last executing test programs:

1m34.628754129s ago: executing program 1 (id=521):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x2, 0x0, {}, [{0x8, 0x1, 0x2}]}, 0x20}}, 0x0)

1m34.628437447s ago: executing program 1 (id=522):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x44, r1, 0x1, 0x170bd2c, 0x8000, {0x34}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x20}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x44}}, 0x20000000)

1m34.628149436s ago: executing program 1 (id=523):
r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000040)=@overlay={0x0, 0x7, 0x4, 0xe000, 0x80000001, {0x0, 0x2710}, {0x0, 0x0, 0x81, 0x3, 0x3, 0x4d, "1e2fdd47"}, 0xffffffff, 0x3, {}, 0x6})

1m34.549733845s ago: executing program 1 (id=524):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0)

1m34.54931469s ago: executing program 1 (id=525):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2, 0x5, 0x0, 0x9, 0x4, 0x0, 0x0, 0x0, [@sadb_sa={0x2, 0x1, 0x4d5, 0x0, 0x72, 0x0, 0x1}]}, 0x20}}, 0x0)

1m34.190031554s ago: executing program 1 (id=534):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="480002"], 0x64}, 0x1, 0x0, 0x0, 0x400}, 0x40010)

1m34.055506866s ago: executing program 32 (id=534):
r0 = socket$nl_audit(0x10, 0x3, 0x9)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r3=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="480002"], 0x64}, 0x1, 0x0, 0x0, 0x400}, 0x40010)

4.341498831s ago: executing program 3 (id=1617):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, 0xf, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008000)

4.271335325s ago: executing program 0 (id=1619):
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r0, 0x90009427, &(0x7f0000000000))

4.271004313s ago: executing program 3 (id=1620):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0xa00, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x18, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0)

4.270532907s ago: executing program 0 (id=1621):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000240)='sched_switch\x00', r0, 0x0, 0x80000000006f2}, 0x18)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
syz_mount_image$hfsplus(&(0x7f0000000180), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x800088, &(0x7f0000000cc0)=ANY=[@ANYRES16=r1, @ANYRESHEX=0xee00, @ANYBLOB=',nls=maccenteuro,session=0x0000000080000001,force,gid=', @ANYRESHEX=0x0, @ANYBLOB="2c6465636f6d706f73652c00033535581a8c93022615d197068a585571f9e001682f64b69c250d32a806d038c69e92463d89236f11ed181e846b20639efe06565a7339be5124740524d0f6b1e7210a5251729cffe820717f00dbdf5993aa65c2586a838662613a63030aa4daf67afc0b9b3984982f81f11ea99bdda5c3bd61dff3b0ef4569954e9767b63da48d58086c70101b2a7663f55c9c962fe9c984d6ef0a74576865d5798b6aca5e93287321e3ef2d"], 0x1, 0x703, &(0x7f00000017c0)="$eJzs3U9sHFf9APDvrNcbbyq52zZp+/sJKVYjImggsb2UBAmJUCHkQ4UiwaHXJXEay2s3sl3kRIhsgcIRTigHDkXIHHpCPSCBOCDKGQnEFeUeiXvEgUUzO7PeXdvr3cR/UvP5SG/nzcz7N9/MvJ2djbUB/M9aeDsmW5HEwsW3NtP1h1v15sOt+kqRj4hTEVGKKHcWkaxGJJ9EXItOiv9LN+bNJXv188aj3//ywoOP6p21cp6y8qVh9ba1h/TQylPMRMREvhxTea/2bsSbO9q7P1bTSXfcacDOF4GD49beoTVO9RGuW+BZdz9iYnKX7bWI0xExld8HRD47lI54eAdurFkOAAAAnk0T+xV4/nE8js2YPprhAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMmQdH4zMMlTqcjPRFL8/n8l35aqVI55vMN9YZ/9H9w6ooEAAAAAAAAAwKH4OP/i/tzjeBybMV1sbyfZd/6vZStnstfn4r1Yj8VYi0uxGY3YiI1Yi7mIyemeBiubjY2NtbmdNX8Rac12u30/rzkfEbUdNeeP4KABAAAAAAAA4OT6YSzE9HEPAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAeiURE51Fls4U+VqUyhExFRGVtFwr4o9F/llXHbLvT0P3AgAAwIlQfPidTv7TybST7DP/y9nn/ql4L1ZjI5ZiI5qxGDezZwGdT/2lv7XqzYdb9ZU07Wz46/8aaxxZixExEe/v0fNsVuJst8ZCfDO+HRdjJq7HWizF96IRG7EYM1FNDyIakUSt2nl6USvGmafv/L2v82t9a9cHx3ZuYP3VbCTVuBVL2dguxY1KdB6bZMeQ9vlqT2+/q0QMROj9NDrJ13Ijxuhmz7/Xz/PnMrn28yO2cThq2ZFPdiMym8Y+j8YLA7EfiMSY58lgT3NR6j6DOrPdS7o62FMR8++OE/PT+TKN9U/6Y37QxnyUNhiJ+SjlZ1/Ey/0xv/PZBy/2V/78P/58/XZpdfn2rfWLh3hIT2NmvwKTRWYwEvWeSLwy/OzLI9FMI9EaPRKTgxumRq15uCp5NLKpaMTZ8htZrhGv9ZyC78bNWIwrMRtzcTVm4ysxH/XuGZams31xLddX+mOSXWulnfPbsGet5z/XU+inA4VrBxCdJ5fG5YWeuPbOdLVsX77l2s9itufse3H42Tf2u0Da///n+bSPH3XfcZ4FfZHI5+ZidC8Nj8Sv2unrenN1ee12486I/V3Il+ll+0H/3Pzr0Uc9+O5+ENLzJZ1xy9laFpNqcb6k+17qjrY/XpX8G5dOvdKOfWe7+2oxHUvxrT2v1Ep+D7ezpc6+V3r3/XN75qx07m9ake/ru8uJd6OZ3YUM2HeqBuCInX79dKX6qPrX6ofVH1dvV9+aevPU1VOfqcTkX8p/mPht6Telryavx4fxg5g+7pECAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBJsH733nKj2Vxc62ZianDL02Yqe/Y1PBOlfctsPTdag1GLGN5XkmcqB3vsn8ZMNQa2FL+w9LQtfxwRQ8pUnnrwydjn2NiZNA4H0mDxw2nZlvbEGNXLRa3dy5RjfSqWG0l5lyvu1PZVELXlRvPf7b7q1ei5ZIAT7vLGyp3L63fvfXFppfHO4juLq/NXr1y9Uv/y3Jcu31pqLs52Xo97lMBhWL97b+K4xwAAAAAAAAAAAACMJ//f/xtP/McM5X3KVNbWd+/53FEfKgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAPAptfB2TLYiibnZS7Pp+sOtejNNRX67ZDkiShGRfD8i+STiWnRS1HqaS/bq541HUbrw4KP6dlvlonxpWL3RtPIUMxExkS/3d2qXZna2d6OnvdYTDS/pHmEasPNF4OC4/TcAAP//Ra/0/g==")
socket$packet(0x11, 0x3, 0x300)
r3 = socket(0x1, 0x80802, 0x0)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0)
bind$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14)
setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000016c0), 0x4)
syz_mount_image$affs(&(0x7f0000009e00), &(0x7f0000000080)='./file0\x00', 0x2014000, &(0x7f0000000340)=ANY=[@ANYBLOB="6d7566732c726f6f743d30303030303030303030303030303030303136372c6d6f64653d30303030303030303030303030303030303030303231322c6d7566732c6d7566732c62733d3078303030303030303030303030303230302c62733d0300000030303030303030303030303630302c6d7566732c6d6f64653d30303030303030303030303430303030313030303030362c6e6f66696c656e616d657472756e636174652c70726f746563742c6d6f64653d30303030303030303030303030303030303030303130312c70726f746563742c6e6f66696c656e616d657472756e636174652c726f6f743d30303030303030303030303030303034353030392c6d7566732c61707072616973655f747970653d696d617369672c00"], 0x1, 0x9ddb, &(0x7f0000013c80)="$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")
openat$comedi(0xffffff9c, 0x0, 0xa400, 0x0)
pipe2$watch_queue(&(0x7f00000002c0), 0x80)
add_key$keyring(&(0x7f0000000040), 0x0, 0x0, 0x0, 0xfffffffffffffffe)
setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, 0x0, 0x0)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4}, &(0x7f0000bbdffc))
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3)
bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe)

4.204128492s ago: executing program 3 (id=1622):
r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0)
write$P9_RSTATu(r0, &(0x7f0000000980)={0x231, 0x7d, 0x0, {{0x500, 0xf0, 0x0, 0x0, {0x2}, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x04nodev{cvfox%\xff\xff\xff\x81\x02\x00\x00\x00\x00\x001\xff\xce\xbc\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00;Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x06\xb4\x94\xe1', 0x12, '\xcf\xc2\x13\xf6\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00', 0x54, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85@\x9a\xc6[\x94\bg\x9d,;\x9e\x1dR\xc3\xd6\xda\x9b\xf6\x99\xfa\x88\xda\xce\b\x00\x00\x00\xa4\x00\xb4\xb0\xb4\xdb\xf6\xc6\x9ai\xd0\x17\xce\xc4Y\x06\xf1t\xa6f\xa8R\x9aE\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1a'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcfs.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb4.\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0x0, 0xffffffffffffffff}}, 0x231)

4.203674551s ago: executing program 3 (id=1623):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x1, 0x3, 0x10004, 0x5}, 0x50)
r1 = socket$packet(0x11, 0x3, 0x300)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x7, 0x32, 0xffffffffffffffff, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
getdents(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x35)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x8, &(0x7f00000001c0)=@framed={{}, [@tail_call]}, &(0x7f0000000300)='GPL\x00', 0x9}, 0x94)
ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x89e0, &(0x7f0000000d00)={0xf})
setsockopt$packet_int(r1, 0x107, 0x7, 0x0, 0x0)
r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000002900)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000010, &(0x7f0000000f80)=ANY=[@ANYRES32, @ANYRESOCT=r3, @ANYRES64, @ANYRES32=r2, @ANYRESHEX=r0, @ANYBLOB="dcbad75874838ee9d635d231d8ada4fbce283fc108eb1674c447c2cacd7712c7124967176232231e047bcd3750482cbe917dcb65eb8367e7bb4952aea27a49b689a096991e45e3d935deb6e18d4d78227f2011d3c930", @ANYRES8], 0xff, 0x6e5, &(0x7f0000001600)="$eJzs3c9vHGcZB/DvrNeON1TBaZM2QkVYiVSQIhInVgrhgkEI5VChqhx6thKnsbpJqsRFaYUgBQQnJA79AwqSbxwQEvegcOFSbr36WAmJS8QhqpAWzezsetdex3Zirx34fKLxvO+877zzzDO/vOusNsD/rStn03yQIlfOvnGvrK+tzrfXVueP1M3tJGW5kTS7sxS3kuJhslC2FwNTBuabfLx8+a3PHq193q0166nqP9Ffb3pHIY/Yxv16ymw93uzINSd3NH53rCq8vJDkaj0fNrXTsYY6lkk7U8/hwHU2ub+b1be83oHDr/d0KrrPzU1mkqP1k7n6naC+OzTGF+H+2NVdDgAAAJ5Tn94+6AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADg+VN//39RT416ntkUve//n+otq8uH0MKOez7Y1zgAAAAAAAAAYDy+9jiPcy/HevVOUf3N/3RVOZEvOsmX8n7uZil3ci73spiVrOROLiSZGRho6t7iysqdC/01S6PXvDhyzYvj2mMAAAAAAAAA+J/0i7TW//4PAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACHQZFMdGfVdKKeZyaNZtbbcj/5R5Kpg453F4pRCx+MPw4AAAB4JtNPsc6XH+dx7uVYr94pqtf8L1evl6fzfm5lJctZSTtLuVa/hi5f9TfWVufba6vzN8uprA+P+71/7SqMqXqEiao2asunqh6tXM9yteRcrhbJfzqdTqO77TPJqV48A3EN+KiMqfhubYeRNeu0lnv+u63eRdgTw29FNJ7Qs7UeXNLPyFwdW7nm8W4GiuqNmmRjJrY9Os2h2kw16mR/SxfS6L/zc2Ifcn60npf78+t9zflu9TPRSJWJi2n0j9TLT85E8vW//PHtG+1b7964fvfs4dmlbUxssXzjOTE/kIlXnutMNHfZf67KxMl+/Up+mB/nbGbzZu5kOT/JYlaylE7dvlifz+XPmSdnamGo9uZ2kUzVx6V7zHYS02x+UJUWc7pa91iWU+R2rmUpr1f/LuZCvpVLuZTLA0f45JZxV/tWXfWNjVd970j/dWTwZ75RF8q722/W73ILT9rjrc7OvdK995d5PT6Q1+5Z/6jf6/jAdTA3kKUXe9mZHDn409wbm1+pC+U2frnNc2K8ZupMlBdQ7ynRi+6lbiaa1bNo83n++065Xtq3Op0bi+9tMf79DfXX6nl5Wq1+dbvePaMPxd4qz5cXM13fSYbPjrLtpf5dZqCts34ud9uGn7jleiertqLoXak/yu3qBNh8pU7Vv8N1R5oYGOli1fbKyK3MV22nBtqGft/K7bRzbQz5A+Bp/P3tfnEmR6da/2x92vqk9avWjdYb098/8u0jr05l8m+T32nOTbzWeLX4cz7Jz9Zf/wMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAE/v7gcfvrvYbi/dGV1obN20uND74pp2e6mVjX02jlw0U/U5MnrAov5Cn23iOZSFNDc3TZd5GVwy2U3UmCNsbQxjU6Hz82TsGet9ieDoPr8tC81NZ9SowsLQkj9tHvCjXUZY7Oy62MdCI+PdaHkVj2o6oBsSMDbnV26+d/7uBx9+c/nm4jtL7yzdmrx06fLc5Uuvz5+/vtxemuv+POgogf2w/tA/6EgAAAAAAAAAAACAnRr1wYDTL2z3oZEdfcbD/ywEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA9sSVs2k+SJELc+fmyvra6ny7nHrl9Z7NJI1GUvw0KR4mC+lOmRkYrsgfHqYzYjsfL19+67NHa5+vj9Xs9k8a9XxrT25Ncr+eMptkop4/g6Hxrj7zeMW/e/tQJuyLTqez8Gzxwd74bwAAAP//uNjyEw==")
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./bus\x00', 0x0, &(0x7f0000000240), 0x21, 0x4aa, &(0x7f0000001140)="$eJzs3c9PXFsdAPDvvUChlBaqXahRW2u1mqYzMG1J01V1oTFNE2PjykWLMCWEGYYwgxbsgv4PJjZxpX+CCxMXJl25d6e7t+lbNOl7r3kv5SVvMS/3zvCjlAHeK2US5vNJTu499wzzPYfJPWf4AnMC6FkXImItIk5ExIOIGG1fT9olbrdK9rjXrx5Pr796PJ1Es3nv4yRvz67Ftq/JnGo/51BE/OaXEb9P3o5bX1mdn6pUykvterFRXSzWV1avzlWnZsv9sVAqTU5Mjt+8dqN0aGM9X/3Hy1/M3fntv//1vef/Xfvpn7JujbTbto/jMLWGPrAZJ9MfEXfeR7Au6GuP50S3O8LXkkbENyLiYn7/j0Zf/moCAMdZszkazdHtdQDguEvzHFiSFtq5gJFI00KhlcM7F8NppVZvXHlYW16YaeXKxmIgfThXKY+3c4VjMZBk9Yn8fKte2lG/FhFnI+LPgyfzemG6Vpnp5hsfAOhhp3as/58NttZ/AOCYG+p2BwCAI2f9B4DeY/0HgN5j/QeA3mP9B4DeY/0HgN5j/QeAnvLru3ez0lxvf/71zB9WlucHI6Jcny9Ul6cL07WlxcJsrTabf2ZPdb/nq9RqixPXY/lRsVGuN4r1ldX71dryQuN+/rne98sDRzIqAGAvZ88/+38SEWu3TuYltu3lYK2G4y3tdgeArunrdgeArrHbF/QuP+MDu2zR+4aOfyL09PD7AhyNy9+W/4deJf8PvUv+H3qX/D/0rmYzsec/APQYOX7A7/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADgqxvJS5IW2nuBj0SaFgoRpyNiLAaSh3OV8nhEnImI/w0ODGb1iW53GgB4R+mLpL3/1+XRSyM7W08knw/mx4j441/v/eXRVKOxNJFd/2TzeuNp+3qpG/0HAPazsU5vrOMbXr96PL1RjrI/L3/W2lw0i7veLq2W/ujPj0MxEBHDnybtekv2fqXvEOKvPYmIb+02/iTPjYy1dz7dGT+LffpI46dvxE/zttYx+1588xD6Ar3mWTb/3N7t/kvjQn7c/f4fymeod7cx/62/Nf+lm/NfX4f578JBY1z/z686tj2J+E7/VvwXP9+afzbiJx3iXzpg/A+++/2Lndqaf4u4HLuNP3kjVrFRXSzWV1avzlWnZsuz5YVSaXJicvzmtRulYp6jLm5kqt/20a0rZ/Ya/3CH+EP7jP9HBxz/37948Lsf7BH/Jz/c/fU/t0f8bE388QHjTw3/s+P23Vn8mQ7j3+/1v3LA+M8/XJ054EMBgCNQX1mdn6pUyktOnDhxsnnS7ZkJeN+2bvpu9wQAAAAAAAAAAAAAAOjkKP6dqNtjBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4Pj6MgAA//8Z7dZO")
syz_emit_vhci(&(0x7f0000001100)=ANY=[@ANYBLOB="040e04001120"], 0x7)
syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)

4.010731998s ago: executing program 3 (id=1624):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x9}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='contention_begin\x00', r0}, 0x18)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_SIOCSIFBR(r1, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2})

3.605173751s ago: executing program 3 (id=1625):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.442398146s ago: executing program 33 (id=1625):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x20000002}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

3.192752021s ago: executing program 0 (id=1628):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x50}}, 0x0)

3.02149389s ago: executing program 0 (id=1629):
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000100)='./file2\x00', 0x1010051, &(0x7f0000000240)={[{@debug}, {@inlinecrypt}, {@noblock_validity}, {@dioread_lock}, {@nouid32}, {@resuid}]}, 0x1, 0x550, &(0x7f00000002c0)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
readlink(&(0x7f0000000000)='./file2\x00', &(0x7f00000000c0)=""/53, 0x35)

2.868133149s ago: executing program 0 (id=1632):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='ns\x00')
openat$cgroup(r0, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0)

925.169374ms ago: executing program 0 (id=1648):
r0 = epoll_create(0x7)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x40002008})

808.953358ms ago: executing program 34 (id=1648):
r0 = epoll_create(0x7)
r1 = epoll_create1(0x0)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180))
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000140)={0x40002008})

282.074136ms ago: executing program 2 (id=1652):
r0 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x14340, 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xf, 0x4, 0x8, 0x2}, 0x48)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r1, &(0x7f0000000300), 0x0}, 0x20)

281.867932ms ago: executing program 2 (id=1653):
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x40, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x12345})
r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002)
ioctl$SCSI_IOCTL_GET_PCI(r0, 0x5393, &(0x7f0000000000))

157.658637ms ago: executing program 2 (id=1654):
r0 = epoll_create1(0x0)
r1 = socket$unix(0x1, 0x1, 0x0)
close(r1)
socket(0x1d, 0x2, 0x6)
setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0xffff, 0x4)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f00000000c0)={0xa0028000})

80.528801ms ago: executing program 2 (id=1655):
syz_emit_vhci(&(0x7f0000000480)=@HCI_EVENT_PKT={0x4, @hci_ev_mode_change={{0x14, 0x6}, {0x7, 0xc9, 0xf9, 0x5}}}, 0x9)

80.337399ms ago: executing program 2 (id=1656):
r0 = socket$xdp(0x2c, 0x3, 0x0)
r1 = socket$inet6_udplite(0xa, 0x2, 0x88)
setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000140)=0x4000, 0x4)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', <r2=>0x0})
bind$xdp(r0, &(0x7f0000000240)={0x2c, 0x3, r2, 0x1000000}, 0x10)

0s ago: executing program 2 (id=1657):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCSARP(r0, 0x8919, &(0x7f0000000180)={{0x2, 0x4e23, @empty}, {0x20000010304, @local}, 0x4, {0x2, 0x4e20, @rand_addr=0x64010102}})

kernel console output (not intermixed with test programs):

da441363-bb6a-4ab9-999b-c1f40db4fee2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_delay=2013266920,journal_reclaim_delay=10,nojournal_transaction_names
[  124.156499][ T7443]   allowing incompatible features above 0.0: (unknown version)
[  124.156506][ T7443]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  124.156516][ T7443]   with devices loop2
[  124.176739][ T7443] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): Using encoding defined by superblock: utf8-12.1.0
[  124.182644][ T7443] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing new filesystem
[  124.193342][ T7443] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-write
[  124.527826][ T7443] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking superblocks
[  124.536310][ T7443] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): initializing freespace
[  124.541382][ T7443] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done initializing freespace
[  124.545553][ T7443] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots table
[  124.548568][ T7443] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): reading snapshots done
[  124.574195][ T7443] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): done starting filesystem
[  124.676433][ T5850] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutting down
[  124.679815][ T5850] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): going read-only
[  124.687436][ T5850] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): finished waiting for writes to stop
[  124.694187][ T5850] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators, journal seq 3
[  124.730279][ T5850] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): flushing journal and stopping allocators complete, journal seq 3
[  124.738731][ T5850] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): clean shutdown complete, journal seq 4
[  124.744882][ T5850] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): marking filesystem clean
[  124.769768][ T5850] bcachefs (da441363-bb6a-4ab9-999b-c1f40db4fee2): shutdown complete
[  124.954692][ T7472] loop0: detected capacity change from 0 to 128
[  125.049989][ T7474] loop3: detected capacity change from 0 to 512
[  125.107653][ T7474] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  125.134335][ T7474] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  125.239817][ T7335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  125.357529][ T7481] netlink: 24 bytes leftover after parsing attributes in process `syz.3.582'.
[  125.781642][ T5239] Bluetooth: hci2: command tx timeout
[  126.092581][ T7493] netlink: 'syz.3.588': attribute type 15 has an invalid length.
[  126.096117][ T7493] netlink: 'syz.3.588': attribute type 7 has an invalid length.
[  126.220071][ T7495] loop3: detected capacity change from 0 to 1024
[  126.324796][   T53] kworker/u10:3: attempt to access beyond end of device
[  126.324796][   T53] loop0: rw=1, sector=145, nr_sectors = 16 limit=128
[  126.331874][   T53] kworker/u10:3: attempt to access beyond end of device
[  126.331874][   T53] loop0: rw=1, sector=169, nr_sectors = 8 limit=128
[  126.336703][   T53] kworker/u10:3: attempt to access beyond end of device
[  126.336703][   T53] loop0: rw=1, sector=185, nr_sectors = 8 limit=128
[  126.344980][   T53] kworker/u10:3: attempt to access beyond end of device
[  126.344980][   T53] loop0: rw=1, sector=201, nr_sectors = 8 limit=128
[  126.350047][   T53] kworker/u10:3: attempt to access beyond end of device
[  126.350047][   T53] loop0: rw=1, sector=217, nr_sectors = 8 limit=128
[  126.357502][   T53] kworker/u10:3: attempt to access beyond end of device
[  126.357502][   T53] loop0: rw=1, sector=233, nr_sectors = 8 limit=128
[  126.365090][   T53] kworker/u10:3: attempt to access beyond end of device
[  126.365090][   T53] loop0: rw=1, sector=249, nr_sectors = 8 limit=128
[  126.370467][   T53] kworker/u10:3: attempt to access beyond end of device
[  126.370467][   T53] loop0: rw=1, sector=265, nr_sectors = 8 limit=128
[  126.375425][   T53] kworker/u10:3: attempt to access beyond end of device
[  126.375425][   T53] loop0: rw=1, sector=281, nr_sectors = 8 limit=128
[  126.390757][   T53] kworker/u10:3: attempt to access beyond end of device
[  126.390757][   T53] loop0: rw=1, sector=297, nr_sectors = 8 limit=128
[  126.457090][ T7499] ucma_write: process 457 (syz.0.590) changed security contexts after opening file descriptor, this is not allowed.
[  126.527638][ T7503] netlink: 4 bytes leftover after parsing attributes in process `syz.2.592'.
[  126.791185][ T7515] input: syz0 as /devices/virtual/input/input5
[  126.793944][ T7515] input: failed to attach handler leds to device input5, error: -6
[  127.270928][   T24] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  127.441235][   T24] usb 1-1: Using ep0 maxpacket: 16
[  127.491791][   T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  127.505568][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  127.563042][   T24] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  127.584613][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.600455][   T24] usb 1-1: Product: syz
[  127.609101][   T24] usb 1-1: Manufacturer: syz
[  127.618168][   T24] usb 1-1: SerialNumber: syz
[  127.671644][   T24] usb 1-1: config 0 descriptor??
[  127.690242][   T24] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  127.699482][   T24] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  127.862407][ T5239] Bluetooth: hci2: command tx timeout
[  128.293178][   T24] em28xx 1-1:0.0: unknown em28xx chip ID (232)
[  128.303476][ T7544] loop3: detected capacity change from 0 to 4096
[  128.390082][ T7544] overlayfs: upper fs does not support tmpfile.
[  128.403354][ T7544] overlayfs: workdir/#9 already exists
[  128.409578][ T7547] netlink: 'syz.2.610': attribute type 11 has an invalid length.
[  128.512189][   T24] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  128.602372][ T7555] loop2: detected capacity change from 0 to 1024
[  128.683141][ T7555] EXT4-fs (loop2): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  128.689066][ T7555] ext4 filesystem being mounted at /202/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  128.709542][ T7555] EXT4-fs (loop2): Online resizing not supported with bigalloc
[  128.747312][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  128.748130][   T24] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  128.764599][   T24] em28xx 1-1:0.0: No AC97 audio processor
[  128.771662][   T24] usb 1-1: USB disconnect, device number 7
[  128.776179][   T24] em28xx 1-1:0.0: Disconnecting em28xx
[  128.785274][   T24] em28xx 1-1:0.0: Freeing device
[  128.792446][ T6046] udevd[6046]: setting mode of /dev/bus/usb/001/007 to 020664 failed: No such file or directory
[  128.801510][ T6046] udevd[6046]: setting owner of /dev/bus/usb/001/007 to uid=0, gid=0 failed: No such file or directory
[  129.716853][ T7565] loop2: detected capacity change from 0 to 4096
[  129.725828][ T7565] ntfs3: Invalid value for umask.
[  130.395888][ T7573] loop0: detected capacity change from 0 to 256
[  130.850845][ T5317] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  131.021194][ T5317] usb 1-1: Using ep0 maxpacket: 16
[  131.026517][ T5317] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79
[  131.029458][ T5317] usb 1-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0
[  131.033413][ T5317] usb 1-1: Manufacturer: syz
[  131.041818][ T5317] usb 1-1: config 0 descriptor??
[  131.250431][ T5317] usb 1-1: Not enough endpoints found in device, aborting!
[  131.445693][ T7618] loop2: detected capacity change from 0 to 512
[  131.452424][ T5317] usb 1-1: USB disconnect, device number 8
[  131.457904][ T7618] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  131.488696][ T7618] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  131.494379][ T7618] ext4 filesystem being mounted at /214/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  131.505325][ T7618] EXT4-fs error (device loop2): ext4_xattr_block_find:1869: inode #15: comm syz.2.639: corrupted xattr block 19: overlapping e_value 
[  131.512252][ T7618] EXT4-fs (loop2): Remounting filesystem read-only
[  131.523279][ T5850] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  131.574168][ T7622] loop3: detected capacity change from 0 to 4096
[  131.782127][ T7624] loop2: detected capacity change from 0 to 40427
[  131.798645][ T7624] F2FS-fs (loop2): invalid crc value
[  131.855983][ T7624] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  131.866998][ T7624] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  132.099585][ T7640] netlink: 'syz.0.645': attribute type 2 has an invalid length.
[  132.106446][ T7640] netlink: 116 bytes leftover after parsing attributes in process `syz.0.645'.
[  132.160460][ T7643] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048)
[  132.369636][ T7655] loop0: detected capacity change from 0 to 164
[  132.384832][ T7655] Unable to read rock-ridge attributes
[  132.418398][ T7655] Unable to read rock-ridge attributes
[  132.556538][ T5850] bio_check_eod: 97 callbacks suppressed
[  132.556550][ T5850] syz-executor: attempt to access beyond end of device
[  132.556550][ T5850] loop2: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  132.588237][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  132.588258][ T5850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.588265][ T5850] Call Trace:
[  132.588271][ T5850]  <TASK>
[  132.588275][ T5850]  dump_stack_lvl+0x189/0x250
[  132.588296][ T5850]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.588309][ T5850]  ? __pfx_queue_work_on+0x10/0x10
[  132.588320][ T5850]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  132.588335][ T5850]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  132.588356][ T5850]  f2fs_handle_critical_error+0x37c/0x540
[  132.588375][ T5850]  f2fs_write_end_io+0x886/0xb60
[  132.588396][ T5850]  __submit_merged_bio+0x27a/0x6a0
[  132.588414][ T5850]  __submit_merged_write_cond+0x255/0x530
[  132.588432][ T5850]  f2fs_write_data_pages+0x261d/0x3000
[  132.588462][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  132.588503][ T5850]  ? check_path+0x21/0x40
[  132.588514][ T5850]  ? check_noncircular+0xe0/0x160
[  132.588561][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  132.588571][ T5850]  do_writepages+0x32e/0x550
[  132.588593][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[  132.588609][ T5850]  filemap_fdatawrite+0x199/0x240
[  132.588625][ T5850]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  132.588674][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[  132.588691][ T5850]  f2fs_sync_dirty_inodes+0x31f/0x830
[  132.588712][ T5850]  f2fs_write_checkpoint+0x95a/0x1df0
[  132.588767][ T5850]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  132.588815][ T5850]  ? kill_f2fs_super+0x298/0x6c0
[  132.588832][ T5850]  kill_f2fs_super+0x2c3/0x6c0
[  132.588849][ T5850]  ? __pfx_kill_f2fs_super+0x10/0x10
[  132.588859][ T5850]  ? radix_tree_delete_item+0x2b6/0x400
[  132.588880][ T5850]  ? shrinker_free+0x2ce/0x3e0
[  132.588894][ T5850]  deactivate_locked_super+0xbc/0x130
[  132.588907][ T5850]  cleanup_mnt+0x425/0x4c0
[  132.588920][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.588934][ T5850]  task_work_run+0x1d4/0x260
[  132.588952][ T5850]  ? __pfx_task_work_run+0x10/0x10
[  132.588965][ T5850]  ? __x64_sys_umount+0x122/0x160
[  132.588984][ T5850]  ? exit_to_user_mode_loop+0x40/0x110
[  132.589003][ T5850]  exit_to_user_mode_loop+0xec/0x110
[  132.589017][ T5850]  do_syscall_64+0x2bd/0x3b0
[  132.589027][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.589035][ T5850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.589044][ T5850]  ? exc_page_fault+0x9f/0xf0
[  132.589056][ T5850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.589066][ T5850] RIP: 0033:0x7f725398ff17
[  132.589080][ T5850] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  132.589089][ T5850] RSP: 002b:00007ffcca56c518 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  132.589104][ T5850] RAX: 0000000000000000 RBX: 00007f7253a11c05 RCX: 00007f725398ff17
[  132.589117][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcca56c5d0
[  132.589123][ T5850] RBP: 00007ffcca56c5d0 R08: 0000000000000000 R09: 0000000000000000
[  132.589130][ T5850] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcca56d660
[  132.589137][ T5850] R13: 00007f7253a11c05 R14: 000000000002050e R15: 00007ffcca56d6a0
[  132.589155][ T5850]  </TASK>
[  132.589160][ T5850] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  132.723205][ T5850] CPU: 1 UID: 0 PID: 5850 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  132.723220][ T5850] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  132.723225][ T5850] Call Trace:
[  132.723228][ T5850]  <TASK>
[  132.723232][ T5850]  dump_stack_lvl+0x189/0x250
[  132.723249][ T5850]  ? __pfx_dump_stack_lvl+0x10/0x10
[  132.723258][ T5850]  ? __pfx_queue_work_on+0x10/0x10
[  132.723266][ T5850]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  132.723278][ T5850]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  132.723294][ T5850]  f2fs_handle_critical_error+0x37c/0x540
[  132.723308][ T5850]  f2fs_write_end_io+0x886/0xb60
[  132.723325][ T5850]  __submit_merged_bio+0x27a/0x6a0
[  132.723338][ T5850]  __submit_merged_write_cond+0x255/0x530
[  132.723351][ T5850]  f2fs_write_data_pages+0x261d/0x3000
[  132.723373][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  132.723402][ T5850]  ? check_path+0x21/0x40
[  132.723410][ T5850]  ? check_noncircular+0xe0/0x160
[  132.723440][ T5850]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  132.723447][ T5850]  do_writepages+0x32e/0x550
[  132.723463][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[  132.723473][ T5850]  filemap_fdatawrite+0x199/0x240
[  132.723485][ T5850]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  132.723515][ T5850]  ? do_raw_spin_unlock+0x4d/0x240
[  132.723525][ T5850]  f2fs_sync_dirty_inodes+0x31f/0x830
[  132.723540][ T5850]  f2fs_write_checkpoint+0x95a/0x1df0
[  132.723558][ T5850]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  132.723587][ T5850]  ? kill_f2fs_super+0x298/0x6c0
[  132.723597][ T5850]  kill_f2fs_super+0x2c3/0x6c0
[  132.723607][ T5850]  ? __pfx_kill_f2fs_super+0x10/0x10
[  132.723614][ T5850]  ? radix_tree_delete_item+0x2b6/0x400
[  132.723628][ T5850]  ? shrinker_free+0x2ce/0x3e0
[  132.723638][ T5850]  deactivate_locked_super+0xbc/0x130
[  132.723648][ T5850]  cleanup_mnt+0x425/0x4c0
[  132.723655][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.723663][ T5850]  task_work_run+0x1d4/0x260
[  132.723674][ T5850]  ? __pfx_task_work_run+0x10/0x10
[  132.723681][ T5850]  ? __x64_sys_umount+0x122/0x160
[  132.723693][ T5850]  ? exit_to_user_mode_loop+0x40/0x110
[  132.723705][ T5850]  exit_to_user_mode_loop+0xec/0x110
[  132.723715][ T5850]  do_syscall_64+0x2bd/0x3b0
[  132.723722][ T5850]  ? lockdep_hardirqs_on+0x9c/0x150
[  132.723752][ T5850]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.723760][ T5850]  ? exc_page_fault+0x9f/0xf0
[  132.723767][ T5850]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  132.723773][ T5850] RIP: 0033:0x7f725398ff17
[  132.723782][ T5850] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  132.723788][ T5850] RSP: 002b:00007ffcca56c518 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  132.723796][ T5850] RAX: 0000000000000000 RBX: 00007f7253a11c05 RCX: 00007f725398ff17
[  132.723801][ T5850] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcca56c5d0
[  132.723805][ T5850] RBP: 00007ffcca56c5d0 R08: 0000000000000000 R09: 0000000000000000
[  132.723809][ T5850] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcca56d660
[  132.723813][ T5850] R13: 00007f7253a11c05 R14: 000000000002050e R15: 00007ffcca56d6a0
[  132.723826][ T5850]  </TASK>
[  132.723829][ T5850] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  132.732886][ T7657] loop0: detected capacity change from 0 to 40427
[  132.843181][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  132.846349][ T7657] F2FS-fs (loop0): invalid crc value
[  132.850665][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  132.937755][ T7657] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  132.944782][ T7657] F2FS-fs (loop0): Start checkpoint disabled!
[  132.955992][ T7657] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  133.119492][   T33] audit: type=1800 audit(1757451586.340:8): pid=7667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.653" name="bus" dev="loop0" ino=10 res=0 errno=0
[  133.151256][ T7668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.657'.
[  133.166390][ T7667] syz.0.653: attempt to access beyond end of device
[  133.166390][ T7667] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  133.221504][ T7667] syz.0.653: attempt to access beyond end of device
[  133.221504][ T7667] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  133.244431][ T7667] syz.0.653: attempt to access beyond end of device
[  133.244431][ T7667] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  133.272174][ T7667] syz.0.653: attempt to access beyond end of device
[  133.272174][ T7667] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  133.279171][ T7671] loop3: detected capacity change from 0 to 1024
[  133.309121][ T7667] syz.0.653: attempt to access beyond end of device
[  133.309121][ T7667] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  133.349552][ T7667] syz.0.653: attempt to access beyond end of device
[  133.349552][ T7667] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  133.406357][ T7667] syz.0.653: attempt to access beyond end of device
[  133.406357][ T7667] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  133.467483][ T7667] syz.0.653: attempt to access beyond end of device
[  133.467483][ T7667] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  133.480843][ T7677] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1303
[  133.542696][ T1008] kworker/u9:3: attempt to access beyond end of device
[  133.542696][ T1008] loop0: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  133.552291][ T1008] CPU: 1 UID: 0 PID: 1008 Comm: kworker/u9:3 Not tainted syzkaller #0 PREEMPT(full) 
[  133.552305][ T1008] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  133.552310][ T1008] Workqueue: writeback wb_workfn (flush-7:0)
[  133.552325][ T1008] Call Trace:
[  133.552329][ T1008]  <TASK>
[  133.552333][ T1008]  dump_stack_lvl+0x189/0x250
[  133.552346][ T1008]  ? __pfx_dump_stack_lvl+0x10/0x10
[  133.552354][ T1008]  ? __pfx_queue_work_on+0x10/0x10
[  133.552362][ T1008]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  133.552374][ T1008]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  133.552388][ T1008]  f2fs_handle_critical_error+0x37c/0x540
[  133.552402][ T1008]  f2fs_write_end_io+0x886/0xb60
[  133.552432][ T1008]  __submit_merged_bio+0x27a/0x6a0
[  133.552447][ T1008]  __submit_merged_write_cond+0x255/0x530
[  133.552459][ T1008]  f2fs_write_data_pages+0x261d/0x3000
[  133.552479][ T1008]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  133.552491][ T1008]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  133.552511][ T1008]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  133.552525][ T1008]  ? trace_f2fs_writepages+0x7f/0x200
[  133.552535][ T1008]  ? f2fs_write_node_pages+0x478/0x6e0
[  133.552553][ T1008]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  133.552559][ T1008]  do_writepages+0x32e/0x550
[  133.552571][ T1008]  ? reacquire_held_locks+0x127/0x1d0
[  133.552578][ T1008]  ? writeback_sb_inodes+0x384/0x1010
[  133.552590][ T1008]  __writeback_single_inode+0x145/0xff0
[  133.552598][ T1008]  ? do_raw_spin_unlock+0x4d/0x240
[  133.552608][ T1008]  writeback_sb_inodes+0x6c7/0x1010
[  133.552616][ T1008]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.552633][ T1008]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  133.552657][ T1008]  ? rcu_is_watching+0x15/0xb0
[  133.552669][ T1008]  wb_writeback+0x43b/0xaf0
[  133.552680][ T1008]  ? queue_io+0x361/0x590
[  133.552689][ T1008]  ? __pfx_wb_writeback+0x10/0x10
[  133.552701][ T1008]  ? _raw_spin_unlock_irq+0x23/0x50
[  133.552712][ T1008]  wb_workfn+0x409/0xef0
[  133.552748][ T1008]  ? __pfx_wb_workfn+0x10/0x10
[  133.552759][ T1008]  ? __lock_acquire+0xab9/0xd20
[  133.552773][ T1008]  ? process_scheduled_works+0x9ef/0x17b0
[  133.552783][ T1008]  ? _raw_spin_unlock_irq+0x23/0x50
[  133.552792][ T1008]  ? process_scheduled_works+0x9ef/0x17b0
[  133.552797][ T1008]  ? process_scheduled_works+0x9ef/0x17b0
[  133.552805][ T1008]  process_scheduled_works+0xae1/0x17b0
[  133.552823][ T1008]  ? __pfx_process_scheduled_works+0x10/0x10
[  133.552836][ T1008]  worker_thread+0x8a0/0xda0
[  133.552844][ T1008]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  133.552857][ T1008]  ? __kthread_parkme+0x7b/0x200
[  133.552868][ T1008]  kthread+0x711/0x8a0
[  133.552878][ T1008]  ? __pfx_worker_thread+0x10/0x10
[  133.552884][ T1008]  ? __pfx_kthread+0x10/0x10
[  133.552893][ T1008]  ? _raw_spin_unlock_irq+0x23/0x50
[  133.552902][ T1008]  ? lockdep_hardirqs_on+0x9c/0x150
[  133.552908][ T1008]  ? __pfx_kthread+0x10/0x10
[  133.552916][ T1008]  ret_from_fork+0x3fc/0x770
[  133.552925][ T1008]  ? __pfx_ret_from_fork+0x10/0x10
[  133.552934][ T1008]  ? __switch_to_asm+0x39/0x70
[  133.552942][ T1008]  ? __switch_to_asm+0x33/0x70
[  133.552949][ T1008]  ? __pfx_kthread+0x10/0x10
[  133.552957][ T1008]  ret_from_fork_asm+0x1a/0x30
[  133.552972][ T1008]  </TASK>
[  133.553329][ T1008] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  133.678201][ T7683] IPv6: addrconf: prefix option has invalid lifetime
[  135.165756][ T7708] loop2: detected capacity change from 0 to 32768
[  135.211941][ T7708] (syz.2.673,7708,0):ocfs2_check_set_options:1252 ERROR: User quotas were requested, but this filesystem does not have the feature enabled.
[  135.233515][ T7708] (syz.2.673,7708,0):ocfs2_fill_super:1177 ERROR: status = -22
[  135.402207][ T7708] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  135.696853][ T7722] netlink: 'syz.3.679': attribute type 5 has an invalid length.
[  135.710413][ T7722] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.679'.
[  135.814838][ T7718] loop2: detected capacity change from 0 to 32768
[  135.847147][ T7700] syz.0.669: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  135.856353][ T7700] CPU: 1 UID: 0 PID: 7700 Comm: syz.0.669 Not tainted syzkaller #0 PREEMPT(full) 
[  135.856365][ T7700] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  135.856370][ T7700] Call Trace:
[  135.856374][ T7700]  <TASK>
[  135.856378][ T7700]  dump_stack_lvl+0x189/0x250
[  135.856393][ T7700]  ? __pfx_dump_stack_lvl+0x10/0x10
[  135.856402][ T7700]  ? __pfx__printk+0x10/0x10
[  135.856412][ T7700]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  135.856420][ T7700]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  135.856428][ T7700]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  135.856437][ T7700]  warn_alloc+0x214/0x310
[  135.856451][ T7700]  ? __pfx_warn_alloc+0x10/0x10
[  135.856464][ T7700]  ? __get_vm_area_node+0x28f/0x300
[  135.856474][ T7700]  ? hash_ipport4_resize+0x1ec/0x1a50
[  135.856485][ T7700]  __vmalloc_node_range_noprof+0x67e/0x12f0
[  135.856503][ T7700]  ? alloc_pages_mpol+0x3cd/0x4a0
[  135.856514][ T7700]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  135.856544][ T7700]  ? rcu_is_watching+0x15/0xb0
[  135.856552][ T7700]  ? hash_ipport4_resize+0x1ec/0x1a50
[  135.856558][ T7700]  ? hash_ipport4_resize+0x1ec/0x1a50
[  135.856564][ T7700]  __kvmalloc_node_noprof+0x3b8/0x5f0
[  135.856574][ T7700]  ? hash_ipport4_resize+0x1ec/0x1a50
[  135.856584][ T7700]  hash_ipport4_resize+0x1ec/0x1a50
[  135.856594][ T7700]  ? __pfx_hash_ipport4_add+0x10/0x10
[  135.856611][ T7700]  call_ad+0x44e/0xb00
[  135.856624][ T7700]  ? __pfx_call_ad+0x10/0x10
[  135.856640][ T7700]  ? __nla_parse+0x40/0x60
[  135.856649][ T7700]  ip_set_ad+0x791/0x930
[  135.856662][ T7700]  ? __pfx_ip_set_ad+0x10/0x10
[  135.856686][ T7700]  nfnetlink_rcv_msg+0xb4d/0x1130
[  135.856698][ T7700]  ? nfnetlink_rcv_msg+0x20d/0x1130
[  135.856737][ T7700]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  135.856746][ T7700]  ? kasan_save_free_info+0x46/0x50
[  135.856773][ T7700]  netlink_rcv_skb+0x208/0x470
[  135.856781][ T7700]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[  135.856791][ T7700]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  135.856803][ T7700]  ? bpf_lsm_capable+0x9/0x20
[  135.856813][ T7700]  ? security_capable+0x7e/0x2e0
[  135.856827][ T7700]  nfnetlink_rcv+0x26a/0x2520
[  135.856837][ T7700]  ? __dev_queue_xmit+0x1d79/0x3b50
[  135.856851][ T7700]  ? __dev_queue_xmit+0x27b/0x3b50
[  135.856865][ T7700]  ? __pfx_nfnetlink_rcv+0x10/0x10
[  135.856874][ T7700]  ? __pfx___dev_queue_xmit+0x10/0x10
[  135.856888][ T7700]  ? ref_tracker_free+0x63a/0x7d0
[  135.856894][ T7700]  ? __asan_memcpy+0x40/0x70
[  135.856901][ T7700]  ? __pfx_ref_tracker_free+0x10/0x10
[  135.856906][ T7700]  ? __skb_clone+0x63/0x7a0
[  135.856917][ T7700]  ? __skb_clone+0x483/0x7a0
[  135.856928][ T7700]  ? skb_clone+0x246/0x3a0
[  135.856937][ T7700]  ? __netlink_deliver_tap+0x807/0x850
[  135.856944][ T7700]  ? netlink_deliver_tap+0x2e/0x1b0
[  135.856953][ T7700]  ? netlink_deliver_tap+0x2e/0x1b0
[  135.856963][ T7700]  netlink_unicast+0x82f/0x9e0
[  135.856976][ T7700]  ? __pfx_netlink_unicast+0x10/0x10
[  135.856986][ T7700]  ? netlink_sendmsg+0x642/0xb30
[  135.856992][ T7700]  ? skb_put+0x11b/0x210
[  135.857001][ T7700]  netlink_sendmsg+0x805/0xb30
[  135.857011][ T7700]  ? __pfx_netlink_sendmsg+0x10/0x10
[  135.857019][ T7700]  ? aa_sock_msg_perm+0xf1/0x1d0
[  135.857027][ T7700]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  135.857035][ T7700]  ? __pfx_netlink_sendmsg+0x10/0x10
[  135.857042][ T7700]  __sock_sendmsg+0x21c/0x270
[  135.857054][ T7700]  ____sys_sendmsg+0x505/0x830
[  135.857064][ T7700]  ? __pfx_____sys_sendmsg+0x10/0x10
[  135.857081][ T7700]  ? import_iovec+0x74/0xa0
[  135.857092][ T7700]  ___sys_sendmsg+0x21f/0x2a0
[  135.857101][ T7700]  ? __pfx____sys_sendmsg+0x10/0x10
[  135.857124][ T7700]  ? __fget_files+0x2a/0x420
[  135.857130][ T7700]  ? __fget_files+0x3a0/0x420
[  135.857140][ T7700]  __x64_sys_sendmsg+0x19b/0x260
[  135.857149][ T7700]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  135.857162][ T7700]  ? rcu_is_watching+0x15/0xb0
[  135.857170][ T7700]  ? do_syscall_64+0xbe/0x3b0
[  135.857180][ T7700]  do_syscall_64+0xfa/0x3b0
[  135.857186][ T7700]  ? lockdep_hardirqs_on+0x9c/0x150
[  135.857193][ T7700]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.857199][ T7700]  ? exc_page_fault+0x9f/0xf0
[  135.857206][ T7700]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  135.857213][ T7700] RIP: 0033:0x7f546418ebe9
[  135.857220][ T7700] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  135.857225][ T7700] RSP: 002b:00007f54650ab038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  135.857233][ T7700] RAX: ffffffffffffffda RBX: 00007f54643c5fa0 RCX: 00007f546418ebe9
[  135.857238][ T7700] RDX: 0000000000000080 RSI: 00002000000002c0 RDI: 0000000000000004
[  135.857242][ T7700] RBP: 00007f5464211e19 R08: 0000000000000000 R09: 0000000000000000
[  135.857246][ T7700] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  135.857250][ T7700] R13: 00007f54643c6038 R14: 00007f54643c5fa0 R15: 00007fff08f519d8
[  135.857261][ T7700]  </TASK>
[  135.857279][ T7700] Mem-Info:
[  136.067346][ T7700] active_anon:9868 inactive_anon:0 isolated_anon:0
[  136.067346][ T7700]  active_file:1548 inactive_file:38357 isolated_file:0
[  136.067346][ T7700]  unevictable:1768 dirty:495 writeback:0
[  136.067346][ T7700]  slab_reclaimable:10233 slab_unreclaimable:56181
[  136.067346][ T7700]  mapped:18942 shmem:6529 pagetables:1027
[  136.067346][ T7700]  sec_pagetables:0 bounce:0
[  136.067346][ T7700]  kernel_misc_reclaimable:0
[  136.067346][ T7700]  free:289347 free_pcp:18741 free_cma:0
[  136.087259][ T7700] Node 0 active_anon:30120kB inactive_anon:0kB active_file:4392kB inactive_file:20304kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:28828kB dirty:1660kB writeback:0kB shmem:21312kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4408kB pagetables:1656kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  136.101015][ T7700] Node 1 active_anon:9352kB inactive_anon:0kB active_file:1800kB inactive_file:133124kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46940kB dirty:320kB writeback:0kB shmem:4804kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7616kB pagetables:2452kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  136.118520][ T7700] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  136.131047][ T7700] lowmem_reserve[]: 0 811 811 811 811
[  136.133417][ T7700] Node 0 DMA32 free:442880kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:30120kB inactive_anon:0kB active_file:4392kB inactive_file:20304kB unevictable:3536kB writepending:1660kB present:1556484kB managed:830900kB mlocked:0kB bounce:0kB free_pcp:31488kB local_pcp:14552kB free_cma:0kB
[  136.150792][ T7700] lowmem_reserve[]: 0 0 0 0 0
[  136.152931][ T7700] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  136.166905][ T7726] binder: 7725:7726 ioctl c0306201 200000000080 returned -14
[  136.170921][ T7700] lowmem_reserve[]: 0 0 854 854 854
[  136.173344][ T7700] Node 1 Normal free:240532kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:9352kB inactive_anon:0kB active_file:1800kB inactive_file:133124kB unevictable:3536kB writepending:320kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:43960kB local_pcp:21704kB free_cma:0kB
[  136.187166][ T7700] lowmem_reserve[]: 0 0 0 0 0
[  136.189380][ T7700] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  136.195010][ T7700] Node 0 DMA32: 500*4kB (UME) 344*8kB (UME) 157*16kB (UME) 98*32kB (UME) 137*64kB (UM) 102*128kB (UM) 62*256kB (UM) 25*512kB (UM) 23*1024kB (UME) 9*2048kB (UM) 83*4096kB (UM) = 442848kB
[  136.223727][ T7700] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  136.228965][ T7700] Node 1 Normal: 307*4kB (UME) 83*8kB (ME) 61*16kB (ME) 67*32kB (ME) 62*64kB (UME) 27*128kB (UM) 15*256kB (UME) 8*512kB (UME) 3*1024kB (M) 2*2048kB (M) 52*4096kB (UM) = 240532kB
[  136.237499][ T7700] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  136.241691][ T7700] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  136.250446][ T7700] 46427 total pagecache pages
[  136.252631][ T7700] 0 pages in swap cache
[  136.254650][ T7700] Free swap  = 124996kB
[  136.256352][ T7700] Total swap = 124996kB
[  136.258013][ T7700] 786301 pages RAM
[  136.259493][ T7700] 0 pages HighMem/MovableOnly
[  136.261781][ T7700] 241344 pages reserved
[  136.263487][ T7700] 0 pages cma reserved
[  136.355345][ T7734] loop3: detected capacity change from 0 to 256
[  136.378761][ T7734] FAT-fs (loop3): count of clusters too big (178174)
[  136.385959][ T7734] FAT-fs (loop3): Can't find a valid FAT filesystem
[  136.497755][ T7739] netlink: 'syz.3.688': attribute type 30 has an invalid length.
[  136.536042][ T7735] loop0: detected capacity change from 0 to 32768
[  136.550335][ T7735] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  136.577088][ T7735] XFS (loop0): Ending clean mount
[  136.601478][ T7751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.690'.
[  136.623779][ T5849] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  136.857664][ T7761] @: renamed from bond_slave_0 (while UP)
[  136.974934][ T7771] netlink: 'syz.2.698': attribute type 4 has an invalid length.
[  136.990428][ T7771] netlink: 24 bytes leftover after parsing attributes in process `syz.2.698'.
[  137.116091][ T7780] overlayfs: failed to get inode (-116)
[  137.119851][ T7780] overlayfs: failed to get inode (-116)
[  137.245346][ T7791] loop3: detected capacity change from 0 to 128
[  137.249912][ T7791] UDF-fs: error (device loop3): udf_read_tagged: read failed, block=256, location=256
[  137.269470][ T7791] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  137.288630][ T7791] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  137.300117][ T7791] UDF-fs: error (device loop3): udf_bitmap_new_block: bitmap for partition 0 corrupted (block 264 marked as free, partition length is 40)
[  138.039290][ T7807] netlink: 'syz.0.714': attribute type 15 has an invalid length.
[  138.042730][ T7807] netlink: 24 bytes leftover after parsing attributes in process `syz.0.714'.
[  138.136270][ T7811] loop3: detected capacity change from 0 to 16
[  138.142113][ T7811] erofs (device loop3): mounted with root inode @ nid 36.
[  138.153133][   T33] audit: type=1800 audit(1757451591.390:9): pid=7811 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.716" name="file1" dev="loop3" ino=86 res=0 errno=0
[  138.524197][ T5914] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  138.662896][ T7832] loop2: detected capacity change from 0 to 32768
[  138.673849][ T7832] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.726 (7832)
[  138.706197][ T5914] usb 4-1: too many endpoints for config 4 interface 0 altsetting 0: 79, using maximum allowed: 30
[  138.716455][ T5914] usb 4-1: config 4 interface 0 altsetting 0 has an endpoint descriptor with address 0x32, changing to 0x2
[  138.730631][ T7832] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  138.734925][ T7832] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  138.739087][ T5914] usb 4-1: config 4 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 91
[  138.750658][ T5914] usb 4-1: config 4 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 79
[  138.755998][ T5914] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  138.772403][ T5914] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.796774][ T7817] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[  138.903537][ T7832] BTRFS info (device loop2): enabling ssd optimizations
[  138.906629][ T7832] BTRFS info (device loop2): enabling free space tree
[  138.934710][ T7837] loop0: detected capacity change from 0 to 32768
[  138.949502][ T7837] bcachefs: bch2_fs_parse_param() Error parsing option move_bytes_in_flight: option_value
[  139.022087][ T5914] ath6kl: Failed to submit usb control message: -71
[  139.024278][ T5914] ath6kl: unable to send the bmi data to the device: -71
[  139.033814][ T5914] ath6kl: Unable to send get target info: -71
[  139.038648][ T5850] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  139.064317][ T5914] ath6kl: Failed to init ath6kl core: -71
[  139.067902][ T5914] ath6kl_usb 4-1:4.0: probe with driver ath6kl_usb failed with error -71
[  139.104216][ T5914] usb 4-1: USB disconnect, device number 2
[  139.195619][ T7864] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[  139.346631][ T7868] can0: slcan on ptm0.
[  139.432056][ T7867] can0 (unregistered): slcan off ptm0.
[  139.740708][   T10] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  139.800983][ T5914] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[  139.990161][ T5914] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  140.020284][ T5914] usb 3-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  140.024753][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.031639][ T5914] usb 3-1: Product: syz
[  140.036007][ T5914] usb 3-1: Manufacturer: syz
[  140.040320][ T5914] usb 3-1: SerialNumber: syz
[  140.079254][ T5914] usb 3-1: config 0 descriptor??
[  140.147779][ T5914] usb 3-1: ucan: probing device on interface #0
[  140.156771][ T5914] usb 3-1: ucan: invalid EP count (0)
[  140.159276][ T5914] usb 3-1: ucan: probe failed; try to update the device firmware
[  140.234011][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  140.238485][   T10] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  140.243590][   T10] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121
[  140.250402][   T10] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  140.254530][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.259006][   T10] usb 1-1: Product: syz
[  140.261090][   T10] usb 1-1: Manufacturer: syz
[  140.263180][   T10] usb 1-1: SerialNumber: syz
[  140.267926][   T10] usb 1-1: config 0 descriptor??
[  140.271086][ T7876] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  140.274300][ T7876] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  140.278729][   T10] usb 1-1: ucan: probing device on interface #0
[  140.306559][ T5914] usb 3-1: USB disconnect, device number 5
[  140.708623][ T7899] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  140.769871][ T7901] openvswitch: netlink: Message has 16 unknown bytes.
[  140.895088][ T7905] loop2: detected capacity change from 0 to 64
[  140.912031][   T10] ucan 1-1:0.0 can0: registered device
[  140.923953][ T7905] Trying to free block not in datazone
[  141.091005][   T10] ucan 1-1:0.0 can0: firmware string: unknown
[  141.105625][   T10] usb 1-1: USB disconnect, device number 9
[  141.521995][ T7927] loop2: detected capacity change from 0 to 40427
[  141.526280][ T7927] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12
[  141.529542][ T7927] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  141.535882][ T7927] F2FS-fs (loop2): invalid crc value
[  141.586016][ T7927] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  141.595474][ T7927] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  141.598440][ T7927] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  141.641630][ T7927] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  141.645172][ T7927] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  141.648290][ T7927] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  141.651553][ T7927] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  141.653612][ T7933] loop6: detected capacity change from 0 to 524287999
[  141.654623][ T7927] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  141.654660][ T7927] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  141.666034][ T7927] F2FS-fs (loop2): invalid namelen(0), ino:0, run fsck to fix.
[  141.916451][ T7939] overlayfs: conflicting options: userxattr,metacopy=on
[  141.986931][ T7941] mmap: syz.3.758 (7941): VmData 37507072 exceed data ulimit 1587. Update limits or use boot option ignore_rlimit_data.
[  142.332015][ T7968] loop0: detected capacity change from 0 to 4096
[  142.360925][ T5914] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  142.382217][ T7969] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  142.416969][ T7968] NILFS error (device loop0): nilfs_dotdot: directory #12 missing '.'
[  142.424166][ T7968] Remounting filesystem read-only
[  142.444027][ T5849] NILFS (loop0): disposed unprocessed dirty file(s) when detaching log writer
[  142.475990][ T7965] loop3: detected capacity change from 0 to 32768
[  142.479500][ T7965] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.769 (7965)
[  142.496455][ T7965] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  142.500428][ T7965] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm
[  142.510705][ T5914] usb 3-1: Using ep0 maxpacket: 8
[  142.520368][ T5914] usb 3-1: unable to get BOS descriptor or descriptor too short
[  142.529745][ T5914] usb 3-1: config 4 has an invalid interface number: 177 but max is 0
[  142.538026][ T5914] usb 3-1: config 4 has no interface number 0
[  142.542529][ T5914] usb 3-1: config 4 interface 177 has no altsetting 0
[  142.548819][ T5914] usb 3-1: New USB device found, idVendor=13d3, idProduct=3349, bcdDevice=26.35
[  142.555441][ T5914] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  142.563588][ T5914] usb 3-1: Product: syz
[  142.565104][ T5914] usb 3-1: Manufacturer: syz
[  142.566691][ T5914] usb 3-1: SerialNumber: syz
[  142.583877][ T7965] BTRFS info (device loop3): enabling ssd optimizations
[  142.586900][ T7965] BTRFS info (device loop3): enabling free space tree
[  142.644483][   T33] audit: type=1800 audit(1757451595.880:10): pid=7965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.769" name="bus" dev="loop3" ino=263 res=0 errno=0
[  142.818092][ T5914] usb 3-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  142.823152][ T7335] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  142.862192][ T5914] usb 3-1: USB disconnect, device number 6
[  142.965104][ T7995] loop0: detected capacity change from 0 to 16
[  142.986928][ T7995] erofs (device loop0): mounted with root inode @ nid 36.
[  143.434602][ T8016] loop2: detected capacity change from 0 to 128
[  143.449458][ T8018] loop3: detected capacity change from 0 to 128
[  143.619551][ T8022] loop2: detected capacity change from 0 to 1024
[  143.641353][ T8022] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  143.802257][ T8032] netlink: 4 bytes leftover after parsing attributes in process `syz.0.792'.
[  143.830820][ T5914] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  143.980778][ T5914] usb 4-1: Using ep0 maxpacket: 8
[  143.986985][ T5914] usb 4-1: unable to get BOS descriptor or descriptor too short
[  143.990954][ T5914] usb 4-1: config 4 interface 0 has no altsetting 0
[  144.003678][ T5914] usb 4-1: string descriptor 0 read error: -22
[  144.005982][ T5914] usb 4-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[  144.009445][ T5914] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[  144.045409][ T5914] usb 4-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[  144.058154][ T5914] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  144.062722][ T5914] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[  144.070294][ T5914] usb 4-1: media controller created
[  144.092233][ T5914] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  144.236968][ T5914] zl10353_read_register: readreg error (reg=127, ret==0)
[  144.277752][ T5914] usb 4-1: USB disconnect, device number 3
[  144.551369][ T8065] loop0: detected capacity change from 0 to 40427
[  144.559530][ T8065] F2FS-fs (loop0): invalid crc value
[  144.602058][ T8065] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  144.606563][ T8065] F2FS-fs (loop0): Start checkpoint disabled!
[  144.611352][ T8065] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6
[  144.631393][ T1092] kworker/u9:6: attempt to access beyond end of device
[  144.631393][ T1092] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  144.637260][ T1092] CPU: 0 UID: 0 PID: 1092 Comm: kworker/u9:6 Not tainted syzkaller #0 PREEMPT(full) 
[  144.637277][ T1092] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.637283][ T1092] Workqueue: writeback wb_workfn (flush-7:0)
[  144.637306][ T1092] Call Trace:
[  144.637312][ T1092]  <TASK>
[  144.637317][ T1092]  dump_stack_lvl+0x189/0x250
[  144.637339][ T1092]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.637352][ T1092]  ? __pfx_queue_work_on+0x10/0x10
[  144.637364][ T1092]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  144.637383][ T1092]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  144.637410][ T1092]  f2fs_handle_critical_error+0x37c/0x540
[  144.637434][ T1092]  f2fs_write_end_io+0x886/0xb60
[  144.637461][ T1092]  __submit_merged_bio+0x27a/0x6a0
[  144.637484][ T1092]  __submit_merged_write_cond+0x255/0x530
[  144.637507][ T1092]  f2fs_write_data_pages+0x261d/0x3000
[  144.637546][ T1092]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.637568][ T1092]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  144.637606][ T1092]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  144.637622][ T1092]  ? look_up_lock_class+0x74/0x170
[  144.637640][ T1092]  ? trace_f2fs_writepages+0x7f/0x200
[  144.637683][ T1092]  ? f2fs_write_node_pages+0x478/0x6e0
[  144.637703][ T1092]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  144.637732][ T1092]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.637743][ T1092]  do_writepages+0x32e/0x550
[  144.637765][ T1092]  ? reacquire_held_locks+0x127/0x1d0
[  144.637777][ T1092]  ? writeback_sb_inodes+0x384/0x1010
[  144.637799][ T1092]  __writeback_single_inode+0x145/0xff0
[  144.637814][ T1092]  ? do_raw_spin_unlock+0x4d/0x240
[  144.637832][ T1092]  writeback_sb_inodes+0x6c7/0x1010
[  144.637870][ T1092]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  144.637922][ T1092]  ? rcu_is_watching+0x15/0xb0
[  144.637942][ T1092]  wb_writeback+0x43b/0xaf0
[  144.637964][ T1092]  ? queue_io+0x361/0x590
[  144.637981][ T1092]  ? __pfx_wb_writeback+0x10/0x10
[  144.638003][ T1092]  ? _raw_spin_unlock_irq+0x23/0x50
[  144.638024][ T1092]  wb_workfn+0x409/0xef0
[  144.638057][ T1092]  ? __pfx_wb_workfn+0x10/0x10
[  144.638073][ T1092]  ? __lock_acquire+0xab9/0xd20
[  144.638100][ T1092]  ? process_scheduled_works+0x9ef/0x17b0
[  144.638117][ T1092]  ? _raw_spin_unlock_irq+0x23/0x50
[  144.638132][ T1092]  ? process_scheduled_works+0x9ef/0x17b0
[  144.638142][ T1092]  ? process_scheduled_works+0x9ef/0x17b0
[  144.638155][ T1092]  process_scheduled_works+0xae1/0x17b0
[  144.638193][ T1092]  ? __pfx_process_scheduled_works+0x10/0x10
[  144.638220][ T1092]  worker_thread+0x8a0/0xda0
[  144.638244][ T1092]  ? __kthread_parkme+0x7b/0x200
[  144.638266][ T1092]  kthread+0x711/0x8a0
[  144.638283][ T1092]  ? __pfx_worker_thread+0x10/0x10
[  144.638294][ T1092]  ? __pfx_kthread+0x10/0x10
[  144.638310][ T1092]  ? _raw_spin_unlock_irq+0x23/0x50
[  144.638326][ T1092]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.638335][ T1092]  ? __pfx_kthread+0x10/0x10
[  144.638351][ T1092]  ret_from_fork+0x3fc/0x770
[  144.638367][ T1092]  ? __pfx_ret_from_fork+0x10/0x10
[  144.638384][ T1092]  ? __switch_to_asm+0x39/0x70
[  144.638398][ T1092]  ? __switch_to_asm+0x33/0x70
[  144.638410][ T1092]  ? __pfx_kthread+0x10/0x10
[  144.638426][ T1092]  ret_from_fork_asm+0x1a/0x30
[  144.638455][ T1092]  </TASK>
[  144.638460][ T1092] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[  145.487115][ T8086] loop3: detected capacity change from 0 to 32768
[  145.489930][ T8086] btrfs: Deprecated parameter 'usebackuproot'
[  145.493350][ T8086] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  145.496847][ T8086] btrfs: Deprecated parameter 'usebackuproot'
[  145.498981][ T8086] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  145.503924][ T8086] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.815 (8086)
[  145.566921][ T8086] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  145.571489][ T8086] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  145.575191][ T8086] workqueue: max_active 40574 requested for btrfs-worker is out of range, clamping between 1 and 2048
[  145.620863][ T8086] workqueue: max_active 40574 requested for btrfs-delalloc is out of range, clamping between 1 and 2048
[  145.665232][ T8086] workqueue: max_active 40574 requested for btrfs-endio is out of range, clamping between 1 and 2048
[  145.671340][ T8086] workqueue: max_active 40574 requested for btrfs-endio-meta is out of range, clamping between 1 and 2048
[  145.692824][ T8086] workqueue: max_active 40574 requested for btrfs-rmw is out of range, clamping between 1 and 2048
[  145.700395][ T8086] workqueue: max_active 40574 requested for btrfs-endio-write is out of range, clamping between 1 and 2048
[  145.723590][ T8086] workqueue: max_active 40574 requested for btrfs-compressed-write is out of range, clamping between 1 and 2048
[  145.791376][ T8086] BTRFS info (device loop3): rebuilding free space tree
[  145.800961][ T8086] BTRFS info (device loop3): setting nodatasum
[  145.803115][ T8086] BTRFS info (device loop3): enabling ssd optimizations
[  145.805833][ T8086] BTRFS info (device loop3): enabling free space tree
[  145.808315][ T8086] BTRFS info (device loop3): force clearing of disk cache
[  145.812052][ T8086] BTRFS info (device loop3): doing ref verification
[  145.814834][ T8086] BTRFS info (device loop3): trying to use backup root at mount time
[  145.891844][ T7335] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  146.091286][ T8130] loop2: detected capacity change from 0 to 256
[  146.341692][ T8134] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.829'.
[  146.359800][ T8135] netlink: 'syz.0.830': attribute type 27 has an invalid length.
[  148.213467][ T8166] xt_limit: Overflow, try lower: 271964/0
[  148.583542][ T8168] loop3: detected capacity change from 0 to 32768
[  148.598967][ T8168] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.845 (8168)
[  148.614887][ T8168] BTRFS info (device loop3): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  148.619099][ T8168] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  148.687262][ T8168] BTRFS info (device loop3): rebuilding free space tree
[  148.711928][ T8168] BTRFS info (device loop3): enabling ssd optimizations
[  148.715000][ T8168] BTRFS info (device loop3): turning on sync discard
[  148.717859][ T8168] BTRFS info (device loop3): enabling free space tree
[  148.727163][ T8168] BTRFS info (device loop3): force clearing of disk cache
[  148.729594][ T8168] BTRFS info (device loop3): doing ref verification
[  148.732647][ T8168] BTRFS info (device loop3): max_inline set to 0
[  148.823224][ T7335] BTRFS info (device loop3): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  148.870749][ T5914] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  149.045519][ T5914] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  149.049457][ T5914] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  149.054771][ T5914] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  149.058024][ T5914] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  149.070601][ T5914] usb 3-1: SerialNumber: syz
[  149.291989][ T5914] usb 3-1: 0:2 : does not exist
[  149.321951][ T5914] usb 3-1: USB disconnect, device number 7
[  149.356385][ T6046] udevd[6046]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  150.851731][   T33] audit: type=1326 audit(1757451604.090:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8230 comm="syz.3.861" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f92a898ebe9 code=0x0
[  150.938190][ T8233] overlayfs: missing 'workdir'
[  151.719700][ T8237] loop2: detected capacity change from 0 to 32768
[  151.734184][ T8237] (syz.2.862,8237,0):ocfs2_verify_heartbeat:818 ERROR: Cannot heartbeat on a locally mounted device.
[  151.745997][ T8237] (syz.2.862,8237,0):ocfs2_fill_super:1177 ERROR: status = -22
[  151.974004][ T8268] netlink: 8 bytes leftover after parsing attributes in process `syz.2.875'.
[  151.977307][ T8268] netlink: 'syz.2.875': attribute type 5 has an invalid length.
[  151.980434][ T8268] netlink: 20 bytes leftover after parsing attributes in process `syz.2.875'.
[  151.989118][ T8268] geneve2: entered promiscuous mode
[  151.991118][ T8268] geneve2: entered allmulticast mode
[  151.994514][   T13] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[  151.997877][   T13] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[  152.003974][   T13] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[  152.010568][   T13] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[  152.136162][ T8276] loop3: detected capacity change from 0 to 4096
[  152.177666][ T8276] ntfs3(loop3): ino=1a, mi_enum_attr
[  152.179848][ T8276] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  152.479869][ T8285] loop3: detected capacity change from 0 to 32768
[  152.614151][ T8285] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  152.659822][ T8285] XFS (loop3): Ending clean mount
[  152.667095][ T8285] XFS (loop3): Quotacheck needed: Please wait.
[  152.692722][ T8285] XFS (loop3): Quotacheck: Done.
[  152.699200][ T8285] syz.3.884: attempt to access beyond end of device
[  152.699200][ T8285] loop3: rw=4096, sector=360777285631, nr_sectors = 1 limit=32768
[  152.849222][ T8298] loop0: detected capacity change from 0 to 4096
[  152.910043][ T8298] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[  152.936384][ T8298] ntfs3(loop0): Failed to load $Extend (-22).
[  152.938451][ T8298] ntfs3(loop0): Failed to initialize $Extend.
[  153.192570][ T8312] syz.0.893 uses old SIOCAX25GETINFO
[  153.258296][ T7335] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  153.619186][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.686354][ T8320] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  153.733276][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  153.952617][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.179702][   T13] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  154.637322][   T13] bridge_slave_1: left allmulticast mode
[  154.646439][   T13] bridge_slave_1: left promiscuous mode
[  154.677002][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  154.754731][   T13] bridge_slave_0: left allmulticast mode
[  154.761281][   T13] bridge_slave_0: left promiscuous mode
[  154.769350][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  155.563873][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  155.576357][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  155.582861][   T13] bond0 (unregistering): Released all slaves
[  155.702550][   T13] tipc: Left network mode
[  156.175566][   T13] hsr_slave_0: left promiscuous mode
[  156.216282][   T13] hsr_slave_1: left promiscuous mode
[  156.219212][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  156.226119][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  156.236003][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  156.239036][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  156.289391][   T13] veth0_macvtap: left promiscuous mode
[  156.319970][   T13] veth1_vlan: left promiscuous mode
[  156.329729][   T13] veth0_vlan: left promiscuous mode
[  156.670747][ T5914] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  156.798865][   T13] team0 (unregistering): Port device team_slave_1 removed
[  156.827418][   T13] team0 (unregistering): Port device team_slave_0 removed
[  156.831982][ T5914] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  156.837483][ T5914] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.844408][ T5914] usb 1-1: config 0 descriptor??
[  157.060245][ T5914] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  157.067344][ T5914] [drm:udl_init] *ERROR* Selecting channel failed
[  157.104512][ T5914] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 3
[  157.107730][ T5914] [drm] Initialized udl on minor 3
[  157.140322][ T5914] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  157.153109][ T5914] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  157.185232][   T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  157.209260][   T24] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  157.215840][ T5914] usb 1-1: USB disconnect, device number 10
[  157.222758][   T24] udl 1-1:0.0: [drm] Cannot find any crtc or sizes
[  157.507487][ T8421] netlink: 'syz.2.927': attribute type 24 has an invalid length.
[  157.688986][ T8427] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies.
[  157.707938][ T8415] loop3: detected capacity change from 0 to 32768
[  157.796556][ T8415] ialloc: diAlloc returned -5!
[  158.063402][ T8453] 9pnet_fd: Insufficient options for proto=fd
[  158.176711][ T8462] warn_alloc: 1 callbacks suppressed
[  158.176726][ T8462] syz.3.940: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  158.196736][ T8462] CPU: 0 UID: 0 PID: 8462 Comm: syz.3.940 Not tainted syzkaller #0 PREEMPT(full) 
[  158.196757][ T8462] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  158.196764][ T8462] Call Trace:
[  158.196770][ T8462]  <TASK>
[  158.196776][ T8462]  dump_stack_lvl+0x189/0x250
[  158.196800][ T8462]  ? __pfx_dump_stack_lvl+0x10/0x10
[  158.196815][ T8462]  ? __pfx__printk+0x10/0x10
[  158.196833][ T8462]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  158.196847][ T8462]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  158.196863][ T8462]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  158.196879][ T8462]  warn_alloc+0x214/0x310
[  158.196896][ T8462]  ? stack_depot_save_flags+0x41b/0x860
[  158.196915][ T8462]  ? __pfx_warn_alloc+0x10/0x10
[  158.196934][ T8462]  ? kasan_save_track+0x4f/0x80
[  158.196950][ T8462]  ? xskq_create+0x56/0x170
[  158.196960][ T8462]  ? xsk_init_queue+0xb0/0x110
[  158.196975][ T8462]  ? xsk_setsockopt+0x4dc/0x8d0
[  158.196990][ T8462]  ? do_sock_setsockopt+0x17c/0x1b0
[  158.197004][ T8462]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  158.197015][ T8462]  ? do_syscall_64+0xfa/0x3b0
[  158.197026][ T8462]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.197043][ T8462]  __vmalloc_node_range_noprof+0x125/0x12f0
[  158.197092][ T8462]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  158.197114][ T8462]  ? __kasan_kmalloc+0x93/0xb0
[  158.197133][ T8462]  vmalloc_user_noprof+0xad/0xf0
[  158.197152][ T8462]  ? xskq_create+0xbf/0x170
[  158.197163][ T8462]  xskq_create+0xbf/0x170
[  158.197175][ T8462]  xsk_init_queue+0xb0/0x110
[  158.197194][ T8462]  xsk_setsockopt+0x4dc/0x8d0
[  158.197212][ T8462]  ? __pfx_xsk_setsockopt+0x10/0x10
[  158.197229][ T8462]  ? __pfx_aa_sk_perm+0x10/0x10
[  158.197248][ T8462]  ? aa_sock_opt_perm+0xff/0x1b0
[  158.197262][ T8462]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  158.197274][ T8462]  ? __pfx_xsk_setsockopt+0x10/0x10
[  158.197292][ T8462]  do_sock_setsockopt+0x17c/0x1b0
[  158.197309][ T8462]  __x64_sys_setsockopt+0x13f/0x1b0
[  158.197327][ T8462]  do_syscall_64+0xfa/0x3b0
[  158.197336][ T8462]  ? lockdep_hardirqs_on+0x9c/0x150
[  158.197347][ T8462]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.197359][ T8462]  ? exc_page_fault+0x9f/0xf0
[  158.197371][ T8462]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  158.197382][ T8462] RIP: 0033:0x7f92a898ebe9
[  158.197393][ T8462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  158.197403][ T8462] RSP: 002b:00007f92a98cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  158.197417][ T8462] RAX: ffffffffffffffda RBX: 00007f92a8bc5fa0 RCX: 00007f92a898ebe9
[  158.197425][ T8462] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003
[  158.197432][ T8462] RBP: 00007f92a8a11e19 R08: 0000000000000052 R09: 0000000000000000
[  158.197438][ T8462] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  158.197445][ T8462] R13: 00007f92a8bc6038 R14: 00007f92a8bc5fa0 R15: 00007ffc52e13d48
[  158.197464][ T8462]  </TASK>
[  158.197470][ T8462] Mem-Info:
[  158.343163][ T8462] active_anon:22448 inactive_anon:0 isolated_anon:0
[  158.343163][ T8462]  active_file:11012 inactive_file:38307 isolated_file:0
[  158.343163][ T8462]  unevictable:1768 dirty:361 writeback:0
[  158.343163][ T8462]  slab_reclaimable:10257 slab_unreclaimable:53679
[  158.343163][ T8462]  mapped:18998 shmem:18814 pagetables:1076
[  158.343163][ T8462]  sec_pagetables:0 bounce:0
[  158.343163][ T8462]  kernel_misc_reclaimable:0
[  158.343163][ T8462]  free:265226 free_pcp:22520 free_cma:0
[  158.363658][ T8462] Node 0 active_anon:59740kB inactive_anon:0kB active_file:35108kB inactive_file:19996kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:29008kB dirty:1204kB writeback:0kB shmem:49672kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:4132kB pagetables:1584kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  158.377978][   T33] audit: type=1326 audit(1757451611.600:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8471 comm="syz.0.944" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546418ebe9 code=0x7ffc0000
[  158.389302][ T8462] Node 1 active_anon:30052kB inactive_anon:0kB active_file:8940kB inactive_file:133232kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:46984kB dirty:240kB writeback:0kB shmem:25584kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:7620kB pagetables:2652kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  158.403127][   T33] audit: type=1326 audit(1757451611.600:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8471 comm="syz.0.944" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546418ebe9 code=0x7ffc0000
[  158.413342][ T8462] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  158.426474][   T33] audit: type=1326 audit(1757451611.640:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8471 comm="syz.0.944" exe="/syz-executor" sig=0 arch=c000003e syscall=131 compat=0 ip=0x7f546418ebe9 code=0x7ffc0000
[  158.435875][   T33] audit: type=1326 audit(1757451611.640:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8471 comm="syz.0.944" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f546418ebe9 code=0x7ffc0000
[  158.445107][ T8462] lowmem_reserve[]: 0 811 811 811 811
[  158.447634][ T8462] Node 0 DMA32 free:375876kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:59740kB inactive_anon:0kB active_file:35108kB inactive_file:19996kB unevictable:3536kB writepending:1204kB present:1556484kB managed:830900kB mlocked:0kB bounce:0kB free_pcp:44856kB local_pcp:28408kB free_cma:0kB
[  158.465846][ T8462] lowmem_reserve[]: 0 0 0 0 0
[  158.467512][ T8462] Node 1 DMA32 free:458616kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  158.481402][ T8462] lowmem_reserve[]: 0 0 854 854 854
[  158.485243][ T8462] Node 1 Normal free:211052kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:29984kB inactive_anon:0kB active_file:8940kB inactive_file:133232kB unevictable:3536kB writepending:240kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:45340kB local_pcp:21968kB free_cma:0kB
[  158.506897][ T8462] lowmem_reserve[]: 0 0 0 0 0
[  158.508860][ T8462] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  158.516550][ T8462] Node 0 DMA32: 9*4kB (ME) 8*8kB (UE) 78*16kB (UE) 392*32kB (UME) 98*64kB (UM) 69*128kB (U) 35*256kB (UM) 18*512kB (UM) 17*1024kB (UME) 6*2048kB (UM) 73*4096kB (UM) = 375876kB
[  158.524602][ T8462] Node 1 DMA32: 2*4kB (M) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 1*128kB (M) 2*256kB (M) 2*512kB (M) 2*1024kB (M) 2*2048kB (M) 110*4096kB (M) = 458616kB
[  158.532453][ T8462] Node 1 Normal: 149*4kB (ME) 125*8kB (ME) 117*16kB (ME) 405*32kB (UM) 199*64kB (UM) 65*128kB (UM) 20*256kB (UME) 9*512kB (UM) 4*1024kB (UM) 2*2048kB (UM) 38*4096kB (UM) = 211052kB
[  158.543350][ T8462] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  158.546829][ T8462] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  158.555660][ T8462] 68101 total pagecache pages
[  158.557310][ T8462] 0 pages in swap cache
[  158.558814][ T8462] Free swap  = 124996kB
[  158.560621][ T8462] Total swap = 124996kB
[  158.562432][ T8462] 786301 pages RAM
[  158.563905][ T8462] 0 pages HighMem/MovableOnly
[  158.565620][ T8462] 241344 pages reserved
[  158.567221][ T8462] 0 pages cma reserved
[  158.623537][ T8489] netlink: 'syz.3.951': attribute type 1 has an invalid length.
[  158.627764][ T8489] netlink: 88 bytes leftover after parsing attributes in process `syz.3.951'.
[  158.662532][ T8491] loop3: detected capacity change from 0 to 256
[  158.665640][ T8491] exFAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  158.670738][ T8491] exFAT-fs (loop3): Medium has reported failures. Some data may be lost.
[  158.679670][ T8491] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  158.954334][ T8498] loop3: detected capacity change from 0 to 32768
[  158.976902][ T8498] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.956 (8498)
[  159.024585][ T8498] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  159.028778][ T8498] BTRFS info (device loop3): using sha256 (sha256-lib) checksum algorithm
[  159.273812][ T8498] BTRFS info (device loop3): enabling ssd optimizations
[  159.277428][ T8498] BTRFS info (device loop3): enabling free space tree
[  159.403334][ T7335] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  159.944339][ T8538] loop0: detected capacity change from 0 to 256
[  159.996770][ T8538] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  160.002395][ T8538] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=512, location=512
[  160.007002][ T8538] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found
[  160.010265][ T8538] UDF-fs: Scanning with blocksize 512 failed
[  160.044240][ T8538] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[  160.062597][ T8538] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  160.075540][ T8529] loop3: detected capacity change from 0 to 32768
[  160.097051][ T8529] ocfs2: Slot 0 on device (7,3) was already allocated to this node!
[  160.163998][ T8529] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  160.229713][ T7335] ocfs2: Unmounting device (7,3) on (node local)
[  160.331456][   T10] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  160.462456][ T8553] loop3: detected capacity change from 0 to 128
[  160.472437][ T8553] ufs: ufs_fill_super(): fragment size 3263967611 is not a power of 2
[  160.496046][   T10] usb 1-1: Using ep0 maxpacket: 16
[  160.506165][   T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 255, changing to 7
[  160.509896][   T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  160.527268][   T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  160.530168][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  160.533532][   T10] usb 1-1: Product: syz
[  160.536206][   T10] usb 1-1: SerialNumber: syz
[  160.762633][   T10] usb 1-1: 2:1 : unknown format tag 0x0 is detected.  processed as MPEG.
[  160.768711][   T10] usb 1-1: found format II with max.bitrate = 0, frame size=0
[  160.771919][   T10] usb 1-1: 2:1 : unknown format tag 0x0 is detected.  processed as MPEG.
[  160.775693][   T10] usb 1-1: found format II with max.bitrate = 0, frame size=0
[  160.785220][   T10] usb 1-1: failed to enable PITCH for EP 0x82
[  160.789174][   T10] usb 1-1: unit 4 not found!
[  160.817086][   T10] usb 1-1: USB disconnect, device number 11
[  160.874661][ T5854] udevd[5854]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  161.209454][ T8583] loop3: detected capacity change from 0 to 256
[  161.218066][ T8583] FAT-fs (loop3): bogus sectors per cluster 0
[  161.222228][ T8583] FAT-fs (loop3): Can't find a valid FAT filesystem
[  161.414371][ T8589] ipvlan2: entered promiscuous mode
[  161.733185][ T8601] trusted_key: syz.3.990 sent an empty control message without MSG_MORE.
[  161.772212][   T24] IPVS: starting estimator thread 0...
[  161.863314][ T8603] IPVS: using max 82 ests per chain, 196800 per kthread
[  161.936274][ T8611] loop0: detected capacity change from 0 to 4096
[  162.065648][ T8619] 9pnet: p9_errstr2errno: server reported unknown error 1844674407
[  162.187662][ T8629] syz_tun: entered allmulticast mode
[  162.199665][ T8628] syz_tun: left allmulticast mode
[  163.159827][ T8662] loop0: detected capacity change from 0 to 128
[  163.160743][ T5887] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  163.163572][ T8662] EXT4-fs: Ignoring removed nobh option
[  163.173072][ T8662] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum.  Run e2fsck?
[  163.334487][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  163.338848][ T5887] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  163.346183][ T5887] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00
[  163.350058][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  163.365324][ T5887] usb 4-1: config 0 descriptor??
[  163.887567][ T5887] kovaplus 0003:1E7D:2D50.0002: item fetching failed at offset 2/5
[  163.902358][ T5887] kovaplus 0003:1E7D:2D50.0002: parse failed
[  163.905200][ T5887] kovaplus 0003:1E7D:2D50.0002: probe with driver kovaplus failed with error -22
[  164.048990][ T8679] fuse: Bad value for 'fd'
[  164.152460][   T10] usb 4-1: USB disconnect, device number 4
[  165.073311][ T8707] loop3: detected capacity change from 0 to 2048
[  165.096735][ T8707] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  166.365353][ T8726] loop0: detected capacity change from 0 to 512
[  166.375926][ T8726] EXT4-fs (loop0): feature flags set on rev 0 fs, running e2fsck is recommended
[  166.402094][ T8726] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.421230][ T8726] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 3: comm syz.0.1045: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=12, inode=514, rec_len=0, size=2048 fake=0
[  166.436539][ T8726] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 12: comm syz.0.1045: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0
[  166.463446][ T8726] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 13: comm syz.0.1045: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653246737, rec_len=1, size=2048 fake=0
[  166.473193][ T8726] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 14: comm syz.0.1045: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  166.508414][ T8726] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 15: comm syz.0.1045: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  166.517298][ T8726] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 16: comm syz.0.1045: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3653245223, rec_len=1, size=2048 fake=0
[  166.531292][ T8726] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 17: comm syz.0.1045: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=3, rec_len=0, size=2048 fake=0
[  166.538671][ T8726] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #2: block 18: comm syz.0.1045: lblock 23 mapped to illegal pblock 18 (length 1)
[  166.544077][ T8726] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 19: comm syz.0.1045: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5, rec_len=0, size=2048 fake=0
[  166.552284][ T8726] EXT4-fs error (device loop0): ext4_readdir:264: inode #2: block 20: comm syz.0.1045: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, size=2048 fake=0
[  167.260706][ T5849] EXT4-fs warning (device loop0): ext4_update_dynamic_rev:1128: updating to rev 1 because of new feature flag, running e2fsck is recommended
[  167.287623][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  167.325593][   T10] IPVS: starting estimator thread 0...
[  167.439548][ T8763] IPVS: using max 42 ests per chain, 100800 per kthread
[  167.674132][ T8778] loop0: detected capacity change from 0 to 512
[  167.682933][ T8778] EXT4-fs error (device loop0): ext4_iget_extra_inode:5104: inode #15: comm syz.0.1064: corrupted in-inode xattr: invalid ea_ino
[  167.690968][ T8778] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1064: couldn't read orphan inode 15 (err -117)
[  167.711621][ T8778] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  168.566761][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.855626][ T8846] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  170.001124][ T8859] loop0: detected capacity change from 0 to 1024
[  170.035551][ T8859] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  170.043561][ T8859] ext4 filesystem being mounted at /352/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  170.057409][   T33] audit: type=1800 audit(1757451623.344:16): pid=8859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1093" name="file1" dev="loop0" ino=15 res=0 errno=0
[  170.067311][ T8866] Driver unsupported XDP return value 0 on prog  (id 97) dev N/A, expect packet loss!
[  170.068407][ T8859] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: comm syz.0.1093: lblock 0 mapped to illegal pblock 0 (length 1)
[  170.084313][ T8859] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.1093: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[  170.113144][ T8868] netlink: zone id is out of range
[  170.120026][ T8868] netlink: zone id is out of range
[  170.125747][ T8868] netlink: zone id is out of range
[  170.126739][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  170.127946][ T8868] netlink: zone id is out of range
[  170.144827][ T8868] netlink: zone id is out of range
[  170.147180][ T8868] netlink: zone id is out of range
[  170.149532][ T8868] netlink: zone id is out of range
[  170.153342][ T8868] netlink: zone id is out of range
[  170.155736][ T8868] netlink: zone id is out of range
[  170.432314][   T24] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  170.585111][   T24] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  170.589326][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  170.596552][   T24] usb 1-1: config 0 descriptor??
[  170.601407][   T24] cp210x 1-1:0.0: cp210x converter detected
[  170.899049][ T8889] bridge0: port 3(hsr_slave_1) entered blocking state
[  170.912193][ T8889] bridge0: port 3(hsr_slave_1) entered disabled state
[  170.916386][ T8889] hsr_slave_1: entered allmulticast mode
[  170.919810][ T8889] hsr_slave_1: left allmulticast mode
[  171.241883][   T24] cp210x 1-1:0.0: failed to get vendor val 0x370c size 73: -71
[  171.255221][   T24] cp210x 1-1:0.0: GPIO initialisation failed: -71
[  171.294525][   T24] usb 1-1: cp210x converter now attached to ttyUSB0
[  171.341586][   T24] usb 1-1: USB disconnect, device number 12
[  171.385093][ T6046] udevd[6046]: setting owner of /dev/ttyUSB0 to uid=0, gid=18 failed: No such file or directory
[  171.398938][   T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  171.418872][   T24] cp210x 1-1:0.0: device disconnected
[  172.009918][ T8924] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1114'.
[  172.022413][ T8924] netlink: 'syz.3.1114': attribute type 2 has an invalid length.
[  172.419828][ T8940] loop3: detected capacity change from 0 to 1024
[  172.634218][ T8945] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  172.750492][ T8950] loop3: detected capacity change from 0 to 512
[  172.776604][ T8950] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1126: invalid indirect mapped block 4294967295 (level 1)
[  172.841080][ T8950] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #11: comm syz.3.1126: invalid indirect mapped block 4294967295 (level 1)
[  172.851880][ T8950] EXT4-fs (loop3): 2 truncates cleaned up
[  172.866985][ T8950] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  172.884715][ T8950] EXT4-fs error (device loop3): empty_inline_dir:1760: inode #12: block 7: comm syz.3.1126: bad entry in directory: rec_len % 4 != 0 - offset=4, inode=4278190093, rec_len=255, size=60 fake=0
[  172.905653][ T8950] EXT4-fs warning (device loop3): empty_inline_dir:1767: bad inline directory (dir #12) - inode 4278190093, rec_len 255, name_len 0inline size 60
[  172.953863][ T7335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  172.998100][   T33] audit: type=1326 audit(1757451626.284:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8965 comm="syz.2.1134" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f725398ebe9 code=0x0
[  173.068275][ T8972] gretap1: entered promiscuous mode
[  173.194395][ T8974] loop3: detected capacity change from 0 to 4096
[  173.205062][ T8969] loop0: detected capacity change from 0 to 32768
[  173.225198][ T8969] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  173.236987][ T8974] ntfs3(loop3): ino=1a, mi_enum_attr
[  173.245799][ T8974] ntfs3(loop3): Mark volume as dirty due to NTFS errors
[  173.282249][ T8974] ntfs3(loop3): ino=22, "hugetlb.2MB.usage_in_bytes" mmap(write) compressed not supported
[  173.296329][ T5849] ocfs2: Unmounting device (7,0) on (node local)
[  173.617896][ T8989] loop3: detected capacity change from 0 to 40427
[  173.631274][ T8989] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  173.633693][ T8989] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  173.648155][ T8989] F2FS-fs (loop3): invalid crc value
[  173.697916][ T8989] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  173.708778][ T9014] loop0: detected capacity change from 0 to 2048
[  173.713059][ T8989] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  173.715728][ T8989] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  173.731534][ T9014] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[  173.735961][ T9014] NILFS (loop0): mounting unchecked fs
[  173.745176][ T9017] netlink: 'syz.2.1156': attribute type 5 has an invalid length.
[  173.746311][ T6046] udevd[6046]: incorrect nilfs2 checksum on /dev/loop0
[  173.769336][ T6046] udevd[6046]: incorrect nilfs2 checksum on /dev/loop0
[  173.777417][ T9014] NILFS (loop0): recovery complete
[  173.789395][ T9018] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  174.022373][ T9028] binder: 9026:9028 ioctl c0306201 200000000080 returned -14
[  174.424371][ T9038] loop3: detected capacity change from 0 to 1024
[  174.431878][ T9038] EXT4-fs: inline encryption not supported
[  174.434363][ T9038] EXT4-fs: Ignoring removed bh option
[  174.456340][ T9038] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.469508][   T33] audit: type=1800 audit(1757451627.754:18): pid=9038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1164" name="bus" dev="loop3" ino=18 res=0 errno=0
[  174.517426][ T9038] EXT4-fs error (device loop3): mb_free_blocks:2017: group 0, inode 18: block 305:freeing already freed block (bit 19); block bitmap corrupt.
[  174.529052][ T9038] EXT4-fs (loop3): Remounting filesystem read-only
[  174.551179][ T7335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  174.643751][ T9045] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1166'.
[  174.975613][ T9061] cgroup: name respecified
[  175.578438][ T9090] loop3: detected capacity change from 0 to 8
[  175.597581][ T9090] SQUASHFS error: lzo decompression failed, data probably corrupt
[  175.608431][ T9090] SQUASHFS error: Failed to read block 0x91: -5
[  175.615628][ T9090] SQUASHFS error: Unable to read metadata cache entry [8f]
[  175.618710][ T9090] SQUASHFS error: Unable to read inode 0x11f
[  175.621096][ T5956] usb 1-1: new full-speed USB device number 13 using dummy_hcd
[  175.782225][ T5956] usb 1-1: not running at top speed; connect to a high speed hub
[  175.790143][ T5956] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  175.799476][ T5956] usb 1-1: config 1 has no interface number 1
[  175.804351][ T5956] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  175.814538][ T5956] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  175.818320][ T5956] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  175.822017][ T5956] usb 1-1: Product: syz
[  175.823851][ T5956] usb 1-1: Manufacturer: syz
[  175.825866][ T5956] usb 1-1: SerialNumber: syz
[  176.052077][ T5956] usb 1-1: 2:1 : no or invalid class specific endpoint descriptor
[  176.099726][ T5956] usb 1-1: USB disconnect, device number 13
[  176.226351][ T8562] udevd[8562]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  176.284868][ T9114] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[  176.325289][ T9114] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98
[  176.941380][ T9129] loop0: detected capacity change from 0 to 512
[  176.957046][ T9129] EXT4-fs (loop0): external journal device major/minor numbers have changed
[  176.967928][ T9129] EXT4-fs (loop0): failed to open journal device unknown-block(8,1) -16
[  177.261356][ T5956] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  177.415074][ T5956] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 255
[  177.420815][ T5956] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  177.426220][ T5956] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  177.445347][ T5956] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[  177.448611][ T5956] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  177.461613][ T5956] usb 1-1: config 0 descriptor??
[  177.485904][ T5956] usb-storage 1-1:0.0: USB Mass Storage device detected
[  177.516494][ T5956] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[  177.735860][ T5880] usb 1-1: USB disconnect, device number 14
[  177.817204][ T9140] loop3: detected capacity change from 0 to 40427
[  177.824251][ T9140] F2FS-fs (loop3): invalid crc value
[  177.865325][ T9140] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  177.868993][ T9140] F2FS-fs (loop3): Start checkpoint disabled!
[  177.874416][ T9140] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6
[  178.599785][ T1209] kworker/u9:9: attempt to access beyond end of device
[  178.599785][ T1209] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427
[  178.606284][ T1209] CPU: 0 UID: 0 PID: 1209 Comm: kworker/u9:9 Not tainted syzkaller #0 PREEMPT(full) 
[  178.606305][ T1209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.606314][ T1209] Workqueue: writeback wb_workfn (flush-7:3)
[  178.606339][ T1209] Call Trace:
[  178.606346][ T1209]  <TASK>
[  178.606352][ T1209]  dump_stack_lvl+0x189/0x250
[  178.606374][ T1209]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.606388][ T1209]  ? __pfx_queue_work_on+0x10/0x10
[  178.606400][ T1209]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  178.606420][ T1209]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  178.606470][ T1209]  f2fs_handle_critical_error+0x37c/0x540
[  178.606492][ T1209]  f2fs_write_end_io+0x886/0xb60
[  178.606516][ T1209]  __submit_merged_bio+0x27a/0x6a0
[  178.606531][ T1209]  ? up_write+0x1c4/0x420
[  178.606553][ T1209]  __submit_merged_write_cond+0x44c/0x530
[  178.606573][ T1209]  f2fs_sync_node_pages+0x1479/0x15e0
[  178.606601][ T1209]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  178.606617][ T1209]  ? __percpu_counter_sum+0x1c2/0x1e0
[  178.606656][ T1209]  ? rcu_is_watching+0x15/0xb0
[  178.606669][ T1209]  ? blk_start_plug+0x52/0x1b0
[  178.606683][ T1209]  f2fs_write_node_pages+0x303/0x6e0
[  178.606702][ T1209]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  178.606720][ T1209]  ? rcu_is_watching+0x15/0xb0
[  178.606739][ T1209]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  178.606754][ T1209]  do_writepages+0x32e/0x550
[  178.606773][ T1209]  ? reacquire_held_locks+0x127/0x1d0
[  178.606785][ T1209]  ? writeback_sb_inodes+0x384/0x1010
[  178.606806][ T1209]  __writeback_single_inode+0x145/0xff0
[  178.606820][ T1209]  ? do_raw_spin_unlock+0x4d/0x240
[  178.606837][ T1209]  writeback_sb_inodes+0x6c7/0x1010
[  178.606869][ T1209]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  178.606916][ T1209]  ? rcu_is_watching+0x15/0xb0
[  178.606934][ T1209]  wb_writeback+0x43b/0xaf0
[  178.606957][ T1209]  ? queue_io+0x361/0x590
[  178.606972][ T1209]  ? __pfx_wb_writeback+0x10/0x10
[  178.606991][ T1209]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.607011][ T1209]  wb_workfn+0x409/0xef0
[  178.607033][ T1209]  ? __pfx_wb_workfn+0x10/0x10
[  178.607048][ T1209]  ? __lock_acquire+0xab9/0xd20
[  178.607071][ T1209]  ? process_scheduled_works+0x9ef/0x17b0
[  178.607088][ T1209]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.607102][ T1209]  ? process_scheduled_works+0x9ef/0x17b0
[  178.607110][ T1209]  ? process_scheduled_works+0x9ef/0x17b0
[  178.607119][ T1209]  process_scheduled_works+0xae1/0x17b0
[  178.607149][ T1209]  ? __pfx_process_scheduled_works+0x10/0x10
[  178.607173][ T1209]  worker_thread+0x8a0/0xda0
[  178.607187][ T1209]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  178.607207][ T1209]  ? __kthread_parkme+0x7b/0x200
[  178.607227][ T1209]  kthread+0x711/0x8a0
[  178.607242][ T1209]  ? __pfx_worker_thread+0x10/0x10
[  178.607253][ T1209]  ? __pfx_kthread+0x10/0x10
[  178.607267][ T1209]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.607302][ T1209]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.607314][ T1209]  ? __pfx_kthread+0x10/0x10
[  178.607328][ T1209]  ret_from_fork+0x3fc/0x770
[  178.607344][ T1209]  ? __pfx_ret_from_fork+0x10/0x10
[  178.607359][ T1209]  ? __switch_to_asm+0x39/0x70
[  178.607373][ T1209]  ? __switch_to_asm+0x33/0x70
[  178.607386][ T1209]  ? __pfx_kthread+0x10/0x10
[  178.607399][ T1209]  ret_from_fork_asm+0x1a/0x30
[  178.607448][ T1209]  </TASK>
[  178.607503][ T1209] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  178.751615][ T1209] CPU: 1 UID: 0 PID: 1209 Comm: kworker/u9:9 Not tainted syzkaller #0 PREEMPT(full) 
[  178.751656][ T1209] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.751665][ T1209] Workqueue: writeback wb_workfn (flush-7:3)
[  178.751708][ T1209] Call Trace:
[  178.751714][ T1209]  <TASK>
[  178.751721][ T1209]  dump_stack_lvl+0x189/0x250
[  178.751743][ T1209]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.751756][ T1209]  ? __pfx_queue_work_on+0x10/0x10
[  178.751769][ T1209]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  178.751788][ T1209]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  178.751814][ T1209]  f2fs_handle_critical_error+0x37c/0x540
[  178.751846][ T1209]  f2fs_write_end_io+0x886/0xb60
[  178.751872][ T1209]  __submit_merged_bio+0x27a/0x6a0
[  178.751888][ T1209]  ? up_write+0x1c4/0x420
[  178.751905][ T1209]  __submit_merged_write_cond+0x44c/0x530
[  178.751927][ T1209]  f2fs_sync_node_pages+0x1479/0x15e0
[  178.751958][ T1209]  ? __pfx_f2fs_sync_node_pages+0x10/0x10
[  178.751973][ T1209]  ? __percpu_counter_sum+0x1c2/0x1e0
[  178.752014][ T1209]  ? rcu_is_watching+0x15/0xb0
[  178.752026][ T1209]  ? blk_start_plug+0x52/0x1b0
[  178.752040][ T1209]  f2fs_write_node_pages+0x303/0x6e0
[  178.752060][ T1209]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  178.752077][ T1209]  ? rcu_is_watching+0x15/0xb0
[  178.752093][ T1209]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  178.752108][ T1209]  do_writepages+0x32e/0x550
[  178.752129][ T1209]  ? reacquire_held_locks+0x127/0x1d0
[  178.752140][ T1209]  ? writeback_sb_inodes+0x384/0x1010
[  178.752160][ T1209]  __writeback_single_inode+0x145/0xff0
[  178.752175][ T1209]  ? do_raw_spin_unlock+0x4d/0x240
[  178.752193][ T1209]  writeback_sb_inodes+0x6c7/0x1010
[  178.752226][ T1209]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  178.752270][ T1209]  ? rcu_is_watching+0x15/0xb0
[  178.752288][ T1209]  wb_writeback+0x43b/0xaf0
[  178.752308][ T1209]  ? queue_io+0x361/0x590
[  178.752324][ T1209]  ? __pfx_wb_writeback+0x10/0x10
[  178.752344][ T1209]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.752364][ T1209]  wb_workfn+0x409/0xef0
[  178.752388][ T1209]  ? __pfx_wb_workfn+0x10/0x10
[  178.752403][ T1209]  ? __lock_acquire+0xab9/0xd20
[  178.752454][ T1209]  ? process_scheduled_works+0x9ef/0x17b0
[  178.752473][ T1209]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.752488][ T1209]  ? process_scheduled_works+0x9ef/0x17b0
[  178.752498][ T1209]  ? process_scheduled_works+0x9ef/0x17b0
[  178.752510][ T1209]  process_scheduled_works+0xae1/0x17b0
[  178.752542][ T1209]  ? __pfx_process_scheduled_works+0x10/0x10
[  178.752567][ T1209]  worker_thread+0x8a0/0xda0
[  178.752581][ T1209]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  178.752622][ T1209]  ? __kthread_parkme+0x7b/0x200
[  178.752644][ T1209]  kthread+0x711/0x8a0
[  178.752661][ T1209]  ? __pfx_worker_thread+0x10/0x10
[  178.752672][ T1209]  ? __pfx_kthread+0x10/0x10
[  178.752687][ T1209]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.752703][ T1209]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.752713][ T1209]  ? __pfx_kthread+0x10/0x10
[  178.752727][ T1209]  ret_from_fork+0x3fc/0x770
[  178.752743][ T1209]  ? __pfx_ret_from_fork+0x10/0x10
[  178.752758][ T1209]  ? __switch_to_asm+0x39/0x70
[  178.752771][ T1209]  ? __switch_to_asm+0x33/0x70
[  178.752784][ T1209]  ? __pfx_kthread+0x10/0x10
[  178.752798][ T1209]  ret_from_fork_asm+0x1a/0x30
[  178.752831][ T1209]  </TASK>
[  178.897361][ T1209] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  179.490688][ T5887] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  179.640635][ T5887] usb 4-1: Using ep0 maxpacket: 32
[  179.645806][ T5887] usb 4-1: config 0 has an invalid interface number: 86 but max is 0
[  179.649473][ T5887] usb 4-1: config 0 has no interface number 0
[  179.652279][ T5887] usb 4-1: config 0 interface 86 altsetting 2 endpoint 0x9 has invalid wMaxPacketSize 0
[  179.656445][ T5887] usb 4-1: config 0 interface 86 has no altsetting 0
[  179.662496][ T5887] usb 4-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=33.7a
[  179.666366][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.669770][ T5887] usb 4-1: Product: syz
[  179.673122][ T5887] usb 4-1: Manufacturer: syz
[  179.675184][ T5887] usb 4-1: SerialNumber: syz
[  179.679367][ T5887] usb 4-1: config 0 descriptor??
[  179.895118][ T5887] usb 4-1: USB disconnect, device number 5
[  180.126152][    C0] vcan0: j1939_tp_rxtimer: 0xffff888027e90000: rx timeout, send abort
[  180.631013][    C0] vcan0: j1939_tp_rxtimer: 0xffff888027e90000: abort rx timeout. Force session deactivation
[  180.757503][ T9206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1237'.
[  180.998808][ T9210] loop0: detected capacity change from 0 to 32768
[  181.005274][ T9210] btrfs: Deprecated parameter 'usebackuproot'
[  181.007424][ T9210] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  181.015500][ T9210] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1239 (9210)
[  181.035300][ T9210] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  181.039717][ T9210] BTRFS info (device loop0): using crc32c (crc32c-lib) checksum algorithm
[  181.067657][ T9210] BTRFS info (device loop0): rebuilding free space tree
[  181.078473][ T9210] BTRFS info (device loop0): allowing degraded mounts
[  181.081569][ T9210] BTRFS info (device loop0): enabling ssd optimizations
[  181.084464][ T9210] BTRFS info (device loop0): turning on flush-on-commit
[  181.087357][ T9210] BTRFS info (device loop0): turning on sync discard
[  181.090252][ T9210] BTRFS info (device loop0): enabling free space tree
[  181.093730][ T9210] BTRFS info (device loop0): force clearing of disk cache
[  181.096720][ T9210] BTRFS info (device loop0): trying to use backup root at mount time
[  181.100094][ T9210] BTRFS info (device loop0): use lzo compression, level 0
[  181.103559][ T9210] BTRFS info (device loop0): max_inline set to 0
[  181.124888][ T5849] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  181.432160][ T9240] loop3: detected capacity change from 0 to 16
[  181.435793][ T9240] MTD: Attempt to mount non-MTD device "/dev/loop3"
[  182.057930][ T9253] loop3: detected capacity change from 0 to 1024
[  182.078508][ T9253] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  182.083944][ T9253] ext4 filesystem being mounted at /238/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  182.097384][ T9253] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1249: bg 0: block 480: padding at end of block bitmap is not set
[  182.107638][ T9253] EXT4-fs (loop3): Remounting filesystem read-only
[  182.129127][ T7335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  182.171282][ T9258] loop3: detected capacity change from 0 to 16
[  182.389735][ T9264] netlink: 'syz.3.1253': attribute type 1 has an invalid length.
[  184.105016][ T9322] loop0: detected capacity change from 0 to 512
[  184.118666][ T9322] EXT4-fs: Ignoring removed nobh option
[  184.145584][ T9322] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #15: comm syz.0.1279: iget: bad i_size value: 38620345925642
[  184.150790][ T9322] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.1279: couldn't read orphan inode 15 (err -117)
[  184.156862][ T9322] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  184.167153][ T9322] EXT4-fs (loop0): shut down requested (0)
[  184.197967][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.224359][ T9328] ubi31: attaching mtd0
[  184.253941][ T9330] loop0: detected capacity change from 0 to 128
[  184.256811][ T9330] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  184.261251][ T9330] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  184.354871][ T1209] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  184.499106][ T9342] loop0: detected capacity change from 0 to 1024
[  184.536805][ T9342] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  184.558028][ T9342] EXT4-fs error (device loop0): ext4_xattr_inode_iget:437: inode #11: comm syz.0.1288: missing EA_INODE flag
[  184.568329][ T9342] EXT4-fs (loop0): Remounting filesystem read-only
[  184.572233][ T9342] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  184.592956][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  184.673557][   T33] audit: type=1400 audit(1757451637.964:19): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=26260A3AF6EFF374925873ECE44CF3460B0BA260624F2A08BDBB6D3C92592016EA4E0F401876B1958B3F9AA5153386EED838C49D3A pid=9354 comm="syz.3.1290"
[  184.761626][ T5887] net_ratelimit: 38 callbacks suppressed
[  184.761641][ T5887] TC_ACT_REPEAT abuse ?
[  185.276146][ T9364] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1293'.
[  185.280016][ T9364] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1293'.
[  185.284596][ T9364] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1293'.
[  185.317982][ T9357] loop3: detected capacity change from 0 to 32768
[  185.326156][ T9357] (syz.3.1291,9357,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  185.340338][ T9357] (syz.3.1291,9357,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  185.350291][ T9357] (syz.3.1291,9357,0):ocfs2_verify_userspace_stack:858 ERROR: cluster stack passed to mount, but this filesystem does not support it
[  185.369064][ T9357] (syz.3.1291,9357,1):ocfs2_fill_super:1177 ERROR: status = -22
[  185.714948][ T9379] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1300'.
[  185.718824][ T9379] IPVS: Error connecting to the multicast addr
[  186.101561][ T5853] Bluetooth: hci1: command 0x0406 tx timeout
[  186.104674][ T5853] Bluetooth: hci0: command 0x0c1a tx timeout
[  186.372825][ T9402] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1310'.
[  186.427313][ T9406] loop3: detected capacity change from 0 to 8
[  186.434993][ T9406] SQUASHFS error: lzo decompression failed, data probably corrupt
[  186.443746][ T9406] SQUASHFS error: Failed to read block 0x91: -5
[  186.446836][ T9406] SQUASHFS error: Unable to read metadata cache entry [8f]
[  186.452219][ T9406] SQUASHFS error: Unable to read inode 0x11f
[  186.846078][ T9432] loop3: detected capacity change from 0 to 128
[  186.877825][ T9434] loop0: detected capacity change from 0 to 512
[  186.912053][ T9434] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  186.932686][ T9434] EXT4-fs (loop0): 1 truncate cleaned up
[  186.936323][ T9434] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.725098][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.915270][ T9469] loop0: detected capacity change from 0 to 2048
[  187.952490][ T9469] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  187.990691][   T33] audit: type=1800 audit(1757451641.274:20): pid=9469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1340" name="bus" dev="loop0" ino=18 res=0 errno=0
[  188.037154][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  188.554672][ T5239] Bluetooth: hci1: Malformed MSFT vendor event: 0x02
[  188.819349][ T9521] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1363'.
[  189.703003][ T9534] loop0: detected capacity change from 0 to 764
[  189.953154][ T9542] netlink: 'syz.0.1370': attribute type 24 has an invalid length.
[  190.108669][ T9554] loop0: detected capacity change from 0 to 512
[  190.155123][ T9554] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  190.169215][ T9554] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  190.173719][ T9554] System zones: 0-1, 15-15, 18-18, 34-34
[  190.176319][ T9554] EXT4-fs (loop0): orphan cleanup on readonly fs
[  190.179062][ T9554] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[  190.183447][ T9554] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  190.188753][ T9554] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  190.192725][ T9554] EXT4-fs (loop0): 1 truncate cleaned up
[  190.195319][ T9554] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  190.231951][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  190.340161][ T9552] loop3: detected capacity change from 0 to 32768
[  190.525637][ T9562] loop0: detected capacity change from 0 to 32768
[  190.538915][ T9562] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  190.561243][ T9571] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  190.574839][ T9571] CIFS mount error: No usable UNC path provided in device string!
[  190.574839][ T9571] 
[  190.579533][ T9571] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  190.585758][ T9562] XFS (loop0): Ending clean mount
[  190.592206][ T9562] XFS (loop0): Quotacheck needed: Please wait.
[  190.626084][ T9562] XFS (loop0): Quotacheck: Done.
[  190.650231][   T33] audit: type=1800 audit(1757451643.934:21): pid=9562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1381" name="bus" dev="loop0" ino=9291 res=0 errno=0
[  190.809014][ T5849] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  191.344198][ T9594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1391'.
[  191.464505][ T9600] netlink: 'syz.2.1394': attribute type 4 has an invalid length.
[  191.973485][ T9617] loop3: detected capacity change from 0 to 128
[  192.211902][ T9619] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[  192.534148][ T9621] loop3: detected capacity change from 0 to 512
[  192.564577][ T9621] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  192.567495][ T9621] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=e040e018, mo2=0002]
[  192.580801][ T9621] System zones: 0-1, 15-15, 18-18, 34-34
[  192.584326][ T9621] EXT4-fs (loop3): orphan cleanup on readonly fs
[  192.587023][ T9621] Quota error (device loop3): v2_read_header: Failed header read: expected=8 got=0
[  192.591043][ T9621] EXT4-fs warning (device loop3): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  192.598231][ T9621] EXT4-fs (loop3): Cannot turn on quotas: error -22
[  192.609425][ T9621] EXT4-fs error (device loop3): ext4_validate_block_bitmap:441: comm syz.3.1402: bg 0: block 40: padding at end of block bitmap is not set
[  192.615505][ T9629] loop0: detected capacity change from 0 to 512
[  192.627226][ T9621] EXT4-fs error (device loop3) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  192.634154][ T9621] EXT4-fs (loop3): 1 truncate cleaned up
[  192.638021][ T9621] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  192.646989][ T9629] EXT4-fs (loop0): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  192.665489][ T9621] EXT4-fs error (device loop3): ext4_encrypted_get_link:46: inode #16: comm syz.3.1402: bad symlink.
[  192.693398][ T5849] EXT4-fs (loop0): unmounting filesystem 00800000-0000-0000-0000-000000000000.
[  192.714371][ T7335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.469903][ T9655] netlink: 'syz.2.1416': attribute type 2 has an invalid length.
[  193.824566][ T9679] loop3: detected capacity change from 0 to 128
[  193.828782][ T9679] FAT-fs (loop3): Invalid FSINFO signature: 0x41075252, 0x80417272 (sector = 1)
[  193.841842][ T9679] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 0, start 00070003)
[  193.846912][ T9679] FAT-fs (loop3): Filesystem has been set read-only
[  193.919198][ T9681] snd_dummy snd_dummy.0: control 0:0:0:syz0:0 is already present
[  194.259238][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  194.259305][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  195.465002][ T9718] loop0: detected capacity change from 0 to 8
[  195.490277][ T9718] SQUASHFS error: Unable to read inode 0x6
[  195.775167][ T9720] loop0: detected capacity change from 0 to 256
[  195.804672][ T9720] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x40a90196, utbl_chksum : 0xe619d30d)
[  195.833488][ T9720] input: syz0 as /devices/virtual/input/input6
[  196.171826][ T9733] loop3: detected capacity change from 0 to 512
[  196.185248][ T9733] EXT4-fs (loop3): Cannot turn on journaled quota: type 0: error -2
[  196.191063][ T9733] EXT4-fs error (device loop3): ext4_free_branches:1023: inode #13: comm syz.3.1445: invalid indirect mapped block 2683928664 (level 1)
[  196.200372][ T9733] EXT4-fs (loop3): 1 truncate cleaned up
[  196.207151][ T9733] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.244500][ T9733] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1445: Invalid block bitmap block 3 in block_group 0
[  196.256523][ T9733] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1445: Invalid block bitmap block 3 in block_group 0
[  196.263346][ T9733] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:483: comm syz.3.1445: Invalid block bitmap block 3 in block_group 0
[  196.290382][ T7335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.346057][ T9745] loop3: detected capacity change from 0 to 256
[  196.356473][ T9745] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001e4a3, chksum : 0x009ea0b8, utbl_chksum : 0x7319d30d)
[  196.607046][ T9761] loop3: detected capacity change from 0 to 1024
[  196.615926][ T9761] EXT4-fs: Ignoring removed mblk_io_submit option
[  196.639245][ T9761] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  196.659430][ T7335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.698856][ T9768] loop3: detected capacity change from 0 to 512
[  196.703134][ T9768] EXT4-fs (loop3): orphan cleanup on readonly fs
[  196.708275][ T9768] EXT4-fs error (device loop3): ext4_orphan_get:1418: comm syz.3.1458: bad orphan inode 13
[  196.713378][ T9768] ext4_test_bit(bit=12, block=18) = 1
[  196.715490][ T9768] is_bad_inode(inode)=0
[  196.717086][ T9768] NEXT_ORPHAN(inode)=2130706432
[  196.718755][ T9768] max_ino=32
[  196.719833][ T9768] i_nlink=1
[  196.721924][ T9768] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  196.727648][ T9768] EXT4-fs error (device loop3): ext4_lookup:1791: inode #2: comm syz.3.1458: deleted inode referenced: 12
[  196.744200][ T7335] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  196.773162][ T9772] netlink: 276 bytes leftover after parsing attributes in process `syz.3.1459'.
[  196.858007][ T9780] netlink: 'syz.3.1463': attribute type 12 has an invalid length.
[  197.368452][ T9793] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1468'.
[  197.376073][ T9793] netlink: 'syz.0.1468': attribute type 7 has an invalid length.
[  197.379434][ T9793] netlink: 'syz.0.1468': attribute type 8 has an invalid length.
[  197.389803][ T9793] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1468'.
[  197.401982][ T9793] gretap0: entered promiscuous mode
[  197.404533][ T9793] batadv_slave_1: entered promiscuous mode
[  197.407959][ T9793] gretap0: left promiscuous mode
[  197.410855][ T9793] batadv_slave_1: left promiscuous mode
[  197.528092][ T9795] loop0: detected capacity change from 0 to 128
[  197.554029][ T9795] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  197.561022][ T9795] ext4 filesystem being mounted at /446/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  197.576474][   T33] audit: type=1800 audit(1757451650.864:22): pid=9795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1469" name="file1" dev="loop0" ino=12 res=0 errno=0
[  197.584344][ T9795] EXT4-fs (loop0): shut down requested (1)
[  197.607413][ T5849] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  197.868270][ T9807] loop3: detected capacity change from 0 to 1024
[  199.675487][ T9850] input: syz1 as /devices/virtual/input/input7
[  199.704418][ T9850] input: failed to attach handler leds to device input7, error: -6
[  200.045794][ T9856] loop0: detected capacity change from 0 to 32768
[  200.050887][ T9856] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1496 (9856)
[  200.058169][ T9856] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  200.061783][ T9856] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[  200.078233][ T9856] BTRFS info (device loop0): enabling ssd optimizations
[  200.081687][ T9856] BTRFS info (device loop0): enabling free space tree
[  200.106833][ T5849] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  200.560650][ T5887] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  200.564094][ T5915] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  200.710832][ T5915] usb 4-1: Using ep0 maxpacket: 32
[  200.715381][ T5887] usb 1-1: config 0 has no interfaces?
[  200.718597][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  200.723122][ T5915] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  200.727212][ T5915] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  200.731457][ T5915] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  200.735736][ T5887] usb 1-1: New USB device found, idVendor=05ab, idProduct=0301, bcdDevice= 1.00
[  200.740730][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.744737][ T5915] usb 4-1: config 0 descriptor??
[  200.746857][ T5887] usb 1-1: Product: syz
[  200.748683][ T5887] usb 1-1: Manufacturer: syz
[  200.750884][ T5887] usb 1-1: SerialNumber: syz
[  200.755438][ T5915] hub 4-1:0.0: USB hub found
[  200.766783][ T5887] usb 1-1: config 0 descriptor??
[  200.897895][ T9891] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1505'.
[  200.928021][ T5239] Bluetooth: hci0: unexpected event for opcode 0x0407
[  200.954953][ T5915] hub 4-1:0.0: 1 port detected
[  200.979022][ T5887] usb 1-1: USB disconnect, device number 15
[  201.565805][ T5915] hub 4-1:0.0: activate --> -90
[  201.971558][ T5914] usb 4-1: USB disconnect, device number 6
[  202.019693][   T33] audit: type=1800 audit(1757451655.304:23): pid=9941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1529" name="nullb0" dev="tmpfs" ino=2871 res=0 errno=0
[  202.342720][ T5887] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  202.490647][ T5887] usb 1-1: Using ep0 maxpacket: 8
[  202.504115][ T5887] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  202.513198][ T5887] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  202.517475][ T5887] usb 1-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0x76, changing to 0x6
[  202.523305][ T5887] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has an invalid bInterval 100, changing to 10
[  202.528169][ T5887] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 24936, setting to 1024
[  202.533739][ T5887] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  202.537609][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.547705][ T5887] hub 1-1:1.0: bad descriptor, ignoring hub
[  202.550329][ T5887] hub 1-1:1.0: probe with driver hub failed with error -5
[  202.554407][ T5887] cdc_wdm 1-1:1.0: skipping garbage
[  202.557154][ T5887] cdc_wdm 1-1:1.0: skipping garbage
[  202.560012][ T5887] cdc_wdm 1-1:1.0: probe with driver cdc_wdm failed with error -22
[  203.207833][ T9957] netlink: 'syz.2.1536': attribute type 1 has an invalid length.
[  203.365380][ T5887] usb 1-1: reset high-speed USB device number 16 using dummy_hcd
[  203.566092][ T9971] loop3: detected capacity change from 0 to 256
[  203.607201][ T9971] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  203.618485][ T9971] exFAT-fs (loop3): valid_size(150994954) is greater than size(10)
[  203.704536][ T9975] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1542'.
[  203.947795][ T5887] usb 1-1: USB disconnect, device number 16
[  204.259704][ T9990] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1551'.
[  204.436018][ T9996] program syz.0.1554 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  204.446053][ T9998] loop3: detected capacity change from 0 to 1024
[  204.543154][T10003] loop3: detected capacity change from 0 to 1024
[  204.779485][ T1092] hfsplus: b-tree write err: -5, ino 4
[  204.891295][T10020] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1564'.
[  205.068901][ T5887] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  205.436194][ T5887] usb 1-1: config 0 has an invalid interface number: 91 but max is 0
[  205.440644][ T5887] usb 1-1: config 0 has no interface number 0
[  205.454925][ T5887] usb 1-1: New USB device found, idVendor=05ac, idProduct=a9d2, bcdDevice=95.16
[  205.458728][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.462174][ T5887] usb 1-1: Product: syz
[  205.463820][ T5887] usb 1-1: Manufacturer: syz
[  205.465498][ T5887] usb 1-1: SerialNumber: syz
[  205.469184][ T5887] usb 1-1: config 0 descriptor??
[  205.692424][ T5887] usb 1-1: USB disconnect, device number 17
[  206.329058][T10058] sctp: [Deprecated]: syz.0.1578 (pid 10058) Use of int in max_burst socket option deprecated.
[  206.329058][T10058] Use struct sctp_assoc_value instead
[  207.162928][T10084] netlink: 'syz.2.1590': attribute type 1 has an invalid length.
[  207.172676][T10084] netlink: 'syz.2.1590': attribute type 1 has an invalid length.
[  207.225193][T10086] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1592'.
[  207.237191][T10088] netlink: 84 bytes leftover after parsing attributes in process `syz.2.1591'.
[  207.241261][T10086] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1592'.
[  207.245783][T10083] loop3: detected capacity change from 0 to 4096
[  207.253180][T10083] ntfs3: Unknown parameter 'hidedot_files'
[  207.348476][T10092] loop0: detected capacity change from 0 to 2048
[  207.376890][T10092] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  207.446053][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.448955][T10124] netlink: 212376 bytes leftover after parsing attributes in process `syz.0.1606'.
[  208.576340][T10126] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1607'.
[  208.785453][T10135] bridge0: port 3(team0) entered disabled state
[  208.798135][T10135] team0: left allmulticast mode
[  208.805459][T10135] team_slave_0: left allmulticast mode
[  208.807764][T10135] team_slave_1: left allmulticast mode
[  208.829061][T10135] bridge0: port 3(team0) entered disabled state
[  208.841978][T10135] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[  208.880067][T10141] loop0: detected capacity change from 0 to 128
[  208.884185][T10141] EXT4-fs: Ignoring removed nobh option
[  208.901782][T10143] loop3: detected capacity change from 0 to 1024
[  208.939601][T10143] hfsplus: request for non-existent node 134217728 in B*Tree
[  208.944137][T10143] hfsplus: request for non-existent node 134217728 in B*Tree
[  208.953440][T10141] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  208.989908][T10141] ext4 filesystem being mounted at mnt:[4026532722] supports timestamps until 2038-01-19 (0x7fffffff)
[  209.008647][T10141] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  209.087503][T10153] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1620'.
[  209.162023][T10162] loop3: detected capacity change from 0 to 1024
[  209.168735][T10162] hfsplus: Unknown parameter '01777777777777777777777'
[  209.191714][T10162] loop3: detected capacity change from 0 to 512
[  209.203556][T10163] loop0: detected capacity change from 0 to 1024
[  209.219424][T10163] hfsplus: Unknown parameter ''
[  209.222213][T10162] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  209.226335][T10162] ext4 filesystem being mounted at /360/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  209.258155][T10163] loop0: detected capacity change from 0 to 128
[  209.271846][T10163] affs: Bad value for 'bs'
[  209.449967][ T9986] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  209.966380][ T5879] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.189054][ T5879] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.312488][ T5879] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.325696][T10173] loop0: detected capacity change from 0 to 512
[  210.329735][T10173] EXT4-fs: inline encryption not supported
[  210.350338][T10173] EXT4-fs (loop0): revision level too high, forcing read-only mode
[  210.353956][T10173] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=c000e018, mo2=0002]
[  210.362972][T10173] EXT4-fs (loop0): orphan cleanup on readonly fs
[  210.365800][T10173] Quota error (device loop0): v2_read_header: Failed header read: expected=8 got=0
[  210.379277][T10173] EXT4-fs warning (device loop0): ext4_enable_quotas:7172: Failed to enable quota tracking (type=1, err=-22, ino=4). Please run e2fsck to fix.
[  210.385374][T10173] EXT4-fs (loop0): Cannot turn on quotas: error -22
[  210.390127][T10173] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm syz.0.1629: bg 0: block 40: padding at end of block bitmap is not set
[  210.398825][T10173] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  210.402891][T10173] EXT4-fs (loop0): 1 truncate cleaned up
[  210.406654][T10173] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  210.428758][   T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  210.443369][ T5879] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  210.444491][T10173] EXT4-fs error (device loop0): ext4_encrypted_get_link:46: inode #16: comm syz.0.1629: bad symlink.
[  210.448043][   T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  210.461379][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  210.465591][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  210.470665][   T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  210.803127][ T5879] bridge_slave_1: left allmulticast mode
[  210.805074][ T5879] bridge_slave_1: left promiscuous mode
[  210.807838][ T5879] bridge0: port 2(bridge_slave_1) entered disabled state
[  210.814826][ T5879] bridge_slave_0: left allmulticast mode
[  210.817129][ T5879] bridge_slave_0: left promiscuous mode
[  210.820892][ T5879] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.267413][T10206] overlayfs: failed to clone upperpath
[  211.392073][ T5879] bond0 (unregistering): (slave 5@): Releasing backup interface
[  211.404190][ T5879] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  211.409689][ T5879] bond0 (unregistering): Released all slaves
[  211.459929][T10176] chnl_net:caif_netlink_parms(): no params data found
[  211.801656][T10176] bridge0: port 1(bridge_slave_0) entered blocking state
[  211.806364][T10176] bridge0: port 1(bridge_slave_0) entered disabled state
[  211.817888][T10176] bridge_slave_0: entered allmulticast mode
[  211.821253][T10176] bridge_slave_0: entered promiscuous mode
[  211.894041][T10176] bridge0: port 2(bridge_slave_1) entered blocking state
[  211.896961][T10176] bridge0: port 2(bridge_slave_1) entered disabled state
[  211.899519][T10176] bridge_slave_1: entered allmulticast mode
[  211.903968][T10176] bridge_slave_1: entered promiscuous mode
[  211.972564][ T5879] hsr_slave_0: left promiscuous mode
[  211.975876][ T5879] hsr_slave_1: left promiscuous mode
[  211.978600][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  211.981572][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_0
[  211.985405][ T5879] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.989300][ T5879] batman_adv: batadv0: Removing interface: batadv_slave_1
[  212.005335][ T5879] veth1_macvtap: left promiscuous mode
[  212.008139][ T5879] veth0_macvtap: left promiscuous mode
[  212.010513][ T5879] veth1_vlan: left promiscuous mode
[  212.012720][ T5879] veth0_vlan: left promiscuous mode
[  212.419858][ T5849] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  212.540787][ T5879] team0 (unregistering): Port device team_slave_1 removed
[  212.582146][ T5879] team0 (unregistering): Port device team_slave_0 removed
[  212.671657][   T55] Bluetooth: hci2: command tx timeout
[  212.789121][ T5239] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  212.795278][ T5239] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  212.803904][ T5239] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  212.807614][ T5239] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  212.818098][ T5239] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  213.041075][T10176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  213.052294][T10176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  213.057433][ T5880] infiniband syz1: ib_query_port failed (-19)
[  213.131591][T10176] team0: Port device team_slave_0 added
[  213.137030][T10176] team0: Port device team_slave_1 added
[  213.227359][T10176] batman_adv: batadv0: Adding interface: batadv_slave_0
[  213.232130][T10176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.257859][T10176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  213.287349][T10176] batman_adv: batadv0: Adding interface: batadv_slave_1
[  213.292584][T10176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  213.305500][T10176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  213.427847][T10176] hsr_slave_0: entered promiscuous mode
[  213.433866][T10176] hsr_slave_1: entered promiscuous mode
[  213.436765][T10176] debugfs: 'hsr0' already exists in 'hsr'
[  213.439246][T10176] Cannot create hsr debugfs directory
[  213.484828][ T5879] ------------[ cut here ]------------
[  213.487151][ T5879] WARNING: CPU: 1 PID: 5879 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x7e/0x100
[  213.491393][ T5879] Modules linked in:
[  213.493817][ T5879] CPU: 1 UID: 0 PID: 5879 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  213.498861][ T5879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.503020][ T5879] Workqueue: netns cleanup_net
[  213.505072][ T5879] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  213.507555][ T5879] Code: 98 ef de f7 4b 83 3c 2c 00 75 19 e8 4c 7e 7b f7 49 81 fd f8 07 00 00 74 1d e8 3e 7e 7b f7 49 83 c5 08 eb c9 e8 33 7e 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  213.515509][ T5879] RSP: 0018:ffffc9000404f8b0 EFLAGS: 00010293
[  213.518424][ T5879] RAX: ffffffff8a4430ad RBX: ffff888032230000 RCX: ffff88801fe7d640
[  213.522783][ T5879] RDX: 0000000000000000 RSI: ffffffff8d9b9313 RDI: ffff888032230000
[  213.526231][ T5879] RBP: ffffc9000404f9b0 R08: ffffffff8fa3a037 R09: 1ffffffff1f47406
[  213.529489][ T5879] R10: dffffc0000000000 R11: fffffbfff1f47407 R12: ffff888032230000
[  213.533217][ T5879] R13: 0000000000000000 R14: ffff888110c30000 R15: dffffc0000000000
[  213.536648][ T5879] FS:  0000000000000000(0000) GS:ffff8881a3c15000(0000) knlGS:0000000000000000
[  213.540327][ T5879] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  213.543016][ T5879] CR2: 0000560dc4b2d000 CR3: 000000011353e000 CR4: 00000000000006f0
[  213.546486][ T5879] Call Trace:
[  213.547942][ T5879]  <TASK>
[  213.549215][ T5879]  ops_undo_list+0x49a/0x990
[  213.552037][ T5879]  ? __pfx_ops_undo_list+0x10/0x10
[  213.554171][ T5879]  ? do_raw_spin_unlock+0x4d/0x240
[  213.556366][ T5879]  cleanup_net+0x4c5/0x800
[  213.558437][ T5879]  ? __pfx_cleanup_net+0x10/0x10
[  213.560553][ T5879]  ? _raw_spin_unlock_irq+0x23/0x50
[  213.562800][ T5879]  ? process_scheduled_works+0x9ef/0x17b0
[  213.565219][ T5879]  ? process_scheduled_works+0x9ef/0x17b0
[  213.567589][ T5879]  process_scheduled_works+0xae1/0x17b0
[  213.570023][ T5879]  ? __pfx_process_scheduled_works+0x10/0x10
[  213.572638][ T5879]  worker_thread+0x8a0/0xda0
[  213.574617][ T5879]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  213.577288][ T5879]  ? __kthread_parkme+0x7b/0x200
[  213.579761][ T5879]  kthread+0x711/0x8a0
[  213.581469][ T5879]  ? __pfx_worker_thread+0x10/0x10
[  213.583712][ T5879]  ? __pfx_kthread+0x10/0x10
[  213.585770][ T5879]  ? _raw_spin_unlock_irq+0x23/0x50
[  213.588118][ T5879]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.590559][ T5879]  ? __pfx_kthread+0x10/0x10
[  213.592476][ T5879]  ret_from_fork+0x3fc/0x770
[  213.594474][ T5879]  ? __pfx_ret_from_fork+0x10/0x10
[  213.596738][ T5879]  ? __switch_to_asm+0x39/0x70
[  213.598925][ T5879]  ? __switch_to_asm+0x33/0x70
[  213.601063][ T5879]  ? __pfx_kthread+0x10/0x10
[  213.603087][ T5879]  ret_from_fork_asm+0x1a/0x30
[  213.605171][ T5879]  </TASK>
[  213.606517][ T5879] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  213.609556][ T5879] CPU: 1 UID: 0 PID: 5879 Comm: kworker/u8:3 Not tainted syzkaller #0 PREEMPT(full) 
[  213.613485][ T5879] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  213.617679][ T5879] Workqueue: netns cleanup_net
[  213.619761][ T5879] Call Trace:
[  213.621217][ T5879]  <TASK>
[  213.622492][ T5879]  dump_stack_lvl+0x99/0x250
[  213.624453][ T5879]  ? __asan_memcpy+0x40/0x70
[  213.626464][ T5879]  ? __pfx_dump_stack_lvl+0x10/0x10
[  213.628736][ T5879]  ? __pfx__printk+0x10/0x10
[  213.630766][ T5879]  vpanic+0x281/0x750
[  213.632471][ T5879]  ? __pfx__printk+0x10/0x10
[  213.634417][ T5879]  ? __pfx_vpanic+0x10/0x10
[  213.636310][ T5879]  ? is_bpf_text_address+0x292/0x2b0
[  213.638538][ T5879]  panic+0xb9/0xc0
[  213.640164][ T5879]  ? __pfx_panic+0x10/0x10
[  213.642036][ T5879]  __warn+0x31b/0x4b0
[  213.643789][ T5879]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  213.645982][ T5879]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  213.648256][ T5879]  report_bug+0x2be/0x4f0
[  213.650106][ T5879]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  213.652464][ T5879]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  213.654783][ T5879]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  213.657039][ T5879]  handle_bug+0x84/0x160
[  213.658883][ T5879]  exc_invalid_op+0x1a/0x50
[  213.660810][ T5879]  asm_exc_invalid_op+0x1a/0x20
[  213.662871][ T5879] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  213.665423][ T5879] Code: 98 ef de f7 4b 83 3c 2c 00 75 19 e8 4c 7e 7b f7 49 81 fd f8 07 00 00 74 1d e8 3e 7e 7b f7 49 83 c5 08 eb c9 e8 33 7e 7b f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  213.673311][ T5879] RSP: 0018:ffffc9000404f8b0 EFLAGS: 00010293
[  213.675905][ T5879] RAX: ffffffff8a4430ad RBX: ffff888032230000 RCX: ffff88801fe7d640
[  213.679270][ T5879] RDX: 0000000000000000 RSI: ffffffff8d9b9313 RDI: ffff888032230000
[  213.682661][ T5879] RBP: ffffc9000404f9b0 R08: ffffffff8fa3a037 R09: 1ffffffff1f47406
[  213.686051][ T5879] R10: dffffc0000000000 R11: fffffbfff1f47407 R12: ffff888032230000
[  213.689361][ T5879] R13: 0000000000000000 R14: ffff888110c30000 R15: dffffc0000000000
[  213.692681][ T5879]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  213.695069][ T5879]  ops_undo_list+0x49a/0x990
[  213.697066][ T5879]  ? __pfx_ops_undo_list+0x10/0x10
[  213.699170][ T5879]  ? do_raw_spin_unlock+0x4d/0x240
[  213.701379][ T5879]  cleanup_net+0x4c5/0x800
[  213.703317][ T5879]  ? __pfx_cleanup_net+0x10/0x10
[  213.705373][ T5879]  ? _raw_spin_unlock_irq+0x23/0x50
[  213.707619][ T5879]  ? process_scheduled_works+0x9ef/0x17b0
[  213.710001][ T5879]  ? process_scheduled_works+0x9ef/0x17b0
[  213.712406][ T5879]  process_scheduled_works+0xae1/0x17b0
[  213.714718][ T5879]  ? __pfx_process_scheduled_works+0x10/0x10
[  213.717313][ T5879]  worker_thread+0x8a0/0xda0
[  213.719221][ T5879]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  213.721832][ T5879]  ? __kthread_parkme+0x7b/0x200
[  213.723917][ T5879]  kthread+0x711/0x8a0
[  213.725662][ T5879]  ? __pfx_worker_thread+0x10/0x10
[  213.727809][ T5879]  ? __pfx_kthread+0x10/0x10
[  213.729638][ T5879]  ? _raw_spin_unlock_irq+0x23/0x50
[  213.731450][ T5879]  ? lockdep_hardirqs_on+0x9c/0x150
[  213.733311][ T5879]  ? __pfx_kthread+0x10/0x10
[  213.735146][ T5879]  ret_from_fork+0x3fc/0x770
[  213.737046][ T5879]  ? __pfx_ret_from_fork+0x10/0x10
[  213.739054][ T5879]  ? __switch_to_asm+0x39/0x70
[  213.740782][ T5879]  ? __switch_to_asm+0x33/0x70
[  213.742463][ T5879]  ? __pfx_kthread+0x10/0x10
[  213.744307][ T5879]  ret_from_fork_asm+0x1a/0x30
[  213.746285][ T5879]  </TASK>
[  213.748269][ T5879] Kernel Offset: disabled
[  213.749840][ T5879] Rebooting in 86400 seconds..

VM DIAGNOSIS:
20:56:49  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff820b06f1 RBX=000000002c205067 RCX=ffff88810c07b980 RDX=0000000000000000
RSI=0000000000000000 RDI=0000000000000000 RBP=ffffc900081f7dd0 RSP=ffffc900081f7c00
R8 =0000000000000004 R9 =0000000000000004 R10=ffffc900081f7d0c R11=fffff5200103efaa
R12=dffffc0000000000 R13=ffff8880272fbe00 R14=0000000000000000 R15=ffffc900081f7ce0
RIP=ffffffff820b0703 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0000 0000000000000000 ffffffff 00c00000
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f1297e0a380 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c14da17a18 CR3=0000000020582000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000ffff00000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=000000000000006c RBX=000000000000006c RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000404f050
R8 =ffff88801f880237 R9 =1ffff11003f10046 R10=dffffc0000000000 R11=ffffffff854f6e00
R12=dffffc0000000000 R13=ffffffff99b00914 R14=ffffffff99df5420 R15=0000000000000000
RIP=ffffffff854f6e7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000560dc4b2d000 CR3=000000011353e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffffffffffff 00000000ffffffff
XMM02=70692f74656e2f73 79732f636f72702f XMM03=000000ffffffff00 ff00ff00ff00ff00
XMM04=ff00ff00ffffff00 00ff000000000000 XMM05=0000000000000061 0000000000000000
XMM06=ffffffffff000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=ffffffffffffff00 ffffffffffffffff XMM09=0000000000306e61 632f74656e2f302e
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
