last executing test programs:

2.060933135s ago: executing program 2 (id=649):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000))
timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0)
write$UHID_CREATE2(r0, 0x0, 0x118)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18)

938.38231ms ago: executing program 0 (id=655):
capset(&(0x7f0000000080)={0x19980330}, &(0x7f00000002c0)={0x0, 0x0, 0x800, 0x0, 0x0, 0x20000000})
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15)

937.543482ms ago: executing program 2 (id=658):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000009c0)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x5, [@var={0x3, 0x0, 0x0, 0xe, 0x4, 0x2}]}, {0x0, [0x30, 0x5f, 0x2e]}}, 0x0, 0x2d, 0x0, 0x1, 0xfffffffc}, 0x28)

880.03482ms ago: executing program 0 (id=659):
r0 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x16b202, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000000)=0x20)
close(0x3)

879.758519ms ago: executing program 2 (id=661):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f00000001c0)={{@host}, @host, 0x0, 0x2000000, 0x2449, 0xfffffffffffffffd})
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r0, 0x7a4, &(0x7f0000000380)={{@host}, 0x4, 0x9, 0x4041, 0xfffffffa})

797.840014ms ago: executing program 2 (id=663):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0xa6, &(0x7f0000003480)=[{&(0x7f0000000040)="1800000072006bcd9e3fe3dc6e080000070900000d000000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)

797.535812ms ago: executing program 0 (id=664):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f0000000000)='./file1\x00', 0x21445a, &(0x7f00000001c0)=ANY=[], 0x1, 0x1c4, &(0x7f00000003c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0)
pwrite64(r1, &(0x7f00000001c0)="df", 0x1, 0xfecc)
pwrite64(r0, &(0x7f0000000140)='2', 0xff10, 0x8001000)

683.107919ms ago: executing program 2 (id=665):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000180001000000000000000000020000000400000000000000060015000400000014001680100008800c000380080015"], 0x38}}, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="f80000003e000701feffffff00000000017c0000040042800c00018006000600800a0000d1000280cb0014"], 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)

682.926606ms ago: executing program 0 (id=666):
syz_mount_image$minix(&(0x7f0000000100), &(0x7f0000000000)='./file0\x00', 0x2004000, &(0x7f0000000040)=ANY=[], 0x9, 0x20a, &(0x7f0000000140)="$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")
renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0)

682.712309ms ago: executing program 2 (id=667):
ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000000)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0xee01, 0xffffffffffffffff}}, './file0\x00'})
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="13010000bd460e10490d1070900c010203010902120001000000000904"], 0x0)

539.573944ms ago: executing program 0 (id=669):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0xac, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x84, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x4c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_XOR={0x4}, @NFTA_BITWISE_MASK={0x1c, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x15, 0x1, "586f52268dfc63fbcf9da91aef1534517a"}]}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x120}}, 0x0)

539.033621ms ago: executing program 0 (id=671):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @private=0xa018101}]}, &(0x7f0000000080)=0x10)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000001180)={0x1, [<r2=>0x0]}, &(0x7f00000000c0)=0x8)
setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r2, 0xe0, 0x30}, 0xc)

240.148671ms ago: executing program 1 (id=675):
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x3, 0x3, 0x0, 0x4, 0x5})
setrlimit(0x40000000000008, &(0x7f0000000000)={0x20, 0x200000})
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4)
sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)='$', 0x1}], 0x1, &(0x7f0000000280)=ANY=[], 0xf}}], 0x1, 0x4004804)

239.960919ms ago: executing program 1 (id=676):
recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x8000)
r0 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'lo\x00', <r2=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ec0)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0x8}, {0xffff, 0xffff}}, [@TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xe, 0x4, 0x7, 0x20000001, 0x2, 0x2cf, 0x8d2, 0x1}}, {0x6, 0x2, [0xffff]}}]}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x401}}]}, 0x60}, 0x1, 0x0, 0x0, 0x80d1}, 0x34008098)
sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0)

140.647277ms ago: executing program 1 (id=677):
r0 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r0, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e)
listen(r0, 0x5)
r1 = socket$unix(0x1, 0x1, 0x0)
setsockopt$sock_int(r1, 0x1, 0x10, &(0x7f00000000c0)=0x3, 0x4)
ioctl$int_in(r1, 0x5421, &(0x7f0000000300)=0x101)
connect$unix(r1, &(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e)

140.250151ms ago: executing program 1 (id=678):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x139}, 0x48)

48.112137ms ago: executing program 1 (id=679):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0xa0, 0x0, 0x1, 0x0, 0x0)
symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00')
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x10, 0xffffffff)
lsetxattr$security_capability(&(0x7f0000000040)='./file1\x00', &(0x7f0000000080), &(0x7f0000000000)=@v3={0x3000000, [{0x7fffffff, 0xabda}, {0x3, 0x2}], 0xee00}, 0x18, 0x1)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000340)='./bus\x00', &(0x7f0000000b80), 0x200008, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
syz_mount_image$fuse(&(0x7f0000000140), &(0x7f00000002c0)='./bus\x00', 0x3220a0, &(0x7f0000000140)=ANY=[], 0xfe, 0x0, 0x0)
linkat(0xffffffffffffff9c, &(0x7f00000006c0)='./file2\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./file7\x00', 0x400)
renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file7\x00', 0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0x2)

0s ago: executing program 1 (id=680):
syz_mount_image$ocfs2(&(0x7f0000004740), &(0x7f0000004780)='./file0\x00', 0x100000a, &(0x7f00000001c0)={[{@journal_async_commit}, {@heartbeat_none}, {@usrquota}, {@inode64}, {@heartbeat_none}, {@usrquota}]}, 0x0, 0x4703, &(0x7f0000004800)="$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")
setxattr$trusted_overlay_upper(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280), &(0x7f000001b000)=ANY=[], 0x8a, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:44301' (ED25519) to the list of known hosts.
syzkaller login: [   40.906329][ T5760] cgroup: Unknown subsys name 'net'
[   41.014555][ T5760] cgroup: Unknown subsys name 'cpuset'
[   41.018647][ T5760] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.628420][ T5760] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.567192][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.570544][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.573976][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.577458][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.582886][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.586161][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.595578][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.598457][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.601545][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.605063][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.608045][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.611712][ T5217] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.617909][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.620508][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.626776][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.834973][ T5836] chnl_net:caif_netlink_parms(): no params data found
[   46.910603][ T5832] chnl_net:caif_netlink_parms(): no params data found
[   46.933776][ T5837] chnl_net:caif_netlink_parms(): no params data found
[   46.983355][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.985829][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.988066][ T5836] bridge_slave_0: entered allmulticast mode
[   46.990816][ T5836] bridge_slave_0: entered promiscuous mode
[   46.998893][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.001040][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.003710][ T5836] bridge_slave_1: entered allmulticast mode
[   47.006325][ T5836] bridge_slave_1: entered promiscuous mode
[   47.055364][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.086564][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.089416][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.092098][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.094287][ T5837] bridge_slave_0: entered allmulticast mode
[   47.096870][ T5837] bridge_slave_0: entered promiscuous mode
[   47.099756][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.102537][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state
[   47.104675][ T5832] bridge_slave_0: entered allmulticast mode
[   47.107293][ T5832] bridge_slave_0: entered promiscuous mode
[   47.110360][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.112960][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.115062][ T5832] bridge_slave_1: entered allmulticast mode
[   47.117669][ T5832] bridge_slave_1: entered promiscuous mode
[   47.135825][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.138017][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state
[   47.140170][ T5837] bridge_slave_1: entered allmulticast mode
[   47.144455][ T5837] bridge_slave_1: entered promiscuous mode
[   47.164620][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.169046][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.173585][ T5836] team0: Port device team_slave_0 added
[   47.192876][ T5836] team0: Port device team_slave_1 added
[   47.205282][ T5832] team0: Port device team_slave_0 added
[   47.218030][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.222749][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.235414][ T5832] team0: Port device team_slave_1 added
[   47.260566][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.262935][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.270423][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.275264][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.277378][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.285897][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.320655][ T5837] team0: Port device team_slave_0 added
[   47.325028][ T5837] team0: Port device team_slave_1 added
[   47.327261][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.329337][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.337181][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.352976][ T5836] hsr_slave_0: entered promiscuous mode
[   47.355299][ T5836] hsr_slave_1: entered promiscuous mode
[   47.367406][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.370024][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.381737][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.420392][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.423042][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.430635][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.436293][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.438364][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.446127][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.517762][ T5832] hsr_slave_0: entered promiscuous mode
[   47.520715][ T5832] hsr_slave_1: entered promiscuous mode
[   47.524382][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.527494][ T5832] Cannot create hsr debugfs directory
[   47.547974][ T5837] hsr_slave_0: entered promiscuous mode
[   47.550204][ T5837] hsr_slave_1: entered promiscuous mode
[   47.552799][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.555078][ T5837] Cannot create hsr debugfs directory
[   47.756177][ T5836] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.769241][ T5836] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.783245][ T5836] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.803039][ T5836] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.836590][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.843642][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.849091][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.863910][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.918200][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.929283][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.934457][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.944118][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   48.017097][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.044846][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.050620][ T5836] 8021q: adding VLAN 0 to HW filter on device team0
[   48.058858][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0
[   48.068751][ T2187] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.070980][ T2187] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.075366][ T2187] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.077543][ T2187] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.090054][ T5832] 8021q: adding VLAN 0 to HW filter on device team0
[   48.115036][ T2187] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.117241][ T2187] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.123909][ T5837] 8021q: adding VLAN 0 to HW filter on device team0
[   48.138493][ T2187] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.140655][ T2187] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.144562][ T2187] bridge0: port 1(bridge_slave_0) entered blocking state
[   48.146705][ T2187] bridge0: port 1(bridge_slave_0) entered forwarding state
[   48.161967][ T2187] bridge0: port 2(bridge_slave_1) entered blocking state
[   48.164137][ T2187] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.292442][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.322408][ T5836] veth0_vlan: entered promiscuous mode
[   48.328790][ T5836] veth1_vlan: entered promiscuous mode
[   48.356070][ T5836] veth0_macvtap: entered promiscuous mode
[   48.365516][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.375440][ T5836] veth1_macvtap: entered promiscuous mode
[   48.388643][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.410082][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.422066][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.426010][ T5836] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.428749][ T5836] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.432093][ T5836] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.434802][ T5836] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.443478][ T5832] veth0_vlan: entered promiscuous mode
[   48.451071][ T5832] veth1_vlan: entered promiscuous mode
[   48.465993][ T5837] veth0_vlan: entered promiscuous mode
[   48.479483][ T5837] veth1_vlan: entered promiscuous mode
[   48.513880][ T5832] veth0_macvtap: entered promiscuous mode
[   48.530782][ T5832] veth1_macvtap: entered promiscuous mode
[   48.547173][ T5837] veth0_macvtap: entered promiscuous mode
[   48.556747][ T5837] veth1_macvtap: entered promiscuous mode
[   48.563233][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.565532][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.565669][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.575452][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.597092][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.599745][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.603482][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.606083][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.610341][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.610961][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.615387][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.622021][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.627576][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.630300][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.633963][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.636627][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.659211][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.671802][ T5835] Bluetooth: hci1: command tx timeout
[   48.672109][   T55] Bluetooth: hci0: command tx timeout
[   48.684703][   T55] Bluetooth: hci2: command tx timeout
[   48.715032][   T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.717347][   T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.737496][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.739897][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.765525][ T5900] loop2: detected capacity change from 0 to 1024
[   48.777510][ T1086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.785993][ T1086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.814665][   T33] audit: type=1800 audit(1753212561.635:2): pid=5900 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3" name="file1" dev="loop2" ino=20 res=0 errno=0
[   48.834158][ T1086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.840283][ T1086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.884115][ T5902] Driver unsupported XDP return value 0 on prog  (id 4) dev N/A, expect packet loss!
[   49.041105][ T5913] netlink: 'syz.0.7': attribute type 1 has an invalid length.
[   49.046957][ T5913] netlink: 144 bytes leftover after parsing attributes in process `syz.0.7'.
[   49.049505][ T5914] loop2: detected capacity change from 0 to 2048
[   49.049682][ T5913] netlink: 96 bytes leftover after parsing attributes in process `syz.0.7'.
[   49.140339][ T5918] loop0: detected capacity change from 0 to 1024
[   49.159982][   T33] audit: type=1800 audit(1753212561.975:3): pid=5918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.10" name="file1" dev="loop0" ino=20 res=0 errno=0
[   49.251924][ T5898] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   49.255075][ T5922] loop2: detected capacity change from 0 to 4096
[   49.421300][ T5898] usb 2-1: Using ep0 maxpacket: 8
[   49.429456][ T5898] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   49.440436][ T5935] loop0: detected capacity change from 0 to 764
[   49.441279][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   49.447329][ T5898] usb 2-1: Product: syz
[   49.448614][ T5898] usb 2-1: Manufacturer: syz
[   49.449994][ T5898] usb 2-1: SerialNumber: syz
[   49.459226][ T5898] usb 2-1: config 0 descriptor??
[   49.476783][ T5935] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   49.517660][ T5935] netlink: 244 bytes leftover after parsing attributes in process `syz.0.18'.
[   49.676019][ T5898] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71
[   49.678437][ T5898] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[   49.684634][ T5898] usb 2-1: USB disconnect, device number 2
[   49.965911][ T5947] xt_CT: No such helper "pptp"
[   50.374463][ T5972] loop2: detected capacity change from 0 to 4096
[   50.383592][ T5972] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[   50.396509][ T5974] tipc: Started in network mode
[   50.398109][ T5974] tipc: Node identity ac1414aa, cluster identity 4711
[   50.406921][ T5974] tipc: Enabled bearer <udp:syz2>, priority 10
[   50.445289][   T33] audit: type=1800 audit(2000000000.590:4): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.34" name="file2" dev="overlay" ino=31 res=0 errno=0
[   50.681385][ T2201] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   50.686723][ T5984] loop2: detected capacity change from 0 to 32768
[   50.706459][ T5984] (syz.2.40,5984,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   50.719389][ T5984] (syz.2.40,5984,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[   50.740610][ T5984] JBD2: Ignoring recovery information on journal
[   50.752467][   T55] Bluetooth: hci2: command tx timeout
[   50.752705][ T5835] Bluetooth: hci1: command tx timeout
[   50.754460][   T55] Bluetooth: hci0: command tx timeout
[   50.778193][ T5984] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   50.807366][ T5984] (syz.2.40,5984,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[   50.832815][ T2201] usb 2-1: Using ep0 maxpacket: 16
[   50.837906][ T2201] usb 2-1: config 0 has an invalid interface number: 1 but max is 0
[   50.840388][ T2201] usb 2-1: config 0 has no interface number 0
[   50.876268][ T2201] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d
[   50.881366][ T2201] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   50.883861][ T2201] usb 2-1: Product: syz
[   50.885149][ T2201] usb 2-1: Manufacturer: syz
[   50.886599][ T2201] usb 2-1: SerialNumber: syz
[   50.904137][ T5836] ocfs2: Unmounting device (7,2) on (node local)
[   50.916004][ T2201] usb 2-1: config 0 descriptor??
[   50.933337][ T2201] gspca_main: spca1528-2.14.0 probing 04fc:1528
[   50.978775][ T5998] loop0: detected capacity change from 0 to 1024
[   51.133507][   T33] audit: type=1326 audit(2000000001.280:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.46" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde658e9a9 code=0x7ffc0000
[   51.147239][   T33] audit: type=1326 audit(2000000001.280:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.46" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde658e9a9 code=0x7ffc0000
[   51.158012][   T33] audit: type=1326 audit(2000000001.290:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.46" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fcde658e9a9 code=0x7ffc0000
[   51.167169][   T33] audit: type=1326 audit(2000000001.290:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.46" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde658e9a9 code=0x7ffc0000
[   51.174373][   T33] audit: type=1326 audit(2000000001.290:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.46" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde658e9a9 code=0x7ffc0000
[   51.180788][   T33] audit: type=1326 audit(2000000001.300:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.46" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fcde658e9a9 code=0x7ffc0000
[   51.191691][   T33] audit: type=1326 audit(2000000001.300:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6001 comm="syz.0.46" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fcde658e9a9 code=0x7ffc0000
[   51.333831][ T6016] netlink: 4 bytes leftover after parsing attributes in process `syz.2.54'.
[   51.437698][ T6024] loop0: detected capacity change from 0 to 2048
[   51.454646][ T6024] EXT4-fs (loop0): stripe (3) is not aligned with cluster size (16), stripe is disabled
[   51.482319][ T6024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   51.486131][ T6024] ext4 filesystem being mounted at /21/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[   51.516223][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   51.521620][ T5996] tipc: Node number set to 2886997162
[   51.583169][ T6035] netlink: 'syz.0.61': attribute type 11 has an invalid length.
[   51.585571][ T6035] netlink: 228 bytes leftover after parsing attributes in process `syz.0.61'.
[   51.785909][ T6051] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   51.865583][ T6055] netlink: 4 bytes leftover after parsing attributes in process `syz.0.71'.
[   51.888475][ T6041] loop2: detected capacity change from 0 to 32768
[   51.918434][ T6041] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   51.959813][ T6041] XFS (loop2): Ending clean mount
[   51.967315][ T6041] XFS (loop2): Quotacheck needed: Please wait.
[   52.037840][ T6041] XFS (loop2): Quotacheck: Done.
[   52.234892][ T5836] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   52.747144][ T2201] gspca_spca1528: reg_r err -71
[   52.749113][ T2201] spca1528 2-1:0.1: probe with driver spca1528 failed with error -71
[   52.763828][ T2201] usb 2-1: USB disconnect, device number 3
[   52.831525][ T5839] Bluetooth: hci0: command tx timeout
[   52.835436][ T5839] Bluetooth: hci1: command tx timeout
[   52.837302][ T5839] Bluetooth: hci2: command tx timeout
[   53.218416][ T6077] loop2: detected capacity change from 0 to 4096
[   53.222364][ T6077] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   53.264646][ T6081] program syz.0.79 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   53.329861][ T6087] netlink: 28 bytes leftover after parsing attributes in process `syz.0.82'.
[   53.940593][ T6107] loop0: detected capacity change from 0 to 4096
[   53.955153][ T6107] ntfs3(loop0): ino=0, mi_enum_attr
[   53.970377][ T6107] ntfs3(loop0): ino=0, mi_enum_attr
[   53.973072][ T6107] ntfs3(loop0): Failed to load $MFT (-22).
[   54.058733][ T6111] capability: warning: `syz.0.93' uses deprecated v2 capabilities in a way that may be insecure
[   54.250423][ T6123] sch_fq: defrate 0 ignored.
[   54.436693][ T6121] loop0: detected capacity change from 0 to 32768
[   54.446403][ T6121] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.98 (6121)
[   54.473656][ T6121] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   54.484122][ T6121] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[   54.493491][ T6121] BTRFS info (device loop0): using free-space-tree
[   54.625547][ T5837] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   54.911370][ T5898] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   54.912397][ T5839] Bluetooth: hci1: command tx timeout
[   54.915516][   T55] Bluetooth: hci2: command tx timeout
[   55.044352][ T6155] loop0: detected capacity change from 0 to 2048
[   55.056253][ T6155] NILFS (loop0): broken superblock, retrying with spare superblock (blocksize = 1024)
[   55.144626][ T6157] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   55.214948][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   55.218320][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   55.221821][ T5898] usb 2-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af
[   55.224645][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   55.229608][ T5898] usb 2-1: config 0 descriptor??
[   55.511338][ T5552] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   55.679744][ T5898] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0
[   55.683480][ T5898] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0
[   55.694899][ T5552] usb 3-1: Using ep0 maxpacket: 8
[   55.696592][ T5898] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0
[   55.700497][ T5898] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0
[   55.703463][ T5898] playstation 0003:054C:0DF2.0001: unknown main item tag 0x0
[   55.706472][ T5552] usb 3-1: config 0 has an invalid interface number: 31 but max is 0
[   55.712992][ T5552] usb 3-1: config 0 has no interface number 0
[   55.717341][ T5898] playstation 0003:054C:0DF2.0001: hidraw0: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.1-1/input0
[   55.725390][ T5552] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   55.728224][ T5552] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   55.730668][ T5552] usb 3-1: Product: syz
[   55.732787][ T5552] usb 3-1: Manufacturer: syz
[   55.734215][ T5552] usb 3-1: SerialNumber: syz
[   55.745605][ T5552] usb 3-1: config 0 descriptor??
[   55.937569][ T6167] loop0: detected capacity change from 0 to 32768
[   55.943037][ T6167] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.109 (6167)
[   55.957515][ T6167] BTRFS info (device loop0): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[   55.961080][ T6167] BTRFS info (device loop0): using crc32c (crc32c-generic) checksum algorithm
[   55.961445][ T5552] usb 3-1: Found UVC 0.04 device syz (046d:08c3)
[   55.966290][ T5552] usb 3-1: No valid video chain found.
[   55.969272][ T6167] BTRFS info (device loop0): using free-space-tree
[   56.048500][ T5898] playstation 0003:054C:0DF2.0001: Failed to retrieve feature with reportID 32: -71
[   56.056820][ T5898] playstation 0003:054C:0DF2.0001: Failed to retrieve DualSense firmware info: -71
[   56.068418][ T5898] playstation 0003:054C:0DF2.0001: Failed to get firmware info from DualSense
[   56.071181][ T5898] playstation 0003:054C:0DF2.0001: Failed to create dualsense.
[   56.083502][ T5898] playstation 0003:054C:0DF2.0001: probe with driver playstation failed with error -71
[   56.089220][ T5898] usb 2-1: USB disconnect, device number 4
[   56.096008][ T5837] BTRFS info (device loop0): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[   56.166020][    T9] usb 3-1: USB disconnect, device number 2
[   56.452489][ T6191] loop0: detected capacity change from 0 to 40427
[   56.462778][ T6191] F2FS-fs (loop0): Invalid segment/section count (24 != 1 * 1)
[   56.466251][ T6191] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   56.472514][ T6191] F2FS-fs (loop0): invalid crc value
[   56.515385][ T6191] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   56.517812][ T6191] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   56.536322][ T6191] syz.0.113: attempt to access beyond end of device
[   56.536322][ T6191] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   56.542986][ T6191] CPU: 1 UID: 0 PID: 6191 Comm: syz.0.113 Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[   56.542999][ T6191] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   56.543006][ T6191] Call Trace:
[   56.543010][ T6191]  <TASK>
[   56.543028][ T6191]  dump_stack_lvl+0x189/0x250
[   56.543046][ T6191]  ? __pfx_dump_stack_lvl+0x10/0x10
[   56.543054][ T6191]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   56.543064][ T6191]  ? __pfx_queue_work_on+0x10/0x10
[   56.543075][ T6191]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   56.543082][ T6191]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   56.543091][ T6191]  ? f2fs_hw_is_readonly+0x39b/0x470
[   56.543102][ T6191]  f2fs_handle_critical_error+0x37c/0x540
[   56.543112][ T6191]  f2fs_write_end_io+0x495/0x810
[   56.543122][ T6191]  ? blkg_put+0x22/0x240
[   56.543142][ T6191]  __submit_merged_bio+0x27a/0x6a0
[   56.543152][ T6191]  __submit_merged_write_cond+0x255/0x530
[   56.543169][ T6191]  f2fs_write_data_pages+0x261d/0x3000
[   56.543192][ T6191]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   56.543233][ T6191]  ? __lock_acquire+0xab9/0xd20
[   56.543246][ T6191]  ? do_raw_spin_lock+0x121/0x290
[   56.543262][ T6191]  ? do_raw_spin_unlock+0x4d/0x240
[   56.543273][ T6191]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   56.543282][ T6191]  do_writepages+0x32e/0x550
[   56.543299][ T6191]  ? do_raw_spin_unlock+0x4d/0x240
[   56.543311][ T6191]  filemap_fdatawrite+0x191/0x230
[   56.543323][ T6191]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   56.543354][ T6191]  ? do_raw_spin_unlock+0x4d/0x240
[   56.543366][ T6191]  f2fs_sync_dirty_inodes+0x31f/0x830
[   56.543382][ T6191]  f2fs_write_checkpoint+0x94a/0x1de0
[   56.543402][ T6191]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   56.543432][ T6191]  ? kill_f2fs_super+0x298/0x6c0
[   56.543445][ T6191]  kill_f2fs_super+0x2c3/0x6c0
[   56.543457][ T6191]  ? __pfx_kill_f2fs_super+0x10/0x10
[   56.543466][ T6191]  ? radix_tree_delete_item+0x2b6/0x400
[   56.543478][ T6191]  ? shrinker_free+0x2ce/0x3e0
[   56.543487][ T6191]  deactivate_locked_super+0xbc/0x130
[   56.543499][ T6191]  cleanup_mnt+0x425/0x4c0
[   56.543509][ T6191]  ? lockdep_hardirqs_on+0x9c/0x150
[   56.543519][ T6191]  task_work_run+0x1d4/0x260
[   56.543533][ T6191]  ? __pfx_task_work_run+0x10/0x10
[   56.543545][ T6191]  ? kmem_cache_free+0x18f/0x400
[   56.543560][ T6191]  do_exit+0x6b5/0x22e0
[   56.543577][ T6191]  ? do_raw_spin_lock+0x121/0x290
[   56.543589][ T6191]  ? __pfx_do_exit+0x10/0x10
[   56.543607][ T6191]  do_group_exit+0x21c/0x2d0
[   56.543618][ T6191]  ? lockdep_hardirqs_on+0x9c/0x150
[   56.543627][ T6191]  get_signal+0x1286/0x1340
[   56.543646][ T6191]  arch_do_signal_or_restart+0x9a/0x750
[   56.543663][ T6191]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[   56.543682][ T6191]  ? exit_to_user_mode_loop+0x40/0x110
[   56.543693][ T6191]  exit_to_user_mode_loop+0x75/0x110
[   56.543701][ T6191]  do_syscall_64+0x2bd/0x3b0
[   56.543737][ T6191]  ? lockdep_hardirqs_on+0x9c/0x150
[   56.543745][ T6191]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.543753][ T6191]  ? exc_page_fault+0x9f/0xf0
[   56.543762][ T6191]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   56.543769][ T6191] RIP: 0033:0x7fcde658e9a9
[   56.543777][ T6191] Code: Unable to access opcode bytes at 0x7fcde658e97f.
[   56.543781][ T6191] RSP: 002b:00007fcde73e00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[   56.543791][ T6191] RAX: 0000000000000001 RBX: 00007fcde67b5fa8 RCX: 00007fcde658e9a9
[   56.543797][ T6191] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fcde67b5fac
[   56.543801][ T6191] RBP: 00007fcde67b5fa0 R08: 7fffffffffffffff R09: 0000000000000000
[   56.543806][ T6191] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcde67b5fac
[   56.543811][ T6191] R13: 0000000000000000 R14: 00007fffe72dd460 R15: 00007fffe72dd548
[   56.543823][ T6191]  </TASK>
[   56.543827][ T6191] F2FS-fs (loop0): Stopped filesystem due to reason: 3
[   56.728167][ T6199] loop1: detected capacity change from 0 to 32768
[   56.859884][ T6199] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   56.859900][ T6199]   allowing incompatible features above 0.0: (unknown version)
[   56.859905][ T6199]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   56.874492][ T6199] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   56.877304][ T6199] bcachefs (loop1): initializing new filesystem
[   56.886255][ T6199] bcachefs (loop1): going read-write
[   56.903309][ T6199] bcachefs (loop1): marking superblocks
[   56.911998][ T6199] bcachefs (loop1): initializing freespace
[   56.916237][ T6199] bcachefs (loop1): done initializing freespace
[   56.919759][ T6199] bcachefs (loop1): reading snapshots table
[   56.921657][ T6199] bcachefs (loop1): reading snapshots done
[   56.940899][ T6199] bcachefs (loop1): done starting filesystem
[   57.739182][ T6244] loop2: detected capacity change from 0 to 64
[   57.749409][ T6244] BFS-fs: bfs_fill_super(): loop2 is unclean, continuing
[   58.007701][ T6199] syz.1.115 (6199) used greatest stack depth: 16808 bytes left
[   58.018437][ T5832] bcachefs (loop1): shutting down
[   58.021379][ T5832] bcachefs (loop1): going read-only
[   58.023289][ T5832] bcachefs (loop1): finished waiting for writes to stop
[   58.027318][ T5832] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3
[   58.052660][ T5832] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 4
[   58.058261][ T5832] bcachefs (loop1): clean shutdown complete, journal seq 5
[   58.061926][ T5832] bcachefs (loop1): marking filesystem clean
[   58.082454][ T5832] bcachefs (loop1): shutdown complete
[   58.092617][ T6253] netlink: 'syz.2.132': attribute type 29 has an invalid length.
[   58.137051][ T6255] vim2m vim2m.0: vidioc_s_fmt queue busy
[   58.345828][ T6265] netlink: 'syz.2.138': attribute type 3 has an invalid length.
[   58.399719][ T6267] loop2: detected capacity change from 0 to 4096
[   58.427664][ T6267] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   58.440182][   T33] kauditd_printk_skb: 1 callbacks suppressed
[   58.440192][   T33] audit: type=1800 audit(2000000008.580:13): pid=6267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.139" name="bus" dev="loop2" ino=18 res=0 errno=0
[   58.481755][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.523980][ T6273] netlink: 8 bytes leftover after parsing attributes in process `syz.0.142'.
[   58.758204][ T6293] warning: `syz.0.149' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.823881][ T6301] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   58.833177][ T6301] No such timeout policy "syz0"
[   58.963809][ T6311] netlink: 276 bytes leftover after parsing attributes in process `syz.0.158'.
[   59.041867][ T5898] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   59.191369][ T5898] usb 3-1: Using ep0 maxpacket: 8
[   59.196642][ T5898] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   59.199784][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89
[   59.203324][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7
[   59.206750][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024
[   59.210122][ T5898] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[   59.213362][ T5898] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[   59.219613][ T5898] usb 3-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8
[   59.225501][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.231290][ T5898] usb 3-1: Product: syz
[   59.232601][ T5898] usb 3-1: Manufacturer: syz
[   59.234053][ T5898] usb 3-1: SerialNumber: syz
[   59.252690][ T5898] usb 3-1: config 0 descriptor??
[   59.254838][ T6299] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   59.291390][ T5552] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   59.397074][ T5885] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   59.462649][ T5552] usb 1-1: Using ep0 maxpacket: 16
[   59.468443][ T5552] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   59.472060][ T5552] usb 1-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0
[   59.475062][ T5552] usb 1-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28
[   59.479029][ T5552] usb 1-1: config 0 interface 0 has no altsetting 0
[   59.481098][ T5552] usb 1-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[   59.483948][ T5552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   59.491693][ T5552] usb 1-1: config 0 descriptor??
[   59.551334][ T5885] usb 2-1: Using ep0 maxpacket: 8
[   59.554512][ T5885] usb 2-1: config 0 has an invalid interface number: 204 but max is 0
[   59.557078][ T5885] usb 2-1: config 0 has no interface number 0
[   59.561079][ T5885] usb 2-1: New USB device found, idVendor=0af7, idProduct=0101, bcdDevice=9f.8c
[   59.563949][ T5885] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.566438][ T5885] usb 2-1: Product: syz
[   59.567786][ T5885] usb 2-1: Manufacturer: syz
[   59.569273][ T5885] usb 2-1: SerialNumber: syz
[   59.574461][ T5885] usb 2-1: config 0 descriptor??
[   59.579284][ T5885] flexcop_usb: set interface failed.
[   59.581038][ T5885] b2c2_flexcop_usb 2-1:0.204: probe with driver b2c2_flexcop_usb failed with error -22
[   59.782937][ T5885] usb 2-1: USB disconnect, device number 5
[   59.915039][ T5552] hid (null): report_id 45792 is invalid
[   59.916841][ T5552] hid (null): bogus close delimiter
[   59.918452][ T5552] hid (null): unknown global tag 0xc
[   59.920144][ T5552] hid (null): invalid report_size 491580735
[   59.998022][ T6324] loop2: detected capacity change from 0 to 2048
[   60.002274][ T6324] NILFS (loop2): broken superblock, retrying with spare superblock (blocksize = 1024)
[   60.010690][ T6325] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   60.113595][    T9] usb 1-1: USB disconnect, device number 2
[   60.561323][ T5898] rc_core: IR keymap rc-snapstream-firefly not found
[   60.566247][ T5898] Registered IR keymap rc-empty
[   60.570612][ T5898] rc rc0: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[   60.575173][ T5898] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input5
[   60.590321][ T5898] input: syz syz mouse as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6
[   60.610004][ T5898] usb 3-1: USB disconnect, device number 3
[   60.611950][    C1] ati_remote 3-1:0.0: ati_remote_irq_in: usb_submit_urb()=-19
[   60.625989][ T6343] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.170'.
[   60.629204][ T6342] netlink: 16402 bytes leftover after parsing attributes in process `syz.1.170'.
[   60.711404][ T6345] loop0: detected capacity change from 0 to 1024
[   60.717999][ T6345] =======================================================
[   60.717999][ T6345] WARNING: The mand mount option has been deprecated and
[   60.717999][ T6345]          and is ignored by this kernel. Remove the mand
[   60.717999][ T6345]          option from the mount to silence this warning.
[   60.717999][ T6345] =======================================================
[   60.779852][ T6345] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   60.789465][ T6345] ext4 filesystem being mounted at /77/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   60.825784][ T6345] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 1 with error 28
[   60.829902][ T6345] EXT4-fs (loop0): This should not happen!! Data will be lost
[   60.829902][ T6345] 
[   60.834564][ T6345] EXT4-fs (loop0): Total free blocks count 0
[   60.836562][ T6345] EXT4-fs (loop0): Free/Dirty block details
[   60.838517][ T6345] EXT4-fs (loop0): free_blocks=0
[   60.840161][ T6345] EXT4-fs (loop0): dirty_blocks=0
[   60.843214][ T6345] EXT4-fs (loop0): Block reservation details
[   60.845227][ T6345] EXT4-fs (loop0): i_reserved_data_blocks=0
[   60.927077][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   60.977074][ T6354] loop2: detected capacity change from 0 to 128
[   60.999236][ T6356] netlink: 12 bytes leftover after parsing attributes in process `syz.0.174'.
[   61.062457][ T6360] netlink: 168 bytes leftover after parsing attributes in process `syz.0.177'.
[   61.293345][ T6377] loop2: detected capacity change from 0 to 4096
[   61.303585][ T6377] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   61.319553][ T6377] ntfs3(loop2): ino=1a, mi_enum_attr
[   61.321359][ T6377] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   61.491307][    T9] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[   61.641402][    T9] usb 2-1: Using ep0 maxpacket: 32
[   61.645956][    T9] usb 2-1: config 186 has an invalid interface number: 85 but max is 0
[   61.648418][    T9] usb 2-1: config 186 has no interface number 0
[   61.650316][    T9] usb 2-1: config 186 interface 85 has no altsetting 0
[   61.654460][    T9] usb 2-1: New USB device found, idVendor=04b4, idProduct=931d, bcdDevice=bb.43
[   61.657239][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.659707][    T9] usb 2-1: Product: syz
[   61.661023][    T9] usb 2-1: Manufacturer: syz
[   61.663573][    T9] usb 2-1: SerialNumber: syz
[   61.691334][   T10] usb 3-1: new full-speed USB device number 4 using dummy_hcd
[   61.846263][   T10] usb 3-1: unable to get BOS descriptor or descriptor too short
[   61.849257][   T10] usb 3-1: not running at top speed; connect to a high speed hub
[   61.852837][   T10] usb 3-1: config 4 has an invalid interface number: 32 but max is 0
[   61.855421][   T10] usb 3-1: config 4 has no interface number 0
[   61.859676][   T10] usb 3-1: New USB device found, idVendor=17dc, idProduct=0202, bcdDevice=f1.50
[   61.864029][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.866535][   T10] usb 3-1: Product: syz
[   61.871281][   T10] usb 3-1: Manufacturer: syz
[   61.875095][   T10] usb 3-1: SerialNumber: syz
[   61.887663][    T9] usb 2-1: can't set first interface for hiFace device.
[   61.889906][    T9] snd-usb-hiface 2-1:186.85: probe with driver snd-usb-hiface failed with error -5
[   61.899424][    T9] usb 2-1: USB disconnect, device number 6
[   62.117972][   T10] usb 3-1: Found UVC 0.02 device syz (17dc:0202)
[   62.119944][   T10] usb 3-1: No valid video chain found.
[   62.124151][   T10] usb 3-1: USB disconnect, device number 4
[   62.578450][ T6397] loop1: detected capacity change from 0 to 8
[   62.589369][ T6397] SQUASHFS error: Unknown inode type 0 in squashfs_iget!
[   62.944896][ T6423] loop2: detected capacity change from 0 to 128
[   62.950451][ T6423] hpfs: hpfs_map_sector(): read error
[   62.955147][ T6423] hpfs: filesystem error: can't load hotfix map; already mounted read-only
[   62.960442][ T6423] hpfs: hpfs_map_sector(): read error
[   63.124682][ T6434] loop1: detected capacity change from 0 to 8
[   63.181951][ T6422] loop0: detected capacity change from 0 to 32768
[   63.204027][ T6422] JBD2: Ignoring recovery information on journal
[   63.229520][ T6422] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   63.278900][ T6440] loop1: detected capacity change from 0 to 1024
[   63.282693][ T5837] ocfs2: Unmounting device (7,0) on (node local)
[   63.311384][ T5552] usb 3-1: new full-speed USB device number 5 using dummy_hcd
[   63.343455][   T33] audit: type=1800 audit(2000000013.490:14): pid=6440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.213" name="file1" dev="loop1" ino=20 res=0 errno=0
[   63.370293][ T6442] sctp: [Deprecated]: syz.0.214 (pid 6442) Use of int in max_burst socket option.
[   63.370293][ T6442] Use struct sctp_assoc_value instead
[   63.399961][ T6444] netlink: 'syz.0.216': attribute type 1 has an invalid length.
[   63.408407][ T6444] netlink: 'syz.0.216': attribute type 1 has an invalid length.
[   63.476872][ T5552] usb 3-1: config 0 has an invalid interface number: 154 but max is 0
[   63.479460][ T5552] usb 3-1: config 0 has no interface number 0
[   63.484896][ T5552] usb 3-1: New USB device found, idVendor=041e, idProduct=3f19, bcdDevice=fa.eb
[   63.488104][ T6451] loop0: detected capacity change from 0 to 128
[   63.490120][ T5552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.497902][ T6451] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   63.503788][ T5552] usb 3-1: config 0 descriptor??
[   63.577723][   T33] audit: type=1804 audit(2000000013.720:15): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.219" name="/newroot/88/file0/bus" dev="loop0" ino=1048593 res=1 errno=0
[   63.591066][   T33] audit: type=1800 audit(2000000013.730:16): pid=6451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.219" name="bus" dev="loop0" ino=1048593 res=0 errno=0
[   63.661741][   T40] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   63.720915][ T5552] usb 3-1: string descriptor 0 read error: -71
[   63.750123][ T5552] usb 3-1: unknown interface protocol 0xa3, assuming v1
[   63.753197][ T5552] usb 3-1: cannot find UAC_HEADER
[   63.900832][ T5552] snd-usb-audio 3-1:0.154: probe with driver snd-usb-audio failed with error -22
[   63.915445][ T5552] usb 3-1: USB disconnect, device number 5
[   64.678737][ T6479] syz.1.228: attempt to access beyond end of device
[   64.678737][ T6479] nbd1: rw=6144, sector=128, nr_sectors = 8 limit=0
[   64.687361][ T6479] gfs2: error -5 reading superblock
[   64.750310][ T6479] qnx4: no qnx4 filesystem (no root dir).
[   65.404794][ T6489] loop0: detected capacity change from 0 to 128
[   65.555959][ T6489] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   65.583349][ T6489] ext4 filesystem being mounted at /96/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   65.806661][ T5837] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   66.442328][ T6506] loop1: detected capacity change from 0 to 4096
[   66.455947][ T6506] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   66.614611][ T6512] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   66.621713][ T6512] syzkaller0: entered promiscuous mode
[   66.623467][ T6512] syzkaller0: entered allmulticast mode
[   66.643980][ T6512] tipc: Resetting bearer <eth:syzkaller0>
[   66.648191][ T6511] tipc: Resetting bearer <eth:syzkaller0>
[   66.656904][ T6511] tipc: Disabling bearer <eth:syzkaller0>
[   66.662260][ T6506] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[   66.703356][   T40] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[   66.749962][ T5832] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[   66.774135][ T5832] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   66.776478][ T5832] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[   66.778580][   T53] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[   67.178820][ T6514] loop2: detected capacity change from 0 to 32768
[   67.422461][ T6536] loop1: detected capacity change from 0 to 1024
[   67.451631][ T6540] loop2: detected capacity change from 0 to 256
[   67.466459][ T6540] FAT-fs (loop2): Directory bread(block 64) failed
[   67.468493][ T6540] FAT-fs (loop2): Directory bread(block 65) failed
[   67.470433][ T6540] FAT-fs (loop2): Directory bread(block 66) failed
[   67.476199][ T6540] FAT-fs (loop2): Directory bread(block 67) failed
[   67.480875][ T6540] FAT-fs (loop2): Directory bread(block 68) failed
[   67.488417][ T6540] FAT-fs (loop2): Directory bread(block 69) failed
[   67.490479][ T6540] FAT-fs (loop2): Directory bread(block 70) failed
[   67.493090][ T6540] FAT-fs (loop2): Directory bread(block 71) failed
[   67.495115][ T6540] FAT-fs (loop2): Directory bread(block 72) failed
[   67.497009][ T6540] FAT-fs (loop2): Directory bread(block 73) failed
[   67.508354][   T53] hfsplus: b-tree write err: -5, ino 4
[   67.588141][ T6543] overlayfs: empty lowerdir
[   67.864113][ T6559] loop2: detected capacity change from 0 to 128
[   67.866778][ T6559] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[   67.870689][ T6559] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[   67.943370][ T6563] loop1: detected capacity change from 0 to 512
[   67.959416][ T6565] netlink: 44 bytes leftover after parsing attributes in process `syz.2.262'.
[   67.967459][ T6565] netlink: 43 bytes leftover after parsing attributes in process `syz.2.262'.
[   67.970202][ T6565] netlink: 'syz.2.262': attribute type 6 has an invalid length.
[   67.977560][ T6565] netlink: 'syz.2.262': attribute type 5 has an invalid length.
[   67.979933][ T6565] netlink: 43 bytes leftover after parsing attributes in process `syz.2.262'.
[   68.009312][ T6563] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   68.014624][ T6563] ext4 filesystem being mounted at /52/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   68.026063][ T6569] loop2: detected capacity change from 0 to 512
[   68.029639][ T6569] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[   68.042024][ T5552] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   68.046287][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.049828][ T6569] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ce01c, mo2=0002]
[   68.054754][ T6569] System zones: 1-12
[   68.056136][ T6569] EXT4-fs (loop2): orphan cleanup on readonly fs
[   68.058579][ T6569] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.263: invalid indirect mapped block 12 (level 1)
[   68.081747][ T6569] EXT4-fs error (device loop2): ext4_free_branches:1023: inode #11: comm syz.2.263: invalid indirect mapped block 2 (level 2)
[   68.092843][ T6569] EXT4-fs (loop2): 1 truncate cleaned up
[   68.095717][ T6569] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: writeback.
[   68.126106][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[   68.191611][ T5552] usb 1-1: Using ep0 maxpacket: 16
[   68.194681][ T5552] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   68.197155][ T5552] usb 1-1: config 0 has no interface number 0
[   68.199062][ T5552] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   68.205123][ T5552] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   68.208118][ T5552] usb 1-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[   68.210850][ T5552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   68.217304][ T5552] usb 1-1: config 0 descriptor??
[   68.998709][ T5552] uclogic 0003:28BD:0071.0003: pen parameters not found
[   69.000925][ T5552] uclogic 0003:28BD:0071.0003: interface is invalid, ignoring
[   69.203455][   T10] usb 1-1: USB disconnect, device number 3
[   70.069117][ T6604] loop0: detected capacity change from 0 to 4096
[   70.276909][ T6608] loop2: detected capacity change from 0 to 32768
[   70.276947][ T6618] loop0: detected capacity change from 0 to 512
[   70.293869][ T6618] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #15: comm syz.0.285: casefold flag without casefold feature
[   70.306937][ T6618] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.285: couldn't read orphan inode 15 (err -117)
[   70.326356][ T6622] erspan0: entered promiscuous mode
[   70.330494][ T6618] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   70.333408][ T2187] JFS: metapage_get_blocks failed
[   70.335849][ T2187] JFS: metapage_get_blocks failed
[   70.337507][ T2187] JFS: metapage_get_blocks failed
[   70.337930][ T6618] EXT4-fs warning (device loop0): ext4_empty_dir:3086: inode #2: comm syz.0.285: directory missing '.'
[   70.345258][  T116] blkno = 50030, nblocks = 1
[   70.346714][  T116] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[   70.346714][  T116] 
[   70.351679][  T116] ERROR: (device loop2): remounting filesystem as read-only
[   70.359561][  T116] blkno = 5002c, nblocks = 4
[   70.361055][  T116] ERROR: (device loop2): dbUpdatePMap: blocks are outside the map
[   70.361055][  T116] 
[   70.375350][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.623195][ T6608] JFS: metapage_get_blocks failed
[   70.630108][ T6608] JFS: metapage_get_blocks failed
[   70.845979][ T1360] ieee802154 phy0 wpan0: encryption failed: -22
[   70.848174][ T1360] ieee802154 phy1 wpan1: encryption failed: -22
[   70.959531][ T6639] loop1: detected capacity change from 0 to 32768
[   70.974766][ T6639] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.293 (6639)
[   70.993918][ T6639] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   70.997121][ T6639] BTRFS info (device loop1): using crc32c (crc32c-generic) checksum algorithm
[   70.999865][ T6639] BTRFS info (device loop1): disk space caching is enabled
[   71.004189][ T6639] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   71.027147][ T6639] BTRFS info (device loop1): rebuilding free space tree
[   71.039619][ T6639] BTRFS info (device loop1): disabling free space tree
[   71.043149][ T6639] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   71.046094][ T6639] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   71.068896][   T33] audit: type=1800 audit(2000000021.210:17): pid=6639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.293" name="file1" dev="loop1" ino=263 res=0 errno=0
[   71.679104][ T6681] loop2: detected capacity change from 0 to 256
[   71.738901][ T5832] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[   72.013523][ T6701] futex_wake_op: syz.2.314 tries to shift op by 32; fix this program
[   72.183513][ T6713] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1
[   72.219605][ T6706] loop1: detected capacity change from 0 to 40427
[   72.222740][ T6706] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   72.223521][ T5552] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   72.225047][ T6706] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   72.232360][ T6706] F2FS-fs (loop1): invalid crc value
[   72.273034][ T6706] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   72.275421][ T6706] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   72.321402][   T24] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   72.671323][   T24] usb 3-1: Using ep0 maxpacket: 32
[   72.674529][   T24] usb 3-1: config 0 has an invalid interface number: 197 but max is 0
[   72.677182][   T24] usb 3-1: config 0 has no interface number 0
[   72.679086][   T24] usb 3-1: config 0 interface 197 has no altsetting 0
[   72.681455][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   72.683072][   T24] usb 3-1: New USB device found, idVendor=102c, idProduct=6151, bcdDevice=32.65
[   72.687149][   T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.691814][   T24] usb 3-1: Product: syz
[   72.693168][   T24] usb 3-1: Manufacturer: syz
[   72.695723][   T24] usb 3-1: SerialNumber: syz
[   72.699940][   T24] usb 3-1: config 0 descriptor??
[   72.704711][   T24] gspca_main: etoms-2.14.0 probing 102c:6151
[   72.830002][ T6729] loop0: detected capacity change from 0 to 32768
[   72.843268][ T6729] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[   72.851034][ T6729] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   72.890503][ T5837] ocfs2: Unmounting device (7,0) on (node local)
[   73.008174][   T24] usb 3-1: USB disconnect, device number 6
[   73.231593][ T5885] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   73.359650][ T6739] loop1: detected capacity change from 0 to 32768
[   73.366851][ T6739] BTRFS error: invalid value 0 for thread_pool
[   73.401386][ T5552] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   73.476719][ T6745] netlink: 'syz.1.330': attribute type 29 has an invalid length.
[   73.488379][ T6745] netlink: 'syz.1.330': attribute type 29 has an invalid length.
[   73.499436][ T6745] netlink: 500 bytes leftover after parsing attributes in process `syz.1.330'.
[   73.577477][ T5552] usb 1-1: config 0 has no interfaces?
[   73.584007][ T5552] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b
[   73.587549][ T5552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.590268][ T5552] usb 1-1: Product: syz
[   73.598690][ T5552] usb 1-1: Manufacturer: syz
[   73.600238][ T5552] usb 1-1: SerialNumber: syz
[   73.614058][ T5552] usb 1-1: config 0 descriptor??
[   73.729884][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   73.734136][ T6761] loop1: detected capacity change from 0 to 4096
[   73.734499][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   73.737316][ T6761] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   73.772159][ T6761] ntfs3(loop1): ino=1a, mi_enum_attr
[   73.784158][ T6761] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[   73.788599][ T6761] ntfs3(loop1): Failed to initialize $Extend/$ObjId.
[   73.842823][ T5885] usb 1-1: USB disconnect, device number 4
[   73.928563][ T6770] loop1: detected capacity change from 0 to 512
[   74.174405][ T6770] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   74.178687][ T6770] ext4 filesystem being mounted at /79/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   74.687856][   T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   74.827646][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   74.911380][ T6790] loop0: detected capacity change from 0 to 256
[   74.919630][ T6790] exfat: Deprecated parameter 'utf8'
[   74.922231][ T6790] exfat: Deprecated parameter 'namecase'
[   74.924929][ T6790] exfat: Deprecated parameter 'namecase'
[   74.926893][ T6790] exfat: Deprecated parameter 'utf8'
[   74.939081][ T6790] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0xc9bffc20, utbl_chksum : 0xe619d30d)
[   74.957048][ T6790] exFAT-fs (loop0): start_clu is invalid cluster(0x400)
[   75.110198][ T2201] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   75.120277][ T6800] loop2: detected capacity change from 0 to 1024
[   75.123342][ T2201] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   75.128058][ T6800] EXT4-fs: Ignoring removed nomblk_io_submit option
[   75.134197][ T6800] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[   75.147736][ T6800] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   75.156649][ T6806] Bluetooth: MGMT ver 1.23
[   75.157325][ T2201] kernel write not supported for file /uhid (pid: 2201 comm: kworker/0:2)
[   75.194086][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.243776][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'.
[   75.246444][ T6814] netlink: 8 bytes leftover after parsing attributes in process `syz.0.354'.
[   75.308355][ T6820] loop0: detected capacity change from 0 to 128
[   75.320335][ T6820] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256
[   75.811044][ T6850] loop0: detected capacity change from 0 to 32768
[   75.818470][ T6850] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.375 (6850)
[   75.827167][ T6850] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   75.830406][ T6850] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm
[   75.861587][ T6850] BTRFS info (device loop0): disk space caching is enabled
[   75.863777][ T6850] BTRFS warning (device loop0): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[   76.063095][ T6850] BTRFS info (device loop0): rebuilding free space tree
[   76.075786][ T6850] BTRFS info (device loop0): disabling free space tree
[   76.078005][ T6850] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   76.084334][ T6852] loop1: detected capacity change from 0 to 32768
[   76.090177][ T6850] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   76.129283][   T29] read_mapping_page failed!
[   76.130871][   T29] ERROR: (device loop1): txCommit: 
[   76.130871][   T29] 
[   76.137723][   T29] jfs_write_inode: jfs_commit_inode failed!
[   76.153198][ T6878] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   76.157882][ T6878] netlink: 4 bytes leftover after parsing attributes in process `syz.2.381'.
[   76.161190][ T6878] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   76.196313][ T5837] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[   76.218121][ T6878] batman_adv: batadv0: Removing interface: batadv_slave_1
[   76.561380][ T6896] netlink: 5 bytes leftover after parsing attributes in process `syz.2.389'.
[   76.568992][ T6896] 0{X: renamed from macvtap0 (while UP)
[   76.572585][ T6886] loop0: detected capacity change from 0 to 32768
[   76.575977][ T6896] 0{X: entered allmulticast mode
[   76.577262][ T6886] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.384 (6886)
[   76.585677][ T6896] veth0_macvtap: entered allmulticast mode
[   76.587938][ T6886] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   76.591721][ T6886] BTRFS info (device loop0): using sha256 (sha256-x86_64) checksum algorithm
[   76.594222][ T6896] A link change request failed with some changes committed already. Interface 30{X may have been left with an inconsistent configuration, please check.
[   76.634745][ T6886] BTRFS info (device loop0): rebuilding free space tree
[   76.656820][ T6886] BTRFS info (device loop0): disabling free space tree
[   76.660253][ T6886] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   76.665692][ T6886] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   76.754129][ T5837] BTRFS info (device loop0): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   76.754622][ T6917] loop2: detected capacity change from 0 to 16
[   76.771136][ T6917] erofs (device loop2): mounted with root inode @ nid 36.
[   76.799007][ T6917] erofs (device loop2): bogus lookback distance 1388 @ lcn 42 of nid 36
[   76.821702][ T6917] erofs (device loop2): read error -117 @ 43 of nid 36
[   77.471538][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   77.704675][ T6944] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   77.982472][ T6954] process 'syz.1.403' launched '/dev/fd/3' with NULL argv: empty string added
[   78.720967][ T6970] loop2: detected capacity change from 0 to 32768
[   78.740235][ T6970] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[   78.746583][ T6970] OCFS2: ERROR (device loop2): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list
[   78.752526][ T6970] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted.
[   78.755545][ T6970] OCFS2: File system is now read-only.
[   78.757233][ T6970] (syz.2.410,6970,1):ocfs2_find_leaf:1948 ERROR: status = -30
[   78.759475][ T6970] (syz.2.410,6970,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30
[   78.762823][ T6970] (syz.2.410,6970,1):ocfs2_get_clusters:634 ERROR: status = -30
[   78.765139][ T6970] (syz.2.410,6970,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30
[   78.767780][ T6970] (syz.2.410,6970,1):ocfs2_read_virt_blocks:997 ERROR: status = -30
[   78.770449][ T6970] (syz.2.410,6970,1):ocfs2_read_dir_block:511 ERROR: status = -30
[   78.789192][ T5836] ocfs2: Unmounting device (7,2) on (node local)
[   78.810884][ T6974] netlink: 4 bytes leftover after parsing attributes in process `syz.2.411'.
[   78.820194][ T6974] ipvlan2: entered promiscuous mode
[   78.986896][ T6980] netlink: 4 bytes leftover after parsing attributes in process `syz.2.414'.
[   78.996878][   T33] audit: type=1326 audit(2000000029.140:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.0.404" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde658e9a9 code=0x7fc00000
[   79.010658][   T33] audit: type=1326 audit(2000000029.150:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.0.404" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fcde658e9a9 code=0x7fc00000
[   79.018581][   T33] audit: type=1326 audit(2000000029.150:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.0.404" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde658e9a9 code=0x7fc00000
[   79.027975][   T33] audit: type=1326 audit(2000000029.150:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.0.404" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde658e9a9 code=0x7fc00000
[   79.034890][   T33] audit: type=1326 audit(2000000029.150:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.0.404" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde658e9a9 code=0x7fc00000
[   79.042298][   T33] audit: type=1326 audit(2000000029.150:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.0.404" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde658e9a9 code=0x7fc00000
[   79.048753][   T33] audit: type=1326 audit(2000000029.150:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.0.404" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde658e9a9 code=0x7fc00000
[   79.057349][   T33] audit: type=1326 audit(2000000029.150:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.0.404" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde658e9a9 code=0x7fc00000
[   79.067878][   T33] audit: type=1326 audit(2000000029.150:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.0.404" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde658e9a9 code=0x7fc00000
[   79.079722][   T33] audit: type=1326 audit(2000000029.150:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6955 comm="syz.0.404" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcde658e9a9 code=0x7fc00000
[   79.090124][ T6984] syz.2.416 uses obsolete (PF_INET,SOCK_PACKET)
[   79.346948][ T6998] tmpfs: Bad value for 'mpol'
[   79.403388][ T7002] loop1: detected capacity change from 0 to 4096
[   79.414973][ T7002] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[   79.428334][ T7002] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[   79.451317][   T10] usb 1-1: new full-speed USB device number 5 using dummy_hcd
[   79.601354][ T5885] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   79.614330][   T10] usb 1-1: config 0 has an invalid interface number: 251 but max is 0
[   79.616950][   T10] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   79.619975][   T10] usb 1-1: config 0 has no interface number 0
[   79.625540][   T10] usb 1-1: config 0 interface 251 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   79.632569][   T10] usb 1-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[   79.635341][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   79.638025][   T10] usb 1-1: Product: syz
[   79.649213][   T10] usb 1-1: Manufacturer: syz
[   79.650677][   T10] usb 1-1: SerialNumber: syz
[   79.662356][   T10] usb 1-1: config 0 descriptor??
[   79.670685][   T10] asix 1-1:0.251: probe with driver asix failed with error -22
[   79.771513][ T7014] loop1: detected capacity change from 0 to 32768
[   79.865381][ T7014] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[   79.865397][ T7014]   allowing incompatible features above 0.0: (unknown version)
[   79.865402][ T7014]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   79.877599][   T10] usb 1-1: USB disconnect, device number 5
[   79.878879][ T7014] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   79.883437][ T7014] bcachefs (loop1): initializing new filesystem
[   79.892497][ T7014] bcachefs (loop1): going read-write
[   79.895594][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.900714][ T7014] bcachefs (loop1): marking superblocks
[   79.906785][ T7014] bcachefs (loop1): initializing freespace
[   79.910273][ T7014] bcachefs (loop1): done initializing freespace
[   79.914207][ T7014] bcachefs (loop1): reading snapshots table
[   79.916053][ T7014] bcachefs (loop1): reading snapshots done
[   79.932460][ T7014] bcachefs (loop1): done starting filesystem
[   79.936507][ T5885] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.939368][ T5885] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[   79.943300][ T5885] usb 3-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[   79.946062][ T5885] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.952387][ T5885] usb 3-1: config 0 descriptor??
[   80.462191][ T5885] kye 0003:0458:501A.0005: tablet report size too small, or kye_tablet_rdesc unexpectedly large
[   80.465982][ T5885] kye 0003:0458:501A.0005: unknown main item tag 0x0
[   80.468077][ T5885] kye 0003:0458:501A.0005: unknown main item tag 0x0
[   80.470154][ T5885] kye 0003:0458:501A.0005: unknown main item tag 0x0
[   80.472698][ T5885] kye 0003:0458:501A.0005: unknown main item tag 0x0
[   80.474799][ T5885] kye 0003:0458:501A.0005: unknown main item tag 0x0
[   80.543642][ T5885] kye 0003:0458:501A.0005: hidraw0: USB HID v0.00 Device [HID 0458:501a] on usb-dummy_hcd.2-1/input0
[   80.553009][ T5885] kye 0003:0458:501A.0005: tablet-enabling feature report not found
[   80.554250][ T5832] bcachefs (loop1): shutting down
[   80.555555][ T5885] kye 0003:0458:501A.0005: tablet enabling failed
[   80.557126][ T5832] bcachefs (loop1): going read-only
[   80.564566][ T5832] bcachefs (loop1): finished waiting for writes to stop
[   80.574190][ T5885] usb 3-1: USB disconnect, device number 7
[   80.578203][ T5832] bcachefs (loop1): flushing journal and stopping allocators, journal seq 2
[   80.597519][ T5832] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3
[   80.602297][ T5832] bcachefs (loop1): clean shutdown complete, journal seq 4
[   80.605001][ T5832] bcachefs (loop1): marking filesystem clean
[   80.621092][ T5832] bcachefs (loop1): shutdown complete
[   80.801364][ T5552] usb 1-1: new full-speed USB device number 6 using dummy_hcd
[   80.954515][ T5552] usb 1-1: config 8 has an invalid interface number: 177 but max is 0
[   80.957747][ T5552] usb 1-1: config 8 has no interface number 0
[   80.960029][ T5552] usb 1-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[   80.964384][ T5552] usb 1-1: config 8 interface 177 has no altsetting 0
[   80.966921][ T5552] usb 1-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[   80.970415][ T5552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   80.976981][ T7028] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   81.077548][   T47] cfg80211: failed to load regulatory.db
[   81.190881][ T5552] usb 1-1: string descriptor 0 read error: -71
[   81.194304][    C1] ir_toy 1-1:8.177: out urb status: -71
[   81.200344][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.434'.
[   81.597759][ T7039] capability: warning: `syz.1.437' uses 32-bit capabilities (legacy support in use)
[   81.630006][ T7041] nr0: tun_chr_ioctl cmd 1074025677
[   81.636451][ T7041] nr0: linktype set to 825
[   81.701375][ T5552] ir_toy 1-1:8.177: could not write reset command: -110
[   81.703674][ T5552] ir_toy 1-1:8.177: probe with driver ir_toy failed with error -110
[   81.715260][ T5552] usb 1-1: USB disconnect, device number 6
[   81.959183][ T7062] tmpfs: Bad value for 'mpol'
[   82.166429][ T7078] loop2: detected capacity change from 0 to 1024
[   82.177758][ T7078] EXT4-fs: Ignoring removed orlov option
[   82.199598][ T7078] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   82.210384][ T7078] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   82.233303][ T5836] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   82.281382][ T5552] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[   82.434035][ T5552] usb 1-1: config 0 has an invalid interface number: 1 but max is 0
[   82.436519][ T5552] usb 1-1: config 0 has no interface number 0
[   82.438348][ T5552] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   82.444068][ T5552] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   82.446887][ T5552] usb 1-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00
[   82.449593][ T5552] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.456592][ T5552] usb 1-1: config 0 descriptor??
[   82.542717][ T7095] loop2: detected capacity change from 0 to 4096
[   82.550540][ T7095] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[   82.738214][ T7103] netlink: 248 bytes leftover after parsing attributes in process `syz.2.467'.
[   82.891597][ T5552] prodikeys 0003:041E:2801.0006: hidraw0: USB HID v0.00 Device [HID 041e:2801] on usb-dummy_hcd.0-1/input1
[   82.901543][ T5552] hid_prodikeys: hid-prodikeys: failed to find output report
[   82.901543][ T5552] 
[   83.041433][    T9] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[   83.043907][   T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd
[   83.084772][ T5552] usb 1-1: USB disconnect, device number 7
[   83.194660][    T9] usb 2-1: config 54 has an invalid interface number: 154 but max is 0
[   83.197426][    T9] usb 2-1: config 54 has no interface number 0
[   83.201816][   T10] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   83.207324][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.209884][   T10] usb 3-1: Product: syz
[   83.212094][    T9] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec
[   83.214725][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.218340][   T10] usb 3-1: Manufacturer: syz
[   83.219732][   T10] usb 3-1: SerialNumber: syz
[   83.222177][    T9] usb 2-1: Product: syz
[   83.223422][    T9] usb 2-1: Manufacturer: syz
[   83.224775][    T9] usb 2-1: SerialNumber: syz
[   83.228037][   T10] usb 3-1: config 0 descriptor??
[   83.443697][   T10] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   83.461482][    T9] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   83.462737][ T5864] usb 2-1: Failed to submit usb control message: -71
[   83.468801][ T5864] usb 2-1: unable to send the bmi data to the device: -71
[   83.470919][ T5864] usb 2-1: unable to get target info from device
[   83.471726][    T9] usb 2-1: USB disconnect, device number 7
[   83.473768][ T5864] usb 2-1: could not get target info (-71)
[   83.477250][ T5864] usb 2-1: could not probe fw (-71)
[   84.951669][ T7152] loop1: detected capacity change from 0 to 4096
[   84.970438][ T7152] NILFS (loop1): invalid segment: Checksum error in segment payload
[   84.974797][ T7152] NILFS (loop1): trying rollback from an earlier position
[   84.989329][ T7152] NILFS (loop1): recovery complete
[   85.001739][ T7154] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   85.063163][   T10] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[   85.086554][   T10] usb 3-1: USB disconnect, device number 8
[   85.551399][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[   85.761463][ T5552] IPVS: starting estimator thread 0...
[   85.871464][ T7177] IPVS: using max 63 ests per chain, 151200 per kthread
[   85.921371][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[   86.071400][    T9] usb 2-1: Using ep0 maxpacket: 16
[   86.074526][    T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   86.077673][    T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[   86.082587][    T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08f0, bcdDevice=50.0d
[   86.085424][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.087805][    T9] usb 2-1: Product: syz
[   86.089044][    T9] usb 2-1: Manufacturer: syz
[   86.090472][    T9] usb 2-1: SerialNumber: syz
[   86.093930][    T9] usb 2-1: config 0 descriptor??
[   86.101609][ T5552] usb 3-1: new low-speed USB device number 9 using dummy_hcd
[   86.102460][ T7166] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512)
[   86.253599][ T5552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[   86.258005][ T5552] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   86.263353][ T5552] usb 3-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00
[   86.266919][ T5552] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   86.274686][ T5552] usb 3-1: config 0 descriptor??
[   86.304135][    T9] usb 2-1: USB disconnect, device number 8
[   86.683667][ T5552] lenovo 0003:17EF:6047.0007: unknown main item tag 0x0
[   86.687388][ T5552] lenovo 0003:17EF:6047.0007: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.2-1/input0
[   86.885021][   T10] usb 3-1: USB disconnect, device number 9
[   87.121897][ T7200] loop1: detected capacity change from 0 to 1024
[   87.200560][   T55] Bluetooth: Frame is too long (len 75, expected len 4)
[   87.360598][ T7207] netlink: 'syz.0.501': attribute type 1 has an invalid length.
[   87.363976][ T7207] netlink: 4 bytes leftover after parsing attributes in process `syz.0.501'.
[   87.472515][   T33] kauditd_printk_skb: 59 callbacks suppressed
[   87.472527][   T33] audit: type=1800 audit(2000000037.610:87): pid=7215 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.505" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 errno=0
[   87.830994][ T7225] loop2: detected capacity change from 0 to 256
[   87.835384][ T7225] FAT-fs (loop2): count of clusters too big (66845694)
[   87.837542][ T7225] FAT-fs (loop2): Can't find a valid FAT filesystem
[   87.993364][   T10] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[   87.999288][ T7229] could not allocate digest TFM handle sha384-avx
[   88.033846][ T7233] loop1: detected capacity change from 0 to 8
[   88.052793][ T7233] SQUASHFS error: zlib decompression failed, data probably corrupt
[   88.055639][ T7233] SQUASHFS error: Failed to read block 0x9b: -5
[   88.057847][ T7233] SQUASHFS error: Unable to read metadata cache entry [99]
[   88.060782][ T7233] SQUASHFS error: Unable to read inode 0x127
[   88.147405][   T10] usb 1-1: config 220 has an invalid interface number: 76 but max is 2
[   88.151787][   T10] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[   88.158594][   T10] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[   88.164740][   T10] usb 1-1: config 220 has no interface number 2
[   88.167414][   T10] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[   88.173592][   T10] usb 1-1: config 220 interface 0 has no altsetting 0
[   88.175840][   T10] usb 1-1: config 220 interface 76 has no altsetting 0
[   88.178052][   T10] usb 1-1: config 220 interface 1 has no altsetting 0
[   88.183781][   T10] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[   88.186748][   T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.189361][   T10] usb 1-1: Product: syz
[   88.190800][   T10] usb 1-1: Manufacturer: syz
[   88.192964][   T10] usb 1-1: SerialNumber: syz
[   88.424855][   T10] usb 1-1: Found UVC 7.01 device syz (8086:0b07)
[   88.427049][   T10] usb 1-1: No valid video chain found.
[   88.428791][   T10] usb 1-1: selecting invalid altsetting 0
[   88.436992][   T10] usb 1-1: selecting invalid altsetting 0
[   88.438860][   T10] usbtest 1-1:220.1: probe with driver usbtest failed with error -22
[   88.442281][ T7242] loop2: detected capacity change from 0 to 16
[   88.446887][   T10] usb 1-1: USB disconnect, device number 8
[   88.469692][ T7242] erofs (device loop2): too large lz4 pclusterblks 16832
[   88.561491][ T5871] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[   88.732874][ T5871] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   88.736022][ T5871] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[   88.738784][ T5871] usb 2-1: config 1 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.741868][ T5871] usb 2-1: config 1 interface 0 has no altsetting 0
[   88.745734][ T5871] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   88.748430][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   88.750877][ T5871] usb 2-1: Product: syz
[   88.752353][ T5871] usb 2-1: Manufacturer: syz
[   88.753810][ T5871] usb 2-1: SerialNumber: syz
[   89.165203][ T5871] usb 2-1: USB disconnect, device number 9
[   89.697034][ T7253] macvtap0: entered promiscuous mode
[   89.699737][ T7253] macvtap0: left promiscuous mode
[   90.010063][ T7257] loop1: detected capacity change from 0 to 32768
[   90.020695][ T7257] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.523 (7257)
[   90.038843][ T7257] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   90.045704][ T7257] BTRFS info (device loop1): using sha256 (sha256-x86_64) checksum algorithm
[   90.048487][ T7257] BTRFS info (device loop1): using free-space-tree
[   90.150103][ T5832] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   90.379987][ T7298] loop0: detected capacity change from 0 to 4096
[   90.419615][ T7298] ntfs3(loop0): ino=1a, mi_enum_attr
[   90.429205][ T7298] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   90.650099][ T7309] loop0: detected capacity change from 0 to 164
[   90.684082][ T7309] Unable to read rock-ridge attributes
[   90.689667][ T7309] Unable to read rock-ridge attributes
[   90.720867][ T7311] loop0: detected capacity change from 0 to 128
[   90.735750][ T7311] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   90.739712][ T7311] ext4 filesystem being mounted at /210/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   90.748747][ T7311] syz.0.540 (pid 7311) is setting deprecated v1 encryption policy; recommend upgrading to v2.
[   90.774813][ T5837] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   90.822801][ T5871] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[   90.940459][ T7315] loop0: detected capacity change from 0 to 32768
[   90.972438][ T5871] usb 2-1: Using ep0 maxpacket: 8
[   90.975220][ T7315] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   90.975660][ T5871] usb 2-1: config 0 has an invalid interface number: 151 but max is 1
[   90.980491][ T5871] usb 2-1: config 0 has no interface number 1
[   90.984215][ T5871] usb 2-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[   90.987605][ T5871] usb 2-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[   90.991089][ T5871] usb 2-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid maxpacket 64466, setting to 1024
[   90.996979][ T5871] usb 2-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024
[   91.000076][ T5871] usb 2-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   91.000131][ T7315] XFS (loop0): Ending clean mount
[   91.004529][ T5871] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC9, changing to 0x89
[   91.009823][ T5871] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0
[   91.011828][ T7315] XFS (loop0): Quotacheck needed: Please wait.
[   91.014112][ T5871] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x89 has invalid maxpacket 0
[   91.020578][ T5871] usb 2-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7
[   91.023609][ T5871] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.026048][ T5871] usb 2-1: Product: syz
[   91.027954][ T5871] usb 2-1: Manufacturer: syz
[   91.029457][ T5871] usb 2-1: SerialNumber: syz
[   91.033497][ T5871] usb 2-1: config 0 descriptor??
[   91.040529][ T7304] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   91.044922][ T7315] XFS (loop0): Quotacheck: Done.
[   91.048722][ T5871] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[   91.055914][ T5871] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[   91.061117][   T33] audit: type=1800 audit(2000000041.200:88): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.541" name="file2" dev="loop0" ino=9287 res=0 errno=0
[   91.103834][ T5871] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12
[   91.106719][ T5837] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   91.262373][ T5871] usb 2-1: USB disconnect, device number 10
[   91.594613][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.546'.
[   91.597395][ T7342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.546'.
[   91.600216][ T7342] netlink: 12 bytes leftover after parsing attributes in process `syz.2.546'.
[   91.604375][ T7342] netlink: 28 bytes leftover after parsing attributes in process `syz.2.546'.
[   91.607127][ T7342] netlink: 'syz.2.546': attribute type 6 has an invalid length.
[   91.666765][ T5552] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[   91.790793][ T7351] Zero length message leads to an empty skb
[   91.843954][ T5552] usb 1-1: config 0 has an invalid interface number: 64 but max is 0
[   91.847189][ T5552] usb 1-1: config 0 has no interface number 0
[   91.863542][ T5552] usb 1-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[   91.866384][ T5552] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   91.872487][ T5552] usb 1-1: Product: syz
[   91.876305][ T5552] usb 1-1: Manufacturer: syz
[   91.877793][ T5552] usb 1-1: SerialNumber: syz
[   91.903754][ T5552] usb 1-1: config 0 descriptor??
[   91.974875][ T5864] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.090711][ T5864] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.129205][ T5552] usb 1-1: Found UVC 0.00 device syz (046d:0823)
[   92.131875][ T5552] usb 1-1: No valid video chain found.
[   92.139523][ T5552] usb 1-1: USB disconnect, device number 9
[   92.173210][ T5864] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.251795][ T5864] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   92.331670][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   92.335891][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   92.339064][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   92.343508][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   92.346953][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   92.425795][ T5864] bridge_slave_1: left allmulticast mode
[   92.428531][ T5864] bridge_slave_1: left promiscuous mode
[   92.436672][ T5864] bridge0: port 2(bridge_slave_1) entered disabled state
[   92.459675][ T5864] bridge_slave_0: left allmulticast mode
[   92.472317][ T5864] bridge_slave_0: left promiscuous mode
[   92.476956][ T5864] bridge0: port 1(bridge_slave_0) entered disabled state
[   92.735400][ T7385] loop0: detected capacity change from 0 to 512
[   92.775851][ T7385] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   92.779569][ T7385] ext4 filesystem being mounted at /215/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[   92.797642][ T5837] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   93.135279][ T5864] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   93.154101][ T5864] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   93.157819][ T5864] bond0 (unregistering): Released all slaves
[   93.513385][ T5864] hsr_slave_0: left promiscuous mode
[   93.515667][ T5864] hsr_slave_1: left promiscuous mode
[   93.517734][ T5864] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   93.520641][ T5864] batman_adv: batadv0: Removing interface: batadv_slave_0
[   93.546391][ T5864] veth1_macvtap: left promiscuous mode
[   93.551942][ T5864] veth0_macvtap: left allmulticast mode
[   93.555328][ T5864] veth0_macvtap: left promiscuous mode
[   93.557906][ T5864] veth1_vlan: left promiscuous mode
[   93.559772][ T5864] veth0_vlan: left promiscuous mode
[   93.657103][ T7423] openvswitch: netlink: Key 6 has unexpected len 4 expected 2
[   93.839198][ T7427] rdma_op ffff888119daf9f0 conn xmit_rdma 0000000000000000
[   93.929488][ T7431] loop0: detected capacity change from 0 to 2048
[   93.942335][   T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[   93.955555][ T5864] team0 (unregistering): Port device team_slave_1 removed
[   93.999461][ T5864] team0 (unregistering): Port device team_slave_0 removed
[   94.101321][   T10] usb 2-1: Using ep0 maxpacket: 16
[   94.104606][   T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   94.108106][   T10] usb 2-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[   94.110948][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.125016][   T10] usb 2-1: config 0 descriptor??
[   94.228332][ T5885] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[   94.334946][ T7369] chnl_net:caif_netlink_parms(): no params data found
[   94.384397][ T5885] usb 1-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[   94.387530][ T5885] usb 1-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[   94.390406][ T5885] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.397821][ T5885] gspca_main: stv0680-2.14.0 probing 041e:4007
[   94.431733][   T55] Bluetooth: hci2: command tx timeout
[   94.470529][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state
[   94.475381][ T7369] bridge0: port 1(bridge_slave_0) entered disabled state
[   94.477690][ T7369] bridge_slave_0: entered allmulticast mode
[   94.480452][ T7369] bridge_slave_0: entered promiscuous mode
[   94.484572][ T7369] bridge0: port 2(bridge_slave_1) entered blocking state
[   94.489546][ T7369] bridge0: port 2(bridge_slave_1) entered disabled state
[   94.496964][ T7369] bridge_slave_1: entered allmulticast mode
[   94.499818][ T7369] bridge_slave_1: entered promiscuous mode
[   94.538593][ T7369] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   94.550685][ T7369] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   94.555177][   T10] mcp2221 0003:04D8:00DD.0008: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.1-1/input0
[   94.591655][ T7369] team0: Port device team_slave_0 added
[   94.595069][ T7369] team0: Port device team_slave_1 added
[   94.618736][ T7369] batman_adv: batadv0: Adding interface: batadv_slave_0
[   94.621007][ T7369] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.630870][ T7369] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   94.636725][ T7369] batman_adv: batadv0: Adding interface: batadv_slave_1
[   94.638932][ T7369] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   94.649288][ T7369] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   94.655024][ T5864] IPVS: stop unused estimator thread 0...
[   94.710410][ T7369] hsr_slave_0: entered promiscuous mode
[   94.712793][ T7369] hsr_slave_1: entered promiscuous mode
[   94.956475][   T10] usb 2-1: USB disconnect, device number 11
[   95.154349][ T7369] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   95.158843][ T7369] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   95.164273][ T7369] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   95.168355][ T7369] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   95.191380][ T7369] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.193817][ T7369] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.196827][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.199089][ T7369] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.231044][ T7369] 8021q: adding VLAN 0 to HW filter on device bond0
[   95.243319][   T40] bridge0: port 1(bridge_slave_0) entered disabled state
[   95.247550][   T40] bridge0: port 2(bridge_slave_1) entered disabled state
[   95.260435][ T7369] 8021q: adding VLAN 0 to HW filter on device team0
[   95.268548][   T40] bridge0: port 1(bridge_slave_0) entered blocking state
[   95.271120][   T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[   95.296054][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[   95.298328][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[   95.416849][ T7369] 8021q: adding VLAN 0 to HW filter on device batadv0
[   95.448941][ T7369] veth0_vlan: entered promiscuous mode
[   95.456386][ T7369] veth1_vlan: entered promiscuous mode
[   95.473492][ T5885] gspca_stv0680: usb_control_msg error 0, request = 0x88, error = -32
[   95.476050][ T7369] veth0_macvtap: entered promiscuous mode
[   95.481178][ T5885] stv0680 1-1:4.0: STV(e): camera ping failed!!
[   95.486096][ T5885] stv0680 1-1:4.0: last error: 0,  command = 0x0
[   95.487616][ T7369] veth1_macvtap: entered promiscuous mode
[   95.522937][ T7369] batman_adv: batadv0: Interface activated: batadv_slave_0
[   95.540048][ T7369] batman_adv: batadv0: Interface activated: batadv_slave_1
[   95.551794][ T7369] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   95.559193][ T7369] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   95.566827][ T7369] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   95.571281][ T7369] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   95.680241][   T29] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.683131][   T29] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.690255][ T5871] usb 1-1: USB disconnect, device number 10
[   95.729765][   T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   95.736098][   T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   95.805518][ T7497] xt_bpf: check failed: parse error
[   95.929795][ T7510] fuse: Bad value for 'fd'
[   96.098373][ T7524] loop2: detected capacity change from 0 to 1024
[   96.128586][ T7524] hfsplus: inconsistency in B*Tree (-1,0,1,1,0)
[   96.136388][ T7524] hfsplus: failed to load root directory
[   96.149998][ T7528] netlink: 16 bytes leftover after parsing attributes in process `syz.1.595'.
[   96.342775][ T7540] loop1: detected capacity change from 0 to 1024
[   96.345457][ T7540] EXT4-fs: Ignoring removed oldalloc option
[   96.362516][ T7540] EXT4-fs: Ignoring removed orlov option
[   96.380166][ T7540] EXT4-fs (loop1): stripe (2) is not aligned with cluster size (16), stripe is disabled
[   96.572762][   T55] Bluetooth: hci2: command tx timeout
[   96.594856][ T7540] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   96.673991][ T7540] EXT4-fs error (device loop1): ext4_xattr_inode_iget:437: comm syz.1.600: inode #3: comm syz.1.600: iget: illegal inode #
[   96.682877][ T7551] loop2: detected capacity change from 0 to 4096
[   96.689148][ T7551] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   96.698102][ T7540] EXT4-fs error (device loop1): ext4_xattr_inode_iget:442: comm syz.1.600: error while reading EA inode 3 err=-117
[   96.704264][ T7540] EXT4-fs error (device loop1): ext4_xattr_block_set:2210: inode #15: comm syz.1.600: bad block 129
[   96.732659][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   96.768790][   T33] audit: type=1800 audit(2000000046.910:89): pid=7551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.601" name="file1" dev="loop2" ino=33 res=0 errno=0
[   96.796945][ T7555] loop1: detected capacity change from 0 to 4096
[   96.799529][ T7555] nilfs2: Bad value for 'cp'
[   96.984149][ T7565] : renamed from hsr_slave_0 (while UP)
[   97.101754][ T5871] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[   97.183338][ T7575] loop1: detected capacity change from 0 to 64
[   97.271857][ T5871] usb 3-1: Using ep0 maxpacket: 32
[   97.277376][ T5871] usb 3-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40
[   97.285238][ T5871] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   97.296188][ T5871] usb 3-1: config 0 descriptor??
[   97.500533][ T7595] loop1: detected capacity change from 0 to 16
[   97.504282][ T5871] dvb-usb: found a 'Elgato EyeTV Sat' in warm state.
[   97.513117][ T5871] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[   97.517494][ T7595] erofs (device loop1): mounted with root inode @ nid 36.
[   97.520214][ T5871] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat)
[   97.527502][ T5871] usb 3-1: media controller created
[   97.550321][ T5871] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[   97.715596][ T5871] az6027: usb out operation failed. (-71)
[   97.719245][ T5871] az6027: usb out operation failed. (-71)
[   97.721101][ T5871] stb0899_attach: Driver disabled by Kconfig
[   97.723291][ T5871] az6027: no front-end attached
[   97.723291][ T5871] 
[   97.725743][ T5871] az6027: usb out operation failed. (-71)
[   97.727518][ T5871] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat'
[   97.730859][ T5871] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.2/usb3/3-1/input/input8
[   97.735907][ T5871] dvb-usb: schedule remote query interval to 400 msecs.
[   97.738072][ T5871] dvb-usb: Elgato EyeTV Sat successfully initialized and connected.
[   97.743106][ T5871] usb 3-1: USB disconnect, device number 10
[   97.780226][ T7593] loop0: detected capacity change from 0 to 40427
[   97.787606][ T7593] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12
[   97.788479][ T5871] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected.
[   97.790012][ T7593] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   97.804479][ T7593] F2FS-fs (loop0): invalid crc value
[   97.847590][ T7593] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   97.850057][ T7593] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   97.951309][   T10] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[   98.113199][   T10] usb 2-1: Using ep0 maxpacket: 16
[   98.118361][   T10] usb 2-1: New USB device found, idVendor=0eb1, idProduct=7007, bcdDevice= 2.10
[   98.123409][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   98.125999][   T10] usb 2-1: Product: syz
[   98.127315][   T10] usb 2-1: Manufacturer: syz
[   98.128823][   T10] usb 2-1: SerialNumber: syz
[   98.138712][   T10] usb 2-1: config 0 descriptor??
[   98.146709][   T10] go7007 2-1:0.0: probe with driver go7007 failed with error -12
[   98.185124][ T7616] loop0: detected capacity change from 0 to 128
[   98.197746][ T7616] ADFS-fs (loop0): error: can't find an ADFS filesystem on dev loop0.
[   98.214830][ T7616] cifs: Unknown parameter 'mode'
[   98.308902][ T7624] loop2: detected capacity change from 0 to 164
[   98.358819][   T47] usb 2-1: USB disconnect, device number 12
[   98.417297][ T7632] 9pnet_fd: p9_fd_create_unix (7632): address too long: ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[   98.601484][   T55] Bluetooth: hci2: command tx timeout
[   98.964266][ T7638] loop0: detected capacity change from 0 to 131072
[   98.970849][ T7638] F2FS-fs (loop0): invalid crc value
[   99.101339][ T7638] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   99.367980][   T33] audit: type=1326 audit(2000000049.510:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.649" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b9ab2ab89 code=0x7ffc0000
[   99.388538][   T33] audit: type=1326 audit(2000000049.520:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.649" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b9ab2ab89 code=0x7ffc0000
[   99.413098][   T33] audit: type=1326 audit(2000000049.520:92): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.649" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b9ab2ab89 code=0x7ffc0000
[   99.429464][   T33] audit: type=1326 audit(2000000049.520:93): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.649" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b9ab2ab89 code=0x7ffc0000
[   99.446016][   T33] audit: type=1326 audit(2000000049.520:94): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.649" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b9ab2ab89 code=0x7ffc0000
[   99.461187][   T33] audit: type=1326 audit(2000000049.520:95): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.649" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b9ab2ab89 code=0x7ffc0000
[   99.474085][   T33] audit: type=1326 audit(2000000049.520:96): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.649" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b9ab2ab89 code=0x7ffc0000
[   99.484298][   T33] audit: type=1326 audit(2000000049.520:97): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.649" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b9ab2ab89 code=0x7ffc0000
[   99.490774][   T33] audit: type=1326 audit(2000000049.520:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7655 comm="syz.2.649" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f8b9ab2ab89 code=0x7ffc0000
[  100.133047][ T7694] netlink: 12 bytes leftover after parsing attributes in process `syz.1.662'.
[  100.140322][ T7694] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  100.143456][ T7694] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  100.146153][ T7694] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  100.148833][ T7694] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  100.171313][ T7694] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.174041][ T7694] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.176698][ T7694] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.177643][ T7698] loop0: detected capacity change from 0 to 47
[  100.179356][ T7694] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  100.247888][ T7700] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  100.297574][ T7704] loop0: detected capacity change from 0 to 64
[  100.338150][ T7704] syz.0.666: attempt to access beyond end of device
[  100.338150][ T7704] loop0: rw=0, sector=268435468, nr_sectors = 2 limit=64
[  100.339692][ T7706] netlink: 32 bytes leftover after parsing attributes in process `syz.1.668'.
[  100.345940][ T7704] Buffer I/O error on dev loop0, logical block 134217734, async page read
[  100.347021][ T7706] netlink: 168 bytes leftover after parsing attributes in process `syz.1.668'.
[  100.353927][ T7706] netlink: 168 bytes leftover after parsing attributes in process `syz.1.668'.
[  100.358034][ T7706] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check.
[  100.423586][ T7708] loop1: detected capacity change from 0 to 4096
[  100.440893][ T7708] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  100.464947][ T5832] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  100.561536][ T2201] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  100.681714][   T55] Bluetooth: hci2: command tx timeout
[  100.722825][ T2201] usb 3-1: Using ep0 maxpacket: 16
[  100.734725][ T2201] usb 3-1: config 0 has an invalid interface number: 101 but max is 0
[  100.739351][ T2201] usb 3-1: config 0 has no interface number 0
[  100.742695][ T2201] usb 3-1: config 0 interface 101 has no altsetting 0
[  100.747058][ T2201] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  100.750151][ T2201] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.756551][ T2201] usb 3-1: Product: syz
[  100.758138][ T2201] usb 3-1: Manufacturer: syz
[  100.759906][ T2201] usb 3-1: SerialNumber: syz
[  100.767605][ T2201] usb 3-1: config 0 descriptor??
[  100.771158][ T2201] ums-onetouch 3-1:0.101: USB Mass Storage device detected
[  100.911438][    C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  100.973052][ T5871] usb 3-1: USB disconnect, device number 11
[  101.067700][ T7735] loop1: detected capacity change from 0 to 32768
[  101.080625][ T7735] (syz.1.680,7735,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  101.084997][ T7735] (syz.1.680,7735,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  101.094405][ T7735] JBD2: Ignoring recovery information on journal
[  101.119627][ T7735] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  101.135028][ T7735] 
[  101.135838][ T7735] ======================================================
[  101.137901][ T7735] WARNING: possible circular locking dependency detected
[  101.139957][ T7735] 6.16.0-rc7-syzkaller-dirty #0 Not tainted
[  101.142020][ T7735] ------------------------------------------------------
[  101.144963][ T7735] syz.1.680/7735 is trying to acquire lock:
[  101.146818][ T7735] ffff88801de443c0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{4:4}, at: ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  101.150805][ T7735] 
[  101.150805][ T7735] but task is already holding lock:
[  101.152934][ T7735] ffff888113ed86f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  101.155716][ T7735] 
[  101.155716][ T7735] which lock already depends on the new lock.
[  101.155716][ T7735] 
[  101.158825][ T7735] 
[  101.158825][ T7735] the existing dependency chain (in reverse order) is:
[  101.161515][ T7735] 
[  101.161515][ T7735] -> #5 (&oi->ip_xattr_sem){++++}-{4:4}:
[  101.163910][ T7735]        lock_acquire+0x120/0x360
[  101.165467][ T7735]        down_read+0x46/0x2e0
[  101.166927][ T7735]        ocfs2_init_acl+0x2f9/0x720
[  101.168474][ T7735]        ocfs2_mknod+0x1321/0x2050
[  101.170007][ T7735]        vfs_mknod+0x37f/0x3c0
[  101.171449][ T7735]        do_mknodat+0x385/0x4d0
[  101.172874][ T7735]        __x64_sys_mknod+0x8c/0xa0
[  101.174423][ T7735]        do_syscall_64+0xfa/0x3b0
[  101.175976][ T7735]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.177903][ T7735] 
[  101.177903][ T7735] -> #4 (jbd2_handle){++++}-{0:0}:
[  101.180037][ T7735]        lock_acquire+0x120/0x360
[  101.181566][ T7735]        start_this_handle+0x1fa7/0x21c0
[  101.183213][ T7735]        jbd2__journal_start+0x2c1/0x5b0
[  101.184874][ T7735]        jbd2_journal_start+0x2a/0x40
[  101.186486][ T7735]        ocfs2_start_trans+0x376/0x6d0
[  101.188102][ T7735]        ocfs2_modify_bh+0xe8/0x470
[  101.189708][ T7735]        ocfs2_local_read_info+0x1465/0x17e0
[  101.191537][ T7735]        dquot_load_quota_sb+0x791/0xbd0
[  101.193284][ T7735]        dquot_load_quota_inode+0x2e1/0x5d0
[  101.195108][ T7735]        ocfs2_enable_quotas+0x1c6/0x450
[  101.196772][ T7735]        ocfs2_fill_super+0x5115/0x63d0
[  101.198473][ T7735]        get_tree_bdev_flags+0x40e/0x4d0
[  101.200201][ T7735]        vfs_get_tree+0x92/0x2b0
[  101.201748][ T7735]        do_new_mount+0x24a/0xa40
[  101.203230][ T7735]        __se_sys_mount+0x317/0x410
[  101.204748][ T7735]        do_syscall_64+0xfa/0x3b0
[  101.206279][ T7735]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.208202][ T7735] 
[  101.208202][ T7735] -> #3 (&journal->j_trans_barrier){.+.+}-{4:4}:
[  101.210776][ T7735]        lock_acquire+0x120/0x360
[  101.212238][ T7735]        down_read+0x46/0x2e0
[  101.213626][ T7735]        ocfs2_start_trans+0x36a/0x6d0
[  101.215221][ T7735]        ocfs2_modify_bh+0xe8/0x470
[  101.216779][ T7735]        ocfs2_local_read_info+0x1465/0x17e0
[  101.218525][ T7735]        dquot_load_quota_sb+0x791/0xbd0
[  101.220247][ T7735]        dquot_load_quota_inode+0x2e1/0x5d0
[  101.222086][ T7735]        ocfs2_enable_quotas+0x1c6/0x450
[  101.223762][ T7735]        ocfs2_fill_super+0x5115/0x63d0
[  101.225426][ T7735]        get_tree_bdev_flags+0x40e/0x4d0
[  101.227145][ T7735]        vfs_get_tree+0x92/0x2b0
[  101.228669][ T7735]        do_new_mount+0x24a/0xa40
[  101.230247][ T7735]        __se_sys_mount+0x317/0x410
[  101.231891][ T7735]        do_syscall_64+0xfa/0x3b0
[  101.233391][ T7735]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.235271][ T7735] 
[  101.235271][ T7735] -> #2 (sb_internal#2){.+.+}-{0:0}:
[  101.237746][ T7735]        lock_acquire+0x120/0x360
[  101.239318][ T7735]        ocfs2_start_trans+0x26b/0x6d0
[  101.241025][ T7735]        ocfs2_mknod+0xe93/0x2050
[  101.242551][ T7735]        vfs_mknod+0x37f/0x3c0
[  101.243992][ T7735]        do_mknodat+0x385/0x4d0
[  101.245466][ T7735]        __x64_sys_mknod+0x8c/0xa0
[  101.246979][ T7735]        do_syscall_64+0xfa/0x3b0
[  101.248466][ T7735]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.250438][ T7735] 
[  101.250438][ T7735] -> #1 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#6){+.+.}-{4:4}:
[  101.253555][ T7735]        lock_acquire+0x120/0x360
[  101.255115][ T7735]        down_write+0x96/0x1f0
[  101.256632][ T7735]        ocfs2_reserve_local_alloc_bits+0x125/0x24e0
[  101.258571][ T7735]        ocfs2_reserve_clusters_with_limit+0x1be/0xba0
[  101.260686][ T7735]        ocfs2_mknod+0xe32/0x2050
[  101.262187][ T7735]        vfs_mknod+0x37f/0x3c0
[  101.263660][ T7735]        do_mknodat+0x385/0x4d0
[  101.265171][ T7735]        __x64_sys_mknod+0x8c/0xa0
[  101.266774][ T7735]        do_syscall_64+0xfa/0x3b0
[  101.268262][ T7735]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.270241][ T7735] 
[  101.270241][ T7735] -> #0 (&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5){+.+.}-{4:4}:
[  101.273342][ T7735]        validate_chain+0xb9b/0x2140
[  101.274914][ T7735]        __lock_acquire+0xab9/0xd20
[  101.276489][ T7735]        lock_acquire+0x120/0x360
[  101.278013][ T7735]        down_write+0x96/0x1f0
[  101.279438][ T7735]        ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  101.281336][ T7735]        ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  101.283444][ T7735]        ocfs2_init_xattr_set_ctxt+0x307/0x700
[  101.285439][ T7735]        ocfs2_xattr_set+0xb70/0x11f0
[  101.287018][ T7735]        __vfs_setxattr+0x43c/0x480
[  101.288599][ T7735]        __vfs_setxattr_noperm+0x12d/0x660
[  101.290275][ T7735]        vfs_setxattr+0x16b/0x2f0
[  101.291746][ T7735]        filename_setxattr+0x274/0x600
[  101.293337][ T7735]        path_setxattrat+0x364/0x3a0
[  101.294923][ T7735]        __x64_sys_setxattr+0xbc/0xe0
[  101.296513][ T7735]        do_syscall_64+0xfa/0x3b0
[  101.298017][ T7735]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.299941][ T7735] 
[  101.299941][ T7735] other info that might help us debug this:
[  101.299941][ T7735] 
[  101.303048][ T7735] Chain exists of:
[  101.303048][ T7735]   &ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5 --> jbd2_handle --> &oi->ip_xattr_sem
[  101.303048][ T7735] 
[  101.307949][ T7735]  Possible unsafe locking scenario:
[  101.307949][ T7735] 
[  101.310162][ T7735]        CPU0                    CPU1
[  101.311755][ T7735]        ----                    ----
[  101.313409][ T7735]   lock(&oi->ip_xattr_sem);
[  101.314879][ T7735]                                lock(jbd2_handle);
[  101.316963][ T7735]                                lock(&oi->ip_xattr_sem);
[  101.319137][ T7735]   lock(&ocfs2_sysfile_lock_key[args->fi_sysfile_type]#5);
[  101.321395][ T7735] 
[  101.321395][ T7735]  *** DEADLOCK ***
[  101.321395][ T7735] 
[  101.323950][ T7735] 3 locks held by syz.1.680/7735:
[  101.325512][ T7735]  #0: ffff888113556428 (sb_writers#16){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90
[  101.328246][ T7735]  #1: ffff888113ed89c0 (&type->i_mutex_dir_key#12){++++}-{4:4}, at: vfs_setxattr+0x144/0x2f0
[  101.331456][ T7735]  #2: ffff888113ed86f8 (&oi->ip_xattr_sem){++++}-{4:4}, at: ocfs2_xattr_set+0x40f/0x11f0
[  101.334549][ T7735] 
[  101.334549][ T7735] stack backtrace:
[  101.336403][ T7735] CPU: 1 UID: 0 PID: 7735 Comm: syz.1.680 Not tainted 6.16.0-rc7-syzkaller-dirty #0 PREEMPT(full) 
[  101.336414][ T7735] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  101.336420][ T7735] Call Trace:
[  101.336427][ T7735]  <TASK>
[  101.336432][ T7735]  dump_stack_lvl+0x189/0x250
[  101.336446][ T7735]  ? __pfx_dump_stack_lvl+0x10/0x10
[  101.336455][ T7735]  ? __pfx__printk+0x10/0x10
[  101.336468][ T7735]  ? print_lock_name+0xde/0x100
[  101.336479][ T7735]  print_circular_bug+0x2ee/0x310
[  101.336492][ T7735]  check_noncircular+0x134/0x160
[  101.336503][ T7735]  validate_chain+0xb9b/0x2140
[  101.336512][ T7735]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  101.336522][ T7735]  ? look_up_lock_class+0x74/0x170
[  101.336531][ T7735]  ? register_lock_class+0x51/0x320
[  101.336539][ T7735]  __lock_acquire+0xab9/0xd20
[  101.336547][ T7735]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  101.336556][ T7735]  lock_acquire+0x120/0x360
[  101.336563][ T7735]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  101.336573][ T7735]  down_write+0x96/0x1f0
[  101.336604][ T7735]  ? ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  101.336612][ T7735]  ? __pfx_down_write+0x10/0x10
[  101.336623][ T7735]  ocfs2_reserve_suballoc_bits+0x15e/0x4640
[  101.336632][ T7735]  ? do_raw_spin_lock+0x121/0x290
[  101.336644][ T7735]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[  101.336652][ T7735]  ? lockdep_hardirqs_on+0x9c/0x150
[  101.336660][ T7735]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  101.336668][ T7735]  ? __pfx_ocfs2_reserve_suballoc_bits+0x10/0x10
[  101.336676][ T7735]  ? stack_depot_save_flags+0x429/0x900
[  101.336686][ T7735]  ? kasan_save_track+0x4f/0x80
[  101.336696][ T7735]  ? kasan_save_track+0x3e/0x80
[  101.336704][ T7735]  ? __kasan_kmalloc+0x93/0xb0
[  101.336714][ T7735]  ? __kmalloc_cache_noprof+0x230/0x3d0
[  101.336725][ T7735]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  101.336732][ T7735]  ? ocfs2_init_xattr_set_ctxt+0x307/0x700
[  101.336741][ T7735]  ? ocfs2_xattr_set+0xb70/0x11f0
[  101.336749][ T7735]  ? __vfs_setxattr+0x43c/0x480
[  101.336760][ T7735]  ? __vfs_setxattr_noperm+0x12d/0x660
[  101.336770][ T7735]  ? vfs_setxattr+0x16b/0x2f0
[  101.336780][ T7735]  ? filename_setxattr+0x274/0x600
[  101.336786][ T7735]  ? path_setxattrat+0x364/0x3a0
[  101.336794][ T7735]  ? __x64_sys_setxattr+0xbc/0xe0
[  101.336800][ T7735]  ? do_syscall_64+0xfa/0x3b0
[  101.336809][ T7735]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.336824][ T7735]  ? __kasan_kmalloc+0x93/0xb0
[  101.336834][ T7735]  ? ocfs2_reserve_new_metadata_blocks+0x113/0x940
[  101.336842][ T7735]  ocfs2_reserve_new_metadata_blocks+0x403/0x940
[  101.336851][ T7735]  ? __pfx_ocfs2_reserve_new_metadata_blocks+0x10/0x10
[  101.336859][ T7735]  ? __pfx_ocfs2_calc_xattr_set_need+0x10/0x10
[  101.336870][ T7735]  ? __lock_acquire+0xab9/0xd20
[  101.336879][ T7735]  ocfs2_init_xattr_set_ctxt+0x307/0x700
[  101.336889][ T7735]  ? __pfx_ocfs2_init_xattr_set_ctxt+0x10/0x10
[  101.336898][ T7735]  ? ocfs2_xattr_set+0xb36/0x11f0
[  101.336907][ T7735]  ? up_write+0x1c4/0x420
[  101.336916][ T7735]  ? ocfs2_xattr_set+0x334/0x11f0
[  101.336925][ T7735]  ocfs2_xattr_set+0xb70/0x11f0
[  101.336937][ T7735]  ? __pfx_ocfs2_xattr_set+0x10/0x10
[  101.336945][ T7735]  ? check_path+0x21/0x40
[  101.336955][ T7735]  ? lockdep_unlock+0x89/0x120
[  101.336965][ T7735]  ? posix_xattr_acl+0x93/0xc0
[  101.336976][ T7735]  ? evm_protect_xattr+0x4d4/0xa90
[  101.336984][ T7735]  ? rcu_is_watching+0x15/0xb0
[  101.336994][ T7735]  ? __pfx_evm_protect_xattr+0x10/0x10
[  101.337003][ T7735]  ? __pfx_ocfs2_xattr_trusted_set+0x10/0x10
[  101.337012][ T7735]  __vfs_setxattr+0x43c/0x480
[  101.337025][ T7735]  __vfs_setxattr_noperm+0x12d/0x660
[  101.337038][ T7735]  vfs_setxattr+0x16b/0x2f0
[  101.337049][ T7735]  ? __pfx_vfs_setxattr+0x10/0x10
[  101.337060][ T7735]  ? mnt_get_write_access+0x223/0x2a0
[  101.337070][ T7735]  filename_setxattr+0x274/0x600
[  101.337078][ T7735]  ? __pfx_filename_setxattr+0x10/0x10
[  101.337085][ T7735]  ? getname_flags+0x1e5/0x540
[  101.337093][ T7735]  path_setxattrat+0x364/0x3a0
[  101.337103][ T7735]  ? __pfx_path_setxattrat+0x10/0x10
[  101.337110][ T7735]  ? do_futex+0x333/0x420
[  101.337126][ T7735]  ? rcu_is_watching+0x15/0xb0
[  101.337135][ T7735]  __x64_sys_setxattr+0xbc/0xe0
[  101.337142][ T7735]  do_syscall_64+0xfa/0x3b0
[  101.337150][ T7735]  ? lockdep_hardirqs_on+0x9c/0x150
[  101.337157][ T7735]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.337164][ T7735]  ? exc_page_fault+0x9f/0xf0
[  101.337171][ T7735]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  101.337179][ T7735] RIP: 0033:0x7efe0ef8e9a9
[  101.337189][ T7735] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  101.337197][ T7735] RSP: 002b:00007efe0fd3c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc
[  101.337206][ T7735] RAX: ffffffffffffffda RBX: 00007efe0f1b5fa0 RCX: 00007efe0ef8e9a9
[  101.337212][ T7735] RDX: 000020000001b000 RSI: 0000200000000280 RDI: 0000200000000240
[  101.337218][ T7735] RBP: 00007efe0f010d69 R08: 0000000000000000 R09: 0000000000000000
[  101.337223][ T7735] R10: 000000000000008a R11: 0000000000000246 R12: 0000000000000000
[  101.337228][ T7735] R13: 0000000000000000 R14: 00007efe0f1b5fa0 R15: 00007ffe7b5cc7e8
[  101.337236][ T7735]  </TASK>
[  101.513308][ T7739] loop0: detected capacity change from 0 to 65
[  101.516466][ T7739] BFS-fs: bfs_fill_super(): NOTE: filesystem loop0 was created with 512 inodes, the real maximum is 511, mounting anyway
[  101.521992][ T5832] ocfs2: Unmounting device (7,1) on (node local)

VM DIAGNOSIS:
19:30:14  Registers:
info registers vcpu 0

CPU#0
RAX=ef71010712fd6e00 RBX=ffffffff81976a18 RCX=ef71010712fd6e00 RDX=0000000000000001
RSI=ffffffff8be28ce0 RDI=ffffffff81976a18 RBP=ffffffff8de07ea8 RSP=ffffffff8de07d80
R8 =ffff88804b032f5b R9 =1ffff110096065eb R10=dffffc0000000000 R11=ffffed10096065ec
R12=ffffffff8fa1dcf0 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a50
RIP=ffffffff8b6d94f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8623000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b3061fffc CR3=000000002aef2000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81cf1203 ffffffff81686f8f
XMM02=ffffffff8173aed9 ffffffff81686f8f XMM03=ffffffff8173ac8f ffffffff81686f8f
XMM04=00007fcde72ed100 00007fcde6786440 XMM05=00007fcde6786458 00007fcde67864a0
XMM06=00007fcde6786498 00007fcde6786490 XMM07=00007fcde6786488 00007fcde6786480
XMM08=0000000000000000 00524f5252450040 XMM09=0000000000000000 00007fcde6611ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bec60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=00000000000019ad RDI=00000000000019ae RBP=ffffffff99df6590 RSP=ffffc90004526450
R8 =ffff888107ef8237 R9 =1ffff11020fdf046 R10=dffffc0000000000 R11=ffffffff85462d50
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99df6300 R15=0000000000000000
RIP=ffffffff85462dc7 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007efe0fd3c6c0 ffffffff 00c00000
GS =0000 ffff8881a3c23000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000001b000 CR3=000000011288a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=ffffffffffffffff ffffff0000000000 XMM01=0101010101010101 0101010000000000
XMM02=695f746e756f6d5f 7a79730032736667 XMM03=6e3d746165627472 6165682c34366564
XMM04=0000002c61746f75 717273752c656e6f XMM05=0000000000000000 00007efe0fd3b6e0
XMM06=00007efe0fd3b6e0 00007efe0fd3b560 XMM07=00007efe0fd3b5a0 00007efe0fd3b580
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 00007efe0f011ec1
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
