last executing test programs:

3.858898741s ago: executing program 0 (id=2990):
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x31, 0xffffffffffffffff, 0x0)
r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0)
write$UHID_INPUT(r0, &(0x7f0000002080)={0xc, {"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", 0x1000}}, 0x1006)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

3.328232656s ago: executing program 1 (id=2996):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000036571a20cd0c8000fe67010203010902120001000000000904"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f00000000c0)={0x34, &(0x7f0000000440)={0x0, 0x14, 0x8, "eb9a47809bf87af0"}, 0x0, 0x0, 0x0, 0x0, 0x0})

2.824402905s ago: executing program 0 (id=2997):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}})

2.592884622s ago: executing program 1 (id=2998):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000000000ea04850000005000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073797a320000000028000480080002400000000008000140000000051400030076655468315f6d6163767461700000000900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a310000000014000000110001"], 0xc8}}, 0x0)
close(r1)

2.586290496s ago: executing program 2 (id=2999):
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, 0x0)

2.502136463s ago: executing program 1 (id=3000):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x15)
syz_clone(0x20000, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x5)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

2.501797762s ago: executing program 2 (id=3001):
prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f00000004c0)=ANY=[@ANYRES8=0x0], 0x1, 0x5514, &(0x7f000000b2c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020660b, &(0x7f0000000300)={0x0, 0x10000012000003, 0xe, 0x62})

2.141971176s ago: executing program 2 (id=3002):
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x4000072, 0xffffffffffffffff, 0x0)

1.774149386s ago: executing program 0 (id=3003):
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x41)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2182, 0x0)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/consoles\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x20000023896)
process_vm_writev(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000006d0000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r6, 0x0, 0x5}, 0x18)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', <r8=>0x0})
bind$packet(r7, &(0x7f0000000280)={0x11, 0xf7, r8, 0x1, 0x3, 0x6, @link_local}, 0x14)
bind$packet(r7, &(0x7f0000000200)={0x11, 0x1c, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15)
r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, @xdp}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x13, &(0x7f0000000680)=ANY=[@ANYRES32=r9], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff26, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94)
r10 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
dup(r10)

1.48307965s ago: executing program 1 (id=3004):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'})
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl(r0, 0x8b2c, &(0x7f0000000040))

1.013503122s ago: executing program 1 (id=3005):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x3000046, &(0x7f0000000380)={[{@delalloc}, {@data_err_abort}, {@bh}, {@dioread_lock}, {@data_err_ignore}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4007b1}}, {@data_err_ignore}, {@grpquota}, {@nobh}, {@user_xattr}, {@bh}, {@dioread_nolock}]}, 0x1, 0x553, &(0x7f0000000a40)="$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")
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
sched_rr_get_interval(r1, &(0x7f00000001c0))
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17)
syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0)
shmget$private(0x0, 0x2000, 0x10, &(0x7f0000748000/0x2000)=nil)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file2\x00', 0x42, 0x100)
write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040), 0x12)
r4 = syz_mount_image$exfat(0x0, &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x1880c20, 0x0, 0x3, 0x0, &(0x7f0000000000))
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r5, &(0x7f00000000c0)='a', 0x200000c1, 0x9000)
ioctl$FIBMAP(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=0x5)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000240)=<r6=>0x0)
statx(r4, &(0x7f0000000280)='./file1\x00', 0x2000, 0x1, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, <r7=>0x0})
fchown(r0, r6, r7)

1.013344137s ago: executing program 2 (id=3006):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x290a055, 0x0, 0xfd, 0x0, 0x0)
mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='overlay\x00', 0x10000, &(0x7f00000001c0)='workdir')

970.383459ms ago: executing program 2 (id=3007):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@ipv6_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e22, 0x4e22}}]}, 0x24}}, 0x0)

862.069549ms ago: executing program 0 (id=3008):
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_SIOCETHTOOL(r0, 0x89f6, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x2, 0x0, 0xb152, 0x1, 0x1fc, 0x0, 0x5}})

583.076438ms ago: executing program 2 (id=3009):
r0 = socket(0x2c, 0x3, 0x0)
getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x17, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='kfree\x00', r5}, 0x10)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, 0x0, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
sendmsg$NFT_BATCH(r7, 0x0, 0x20050890)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
ioctl$KDSIGACCEPT(0xffffffffffffffff, 0x4b4e, 0x40)
mkdirat(0xffffffffffffff9c, 0x0, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0)
r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/profiling', 0xa0042, 0x0)
write$tcp_mem(r8, &(0x7f0000000280)={0x11, 0x2d, 0x0, 0x3a, 0xfffffffffffffffe, 0x2c}, 0x48)

368.317082ms ago: executing program 0 (id=3010):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@newlink={0x3c, 0x10, 0x403, 0xfffffffc, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x66}]}}}]}, 0x3c}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x24000020)

59.764048ms ago: executing program 0 (id=3011):
sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8)
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000005880)=ANY=[@ANYBLOB="6e6f646973636172642c6e6f636865636b706f696e745f6d657267652c616c6c6f635f6d6f64653d64656661756c742c6163746976655f6c6f67733d362c757365725f78617474722c6661756c745f696e6a656374696f6e3d30303030303030303030303030303030303031362c646973636172642c6e6f61636c2c6673796e635f6d6f64653d706f7369782c616c6c6f635f6d6f64653d64656661756c742c6e6f657874656e745f63616368652c6163746976655f6c6f67733d322c6661756c745f747970653d30303030303030303030303031363737373231342c0084538367d8b9c04bebbf0f4ea4d5617c063f0a30b5325e5d939d497829d8452e38794f1563bf34cdaaf9b70591db2f2a066e339d0c0b7c189bac05d8e91e9d1f4670d79a57f83b67f1f98b905d3b06be7de7829439d0b21d1744d7fad3fe3f3f9b3361f4bfa2c2e375c048af0d6ecac62d07c6a85e2558b9e8639b050137830520aea2c9243f9f9eca12969def7d15c8bac687164c38cf349d738c"], 0x1, 0x5505, &(0x7f0000000340)="$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")
creat(&(0x7f0000000080)='./file0\x00', 0x4)
creat(&(0x7f0000000000)='./file0\x00', 0x0)
lsetxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f0000000440)=ANY=[], 0x37, 0x0)

0s ago: executing program 1 (id=3012):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x9c}]}, &(0x7f0000000640)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @sched_cls=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

kernel console output (not intermixed with test programs):

[  108.289083][ T6914] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  108.294106][ T6914] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[  108.297423][ T6914] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[  108.318749][ T6914] F2FS-fs (loop0): f2fs_fill_dentries: corrupted namelen=27648, run fsck to fix.
[  109.088005][ T6939] netlink: 'syz.0.360': attribute type 83 has an invalid length.
[  109.367790][ T1273] usb 2-1: USB disconnect, device number 8
[  109.535821][   T54] Bluetooth: hci0: command 0x0c1a tx timeout
[  109.615122][   T54] Bluetooth: hci1: command 0x0c1a tx timeout
[  109.695070][   T54] Bluetooth: hci2: command 0x0c1a tx timeout
[  110.495502][ T1273] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  110.649571][ T1273] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  110.687812][ T1273] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  110.697370][ T1273] usb 2-1: config 0 descriptor??
[  110.703539][ T1273] cp210x 2-1:0.0: cp210x converter detected
[  111.133512][ T6973] loop0: detected capacity change from 0 to 512
[  111.138849][ T6973] EXT4-fs (loop0): ext4_check_descriptors: Inode bitmap for group 0 not in group (block 4)!
[  111.152965][ T6973] EXT4-fs (loop0): group descriptors corrupted!
[  111.153231][ T1273] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  111.188821][ T1273] usb 2-1: cp210x converter now attached to ttyUSB0
[  111.405648][ T1273] usb 2-1: USB disconnect, device number 9
[  112.316928][ T6990] loop2: detected capacity change from 0 to 1024
[  112.328215][ T1273] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  112.512388][ T6621] hfsplus: b-tree write err: -5, ino 4
[  112.661750][ T1273] cp210x 2-1:0.0: device disconnected
[  112.788183][ T7004] fuse: Unknown parameter '0xffffffffffffffff'
[  113.208563][ T7020] loop2: detected capacity change from 0 to 512
[  113.263932][ T7020] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  113.286085][ T7020] ext4 filesystem being mounted at /141/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  113.457040][ T7020] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.394: bg 0: block 217: padding at end of block bitmap is not set
[  113.479233][ T7028] EXT4-fs (loop2): shut down requested (2)
[  113.550242][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  113.559003][ T1136] Quota error (device loop2): dquot_write_dquot: Can't write quota structure (error -5). Quota may get out of sync!
[  113.739117][ T7032] input: syz0 as /devices/virtual/input/input5
[  114.008409][ T7027] loop1: detected capacity change from 0 to 32768
[  114.039025][ T7027] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  114.073932][ T7027] XFS (loop1): Ending clean mount
[  114.083918][ T7027] XFS (loop1): Quotacheck needed: Please wait.
[  114.129809][ T7027] XFS (loop1): Quotacheck: Done.
[  114.177430][ T5859] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  114.227470][ T7059] loop0: detected capacity change from 0 to 1024
[  114.298812][ T7059] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.313451][ T7059] ext4 filesystem being mounted at /137/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  114.360194][ T7059] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  114.585023][ T5897] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  114.735008][ T5897] usb 2-1: Using ep0 maxpacket: 32
[  114.748040][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  114.752101][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  114.756945][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  114.761822][ T5897] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  114.766854][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  114.772549][ T5897] usb 2-1: config 0 descriptor??
[  114.785549][ T7065] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  114.790047][ T5897] hub 2-1:0.0: USB hub found
[  114.852902][ T7090] netlink: 'syz.0.418': attribute type 28 has an invalid length.
[  114.995765][ T5897] hub 2-1:0.0: 11 ports detected
[  114.998234][ T5897] hub 2-1:0.0: insufficient power available to use all downstream ports
[  115.200138][ T5897] hub 2-1:0.0: hub_hub_status failed (err = -71)
[  115.203493][ T5897] hub 2-1:0.0: config failed, can't get hub status (err -71)
[  115.209994][ T5897] usbhid 2-1:0.0: can't add hid device: -71
[  115.212258][ T5897] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  115.238188][ T5897] usb 2-1: USB disconnect, device number 10
[  116.138714][ T7104] syz.1.424 uses obsolete (PF_INET,SOCK_PACKET)
[  116.314216][ T7106] loop1: detected capacity change from 0 to 4096
[  116.324958][ T7106] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  116.460741][ T7106] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  116.796639][ T7120] loop1: detected capacity change from 0 to 16384
[  116.868643][ T7120] bcachefs (loop1): starting version 1.13: inode_has_child_snapshots opts=metadata_checksum=none,data_checksum=none,str_hash=crc64,erasure_code,norecovery,recovery_pass_last=scan_for_btree_nodes,read_only,reconstruct_alloc
[  116.868668][ T7120]   features: new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  116.885955][ T7120] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  116.889278][ T7120] bcachefs (loop1): recovering from clean shutdown, journal seq 18
[  116.892668][ T7120] bcachefs (loop1): Doing compatible version upgrade from 1.13: inode_has_child_snapshots to 1.28: inode_has_case_insensitive
[  116.892668][ T7120]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  116.903694][ T7120] bcachefs (loop1): dropping and reconstructing all alloc info
[  116.921323][ T7120] bcachefs (loop1): done starting filesystem
[  116.973804][ T5859] bcachefs (loop1): shutting down
[  116.998407][ T5859] bcachefs (loop1): shutdown complete
[  117.553589][ T7140] netlink: 32 bytes leftover after parsing attributes in process `syz.0.440'.
[  117.601186][ T7133] loop2: detected capacity change from 0 to 32768
[  117.605920][ T7133] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.437 (7133)
[  117.620341][ T7133] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  117.628847][ T7142] netlink: 252 bytes leftover after parsing attributes in process `syz.0.441'.
[  117.638180][ T7133] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  117.786172][ T7133] BTRFS info (device loop2): enabling ssd optimizations
[  117.789064][ T7133] BTRFS info (device loop2): enabling free space tree
[  117.835047][ T5864] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  118.278933][ T7171] loop1: detected capacity change from 0 to 32768
[  118.288319][ T7171] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.435 (7171)
[  118.325010][   T51] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[  118.326664][ T7171] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  118.332962][ T7171] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  118.346312][ T7185] fuse: Bad value for 'fd'
[  118.391906][ T7171] BTRFS info (device loop1): enabling ssd optimizations
[  118.406622][ T7171] BTRFS info (device loop1): enabling free space tree
[  118.409442][ T7171] BTRFS info (device loop1): use lzo compression, level 1
[  118.412254][ T7171] BTRFS info (device loop1): max_inline set to 0
[  118.454510][ T7206] netlink: 8 bytes leftover after parsing attributes in process `syz.0.456'.
[  118.461757][ T7206] netlink: 12 bytes leftover after parsing attributes in process `syz.0.456'.
[  118.468991][ T5859] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  118.479032][ T7206] netlink: 16 bytes leftover after parsing attributes in process `syz.0.456'.
[  118.489458][   T51] usb 3-1: unable to get BOS descriptor or descriptor too short
[  118.502011][   T51] usb 3-1: not running at top speed; connect to a high speed hub
[  118.512064][   T51] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  118.521135][   T51] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  118.539855][   T51] usb 3-1: string descriptor 0 read error: -22
[  118.542549][   T51] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  118.556773][   T51] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.626029][   T51] usb 3-1: 0:2 : does not exist
[  119.488143][   T51] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  119.498090][   T51] usb 3-1: 5:0: failed to get current value for ch 1 (-22)
[  119.544499][   T51] usb 3-1: 5:0: cannot get min/max values for control 3 (id 5)
[  119.555274][   T51] usb 3-1: USB disconnect, device number 4
[  120.942889][ T7225] loop1: detected capacity change from 0 to 32768
[  121.032977][ T7225] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  121.211207][ T7225] XFS (loop1): Mounting V5 filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 in no-recovery mode. Filesystem will be inconsistent.
[  121.606617][ T5859] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  121.679750][ T5897] IPVS: starting estimator thread 0...
[  121.766342][ T7250] IPVS: using max 49 ests per chain, 117600 per kthread
[  122.171220][ T7252] loop2: detected capacity change from 0 to 32768
[  122.194494][ T7252] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.471 (7252)
[  122.297312][ T7252] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  122.301266][ T7252] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  122.766088][ T7252] BTRFS info (device loop2): setting nodatasum
[  122.768650][ T7252] BTRFS info (device loop2): enabling ssd optimizations
[  122.771469][ T7252] BTRFS info (device loop2): enabling free space tree
[  122.774025][ T7252] BTRFS info (device loop2): enabling auto defrag
[  122.785280][ T7252] BTRFS info (device loop2): max_inline set to 0
[  123.140859][ T5864] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  123.203396][ T7297] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.484'.
[  123.324518][ T7301] netlink: 28 bytes leftover after parsing attributes in process `syz.0.486'.
[  123.337863][ T7301] netlink: 7 bytes leftover after parsing attributes in process `syz.0.486'.
[  123.486766][ T7309] netlink: 32 bytes leftover after parsing attributes in process `syz.1.489'.
[  123.492694][ T7309] netlink: 32 bytes leftover after parsing attributes in process `syz.1.489'.
[  124.010726][ T7329] macvlan2: entered promiscuous mode
[  124.013178][ T7329] macvlan2: entered allmulticast mode
[  124.108560][ T7331] @: renamed from vlan0 (while UP)
[  124.405635][ T7339] netlink: 8 bytes leftover after parsing attributes in process `syz.1.502'.
[  124.409469][ T7339] netlink: 4 bytes leftover after parsing attributes in process `syz.1.502'.
[  124.432093][ T5753] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  124.440124][ T5753] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  124.444498][ T5753] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  124.450901][ T5753] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  124.693914][ T7359] loop1: detected capacity change from 0 to 1024
[  124.897344][ T7355] loop2: detected capacity change from 0 to 32768
[  124.940605][ T7355] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  125.014109][ T5864] ocfs2: Unmounting device (7,2) on (node local)
[  125.344078][ T7367] loop1: detected capacity change from 0 to 40427
[  125.350266][ T7367] F2FS-fs (loop1): build fault injection rate: 14
[  125.353045][ T7367] F2FS-fs (loop1): build fault injection type: 0x3bfe8c
[  125.358370][ T7367] F2FS-fs (loop1): invalid crc value
[  125.362618][    C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  125.372734][    C0] F2FS-fs (loop1): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60
[  125.414917][ T7367] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  125.418394][ T7367] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0
[  125.424781][ T7367] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  125.435940][ T7367] F2FS-fs (loop1): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  125.443846][ T7367] F2FS-fs (loop1): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0x249/0x1cf0
[  125.448451][ T7367] F2FS-fs (loop1): inconsistent node block, node_type:1, nid:3, node_footer[nid:3,ino:3,ofs:0,cpver:1219692001,blkaddr:4098]
[  125.459435][ T7367] syz.1.515: attempt to access beyond end of device
[  125.459435][ T7367] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[  125.464355][ T7367] syz.1.515: attempt to access beyond end of device
[  125.464355][ T7367] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[  125.493483][ T5859] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_grab_meta_folio+0x6a/0x1d0
[  127.539594][ T7438] overlayfs: failed to resolve './file1metacopy=off': -2
[  127.545022][ T1273] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  127.698943][ T1273] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[  127.701984][ T1273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  127.715606][ T1273] usb 3-1: config 0 descriptor??
[  127.928376][ T1273] udl 3-1:0.0: [drm] Unrecognized vendor firmware descriptor
[  128.157232][ T7454] netlink: 'syz.1.554': attribute type 1 has an invalid length.
[  128.171928][ T1273] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 3
[  128.185183][ T1273] [drm] Initialized udl on minor 3
[  128.213813][ T7454] bond1: (slave bridge1): making interface the new active one
[  128.228288][ T7454] bond1: (slave bridge1): Enslaving as an active interface with an up link
[  128.282774][ T7457] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.555'.
[  128.442936][ T7465] sctp: [Deprecated]: syz.0.559 (pid 7465) Use of int in maxseg socket option.
[  128.442936][ T7465] Use struct sctp_assoc_value instead
[  128.533508][ T1273] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 1 failed err ffffffb9
[  128.555370][ T1273] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  128.569694][ T1273] usb 3-1: USB disconnect, device number 5
[  128.573634][ T5897] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[  128.585546][ T5897] udl 3-1:0.0: [drm] Cannot find any crtc or sizes
[  128.790527][ T7481] netlink: 'syz.0.567': attribute type 1 has an invalid length.
[  128.793819][ T7481] nbd: couldn't find a device at index 20
[  128.833822][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'.
[  128.837634][ T7483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.568'.
[  128.853988][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  128.854005][ T7483] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'.
[  128.854033][ T7483] netlink: 20 bytes leftover after parsing attributes in process `syz.0.568'.
[  128.861469][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  128.871636][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  128.878255][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  131.846696][ T7532] loop1: detected capacity change from 0 to 32768
[  131.853049][ T7532] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section journal_v2: journal bucket 9 before first bucket 256
[  131.853049][ T7532] journal_v2 (size 40):
[  131.853049][ T7532] Buckets:  9-16 24-25
[  131.853049][ T7532] 
[  131.862007][ T7532] bcachefs: bch2_fs_get_tree() error: invalid_sb_journal
[  131.936174][   T54] Bluetooth: hci2: command 0x0c1a tx timeout
[  132.028926][ T7544] loop1: detected capacity change from 0 to 4096
[  132.985252][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  132.988099][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  133.009695][ T7567] Invalid ELF header magic: != ELF
[  133.848594][ T7579] loop1: detected capacity change from 0 to 1024
[  133.862901][ T7579] EXT4-fs: Ignoring removed nobh option
[  133.940520][ T7579] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  134.099102][ T7586] loop2: detected capacity change from 0 to 2048
[  134.115001][ T7586] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  134.236612][ T7592] netlink: 'syz.2.606': attribute type 1 has an invalid length.
[  134.809731][ T5859] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  136.263933][ T7619] netlink: 'syz.2.617': attribute type 21 has an invalid length.
[  136.267524][ T7619] IPv6: NLM_F_CREATE should be specified when creating new route
[  137.201122][ T7644] tipc: Started in network mode
[  137.203362][ T7644] tipc: Node identity ac1414aa, cluster identity 4711
[  137.209460][ T7644] tipc: Enabled bearer <udp:syz2>, priority 10
[  137.352734][ T7641] netlink: 64 bytes leftover after parsing attributes in process `syz.2.626'.
[  137.447913][ T7658] PKCS7: Unknown OID: [4] 5.25.43183.11314.97.496.3.846527319083.2007.15776
[  137.451560][ T7658] PKCS7: Only support pkcs7_signedData type
[  137.536930][ T7661] loop1: detected capacity change from 0 to 1764
[  137.812483][ T7673] vlan0: entered promiscuous mode
[  137.830165][ T7673] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode
[  138.191167][ T7680] loop2: detected capacity change from 0 to 32768
[  138.224722][  T973] tipc: Node number set to 2886997162
[  138.674841][   T51] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  138.840727][   T51] usb 3-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33
[  138.844158][   T51] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.851982][   T51] usb 3-1: config 0 descriptor??
[  138.866171][   T51] gspca_main: sunplus-2.14.0 probing 055f:c420
[  139.068795][   T51] gspca_sunplus: reg_w_riv err -71
[  139.084409][   T51] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  139.100517][   T51] usb 3-1: USB disconnect, device number 6
[  139.108085][ T7702] netlink: 16 bytes leftover after parsing attributes in process `syz.1.655'.
[  139.401699][   T33] audit: type=1326 audit(1758170663.102:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cb8eba9 code=0x7ffc0000
[  139.402281][ T7721] orangefs_devreq_open: device cannot be opened in blocking mode
[  139.416454][   T33] audit: type=1326 audit(1758170663.102:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cb8eba9 code=0x7ffc0000
[  139.416483][   T33] audit: type=1326 audit(1758170663.102:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cb8eba9 code=0x7ffc0000
[  139.416501][   T33] audit: type=1326 audit(1758170663.102:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.664" exe="/syz-executor" sig=0 arch=c000003e syscall=109 compat=0 ip=0x7f6c6cb8eba9 code=0x7ffc0000
[  139.416518][   T33] audit: type=1326 audit(1758170663.102:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cb8eba9 code=0x7ffc0000
[  139.416536][   T33] audit: type=1326 audit(1758170663.102:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cb8eba9 code=0x7ffc0000
[  139.416554][   T33] audit: type=1326 audit(1758170663.102:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.664" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cb8eba9 code=0x7ffc0000
[  139.416576][   T33] audit: type=1326 audit(1758170663.102:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.664" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f6c6cb8eba9 code=0x7ffc0000
[  139.416597][   T33] audit: type=1326 audit(1758170663.102:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7719 comm="syz.0.664" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f6c6cb8eba9 code=0x7ffc0000
[  139.564134][ T7727] loop1: detected capacity change from 0 to 256
[  141.199408][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  141.359002][   T10] usb 2-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  141.361979][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.374894][   T10] usb 2-1: Product: syz
[  141.376716][   T10] usb 2-1: Manufacturer: syz
[  141.378757][   T10] usb 2-1: SerialNumber: syz
[  141.486722][ T7778] loop2: detected capacity change from 0 to 1024
[  141.489844][ T7778] EXT4-fs: Ignoring removed nomblk_io_submit option
[  141.495361][ T7778] EXT4-fs: Mount option(s) incompatible with ext3
[  142.653202][ T7803] wireguard0: entered promiscuous mode
[  142.655915][ T7803] wireguard0: entered allmulticast mode
[  142.903798][   T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to read register index 0x00000010. ret = -EPIPE
[  143.150861][ T7810] loop2: detected capacity change from 0 to 2048
[  143.863977][   T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x00001028. ret = -EPROTO
[  143.872687][   T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Failed to write register index 0x0000011c. ret = -EPROTO
[  143.878766][   T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Registers INIT FAILED....
[  143.893220][   T10] lan78xx 2-1:1.0 (unnamed net_device) (uninitialized): Bind routine FAILED
[  143.917326][   T10] lan78xx 2-1:1.0: probe with driver lan78xx failed with error -71
[  143.935147][   T10] usb 2-1: USB disconnect, device number 11
[  144.082354][ T7836] netlink: 'syz.0.712': attribute type 1 has an invalid length.
[  145.161500][ T7860] loop2: detected capacity change from 0 to 1024
[  145.236047][  T973] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  145.240594][ T6649] hfsplus: b-tree write err: -5, ino 4
[  145.263644][ T7863] loop2: detected capacity change from 0 to 8
[  145.412665][  T973] usb 2-1: Using ep0 maxpacket: 32
[  145.423401][  T973] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  145.429272][  T973] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  145.434732][  T973] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0
[  145.438370][  T973] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 26
[  145.456366][  T973] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  145.459951][  T973] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  145.463443][  T973] usb 2-1: SerialNumber: syz
[  145.671406][ T7871] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun!
[  145.700858][  T973] usb 2-1: USB disconnect, device number 12
[  146.735235][  T973] usb 3-1: new full-speed USB device number 7 using dummy_hcd
[  146.907488][  T973] usb 3-1: config 8 has an invalid interface number: 95 but max is 0
[  146.910917][  T973] usb 3-1: config 8 has no interface number 0
[  146.916799][  T973] usb 3-1: New USB device found, idVendor=05ac, idProduct=024a, bcdDevice=29.78
[  146.920339][  T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  146.923403][  T973] usb 3-1: Product: syz
[  146.925367][  T973] usb 3-1: Manufacturer: syz
[  146.927890][  T973] usb 3-1: SerialNumber: syz
[  147.185124][  T973] input: bcm5974 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:8.95/input/input6
[  147.204250][ T5282] bcm5974 3-1:8.95: could not read from device
[  147.244816][ T5282] bcm5974 3-1:8.95: could not read from device
[  147.248036][  T973] usb 3-1: USB disconnect, device number 7
[  147.386619][ T7911] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  147.392803][ T7911] macsec1: entered promiscuous mode
[  147.395137][ T7911] macsec1: entered allmulticast mode
[  147.397734][ T7911] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  147.417045][ T7911] macsec2: entered promiscuous mode
[  147.420608][ T7911] macsec2: entered allmulticast mode
[  147.480204][ T7913] loop1: detected capacity change from 0 to 128
[  147.483676][ T7913] ext2: Unknown parameter 'dont_appraise'
[  147.827866][ T7916] loop2: detected capacity change from 0 to 1024
[  148.070058][ T6649] hfsplus: b-tree write err: -5, ino 4
[  149.442945][ T7935] loop2: detected capacity change from 0 to 4096
[  149.454853][ T7935] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  149.473976][ T7935] ntfs3(loop2): ino=4, mi_enum_attr
[  149.476605][ T7935] ntfs3(loop2): ino=4, Correct links count -> 2.
[  149.479328][ T7935] ntfs3(loop2): Failed to load $AttrDef (-22)
[  149.844678][ T7952] netlink: 36 bytes leftover after parsing attributes in process `syz.1.765'.
[  149.863671][ T7952] netlink: 24 bytes leftover after parsing attributes in process `syz.1.765'.
[  149.873899][ T7952] netlink: 24 bytes leftover after parsing attributes in process `syz.1.765'.
[  150.154447][ T7968] mmap: syz.0.772 (7968) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  150.205049][  T973] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  150.354830][  T973] usb 3-1: Using ep0 maxpacket: 8
[  150.361665][  T973] usb 3-1: config 6 has an invalid interface number: 51 but max is 1
[  150.367006][  T973] usb 3-1: config 6 has no interface number 1
[  150.369768][  T973] usb 3-1: config 6 interface 0 has no altsetting 0
[  150.372501][  T973] usb 3-1: config 6 interface 51 has no altsetting 0
[  150.388266][  T973] usb 3-1: New USB device found, idVendor=04e2, idProduct=1420, bcdDevice=30.ad
[  150.396049][  T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  150.400092][  T973] usb 3-1: Product: syz
[  150.401856][  T973] usb 3-1: Manufacturer: syz
[  150.403223][  T973] usb 3-1: SerialNumber: syz
[  150.617688][ T7991] overlayfs: failed to clone upperpath
[  150.663033][  T973] xr_serial 3-1:6.51: xr_serial converter detected
[  150.673005][  T973] xr_serial ttyUSB0: Failed to set reg 0x60: -71
[  150.677961][  T973] xr_serial ttyUSB0: probe with driver xr_serial failed with error -71
[  150.691117][  T973] usb 3-1: USB disconnect, device number 8
[  150.710153][  T973] xr_serial 3-1:6.0: device disconnected
[  150.781926][ T8004] capability: warning: `syz.0.790' uses 32-bit capabilities (legacy support in use)
[  150.822647][ T8008] netlink: 'syz.0.792': attribute type 63 has an invalid length.
[  150.933281][ T8018] netlink: 40 bytes leftover after parsing attributes in process `syz.1.797'.
[  151.297351][ T8055] netlink: 'syz.1.815': attribute type 27 has an invalid length.
[  151.985861][ T8067] loop2: detected capacity change from 0 to 32768
[  152.009840][ T8067] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  152.038877][ T8067] XFS (loop2): Ending clean mount
[  152.051662][ T8067] XFS (loop2): Quotacheck needed: Please wait.
[  152.091630][ T8067] XFS (loop2): Quotacheck: Done.
[  152.109491][ T8067] XFS (loop2): User initiated shutdown received.
[  152.112667][ T8067] XFS (loop2): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[  152.119019][ T8067] XFS (loop2): Please unmount the filesystem and rectify the problem(s)
[  152.159686][ T5864] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  152.645340][ T8095] netlink: 4 bytes leftover after parsing attributes in process `syz.2.829'.
[  152.858755][ T8105] overlayfs: missing 'lowerdir'
[  153.212573][ T8129] netlink: 12 bytes leftover after parsing attributes in process `syz.1.844'.
[  153.276983][ T8130] loop2: detected capacity change from 0 to 4096
[  153.281891][ T8130] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  153.308381][ T8130] ntfs3(loop2): Inode r=19 is not in use!
[  153.311688][ T8130] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  153.323292][ T8130] ntfs3(loop2): Failed to initialize $Extend/$Reparse.
[  153.924787][ T5897] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  154.075170][ T5897] usb 3-1: Using ep0 maxpacket: 8
[  154.082263][ T5897] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  154.103851][ T5897] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c
[  154.110778][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  154.113625][ T5897] usb 3-1: Product: syz
[  154.120768][ T5897] usb 3-1: Manufacturer: syz
[  154.122681][ T5897] usb 3-1: SerialNumber: syz
[  154.138985][ T5897] usb 3-1: config 0 descriptor??
[  154.142379][ T5897] cdc_ether 3-1:0.0: skipping garbage
[  154.144227][ T5897] usb 3-1: bad CDC descriptors
[  154.149999][ T5897] usb 3-1: unsupported MDLM descriptors
[  154.159009][ T5897] cdc_acm 3-1:0.0: skipping garbage
[  154.364116][ T5897] usb 3-1: USB disconnect, device number 9
[  154.508087][ T8189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.873'.
[  155.309656][ T8214] autofs: Unknown parameter 'fd0x0000000000000000'
[  156.045052][   T51] IPVS: starting estimator thread 0...
[  156.149705][ T8230] IPVS: using max 64 ests per chain, 153600 per kthread
[  156.367847][ T8232] netlink: 'syz.2.891': attribute type 4 has an invalid length.
[  156.705505][ T5897] usb 3-1: new full-speed USB device number 10 using dummy_hcd
[  156.858594][ T5897] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  156.861990][ T5897] usb 3-1: config 0 has no interface number 0
[  156.867777][ T5897] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  156.871468][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  156.874394][ T5897] usb 3-1: Product: syz
[  156.878850][ T5897] usb 3-1: Manufacturer: syz
[  156.880881][ T5897] usb 3-1: SerialNumber: syz
[  156.890293][ T5897] usb 3-1: config 0 descriptor??
[  157.501170][ T5897] asix 3-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[  157.507858][ T5897] asix 3-1:0.251: probe with driver asix failed with error -524
[  157.709947][ T5897] usb 3-1: USB disconnect, device number 10
[  158.160277][ T8285] netlink: 'syz.0.914': attribute type 83 has an invalid length.
[  158.798873][ T8301] fuse: Bad value for 'fd'
[  160.077766][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz.0.933'.
[  160.251871][ T8344] loop2: detected capacity change from 0 to 4096
[  160.265319][ T8344] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[  160.296178][ T8344] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  160.329554][ T8344] ntfs3(loop2): ino=1f, "file2" failed to open parent directory r=5 to update
[  160.358398][ T6641] ntfs3(loop2): ino=1f, failed to open parent directory r=5 to update
[  160.772908][ T8359] loop2: detected capacity change from 0 to 32768
[  160.871373][ T8359] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nocow
[  160.871398][ T8359]   allowing incompatible features above 0.0: (unknown version)
[  160.871407][ T8359]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  160.891007][ T8359] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  160.894561][ T8359] bcachefs (loop2): initializing new filesystem
[  160.908423][ T8359] bcachefs (loop2): going read-write
[  160.917702][ T8359] bcachefs (loop2): marking superblocks
[  160.949772][ T8359] bcachefs (loop2): initializing freespace
[  160.961391][ T8359] bcachefs (loop2): done initializing freespace
[  160.971504][ T8359] bcachefs (loop2): reading snapshots table
[  160.974035][ T8359] bcachefs (loop2): reading snapshots done
[  161.009641][ T8359] bcachefs (loop2):  loop2: Superblock write was silently dropped! (seq 0 expected 42)
[  161.018718][ T8359] bcachefs (loop2): done starting filesystem
[  161.063012][   T33] audit: type=1800 audit(1758170684.762:16): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.946" name="file1" dev="loop2" ino=4098 res=0 errno=0
[  161.077158][   T33] audit: type=1800 audit(1758170684.782:17): pid=8359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.946" name="file1" dev="loop2" ino=4098 res=0 errno=0
[  161.496724][ T5864] bcachefs (loop2): shutting down
[  161.506512][ T5864] bcachefs (loop2): going read-only
[  161.513762][ T5864] bcachefs (loop2): finished waiting for writes to stop
[  161.536637][ T5864] bcachefs (loop2): flushing journal and stopping allocators, journal seq 125
[  161.863906][ T5864] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 125
[  161.873025][ T5864] bcachefs (loop2): clean shutdown complete, journal seq 126
[  161.877635][ T5864] bcachefs (loop2): marking filesystem clean
[  161.907432][ T5864] bcachefs (loop2): shutdown complete
[  164.325842][ T8459] netlink: 104 bytes leftover after parsing attributes in process `syz.0.987'.
[  164.409891][ T8463] netlink: 28 bytes leftover after parsing attributes in process `syz.0.989'.
[  164.587677][   T33] audit: type=1326 audit(1758170688.292:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.0.996" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cb8eba9 code=0x7ffc0000
[  164.599272][   T33] audit: type=1326 audit(1758170688.292:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.0.996" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c6cb8eba9 code=0x7ffc0000
[  164.610488][   T33] audit: type=1326 audit(1758170688.292:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.0.996" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cb8eba9 code=0x7ffc0000
[  164.622345][   T33] audit: type=1326 audit(1758170688.292:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.0.996" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f6c6cb8eba9 code=0x7ffc0000
[  164.633527][   T33] audit: type=1326 audit(1758170688.312:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.0.996" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cb8eba9 code=0x7ffc0000
[  164.642713][   T33] audit: type=1326 audit(1758170688.312:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.0.996" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cb8eba9 code=0x7ffc0000
[  164.653407][   T33] audit: type=1326 audit(1758170688.322:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.0.996" exe="/syz-executor" sig=0 arch=c000003e syscall=305 compat=0 ip=0x7f6c6cb8eba9 code=0x7ffc0000
[  164.673129][   T33] audit: type=1326 audit(1758170688.322:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8480 comm="syz.0.996" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cb8eba9 code=0x7ffc0000
[  164.828378][ T8492] netlink: 'syz.0.1000': attribute type 3 has an invalid length.
[  164.831832][ T8492] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1000'.
[  165.185043][  T973] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  165.276442][ T8515] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0)
[  165.280136][ T8515] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647
[  165.345388][  T973] usb 3-1: Using ep0 maxpacket: 8
[  165.358956][  T973] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb
[  165.362658][  T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  165.384841][  T973] usb 3-1: Product: syz
[  165.386628][  T973] usb 3-1: Manufacturer: syz
[  165.388922][  T973] usb 3-1: SerialNumber: syz
[  165.878615][  T973] mxuport 3-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  165.882750][  T973] mxuport 3-1:254.0: mxuport_send_ctrl_data_urb - usb_control_msg failed (-71)
[  165.886926][  T973] mxuport 3-1:254.0: probe with driver mxuport failed with error -71
[  165.905132][  T973] usb 3-1: USB disconnect, device number 11
[  167.140810][ T8539] loop2: detected capacity change from 0 to 131072
[  167.147876][ T8539] F2FS-fs (loop2): Invalid log sectorsize (67108873)
[  167.151023][ T8539] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock
[  167.158970][ T8539] F2FS-fs (loop2): invalid crc value
[  167.213263][ T8539] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  167.224015][ T8539] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0
[  167.228701][ T8539] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  167.726548][ T8567] veth1_macvtap: left promiscuous mode
[  167.728746][ T8567] macsec0: entered allmulticast mode
[  167.765841][ T8570] veth1_macvtap: entered promiscuous mode
[  167.775123][ T8570] veth1_macvtap: entered allmulticast mode
[  167.779290][ T8570] macsec0: left allmulticast mode
[  167.781300][ T8570] veth1_macvtap: left allmulticast mode
[  169.036618][ T8618] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1051'.
[  170.124805][ T8659] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1071'.
[  170.128820][ T8659] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1071'.
[  170.255777][ T8655] loop2: detected capacity change from 0 to 40427
[  170.263168][ T8655] F2FS-fs (loop2): invalid crc value
[  170.320098][ T8655] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  170.324875][ T8655] F2FS-fs (loop2): Start checkpoint disabled!
[  170.343208][ T8655] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6
[  170.383021][ T8655] syz.2.1069: attempt to access beyond end of device
[  170.383021][ T8655] loop2: rw=10241, sector=45096, nr_sectors = 8 limit=40427
[  170.670024][ T6621] kworker/u10:6: attempt to access beyond end of device
[  170.670024][ T6621] loop2: rw=1, sector=45096, nr_sectors = 8 limit=40427
[  170.685809][ T6621] kworker/u10:6: attempt to access beyond end of device
[  170.685809][ T6621] loop2: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  170.692735][ T6621] CPU: 1 UID: 0 PID: 6621 Comm: kworker/u10:6 Not tainted syzkaller #0 PREEMPT(full) 
[  170.692749][ T6621] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  170.692755][ T6621] Workqueue: writeback wb_workfn (flush-7:2)
[  170.692775][ T6621] Call Trace:
[  170.692779][ T6621]  <TASK>
[  170.692785][ T6621]  dump_stack_lvl+0x189/0x250
[  170.692799][ T6621]  ? __pfx_dump_stack_lvl+0x10/0x10
[  170.692808][ T6621]  ? __pfx_queue_work_on+0x10/0x10
[  170.692817][ T6621]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  170.692832][ T6621]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  170.692849][ T6621]  f2fs_handle_critical_error+0x37c/0x540
[  170.692867][ T6621]  f2fs_write_end_io+0x886/0xb60
[  170.692886][ T6621]  __submit_merged_bio+0x27a/0x6a0
[  170.692901][ T6621]  __submit_merged_write_cond+0x255/0x530
[  170.692916][ T6621]  f2fs_write_data_pages+0x261d/0x3000
[  170.692941][ T6621]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  170.692955][ T6621]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  170.692981][ T6621]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  170.692999][ T6621]  ? trace_f2fs_writepages+0x7f/0x200
[  170.693011][ T6621]  ? f2fs_write_node_pages+0x478/0x6e0
[  170.693033][ T6621]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  170.693041][ T6621]  do_writepages+0x32e/0x550
[  170.693056][ T6621]  ? reacquire_held_locks+0x127/0x1d0
[  170.693064][ T6621]  ? writeback_sb_inodes+0x384/0x1010
[  170.693085][ T6621]  __writeback_single_inode+0x145/0xff0
[  170.693095][ T6621]  ? do_raw_spin_unlock+0x4d/0x240
[  170.693107][ T6621]  writeback_sb_inodes+0x6c7/0x1010
[  170.693117][ T6621]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.693139][ T6621]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  170.693170][ T6621]  ? rcu_is_watching+0x15/0xb0
[  170.693185][ T6621]  wb_writeback+0x43b/0xaf0
[  170.693199][ T6621]  ? queue_io+0x341/0x590
[  170.693210][ T6621]  ? __pfx_wb_writeback+0x10/0x10
[  170.693224][ T6621]  ? _raw_spin_unlock_irq+0x23/0x50
[  170.693238][ T6621]  wb_workfn+0x409/0xef0
[  170.693254][ T6621]  ? __pfx_wb_workfn+0x10/0x10
[  170.693265][ T6621]  ? __lock_acquire+0xab9/0xd20
[  170.693284][ T6621]  ? process_scheduled_works+0x9ef/0x17b0
[  170.693295][ T6621]  ? _raw_spin_unlock_irq+0x23/0x50
[  170.693305][ T6621]  ? process_scheduled_works+0x9ef/0x17b0
[  170.693311][ T6621]  ? process_scheduled_works+0x9ef/0x17b0
[  170.693319][ T6621]  process_scheduled_works+0xae1/0x17b0
[  170.693366][ T6621]  ? __pfx_process_scheduled_works+0x10/0x10
[  170.693384][ T6621]  worker_thread+0x8a0/0xda0
[  170.693407][ T6621]  kthread+0x711/0x8a0
[  170.693419][ T6621]  ? __pfx_worker_thread+0x10/0x10
[  170.693426][ T6621]  ? __pfx_kthread+0x10/0x10
[  170.693436][ T6621]  ? _raw_spin_unlock_irq+0x23/0x50
[  170.693447][ T6621]  ? lockdep_hardirqs_on+0x9c/0x150
[  170.693453][ T6621]  ? __pfx_kthread+0x10/0x10
[  170.693463][ T6621]  ret_from_fork+0x439/0x7d0
[  170.693474][ T6621]  ? __pfx_ret_from_fork+0x10/0x10
[  170.693485][ T6621]  ? __switch_to_asm+0x39/0x70
[  170.693495][ T6621]  ? __switch_to_asm+0x33/0x70
[  170.693503][ T6621]  ? __pfx_kthread+0x10/0x10
[  170.693513][ T6621]  ret_from_fork_asm+0x1a/0x30
[  170.693531][ T6621]  </TASK>
[  170.693535][ T6621] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[  170.852194][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1080'.
[  171.033521][ T8692] netlink: 'syz.1.1085': attribute type 4 has an invalid length.
[  171.698391][ T8709] netlink: 'syz.0.1092': attribute type 3 has an invalid length.
[  171.701515][ T8709] netlink: 'syz.0.1092': attribute type 27 has an invalid length.
[  172.056390][ T8724] loop2: detected capacity change from 0 to 256
[  175.725058][ T8824] netlink: 'syz.2.1144': attribute type 21 has an invalid length.
[  175.753604][ T8824] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1144'.
[  175.874489][ T8829] batadv2: entered promiscuous mode
[  175.881754][ T8829] 8021q: adding VLAN 0 to HW filter on device batadv2
[  175.941742][ T8834] veth3: entered promiscuous mode
[  175.990155][ T8836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1150'.
[  176.434891][ T1273] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  176.587265][ T1273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  176.592062][ T1273] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  176.599094][ T1273] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00
[  176.605502][ T1273] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.611678][ T1273] usb 3-1: config 0 descriptor??
[  176.621692][ T8848] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  176.757995][ T8858] IPv6: NLM_F_REPLACE set, but no existing node found!
[  176.883044][ T8866] netlink: 160 bytes leftover after parsing attributes in process `syz.0.1165'.
[  176.887202][ T8866] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1165'.
[  177.066896][ T1273] corsair-psu 0003:1B1C:1C0C.0006: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0c] on usb-dummy_hcd.2-1/input0
[  177.139460][ T1273] corsair-psu 0003:1B1C:1C0C.0006: unable to initialize device (-38)
[  177.171906][ T1273] corsair-psu 0003:1B1C:1C0C.0006: probe with driver corsair-psu failed with error -38
[  177.256374][ T1273] usb 3-1: USB disconnect, device number 12
[  177.943342][ T8900] loop2: detected capacity change from 0 to 2048
[  178.388272][ T8900] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  178.434364][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  178.491025][   T54] Bluetooth: hci1: unexpected event for opcode 0x080d
[  178.507529][ T8907] loop2: detected capacity change from 0 to 2048
[  178.520362][ T8907] UDF-fs: warning (device loop2): udf_verify_domain_identifier: Not OSTA UDF compliant logical volume descriptor.
[  179.114799][ T5897] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  179.268364][ T5897] usb 3-1: config 1 has an invalid descriptor of length 68, skipping remainder of the config
[  179.272747][ T5897] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2
[  179.278368][ T5897] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  179.286793][ T5897] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  179.290801][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.294176][ T5897] usb 3-1: Product: syz
[  179.296297][ T5897] usb 3-1: Manufacturer: syz
[  179.298406][ T5897] usb 3-1: SerialNumber: syz
[  179.523351][ T5897] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[  179.533826][ T5897] cdc_ncm 3-1:1.0: bind() failure
[  179.544226][ T5897] usb 3-1: USB disconnect, device number 13
[  180.056409][ T8964] overlayfs: failed to clone lowerpath
[  181.074043][ T8999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  181.851797][ T9019] netlink: 'syz.0.1234': attribute type 16 has an invalid length.
[  181.855051][ T9019] netlink: 156 bytes leftover after parsing attributes in process `syz.0.1234'.
[  181.944863][   T24] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  182.098104][   T24] usb 3-1: unable to get BOS descriptor or descriptor too short
[  182.103976][   T24] usb 3-1: config 66 has an invalid descriptor of length 0, skipping remainder of the config
[  182.109622][   T24] usb 3-1: config 66 has 1 interface, different from the descriptor's value: 2
[  182.123769][   T24] usb 3-1: config 66 interface 0 altsetting 16 endpoint 0x7 has invalid wMaxPacketSize 0
[  182.129153][   T24] usb 3-1: config 66 interface 0 has no altsetting 0
[  182.137428][   T24] usb 3-1: New USB device found, idVendor=0471, idProduct=0602, bcdDevice=a4.95
[  182.141365][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.147127][   T24] usb 3-1: Product: syz
[  182.150164][   T24] usb 3-1: Manufacturer: syz
[  182.152719][   T24] usb 3-1: SerialNumber: syz
[  182.371482][   T24] ati_remote2 3-1:66.0: ati_remote2_probe(): need 2 interfaces, found 1
[  182.496093][   T54] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  182.499671][   T54] Bluetooth: hci1: Injecting HCI hardware error event
[  182.506075][   T54] Bluetooth: hci1: hardware error 0x00
[  182.707736][   T24] usb 3-1: USB disconnect, device number 14
[  182.707981][ T9045] 9pnet_fd: Insufficient options for proto=fd
[  184.003427][ T9084] loop2: detected capacity change from 0 to 512
[  184.008654][ T9084] EXT4-fs: inline encryption not supported
[  184.021441][ T9084] EXT4-fs: Ignoring removed i_version option
[  184.047588][ T9084] EXT4-fs (loop2): DAX unsupported by block device.
[  184.575186][   T54] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  184.778835][ T9096] netlink: 'syz.0.1270': attribute type 10 has an invalid length.
[  184.790236][ T9096] bond0: (slave wlan1): Enslaving as an active interface with an up link
[  185.943230][ T9127] loop2: detected capacity change from 0 to 32768
[  186.058280][ T9127] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  186.058305][ T9127]   allowing incompatible features above 0.0: (unknown version)
[  186.058312][ T9127]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  186.078629][ T9127] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  186.081917][ T9127] bcachefs (loop2): initializing new filesystem
[  186.092349][ T9127] bcachefs (loop2): going read-write
[  186.110237][ T9127] bcachefs (loop2): marking superblocks
[  186.119943][ T9127] bcachefs (loop2): initializing freespace
[  186.125284][ T9127] bcachefs (loop2): done initializing freespace
[  186.129768][ T9127] bcachefs (loop2): reading snapshots table
[  186.132286][ T9127] bcachefs (loop2): reading snapshots done
[  186.176014][ T9127] bcachefs (loop2): done starting filesystem
[  186.389198][ T5864] bcachefs (loop2): shutting down
[  186.391267][ T5864] bcachefs (loop2): going read-only
[  186.393414][ T5864] bcachefs (loop2): finished waiting for writes to stop
[  186.407443][ T5864] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  186.467140][ T5864] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[  186.476592][ T5864] bcachefs (loop2): clean shutdown complete, journal seq 5
[  186.480590][ T5864] bcachefs (loop2): marking filesystem clean
[  186.514414][ T5864] bcachefs (loop2): shutdown complete
[  186.712093][ T9159] trusted_key: syz.1.1293 sent an empty control message without MSG_MORE.
[  186.854960][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  186.854978][   T33] audit: type=1326 audit(1758170710.542:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.1.1295" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9c58eba9 code=0x7ffc0000
[  186.914928][   T33] audit: type=1326 audit(1758170710.542:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.1.1295" exe="/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7fbe9c58eba9 code=0x7ffc0000
[  186.932268][   T33] audit: type=1326 audit(1758170710.542:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.1.1295" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9c58eba9 code=0x7ffc0000
[  186.941966][   T33] audit: type=1326 audit(1758170710.542:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.1.1295" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9c58eba9 code=0x7ffc0000
[  187.317626][   T33] audit: type=1326 audit(1758170710.542:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.1.1295" exe="/syz-executor" sig=0 arch=c000003e syscall=198 compat=0 ip=0x7fbe9c58eba9 code=0x7ffc0000
[  187.326534][   T33] audit: type=1326 audit(1758170710.542:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.1.1295" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9c58eba9 code=0x7ffc0000
[  187.335429][   T33] audit: type=1326 audit(1758170710.542:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.1.1295" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9c58eba9 code=0x7ffc0000
[  187.463537][ T9175] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1299'.
[  187.468846][ T9175] IPv6: NLM_F_CREATE should be specified when creating new route
[  188.111090][ T9205] Invalid ELF header magic: != ELF
[  188.178683][ T9211] loop2: detected capacity change from 0 to 128
[  188.192637][ T9211] syz.2.1315: attempt to access beyond end of device
[  188.192637][ T9211] loop2: rw=2049, sector=145, nr_sectors = 3 limit=128
[  188.256270][ T9215] syz.2.1315: attempt to access beyond end of device
[  188.256270][ T9215] loop2: rw=2049, sector=153, nr_sectors = 8 limit=128
[  188.260262][ T9215] syz.2.1315: attempt to access beyond end of device
[  188.260262][ T9215] loop2: rw=2049, sector=169, nr_sectors = 8 limit=128
[  188.271257][ T9215] syz.2.1315: attempt to access beyond end of device
[  188.271257][ T9215] loop2: rw=2049, sector=185, nr_sectors = 8 limit=128
[  188.276674][ T9215] syz.2.1315: attempt to access beyond end of device
[  188.276674][ T9215] loop2: rw=2049, sector=201, nr_sectors = 8 limit=128
[  188.281083][ T9215] syz.2.1315: attempt to access beyond end of device
[  188.281083][ T9215] loop2: rw=2049, sector=217, nr_sectors = 8 limit=128
[  188.288350][ T9215] syz.2.1315: attempt to access beyond end of device
[  188.288350][ T9215] loop2: rw=2049, sector=233, nr_sectors = 8 limit=128
[  188.293765][ T9215] syz.2.1315: attempt to access beyond end of device
[  188.293765][ T9215] loop2: rw=2049, sector=249, nr_sectors = 8 limit=128
[  188.299418][ T9215] syz.2.1315: attempt to access beyond end of device
[  188.299418][ T9215] loop2: rw=2049, sector=265, nr_sectors = 8 limit=128
[  188.304189][ T9215] syz.2.1315: attempt to access beyond end of device
[  188.304189][ T9215] loop2: rw=2049, sector=281, nr_sectors = 8 limit=128
[  188.354734][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1318'.
[  188.663467][ T9233] loop2: detected capacity change from 0 to 4096
[  188.668139][ T9233] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[  188.672427][ T9233] ntfs3(loop2): MFT: r=1, expect seq=1 instead of 0!
[  188.675700][ T9233] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  188.680329][ T9233] ntfs3(loop2): Failed to load $MFTMirr (-22).
[  188.789253][ T9247] netlink: 'syz.2.1331': attribute type 10 has an invalid length.
[  192.729097][ T9289] syz.2.1349 (9289): drop_caches: 2
[  192.875772][ T9327] overlayfs: failed to resolve './file1': -2
[  193.066170][ T9340] loop2: detected capacity change from 0 to 4096
[  193.155311][ T9340] ntfs3(loop2): ino=5, "/" mi_enum_attr
[  194.031670][ T9362] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1382'.
[  194.421298][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  194.423977][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  194.714341][ T9379] loop2: detected capacity change from 0 to 2048
[  194.749843][ T9382] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  194.926430][ T9389] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1392'.
[  194.930237][ T9389] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1392'.
[  194.934211][ T9389] netlink: 'syz.2.1392': attribute type 10 has an invalid length.
[  196.322234][ T9419] No control pipe specified
[  196.851362][ T9424] 9pnet_fd: p9_fd_create_unix (9424): problem connecting socket: ./file0: -5
[  197.582605][ T9474] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1425'.
[  197.698352][   T54] Bluetooth: hci0: unexpected event for opcode 0x1407
[  197.839954][ T9493] IPv6: addrconf: prefix option has invalid lifetime
[  199.139911][ T9511] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1442'.
[  199.160150][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  199.163294][    C0] vcan0: j1939_xtp_rx_dat: no rx connection found
[  199.166315][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  199.169313][    C0] vcan0: j1939_xtp_rx_dat: no rx connection found
[  199.172062][    C0] vcan0: j1939_xtp_rx_dat: no tx connection found
[  199.174949][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.178385][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.181530][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.184809][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.187736][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.191109][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.194384][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.197899][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.201143][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.204481][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.208017][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.211334][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.214465][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.218046][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.221913][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.225499][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.229218][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.232580][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.236025][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.239345][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.242580][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.246208][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.249372][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.252878][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.256122][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.259385][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.262581][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.266015][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.269183][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.272508][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.275988][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.279513][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.282811][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.286411][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.289614][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.292986][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.296293][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.299668][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.302793][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.306451][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.309576][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.312847][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.316141][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.319312][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.322428][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.325947][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.328575][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.331385][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.334020][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.337130][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.340263][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.342725][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.346085][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.349191][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.351775][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.354759][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.357470][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.360116][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.362567][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.365156][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.368866][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.371819][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.374226][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.377261][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.380235][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.382625][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.385216][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.387885][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.390250][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.392997][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.395896][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.399086][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.401741][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.404471][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.407050][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.409438][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.411564][ T9523] loop2: detected capacity change from 0 to 1024
[  199.411765][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.417340][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.420284][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.423300][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.426651][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.429370][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.431866][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.434836][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.437392][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.440063][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.442692][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.445115][ T9523] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  199.445609][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.453404][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.455981][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.458703][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.461335][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.463980][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.466660][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.469180][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.471900][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.474811][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.477751][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.480601][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.483892][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.486535][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.489458][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.492275][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.495008][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.497527][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.500302][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.502864][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.505613][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.508222][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.510881][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.513741][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.516672][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.519269][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.522336][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.525115][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.527710][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.529020][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  199.530344][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.537247][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.540357][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.542851][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.545335][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.547971][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.550355][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.553197][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.555865][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.558654][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.561280][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.563980][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.566353][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.568848][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.571385][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.573912][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.576486][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.579217][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.581718][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.584263][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.587359][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.589979][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.592695][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.595358][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.597789][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.600185][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.602650][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.605388][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.608303][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.610912][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.613455][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.616292][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.619092][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.621702][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.624181][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.626662][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.628997][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.631303][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.634271][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.636832][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.639326][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.641882][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.644272][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.646852][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.649293][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.651659][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.654210][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.656917][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.659351][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.662119][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.664420][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.666812][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.669286][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.671788][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.674228][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.676846][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.679412][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.681734][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.684666][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.687239][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.689658][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.692300][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.694796][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.697166][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.699718][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.702286][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.704851][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.707336][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.710089][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.712966][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.715655][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.718033][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.720674][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.723276][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.725797][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.728278][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.730645][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.733416][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.736530][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.739388][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.741841][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.744440][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.746960][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.749673][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.752285][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.755137][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.757883][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.760454][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.763091][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.765662][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.768237][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.770966][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.773334][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.776221][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.778923][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.781431][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.783748][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.786251][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.788921][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  199.791460][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found
[  199.793941][    C0] vcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found
[  200.049316][ T9542] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1456'.
[  200.685573][  T973] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  200.855835][  T973] usb 3-1: Using ep0 maxpacket: 8
[  200.861011][  T973] usb 3-1: config 3 has an invalid interface number: 45 but max is 0
[  200.864787][  T973] usb 3-1: config 3 contains an unexpected descriptor of type 0x1, skipping
[  200.868274][  T973] usb 3-1: config 3 has no interface number 0
[  200.870994][  T973] usb 3-1: config 3 interface 45 altsetting 2 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  200.876338][  T973] usb 3-1: config 3 interface 45 has no altsetting 0
[  200.882425][  T973] usb 3-1: New USB device found, idVendor=0582, idProduct=e6ca, bcdDevice=d3.0b
[  200.886133][  T973] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  200.889540][  T973] usb 3-1: Product: syz
[  200.891512][  T973] usb 3-1: Manufacturer: syz
[  200.893498][  T973] usb 3-1: SerialNumber: syz
[  201.129095][  T973] usb 3-1: Quirk or no altset; falling back to MIDI 1.0
[  201.168088][  T973] usb 3-1: USB disconnect, device number 15
[  201.239426][ T6295] udevd[6295]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:3.45/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  201.456769][ T9579] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1471'.
[  201.818516][ T9596] netlink: 'syz.2.1479': attribute type 3 has an invalid length.
[  202.124778][  T973] usb 3-1: new full-speed USB device number 16 using dummy_hcd
[  202.286756][  T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  202.291598][  T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  202.297185][  T973] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  202.302504][  T973] usb 3-1: New USB device found, idVendor=056a, idProduct=005d, bcdDevice= 0.00
[  202.307052][  T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  202.314022][  T973] usb 3-1: config 0 descriptor??
[  202.731592][  T973] wacom 0003:056A:005D.0007: unbalanced delimiter at end of report description
[  202.741890][  T973] wacom 0003:056A:005D.0007: parse failed
[  202.744314][  T973] wacom 0003:056A:005D.0007: probe with driver wacom failed with error -22
[  202.950076][  T973] usb 3-1: USB disconnect, device number 16
[  203.911678][ T9644] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_hsr, syncid = 0, id = 0
[  204.204728][   T10] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  204.284524][   T54] Bluetooth: hci2: ACL packet for unknown connection handle 200
[  204.624930][   T10] usb 3-1: Using ep0 maxpacket: 16
[  204.629450][   T10] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 25
[  204.635560][   T10] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  204.639288][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  204.642638][   T10] usb 3-1: Product: syz
[  204.644426][   T10] usb 3-1: Manufacturer: syz
[  204.648571][   T10] usb 3-1: SerialNumber: syz
[  204.660747][   T10] usb 3-1: config 0 descriptor??
[  204.665871][   T10] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  205.072685][   T10] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71
[  205.079910][   T10] usb 3-1: USB disconnect, device number 17
[  205.175250][ T9686] No source specified
[  205.199769][ T9686] overlayfs: failed to clone upperpath
[  206.382562][ T9708] loop2: detected capacity change from 0 to 32768
[  206.524988][ T9708] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  206.525005][ T9708]   allowing incompatible features above 0.0: (unknown version)
[  206.525010][ T9708]   features: 
[  206.538106][ T9708] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  206.541425][ T9708] bcachefs (loop2): initializing new filesystem
[  206.549993][ T9708] bcachefs (loop2): going read-write
[  206.582811][ T9708] bcachefs (loop2): marking superblocks
[  206.590820][ T9708] bcachefs (loop2): initializing freespace
[  206.598014][ T9708] bcachefs (loop2): done initializing freespace
[  206.602704][ T9708] bcachefs (loop2): reading snapshots table
[  206.605334][ T9708] bcachefs (loop2): reading snapshots done
[  206.645034][ T9708] bcachefs (loop2): done starting filesystem
[  206.732977][ T5864] bcachefs (loop2): shutting down
[  206.738569][ T5864] bcachefs (loop2): going read-only
[  206.742376][ T5864] bcachefs (loop2): finished waiting for writes to stop
[  206.746438][ T5864] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  206.787377][ T5864] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  206.799045][ T5864] bcachefs (loop2): clean shutdown complete, journal seq 4
[  206.802348][ T5864] bcachefs (loop2): marking filesystem clean
[  206.836357][ T5864] bcachefs (loop2): shutdown complete
[  207.396918][ T9774] netlink: 43 bytes leftover after parsing attributes in process `syz.1.1553'.
[  208.102301][ T9795] loop2: detected capacity change from 0 to 512
[  208.131248][ T9795] EXT4-fs (loop2): too many log groups per flexible block group
[  208.133864][ T9795] EXT4-fs (loop2): failed to initialize mballoc (-12)
[  208.138410][ T9795] EXT4-fs (loop2): mount failed
[  208.193230][ T9799] loop2: detected capacity change from 0 to 2048
[  208.208867][ T9799] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  208.260612][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  208.730637][ T9825] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  208.896823][ T9833] netlink: 'syz.1.1576': attribute type 1 has an invalid length.
[  208.900792][ T9833] netlink: 'syz.1.1576': attribute type 2 has an invalid length.
[  209.053139][ T9838] loop2: detected capacity change from 0 to 1024
[  209.152693][ T6621] hfsplus: b-tree write err: -5, ino 4
[  209.511478][ T9866] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1592'.
[  210.596491][ T9897] netlink: 'syz.2.1605': attribute type 9 has an invalid length.
[  210.604775][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'.
[  210.724114][   T33] audit: type=1800 audit(1758171247.417:34): pid=9903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1609" name="bus" dev="tmpfs" ino=2957 res=0 errno=0
[  210.804181][ T9887] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  210.838363][ T9887] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  211.043328][ T9887] xfrm1: left promiscuous mode
[  211.060170][ T9887] batadv2: left promiscuous mode
[  211.069912][ T9897] netlink: 'syz.2.1605': attribute type 9 has an invalid length.
[  211.070713][ T5888] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  211.072554][ T9897] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1605'.
[  211.084994][ T5888] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  211.092194][ T5888] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  211.103731][ T5888] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  211.120030][ T5888] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  211.149794][ T5888] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  211.159921][ T5888] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  211.171705][ T5888] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  211.183264][ T9913] 9pnet_fd: Insufficient options for proto=fd
[  211.525968][ T9938] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1625'.
[  211.681316][ T9950] loop2: detected capacity change from 0 to 1024
[  213.027401][ T9987] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1644'.
[  213.305314][ T9994] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  214.142974][T10021] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  214.880066][T10047] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1668'.
[  215.072769][T10063] gre1: entered promiscuous mode
[  215.074548][T10063] gre1: entered allmulticast mode
[  215.108791][T10065] loop2: detected capacity change from 0 to 512
[  215.124224][T10065] EXT4-fs: Ignoring removed mblk_io_submit option
[  215.132309][T10065] EXT4-fs: Ignoring removed mblk_io_submit option
[  215.139475][T10065] EXT4-fs (loop2): Test dummy encryption mode enabled
[  215.142198][T10065] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  215.200215][T10065] EXT4-fs (loop2): 1 truncate cleaned up
[  215.203780][T10065] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  215.207710][T10071] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1680'.
[  215.268350][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  215.766510][T10090] loop2: detected capacity change from 0 to 32768
[  216.335649][T10120] loop2: detected capacity change from 0 to 4096
[  216.375907][T10121] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  218.093349][   T54] Bluetooth: hci0: unexpected event for opcode 0x203d
[  218.767637][T10206] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold
[  218.770791][   T10] IPVS: starting estimator thread 0...
[  218.801797][T10204] loop2: detected capacity change from 0 to 32768
[  218.859412][T10207] IPVS: using max 61 ests per chain, 146400 per kthread
[  219.274067][T10239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1750'.
[  222.107680][   T54] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  222.113857][   T54] Bluetooth: hci0: Injecting HCI hardware error event
[  222.123952][ T5237] Bluetooth: hci0: hardware error 0x00
[  222.368479][T10314] loop2: detected capacity change from 0 to 32768
[  222.403134][T10314] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  222.476162][ T5864] ocfs2: Unmounting device (7,2) on (node local)
[  222.661726][T10333] loop2: detected capacity change from 0 to 256
[  222.699007][T10333] FAT-fs (loop2): Directory bread(block 64) failed
[  222.704489][T10333] FAT-fs (loop2): Directory bread(block 65) failed
[  222.708761][T10333] FAT-fs (loop2): Directory bread(block 66) failed
[  222.712006][T10333] FAT-fs (loop2): Directory bread(block 67) failed
[  222.716657][T10333] FAT-fs (loop2): Directory bread(block 68) failed
[  222.720210][T10333] FAT-fs (loop2): Directory bread(block 69) failed
[  222.723179][T10333] FAT-fs (loop2): Directory bread(block 70) failed
[  222.728498][T10333] FAT-fs (loop2): Directory bread(block 71) failed
[  222.731623][T10333] FAT-fs (loop2): Directory bread(block 72) failed
[  222.738792][T10333] FAT-fs (loop2): Directory bread(block 73) failed
[  222.918757][T10337] : entered promiscuous mode
[  224.175951][ T5237] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  224.575868][T10402] loop2: detected capacity change from 0 to 2048
[  224.623669][T10402] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  224.630555][T10402] ext4 filesystem being mounted at /475/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  224.686416][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  224.850210][T10412] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1828'.
[  224.963684][T10417] netlink: 'syz.2.1831': attribute type 1 has an invalid length.
[  224.992644][T10417] 8021q: adding VLAN 0 to HW filter on device bond1
[  225.000774][T10417] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1831'.
[  225.325891][T10417] bond1 (unregistering): Released all slaves
[  225.518047][   T33] audit: type=1326 audit(2000000007.600:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.1.1837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9c58eba9 code=0x7ffc0000
[  225.560548][   T33] audit: type=1326 audit(2000000007.600:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.1.1837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9c58eba9 code=0x7ffc0000
[  225.599451][   T33] audit: type=1326 audit(2000000007.630:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.1.1837" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fbe9c58eba9 code=0x7ffc0000
[  225.636779][   T33] audit: type=1326 audit(2000000007.630:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.1.1837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9c58eba9 code=0x7ffc0000
[  225.656582][   T33] audit: type=1326 audit(2000000007.630:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.1.1837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9c58eba9 code=0x7ffc0000
[  225.669744][   T33] audit: type=1326 audit(2000000007.640:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.1.1837" exe="/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fbe9c58eba9 code=0x7ffc0000
[  225.677631][   T33] audit: type=1326 audit(2000000007.700:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.1.1837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9c58eba9 code=0x7ffc0000
[  225.692115][   T33] audit: type=1326 audit(2000000007.700:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10429 comm="syz.1.1837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbe9c58eba9 code=0x7ffc0000
[  225.966903][T10454] syzkaller1: entered promiscuous mode
[  225.969184][T10454] syzkaller1: entered allmulticast mode
[  226.902887][T10467] loop2: detected capacity change from 0 to 4096
[  226.909165][T10467] ntfs3: Unknown parameter 'nohide_dot_files'
[  227.903547][T10484] netlink: 22 bytes leftover after parsing attributes in process `syz.1.1857'.
[  228.054695][T10476] loop2: detected capacity change from 0 to 32768
[  228.071610][T10476] (syz.2.1854,10476,1):ocfs2_check_set_options:1259 ERROR: Group quotas were requested, but this filesystem does not have the feature enabled.
[  228.082164][T10476] (syz.2.1854,10476,1):ocfs2_fill_super:1177 ERROR: status = -22
[  229.148161][T10527] trusted_key: encrypted_key: key trusted:syz not found
[  229.804160][ T5910] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[  229.954286][ T5910] usb 3-1: Using ep0 maxpacket: 8
[  229.959763][ T5910] usb 3-1: config 11 has an invalid interface number: 95 but max is 0
[  229.963391][ T5910] usb 3-1: config 11 has no interface number 0
[  229.966263][ T5910] usb 3-1: config 11 interface 95 altsetting 64 endpoint 0x82 has invalid wMaxPacketSize 0
[  229.970367][ T5910] usb 3-1: config 11 interface 95 has no altsetting 0
[  229.976274][ T5910] usb 3-1: New USB device found, idVendor=10f0, idProduct=2002, bcdDevice=dc.4d
[  229.980056][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  229.983368][ T5910] usb 3-1: Product: syz
[  229.985284][ T5910] usb 3-1: Manufacturer: syz
[  229.987572][ T5910] usb 3-1: SerialNumber: syz
[  230.221309][ T5910] usbtouchscreen 3-1:11.95: probe with driver usbtouchscreen failed with error -8
[  230.233809][ T5910] usb 3-1: USB disconnect, device number 18
[  231.154620][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1891'.
[  231.166965][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1891'.
[  232.507606][T10612] loop2: detected capacity change from 0 to 32768
[  232.857813][T10612] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  232.900621][T10612] XFS (loop2): Ending clean mount
[  232.907858][T10612] XFS (loop2): Quotacheck needed: Please wait.
[  232.968616][T10612] XFS (loop2): Quotacheck: Done.
[  233.038966][ T5864] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  234.451304][T10702] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1946'.
[  234.830559][T10721] netlink: 'syz.2.1950': attribute type 2 has an invalid length.
[  235.518904][T10739] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1961'.
[  235.522370][T10739] netlink: 'syz.2.1961': attribute type 7 has an invalid length.
[  235.526365][T10739] netlink: 'syz.2.1961': attribute type 8 has an invalid length.
[  235.528985][T10739] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1961'.
[  235.731530][T10753] openvswitch: netlink: VXLAN extension message has 4 unknown bytes.
[  235.881308][T10760] loop2: detected capacity change from 0 to 64
[  236.874444][T10758] Trying to free block not in datazone
[  238.894040][T10836] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  238.896617][T10836] IPv6: NLM_F_CREATE should be set when creating new route
[  238.899383][T10836] IPv6: NLM_F_CREATE should be set when creating new route
[  243.936748][T10927] Invalid ELF header magic: != ELF
[  244.049220][T10930] IPVS: ovf: UDP 224.0.0.2:0 - no destination available
[  244.205169][T10942] loop2: detected capacity change from 0 to 2048
[  244.212797][T10942] UDF-fs: warning (device loop2): udf_load_vrs: No anchor found
[  244.223659][T10942] UDF-fs: Scanning with blocksize 512 failed
[  244.249341][T10942] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  244.319344][   T33] audit: type=1800 audit(2000000017.403:43): pid=10942 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2049" name="file2" dev="loop2" ino=839 res=0 errno=0
[  245.083211][T10955] virtio-fs: tag </dev/md0> not found
[  245.588060][T10963] loop2: detected capacity change from 0 to 32768
[  245.596373][T10963] bcachefs (/dev/loop2): error validating superblock: Invalid superblock section replicas_v0: invalid device 1 in entry user: 1/255 [0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 1 1 1 1 1 1 1 1 1 1 1 1 1 1 1 2 2 2 2 2 2 2 3 3 4 5 5 5 5 5 5 6 6 6 6 8 8 10 11 32 33 83 108]
[  245.596373][T10963] replicas_v0 (size 24):
[  245.596373][T10963] btree: 1 [0] journal: 1 [0] user: 255 [0 0 0 0 0 0 0 0 108 1 0 0 6 0 0 0 0 0 0 0 0 0 0 0 10 0 0 0 0 0 0 0 1 0 1 0 5 0 0 0 8 0 0 0 0 0 0 0 1 0 2 0 5 0 0 0 2 0 0 0 0 0 0 0 1 0 0 0 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 1 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 2 5 0 0 0 0 0 0 0 0 0 0 0 1 0 0 3 5 0 0 0 0 0 0 0 0 0 0 0 2 0 0 0 6 0 0 0 0 11 0 0 0 0 0 0 3 1 1 0 0 0 0 0 2 
[  245.596473][T10963] bcachefs: bch2_fs_get_tree() error: invalid_replicas_entry
[  246.039634][T10999] loop2: detected capacity change from 0 to 1024
[  246.154838][T11007] netlink: 'syz.2.2078': attribute type 1 has an invalid length.
[  246.165341][T11007] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2078'.
[  246.595896][T11011] loop2: detected capacity change from 0 to 32768
[  246.730431][T11011] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  246.750215][T11011] XFS (loop2): Ending clean mount
[  247.131416][ T5864] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  248.741705][T11086] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2107'.
[  248.966598][T11093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2112'.
[  249.894323][T11120] dlm: non-version read from control device 36
[  249.990347][T11129] openvswitch: netlink: EtherType 0 is less than min 600
[  250.175226][T11149] loop2: detected capacity change from 0 to 8
[  250.186922][T11149] SQUASHFS error: Failed to read block 0x636: -5
[  250.189758][T11149] SQUASHFS error: Unable to read metadata cache entry [634]
[  250.207428][T11149] SQUASHFS error: Unable to read metadata cache entry [634]
[  250.210398][T11149] SQUASHFS error: Unable to read directory block [629:0]
[  250.317122][   T33] audit: type=1326 audit(2000000023.403:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11158 comm="syz.0.2143" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cb8eba9 code=0x0
[  251.899211][T11196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2159'.
[  252.057483][T11203] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2162'.
[  252.062231][T11203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2162'.
[  252.160143][T11211] netlink: 'syz.2.2165': attribute type 1 has an invalid length.
[  252.482256][T11215] loop2: detected capacity change from 0 to 32768
[  252.494856][T11215] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2167 (11215)
[  252.525212][T11215] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  252.529505][T11215] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  252.587602][T11215] BTRFS info (device loop2): enabling ssd optimizations
[  252.589987][T11215] BTRFS info (device loop2): turning on sync discard
[  252.592598][T11215] BTRFS info (device loop2): enabling free space tree
[  252.616949][ T5864] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  253.222201][T11273] loop2: detected capacity change from 0 to 512
[  253.323271][T11273] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  253.480373][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  254.903231][T11332] loop2: detected capacity change from 0 to 2048
[  254.917197][T11332] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=26504, location=26504
[  254.955517][T11332] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  255.200795][T11338] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2215'.
[  255.398805][T11350] Invalid ELF header magic: != ELF
[  255.903139][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[  255.905806][ T1365] ieee802154 phy1 wpan1: encryption failed: -22
[  256.755939][ T5897] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  256.925780][ T5897] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice=da.8e
[  256.929094][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.938531][ T5897] usb 3-1: Product: syz
[  256.941121][ T5897] usb 3-1: Manufacturer: syz
[  256.952597][ T5897] usb 3-1: SerialNumber: syz
[  256.964707][ T5897] usb 3-1: config 0 descriptor??
[  256.970687][ T5897] hub 3-1:0.0: bad descriptor, ignoring hub
[  256.980000][ T5897] hub 3-1:0.0: probe with driver hub failed with error -5
[  256.987217][ T5897] usbsevseg 3-1:0.0: USB 7 Segment device now attached
[  257.051100][T11442] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  257.284399][  T973] usb 3-1: USB disconnect, device number 19
[  257.288520][  T973] usbsevseg 3-1:0.0: USB 7 Segment now disconnected
[  257.929877][T11471] overlayfs: failed to clone upperpath
[  258.182840][T11477] loop2: detected capacity change from 0 to 32768
[  258.192514][   T33] audit: type=1326 audit(2000000031.144:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11480 comm="syz.0.2280" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6c6cb8eba9 code=0x0
[  258.209714][ T5237] Bluetooth: hci2: unexpected event for opcode 0x0000
[  258.291759][T11477] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  258.291787][T11477]   allowing incompatible features above 0.0: (unknown version)
[  258.291797][T11477]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  258.310142][T11477] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  258.313595][T11477] bcachefs (loop2): initializing new filesystem
[  258.326123][T11477] bcachefs (loop2): going read-write
[  258.334227][T11477] bcachefs (loop2): marking superblocks
[  258.342740][T11477] bcachefs (loop2): initializing freespace
[  258.348126][T11477] bcachefs (loop2): done initializing freespace
[  258.352973][T11477] bcachefs (loop2): reading snapshots table
[  258.355480][T11477] bcachefs (loop2): reading snapshots done
[  258.405208][T11477] bcachefs (loop2): done starting filesystem
[  258.704665][ T5864] bcachefs (loop2): shutting down
[  258.707471][ T5864] bcachefs (loop2): going read-only
[  258.709269][ T5864] bcachefs (loop2): finished waiting for writes to stop
[  258.714395][ T5864] bcachefs (loop2): flushing journal and stopping allocators, journal seq 3
[  258.749360][ T5864] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 4
[  258.753273][ T5864] bcachefs (loop2): clean shutdown complete, journal seq 5
[  258.756071][ T5864] bcachefs (loop2): marking filesystem clean
[  258.773286][ T5864] bcachefs (loop2): shutdown complete
[  259.054108][T11520] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2294'.
[  259.065820][T11520] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  259.069699][T11520] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  259.785497][T11523] loop2: detected capacity change from 0 to 1024
[  259.841071][ T6646] hfsplus: b-tree write err: -5, ino 4
[  260.475047][T11535] loop2: detected capacity change from 0 to 32768
[  260.545100][T11535] jfs_mount: Failed to read FILESYSTEM_I
[  260.555567][T11535] Mount JFS Failure: -5
[  260.560261][T11535] jfs_mount failed w/return code = -5
[  261.997193][T11591] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  262.008501][T11591] CIFS mount error: No usable UNC path provided in device string!
[  262.008501][T11591] 
[  262.014455][T11591] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  262.324414][ T5237] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  262.329578][ T5237] Bluetooth: hci2: Injecting HCI hardware error event
[  262.334871][ T5237] Bluetooth: hci2: hardware error 0x00
[  262.515244][T11601] new mount options do not match the existing superblock, will be ignored
[  262.740084][T11593] loop2: detected capacity change from 0 to 32768
[  262.745973][T11593] btrfs: Deprecated parameter 'usebackuproot'
[  262.748182][T11593] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  262.754724][T11593] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2326 (11593)
[  262.776966][T11593] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  262.780269][T11593] BTRFS info (device loop2): using crc32c (crc32c-lib) checksum algorithm
[  262.857661][T11593] BTRFS info (device loop2): rebuilding free space tree
[  262.898640][T11593] BTRFS info (device loop2): turning on async discard
[  262.901316][T11593] BTRFS info (device loop2): enabling free space tree
[  262.908761][T11593] BTRFS info (device loop2): force clearing of disk cache
[  262.911671][T11593] BTRFS info (device loop2): trying to use backup root at mount time
[  263.002890][ T5864] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  263.579285][T11643] loop2: detected capacity change from 0 to 256
[  263.601810][T11643] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  263.611443][T11643] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[  263.623225][T11643] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  263.875256][T11651] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2342'.
[  264.412757][ T5237] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  264.858117][T11666] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2349'.
[  265.004730][T11674] loop2: detected capacity change from 0 to 512
[  265.008203][T11674] EXT4-fs: Ignoring removed i_version option
[  265.021872][T11674] EXT4-fs: Ignoring removed bh option
[  265.044504][T11674] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  265.057081][T11674] ext4 filesystem being mounted at /614/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  265.122170][T11683] 9pnet_fd: Insufficient options for proto=fd
[  265.198588][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.366493][T11696] loop2: detected capacity change from 0 to 512
[  265.377151][T11696] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  265.387868][T11696] EXT4-fs (loop2): 1 truncate cleaned up
[  265.399108][T11696] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  265.454635][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  265.496755][T11702] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2365'.
[  265.639021][   T33] audit: type=1326 audit(2000000038.724:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11710 comm="syz.1.2369" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbe9c58eba9 code=0x0
[  265.764761][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2373'.
[  266.000832][T11736] loop2: detected capacity change from 0 to 4096
[  266.008785][T11736] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  266.022880][T11736] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  266.084878][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  268.382209][T11796] loop2: detected capacity change from 0 to 128
[  268.862557][T11813] cifs: Bad value for 'port'
[  269.112772][T11826] trusted_key: encrypted_key: master key parameter 'u' is invalid
[  270.086819][T11844] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2426'.
[  270.090264][T11844] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2426'.
[  271.230243][T11887] loop2: detected capacity change from 0 to 2048
[  271.275891][T11888] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  271.314473][T11887] bio_check_eod: 2 callbacks suppressed
[  271.314509][T11887] syz.2.2447: attempt to access beyond end of device
[  271.314509][T11887] loop2: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048
[  271.323129][T11887] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15)
[  271.327282][T11887] syz.2.2447: attempt to access beyond end of device
[  271.327282][T11887] loop2: rw=0, sector=281474976710722, nr_sectors = 2 limit=2048
[  271.336389][T11887] NILFS (loop2): I/O error reading b-tree node block (ino=16, blocknr=15)
[  271.340061][T11887] NILFS (loop2): error -5 truncating bmap (ino=16)
[  271.490580][T11892] loop2: detected capacity change from 0 to 4096
[  271.513737][T11892] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[  271.516261][T11892] ntfs3(loop2): Failed to initialize $Extend/$ObjId.
[  271.570042][T11892] ntfs3(loop2): ino=1e, "file1" attr_set_size
[  272.881857][T11957] loop2: detected capacity change from 0 to 4096
[  272.915234][T11957] ntfs3(loop2): It is recommened to use chkdsk.
[  272.920702][T11957] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[  272.924129][T11957] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[  272.930217][T11957] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[  272.934311][T11957] ntfs3(loop2): try to read out of volume at offset 0x3fffffc0c00
[  272.940419][T11957] ntfs3(loop2): try to read out of volume at offset 0x3fffffc1c00
[  272.947938][T11957] ntfs3(loop2): try to read out of volume at offset 0x3fffffc2c00
[  272.957875][T11957] ntfs3(loop2): try to read out of volume at offset 0x3fffffc4c00
[  272.961298][T11957] ntfs3(loop2): try to read out of volume at offset 0x3fffffc8c00
[  272.965064][T11957] ntfs3(loop2): try to read out of volume at offset 0x3fffffd0c00
[  273.280672][T11982] loop2: detected capacity change from 0 to 512
[  273.281905][T11980] netlink: 'syz.0.2493': attribute type 6 has an invalid length.
[  273.297127][T11982] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  273.297630][T11980] netlink: 'syz.0.2493': attribute type 6 has an invalid length.
[  273.311711][T11982] ext4 filesystem being mounted at /665/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  273.350828][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  274.191640][ T5897] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[  274.345812][ T5897] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  274.349320][ T5897] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  274.358826][ T5897] usb 3-1: Product: syz
[  274.360650][ T5897] usb 3-1: Manufacturer: syz
[  274.363809][ T5897] usb 3-1: SerialNumber: syz
[  274.379470][ T5897] usb 3-1: config 0 descriptor??
[  274.608733][ T5897] hso 3-1:0.0: Failed to find BULK IN ep
[  274.624567][ T5897] usb-storage 3-1:0.0: USB Mass Storage device detected
[  274.630570][T12031] 9pnet: p9_errstr2errno: server reported unknown error @cF	S++
[  274.815617][ T5897] usb 3-1: USB disconnect, device number 20
[  274.892492][T12050] @: renamed from vlan0
[  275.730285][T12083] openvswitch: netlink: IPv6 tunnel dst address is zero
[  276.050207][T12101] loop2: detected capacity change from 0 to 2048
[  276.059341][T12101] udf: Unknown parameter 'unide'
[  276.167353][T12111] netlink: 'syz.1.2551': attribute type 12 has an invalid length.
[  276.170591][T12111] netlink: 211856 bytes leftover after parsing attributes in process `syz.1.2551'.
[  276.352825][T12127] netlink: 'syz.1.2558': attribute type 11 has an invalid length.
[  276.359088][T12125] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  276.361813][T12125] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[  276.370600][T12125] vhci_hcd vhci_hcd.0: Device attached
[  276.384083][T12128] vhci_hcd: connection closed
[  276.389416][ T5888] vhci_hcd: stop threads
[  276.395392][ T5888] vhci_hcd: release socket
[  276.397018][ T5888] vhci_hcd: disconnect device
[  276.904111][T12163] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2575'.
[  277.804872][T12193] fuse: Unknown parameter 'dSWYVBM'
[  278.349570][   T33] audit: type=1326 audit(2000000051.435:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12205 comm="syz.2.2593" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f774758eba9 code=0x7fc00000
[  278.615317][T12209] Invalid ELF header type: 0 != 1
[  278.653005][T12211] netlink: 'syz.1.2595': attribute type 3 has an invalid length.
[  278.688894][T12213] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  279.015183][   T33] audit: type=1326 audit(2000000052.095:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12205 comm="syz.2.2593" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f7747585b67 code=0x7fc00000
[  279.143337][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2601'.
[  279.246058][T12230] loop2: detected capacity change from 0 to 1024
[  279.301597][T12230] hfsplus: small file entry
[  279.348599][T12238] 9pnet_fd: Insufficient options for proto=fd
[  279.465402][T12243] overlayfs: lowerdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection.
[  279.538825][T12252] loop2: detected capacity change from 0 to 512
[  279.544143][T12250] Invalid source name
[  279.573435][T12252] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  279.579462][T12252] ext4 filesystem being mounted at /697/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  279.606024][T12252] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  279.621284][T12252] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28
[  279.631972][T12252] EXT4-fs (loop2): This should not happen!! Data will be lost
[  279.631972][T12252] 
[  279.635606][T12252] EXT4-fs (loop2): Total free blocks count 0
[  279.637663][T12252] EXT4-fs (loop2): Free/Dirty block details
[  279.640046][T12252] EXT4-fs (loop2): free_blocks=65280
[  279.648480][T12252] EXT4-fs (loop2): dirty_blocks=2
[  279.650548][T12252] EXT4-fs (loop2): Block reservation details
[  279.655076][T12252] EXT4-fs (loop2): i_reserved_data_blocks=2
[  279.696218][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  279.847582][T12271] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2621'.
[  280.231256][ T5910] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[  280.514223][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  280.523152][ T5910] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  280.529528][ T5910] usb 3-1: New USB device found, idVendor=1b96, idProduct=0004, bcdDevice= 0.00
[  280.540461][ T5910] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  280.553128][ T5910] usb 3-1: config 0 descriptor??
[  280.598478][T12290] overlayfs: failed to clone upperpath
[  280.984140][ T5910] ntrig 0003:1B96:0004.0008: unknown main item tag 0x0
[  281.007422][ T5910] ntrig 0003:1B96:0004.0008: hidraw0: USB HID v0.00 Device [HID 1b96:0004] on usb-dummy_hcd.2-1/input0
[  281.192287][ T5910] usb 3-1: USB disconnect, device number 21
[  283.238183][T12390] random: crng reseeded on system resumption
[  283.349757][T12392] loop2: detected capacity change from 0 to 2048
[  283.371429][T12392] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  283.386954][T12394] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  283.387059][T12392] syz.2.2674: attempt to access beyond end of device
[  283.387059][T12392] loop2: rw=524288, sector=33554430, nr_sectors = 2 limit=2048
[  283.429865][T12392] syz.2.2674: attempt to access beyond end of device
[  283.429865][T12392] loop2: rw=0, sector=33554430, nr_sectors = 2 limit=2048
[  283.454490][T12392] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3)
[  283.458160][T12392] NILFS (loop2): error -5 reading inode: ino=15
[  283.467993][T12392] syz.2.2674: attempt to access beyond end of device
[  283.467993][T12392] loop2: rw=0, sector=33554430, nr_sectors = 2 limit=2048
[  283.476939][T12392] NILFS (loop2): I/O error reading meta-data file (ino=6, block-offset=3)
[  283.483902][T12392] NILFS (loop2): error -5 reading inode: ino=15
[  283.485389][T12395] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2672'.
[  283.813705][T12405] netlink: 212296 bytes leftover after parsing attributes in process `syz.1.2679'.
[  283.817820][T12403] loop2: detected capacity change from 0 to 256
[  283.848561][T12403] FAT-fs (loop2): Directory bread(block 1285) failed
[  283.876519][T12403] FAT-fs (loop2): Directory bread(block 1285) failed
[  283.992798][T12409] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2681'.
[  284.373358][T12427] overlayfs: failed to clone upperpath
[  285.224964][T12449] loop2: detected capacity change from 0 to 4096
[  285.229669][T12449] EXT4-fs: Ignoring removed oldalloc option
[  285.249105][T12449] ext4: Unknown parameter 'nouser_xattr'
[  285.377996][T12457] netlink: 'syz.1.2702': attribute type 1 has an invalid length.
[  285.588728][T12465] loop2: detected capacity change from 0 to 256
[  286.212658][T12506] loop2: detected capacity change from 0 to 16
[  286.234303][T12506] erofs (device loop2): unidentified incompatible feature 1000000, please upgrade kernel
[  287.705466][T12547] loop2: detected capacity change from 0 to 4096
[  287.708909][T12549] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2745'.
[  287.714851][T12547] EXT4-fs: Ignoring removed mblk_io_submit option
[  287.731075][T12547] EXT4-fs (loop2): Test dummy encryption mode enabled
[  287.735249][T12547] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0083]
[  287.737844][T12547] System zones: 0-5
[  287.742128][T12547] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  287.759329][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  287.868649][T12558] loop2: detected capacity change from 0 to 2048
[  287.876952][T12558] UDF-fs: error (device loop2): udf_process_sequence: Primary Volume Descriptor not found!
[  287.884231][T12558] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  287.906556][T12561] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2750'.
[  288.795805][T12572] loop2: detected capacity change from 0 to 131072
[  288.801632][T12572] F2FS-fs (loop2): invalid crc value
[  288.865280][T12572] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  288.937613][T12572] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e4
[  290.150272][T12612] loop2: detected capacity change from 0 to 4096
[  290.204814][T12615] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  290.233241][   T33] audit: type=1800 audit(2000000063.315:49): pid=12612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2770" name="file1" dev="loop2" ino=15 res=0 errno=0
[  290.258460][T12612] NILFS error (device loop2): nilfs_bmap_lookup_contig: broken bmap (inode number=15)
[  290.270495][T12612] Remounting filesystem read-only
[  290.273600][T12612] NILFS (loop2): DAT doesn't have a block to manage vblocknr = 524288
[  290.277476][T12612] NILFS error (device loop2): nilfs_bmap_truncate: broken bmap (inode number=15)
[  290.281535][T12612] NILFS (loop2): error -5 truncating bmap (ino=15)
[  290.317914][ T5864] NILFS (loop2): disposed unprocessed dirty file(s) when detaching log writer
[  291.447448][T12669] netlink: 'syz.0.2797': attribute type 1 has an invalid length.
[  291.460699][T12669] netlink: 'syz.0.2797': attribute type 2 has an invalid length.
[  291.623506][T12684] loop2: detected capacity change from 0 to 512
[  291.650877][T12684] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[  291.667280][T12684] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a01ec018, mo2=0002]
[  291.673402][T12691] overlayfs: failed to clone upperpath
[  291.675299][T12684] System zones: 1-12
[  291.679891][T12684] EXT4-fs (loop2): 1 truncate cleaned up
[  291.683074][T12684] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  291.710771][   T33] audit: type=1800 audit(2000000064.786:50): pid=12684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2804" name="file1" dev="loop2" ino=15 res=0 errno=0
[  291.725442][   T33] audit: type=1800 audit(2000000064.806:51): pid=12684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2804" name="file2" dev="loop2" ino=16 res=0 errno=0
[  291.764469][ T5864] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  291.871550][T12701] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2812'.
[  291.875380][T12701] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2812'.
[  292.189025][T12722] netlink: 108 bytes leftover after parsing attributes in process `syz.0.2823'.
[  292.443454][T12734] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.2828'.
[  293.186921][T12754] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2836'.
[  293.443993][T12765] xt_HMARK: proto mask must be zero with L3 mode
[  293.827268][T12785] PKCS8: Unsupported PKCS#8 version
[  293.877220][T12791] CIFS mount error: No usable UNC path provided in device string!
[  293.877220][T12791] 
[  293.886592][T12791] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  294.214387][T12803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2858'.
[  294.455895][T12802] loop2: detected capacity change from 0 to 1024
[  294.484220][T12802] hfsplus: small dir entry
[  294.555815][T12806] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2860'.
[  294.559613][T12806] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2860'.
[  294.567016][T12806] netlink: 10 bytes leftover after parsing attributes in process `syz.2.2860'.
[  295.147033][T12834] netlink: 'syz.0.2873': attribute type 21 has an invalid length.
[  295.508216][T12839] netlink: 'syz.1.2874': attribute type 19 has an invalid length.
[  295.511121][T12839] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2874'.
[  295.515510][T12839] netlink: 'syz.1.2874': attribute type 19 has an invalid length.
[  295.641943][T12845] bond0: option resend_igmp: invalid value (18446744072910471168)
[  295.645119][T12845] bond0: option resend_igmp: allowed values 0 - 255
[  296.213944][T12873] openvswitch: netlink: Flow actions attr not present in new flow.
[  296.841239][   T33] audit: type=1326 audit(2000000069.926:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.0.2909" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cb8eba9 code=0x7ffc0000
[  296.852870][   T33] audit: type=1326 audit(2000000069.926:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.0.2909" exe="/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f6c6cb8eba9 code=0x7ffc0000
[  296.864701][   T33] audit: type=1326 audit(2000000069.926:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.0.2909" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cb8eba9 code=0x7ffc0000
[  296.876799][   T33] audit: type=1326 audit(2000000069.926:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=12914 comm="syz.0.2909" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6c6cb8eba9 code=0x7ffc0000
[  297.914561][T12933] overlayfs: conflicting options: metacopy=on,redirect_dir=follow
[  298.014956][T12935] __nla_validate_parse: 2 callbacks suppressed
[  298.014976][T12935] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2917'.
[  298.104314][T12941] loop2: detected capacity change from 0 to 4096
[  298.142322][T12943] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  298.480458][ T5897] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[  298.632622][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  298.638480][ T5897] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  298.646339][ T5897] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  298.653410][ T5897] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  298.657385][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  298.683507][ T5897] usb 3-1: config 0 descriptor??
[  299.117941][ T5897] plantronics 0003:047F:FFFF.0009: reserved main item tag 0xe
[  299.129055][ T5897] plantronics 0003:047F:FFFF.0009: unknown main item tag 0x0
[  299.143282][ T5897] plantronics 0003:047F:FFFF.0009: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0
[  299.385739][ T5897] usb 3-1: USB disconnect, device number 22
[  299.764743][T12997] tipc: Started in network mode
[  299.766846][T12997] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711
[  299.775287][T12997] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0001
[  299.778295][T12997] tipc: Enabled bearer <udp:syz0>, priority 10
[  299.979593][T13005] loop2: detected capacity change from 0 to 2048
[  300.010964][T13005] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[  300.014445][T10895] udevd[10895]: incorrect nilfs2 checksum on /dev/loop2
[  300.029332][T13006] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  300.505028][T13023] overlayfs: failed to resolve './file0': -2
[  300.601845][T13033] netlink: 129704 bytes leftover after parsing attributes in process `syz.1.2963'.
[  300.780372][ T1273] tipc: Node number set to 1
[  301.798294][T13070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2981'.
[  301.997716][T13080] netlink: 'syz.1.2986': attribute type 4 has an invalid length.
[  301.997773][T13067] loop2: detected capacity change from 0 to 32768
[  302.015216][T13067] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.2980 (13067)
[  302.044315][T13067] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  302.059988][T13067] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  302.133842][T13067] BTRFS info (device loop2): enabling ssd optimizations
[  302.136042][T13067] BTRFS info (device loop2): turning on async discard
[  302.138874][T13067] BTRFS info (device loop2): enabling free space tree
[  302.240237][ T5864] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  302.411480][T13108] loop2: detected capacity change from 0 to 256
[  302.415611][T13108] exfat: Deprecated parameter 'namecase'
[  302.425590][T13108] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xf4419509, utbl_chksum : 0xe619d30d)
[  303.208337][T13124] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22
[  303.213986][T13124] netdevsim netdevsim0: Direct firmware load for . failed with error -22
[  303.216972][T13124] netdevsim netdevsim0: Falling back to sysfs fallback for: .
[  303.757903][T13132] loop2: detected capacity change from 0 to 40427
[  303.806232][T13132] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  303.822433][T13132] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[  305.032976][T13152] overlay: Bad value for 'workdir'
[  305.991014][T13163] kernel profiling enabled (shift: 17)
[  306.204369][T13172] ==================================================================
[  306.207808][T13172] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  306.211007][T13172] Read of size 4 at addr ffff888028f5d2c4 by task syz.1.3013/13172
[  306.214955][T13172] 
[  306.216461][T13172] CPU: 1 UID: 0 PID: 13172 Comm: syz.1.3013 Not tainted syzkaller #0 PREEMPT(full) 
[  306.216481][T13172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  306.216491][T13172] Call Trace:
[  306.216498][T13172]  <TASK>
[  306.216508][T13172]  dump_stack_lvl+0x189/0x250
[  306.216530][T13172]  ? __kasan_check_byte+0x12/0x40
[  306.216553][T13172]  ? __pfx_dump_stack_lvl+0x10/0x10
[  306.216567][T13172]  ? lock_release+0x4b/0x3e0
[  306.216589][T13172]  ? __virt_addr_valid+0x4a5/0x5c0
[  306.216610][T13172]  print_report+0xca/0x240
[  306.216624][T13172]  ? xfrm_alloc_spi+0x570/0xf30
[  306.216641][T13172]  kasan_report+0x118/0x150
[  306.216661][T13172]  ? xfrm_alloc_spi+0x570/0xf30
[  306.216681][T13172]  xfrm_alloc_spi+0x570/0xf30
[  306.216699][T13172]  ? xfrm_alloc_spi+0x2a0/0xf30
[  306.216717][T13172]  ? __local_bh_enable_ip+0x16c/0x1c0
[  306.216733][T13172]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  306.216750][T13172]  ? xfrm_find_acq+0x87/0xa0
[  306.216769][T13172]  pfkey_getspi+0x7a8/0xee0
[  306.216788][T13172]  pfkey_sendmsg+0xbfe/0x1090
[  306.216802][T13172]  ? trace_sched_exit_tp+0x36/0x110
[  306.216823][T13172]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  306.216844][T13172]  ? aa_sock_msg_perm+0xf1/0x1d0
[  306.216857][T13172]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  306.216871][T13172]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  306.216886][T13172]  __sock_sendmsg+0x21c/0x270
[  306.216909][T13172]  ____sys_sendmsg+0x505/0x830
[  306.216927][T13172]  ? __pfx_____sys_sendmsg+0x10/0x10
[  306.216945][T13172]  ? import_iovec+0x74/0xa0
[  306.216964][T13172]  ___sys_sendmsg+0x21f/0x2a0
[  306.216981][T13172]  ? __pfx____sys_sendmsg+0x10/0x10
[  306.217008][T13172]  ? __fget_files+0x2a/0x420
[  306.217020][T13172]  ? __fget_files+0x3a0/0x420
[  306.217035][T13172]  __x64_sys_sendmsg+0x19b/0x260
[  306.217051][T13172]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  306.217070][T13172]  ? rcu_is_watching+0x15/0xb0
[  306.217086][T13172]  ? do_syscall_64+0xbe/0x3b0
[  306.217102][T13172]  do_syscall_64+0xfa/0x3b0
[  306.217115][T13172]  ? lockdep_hardirqs_on+0x9c/0x150
[  306.217127][T13172]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.217141][T13172]  ? exc_page_fault+0x9f/0xf0
[  306.217154][T13172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.217167][T13172] RIP: 0033:0x7fbe9c58eba9
[  306.217181][T13172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.217192][T13172] RSP: 002b:00007fbe9d470038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  306.217208][T13172] RAX: ffffffffffffffda RBX: 00007fbe9c7d5fa0 RCX: 00007fbe9c58eba9
[  306.217219][T13172] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  306.217228][T13172] RBP: 00007fbe9c611e19 R08: 0000000000000000 R09: 0000000000000000
[  306.217237][T13172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  306.217245][T13172] R13: 00007fbe9c7d6038 R14: 00007fbe9c7d5fa0 R15: 00007fffa82478e8
[  306.217261][T13172]  </TASK>
[  306.217267][T13172] 
[  306.332415][T13172] Allocated by task 11969:
[  306.334218][T13172]  kasan_save_track+0x3e/0x80
[  306.336513][T13172]  __kasan_slab_alloc+0x6c/0x80
[  306.338548][T13172]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  306.340950][T13172]  xfrm_state_alloc+0x24/0x2f0
[  306.342995][T13172]  __find_acq_core+0x8a7/0x1c00
[  306.345130][T13172]  xfrm_find_acq+0x78/0xa0
[  306.347105][T13172]  xfrm_alloc_userspi+0x6b3/0xc90
[  306.349188][T13172]  xfrm_user_rcv_msg+0x7a3/0xab0
[  306.351422][T13172]  netlink_rcv_skb+0x208/0x470
[  306.353828][T13172]  xfrm_netlink_rcv+0x79/0x90
[  306.356142][T13172]  netlink_unicast+0x82f/0x9e0
[  306.358088][T13172]  netlink_sendmsg+0x805/0xb30
[  306.360025][T13172]  __sock_sendmsg+0x21c/0x270
[  306.362189][T13172]  ____sys_sendmsg+0x505/0x830
[  306.364057][T13172]  ___sys_sendmsg+0x21f/0x2a0
[  306.366083][T13172]  __x64_sys_sendmsg+0x19b/0x260
[  306.368111][T13172]  do_syscall_64+0xfa/0x3b0
[  306.369884][T13172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.372177][T13172] 
[  306.373145][T13172] Freed by task 1273:
[  306.374757][T13172]  kasan_save_track+0x3e/0x80
[  306.376819][T13172]  kasan_save_free_info+0x46/0x50
[  306.379173][T13172]  __kasan_slab_free+0x5b/0x80
[  306.381402][T13172]  kmem_cache_free+0x18f/0x400
[  306.384177][T13172]  xfrm_state_gc_task+0x52d/0x6b0
[  306.387141][T13172]  process_scheduled_works+0xae1/0x17b0
[  306.389885][T13172]  worker_thread+0x8a0/0xda0
[  306.391884][T13172]  kthread+0x711/0x8a0
[  306.393455][T13172]  ret_from_fork+0x439/0x7d0
[  306.395198][T13172]  ret_from_fork_asm+0x1a/0x30
[  306.397059][T13172] 
[  306.398041][T13172] The buggy address belongs to the object at ffff888028f5d200
[  306.398041][T13172]  which belongs to the cache xfrm_state of size 928
[  306.403754][T13172] The buggy address is located 196 bytes inside of
[  306.403754][T13172]  freed 928-byte region [ffff888028f5d200, ffff888028f5d5a0)
[  306.409150][T13172] 
[  306.410133][T13172] The buggy address belongs to the physical page:
[  306.412707][T13172] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888028f5df80 pfn:0x28f5c
[  306.416684][T13172] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  306.419905][T13172] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  306.422802][T13172] page_type: f5(slab)
[  306.424400][T13172] raw: 00fff00000000040 ffff8881047e6c80 dead000000000122 0000000000000000
[  306.427755][T13172] raw: ffff888028f5df80 00000000800e0009 00000000f5000000 0000000000000000
[  306.431023][T13172] head: 00fff00000000040 ffff8881047e6c80 dead000000000122 0000000000000000
[  306.434634][T13172] head: ffff888028f5df80 00000000800e0009 00000000f5000000 0000000000000000
[  306.438029][T13172] head: 00fff00000000002 ffffea0000a3d701 00000000ffffffff 00000000ffffffff
[  306.441459][T13172] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  306.444796][T13172] page dumped because: kasan: bad access detected
[  306.448016][T13172] page_owner tracks the page as allocated
[  306.450186][T13172] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 6810, tgid 6809 (syz.2.315), ts 103951716594, free_ts 103910859823
[  306.459179][T13172]  post_alloc_hook+0x240/0x2a0
[  306.461130][T13172]  get_page_from_freelist+0x21e4/0x22c0
[  306.463397][T13172]  __alloc_frozen_pages_noprof+0x181/0x370
[  306.465730][T13172]  alloc_pages_mpol+0x232/0x4a0
[  306.467556][T13172]  allocate_slab+0x8a/0x370
[  306.469341][T13172]  ___slab_alloc+0xbeb/0x1420
[  306.471281][T13172]  kmem_cache_alloc_noprof+0x283/0x3c0
[  306.473470][T13172]  xfrm_state_alloc+0x24/0x2f0
[  306.475385][T13172]  xfrm_add_sa+0x17d1/0x4070
[  306.477215][T13172]  xfrm_user_rcv_msg+0x7a3/0xab0
[  306.479180][T13172]  netlink_rcv_skb+0x208/0x470
[  306.480662][T13172]  xfrm_netlink_rcv+0x79/0x90
[  306.482136][T13172]  netlink_unicast+0x82f/0x9e0
[  306.483746][T13172]  netlink_sendmsg+0x805/0xb30
[  306.485319][T13172]  __sock_sendmsg+0x21c/0x270
[  306.487266][T13172]  ____sys_sendmsg+0x505/0x830
[  306.489206][T13172] page last free pid 6808 tgid 6799 stack trace:
[  306.491942][T13172]  __free_frozen_pages+0xbc4/0xd30
[  306.494007][T13172]  free_large_kmalloc+0x13a/0x1f0
[  306.495965][T13172]  do_getxattr+0x2d7/0x320
[  306.497788][T13172]  filename_getxattr+0x111/0x210
[  306.499838][T13172]  __x64_sys_lgetxattr+0x1c6/0x210
[  306.501884][T13172]  do_syscall_64+0xfa/0x3b0
[  306.503768][T13172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.506122][T13172] 
[  306.507094][T13172] Memory state around the buggy address:
[  306.509282][T13172]  ffff888028f5d180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  306.512495][T13172]  ffff888028f5d200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  306.515673][T13172] >ffff888028f5d280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  306.518842][T13172]                                            ^
[  306.521318][T13172]  ffff888028f5d300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  306.524389][T13172]  ffff888028f5d380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  306.527361][T13172] ==================================================================
[  306.530899][T13172] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  306.533589][T13172] CPU: 1 UID: 0 PID: 13172 Comm: syz.1.3013 Not tainted syzkaller #0 PREEMPT(full) 
[  306.537526][T13172] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  306.541493][T13172] Call Trace:
[  306.542826][T13172]  <TASK>
[  306.544163][T13172]  dump_stack_lvl+0x99/0x250
[  306.546014][T13172]  ? __asan_memcpy+0x40/0x70
[  306.547892][T13172]  ? __pfx_dump_stack_lvl+0x10/0x10
[  306.550022][T13172]  ? __pfx__printk+0x10/0x10
[  306.551877][T13172]  vpanic+0x281/0x750
[  306.553465][T13172]  ? __pfx_vpanic+0x10/0x10
[  306.555252][T13172]  ? irqentry_exit+0x74/0x90
[  306.557204][T13172]  panic+0xb9/0xc0
[  306.558757][T13172]  ? __pfx_panic+0x10/0x10
[  306.560559][T13172]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  306.562933][T13172]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  306.565314][T13172]  ? xfrm_alloc_spi+0x570/0xf30
[  306.567272][T13172]  check_panic_on_warn+0x89/0xb0
[  306.569276][T13172]  ? xfrm_alloc_spi+0x570/0xf30
[  306.571191][T13172]  end_report+0x78/0x160
[  306.572893][T13172]  kasan_report+0x129/0x150
[  306.574711][T13172]  ? xfrm_alloc_spi+0x570/0xf30
[  306.576757][T13172]  xfrm_alloc_spi+0x570/0xf30
[  306.578698][T13172]  ? xfrm_alloc_spi+0x2a0/0xf30
[  306.580678][T13172]  ? __local_bh_enable_ip+0x16c/0x1c0
[  306.582875][T13172]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  306.584936][T13172]  ? xfrm_find_acq+0x87/0xa0
[  306.586657][T13172]  pfkey_getspi+0x7a8/0xee0
[  306.588422][T13172]  pfkey_sendmsg+0xbfe/0x1090
[  306.590222][T13172]  ? trace_sched_exit_tp+0x36/0x110
[  306.592211][T13172]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  306.594165][T13172]  ? aa_sock_msg_perm+0xf1/0x1d0
[  306.596034][T13172]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  306.598021][T13172]  ? __pfx_pfkey_sendmsg+0x10/0x10
[  306.600015][T13172]  __sock_sendmsg+0x21c/0x270
[  306.601832][T13172]  ____sys_sendmsg+0x505/0x830
[  306.603714][T13172]  ? __pfx_____sys_sendmsg+0x10/0x10
[  306.605739][T13172]  ? import_iovec+0x74/0xa0
[  306.607520][T13172]  ___sys_sendmsg+0x21f/0x2a0
[  306.609416][T13172]  ? __pfx____sys_sendmsg+0x10/0x10
[  306.611457][T13172]  ? __fget_files+0x2a/0x420
[  306.613225][T13172]  ? __fget_files+0x3a0/0x420
[  306.615001][T13172]  __x64_sys_sendmsg+0x19b/0x260
[  306.617007][T13172]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  306.619186][T13172]  ? rcu_is_watching+0x15/0xb0
[  306.621064][T13172]  ? do_syscall_64+0xbe/0x3b0
[  306.622906][T13172]  do_syscall_64+0xfa/0x3b0
[  306.624678][T13172]  ? lockdep_hardirqs_on+0x9c/0x150
[  306.626762][T13172]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.629086][T13172]  ? exc_page_fault+0x9f/0xf0
[  306.630920][T13172]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  306.633262][T13172] RIP: 0033:0x7fbe9c58eba9
[  306.635022][T13172] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  306.642499][T13172] RSP: 002b:00007fbe9d470038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  306.645774][T13172] RAX: ffffffffffffffda RBX: 00007fbe9c7d5fa0 RCX: 00007fbe9c58eba9
[  306.648919][T13172] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  306.651937][T13172] RBP: 00007fbe9c611e19 R08: 0000000000000000 R09: 0000000000000000
[  306.655060][T13172] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  306.658235][T13172] R13: 00007fbe9c7d6038 R14: 00007fbe9c7d5fa0 R15: 00007fffa82478e8
[  306.661452][T13172]  </TASK>
[  306.663438][T13172] Kernel Offset: disabled
[  306.665179][T13172] Rebooting in 86400 seconds..

VM DIAGNOSIS:
04:47:10  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b45e7b RBX=1ffff11026cc7f61 RCX=ffff888023211cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc900070077e0 RSP=ffffc90007007660
R8 =ffffffff8fa3a537 R9 =1ffffffff1f474a6 R10=dffffc0000000000 R11=fffffbfff1f474a7
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b45e63 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8615000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fbe9d46ffc8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8133c59e ffffffff8133c59e
XMM02=ffffffff8133c59e ffffffff8133c59e XMM03=ffffffff8133c59e ffffffff8133c59e
XMM04=ffffffff8133c59e ffffffff8133c59e XMM05=ffffffff8133c59e ffffffff8133c59e
XMM06=ffffffff8133c59e ffffffff8133c59e XMM07=ffffffff8133c59e ffffffff8133c59e
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f7747612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000020 RBX=0000000000000020 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001479 RDI=000000000000147a RBP=00000000000003f8 RSP=ffffc90008c06eb0
R8 =ffff8881069d8237 R9 =1ffff11020d3b046 R10=dffffc0000000000 R11=ffffffff854fa930
R12=dffffc0000000000 R13=ffffffff99b008d7 R14=ffffffff99df5440 R15=0000000000000000
RIP=ffffffff854fa9ac RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fbe9d4706c0 ffffffff 00c00000
GS =0000 ffff8881a3c15000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000180 CR3=000000011e15c000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fbe9c7a7498 00007fbe9c7a7470 XMM03=00007fbe9c7a74a8 00007fbe9c7a74a0
XMM04=00007fbe9d30d100 00007fbe9c7a7460 XMM05=00007fbe9c7a7478 00007fbe9c7a74c0
XMM06=00007fbe9c7a74b8 00007fbe9c7a74b0 XMM07=00007fbe9c7a74a8 00007fbe9c7a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fbe9c612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
