block 68) failed
[  143.263005][ T7981] FAT-fs (loop1): Directory bread(block 69) failed
[  143.266762][ T7981] FAT-fs (loop1): Directory bread(block 70) failed
[  143.269696][ T7981] FAT-fs (loop1): Directory bread(block 71) failed
[  143.272572][ T7981] FAT-fs (loop1): Directory bread(block 72) failed
[  143.275290][ T7981] FAT-fs (loop1): Directory bread(block 73) failed
[  143.386412][   T10] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  143.559726][   T10] usb 1-1: Using ep0 maxpacket: 16
[  143.564879][   T10] usb 1-1: unable to get BOS descriptor or descriptor too short
[  143.571540][   T10] usb 1-1: config 1 has an invalid interface number: 231 but max is 0
[  143.574763][   T10] usb 1-1: config 1 has no interface number 0
[  143.577217][   T10] usb 1-1: config 1 interface 231 has no altsetting 0
[  143.586069][   T10] usb 1-1: string descriptor 0 read error: -22
[  143.588551][   T10] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice=5c.f5
[  143.591875][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.823392][   T10] usbtest 1-1:1.231: Linux gadget zero
[  143.825716][   T10] usbtest 1-1:1.231: high-speed {control in/out int-out} tests (+alt)
[  143.854525][   T33] audit: type=1326 audit(1757264584.295:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.750" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7b38ebe9 code=0x7ffc0000
[  143.864880][   T33] audit: type=1326 audit(1757264584.295:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.750" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7b38ebe9 code=0x7ffc0000
[  143.871875][   T33] audit: type=1326 audit(1757264584.304:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.750" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e7b38ebe9 code=0x7ffc0000
[  143.882813][   T33] audit: type=1326 audit(1757264584.304:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.750" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7b38ebe9 code=0x7ffc0000
[  143.892595][   T33] audit: type=1326 audit(1757264584.304:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.750" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7b38ebe9 code=0x7ffc0000
[  143.901684][   T33] audit: type=1326 audit(1757264584.304:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.750" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e7b38ebe9 code=0x7ffc0000
[  143.912863][   T33] audit: type=1326 audit(1757264584.304:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.750" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7b38ebe9 code=0x7ffc0000
[  143.922608][ T7985] loop4: detected capacity change from 0 to 1024
[  143.927251][   T33] audit: type=1326 audit(1757264584.304:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.750" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7b38ebe9 code=0x7ffc0000
[  143.935652][   T33] audit: type=1326 audit(1757264584.304:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.750" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f3e7b38ebe9 code=0x7ffc0000
[  143.944878][   T33] audit: type=1326 audit(1757264584.304:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7984 comm="syz.4.750" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7b38ebe9 code=0x7ffc0000
[  143.963117][ T7985] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.056800][   T24] usb 1-1: USB disconnect, device number 13
[  144.072170][ T7985] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:4183: comm syz.4.750: Allocating blocks 497-513 which overlap fs metadata
[  144.263752][ T7985] EXT4-fs (loop4): pa ffff88810354b9f8: logic 32, phys. 161, len 22
[  144.266597][ T7985] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  144.277843][ T7985] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 97:freeing already freed block (bit 6); block bitmap corrupt.
[  144.398655][ T7426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.950542][ T8006] loop0: detected capacity change from 0 to 1024
[  144.960101][ T8006] EXT4-fs: Ignoring removed bh option
[  144.969899][    T9] kernel read not supported for file /dsp1 (pid: 9 comm: kworker/0:0)
[  144.991476][ T8006] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  145.022412][ T8006] EXT4-fs: Ignoring removed orlov option
[  145.027749][ T8006] EXT4-fs error (device loop0): __ext4_remount:6740: comm syz.0.756: Abort forced by user
[  145.034163][ T8006] EXT4-fs (loop0): Remounting filesystem read-only
[  145.037064][ T8006] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-001000000000.
[  145.083541][ T5961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  145.164301][ T8012] loop1: detected capacity change from 0 to 1024
[  145.595528][ T8017] loop1: detected capacity change from 0 to 32768
[  145.607171][ T8017] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.760 (8017)
[  145.635568][ T8017] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  145.639600][ T8017] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  145.693127][ T8017] BTRFS info (device loop1): enabling ssd optimizations
[  145.697431][ T8017] BTRFS info (device loop1): enabling free space tree
[  145.796052][ T5958] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  146.098810][ T8044] loop1: detected capacity change from 0 to 32768
[  146.112371][ T8044] (syz.1.764,8044,1):ocfs2_initialize_super:2019 ERROR: Invalid number of node slots (0)
[  146.127308][ T8044] (syz.1.764,8044,1):ocfs2_fill_super:1177 ERROR: status = -22
[  147.423623][ T8080] loop0: detected capacity change from 0 to 4096
[  147.433784][ T8080] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  147.561615][ T8080] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  147.566662][ T8080] ntfs3(loop0): Failed to load $Extend (-22).
[  147.570531][ T8080] ntfs3(loop0): Failed to initialize $Extend.
[  147.754113][ T8090] netlink: 24 bytes leftover after parsing attributes in process `syz.1.784'.
[  147.788934][ T8092] loop0: detected capacity change from 0 to 1024
[  147.928754][   T26] hfsplus: b-tree write err: -5, ino 4
[  148.714286][ T8111] loop0: detected capacity change from 0 to 1024
[  148.891825][ T1091] hfsplus: b-tree write err: -5, ino 4
[  149.632257][ T8140] binder: BINDER_SET_CONTEXT_MGR already set
[  149.668836][ T8140] binder: 8139:8140 ioctl 4018620d 200000000040 returned -16
[  150.019863][   T33] kauditd_printk_skb: 67 callbacks suppressed
[  150.019883][   T33] audit: type=1326 audit(1757264589.980:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652a58ebe9 code=0x7ffc0000
[  150.036472][   T33] audit: type=1326 audit(1757264589.980:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652a58ebe9 code=0x7ffc0000
[  150.046305][   T33] audit: type=1326 audit(1757264589.980:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f652a58ebe9 code=0x7ffc0000
[  150.063416][   T33] audit: type=1326 audit(1757264589.980:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652a58ebe9 code=0x7ffc0000
[  150.073127][   T33] audit: type=1326 audit(1757264589.980:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652a58ebe9 code=0x7ffc0000
[  150.082283][   T33] audit: type=1326 audit(1757264589.980:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f652a58ebe9 code=0x7ffc0000
[  150.092898][ T8143] loop0: detected capacity change from 0 to 1024
[  150.107067][   T33] audit: type=1326 audit(1757264589.980:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652a58ebe9 code=0x7ffc0000
[  150.120480][ T8143] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.121406][   T33] audit: type=1326 audit(1757264589.980:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f652a58ebe9 code=0x7ffc0000
[  150.174085][   T33] audit: type=1326 audit(1757264589.980:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652a58ebe9 code=0x7ffc0000
[  150.197111][   T33] audit: type=1326 audit(1757264589.980:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.0.806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f652a58ebe9 code=0x7ffc0000
[  150.207688][ T8143] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4183: comm syz.0.806: Allocating blocks 497-513 which overlap fs metadata
[  150.835202][ T8143] EXT4-fs (loop0): pa ffff88810354be80: logic 32, phys. 161, len 22
[  150.838769][ T8143] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 1
[  150.850026][ T8143] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 15: block 97:freeing already freed block (bit 6); block bitmap corrupt.
[  150.973552][ T5961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  151.658466][   T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  151.913901][   T24] usb 5-1: config 0 has an invalid interface number: 84 but max is 0
[  151.917736][   T24] usb 5-1: config 0 has no interface number 0
[  151.925429][   T24] usb 5-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice=ca.f3
[  151.929600][   T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  151.933322][   T24] usb 5-1: Product: syz
[  151.935437][   T24] usb 5-1: Manufacturer: syz
[  151.937698][   T24] usb 5-1: SerialNumber: syz
[  151.947463][   T24] usb 5-1: config 0 descriptor??
[  151.952768][   T24] ljca 5-1:0.84: bulk endpoints not found
[  152.198661][ T8172] loop4: detected capacity change from 0 to 8
[  152.256572][ T8172] unable to read inode lookup table
[  152.265989][ T5951] usb 5-1: USB disconnect, device number 3
[  152.487776][ T8202] loop0: detected capacity change from 0 to 4096
[  152.493466][ T8202] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  152.524072][ T8202] ntfs3(loop0): ino=19, mi_enum_attr
[  152.529503][ T8202] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  152.563766][ T8202] ntfs3(loop0): failed to convert "c46c" to iso8859-9
[  152.570361][ T8202] ntfs3(loop0): ino=20, mi_enum_attr
[  152.616386][ T8208] syz.1.831 uses obsolete (PF_INET,SOCK_PACKET)
[  152.734569][ T8212] loop0: detected capacity change from 0 to 4096
[  152.766088][ T8215] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  152.965583][ T8212] sctp: [Deprecated]: syz.0.833 (pid 8212) Use of struct sctp_assoc_value in delayed_ack socket option.
[  152.965583][ T8212] Use struct sctp_sack_info instead
[  153.358513][ T8232] loop4: detected capacity change from 0 to 4096
[  153.425015][ T8232] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  153.560674][ T8232] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.574264][ T8232] EXT4-fs (loop4): shut down requested (2)
[  153.604474][ T7426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  153.695111][ T8237] loop0: detected capacity change from 0 to 512
[  153.740871][ T8237] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  153.762428][ T8237] ext4 filesystem being mounted at /274/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  153.863157][ T8244] netlink: 392 bytes leftover after parsing attributes in process `syz.4.844'.
[  153.981821][ T8249] netlink: 'syz.1.846': attribute type 2 has an invalid length.
[  154.287264][ T8252] loop4: detected capacity change from 0 to 4096
[  154.313799][ T8255] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  154.429594][ T8258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.849'.
[  154.523399][ T8262] loop4: detected capacity change from 0 to 1024
[  154.572229][ T1234] hfsplus: b-tree write err: -5, ino 8
[  154.690096][ T5961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  154.732478][ T8266] loop4: detected capacity change from 0 to 2048
[  154.742936][ T8266] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  154.759320][ T8266] UDF-fs: error (device loop4): udf_truncate_tail_extent: Extent after EOF in inode 1367
[  155.003699][ T8280] loop0: detected capacity change from 0 to 128
[  155.047018][ T8282] loop4: detected capacity change from 0 to 2048
[  155.058345][ T8282] NILFS (loop4): broken superblock, retrying with spare superblock (blocksize = 1024)
[  155.062873][ T8282] NILFS (loop4): mounting unchecked fs
[  155.066965][ T6995] udevd[6995]: incorrect nilfs2 checksum on /dev/loop4
[  155.088759][ T6995] udevd[6995]: incorrect nilfs2 checksum on /dev/loop4
[  155.090685][ T8282] NILFS (loop4): recovery complete
[  155.099496][ T8283] NILFS (loop4): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  155.243761][ T8289] loop0: detected capacity change from 0 to 22
[  155.251373][ T8289] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  155.267772][ T8289] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  155.305064][ T8289] MTD: Attempt to mount non-MTD device "./file0"
[  155.404844][ T8289] ./file0: Can't open blockdev
[  155.463937][ T8302] loop0: detected capacity change from 0 to 8
[  156.038800][ T8314] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  156.447514][ T8328] netlink: 'syz.4.880': attribute type 9 has an invalid length.
[  156.462909][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  156.646160][    T9] usb 2-1: Using ep0 maxpacket: 16
[  156.651974][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7
[  156.656611][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  156.664460][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  156.668643][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.672024][    T9] usb 2-1: Product: syz
[  156.673778][    T9] usb 2-1: Manufacturer: syz
[  156.675807][    T9] usb 2-1: SerialNumber: syz
[  156.834420][ T8340] loop4: detected capacity change from 0 to 1024
[  156.838857][ T8340] EXT4-fs: Ignoring removed orlov option
[  156.848769][ T8340] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  156.866529][ T8340] EXT4-fs: Ignoring sb option on remount
[  156.868389][ T8340] EXT4-fs: Ignoring removed orlov option
[  156.870431][ T8340] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[  156.873813][ T8340] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  156.878787][ T8340] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  156.907064][    T9] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  156.909762][ T7426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  156.926953][    T9] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  156.963704][    T9] usb 2-1: USB disconnect, device number 14
[  156.996338][ T6995] udevd[6995]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  157.805303][    T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  157.978843][    T9] usb 2-1: Using ep0 maxpacket: 8
[  157.985944][    T9] usb 2-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d
[  157.991845][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  157.998338][    T9] usb 2-1: Product: syz
[  158.000820][    T9] usb 2-1: Manufacturer: syz
[  158.003040][    T9] usb 2-1: SerialNumber: syz
[  158.007576][    T9] usb 2-1: config 0 descriptor??
[  158.024035][    T9] gspca_main: sonixj-2.14.0 probing 0c45:613e
[  158.320034][ T8369] bridge_slave_1: left allmulticast mode
[  158.322608][ T8369] bridge_slave_1: left promiscuous mode
[  158.328362][ T8369] bridge0: port 2(bridge_slave_1) entered disabled state
[  158.337924][ T8369] bond0: (slave bond_slave_0): Releasing backup interface
[  158.344349][ T8369] bond0: (slave bond_slave_1): Releasing backup interface
[  158.361947][ T8369] team0: Port device team_slave_0 removed
[  158.369662][ T8369] team0: Port device team_slave_1 removed
[  158.373465][ T8369] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  158.376757][ T8369] batman_adv: batadv0: Removing interface: batadv_slave_0
[  158.386774][ T8369] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  158.393192][ T8369] batman_adv: batadv0: Removing interface: batadv_slave_1
[  158.589504][ T5850] kernel write not supported for file /snd/seq (pid: 5850 comm: kworker/1:3)
[  158.672346][ T8380] bpf: Bad value for 'gid'
[  158.710613][ T8382] netlink: 44 bytes leftover after parsing attributes in process `syz.4.904'.
[  158.869372][ T8388] loop0: detected capacity change from 0 to 512
[  158.900146][ T8388] EXT4-fs (loop0): mounting ext2 file system using the ext4 subsystem
[  158.916563][ T8388] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.907: iget: bogus i_mode (5)
[  158.926835][ T8388] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.907: couldn't read orphan inode 15 (err -117)
[  158.935475][ T8388] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  158.941146][ T8388] ext2 filesystem being mounted at /284/file2 supports timestamps until 2038-01-19 (0x7fffffff)
[  159.035814][ T5961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  159.097049][ T8394] loop0: detected capacity change from 0 to 256
[  159.124045][    T9] gspca_sonixj: reg_w1 err -71
[  159.171985][ T5850] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  159.181739][    T9] sonixj 2-1:0.0: probe with driver sonixj failed with error -71
[  159.190910][    T9] usb 2-1: USB disconnect, device number 15
[  159.441178][ T5850] usb 5-1: Using ep0 maxpacket: 8
[  159.449270][ T5850] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d
[  159.452619][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  159.455474][ T5850] usb 5-1: Product: syz
[  159.456850][ T5850] usb 5-1: Manufacturer: syz
[  159.458402][ T5850] usb 5-1: SerialNumber: syz
[  159.461381][ T5850] usb 5-1: config 0 descriptor??
[  159.466308][ T5850] gspca_main: sonixj-2.14.0 probing 0c45:613a
[  160.834546][   T10] usb 5-1: USB disconnect, device number 4
[  160.923261][ T8413] loop1: detected capacity change from 0 to 1024
[  160.943016][ T8413] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  160.961312][ T8413] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:4183: comm syz.1.916: Allocating blocks 385-513 which overlap fs metadata
[  160.971495][ T8413] EXT4-fs (loop1): pa ffff8880290e2e80: logic 16, phys. 129, len 24
[  160.974896][ T8413] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:5434: group 0, free 0, pa_free 8
[  161.016666][ T5958] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  161.439417][ T8437] netlink: 104 bytes leftover after parsing attributes in process `syz.4.926'.
[  161.461137][ T8436] loop1: detected capacity change from 0 to 2048
[  161.522329][ T8442] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  161.545398][ T8436] NILFS error (device loop1): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0
[  161.556951][ T8441] loop4: detected capacity change from 0 to 8192
[  161.560413][ T8436] Remounting filesystem read-only
[  161.592535][ T8441]  loop4: p1 p3 < > p4 < p5 >
[  161.594553][ T8441] loop4: partition table partially beyond EOD, truncated
[  161.626885][ T8441] loop4: p3 start 100859904 is beyond EOD, truncated
[  161.871080][ T8458] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  161.995872][ T8467] netlink: 'syz.4.939': attribute type 1 has an invalid length.
[  162.005370][ T8467] netlink: 232 bytes leftover after parsing attributes in process `syz.4.939'.
[  162.018424][ T8467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.939'.
[  162.112675][ T8474] loop4: detected capacity change from 0 to 2048
[  162.158731][ T8474] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.163504][ T8474] ext4 filesystem being mounted at /113/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  162.212557][ T7426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.224076][ T8471] loop1: detected capacity change from 0 to 32768
[  163.064789][ T5850] Process accounting resumed
[  163.255919][ T8534] loop4: detected capacity change from 0 to 1024
[  163.284054][ T8534] hfsplus: unable to load nls mapping ""
[  163.300586][ T8537] virtio-fs: tag </dev/loop1> not found
[  163.412365][ T8539] loop4: detected capacity change from 0 to 1764
[  163.442628][ T8539] iso9660: Unknown parameter 'check'
[  163.857621][    T9] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  164.018095][    T9] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  164.022648][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  164.030010][    T9] usb 5-1: config 0 descriptor??
[  164.037718][    T9] cp210x 5-1:0.0: cp210x converter detected
[  164.451941][   T10] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[  164.468093][   T10] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  164.480068][    T9] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  164.499829][    T9] usb 5-1: cp210x converter now attached to ttyUSB0
[  164.703694][ T8551] loop1: detected capacity change from 0 to 40427
[  164.714107][    T9] usb 5-1: USB disconnect, device number 5
[  164.723615][ T8551] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  164.726881][ T8551] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  164.732296][    T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  164.746213][    T9] cp210x 5-1:0.0: device disconnected
[  164.748561][ T8551] F2FS-fs (loop1): invalid crc value
[  164.802804][ T8551] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  164.813225][ T8551] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  164.816976][ T8551] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  165.099219][ T8563] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3)
[  165.102062][ T8563] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless)
[  165.108446][ T8563] vhci_hcd vhci_hcd.0: Device attached
[  165.111887][ T8564] vhci_hcd: connection closed
[  165.114856][ T5714] vhci_hcd: stop threads
[  165.118669][ T5714] vhci_hcd: release socket
[  165.120271][ T5714] vhci_hcd: disconnect device
[  167.064744][ T8601] loop0: detected capacity change from 0 to 1024
[  167.113758][ T8601] EXT4-fs: inline encryption not supported
[  167.118469][ T8601] EXT4-fs: Ignoring removed bh option
[  167.129683][ T8605] loop4: detected capacity change from 0 to 1024
[  167.143323][ T8605] hfsplus: extend alloc file! (16384,256,150995124)
[  167.166984][ T8601] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  167.197127][   T33] kauditd_printk_skb: 65 callbacks suppressed
[  167.197147][   T33] audit: type=1800 audit(1757264605.840:181): pid=8601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.992" name="bus" dev="loop0" ino=18 res=0 errno=0
[  167.265980][ T8601] EXT4-fs error (device loop0): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[  167.285609][ T8601] EXT4-fs (loop0): Remounting filesystem read-only
[  167.337006][ T5961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.344023][ T8618] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  167.486979][   T33] audit: type=1804 audit(1757264606.108:182): pid=8626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1003" name="/newroot/308/file0" dev="tmpfs" ino=1624 res=1 errno=0
[  167.539517][    T9] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  167.578482][ T8630] program syz.0.1006 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  167.634309][ T8634] loop0: detected capacity change from 0 to 8192
[  167.700268][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  167.721091][    T9] usb 2-1: config 3 has an invalid interface number: 8 but max is 3
[  167.724620][    T9] usb 2-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  167.728937][    T9] usb 2-1: config 3 has 1 interface, different from the descriptor's value: 4
[  167.737306][    T9] usb 2-1: config 3 has no interface number 0
[  167.740429][    T9] usb 2-1: config 3 interface 8 altsetting 6 endpoint 0x82 has an invalid bInterval 52, changing to 9
[  167.745481][    T9] usb 2-1: config 3 interface 8 altsetting 6 endpoint 0x82 has invalid maxpacket 8241, setting to 1024
[  167.750187][    T9] usb 2-1: config 3 interface 8 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  167.777687][    T9] usb 2-1: config 3 interface 8 has no altsetting 0
[  167.782949][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=921d, bcdDevice=c2.be
[  167.788875][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.792272][    T9] usb 2-1: Product: syz
[  167.794179][    T9] usb 2-1: Manufacturer: syz
[  167.796683][    T9] usb 2-1: SerialNumber: syz
[  167.835703][ T8640] sch_fq: defrate 4294967295 ignored.
[  168.039861][    T9] appledisplay 2-1:3.8: Error while getting initial brightness: -71
[  168.047710][    T9] appledisplay 2-1:3.8: probe with driver appledisplay failed with error -71
[  168.054147][    T9] usb 2-1: USB disconnect, device number 16
[  168.162877][ T5850] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  168.574722][ T5850] usb 5-1: Using ep0 maxpacket: 32
[  168.581606][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  168.587415][ T5850] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  168.592451][ T5850] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  168.598177][ T5850] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  168.606775][ T5850] usb 5-1: config 0 descriptor??
[  168.629898][ T5850] hub 5-1:0.0: USB hub found
[  168.848523][ T5850] hub 5-1:0.0: 1 port detected
[  169.204409][ T8660] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1017'.
[  169.428103][ T8664] loop0: detected capacity change from 0 to 32768
[  169.452596][ T8664] ea_get: invalid extended attribute
[  169.512566][ T5850] hub 5-1:0.0: activate --> -90
[  169.960028][   T47] usb 5-1: USB disconnect, device number 6
[  169.970181][ T8674] loop1: detected capacity change from 0 to 32768
[  169.974583][ T8674] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1024 (8674)
[  169.987929][ T8674] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  169.991317][ T8674] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  170.017112][ T8674] BTRFS info (device loop1): rebuilding free space tree
[  170.024406][ T8674] BTRFS info (device loop1): allowing degraded mounts
[  170.027289][ T8674] BTRFS info (device loop1): enabling ssd optimizations
[  170.029594][ T8674] BTRFS info (device loop1): enabling free space tree
[  170.032391][ T8674] BTRFS info (device loop1): force clearing of disk cache
[  170.034737][ T8674] BTRFS info (device loop1): use zstd compression, level 3
[  170.037451][ T8674] BTRFS info (device loop1): max_inline set to 0
[  170.064880][   T33] audit: type=1800 audit(1757264608.489:183): pid=8674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1024" name="bus" dev="loop1" ino=263 res=0 errno=0
[  170.155471][ T5958] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  170.221426][ T5850] usb 5-1-port1: config error
[  170.379088][ T8692] loop1: detected capacity change from 0 to 512
[  170.383089][ T8692] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  170.388928][ T8692] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e12c, mo2=0002]
[  170.391824][ T8692] EXT4-fs (loop1): orphan cleanup on readonly fs
[  170.399753][ T8692] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm syz.1.1025: bg 0: block 361: padding at end of block bitmap is not set
[  170.408298][ T8692] EXT4-fs (loop1): Remounting filesystem read-only
[  170.412071][ T8692] EXT4-fs (loop1): 1 truncate cleaned up
[  170.414667][ T8692] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[  170.423139][ T8692] EXT4-fs warning (device loop1): dx_probe:861: inode #2: comm syz.1.1025: dx entry: limit 0 != root limit 125
[  170.431482][ T8692] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.1025: Corrupt directory, running e2fsck is recommended
[  170.447277][ T5958] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  170.602538][ T8702] netlink: 452 bytes leftover after parsing attributes in process `syz.1.1029'.
[  170.842916][ T8708] netlink: 'syz.4.1032': attribute type 21 has an invalid length.
[  170.845964][ T8708] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1032'.
[  171.478326][    T9] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  171.651742][    T9] usb 5-1: Using ep0 maxpacket: 8
[  171.661767][    T9] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  171.665857][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  171.669309][    T9] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  171.673561][    T9] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  171.678176][    T9] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  171.681250][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  171.908173][    T9] usb 5-1: usb_control_msg returned -32
[  171.910997][    T9] usbtmc 5-1:16.0: can't read capabilities
[  172.258090][   T47] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  172.299867][ T8728] usbtmc 5-1:16.0: INDICATOR_PULSE returned 0
[  172.423353][   T47] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  172.427906][   T47] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2
[  172.432020][   T47] usb 2-1: New USB device found, idVendor=05d8, idProduct=810a, bcdDevice=92.b8
[  172.437133][   T47] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  172.446017][   T47] usb 2-1: config 0 descriptor??
[  172.451649][   T47] dvb-usb: found a 'Artec T1 USB2.0' in warm state.
[  172.454731][   T47] dvb-usb: bulk message failed: -22 (3/0)
[  172.461685][   T47] dvb-usb: will use the device's hardware PID filter (table count: 16).
[  172.467638][   T47] dvbdev: DVB: registering new adapter (Artec T1 USB2.0)
[  172.470762][   T47] usb 2-1: media controller created
[  172.476244][   T47] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  172.491895][   T47] dvb-usb: bulk message failed: -22 (6/0)
[  172.495729][   T47] dvb-usb: no frontend was attached by 'Artec T1 USB2.0'
[  172.503714][   T47] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input9
[  172.517601][   T47] dvb-usb: schedule remote query interval to 150 msecs.
[  172.518899][    T9] usb 5-1: USB disconnect, device number 7
[  172.523435][   T47] dvb-usb: Artec T1 USB2.0 successfully initialized and connected.
[  172.673844][   T10] usb 2-1: USB disconnect, device number 17
[  172.696513][   T10] dvb-usb: Artec T1 USB2.0 successfully deinitialized and disconnected.
[  173.389917][ T8745] binder_alloc: 8744: pid 8744 spamming oneway? 1 buffers allocated for a total size of 4096
[  173.479705][ T8749] loop0: detected capacity change from 0 to 4096
[  173.484912][ T8749] ntfs3(loop0): try to read out of volume at offset 0x200800
[  173.489711][ T8749] ntfs3(loop0): Failed to load $Volume (-5).
[  173.622859][   T33] audit: type=1326 audit(1757264611.775:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8756 comm="syz.0.1054" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f652a58ebe9 code=0x0
[  173.707070][ T8763] netlink: 'syz.0.1057': attribute type 1 has an invalid length.
[  173.717215][ T8763] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1057'.
[  173.775808][ T8770] netlink: 316 bytes leftover after parsing attributes in process `syz.4.1060'.
[  173.996255][ T8773] loop4: detected capacity change from 0 to 32768
[  174.002575][ T8773] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1062 (8773)
[  174.010979][ T8773] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  174.012345][ T8783] loop0: detected capacity change from 0 to 4096
[  174.015016][ T8773] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  174.029842][ T8783] ntfs3(loop0): Different NTFS sector size (1024) and media sector size (512).
[  174.062539][ T8783] ntfs3(loop0): Failed to load $Extend (-22).
[  174.064913][ T8783] ntfs3(loop0): Failed to initialize $Extend.
[  174.070208][ T8773] BTRFS info (device loop4): enabling ssd optimizations
[  174.072653][ T8773] BTRFS info (device loop4): enabling free space tree
[  174.572762][ T8803] loop0: detected capacity change from 0 to 1024
[  174.633237][ T8803] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.857690][ T7426] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  174.959240][ T8811] loop1: detected capacity change from 0 to 32768
[  174.986743][ T8811] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1070 (8811)
[  175.056059][ T8811] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  175.073665][ T8811] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  175.180716][ T8811] BTRFS info (device loop1): rebuilding free space tree
[  175.227326][ T5961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.246828][ T8811] BTRFS info (device loop1): allowing degraded mounts
[  175.250466][ T8811] BTRFS info (device loop1): enabling ssd optimizations
[  175.261671][ T8811] BTRFS info (device loop1): enabling free space tree
[  175.264606][ T8811] BTRFS info (device loop1): force clearing of disk cache
[  175.267561][ T8811] BTRFS info (device loop1): use zstd compression, level 3
[  175.274698][ T8811] BTRFS info (device loop1): max_inline set to 0
[  175.512347][ T8814] loop4: detected capacity change from 0 to 32768
[  175.513082][ T5958] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  175.520753][ T8814] XFS (loop4): sunit and swidth must be specified together
[  175.594181][ T8832] loop0: detected capacity change from 0 to 40427
[  175.609917][ T8832] F2FS-fs: heap/no_heap options were deprecated
[  175.621017][ T8832] F2FS-fs (loop0): build fault injection rate: 19
[  175.627676][ T8832] F2FS-fs (loop0): build fault injection type: 0x3bfe8c
[  175.640347][ T8832] F2FS-fs (loop0): invalid crc value
[  175.666230][ T8832] F2FS-fs (loop0): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  175.768713][ T8832] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  175.799843][ T8832] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  175.807751][ T8832] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  175.849287][ T8832] F2FS-fs (loop0): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  175.869420][ T8832] syz.0.1072: attempt to access beyond end of device
[  175.869420][ T8832] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  175.889714][ T8832] CPU: 0 UID: 0 PID: 8832 Comm: syz.0.1072 Not tainted syzkaller #0 PREEMPT(full) 
[  175.889731][ T8832] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  175.889737][ T8832] Call Trace:
[  175.889741][ T8832]  <TASK>
[  175.889746][ T8832]  dump_stack_lvl+0x189/0x250
[  175.889791][ T8832]  ? preempt_schedule_thunk+0x16/0x30
[  175.889807][ T8832]  ? __pfx_dump_stack_lvl+0x10/0x10
[  175.889816][ T8832]  ? __pfx_queue_work_on+0x10/0x10
[  175.889825][ T8832]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  175.889839][ T8832]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  175.889855][ T8832]  f2fs_handle_critical_error+0x37c/0x540
[  175.889871][ T8832]  f2fs_write_end_io+0x886/0xb60
[  175.889889][ T8832]  __submit_merged_bio+0x27a/0x6a0
[  175.889904][ T8832]  __submit_merged_write_cond+0x255/0x530
[  175.889917][ T8832]  f2fs_write_data_pages+0x261d/0x3000
[  175.889943][ T8832]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  175.889974][ T8832]  ? check_path+0x21/0x40
[  175.889984][ T8832]  ? check_noncircular+0xe0/0x160
[  175.890016][ T8832]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  175.890028][ T8832]  do_writepages+0x32e/0x550
[  175.890046][ T8832]  ? do_raw_spin_unlock+0x4d/0x240
[  175.890056][ T8832]  filemap_fdatawrite+0x199/0x240
[  175.890065][ T8832]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  175.890095][ T8832]  ? do_raw_spin_unlock+0x4d/0x240
[  175.890106][ T8832]  f2fs_sync_dirty_inodes+0x31f/0x830
[  175.890120][ T8832]  f2fs_write_checkpoint+0x95a/0x1df0
[  175.890138][ T8832]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  175.890163][ T8832]  ? down_write+0x162/0x1f0
[  175.890170][ T8832]  ? __pfx_down_write+0x10/0x10
[  175.890182][ T8832]  f2fs_issue_checkpoint+0x3ac/0x570
[  175.890190][ T8832]  ? __pfx_f2fs_issue_checkpoint+0x10/0x10
[  175.890198][ T8832]  ? __lock_acquire+0xab9/0xd20
[  175.890215][ T8832]  ? __up_read+0x280/0x680
[  175.890228][ T8832]  ? f2fs_sync_fs+0x200/0x3d0
[  175.890238][ T8832]  f2fs_do_sync_file+0x869/0x1860
[  175.890250][ T8832]  ? __pfx_f2fs_do_sync_file+0x10/0x10
[  175.890275][ T8832]  ? __mark_inode_dirty+0x3d2/0xe10
[  175.890285][ T8832]  ? vfs_fsync_range+0x149/0x1c0
[  175.890291][ T8832]  ? f2fs_sync_file+0xe9/0x160
[  175.890299][ T8832]  f2fs_file_write_iter+0x753/0x2410
[  175.890318][ T8832]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  175.890325][ T8832]  ? rcu_read_lock_any_held+0xb3/0x120
[  175.890341][ T8832]  vfs_write+0x5c9/0xb30
[  175.890353][ T8832]  ? __pfx_f2fs_file_write_iter+0x10/0x10
[  175.890361][ T8832]  ? __pfx_vfs_write+0x10/0x10
[  175.890375][ T8832]  ? __fget_files+0x2a/0x420
[  175.890386][ T8832]  ksys_write+0x145/0x250
[  175.890396][ T8832]  ? __pfx_ksys_write+0x10/0x10
[  175.890404][ T8832]  ? rcu_is_watching+0x15/0xb0
[  175.890413][ T8832]  ? do_syscall_64+0xbe/0x3b0
[  175.890423][ T8832]  do_syscall_64+0xfa/0x3b0
[  175.890428][ T8832]  ? lockdep_hardirqs_on+0x9c/0x150
[  175.890437][ T8832]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.890444][ T8832]  ? exc_page_fault+0x9f/0xf0
[  175.890454][ T8832]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  175.890461][ T8832] RIP: 0033:0x7f652a58ebe9
[  175.890470][ T8832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  175.890478][ T8832] RSP: 002b:00007f652b42b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  175.890488][ T8832] RAX: ffffffffffffffda RBX: 00007f652a7c5fa0 RCX: 00007f652a58ebe9
[  175.890493][ T8832] RDX: 0000000000000078 RSI: 0000200000000180 RDI: 0000000000000005
[  175.890498][ T8832] RBP: 00007f652a611e19 R08: 0000000000000000 R09: 0000000000000000
[  175.890502][ T8832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  175.890506][ T8832] R13: 00007f652a7c6038 R14: 00007f652a7c5fa0 R15: 00007ffe36a26ad8
[  175.890519][ T8832]  </TASK>
[  175.890523][ T8832] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  176.420725][ T8838] loop4: detected capacity change from 0 to 32768
[  176.424699][ T8838] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.1075 (8838)
[  176.445704][ T8838] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  176.461379][ T8838] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  176.521312][ T8838] BTRFS info (device loop4): enabling ssd optimizations
[  176.523829][ T8838] BTRFS info (device loop4): enabling free space tree
[  176.665001][ T5939] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[  176.666258][ T7426] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  176.680960][ T8862] loop0: detected capacity change from 0 to 4096
[  176.712448][ T8862] ntfs3(loop0): It is recommened to use chkdsk.
[  176.720053][ T8862] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00
[  176.726267][ T8862] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00
[  176.729300][ T8862] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00
[  176.732618][ T8862] ntfs3(loop0): try to read out of volume at offset 0x3fffffc0c00
[  176.735876][ T8862] ntfs3(loop0): try to read out of volume at offset 0x3fffffc1c00
[  176.739123][ T8862] ntfs3(loop0): try to read out of volume at offset 0x3fffffc2c00
[  176.742307][ T8862] ntfs3(loop0): try to read out of volume at offset 0x3fffffc4c00
[  176.751750][ T8862] ntfs3(loop0): try to read out of volume at offset 0x3fffffc8c00
[  176.755901][ T8862] ntfs3(loop0): try to read out of volume at offset 0x3fffffd0c00
[  177.900477][ T8892] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1088'.
[  178.016082][ T8898] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  178.218027][ T8908] loop1: detected capacity change from 0 to 512
[  178.291365][ T8908] FAT-fs (loop1): error, corrupted directory (invalid entries)
[  178.424461][ T8904] loop0: detected capacity change from 0 to 40427
[  178.474217][ T8904] F2FS-fs (loop0): invalid crc value
[  178.546110][ T8904] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  178.552020][ T8904] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  178.594038][ T8913] f2fs_ckpt-7:0: attempt to access beyond end of device
[  178.594038][ T8913] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  178.618972][ T8913] CPU: 1 UID: 0 PID: 8913 Comm: f2fs_ckpt-7:0 Not tainted syzkaller #0 PREEMPT(full) 
[  178.618993][ T8913] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.619003][ T8913] Call Trace:
[  178.619008][ T8913]  <TASK>
[  178.619015][ T8913]  dump_stack_lvl+0x189/0x250
[  178.619039][ T8913]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.619053][ T8913]  ? __pfx_queue_work_on+0x10/0x10
[  178.619066][ T8913]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  178.619083][ T8913]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  178.619107][ T8913]  f2fs_handle_critical_error+0x37c/0x540
[  178.619131][ T8913]  f2fs_write_end_io+0x886/0xb60
[  178.619157][ T8913]  __submit_merged_bio+0x27a/0x6a0
[  178.619179][ T8913]  __submit_merged_write_cond+0x255/0x530
[  178.619200][ T8913]  f2fs_write_data_pages+0x261d/0x3000
[  178.619218][ T8913]  ? __pfx_seqcount_lockdep_reader_access+0x10/0x10
[  178.619257][ T8913]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  178.619322][ T8913]  ? __lock_acquire+0xab9/0xd20
[  178.619346][ T8913]  ? do_raw_spin_lock+0x121/0x290
[  178.619377][ T8913]  ? do_raw_spin_unlock+0x4d/0x240
[  178.619391][ T8913]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  178.619409][ T8913]  do_writepages+0x32e/0x550
[  178.619435][ T8913]  ? do_raw_spin_unlock+0x4d/0x240
[  178.619452][ T8913]  filemap_fdatawrite+0x199/0x240
[  178.619469][ T8913]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  178.619515][ T8913]  ? do_raw_spin_unlock+0x4d/0x240
[  178.619532][ T8913]  f2fs_sync_dirty_inodes+0x31f/0x830
[  178.619554][ T8913]  f2fs_write_checkpoint+0x95a/0x1df0
[  178.619582][ T8913]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  178.619620][ T8913]  ? down_write+0x162/0x1f0
[  178.619631][ T8913]  ? __pfx_down_write+0x10/0x10
[  178.619642][ T8913]  ? __pfx___schedule+0x10/0x10
[  178.619663][ T8913]  __checkpoint_and_complete_reqs+0xd9/0x3b0
[  178.619679][ T8913]  ? __pfx___checkpoint_and_complete_reqs+0x10/0x10
[  178.619704][ T8913]  issue_checkpoint_thread+0xd9/0x260
[  178.619720][ T8913]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  178.619733][ T8913]  ? __pfx_autoremove_wake_function+0x10/0x10
[  178.619779][ T8913]  ? __kthread_parkme+0x7b/0x200
[  178.619793][ T8913]  ? __kthread_parkme+0x1a1/0x200
[  178.619809][ T8913]  kthread+0x711/0x8a0
[  178.619826][ T8913]  ? __pfx_issue_checkpoint_thread+0x10/0x10
[  178.619839][ T8913]  ? __pfx_kthread+0x10/0x10
[  178.619854][ T8913]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.619869][ T8913]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.619885][ T8913]  ? __pfx_kthread+0x10/0x10
[  178.619898][ T8913]  ret_from_fork+0x3fc/0x770
[  178.619914][ T8913]  ? __pfx_ret_from_fork+0x10/0x10
[  178.619930][ T8913]  ? __switch_to_asm+0x39/0x70
[  178.619945][ T8913]  ? __switch_to_asm+0x33/0x70
[  178.619958][ T8913]  ? __pfx_kthread+0x10/0x10
[  178.619972][ T8913]  ret_from_fork_asm+0x1a/0x30
[  178.619999][ T8913]  </TASK>
[  178.620004][ T8913] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  178.688772][ T8906] loop4: detected capacity change from 0 to 40427
[  178.753604][ T8922] loop1: detected capacity change from 0 to 128
[  178.777565][ T8922] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  178.802132][ T8922] ext4 filesystem being mounted at /365/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  178.865365][ T8906] F2FS-fs: heap/no_heap options were deprecated
[  178.869167][ T8906] F2FS-fs (loop4): Invalid segment/section count (24 != 24 * 3)
[  178.872095][ T8906] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  178.878204][ T8906] F2FS-fs (loop4): invalid crc value
[  178.886302][ T5958] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  178.971226][ T8906] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  178.995050][ T8906] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  178.997722][ T8906] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  179.061598][ T8935] loop0: detected capacity change from 0 to 128
[  179.085097][ T8935] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  179.092333][ T8935] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  179.701007][ T8954] syz_tun: entered allmulticast mode
[  179.732592][ T8953] syz_tun: left allmulticast mode
[  179.739727][ T8957] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  179.978663][ T8966] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  180.150672][ T8964] loop1: detected capacity change from 0 to 32768
[  180.163372][ T8964] jfs_mount: Failed to read AGGREGATE_I
[  180.168395][ T8964] Mount JFS Failure: -5
[  180.170156][ T8964] jfs_mount failed w/return code = -5
[  180.241932][ T8976] binder: 8975:8976 ioctl c0306201 200000000640 returned -22
[  180.305097][ T8978] loop4: detected capacity change from 0 to 256
[  180.327324][ T8978] vfat: Deprecated parameter 'posix'
[  180.330337][ T8978] FAT-fs: "posix" option is obsolete, not supported now
[  180.593351][ T8983] loop4: detected capacity change from 0 to 32768
[  180.628980][ T8983] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  180.713888][ T7426] (syz-executor,7426,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  180.747791][ T7426] ocfs2: Unmounting device (7,4) on (node local)
[  180.766415][ T8999] loop1: detected capacity change from 0 to 512
[  180.769628][ T8999] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  180.777435][ T8999] EXT4-fs (loop1): 1 truncate cleaned up
[  180.780226][ T8999] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  180.807081][ T8999] EXT4-fs error (device loop1): ext4_generic_delete_entry:2668: inode #2: block 13: comm syz.1.1135: bad entry in directory: rec_len is smaller than minimal - offset=24, inode=11, rec_len=8, size=1024 fake=0
[  180.821134][ T8999] EXT4-fs (loop1): Remounting filesystem read-only
[  180.830662][ T8999] EXT4-fs warning (device loop1): ext4_rename_delete:3731: inode #2: comm syz.1.1135: Deleting old file: nlink 5, error=-117
[  180.865676][ T5958] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  181.045435][ T9012] syz_tun: entered allmulticast mode
[  181.049625][ T9012] syz_tun: left allmulticast mode
[  181.688442][ T9046] loop4: detected capacity change from 0 to 32768
[  181.708689][ T9046] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  181.733157][ T9046] XFS (loop4): Ending clean mount
[  181.738406][   T47] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  181.774770][ T7426] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  181.902209][   T47] usb 2-1: too many configurations: 151, using maximum allowed: 8
[  181.917393][   T47] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[  181.921186][   T47] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[  181.933193][   T47] usb 2-1: Product: syz
[  181.935102][   T47] usb 2-1: Manufacturer: syz
[  181.937049][   T47] usb 2-1: SerialNumber: syz
[  181.941702][   T47] usb 2-1: config 0 descriptor??
[  182.176679][   T47] usb 2-1: USB disconnect, device number 18
[  182.197698][ T9068] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1163'.
[  182.320391][ T9072] loop4: detected capacity change from 0 to 4096
[  182.338360][ T9072] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  182.347950][ T9072] ntfs3(loop4): Failed to load $Extend (-22).
[  182.350501][ T9072] ntfs3(loop4): Failed to initialize $Extend.
[  182.360367][ T9072] ntfs3(loop4): ino=1e, mi_enum_attr
[  182.417809][ T9074] netlink: 'syz.4.1166': attribute type 4 has an invalid length.
[  182.422890][ T9074] netlink: 17 bytes leftover after parsing attributes in process `syz.4.1166'.
[  182.481523][ T9076] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1167'.
[  182.553991][ T9080] netlink: 'syz.4.1169': attribute type 4 has an invalid length.
[  182.557000][ T9080] netlink: 'syz.4.1169': attribute type 3 has an invalid length.
[  182.560223][ T9080] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1169'.
[  182.891548][ T9094] loop4: detected capacity change from 0 to 1024
[  182.981906][   T26] hfsplus: bad catalog file entry
[  182.985464][   T26] hfsplus: b-tree write err: -5, ino 3
[  183.119657][   T33] audit: type=1326 audit(1757264620.544:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.4.1179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7b38ebe9 code=0x7ffc0000
[  183.132625][   T33] audit: type=1326 audit(1757264620.544:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.4.1179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7b38ebe9 code=0x7ffc0000
[  183.146218][   T33] audit: type=1326 audit(1757264620.553:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.4.1179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7b38ebe9 code=0x7ffc0000
[  183.156469][   T33] audit: type=1326 audit(1757264620.553:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.4.1179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7b38ebe9 code=0x7ffc0000
[  183.165740][   T33] audit: type=1326 audit(1757264620.553:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.4.1179" exe="/syz-executor" sig=0 arch=c000003e syscall=158 compat=0 ip=0x7f3e7b38ebe9 code=0x7ffc0000
[  183.176620][   T33] audit: type=1326 audit(1757264620.553:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.4.1179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7b38ebe9 code=0x7ffc0000
[  183.186069][   T33] audit: type=1326 audit(1757264620.553:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.4.1179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3e7b38ebe9 code=0x7ffc0000
[  183.202257][   T33] audit: type=1326 audit(1757264620.562:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.4.1179" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3e7b38ebe9 code=0x7ffc0000
[  183.210870][   T33] audit: type=1326 audit(1757264620.562:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9101 comm="syz.4.1179" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3e7b38ebe9 code=0x7ffc0000
[  183.356496][ T9114] IPv6: Can't replace route, no match found
[  183.487475][ T9121] loop1: detected capacity change from 0 to 4096
[  183.505929][ T9121] ntfs3(loop1): Different NTFS sector size (2048) and media sector size (512).
[  183.683753][ T9127] loop4: detected capacity change from 0 to 512
[  183.692136][ T9127] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[  183.703184][ T9127] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[  183.706505][ T9127] System zones: 1-12
[  183.708428][ T9127] EXT4-fs (loop4): orphan cleanup on readonly fs
[  183.730232][ T9127] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1191: invalid indirect mapped block 12 (level 1)
[  183.739040][ T9127] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.1191: invalid indirect mapped block 2 (level 2)
[  183.749086][ T9127] EXT4-fs (loop4): 1 truncate cleaned up
[  183.753076][ T9127] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[  183.822224][ T7426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[  184.603914][ T9151] loop4: detected capacity change from 0 to 32768
[  185.042618][ T5946] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  185.207130][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  185.210957][ T5946] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0
[  185.214920][ T5946] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[  185.218993][ T5946] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[  185.222938][ T5946] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b
[  185.226800][ T5946] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  185.232981][ T5946] usb 2-1: config 0 descriptor??
[  185.363998][ T9158] loop4: detected capacity change from 0 to 256
[  185.379957][ T9158] FAT-fs (loop4): error, fat_free_clusters: deleting FAT entry beyond EOF
[  185.383790][ T9158] FAT-fs (loop4): Filesystem has been set read-only
[  185.450344][ T9160] loop4: detected capacity change from 0 to 4096
[  185.455427][ T9160] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  185.464047][ T5946] hdpvr 2-1:0.0: firmware version 0x8 dated )˟=J+noKܐo5foɠObL
[  185.470260][ T9160] ntfs3(loop4): Failed to initialize $Extend/$Reparse.
[  185.686014][ T5946] hdpvr 2-1:0.0: device init failed
[  185.690050][ T5946] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[  185.698504][ T5946] usb 2-1: USB disconnect, device number 19
[  185.791099][ T9162] loop4: detected capacity change from 0 to 40427
[  185.801035][ T9162] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[  185.804811][ T9162] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[  185.893199][ T9162] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  185.903939][ T9162] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[  185.906920][ T9162] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  186.250225][ T9170] loop4: detected capacity change from 0 to 512
[  186.284184][ T9170] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  186.308867][ T9170] ext4 filesystem being mounted at /239/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  186.768974][ T9179] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1210'.
[  186.903495][ T9179] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  186.932489][ T9179] block device autoloading is deprecated and will be removed.
[  187.022595][ T9182] vim2m vim2m.0: Fourcc format (0x31384142) invalid.
[  187.344569][ T7426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  187.352883][ T9186] netem: incorrect gi model size
[  187.355672][ T9186] netem: change failed
[  187.506455][ T9192] netlink: 'syz.4.1213': attribute type 10 has an invalid length.
[  187.630215][ T9189] loop0: detected capacity change from 0 to 40427
[  187.638158][ T9189] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[  187.641353][ T9189] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[  187.648646][ T9189] F2FS-fs (loop0): invalid crc value
[  187.775454][ T9189] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  187.785856][ T9189] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  187.788955][ T9189] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  188.646854][ T9217] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1223'.
[  188.975409][    T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  189.153712][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  189.158226][    T9] usb 2-1: config 63 has an invalid interface number: 66 but max is 0
[  189.162110][    T9] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config
[  189.166510][    T9] usb 2-1: config 63 has no interface number 0
[  189.169048][    T9] usb 2-1: config 63 interface 66 has no altsetting 0
[  189.176341][    T9] usb 2-1: New USB device found, idVendor=174f, idProduct=8a31, bcdDevice=39.f4
[  189.180157][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  189.183983][    T9] usb 2-1: Product: syz
[  189.185863][    T9] usb 2-1: Manufacturer: syz
[  189.187554][    T9] usb 2-1: SerialNumber: syz
[  189.426935][    T9] usb 2-1: Found UVC 0.07 device syz (174f:8a31)
[  189.431575][    T9] usb 2-1: No valid video chain found.
[  189.437361][    T9] usb 2-1: USB disconnect, device number 20
[  191.098894][ T9242] binder: 9241:9242 ioctl c0306201 200000000080 returned -14
[  191.185828][    T9] usb 5-1: new high-speed USB device number 8 using dummy_hcd
[  191.225764][ T9248] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1238'.
[  191.271470][   T33] audit: type=1804 audit(1757264628.066:194): pid=9250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1239" name="/newroot/420/file0" dev="tmpfs" ino=2205 res=1 errno=0
[  191.355064][    T9] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  191.359257][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.363022][    T9] usb 5-1: Product: syz
[  191.363697][ T9252] loop1: detected capacity change from 0 to 4096
[  191.364988][    T9] usb 5-1: Manufacturer: syz
[  191.373310][ T9252] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  191.380756][    T9] usb 5-1: SerialNumber: syz
[  191.395648][    T9] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  191.412125][ T9252] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  191.429300][ T9252] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  191.449235][ T9252] EXT4-fs (loop1): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[  191.459365][ T5951] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  191.475267][ T5958] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  191.876246][ T9263] loop0: detected capacity change from 0 to 256
[  191.893802][ T9263] FAT-fs (loop0): Directory bread(block 64) failed
[  191.896066][ T9263] FAT-fs (loop0): Directory bread(block 65) failed
[  191.898289][ T9263] FAT-fs (loop0): Directory bread(block 66) failed
[  191.902418][ T9263] FAT-fs (loop0): Directory bread(block 67) failed
[  191.905052][ T9263] FAT-fs (loop0): Directory bread(block 68) failed
[  191.907496][ T9263] FAT-fs (loop0): Directory bread(block 69) failed
[  191.912550][   T47] usb 5-1: USB disconnect, device number 8
[  191.915198][ T9263] FAT-fs (loop0): Directory bread(block 70) failed
[  191.919911][ T9263] FAT-fs (loop0): Directory bread(block 71) failed
[  191.924086][ T9263] FAT-fs (loop0): Directory bread(block 72) failed
[  191.927780][ T9263] FAT-fs (loop0): Directory bread(block 73) failed
[  191.959455][ T9263] FAT-fs (loop0): Filesystem has been set read-only
[  191.971999][   T33] audit: type=1800 audit(1757264628.712:195): pid=9263 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1243" name="cpu.stat" dev="loop0" ino=1048637 res=0 errno=0
[  192.516344][ T9285] loop4: detected capacity change from 0 to 4096
[  192.521162][ T9285] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[  192.537500][ T9285] ntfs3(loop4): Inode r=19 is not in use!
[  192.541289][ T9285] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  192.617422][ T5951] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  192.629988][ T9258] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  192.631575][ T5951] ath9k_htc: Failed to initialize the device
[  192.632342][ T9258] Bluetooth: hci0: Error when powering off device on rfkill (-4)
[  192.644840][   T47] usb 5-1: ath9k_htc: USB layer deinitialized
[  192.697953][ T9258] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  192.700421][ T9258] Bluetooth: hci1: Error when powering off device on rfkill (-4)
[  192.801155][ T9258] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  192.805389][ T9258] Bluetooth: hci2: Error when powering off device on rfkill (-4)
[  194.853696][ T9360] loop4: detected capacity change from 0 to 32768
[  194.864033][ T9360] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  194.893504][ T9360] XFS (loop4): Ending clean mount
[  194.905050][ T9360] XFS (loop4): Quotacheck needed: Please wait.
[  194.941850][ T9360] XFS (loop4): Quotacheck: Done.
[  194.984019][ T7426] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  195.389503][ T5850] usb 5-1: new full-speed USB device number 9 using dummy_hcd
[  195.425522][ T9374] loop1: detected capacity change from 0 to 32768
[  195.431722][ T9374] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1279 (9374)
[  195.442124][ T9374] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  195.446818][ T9374] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  195.486099][ T9374] BTRFS info (device loop1): rebuilding free space tree
[  195.492483][ T9374] BTRFS info (device loop1): enabling ssd optimizations
[  195.495280][ T9374] BTRFS info (device loop1): enabling free space tree
[  195.498218][ T9374] BTRFS info (device loop1): force clearing of disk cache
[  195.500942][ T9374] BTRFS info (device loop1): use lzo compression, level 0
[  195.545019][ T5958] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0
[  195.580965][ T5850] usb 5-1: config 7 has an invalid interface number: 192 but max is 0
[  195.584619][ T5850] usb 5-1: config 7 has no interface number 0
[  195.587861][ T5850] usb 5-1: config 7 interface 192 altsetting 7 endpoint 0x1 has invalid wMaxPacketSize 0
[  195.592308][ T5850] usb 5-1: config 7 interface 192 has no altsetting 0
[  195.608736][ T5850] usb 5-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d
[  195.612271][ T5850] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.629303][ T5850] usb 5-1: Product: syz
[  195.631125][ T5850] usb 5-1: Manufacturer: syz
[  195.632976][ T5850] usb 5-1: SerialNumber: syz
[  195.876412][ T5850] usb 5-1: USB disconnect, device number 9
[  195.887168][ T9399] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1283'.
[  196.279292][ T9406] loop1: detected capacity change from 0 to 40427
[  196.283062][ T9406] F2FS-fs: heap/no_heap options were deprecated
[  196.297812][ T9406] F2FS-fs (loop1): invalid crc value
[  196.301129][ T9406] F2FS-fs (loop1): Ignore s_resuid=60929, s_resgid=0 w/o reserve_root
[  196.358428][ T9406] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  196.365739][ T9406] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  196.512486][ T9413] loop4: detected capacity change from 0 to 512
[  196.518528][ T9413] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  197.001469][ T9426] ieee802154 phy0 wpan0: encryption failed: -22
[  197.883205][ T5946] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  198.065352][ T5946] usb 2-1: Using ep0 maxpacket: 16
[  198.069667][ T5946] usb 2-1: config 0 has an invalid interface number: 74 but max is 0
[  198.073220][ T5946] usb 2-1: config 0 has no interface number 0
[  198.076528][ T5946] usb 2-1: config 0 interface 74 has no altsetting 0
[  198.083227][ T5946] usb 2-1: New USB device found, idVendor=0565, idProduct=0001, bcdDevice=66.36
[  198.087345][ T5946] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  198.090911][ T5946] usb 2-1: Product: syz
[  198.092873][ T5946] usb 2-1: Manufacturer: syz
[  198.095017][ T5946] usb 2-1: SerialNumber: syz
[  198.104574][ T5946] usb 2-1: config 0 descriptor??
[  198.366129][ T5946] belkin_sa 2-1:0.74: Belkin / Peracom / GoHubs USB Serial Adapter converter detected
[  198.378606][ T5946] usb 2-1: bcdDevice: 6636, bfc: 0
[  198.382569][ T5946] usb 2-1: Belkin / Peracom / GoHubs USB Serial Adapter converter now attached to ttyUSB0
[  198.402592][ T5946] usb 2-1: USB disconnect, device number 21
[  198.412948][ T5946] belkin ttyUSB0: Belkin / Peracom / GoHubs USB Serial Adapter converter now disconnected from ttyUSB0
[  198.417920][ T5946] belkin_sa 2-1:0.74: device disconnected
[  198.435819][ T9446] loop4: detected capacity change from 0 to 1024
[  198.495099][ T9448] loop4: detected capacity change from 0 to 128
[  198.508444][ T9448] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  198.526549][ T9448] ext4 filesystem being mounted at /282/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  198.572334][ T7426] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  198.730883][ T9458] loop4: detected capacity change from 0 to 1024
[  198.758311][ T9458] EXT4-fs (loop4): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  198.764002][ T9458] ext4 filesystem being mounted at /284/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  198.787229][ T9458] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #15: comm syz.4.1306: lblock 0 mapped to illegal pblock 0 (length 4)
[  198.789326][ T9463] netlink: 'syz.0.1307': attribute type 1 has an invalid length.
[  198.797218][ T9463] netlink: 630 bytes leftover after parsing attributes in process `syz.0.1307'.
[  198.798359][ T9458] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 4 with error 117
[  198.809098][ T9458] EXT4-fs (loop4): This should not happen!! Data will be lost
[  198.809098][ T9458] 
[  198.830925][ T9458] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: comm syz.4.1306: lblock 0 mapped to illegal pblock 0 (length 1)
[  198.842517][ T9458] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: comm syz.4.1306: lblock 0 mapped to illegal pblock 0 (length 1)
[  198.854224][ T9465] loop0: detected capacity change from 0 to 4096
[  198.858394][ T9458] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: comm syz.4.1306: lblock 0 mapped to illegal pblock 0 (length 1)
[  198.858676][ T9465] EXT4-fs: Ignoring removed nomblk_io_submit option
[  198.867746][ T9458] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: comm syz.4.1306: lblock 0 mapped to illegal pblock 0 (length 1)
[  198.875428][ T9457] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: comm syz.4.1306: lblock 0 mapped to illegal pblock 0 (length 4)
[  198.895990][ T9465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  198.899340][ T9465] EXT4-fs (loop0): Test dummy encryption mode enabled
[  198.914661][ T9457] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: comm syz.4.1306: lblock 0 mapped to illegal pblock 0 (length 4)
[  198.932332][ T9465] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  198.935889][ T9457] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: comm syz.4.1306: lblock 0 mapped to illegal pblock 0 (length 4)
[  198.952173][ T9457] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: comm syz.4.1306: lblock 0 mapped to illegal pblock 0 (length 4)
[  198.957189][ T9465] EXT4-fs: Ignoring removed nomblk_io_submit option
[  198.960388][ T9457] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #15: comm syz.4.1306: lblock 0 mapped to illegal pblock 0 (length 4)
[  198.961360][ T9465] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  198.979072][ T9465] EXT4-fs (loop0): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  199.017592][ T5961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  199.364895][ T9477] usb usb8: usbfs: process 9477 (syz.1.1309) did not claim interface 0 before use
[  199.606982][ T7426] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  200.740109][ T9504] nfs4: Bad value for 'source'
[  200.862398][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  200.865053][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  201.176366][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1328'.
[  201.214227][ T9517] loop6: detected capacity change from 0 to 7
[  201.224585][ T6995] Dev loop6: unable to read RDB block 7
[  201.227104][ T6995]  loop6: AHDI p3 p4
[  201.229438][ T6995] loop6: partition table partially beyond EOD, truncated
[  201.233144][ T6995] loop6: p3 start 1886353253 is beyond EOD, truncated
[  201.247961][ T9517] Dev loop6: unable to read RDB block 7
[  201.250855][ T9517]  loop6: AHDI p3 p4
[  201.252736][ T9517] loop6: partition table partially beyond EOD, truncated
[  201.256381][ T9517] loop6: p3 start 1886353253 is beyond EOD, truncated
[  201.396440][ T9521] loop1: detected capacity change from 0 to 4096
[  201.417552][ T9522] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  201.429860][   T33] audit: type=1800 audit(1757264637.444:196): pid=9521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1331" name="file1" dev="loop1" ino=15 res=0 errno=0
[  202.257447][ T9535] loop1: detected capacity change from 0 to 32768
[  202.262445][ T9535] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1337 (9535)
[  202.276130][ T9535] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  202.283282][ T9535] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  202.338334][ T9535] BTRFS info (device loop1): enabling ssd optimizations
[  202.344803][ T9535] BTRFS info (device loop1): enabling free space tree
[  202.392211][ T5958] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  203.446689][ T9580] sp0: Synchronizing with TNC
[  203.616153][ T9582] netlink: 108 bytes leftover after parsing attributes in process `syz.1.1350'.
[  203.654262][ T9578] loop0: detected capacity change from 0 to 40427
[  203.658693][ T9578] F2FS-fs (loop0): build fault injection rate: 16
[  203.661472][ T9578] F2FS-fs (loop0): build fault injection type: 0x3bfe8e
[  203.665988][ T9578] F2FS-fs (loop0): invalid crc value
[  203.669987][    C0] F2FS-fs (loop0): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  203.675269][ T9578] F2FS-fs (loop0): Failed to initialize F2FS segment manager (-5)
[  204.566879][ T5951] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  204.743004][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  204.747662][ T5951] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  204.759215][ T5951] usb 5-1: New USB device found, idVendor=18b1, idProduct=0037, bcdDevice= 0.00
[  204.765017][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  204.776392][ T5951] usb 5-1: config 0 descriptor??
[  204.963150][ T9643] loop1: detected capacity change from 0 to 1024
[  204.991515][ T1090] hfsplus: b-tree write err: -5, ino 4
[  205.091184][ T9651] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1381'.
[  205.137359][ T9653] loop1: detected capacity change from 0 to 512
[  205.141531][ T9653] EXT4-fs: Ignoring removed mblk_io_submit option
[  205.151861][ T9653] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  205.177844][ T9653] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  205.185981][ T9653] ext4 filesystem being mounted at /488/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  205.217784][ T5958] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  205.236992][ T5951] petalynx 0003:18B1:0037.0005: unknown main item tag 0x0
[  205.260000][ T5951] petalynx 0003:18B1:0037.0005: unknown global tag 0xe
[  205.265512][ T5951] petalynx 0003:18B1:0037.0005: item 0 0 1 14 parsing failed
[  205.269352][ T5951] petalynx 0003:18B1:0037.0005: parse failed
[  205.286029][ T5951] petalynx 0003:18B1:0037.0005: probe with driver petalynx failed with error -22
[  205.452776][ T5951] usb 5-1: USB disconnect, device number 11
[  206.281883][ T9677] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  206.757199][ T9688] loop4: detected capacity change from 0 to 40427
[  206.766202][ T9688] F2FS-fs (loop4): invalid crc value
[  206.818136][ T9688] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  206.822619][ T9688] F2FS-fs (loop4): Start checkpoint disabled!
[  206.837007][ T9688] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  206.872319][ T9688] F2FS-fs (loop4): ino:10, start:0, end:8192, need to trigger GC to reclaim enough free segment when checkpoint is enabled
[  206.900145][   T26] kworker/u9:0: attempt to access beyond end of device
[  206.900145][   T26] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  206.909110][   T26] CPU: 1 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted syzkaller #0 PREEMPT(full) 
[  206.909129][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  206.909137][   T26] Workqueue: writeback wb_workfn (flush-7:4)
[  206.909169][   T26] Call Trace:
[  206.909175][   T26]  <TASK>
[  206.909181][   T26]  dump_stack_lvl+0x189/0x250
[  206.909198][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[  206.909210][   T26]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  206.909227][   T26]  ? __pfx_queue_work_on+0x10/0x10
[  206.909242][   T26]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  206.909256][   T26]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  206.909273][   T26]  ? f2fs_hw_is_readonly+0x39b/0x470
[  206.909307][   T26]  f2fs_handle_critical_error+0x37c/0x540
[  206.909328][   T26]  f2fs_write_end_io+0x886/0xb60
[  206.909351][   T26]  __submit_merged_bio+0x27a/0x6a0
[  206.909367][   T26]  ? _raw_spin_unlock+0x28/0x50
[  206.909382][   T26]  f2fs_submit_page_write+0x208c/0x21b0
[  206.909412][   T26]  ? __f2fs_is_valid_blkaddr+0xd2a/0x14f0
[  206.909434][   T26]  do_write_page+0x6a6/0x940
[  206.909454][   T26]  f2fs_outplace_write_data+0x11a/0x220
[  206.909470][   T26]  f2fs_do_write_data_page+0x113e/0x1650
[  206.909497][   T26]  ? __pfx_f2fs_do_write_data_page+0x10/0x10
[  206.909513][   T26]  ? css_rstat_updated+0x23a/0x4f0
[  206.909539][   T26]  f2fs_write_single_data_page+0xa68/0x16a0
[  206.909596][   T26]  ? __pfx_f2fs_write_single_data_page+0x10/0x10
[  206.909626][   T26]  ? mlock_drain_local+0x79/0x490
[  206.909639][   T26]  ? mlock_drain_local+0x28e/0x490
[  206.909654][   T26]  f2fs_write_data_pages+0x195b/0x3000
[  206.909697][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  206.909771][   T26]  ? f2fs_write_meta_pages+0x357/0x450
[  206.909794][   T26]  ? __lock_acquire+0xab9/0xd20
[  206.909814][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  206.909830][   T26]  do_writepages+0x32e/0x550
[  206.909848][   T26]  ? reacquire_held_locks+0x127/0x1d0
[  206.909858][   T26]  ? writeback_sb_inodes+0x384/0x1010
[  206.909875][   T26]  __writeback_single_inode+0x145/0xff0
[  206.909884][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[  206.909894][   T26]  writeback_sb_inodes+0x6c7/0x1010
[  206.909912][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  206.909936][   T26]  ? rcu_is_watching+0x15/0xb0
[  206.909947][   T26]  wb_writeback+0x43b/0xaf0
[  206.909959][   T26]  ? queue_io+0x331/0x590
[  206.909968][   T26]  ? __pfx_wb_writeback+0x10/0x10
[  206.909980][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  206.909990][   T26]  wb_workfn+0x409/0xef0
[  206.910004][   T26]  ? __pfx_wb_workfn+0x10/0x10
[  206.910012][   T26]  ? __lock_acquire+0xab9/0xd20
[  206.910026][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  206.910036][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  206.910044][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  206.910049][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  206.910056][   T26]  process_scheduled_works+0xae1/0x17b0
[  206.910074][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  206.910087][   T26]  worker_thread+0x8a0/0xda0
[  206.910121][   T26]  kthread+0x711/0x8a0
[  206.910133][   T26]  ? __pfx_worker_thread+0x10/0x10
[  206.910140][   T26]  ? __pfx_kthread+0x10/0x10
[  206.910149][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  206.910157][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  206.910167][   T26]  ? __pfx_kthread+0x10/0x10
[  206.910175][   T26]  ret_from_fork+0x3fc/0x770
[  206.910186][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  206.910200][   T26]  ? __switch_to_asm+0x39/0x70
[  206.910211][   T26]  ? __switch_to_asm+0x33/0x70
[  206.910221][   T26]  ? __pfx_kthread+0x10/0x10
[  206.910232][   T26]  ret_from_fork_asm+0x1a/0x30
[  206.910253][   T26]  </TASK>
[  206.910340][   T26] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  207.320831][ T9696] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[  207.449784][ T9705] loop0: detected capacity change from 0 to 512
[  207.470292][ T9705] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  207.484471][ T9705] ext4 filesystem being mounted at /371/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  207.516285][ T5961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.298150][ T9719] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1408'.
[  208.715796][ T9732] openvswitch: netlink: Message has 16 unknown bytes.
[  208.929392][ T9744] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1419'.
[  209.308383][ T9762] loop1: detected capacity change from 0 to 4096
[  209.314675][ T9762] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  209.333696][ T9762] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  209.528918][ T9770] loop1: detected capacity change from 0 to 1764
[  209.689754][ T9773] loop1: detected capacity change from 0 to 512
[  209.694283][ T9773] EXT4-fs: Ignoring removed mblk_io_submit option
[  209.705072][ T9773] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  209.719422][ T9774] loop0: detected capacity change from 0 to 1024
[  209.728616][ T9774] EXT4-fs: Ignoring removed orlov option
[  209.746769][ T9773] EXT4-fs (loop1): 1 truncate cleaned up
[  209.751607][ T9774] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.764147][ T9773] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  209.798539][ T9773] EXT4-fs error (device loop1): ext4_find_extent:903: inode #15: comm syz.1.1433: inode has invalid extent depth: 25964
[  209.805849][   T33] audit: type=1800 audit(1757264645.169:197): pid=9774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1432" name="bus" dev="loop0" ino=18 res=0 errno=0
[  209.824308][ T9773] fs-verity (loop1, inode 15): Error -117 getting verity descriptor size
[  209.857804][ T5958] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.907590][ T5961] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  210.119779][ T9780] loop0: detected capacity change from 0 to 32768
[  210.142870][ T9780] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[  210.149702][ T9780] (syz.0.1435,9780,0):ocfs2_init_local_system_inodes:496 ERROR: status=-22, sysfile=10, slot=0
[  210.153399][ T9780] (syz.0.1435,9780,0):ocfs2_init_local_system_inodes:505 ERROR: status = -22
[  210.157485][ T9780] (syz.0.1435,9780,0):ocfs2_mount_volume:1758 ERROR: status = -22
[  210.163602][ T9780] (syz.0.1435,9780,0):ocfs2_fill_super:1177 ERROR: status = -22
[  210.200003][ T5951] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  210.333737][ T9787] loop0: detected capacity change from 0 to 1024
[  210.373513][ T5951] usb 2-1: Using ep0 maxpacket: 8
[  210.378011][ T5951] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  210.382135][ T5951] usb 2-1: New USB device found, idVendor=05a9, idProduct=2630, bcdDevice=55.12
[  210.387986][ T5951] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  210.393469][ T5951] usb 2-1: config 0 descriptor??
[  210.400320][ T5951] usb 2-1: Found UVC 0.00 device <unnamed> (05a9:2630)
[  210.403273][ T5951] usb 2-1: No valid video chain found.
[  210.714496][ T5850] usb 2-1: USB disconnect, device number 22
[  211.327213][   T26] hfsplus: b-tree write err: -5, ino 4
[  211.786738][ T9806] trusted_key: encrypted_key: insufficient parameters specified
[  212.286112][ T9834] netlink: 324 bytes leftover after parsing attributes in process `syz.4.1458'.
[  212.289513][ T9834] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1458'.
[  212.308763][ T9834] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1458'.
[  212.664556][ T9859] loop4: detected capacity change from 0 to 256
[  212.691742][ T9859] FAT-fs (loop4): Directory bread(block 64) failed
[  212.695865][ T9859] FAT-fs (loop4): Directory bread(block 65) failed
[  212.699420][ T9859] FAT-fs (loop4): Directory bread(block 66) failed
[  212.703621][ T9859] FAT-fs (loop4): Directory bread(block 67) failed
[  212.706524][ T9859] FAT-fs (loop4): Directory bread(block 68) failed
[  212.709262][ T9859] FAT-fs (loop4): Directory bread(block 69) failed
[  212.712305][ T9859] FAT-fs (loop4): Directory bread(block 70) failed
[  212.717025][ T9859] FAT-fs (loop4): Directory bread(block 71) failed
[  212.719940][ T9859] FAT-fs (loop4): Directory bread(block 72) failed
[  212.725314][ T9859] FAT-fs (loop4): Directory bread(block 73) failed
[  212.831600][ T9867] vlan2: entered allmulticast mode
[  212.835296][ T9867] ip6gretap0: entered allmulticast mode
[  213.082274][ T9871] loop4: detected capacity change from 0 to 32768
[  213.089808][ T9871] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section journal: journal bucket at sector 0
[  213.089808][ T9871] journal (size 2912):
[  213.089808][ T9871] Buckets:  0 10 21474902017 8 21474967553 0 21474836481 0 21491613697 0 21508390913 0 21525168129 0 25769803778 2816 65795 25769803778 0 65794 25769803778 16 65796 34359738401 0 0 0 83 0 0 25 6152 248 8 2048 0 11 2816 0 1 16 240 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 30064771074 0 0 30064771074 1 1280 4294967307 1179915 0 18446744069414584320 18446744073709551615 18446744073709551615 0 14322110933576210885 16 0 0 110593 4295032843 1179915 0 18446744069414584320 18446744073709551615 18446744073709551615 0 8469488994664696954 24 0 0 155649 4295098379 1179915 0 18446744069414584320 18446744073709551615 18446744073709551615 0 11142619451731364831 24 0 0 167937 4295163915 1179915 0 18446744069414584320 18446744073709551615 18446744073709551615 0 2487609100058934834 16 0 0 126977 4295229451 1179915 0 18446744069414584320 18446744073709551615 18446744073709551615 0 12421512847996478049 24 
[  213.089960][ T9871] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[  213.822416][ T9910] netlink: 2028 bytes leftover after parsing attributes in process `syz.4.1492'.
[  213.825982][ T9910] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1492'.
[  215.240612][ T9924] loop1: detected capacity change from 0 to 512
[  218.182978][ T9924] EXT4-fs warning (device loop1): ext4_multi_mount_protect:398: Unable to create kmmpd thread for loop1.
[  228.993498][    C0] sched: DL replenish lagged too much
[  269.053064][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  269.064696][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  334.330431][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  334.338831][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  393.829664][   T34] INFO: task syz.0.1460:9837 blocked for more than 148 seconds.
[  393.833035][   T34]       Not tainted syzkaller #0
[  393.835283][   T34] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  396.656594][   T34] task:syz.0.1460      state:D stack:25096 pid:9837  tgid:9837  ppid:5961   task_flags:0x400040 flags:0x00004006
[  399.079743][   T34] Call Trace:
[  399.081254][   T34]  <TASK>
[  399.082629][   T34]  __schedule+0x1798/0x4cc0
[  400.951557][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  400.963068][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  401.142799][   T34]  ? do_raw_spin_lock+0x121/0x290
[  401.145114][   T34]  ? __lock_acquire+0xab9/0xd20
[  401.147260][   T34]  ? __pfx___schedule+0x10/0x10
[  401.149412][   T34]  ? schedule+0x91/0x360
[  401.151223][   T34]  schedule+0x165/0x360
[  403.010142][   T34]  __fuse_simple_request+0xf15/0x18d0
[  403.012236][   T34]  ? __pfx___fuse_simple_request+0x10/0x10
[  403.014445][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  403.606075][   T34]  ? __pfx_autoremove_wake_function+0x10/0x10
[  403.608246][   T34]  fuse_flush+0x5d4/0x800
[  403.609825][   T34]  ? __pfx_locks_remove_posix+0x10/0x10
[  403.618670][   T34]  ? __pfx_fuse_flush+0x10/0x10
[  403.620442][   T34]  ? css_rstat_updated+0x23a/0x4f0
[  403.657855][   T34]  ? __pfx_fuse_flush+0x10/0x10
[  403.659602][   T34]  filp_flush+0xbd/0x190
[  403.661093][   T34]  filp_close+0x1d/0x40
[  403.662863][   T34]  __se_sys_close_range+0x359/0x650
[  403.665026][   T34]  ? __pfx___se_sys_close_range+0x10/0x10

VM DIAGNOSIS:
17:07:16  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000068f6b0
R8 =ffff88801f600237 R9 =1ffff11003ec0046 R10=dffffc0000000000 R11=ffffffff854f3b00
R12=dffffc0000000000 R13=ffffffff99afd8e1 R14=ffffffff99df2420 R15=0000000000000000
RIP=ffffffff854f3b7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8618000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f4e159c5f40 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=0000000000000202 RCX=b85dfc027127cb00 RDX=0000000000000003
RSI=ffffffff8dba7696 RDI=ffffffff8be33880 RBP=ffff8881050a2828 RSP=ffffc900001e0570
R8 =ffffc900001e06f8 R9 =0000000000000000 R10=ffffc900001e0758 R11=fffff5200003c0ed
R12=0000000000000003 R13=0000000000000003 R14=ffffffff8e139f20 R15=ffff8881050a1cc0
RIP=ffffffff819d70b5 RFL=00000046 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c18000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f1d8d6c6658 CR3=000000010ad46000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 00007f1d8f997d20
XMM02=0000000500000007 0408b00300000001 XMM03=00100008d0030100 0000080608c80340
XMM04=0000000000000000 00007f1d8f997d20 XMM05=0000000000000000 000000000003bf12
XMM06=5880040810000601 02c6001000000007 XMM07=5680045800000000 0458900301000000
XMM08=0806588003701000 0880043400000006 XMM09=66666666660a6568 6361635f74736575
XMM10=6563206220306534 6630306139666666 XMM11=6b5f5f2e74696e69 5f6364736f5f6870
XMM12=70745f7664617461 6220622030653930 XMM13=0a32312e79656b5f 5f2e74726174735f
XMM14=3030613031306139 6666666666666666 XMM15=6174735f70745f76 6461746162206220
