last executing test programs:

47.625907921s ago: executing program 0 (id=635):
mkdir(&(0x7f0000000100)='./file0\x00', 0x2d)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="b0000000000000008d15c937040795e9ec0400339b8fd15e58a83b3da942"], 0xb0)
getresuid(&(0x7f0000000440), &(0x7f0000000480), &(0x7f00000004c0))
mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2])
mount$overlay(0x0, &(0x7f0000000000)='./file1\x00', &(0x7f0000000080), 0x1000000, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}}]})

47.551889241s ago: executing program 0 (id=637):
r0 = syz_io_uring_setup(0x1515, &(0x7f0000000000)={0x0, 0x4230, 0x8, 0x0, 0x1d}, &(0x7f0000000080), &(0x7f00000000c0))
r1 = eventfd2(0xd55a, 0x80800)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, &(0x7f0000000100)=r1, 0x1)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(r0, 0x7, 0x0, 0x1)

47.432413366s ago: executing program 0 (id=639):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0xffc2, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0)
sendmmsg$inet(0xffffffffffffffff, &(0x7f0000002200)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="9a", 0x1}], 0x1}}], 0x1, 0x4000000)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0)

47.36141248s ago: executing program 0 (id=640):
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r0 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', <r1=>0x0})
sendto$packet(r0, 0x0, 0x0, 0x200068c0, &(0x7f0000000180)={0x11, 0x888e, r1, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x408e, &(0x7f0000000240)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x2e}}, {@min_batch_time={'min_batch_time', 0x3d, 0xfff}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x80}}, {@stripe={'stripe', 0x3d, 0x4000}}, {@errors_remount}, {@max_batch_time={'max_batch_time', 0x3d, 0x4}}]}, 0x3, 0x43a, &(0x7f0000000340)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r2, &(0x7f0000006b40)={0x2020}, 0x206e)

47.257551964s ago: executing program 0 (id=641):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)

47.010866587s ago: executing program 2 (id=643):
syz_mount_image$hfsplus(&(0x7f0000000c80), &(0x7f0000000080)='./file1\x00', 0xa08800, &(0x7f0000000900)=ANY=[], 0x41, 0x69b, &(0x7f0000000200)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0)
syz_open_dev$vim2m(&(0x7f0000000100), 0x8000, 0x2)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
getpriority(0x2, 0x0)
read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8)
recvmmsg(0xffffffffffffffff, &(0x7f0000004500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmmsg$sock(r1, &(0x7f00000044c0), 0x4000000000001c0, 0x0)
recvfrom(r2, &(0x7f0000000040)=""/60, 0x3c, 0x40, 0x0, 0x0)
r3 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x182, 0x0)
r4 = openat$dir(0xffffffffffffff9c, 0x0, 0x140, 0x82)
fanotify_mark(0xffffffffffffffff, 0x105, 0x40001032, r4, 0x0)
open(&(0x7f0000000000)='./file0\x00', 0x40, 0x14)
mknod$loop(0x0, 0x6000, 0x1)

46.961915187s ago: executing program 0 (id=644):
r0 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000})
ppoll(&(0x7f0000000180)=[{r0, 0x42}], 0x1, &(0x7f0000000200), 0x0, 0x0)

46.771877332s ago: executing program 32 (id=644):
r0 = io_uring_setup(0x67bb, &(0x7f00000000c0)={0x0, 0x0, 0x3000})
ppoll(&(0x7f0000000180)=[{r0, 0x42}], 0x1, &(0x7f0000000200), 0x0, 0x0)

45.165475299s ago: executing program 2 (id=650):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000001"], 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='signal_generate\x00', r1}, 0x18)
syz_open_procfs$namespace(0x0, 0xfffffffffffffffe)

44.892162196s ago: executing program 2 (id=653):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x5c, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_EXPR={0x20, 0x11, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0xfffff274}]}}}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x70}}}}}}}, 0x0)
syz_emit_ethernet(0x4e, &(0x7f0000000380)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x11, 0x0, 0x3, {[@sack_perm={0x4, 0x2}]}}}}}}}}, 0x0)

44.785070032s ago: executing program 2 (id=654):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000080)='./file1\x00', 0x80, &(0x7f00000004c0)={[{@nobarrier}, {@gid}, {}, {@force}, {}, {@nodecompose}, {@nls={'nls', 0x3d, 'default'}}]}, 0x44, 0x6fc, &(0x7f0000003180)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1480, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1edc01, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000180)='./file0/../file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000cd5, &(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x0, 0x307, &(0x7f0000000080)="$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")
getdents64(0xffffffffffffffff, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.freeze\x00', 0x275a, 0x0)
ioctl$FIBMAP(r1, 0x1, 0xfffffffffffffffe)
renameat2(0xffffffffffffffff, &(0x7f00000003c0)='./file0\x00', r1, &(0x7f0000000400)='./file0\x00', 0x2)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)

44.545218041s ago: executing program 2 (id=656):
sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="04000226", @ANYRES16=0x0, @ANYBLOB="00000000000000000004e800000008000317"], 0x1c}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b28, &(0x7f0000000000)={'wlan0\x00'})

43.232257366s ago: executing program 2 (id=667):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x1, 0x13580, 0x0, 0x1ff}, &(0x7f0000000100), &(0x7f0000000280))
io_uring_enter(r0, 0x55, 0x84a23, 0xf, 0x0, 0x0)

42.967465314s ago: executing program 33 (id=667):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r0 = syz_io_uring_setup(0x1f87, &(0x7f0000000080)={0x0, 0x1, 0x13580, 0x0, 0x1ff}, &(0x7f0000000100), &(0x7f0000000280))
io_uring_enter(r0, 0x55, 0x84a23, 0xf, 0x0, 0x0)

4.089430565s ago: executing program 1 (id=1067):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000980)={0x98, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_NAT_SRC={0x4}]}, 0x98}}, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={0xc0, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x2c, 0x6, 0x0, 0x1, [@CTA_NAT_V6_MAXIP={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x31}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4040081}, 0x0)

4.089273788s ago: executing program 1 (id=1068):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000880), r0)
sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4008020}, 0x40010)

4.041324674s ago: executing program 1 (id=1069):
syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f0000000580)='./bus\x00', 0x200080, &(0x7f0000000180), 0x1, 0x783, &(0x7f0000001000)="$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")
unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
pwrite64(r0, &(0x7f0000000140)='2', 0x1, 0x8080c61)
fallocate(r0, 0x0, 0x1, 0x8000c62)

3.928955029s ago: executing program 1 (id=1072):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
chdir(&(0x7f0000000140)='./bus\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f0000000080)={[{@rodir}, {@numtail}, {@shortname_winnt}, {@uni_xlate}, {@uni_xlate}, {@fat=@codepage={'codepage', 0x3d, '865'}}, {@rodir}, {@iocharset={'iocharset', 0x3d, 'iso8859-4'}}, {@shortname_mixed}, {@shortname_win95}, {@uni_xlateno}, {@uni_xlate}]}, 0x5, 0x271, &(0x7f0000000780)="$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")
ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0)

3.780663868s ago: executing program 1 (id=1077):
syz_emit_ethernet(0x66, &(0x7f00000001c0)={@link_local={0x5}, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @empty}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x6558, 0x0, 0xfefc}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0)

2.959346325s ago: executing program 1 (id=1081):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0)

2.888646631s ago: executing program 34 (id=1081):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x29}]}, @NFT_MSG_NEWSETELEM={0x30, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xb4}}, 0x0)

2.199590932s ago: executing program 3 (id=1088):
r0 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x18, 0x1405, 0x5, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}}, 0x0)

2.141600628s ago: executing program 3 (id=1090):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x1, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x4008004)

1.561419036s ago: executing program 3 (id=1097):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x54, 0x10, 0x49920d862a92153b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x180}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @veth={{0x9}, {0x18, 0x2, 0x0, 0x1, @val=@VETH_INFO_PEER={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x480, 0x22b03}}}}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x54}}, 0x0)

1.507591243s ago: executing program 3 (id=1099):
syz_usb_connect(0x3, 0x367, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x0)

1.507414751s ago: executing program 4 (id=1100):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x50}}, 0x0)

1.389070406s ago: executing program 4 (id=1101):
ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000003c0)={{0x80}, 'port0\x00', 0x511e36599023629, 0x100000, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4})
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r0, 0x0)
r1 = syz_io_uring_setup(0x3480, &(0x7f00000002c0)={0x0, 0x0, 0x10100}, &(0x7f0000000240)=<r2=>0x0, &(0x7f0000000680)=<r3=>0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='2'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_READ_FIXED)
io_uring_enter(r1, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

1.22827178s ago: executing program 4 (id=1102):
r0 = syz_open_dev$admmidi(&(0x7f0000000140), 0x20, 0x0)
r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x80383, 0x0)
poll(&(0x7f0000000380)=[{r0, 0x1200}], 0x1, 0x60000000)
ioctl$SNDCTL_SEQ_RESET(r1, 0x5100)

263.249553ms ago: executing program 4 (id=1103):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="8d", 0x1)

188.341917ms ago: executing program 4 (id=1104):
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
io_setup(0x3ff, &(0x7f0000000500)=<r1=>0x0)
io_getevents(r1, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0)
io_submit(r1, 0x1, &(0x7f0000000300)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])
io_destroy(r1)

130.003393ms ago: executing program 3 (id=1105):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x22041)
ioctl$DRM_IOCTL_MODE_RMFB(r0, 0xc00464af, &(0x7f0000000040))

53.952663ms ago: executing program 3 (id=1106):
syz_usb_connect(0x0, 0xe4, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000fb31ae201d0640c11dc1000000010902d20001180000000904"], 0x0)

0s ago: executing program 4 (id=1107):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = add_key(&(0x7f0000000000)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="ae", 0x1, 0xffffffffffffffff)
keyctl$read(0x2, r3, &(0x7f00000000c0)=""/4096, 0x1000)
keyctl$read(0xb, r3, &(0x7f00000010c0)=""/4096, 0x1000)
socket$inet6(0xa, 0x800000000000002, 0x0)
socket$inet_mptcp(0x2, 0x1, 0x106)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000980)={0x6}, 0x10)
r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000002100), 0x462000, 0x0)
statx(r4, 0x0, 0x400, 0x1, &(0x7f0000002180))
r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143441, 0x98)
pwritev2(r5, &(0x7f00000001c0)=[{0x0}], 0x1, 0xe7b, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0)
ioctl$PPPIOCNEWUNIT(r5, 0xc004743e, &(0x7f00000020c0)=0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$afs(0x0, &(0x7f0000002840)='./file0\x00', &(0x7f0000002880), 0x700, &(0x7f0000000200)=ANY=[@ANYBLOB='dyn'])

kernel console output (not intermixed with test programs):

 94.070165][ T6592] evm: overlay not supported
[   94.369853][ T6604] loop1: detected capacity change from 0 to 128
[   96.145065][ T6636] sp0: Synchronizing with TNC
[   96.355751][ T5939] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[   96.554310][ T5939] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47
[   96.565717][ T5939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.581163][ T5939] usb 3-1: config 0 descriptor??
[   96.591260][ T5939] gspca_main: STV06xx-2.14.0 probing 046d:0870
[   96.824585][ T6642] loop0: detected capacity change from 0 to 1024
[   96.886879][ T6642] =======================================================
[   96.886879][ T6642] WARNING: The mand mount option has been deprecated and
[   96.886879][ T6642]          and is ignored by this kernel. Remove the mand
[   96.886879][ T6642]          option from the mount to silence this warning.
[   96.886879][ T6642] =======================================================
[   96.991266][ T1089] hfsplus: b-tree write err: -5, ino 4
[   97.151536][ T6644] loop0: detected capacity change from 0 to 1764
[   97.200587][ T6644] iso9660: Corrupted directory entry in block 2 of inode 1920
[   97.413179][ T5939] usb 3-1: USB disconnect, device number 8
[   97.420338][ T6646] program syz.0.305 is using a deprecated SCSI ioctl, please convert it to SG_IO
[   97.682630][ T6662] loop0: detected capacity change from 0 to 2048
[   97.698113][ T6662] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   97.709075][   T33] audit: type=1800 audit(1755053920.378:3): pid=6662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.313" name="file1" dev="loop0" ino=1415 res=0 errno=0
[   97.991946][ T6680] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   98.004063][ T6680] netlink: 8 bytes leftover after parsing attributes in process `syz.0.321'.
[   98.045235][ T6682] loop2: detected capacity change from 0 to 256
[   98.059667][ T6682] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[   98.828350][ T6692] netlink: 'syz.1.325': attribute type 11 has an invalid length.
[   98.890503][ T6694] loop1: detected capacity change from 0 to 256
[   99.161378][ T6702] macvtap0: entered allmulticast mode
[   99.167965][ T6702] veth0_macvtap: entered allmulticast mode
[   99.203431][ T5940] hid-generic 0000:0000:0000.0004: unknown main item tag 0x0
[   99.426219][ T6707] loop0: detected capacity change from 0 to 764
[   99.434099][ T5940] hid-generic 0000:0000:0000.0004: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[   99.450209][ T6707] rock: corrupted directory entry. extent=32, offset=2044, size=237
[   99.809051][ T6714] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   99.842944][ T6716] loop1: detected capacity change from 0 to 4096
[   99.848827][ T6716] ntfs3(loop1): Primary boot: invalid sectors per cluster 75.
[   99.851763][ T6716] ntfs3(loop1): try to read out of volume at offset 0x1ffe00
[  100.174245][ T6739] comedi comedi2: fl512: I/O port conflict (0x1009e1,16)
[  100.233018][ T6747] binder: 6743:6747 ioctl c00c6211 ffffffffffffffff returned -14
[  100.540103][ T6751] loop2: detected capacity change from 0 to 32768
[  100.734337][ T6751] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[  100.993531][ T5878] ocfs2: Unmounting device (7,2) on (node local)
[  102.165865][ T5885] Bluetooth: hci1: command tx timeout
[  102.715112][ T6827] loop0: detected capacity change from 0 to 8
[  102.723608][ T6827] squashfs: Bad value for 'errors'
[  103.045578][ T5940] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  103.220063][ T5940] usb 1-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02
[  103.223938][ T5940] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  103.227470][ T5940] usb 1-1: Product: syz
[  103.229428][ T5940] usb 1-1: Manufacturer: syz
[  103.231444][ T5940] usb 1-1: SerialNumber: syz
[  103.235590][ T5940] usb 1-1: config 0 descriptor??
[  103.242359][ T5940] gspca_main: sunplus-2.14.0 probing 04fc:504a
[  103.549345][ T6840] loop1: detected capacity change from 0 to 16
[  103.589322][ T6839] loop2: detected capacity change from 0 to 1024
[  103.604686][ T6839] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  103.609783][ T6839] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  103.614051][ T6839] EXT4-fs (loop2): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  103.620623][ T6839] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (53380!=20869)
[  103.623845][ T6839] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  103.628117][ T6839] EXT4-fs error (device loop2): ext4_get_journal_inode:5796: comm syz.2.381: inode #1: comm syz.2.381: iget: illegal inode #
[  103.632805][ T6839] EXT4-fs (loop2): Remounting filesystem read-only
[  103.635249][ T6839] EXT4-fs (loop2): no journal found
[  103.675223][ T6845] netlink: 'syz.1.384': attribute type 3 has an invalid length.
[  103.680352][ T6845] netlink: 766 bytes leftover after parsing attributes in process `syz.1.384'.
[  103.850691][ T5940] gspca_sunplus: reg_r err -71
[  103.852268][ T5940] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  103.856685][ T5940] usb 1-1: USB disconnect, device number 6
[  104.729207][ T6881] loop0: detected capacity change from 0 to 4096
[  104.733124][ T6881] ntfs3(loop0): Different NTFS sector size (4096) and media sector size (512).
[  104.892808][ T6883] loop2: detected capacity change from 0 to 32768
[  104.946129][ T6881] ntfs3(loop0): ino=19, mi_enum_attr
[  104.964519][ T6881] ntfs3(loop0): ino=5, "/" indx_read
[  104.968871][ T6881] ntfs3(loop0): ino=5, "/" ntfs_readdir
[  105.008852][ T6883] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  105.008864][ T6883]   allowing incompatible features above 0.0: (unknown version)
[  105.008869][ T6883]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  105.022725][ T6883] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  105.025407][ T6883] bcachefs (loop2): initializing new filesystem
[  105.033845][ T6883] bcachefs (loop2): going read-write
[  105.047719][ T6883] bcachefs (loop2): marking superblocks
[  105.062597][ T6883] bcachefs (loop2): initializing freespace
[  105.072762][ T6883] bcachefs (loop2): done initializing freespace
[  105.082858][ T6883] bcachefs (loop2): reading snapshots table
[  105.085857][ T6883] bcachefs (loop2): reading snapshots done
[  105.145796][ T6883] bcachefs (loop2): done starting filesystem
[  105.219549][   T33] audit: type=1800 audit(1755053927.888:4): pid=6883 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.401" name="file1" dev="loop2" ino=4098 res=0 errno=0
[  105.223471][ T6883] syz.2.401 (6883) used greatest stack depth: 17432 bytes left
[  105.294032][ T5878] bcachefs (loop2): shutting down
[  105.298517][ T5878] bcachefs (loop2): going read-only
[  105.302087][ T5878] bcachefs (loop2): finished waiting for writes to stop
[  105.334217][ T5878] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  105.419328][ T5878] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  105.426798][ T5878] bcachefs (loop2): clean shutdown complete, journal seq 4
[  105.431582][ T5878] bcachefs (loop2): marking filesystem clean
[  105.505359][ T5878] bcachefs (loop2): shutdown complete
[  105.845961][ T5940] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  105.998948][ T5940] usb 2-1: config index 0 descriptor too short (expected 23569, got 27)
[  106.001885][ T5940] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  106.005262][ T5940] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  106.009722][ T5940] usb 2-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0
[  106.012955][ T5940] usb 2-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[  106.015735][ T5940] usb 2-1: Manufacturer: syz
[  106.021933][ T5940] usb 2-1: config 0 descriptor??
[  106.437916][ T6910] loop0: detected capacity change from 0 to 32768
[  106.790692][    T9] usb 2-1: USB disconnect, device number 7
[  107.001291][ T6921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.413'.
[  107.287457][ T6925] loop0: detected capacity change from 0 to 24
[  107.291366][ T6925] MTD: Attempt to mount non-MTD device "/dev/loop0"
[  107.304597][ T6925] romfs: Mounting image 'rom 637cf1fa' through the block layer
[  107.707652][ T6931] loop1: detected capacity change from 0 to 4096
[  107.958334][ T6933] loop1: detected capacity change from 0 to 4096
[  107.966333][ T6933] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  107.993965][ T6933] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  108.296965][ T6947] loop1: detected capacity change from 0 to 4096
[  108.300173][ T6947] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  108.337758][ T6947] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  108.379986][   T26] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[  108.389432][ T5877] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  108.393867][ T5877] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  108.396486][ T5877] ntfs3(loop1): ino=3, ntfs_set_state failed, -22.
[  108.399320][   T26] ntfs3(loop1): ino=3, ntfs3_write_inode failed, -22.
[  109.545733][ T6964] loop0: detected capacity change from 0 to 32768
[  109.657018][ T6964] JBD2: Ignoring recovery information on journal
[  109.720365][ T6964] jbd2_journal_bmap: journal block not found at offset 32 on loop0-75
[  109.727530][ T6964] JBD2: bad block at offset 32
[  109.834929][ T6964] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[  109.928729][ T5873] ocfs2: Unmounting device (7,0) on (node local)
[  110.112432][ T6978] loop2: detected capacity change from 0 to 512
[  110.134864][ T6978] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8856c01c, mo2=0002]
[  110.144923][ T6978] EXT4-fs (loop2): orphan cleanup on readonly fs
[  110.151075][ T6978] EXT4-fs error (device loop2): ext4_quota_enable:7124: inode #15: comm syz.2.438: iget: bad i_size value: 360287970189639690
[  110.158058][ T6978] EXT4-fs error (device loop2): ext4_quota_enable:7127: comm syz.2.438: Bad quota inode: 15, type: 2
[  110.162923][ T6978] EXT4-fs warning (device loop2): ext4_enable_quotas:7168: Failed to enable quota tracking (type=2, err=-117, ino=15). Please run e2fsck to fix.
[  110.171474][ T6978] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  110.177848][ T6978] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  110.201408][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  110.265673][    T9] usb 1-1: new full-speed USB device number 7 using dummy_hcd
[  110.270729][ T6983] loop1: detected capacity change from 0 to 512
[  110.274649][ T6983] EXT4-fs: Ignoring removed bh option
[  110.295951][ T6983] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  110.310896][ T6983] EXT4-fs (loop1): 1 truncate cleaned up
[  110.319115][ T6983] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  110.442105][    T9] usb 1-1: config 162 has an invalid interface number: 35 but max is 0
[  110.445226][    T9] usb 1-1: config 162 has no interface number 0
[  110.455560][    T9] usb 1-1: config 162 interface 35 has no altsetting 0
[  110.459967][    T9] usb 1-1: New USB device found, idVendor=05ac, idProduct=0254, bcdDevice=b9.11
[  110.463110][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.477993][    T9] usb 1-1: Product: syz
[  110.481265][    T9] usb 1-1: Manufacturer: syz
[  110.501261][    T9] usb 1-1: SerialNumber: syz
[  110.717324][   T33] audit: type=1800 audit(1755053933.288:5): pid=6989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.440" name="bus" dev="loop1" ino=18 res=0 errno=0
[  110.880108][    T9] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:162.35/input/input9
[  110.888251][ T5281] bcm5974 1-1:162.35: could not read from device
[  110.894248][ T6987] loop2: detected capacity change from 0 to 32768
[  110.908325][ T5281] bcm5974 1-1:162.35: could not read from device
[  110.915916][ T5281] bcm5974 1-1:162.35: could not read from device
[  110.920365][    T9] usb 1-1: USB disconnect, device number 7
[  110.924131][ T5281] bcm5974 1-1:162.35: could not read from device
[  110.964441][ T6987] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,fix_errors=yes,norecovery,nojournal_transaction_names,read_only
[  110.964453][ T6987]   allowing incompatible features above 0.0: (unknown version)
[  110.964457][ T6987]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  110.982034][ T6987] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  110.984927][ T6987] bcachefs (loop2): recovering from clean shutdown, journal seq 10
[  110.987976][ T6987] bcachefs (loop2): Doing compatible version upgrade from 1.7: mi_btree_bitmap to 1.28: inode_has_case_insensitive
[  110.987976][ T6987]   running recovery passes: check_allocations,check_extents_to_backpointers,check_inodes
[  111.006708][ T6987] bcachefs (loop2): btree node read error at btree alloc level 0/0
[  111.006734][ T6987]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq ac62141f8dc7e261 written 24 min_key POS_MIN durability: 1 ptr: 0:26:0 gen 0
[  111.006740][ T6987]   loop2 node offset 0/24: got wrong btree node: got
[  111.006744][ T6987]   btree=alloc level=0 seq 98dc7e261 1
[  111.006748][ T6987]   min: POS_MIN
[  111.006751][ T6987]   max: SPOS_MAX
[  111.006754][ T6987]   loop2 btree validate error
[  111.006758][ T6987]   flagging btree alloc lost data
[  111.006762][ T6987]   running recovery pass check_topology (2), currently at recovery_pass_empty (0)
[  111.006766][ T6987]   running recovery pass check_lrus (14), currently at recovery_pass_empty (0)
[  111.006770][ T6987]   running recovery pass check_backpointers_to_extents (16), currently at recovery_pass_empty (0)
[  111.006775][ T6987]   running recovery pass check_alloc_info (13), currently at recovery_pass_empty (0)
[  111.006780][ T6987]   ret btree_node_read_err_bad_node
[  111.049806][ T6987] bcachefs (loop2): error reading btree root btree=alloc level=0: btree_node_read_error, fixing
[  111.058171][ T6987] bcachefs (loop2): btree node read error at btree lru level 0/0
[  111.058185][ T6987]   u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 28f61e078e70b95c written 16 min_key 0:196608:0 durability: 1 ptr: 0:28:0 gen 0
[  111.058198][ T6987]   loop2 node offset 0/16: incorrect min_key: got POS_MIN should be 0:196608:0
[  111.058206][ T6987]   loop2 btree validate error
[  111.058212][ T6987]   flagging btree lru lost data
[  111.058219][ T6987]   ret btree_node_read_err_bad_node
[  111.077794][ T6987] bcachefs (loop2): error reading btree root btree=lru level=0: btree_node_read_error, fixing
[  111.083410][ T6987] bcachefs (loop2): btree node read error at btree freespace level 0/0
[  111.083424][ T6987]   u64s 11 type btree_ptr_v2 36591746972385279:U64_MAX:U32_MAX len 0 ver 0: seq e81e1ed936acf3df written 32 min_key POS_MIN durability: 1 ptr: 0:29:0 gen 0
[  111.083435][ T6987]   loop2 node offset 0/32 bset u64s 0: incorrect max key SPOS_MAX
[  111.083443][ T6987]   loop2 btree validate error
[  111.083450][ T6987]   flagging btree freespace lost data
[  111.083457][ T6987]   ret btree_node_read_err_bad_node
[  111.105241][ T6987] bcachefs (loop2): error reading btree root btree=freespace level=0: btree_node_read_error, fixing
[  111.142969][ T6987] bcachefs (loop2): check_topology... done
[  111.146942][ T6987] bcachefs (loop2): accounting_read... done
[  111.191723][ T6987] bcachefs (loop2): alloc_read... done
[  111.194157][ T6987] bcachefs (loop2): snapshots_read... done
[  111.198166][ T6987] bcachefs (loop2): Fixed errors, running fsck a second time to verify fs is clean
[  111.200511][ T5877] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  111.201438][ T6987] bcachefs (loop2): done starting filesystem
[  111.273475][ T5878] bcachefs (loop2): shutting down
[  111.288726][ T5878] bcachefs (loop2): shutdown complete
[  111.484812][ T7002] team0: No ports can be present during mode change
[  111.515594][    T9] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  111.533415][ T7004] netlink: 28 bytes leftover after parsing attributes in process `syz.0.449'.
[  111.594946][ T7006] unknown channel width for channel at 909000KHz?
[  111.630174][ T7008] sch_tbf: burst 32855 is lower than device lo mtu (65550) !
[  111.681057][    T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  111.684060][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  111.690284][    T9] usb 2-1: config 0 descriptor??
[  111.696265][    T9] cp210x 2-1:0.0: cp210x converter detected
[  111.704359][ T7012] sp0: Synchronizing with TNC
[  112.108132][ T7016] use of bytesused == 0 is deprecated and will be removed in the future,
[  112.112068][ T7016] use the actual size instead.
[  112.395765][    T9] cp210x 2-1:0.0: failed to get vendor val 0x000e size 3: -32
[  112.424965][    T9] usb 2-1: cp210x converter now attached to ttyUSB0
[  112.607407][   T47] usb 2-1: USB disconnect, device number 8
[  112.617848][   T47] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  112.633169][   T47] cp210x 2-1:0.0: device disconnected
[  113.535634][    T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd
[  113.697726][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  113.702368][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  113.706639][    T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[  113.710348][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  113.724305][    T9] usb 2-1: config 0 descriptor??
[  113.970745][ T7064] loop2: detected capacity change from 0 to 32768
[  113.993438][ T7064] (syz.2.475,7064,1):ocfs2_read_journal_inode:1659 ERROR: status = -13
[  114.002580][ T7064] (syz.2.475,7064,1):ocfs2_mark_dead_nodes:1942 ERROR: status = -13
[  114.008171][ T7064] (syz.2.475,7064,1):ocfs2_check_volume:2420 ERROR: status = -13
[  114.015716][ T7064] (syz.2.475,7064,1):ocfs2_check_volume:2432 ERROR: status = -13
[  114.020822][ T7064] (syz.2.475,7064,1):ocfs2_mount_volume:1764 ERROR: status = -13
[  114.029345][ T7064] (syz.2.475,7064,1):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 77
[  114.049333][ T7064] (syz.2.475,7064,1):ocfs2_fill_super:1177 ERROR: status = -13
[  114.141427][    T9] konepure 0003:1E7D:2DBE.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2dbe] on usb-dummy_hcd.1-1/input0
[  114.341215][ T2147] usb 2-1: USB disconnect, device number 9
[  114.411956][ T7078] syz.2.481 uses obsolete (PF_INET,SOCK_PACKET)
[  114.618881][ T7080] loop2: detected capacity change from 0 to 32768
[  114.648424][ T7080] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  114.652142][ T7080] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  114.667626][ T7080] XFS (loop2): Ending clean mount
[  114.673646][ T7080] XFS (loop2): Quotacheck needed: Please wait.
[  114.693897][ T7080] XFS (loop2): Quotacheck: Done.
[  114.730107][ T5878] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  114.923135][ T7094] loop2: detected capacity change from 0 to 512
[  114.930207][ T7093] loop1: detected capacity change from 0 to 1024
[  114.933989][ T7093] EXT4-fs: Ignoring removed bh option
[  114.938936][ T7093] EXT4-fs (loop1): stripe (5) is not aligned with cluster size (16), stripe is disabled
[  114.962612][ T7094] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  114.969840][ T7093] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  114.974732][ T7094] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  115.006058][ T7093] overlay: Bad value for 'workdir'
[  115.049005][ T5877] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  116.197483][   T47] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  116.353446][   T47] usb 1-1: Using ep0 maxpacket: 16
[  116.405862][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has an invalid bInterval 0, changing to 7
[  116.421655][   T47] usb 1-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  116.425726][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.429167][   T47] usb 1-1: Product: syz
[  116.431008][   T47] usb 1-1: Manufacturer: syz
[  116.433225][   T47] usb 1-1: SerialNumber: syz
[  116.461217][   T47] usb 1-1: config 0 descriptor??
[  116.468229][ T7134] loop2: detected capacity change from 0 to 32768
[  116.483088][   T47] hub 1-1:0.0: bad descriptor, ignoring hub
[  116.487141][   T47] hub 1-1:0.0: probe with driver hub failed with error -5
[  116.502059][   T47] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  116.552928][ T7134] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  116.552939][ T7134]   allowing incompatible features above 0.0: (unknown version)
[  116.552944][ T7134]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  116.567409][ T7134] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[  116.570520][ T7134] bcachefs (loop2): initializing new filesystem
[  116.577334][ T7134] bcachefs (loop2): going read-write
[  116.602229][ T7134] bcachefs (loop2): marking superblocks
[  116.611169][ T7134] bcachefs (loop2): initializing freespace
[  116.616438][ T7134] bcachefs (loop2): done initializing freespace
[  116.620914][ T7134] bcachefs (loop2): reading snapshots table
[  116.623545][ T7134] bcachefs (loop2): reading snapshots done
[  116.649289][ T7134] bcachefs (loop2): done starting filesystem
[  116.698884][ T7151] netlink: 'syz.1.504': attribute type 10 has an invalid length.
[  116.747252][ T5878] bcachefs (loop2): shutting down
[  116.748455][ T7151] lo: entered promiscuous mode
[  116.750421][ T5878] bcachefs (loop2): going read-only
[  116.754009][ T5878] bcachefs (loop2): finished waiting for writes to stop
[  116.762048][ T7151] bond0: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  116.772005][   T33] audit: type=1326 audit(1755053939.438:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7122 comm="syz.0.496" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f04e3f8ebe9 code=0x0
[  116.805992][ T5878] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[  116.852715][ T5878] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[  116.866696][ T5878] bcachefs (loop2): clean shutdown complete, journal seq 4
[  116.872633][ T5878] bcachefs (loop2): marking filesystem clean
[  116.877947][ T5939] usb 1-1: USB disconnect, device number 8
[  116.899380][ T7158] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  116.902788][ T7158] overlayfs: missing 'lowerdir'
[  116.952807][ T7160] netlink: 8 bytes leftover after parsing attributes in process `syz.1.508'.
[  116.956380][ T5878] bcachefs (loop2): shutdown complete
[  117.631049][ T7166] loop1: detected capacity change from 0 to 1024
[  117.637024][ T7166] hfsplus: Unknown parameter '000000000000000000000000xffffffffffffffff'
[  118.652842][ T7183] loop1: detected capacity change from 0 to 1024
[  118.674834][ T7183] hfsplus: bad catalog entry type
[  118.700869][   T26] hfsplus: b-tree write err: -5, ino 4
[  118.914945][ T7194] loop0: detected capacity change from 0 to 1024
[  118.919344][ T7194] EXT4-fs: Ignoring removed orlov option
[  118.934780][ T7194] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[  118.965775][ T7194] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  119.007203][ T5873] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  119.144816][ T7209] loop2: detected capacity change from 0 to 1024
[  119.184888][ T7209] EXT4-fs: Ignoring removed bh option
[  119.224793][ T7209] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  119.258158][ T7219] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  119.284203][   T33] audit: type=1326 audit(1755053941.948:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7220 comm="syz.1.531" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9ca318ebe9 code=0x0
[  119.352905][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  119.641365][ T7238] loop0: detected capacity change from 0 to 128
[  119.645182][ T7238] FAT-fs (loop0): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  119.657063][ T7238] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  119.691913][   T36] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  120.078097][ T7263] program syz.0.550 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  120.795620][ T2147] usb 3-1: new full-speed USB device number 9 using dummy_hcd
[  120.947115][ T2147] usb 3-1: config 1 has an invalid interface number: 35 but max is 0
[  120.950505][ T2147] usb 3-1: config 1 has no interface number 0
[  120.953158][ T2147] usb 3-1: config 1 interface 35 altsetting 0 endpoint 0x4 has invalid maxpacket 1024, setting to 64
[  120.960989][ T2147] usb 3-1: New USB device found, idVendor=17cc, idProduct=1000, bcdDevice=2d.0a
[  120.964640][ T2147] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  120.982451][ T2147] usb 3-1: Product: syz
[  120.983888][ T2147] usb 3-1: Manufacturer: syz
[  120.985623][ T2147] usb 3-1: SerialNumber: syz
[  121.568615][ T2147] snd-usb-audio 3-1:1.35: probe with driver snd-usb-audio failed with error -71
[  121.575401][ T2147] usb 3-1: USB disconnect, device number 9
[  121.733744][ T7283] loop1: detected capacity change from 0 to 32768
[  121.751710][ T7283] XFS (loop1): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  121.779150][ T7283] XFS (loop1): Ending clean mount
[  121.810682][ T5877] XFS (loop1): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  122.117252][ T7304] syz.0.563: attempt to access beyond end of device
[  122.117252][ T7304] loop0: rw=0, sector=1, nr_sectors = 1 limit=0
[  122.126030][ T7304] qnx4: unable to read the superblock
[  122.180769][ T7309] loop2: detected capacity change from 0 to 128
[  122.207105][ T7309] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  122.233732][ T7309] ext4 filesystem being mounted at /167/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.285941][ T7312] loop0: detected capacity change from 0 to 1764
[  122.338558][ T5878] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  122.402280][ T7314] mmap: syz.2.567 (7314) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[  122.599748][ T5939] kernel write not supported for file /register (pid: 5939 comm: kworker/0:6)
[  122.668604][    T9] usb 1-1: new full-speed USB device number 9 using dummy_hcd
[  122.734717][ T7326] loop1: detected capacity change from 0 to 512
[  122.766223][ T7320] loop2: detected capacity change from 0 to 32768
[  122.773105][ T7320] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.570 (7320)
[  122.779042][ T7326] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  122.783727][ T7326] ext4 filesystem being mounted at /189/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  122.805820][ T7320] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  122.815040][   T33] audit: type=1800 audit(1755053945.478:8): pid=7326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.573" name="file1" dev="loop1" ino=15 res=0 errno=0
[  122.815069][ T7320] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[  122.836218][   T33] audit: type=1800 audit(1755053945.498:9): pid=7326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.573" name="file2" dev="loop1" ino=16 res=0 errno=0
[  122.856267][   T33] audit: type=1800 audit(1755053945.498:10): pid=7326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.573" name="file1" dev="loop1" ino=15 res=0 errno=0
[  122.866839][    T9] usb 1-1: config 0 has an invalid interface number: 46 but max is 0
[  122.867543][ T7320] BTRFS info (device loop2): using free-space-tree
[  122.876115][    T9] usb 1-1: config 0 has no interface number 0
[  122.878860][    T9] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  122.883062][    T9] usb 1-1: config 0 interface 46 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  122.913454][    T9] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[  122.917912][    T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.921394][    T9] usb 1-1: Product: syz
[  122.935530][    T9] usb 1-1: Manufacturer: syz
[  122.937582][    T9] usb 1-1: SerialNumber: syz
[  122.946102][    T9] usb 1-1: config 0 descriptor??
[  122.959761][    T9] ums-karma 1-1:0.46: USB Mass Storage device detected
[  123.035712][    T9] ums-karma 1-1:0.46: probe with driver ums-karma failed with error -5
[  123.070365][ T5877] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  123.182815][ T2147] usb 1-1: USB disconnect, device number 9
[  123.207613][ T5878] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  123.278654][ T7352] loop1: detected capacity change from 0 to 8192
[  123.339671][ T6159]  loop1: p1 p2 p3 p4
[  123.341581][ T6159] loop1: partition table partially beyond EOD, truncated
[  123.360658][ T6159] loop1: p3 start 331777 is beyond EOD, truncated
[  123.363597][ T6159] loop1: p4 size 262144 extends beyond EOD, truncated
[  123.416114][ T7352]  loop1: p1 p2 p3 p4
[  123.417525][ T7352] loop1: partition table partially beyond EOD, truncated
[  123.421792][ T7352] loop1: p3 start 331777 is beyond EOD, truncated
[  123.424070][ T7352] loop1: p4 size 262144 extends beyond EOD, truncated
[  123.568818][ T5874] udevd[5874]: inotify_add_watch(7, /dev/loop1p1, 10) failed: No such file or directory
[  123.583288][ T6159] udevd[6159]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  123.590810][ T5949] udevd[5949]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  123.633221][ T5874] udevd[5874]: inotify_add_watch(7, /dev/loop1p2, 10) failed: No such file or directory
[  123.636653][ T6159] udevd[6159]: inotify_add_watch(7, /dev/loop1p4, 10) failed: No such file or directory
[  123.900686][ T7370] loop0: detected capacity change from 0 to 2048
[  123.935852][ T7371] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  123.949732][ T7362] loop2: detected capacity change from 0 to 32768
[  123.957592][ T7370] NILFS (loop0): error -2 truncating bmap (ino=16)
[  123.972849][ T7362] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  123.992061][ T7371] NILFS (loop0): vblocknr = 15 has abnormal lifetime: start cno (= 4128770) > current cno (= 3)
[  123.999059][ T7371] NILFS error (device loop0): nilfs_bmap_propagate: broken bmap (inode number=16)
[  123.999379][ T7362] XFS (loop2): Ending clean mount
[  124.009522][ T7371] Remounting filesystem read-only
[  124.012944][ T5873] NILFS (loop0): disposed unprocessed dirty file(s) when stopping log writer
[  124.063232][ T5878] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  124.395683][ T2147] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  124.486054][   T10] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  124.645840][   T10] usb 3-1: Using ep0 maxpacket: 32
[  124.649686][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.653503][   T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.657406][   T10] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  124.660502][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.669634][   T10] usb 3-1: config 0 descriptor??
[  124.685740][ T2147] usb 1-1: Using ep0 maxpacket: 8
[  124.974865][   T10] hub 3-1:0.0: USB hub found
[  125.005180][   T10] hub 3-1:0.0: 1 port detected
[  125.046699][ T2147] usb 1-1: config 0 has an invalid interface number: 246 but max is 0
[  125.050176][ T2147] usb 1-1: config 0 has no interface number 0
[  125.055074][ T2147] usb 1-1: New USB device found, idVendor=2040, idProduct=d300, bcdDevice=16.b3
[  125.059440][ T2147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.062609][ T2147] usb 1-1: Product: syz
[  125.064283][ T2147] usb 1-1: Manufacturer: syz
[  125.069989][ T2147] usb 1-1: SerialNumber: syz
[  125.074030][ T2147] usb 1-1: config 0 descriptor??
[  125.125122][ T2147] msi2500 1-1:0.246: Registered as swradio24
[  125.128052][ T2147] msi2500 1-1:0.246: SDR API is still slightly experimental and functionality changes may follow
[  125.288897][ T2147] usb 1-1: USB disconnect, device number 10
[  125.420907][   T10] usb 3-1: USB disconnect, device number 10
[  125.675725][ T5939] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  125.818261][ T7400] loop0: detected capacity change from 0 to 1024
[  125.821272][ T7400] EXT4-fs (loop0): ext4_check_descriptors: Checksum for group 0 failed (7780!=20869)
[  125.824511][ T7400] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  125.829762][ T7400] EXT4-fs (loop0): invalid journal inode
[  125.831668][ T7400] EXT4-fs (loop0): can't get journal size
[  125.835736][ T5939] usb 2-1: Using ep0 maxpacket: 16
[  125.836149][ T7400] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #3: block 17104912: comm syz.0.591: lblock 2 mapped to illegal pblock 17104912 (length 1)
[  125.842597][ T5939] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  125.847380][ T7400] EXT4-fs (loop0): failed to initialize system zone (-117)
[  125.851458][ T7400] EXT4-fs (loop0): mount failed
[  125.859298][ T5939] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  125.868887][ T5939] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  125.885559][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  125.892646][ T5939] usb 2-1: Product: syz
[  125.894446][ T5939] usb 2-1: Manufacturer: syz
[  125.903606][ T5939] usb 2-1: SerialNumber: syz
[  125.913907][ T5939] usb 2-1: config 0 descriptor??
[  125.949157][ T5939] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  125.954237][ T5939] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  125.958220][ T7405] loop0: detected capacity change from 0 to 256
[  125.964006][ T7405] exfat: Deprecated parameter 'utf8'
[  125.971631][ T7405] exfat: Deprecated parameter 'namecase'
[  125.974435][ T7405] exfat: Deprecated parameter 'namecase'
[  125.977691][ T7405] exfat: Deprecated parameter 'utf8'
[  125.991172][ T7405] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x8212fc2e, utbl_chksum : 0xe619d30d)
[  126.532212][ T5939] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  126.543195][ T5939] em28xx 2-1:0.0: Config register raw data: 0xfe
[  126.547150][ T5939] em28xx 2-1:0.0: I2S Audio (3 sample rate(s))
[  126.549696][ T5939] em28xx 2-1:0.0: No AC97 audio processor
[  126.608457][ T7423] geneve2: entered promiscuous mode
[  126.610756][ T7423] geneve2: entered allmulticast mode
[  126.718330][ T7425] capability: warning: `syz.0.602' uses deprecated v2 capabilities in a way that may be insecure
[  126.723225][ T7425] 9pnet_rdma: rdma_create_trans (7425): problem binding to privport: 13
[  126.799899][ T7429] netlink: 'syz.0.604': attribute type 21 has an invalid length.
[  126.803256][ T7429] netlink: 152 bytes leftover after parsing attributes in process `syz.0.604'.
[  126.979677][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'.
[  126.997532][ T7439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.609'.
[  126.998312][   T13] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  127.007164][   T13] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  127.010672][   T13] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  127.023095][   T13] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  127.088533][ T7443] loop2: detected capacity change from 0 to 512
[  127.111225][ T7443] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  127.118611][ T7443] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  127.163846][ T7443] EXT4-fs (loop2): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[  127.185128][ T5878] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  127.327430][ T7456] netlink: 'syz.0.615': attribute type 3 has an invalid length.
[  127.332676][ T7456] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.615'.
[  127.355076][ T5939] usb 2-1: USB disconnect, device number 10
[  127.665559][ T5879] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  127.818694][ T5879] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  127.823130][ T5879] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2
[  127.826817][ T5879] usb 1-1: config 1 has no interface number 0
[  127.829564][ T5879] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  127.834256][ T5879] usb 1-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  127.838680][ T5879] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  127.847107][ T5879] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  127.851066][ T5879] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.854417][ T5879] usb 1-1: Product: syz
[  127.857314][ T5879] usb 1-1: Manufacturer: syz
[  127.859362][ T5879] usb 1-1: SerialNumber: syz
[  128.335021][ T7467] loop1: detected capacity change from 0 to 128
[  128.347635][ T7467] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  128.471503][ T5879] cdc_ncm 1-1:1.1: bind() failure
[  128.485628][ T5879] usb 1-1: USB disconnect, device number 11
[  128.587766][ T7477] loop1: detected capacity change from 0 to 512
[  128.609567][ T7477] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  128.613860][ T7477] ext4 filesystem being mounted at /204/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  129.408667][ T7495] loop0: detected capacity change from 0 to 1024
[  129.438401][ T7495] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.474101][ T5873] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.532138][ T5877] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  129.661075][ T7503] overlayfs: statfs failed on './file0'
[  129.836847][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'.
[  129.840594][ T7511] netlink: 8 bytes leftover after parsing attributes in process `syz.0.639'.
[  129.893565][ T7513] fuse: Bad value for 'fd'
[  129.900643][ T7513] loop0: detected capacity change from 0 to 512
[  129.918066][ T7513] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[  129.927417][ T7507] loop1: detected capacity change from 0 to 32768
[  129.947633][ T7513] EXT4-fs (loop0): 1 truncate cleaned up
[  129.957795][ T7507] XFS (loop1): DAX unsupported by block device. Turning off DAX.
[  129.960487][ T7513] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  129.960791][ T7507] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  129.988282][ T7507] XFS (loop1): Ending clean mount
[  129.992287][ T7507] XFS (loop1): Quotacheck needed: Please wait.
[  130.004611][ T5873] EXT4-fs error (device loop0): ext4_lookup:1787: inode #11: comm syz-executor: iget: bad extra_isize 46 (inode size 256)
[  130.011814][ T5873] EXT4-fs (loop0): Remounting filesystem read-only
[  130.025711][ T7507] XFS (loop1): Quotacheck: Done.
[  130.056701][ T5877] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  130.238852][ T5873] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  130.270554][ T7526] loop2: detected capacity change from 0 to 1024
[  130.368325][ T7440] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.372991][ T7440] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.557771][ T7440] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.562194][ T7440] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.604092][ T7533] loop1: detected capacity change from 0 to 128
[  130.611691][ T7533] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  130.618508][ T7533] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  130.702901][ T7440] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.723332][ T7440] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  130.905036][ T7440] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  130.918565][ T7440] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  131.288372][ T7440] bridge_slave_1: left allmulticast mode
[  131.290989][ T7440] bridge_slave_1: left promiscuous mode
[  131.295191][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state
[  131.348205][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  131.352847][ T7440] bridge_slave_0: left allmulticast mode
[  131.354840][ T7440] bridge_slave_0: left promiscuous mode
[  131.358239][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state
[  131.362382][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  131.370247][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  131.376848][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  131.381713][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  132.009250][ T7440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  132.026192][ T7440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  132.037615][ T7440] bond0 (unregistering): Released all slaves
[  132.364346][ T7551] loop1: detected capacity change from 0 to 512
[  132.398610][ T7551] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  132.404036][ T7551] ext4 filesystem being mounted at /214/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  132.492368][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  132.498718][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  132.552386][ T7561] loop2: detected capacity change from 0 to 1024
[  132.580222][ T5877] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  132.688677][ T5878] hfsplus: bad catalog entry type
[  132.755238][   T29] hfsplus: b-tree write err: -5, ino 4
[  132.809708][ T7440] hsr_slave_0: left promiscuous mode
[  132.818907][ T7440] hsr_slave_1: left promiscuous mode
[  132.822063][ T7440] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  132.825438][ T7440] batman_adv: batadv0: Removing interface: batadv_slave_0
[  132.834381][ T7440] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  132.838880][ T7440] batman_adv: batadv0: Removing interface: batadv_slave_1
[  132.873814][ T7440] veth1_macvtap: left promiscuous mode
[  132.886116][ T7440] veth0_macvtap: left allmulticast mode
[  132.888859][ T7440] veth0_macvtap: left promiscuous mode
[  132.891441][ T7440] veth1_vlan: left promiscuous mode
[  132.893790][ T7440] veth0_vlan: left promiscuous mode
[  132.930824][ T5885] Bluetooth: hci2: unknown advertising packet type: 0x82
[  132.930873][ T5885] Bluetooth: hci2: Dropping invalid advertising data
[  132.937141][ T5885] Bluetooth: hci2: Malformed LE Event: 0x02
[  133.331055][ T7440] team0 (unregistering): Port device team_slave_1 removed
[  133.366732][ T7440] team0 (unregistering): Port device C removed
[  133.447433][ T5885] Bluetooth: hci0: command tx timeout
[  133.561729][ T7575] loop1: detected capacity change from 0 to 64
[  133.805159][ T7539] chnl_net:caif_netlink_parms(): no params data found
[  133.920656][ T7587] loop1: detected capacity change from 0 to 128
[  133.952237][ T7539] bridge0: port 1(bridge_slave_0) entered blocking state
[  133.961037][ T7539] bridge0: port 1(bridge_slave_0) entered disabled state
[  133.963798][ T7539] bridge_slave_0: entered allmulticast mode
[  133.977356][ T7539] bridge_slave_0: entered promiscuous mode
[  133.988221][ T7539] bridge0: port 2(bridge_slave_1) entered blocking state
[  133.995886][ T7539] bridge0: port 2(bridge_slave_1) entered disabled state
[  133.998417][ T7539] bridge_slave_1: entered allmulticast mode
[  134.010715][ T7539] bridge_slave_1: entered promiscuous mode
[  134.025642][ T5878] syz-executor (5878) used greatest stack depth: 17288 bytes left
[  134.067550][ T7539] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  134.073311][ T7539] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  134.087487][ T7593] loop1: detected capacity change from 0 to 256
[  134.126068][ T7593] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d)
[  134.157635][ T7593] netlink: 56 bytes leftover after parsing attributes in process `syz.1.666'.
[  134.188514][ T7539] team0: Port device team_slave_0 added
[  134.191914][ T7539] team0: Port device team_slave_1 added
[  134.219189][ T7539] batman_adv: batadv0: Adding interface: batadv_slave_0
[  134.221517][ T7539] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.231861][ T7539] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  134.241464][ T7539] batman_adv: batadv0: Adding interface: batadv_slave_1
[  134.243767][ T7539] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  134.258192][ T7539] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  134.313289][ T7539] hsr_slave_0: entered promiscuous mode
[  134.316105][ T7539] hsr_slave_1: entered promiscuous mode
[  134.422756][ T7440] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.561309][ T7440] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.593734][ T5875] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  134.600125][ T5875] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  134.603849][ T5875] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  134.608023][ T5875] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  134.613502][ T5875] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  134.659706][ T7440] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.726508][ T5940] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  134.755022][ T7440] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  134.805206][ T7539] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  134.821215][ T7539] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  134.837923][ T7539] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  134.849332][ T7539] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  134.875955][ T5940] usb 2-1: Using ep0 maxpacket: 32
[  134.892467][ T5940] usb 2-1: config 0 has an invalid interface number: 23 but max is 0
[  134.896047][ T5940] usb 2-1: config 0 has no interface number 0
[  134.898789][ T5940] usb 2-1: config 0 interface 23 has no altsetting 0
[  134.913735][ T5940] usb 2-1: New USB device found, idVendor=0557, idProduct=2002, bcdDevice=b6.ad
[  134.923185][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  134.927477][ T5940] usb 2-1: Product: syz
[  134.929260][ T5940] usb 2-1: Manufacturer: syz
[  134.931273][ T5940] usb 2-1: SerialNumber: syz
[  134.936963][ T5940] usb 2-1: config 0 descriptor??
[  135.131386][ T7440] bridge_slave_1: left allmulticast mode
[  135.133953][ T7440] bridge_slave_1: left promiscuous mode
[  135.143664][ T7440] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.149664][ T7603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  135.153219][ T7603] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  135.167838][ T7440] bridge_slave_0: left allmulticast mode
[  135.170346][ T7440] bridge_slave_0: left promiscuous mode
[  135.173122][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.187907][ T5940] kaweth 2-1:0.23: Firmware present in device.
[  135.190843][ T5940] kaweth 2-1:0.23: Error reading configuration (-71), no net device created
[  135.195078][ T5940] kaweth 2-1:0.23: probe with driver kaweth failed with error -5
[  135.207106][ T5940] usb 2-1: USB disconnect, device number 11
[  135.529472][ T5885] Bluetooth: hci0: command tx timeout
[  135.544565][ T7440] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  135.550537][ T7440] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  135.555261][ T7440] bond0 (unregistering): Released all slaves
[  135.579183][ T7606] chnl_net:caif_netlink_parms(): no params data found
[  135.638621][ T7539] 8021q: adding VLAN 0 to HW filter on device bond0
[  135.756140][ T7606] bridge0: port 1(bridge_slave_0) entered blocking state
[  135.760109][ T7606] bridge0: port 1(bridge_slave_0) entered disabled state
[  135.780151][ T7606] bridge_slave_0: entered allmulticast mode
[  135.784824][ T7606] bridge_slave_0: entered promiscuous mode
[  135.815396][ T7606] bridge0: port 2(bridge_slave_1) entered blocking state
[  135.819407][ T7606] bridge0: port 2(bridge_slave_1) entered disabled state
[  135.822706][ T7606] bridge_slave_1: entered allmulticast mode
[  135.828153][ T7606] bridge_slave_1: entered promiscuous mode
[  135.862933][ T7606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  135.870443][ T7606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  135.892881][ T7440] hsr_slave_0: left promiscuous mode
[  135.897625][ T7440] hsr_slave_1: left promiscuous mode
[  135.900451][ T7440] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  135.903529][ T7440] batman_adv: batadv0: Removing interface: batadv_slave_0
[  135.910130][ T7440] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  135.913049][ T7440] batman_adv: batadv0: Removing interface: batadv_slave_1
[  135.926664][ T7440] veth1_macvtap: left promiscuous mode
[  135.929112][ T7440] veth0_macvtap: left promiscuous mode
[  135.931600][ T7440] veth1_vlan: left promiscuous mode
[  135.933944][ T7440] veth0_vlan: left promiscuous mode
[  136.328708][ T7440] team0 (unregistering): Port device team_slave_1 removed
[  136.354408][ T7440] team0 (unregistering): Port device team_slave_0 removed
[  136.647774][ T5885] Bluetooth: hci1: command tx timeout
[  136.762546][ T7631] batadv_slave_0: entered promiscuous mode
[  136.768360][ T7539] 8021q: adding VLAN 0 to HW filter on device team0
[  136.801736][ T7606] team0: Port device team_slave_0 added
[  136.815002][ T7630] batadv_slave_0: left promiscuous mode
[  136.826067][ T7606] team0: Port device team_slave_1 added
[  136.851457][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[  136.853785][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[  136.859989][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[  136.862389][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[  136.891468][ T7606] batman_adv: batadv0: Adding interface: batadv_slave_0
[  136.894519][ T7606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.906688][ T7606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  136.912709][ T7606] batman_adv: batadv0: Adding interface: batadv_slave_1
[  136.918852][ T7606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  136.930234][ T7606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  136.999467][ T7637] loop1: detected capacity change from 0 to 2048
[  137.009061][ T7637] UDF-fs: error (device loop1): udf_read_tagged: tag version 0x0000 != 0x0002 || 0x0003, block 0
[  137.013903][ T7637] UDF-fs: warning (device loop1): udf_load_vrs: No anchor found
[  137.017801][ T7637] UDF-fs: Scanning with blocksize 512 failed
[  137.032364][ T7637] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  137.068194][ T7606] hsr_slave_0: entered promiscuous mode
[  137.086294][ T7606] hsr_slave_1: entered promiscuous mode
[  137.089302][ T7606] debugfs: 'hsr0' already exists in 'hsr'
[  137.101987][ T7606] Cannot create hsr debugfs directory
[  137.462266][ T7606] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  137.465832][ T5939] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  137.477082][ T7606] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  137.489401][ T7606] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  137.493997][ T7606] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  137.578089][ T7539] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.596769][ T7606] 8021q: adding VLAN 0 to HW filter on device bond0
[  137.605773][ T5885] Bluetooth: hci0: command tx timeout
[  137.621453][ T7606] 8021q: adding VLAN 0 to HW filter on device team0
[  137.624940][ T5939] usb 2-1: config 0 interface 0 has no altsetting 0
[  137.632690][ T5939] usb 2-1: New USB device found, idVendor=046d, idProduct=c294, bcdDevice= 0.00
[  137.637882][ T5939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.640868][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  137.644278][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  137.646911][ T5939] usb 2-1: config 0 descriptor??
[  137.658060][ T7539] veth0_vlan: entered promiscuous mode
[  137.668835][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  137.671966][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  137.684968][ T7539] veth1_vlan: entered promiscuous mode
[  137.755828][ T7539] veth0_macvtap: entered promiscuous mode
[  137.764371][ T7539] veth1_macvtap: entered promiscuous mode
[  137.807502][ T7539] batman_adv: batadv0: Interface activated: batadv_slave_0
[  137.819642][ T7539] batman_adv: batadv0: Interface activated: batadv_slave_1
[  137.829893][ T5870] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  137.833535][ T5870] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  137.848599][ T5870] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  137.852577][ T5870] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  137.883977][ T7606] 8021q: adding VLAN 0 to HW filter on device batadv0
[  137.949627][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.958925][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  137.994474][ T3611] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  137.999966][ T3611] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.075257][ T5939] logitech 0003:046D:C294.0006: unknown main item tag 0x6
[  138.084592][ T5939] logitech 0003:046D:C294.0006: item fetching failed at offset 5/7
[  138.089552][ T5939] logitech 0003:046D:C294.0006: parse failed
[  138.095624][ T5939] logitech 0003:046D:C294.0006: probe with driver logitech failed with error -22
[  138.208407][ T7683] Illegal XDP return value 4294967274 on prog  (id 59) dev N/A, expect packet loss!
[  138.242304][ T7606] veth0_vlan: entered promiscuous mode
[  138.261843][ T7606] veth1_vlan: entered promiscuous mode
[  138.275748][ T5940] usb 2-1: USB disconnect, device number 12
[  138.334538][ T7606] veth0_macvtap: entered promiscuous mode
[  138.350375][ T7689] misc userio: The device must be registered before sending interrupts
[  138.358933][ T7606] veth1_macvtap: entered promiscuous mode
[  138.390808][ T7606] batman_adv: batadv0: Interface activated: batadv_slave_0
[  138.404155][ T7606] batman_adv: batadv0: Interface activated: batadv_slave_1
[  138.415898][   T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  138.420138][   T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  138.423782][   T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  138.444116][   T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  138.531360][ T3611] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.534666][ T3611] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.581499][   T27] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  138.584725][   T27] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  138.729974][ T5885] Bluetooth: hci1: command tx timeout
[  138.866894][ T7708] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  139.218219][ T7697] loop3: detected capacity change from 0 to 40427
[  139.261641][ T7697] F2FS-fs (loop3): Image doesn't support compression
[  139.264728][ T7697] F2FS-fs (loop3): build fault injection rate: 690
[  139.310471][ T7697] F2FS-fs (loop3): invalid crc value
[  139.550032][ T7697] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  139.563383][ T7697] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  139.637300][ T7539] syz-executor: attempt to access beyond end of device
[  139.637300][ T7539] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  139.655854][ T7539] CPU: 0 UID: 0 PID: 7539 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  139.655867][ T7539] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  139.655871][ T7539] Call Trace:
[  139.655874][ T7539]  <TASK>
[  139.655878][ T7539]  dump_stack_lvl+0x189/0x250
[  139.655892][ T7539]  ? __pfx_dump_stack_lvl+0x10/0x10
[  139.655901][ T7539]  ? __pfx_queue_work_on+0x10/0x10
[  139.655909][ T7539]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  139.655919][ T7539]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  139.655931][ T7539]  f2fs_handle_critical_error+0x37c/0x540
[  139.655944][ T7539]  f2fs_write_end_io+0x886/0xb60
[  139.655962][ T7539]  __submit_merged_bio+0x27a/0x6a0
[  139.655974][ T7539]  __submit_merged_write_cond+0x255/0x530
[  139.655985][ T7539]  f2fs_write_data_pages+0x261d/0x3000
[  139.656009][ T7539]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  139.656064][ T7539]  ? __lock_acquire+0xab9/0xd20
[  139.656079][ T7539]  ? do_raw_spin_lock+0x121/0x290
[  139.656092][ T7539]  ? do_raw_spin_unlock+0x4d/0x240
[  139.656100][ T7539]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  139.656110][ T7539]  do_writepages+0x32e/0x550
[  139.656126][ T7539]  ? do_raw_spin_unlock+0x4d/0x240
[  139.656136][ T7539]  filemap_fdatawrite+0x199/0x240
[  139.656146][ T7539]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  139.656197][ T7539]  ? do_raw_spin_unlock+0x4d/0x240
[  139.656209][ T7539]  f2fs_sync_dirty_inodes+0x31f/0x830
[  139.656226][ T7539]  f2fs_write_checkpoint+0x95a/0x1df0
[  139.656246][ T7539]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  139.656275][ T7539]  ? kill_f2fs_super+0x298/0x6c0
[  139.656288][ T7539]  kill_f2fs_super+0x2c3/0x6c0
[  139.656300][ T7539]  ? __pfx_kill_f2fs_super+0x10/0x10
[  139.656309][ T7539]  ? radix_tree_delete_item+0x2b6/0x400
[  139.656321][ T7539]  ? shrinker_free+0x2ce/0x3e0
[  139.656330][ T7539]  deactivate_locked_super+0xbc/0x130
[  139.656340][ T7539]  cleanup_mnt+0x425/0x4c0
[  139.656348][ T7539]  ? lockdep_hardirqs_on+0x9c/0x150
[  139.656358][ T7539]  task_work_run+0x1d4/0x260
[  139.656369][ T7539]  ? __pfx_task_work_run+0x10/0x10
[  139.656378][ T7539]  ? __x64_sys_umount+0x122/0x160
[  139.656390][ T7539]  ? exit_to_user_mode_loop+0x40/0x110
[  139.656402][ T7539]  exit_to_user_mode_loop+0xec/0x110
[  139.656412][ T7539]  do_syscall_64+0x2bd/0x3b0
[  139.656420][ T7539]  ? lockdep_hardirqs_on+0x9c/0x150
[  139.656428][ T7539]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.656435][ T7539]  ? exc_page_fault+0x9f/0xf0
[  139.656444][ T7539]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  139.656451][ T7539] RIP: 0033:0x7fa00598ff17
[  139.656459][ T7539] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  139.656466][ T7539] RSP: 002b:00007fff3d109448 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  139.656474][ T7539] RAX: 0000000000000000 RBX: 00007fa005a11c05 RCX: 00007fa00598ff17
[  139.656480][ T7539] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff3d109500
[  139.656484][ T7539] RBP: 00007fff3d109500 R08: 0000000000000000 R09: 0000000000000000
[  139.656488][ T7539] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff3d10a590
[  139.656493][ T7539] R13: 00007fa005a11c05 R14: 00000000000220e8 R15: 00007fff3d10a5d0
[  139.656505][ T7539]  </TASK>
[  139.657724][ T7539] F2FS-fs (loop3): Stopped filesystem due to reason: 3
[  139.685703][ T5885] Bluetooth: hci0: command tx timeout
[  139.690310][   T10] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  140.097093][   T10] usb 2-1: Using ep0 maxpacket: 16
[  140.118884][   T10] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06
[  140.122996][   T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.130104][   T10] usb 2-1: Product: syz
[  140.131938][   T10] usb 2-1: Manufacturer: syz
[  140.133872][   T10] usb 2-1: SerialNumber: syz
[  140.172731][   T10] r8152-cfgselector 2-1: Unknown version 0x0000
[  140.180854][   T10] r8152-cfgselector 2-1: config 0 descriptor??
[  140.601812][ T5939] r8152-cfgselector 2-1: USB disconnect, device number 13
[  140.629204][ T7757] netlink: 'syz.4.699': attribute type 12 has an invalid length.
[  140.643626][ T7757] netlink: 9472 bytes leftover after parsing attributes in process `syz.4.699'.
[  140.807594][ T5885] Bluetooth: hci1: command tx timeout
[  140.920372][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  141.075688][   T10] usb 4-1: Using ep0 maxpacket: 16
[  141.079752][   T10] usb 4-1: config 6 has an invalid interface number: 43 but max is 0
[  141.083734][   T10] usb 4-1: config 6 has an invalid interface association descriptor of length 2, skipping
[  141.092474][   T10] usb 4-1: config 6 has no interface number 0
[  141.095404][   T10] usb 4-1: config 6 interface 43 altsetting 170 endpoint 0xC has invalid maxpacket 512, setting to 64
[  141.100814][   T10] usb 4-1: config 6 interface 43 has no altsetting 0
[  141.265115][   T10] usb 4-1: string descriptor 0 read error: -71
[  141.274795][   T10] usb 4-1: New USB device found, idVendor=2304, idProduct=023b, bcdDevice=7b.5c
[  141.278583][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.297376][   T10] usb 4-1: rejected 1 configuration due to insufficient available bus power
[  141.307083][   T10] usb 4-1: no configuration chosen from 1 choice
[  141.658313][   T10] usb 4-1: USB disconnect, device number 2
[  141.731249][ T7795] loop1: detected capacity change from 0 to 256
[  141.762947][ T7795] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d)
[  141.971206][ T7807] loop3: detected capacity change from 0 to 256
[  141.988407][ T7807] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x200c26b4, utbl_chksum : 0xe619d30d)
[  142.513286][ T7816] loop3: detected capacity change from 0 to 4096
[  142.885839][ T5875] Bluetooth: hci1: command tx timeout
[  143.190658][ T7873] IPVS: Error connecting to the multicast addr
[  143.643369][ T7909] netlink: 16386 bytes leftover after parsing attributes in process `syz.4.744'.
[  143.653406][ T7910] 9pnet: Found fid 0 not clunked
[  143.818053][ T7921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.750'.
[  143.978038][ T7912] loop4: detected capacity change from 0 to 40427
[  143.981536][ T7912] F2FS-fs: heap/no_heap options were deprecated
[  144.024604][ T7912] F2FS-fs (loop4): invalid crc value
[  144.109912][ T7912] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  144.115330][ T7912] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5
[  144.149527][   T33] audit: type=1800 audit(1755053966.818:11): pid=7912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.746" name="file1" dev="loop4" ino=10 res=0 errno=0
[  144.194882][ T7606] syz-executor: attempt to access beyond end of device
[  144.194882][ T7606] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  144.202293][ T7606] CPU: 1 UID: 0 PID: 7606 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  144.202321][ T7606] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  144.202326][ T7606] Call Trace:
[  144.202330][ T7606]  <TASK>
[  144.202333][ T7606]  dump_stack_lvl+0x189/0x250
[  144.202350][ T7606]  ? __pfx_dump_stack_lvl+0x10/0x10
[  144.202359][ T7606]  ? __pfx_queue_work_on+0x10/0x10
[  144.202366][ T7606]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  144.202376][ T7606]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  144.202389][ T7606]  f2fs_handle_critical_error+0x37c/0x540
[  144.202402][ T7606]  f2fs_write_end_io+0x886/0xb60
[  144.202420][ T7606]  __submit_merged_bio+0x27a/0x6a0
[  144.202432][ T7606]  __submit_merged_write_cond+0x255/0x530
[  144.202444][ T7606]  f2fs_write_data_pages+0x261d/0x3000
[  144.202454][ T7606]  ? __pfx_usage_match+0x10/0x10
[  144.202460][ T7606]  ? __bfs+0x154/0x2a0
[  144.202483][ T7606]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.202513][ T7606]  ? __mod_zone_page_state+0xd7/0x140
[  144.202527][ T7606]  ? folios_put_refs+0x560/0x640
[  144.202541][ T7606]  ? __lock_acquire+0xab9/0xd20
[  144.202556][ T7606]  ? do_raw_spin_lock+0x121/0x290
[  144.202569][ T7606]  ? do_raw_spin_unlock+0x4d/0x240
[  144.202578][ T7606]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  144.202588][ T7606]  do_writepages+0x32e/0x550
[  144.202603][ T7606]  ? do_raw_spin_unlock+0x4d/0x240
[  144.202614][ T7606]  filemap_fdatawrite+0x199/0x240
[  144.202624][ T7606]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  144.202656][ T7606]  ? do_raw_spin_unlock+0x4d/0x240
[  144.202666][ T7606]  f2fs_sync_dirty_inodes+0x31f/0x830
[  144.202684][ T7606]  f2fs_write_checkpoint+0x95a/0x1df0
[  144.202705][ T7606]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  144.202741][ T7606]  ? f2fs_stop_gc_thread+0x7f/0xb0
[  144.202751][ T7606]  ? kfree+0x18e/0x440
[  144.202761][ T7606]  ? kill_f2fs_super+0x298/0x6c0
[  144.202774][ T7606]  kill_f2fs_super+0x2c3/0x6c0
[  144.202786][ T7606]  ? __pfx_kill_f2fs_super+0x10/0x10
[  144.202795][ T7606]  ? radix_tree_delete_item+0x2b6/0x400
[  144.202807][ T7606]  ? shrinker_free+0x2ce/0x3e0
[  144.202817][ T7606]  deactivate_locked_super+0xbc/0x130
[  144.202827][ T7606]  cleanup_mnt+0x425/0x4c0
[  144.202835][ T7606]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.202845][ T7606]  task_work_run+0x1d4/0x260
[  144.202856][ T7606]  ? __pfx_task_work_run+0x10/0x10
[  144.202864][ T7606]  ? __x64_sys_umount+0x122/0x160
[  144.202876][ T7606]  ? exit_to_user_mode_loop+0x40/0x110
[  144.202889][ T7606]  exit_to_user_mode_loop+0xec/0x110
[  144.202899][ T7606]  do_syscall_64+0x2bd/0x3b0
[  144.202907][ T7606]  ? lockdep_hardirqs_on+0x9c/0x150
[  144.202915][ T7606]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.202923][ T7606]  ? exc_page_fault+0x9f/0xf0
[  144.202932][ T7606]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  144.202939][ T7606] RIP: 0033:0x7fc70a78ff17
[  144.202947][ T7606] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  144.202953][ T7606] RSP: 002b:00007ffccf542548 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  144.202961][ T7606] RAX: 0000000000000000 RBX: 00007fc70a811c05 RCX: 00007fc70a78ff17
[  144.202966][ T7606] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffccf542600
[  144.202970][ T7606] RBP: 00007ffccf542600 R08: 0000000000000000 R09: 0000000000000000
[  144.202974][ T7606] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffccf543690
[  144.202979][ T7606] R13: 00007fc70a811c05 R14: 00000000000232b2 R15: 00007ffccf5436d0
[  144.202992][ T7606]  </TASK>
[  144.204337][ T7606] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  144.349828][ T7938] syzkaller1: entered promiscuous mode
[  144.351785][ T7938] syzkaller1: entered allmulticast mode
[  144.965661][ T5875] Bluetooth: hci1: command 0x0405 tx timeout
[  145.217023][ T7942] loop1: detected capacity change from 0 to 32768
[  145.264291][ T7942] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  145.429975][ T7942] XFS (loop1): Ending clean mount
[  145.438165][ T7942] XFS (loop1): Quotacheck needed: Please wait.
[  145.489114][ T7942] XFS (loop1): Quotacheck: Done.
[  145.579851][ T5877] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  145.819868][ T7966] loop1: detected capacity change from 0 to 128
[  145.824185][ T7966] EXT4-fs (loop1): Test dummy encryption mode enabled
[  145.841458][ T7966] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  145.856160][ T7966] ext4 filesystem being mounted at /262/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  146.011404][ T7966] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-fixed-time))"
[  146.020695][   T33] audit: type=1800 audit(1755053968.688:12): pid=7966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.759" name="file1" dev="loop1" ino=12 res=0 errno=0
[  146.029946][ T7978] loop4: detected capacity change from 0 to 4096
[  146.032995][   T33] audit: type=1800 audit(1755053968.688:13): pid=7970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.759" name="file2" dev="loop1" ino=13 res=0 errno=0
[  146.059688][ T7978] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  146.080365][ T5877] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  146.091192][ T7978] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  146.365536][    T9] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  146.869050][ T7606] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  146.925611][    T9] usb 2-1: Using ep0 maxpacket: 8
[  146.930185][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9
[  146.934282][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  146.937624][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  146.940951][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12336, setting to 1024
[  146.944726][    T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  146.949122][ T7986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.763'.
[  146.952047][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58
[  146.954970][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  146.959397][    T9] usb 2-1: config 0 descriptor??
[  146.969551][ T7982] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  147.016628][ T7988] gfs2: path_lookup on GPL returned error -2
[  147.045712][ T5885] Bluetooth: hci1: command 0x0405 tx timeout
[  147.187102][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.190219][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.193867][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.196853][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.199567][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.202381][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.212768][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.216771][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.219600][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.222465][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.225299][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.228363][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.231262][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.234111][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.236992][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.239809][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.243292][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.246273][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.249163][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.251862][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.254479][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.259725][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.261955][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.264643][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.267736][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.273042][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.276291][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.278530][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.280781][ T5885] Bluetooth: hci3: Received unexpected HCI Event 0x00
[  147.385963][ T5875] Bluetooth: hci3: Opcode 0x0c03 failed: -71
[  147.386222][ T5940] usb 2-1: USB disconnect, device number 14
[  147.942488][ T8007] loop1: detected capacity change from 0 to 1024
[  148.007533][   T36] hfsplus: b-tree write err: -5, ino 4
[  148.250250][ T8010] loop1: detected capacity change from 0 to 32768
[  148.263880][   T33] audit: type=1800 audit(1755053970.928:14): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.773" name="file1" dev="loop1" ino=7 res=0 errno=0
[  148.524384][ T8010] ERROR: (device loop1): dbAdjCtl: the maximum free buddy is not the old root
[  148.524384][ T8010] 
[  148.529934][ T8010] ERROR: (device loop1): remounting filesystem as read-only
[  148.842161][ T8015] loop3: detected capacity change from 0 to 32768
[  148.878140][ T5874]  loop3: p9 p11 p16
[  148.896772][ T8015]  loop3: p9 p11 p16
[  148.977077][ T5874] udevd[5874]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory
[  148.980024][ T5949] udevd[5949]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory
[  148.991302][ T6159] udevd[6159]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory
[  149.029211][ T5874] udevd[5874]: inotify_add_watch(7, /dev/loop3p9, 10) failed: No such file or directory
[  149.032444][ T5949] udevd[5949]: inotify_add_watch(7, /dev/loop3p16, 10) failed: No such file or directory
[  149.039025][ T6159] udevd[6159]: inotify_add_watch(7, /dev/loop3p11, 10) failed: No such file or directory
[  149.124678][   T33] audit: type=1326 audit(1755053971.788:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.3.778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00598ebe9 code=0x7ffc0000
[  149.142887][   T33] audit: type=1326 audit(1755053971.788:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.3.778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00598ebe9 code=0x7ffc0000
[  149.167141][   T33] audit: type=1326 audit(1755053971.788:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.3.778" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fa00598ebe9 code=0x7ffc0000
[  149.182030][ T8033] tipc: Started in network mode
[  149.183788][ T8033] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711
[  149.185757][   T33] audit: type=1326 audit(1755053971.788:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.3.778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00598ebe9 code=0x7ffc0000
[  149.191119][ T8033] tipc: Enabled bearer <eth:batadv0>, priority 10
[  149.207740][ T8025] loop1: detected capacity change from 0 to 32768
[  149.210385][   T33] audit: type=1326 audit(1755053971.788:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.3.778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00598ebe9 code=0x7ffc0000
[  149.230732][   T33] audit: type=1326 audit(1755053971.788:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.3.778" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa00598ebe9 code=0x7ffc0000
[  149.250724][   T33] audit: type=1326 audit(1755053971.788:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.3.778" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fa00598ebe9 code=0x7ffc0000
[  149.287430][   T33] audit: type=1326 audit(1755053971.788:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8028 comm="syz.3.778" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fa00598ebe9 code=0x7ffc0000
[  149.567018][ T8043] PKCS7: Unknown OID: [4] 5.25.373.87(bad)
[  149.583817][ T8043] PKCS7: Only support pkcs7_signedData type
[  149.708148][ T8048] loop3: detected capacity change from 0 to 2048
[  149.747408][ T5874] udevd[5874]: incorrect nilfs2 checksum on /dev/loop3
[  149.762501][ T8048] NILFS (loop3): broken superblock, retrying with spare superblock (blocksize = 1024)
[  149.789991][ T8051] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  150.189759][ T8055] netlink: 4 bytes leftover after parsing attributes in process `syz.4.787'.
[  150.255332][ T8059] futex_wake_op: syz.3.789 tries to shift op by -1; fix this program
[  150.306696][   T10] tipc: Node number set to 8432298
[  150.351539][   T33] audit: type=1800 audit(1755053973.018:23): pid=8061 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.788" name="/" dev="9p" ino=2 res=0 errno=0
[  151.090998][ T8100] tipc: Failed to remove unknown binding: 66,1,1/0:496425302/496425304
[  151.094595][ T8100] tipc: Failed to remove unknown binding: 66,1,1/0:496425302/496425304
[  151.328374][ T8114] openvswitch: netlink: Missing key (keys=40, expected=10000000)
[  151.758709][ T8132] loop1: detected capacity change from 0 to 256
[  151.766922][ T8132] exfat: Deprecated parameter 'utf8'
[  151.768883][ T8132] exfat: Deprecated parameter 'utf8'
[  151.786308][ T8132] exfat: Deprecated parameter 'utf8'
[  151.806406][ T8132] exFAT-fs (loop1): failed to load upcase table (idx : 0x00011ded, chksum : 0x185b6804, utbl_chksum : 0xe619d30d)
[  152.072179][ T8137] loop1: detected capacity change from 0 to 256
[  152.322161][ T8139] loop4: detected capacity change from 0 to 65536
[  152.479251][ T8139] XFS (loop4): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  152.696897][ T8139] XFS (loop4): Ending clean mount
[  152.707426][ T8139] XFS (loop4): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  152.711375][ T8139] XFS (loop4): Unmount and run xfs_repair
[  152.713734][ T8139] XFS (loop4): First 128 bytes of corrupted metadata buffer:
[  152.717327][ T8139] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  152.720537][ T8139] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  152.723893][ T8139] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  152.727780][ T8139] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  152.731045][ T8139] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  152.734165][ T8139] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  152.737272][ T8139] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  152.740064][ T8139] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  152.743096][ T8139] XFS (loop4): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  152.747566][ T8139] XFS (loop4): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  152.752476][ T8139] XFS (loop4): Please unmount the filesystem and rectify the problem(s)
[  152.778319][ T7606] XFS (loop4): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  153.470476][ T8167] Bluetooth: MGMT ver 1.23
[  153.530760][ T8173] loop4: detected capacity change from 0 to 64
[  153.544028][ T8173] MINIX-fs: deleted inode referenced: 6
[  153.546526][ T8173] MINIX-fs: deleted inode referenced: 6
[  153.548756][ T8173] MINIX-fs: deleted inode referenced: 6
[  153.550797][ T8173] MINIX-fs: deleted inode referenced: 6
[  154.871302][ T8204] loop1: detected capacity change from 0 to 512
[  154.888197][ T8204] EXT4-fs: Ignoring removed i_version option
[  154.904857][ T8204] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  154.957510][ T8204] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  154.971155][ T8204] EXT4-fs (loop1): 1 truncate cleaned up
[  154.990845][ T8204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  155.237726][ T8217] loop4: detected capacity change from 0 to 4096
[  155.253288][ T8217] ntfs3(loop4): Different NTFS sector size (2048) and media sector size (512).
[  155.306400][ T7619] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[  155.537704][ T5875] Bluetooth: hci0: Opcode 0x1407 failed: -110
[  155.543079][ T5875] Bluetooth: hci0: command 0x1407 tx timeout
[  155.672540][ T7619] usb 4-1: Using ep0 maxpacket: 32
[  155.677754][ T7619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  155.682453][ T7619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  155.763286][ T7619] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  155.768895][ T7619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  155.781015][ T7619] usb 4-1: config 0 descriptor??
[  155.783910][ T5877] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  155.787766][ T7619] hub 4-1:0.0: USB hub found
[  156.001255][ T7619] hub 4-1:0.0: config failed, can't read hub descriptor (err -90)
[  156.203009][ T8250] loop4: detected capacity change from 0 to 512
[  156.234781][ T8250] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors
[  156.252125][ T8250] EXT4-fs (loop4): ext4_check_descriptors: Block bitmap for group 0 not in group (block 2)!
[  156.274137][ T8250] EXT4-fs (loop4): group descriptors corrupted!
[  156.323284][ T8254] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  156.447238][ T7619] hid-generic 0003:046D:C31C.0007: hidraw0: USB HID v8.00 Device [HID 046d:c31c] on usb-dummy_hcd.3-1/input0
[  156.607481][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  156.739748][   T10] usb 4-1: USB disconnect, device number 3
[  156.772241][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  156.778684][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  156.783338][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  156.789313][    T9] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  156.793414][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  156.808880][    T9] usb 5-1: config 0 descriptor??
[  157.220598][    T9] plantronics 0003:047F:FFFF.0008: reserved main item tag 0xe
[  157.244109][    T9] plantronics 0003:047F:FFFF.0008: unknown main item tag 0x0
[  157.280875][    T9] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0
[  157.508168][  T125] usb 5-1: USB disconnect, device number 2
[  157.531727][ T8298] vivid-003: disconnect
[  157.537380][ T8297] vivid-003: reconnect
[  157.821765][ T8314] !: renamed from dummy0 (while UP)
[  157.899769][ T8320] loop1: detected capacity change from 0 to 128
[  157.912972][ T8320] EXT4-fs (loop1): Test dummy encryption mode enabled
[  157.917353][ T8320] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a802c018, mo2=0082]
[  157.920049][ T8320] System zones: 1-3, 19-19, 35-36
[  157.923579][ T8320] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  157.929133][ T8320] ext4 filesystem being mounted at /298/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  157.959049][ T5877] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  158.042942][ T2147] libceph: connect (1)[c::]:6789 error -101
[  158.045293][ T2147] libceph: mon0 (1)[c::]:6789 connect error
[  158.122986][ T8339] netlink: 'syz.4.867': attribute type 9 has an invalid length.
[  158.126654][ T8339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.867'.
[  158.255723][ T8328] ceph: No mds server is up or the cluster is laggy
[  158.755689][ T8354] loop4: detected capacity change from 0 to 32768
[  158.765053][ T8354] bcachefs (/dev/loop4): error validating superblock: Invalid superblock section clean: entry type btree_keys overruns end of section
[  158.765053][ T8354] clean (size 2912):
[  158.765053][ T8354] flags:          0
[  158.765053][ T8354] journal_seq:    8
[  158.765053][ T8354] prio_ptrs: 
[  158.765053][ T8354] usage: type=key_version v=0
[  158.765053][ T8354] usage: type=reserved v=0
[  158.765053][ T8354] usage: type=reserved v=0
[  158.765053][ T8354] usage: type=reserved v=0
[  158.765053][ T8354] usage: type=reserved v=0
[  158.765053][ T8354] data_usage: btree: 1/1 [0]=2816
[  158.765053][ T8354] data_usage: journal: 1/1 [0]=0
[  158.765053][ T8354] data_usage: user: 1/1 [0]=32
[  158.765053][ T8354] dev_usage: dev=0  
[  158.765053][ T8354]   free: buckets=83 sectors=0 fragmented=0
[  158.765053][ T8354]   sb: buckets=25 sectors=6152 fragmented=248
[  158.765053][ T8354]   journal: buckets=8 sectors=2048 fragmented=0
[  158.765053][ T8354]   btree: buckets=11 sectors=2816 fragmented=0
[  158.765053][ T8354]   user: buckets=1 sectors=32 fragmented=224
[  158.765053][ T8354]   cached: buckets=0 sectors=0 fragmented=0
[  158.765053][ T8354]   parity: buckets=0 sectors=0 fragmented=0
[  158.765053][ T8354]   stripe: buckets=0 sectors=0 fragmented=0
[  158.765053][ T8354]   need_gc_gens: buckets=0 sectors=0 fragmented=0
[  158.765053][ T8354]   need_discard: buckets=0 sectors=0 fragmented=0
[  158.765053][ T8354] clock: read=0
[  158.765053][ T8354] clock: write=1288
[  158.765053][ T8354] btree_root: btree=extents level=0 u64s 11 type btree_ptr_v2 SPOS_MAX len 0 ver 0: seq 249e7ae2af8ee3
[  158.765163][ T8354] bcachefs: bch2_fs_get_tree() error: invalid_sb_clean
[  158.924761][ T8368] loop1: detected capacity change from 0 to 2048
[  158.991883][ T8372] loop1: detected capacity change from 0 to 512
[  159.003722][ T8372] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  159.234142][ T8383] libceph: resolve '4' (ret=-3): failed
[  159.389637][ T8386] loop3: detected capacity change from 0 to 128
[  159.432337][ T8386] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: writeback.
[  159.446549][ T8386] ext4 filesystem being mounted at /52/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  159.734678][ T7539] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  160.218542][ T8398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.885'.
[  160.683318][ T8414] overlayfs: unescaped trailing colons in lowerdir mount option.
[  160.947578][ T8432] overlayfs: failed to resolve './file1': -2
[  161.951189][ T8445] loop4: detected capacity change from 0 to 764
[  161.994798][ T8445] Symlink component flag not implemented
[  162.002677][ T8445] Symlink component flag not implemented (7)
[  162.151082][ T8449] loop4: detected capacity change from 0 to 16
[  162.193566][ T8449] erofs (device loop4): mounted with root inode @ nid 36.
[  162.227898][ T8449] erofs (device loop4): readahead error at folio 6 @ nid 36
[  162.231503][ T8449] erofs (device loop4): readahead error at folio 4 @ nid 36
[  162.253225][ T8449] erofs (device loop4): invalid logical cluster 0 at nid 36
[  162.257480][ T8449] erofs (device loop4): readahead error at folio 0 @ nid 36
[  162.260752][ T8449] syz.4.906: attempt to access beyond end of device
[  162.260752][ T8449] loop4: rw=524288, sector=296, nr_sectors = 16 limit=16
[  162.268830][ T8449] syz.4.906: attempt to access beyond end of device
[  162.268830][ T8449] loop4: rw=524288, sector=1049264, nr_sectors = 16 limit=16
[  162.274598][ T8449] syz.4.906: attempt to access beyond end of device
[  162.274598][ T8449] loop4: rw=524288, sector=8, nr_sectors = 16 limit=16
[  162.290181][ T8449] syz.4.906: attempt to access beyond end of device
[  162.290181][ T8449] loop4: rw=524288, sector=720, nr_sectors = 16 limit=16
[  162.317126][ T8449] erofs (device loop4): invalid logical cluster 0 at nid 36
[  162.323664][ T8449] syz.4.906: attempt to access beyond end of device
[  162.323664][ T8449] loop4: rw=0, sector=296, nr_sectors = 8 limit=16
[  162.337782][ T8449] erofs (device loop4): read error -5 @ 0 of nid 36
[  162.340405][ T8449] erofs (device loop4): failed to readdir of logical block 0 of nid 36
[  162.343614][ T8456] erofs (device loop4): invalid logical cluster 0 at nid 36
[  162.359686][ T8456] syz.4.906: attempt to access beyond end of device
[  162.359686][ T8456] loop4: rw=0, sector=296, nr_sectors = 8 limit=16
[  162.375424][ T8456] erofs (device loop4): read error -5 @ 0 of nid 36
[  162.379896][ T8456] erofs (device loop4): failed to readdir of logical block 0 of nid 36
[  162.512262][ T8468] syz.1.916(8468): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored.
[  162.965431][ T8460] loop3: detected capacity change from 0 to 40427
[  162.974098][ T8460] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  162.993961][ T8460] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  163.007699][ T8460] F2FS-fs (loop3): invalid crc value
[  163.088727][ T8460] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  163.097283][ T8460] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  163.100182][ T8460] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  163.109808][   T33] audit: type=1800 audit(1755053985.778:24): pid=8460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.912" name="bus" dev="loop3" ino=10 res=0 errno=0
[  163.718597][ T8490] loop1: detected capacity change from 0 to 40427
[  163.785809][ T8497] loop3: detected capacity change from 0 to 256
[  163.802982][ T8497] FAT-fs (loop3): Directory bread(block 64) failed
[  163.813830][ T8497] FAT-fs (loop3): Directory bread(block 65) failed
[  163.819915][ T8497] FAT-fs (loop3): Directory bread(block 66) failed
[  163.835575][ T8497] FAT-fs (loop3): Directory bread(block 67) failed
[  163.837805][ T8497] FAT-fs (loop3): Directory bread(block 68) failed
[  163.840319][ T8497] FAT-fs (loop3): Directory bread(block 69) failed
[  163.842947][ T8497] FAT-fs (loop3): Directory bread(block 70) failed
[  163.850973][ T8497] FAT-fs (loop3): Directory bread(block 71) failed
[  163.853859][ T8497] FAT-fs (loop3): Directory bread(block 72) failed
[  163.858007][ T8497] FAT-fs (loop3): Directory bread(block 73) failed
[  163.871968][ T8490] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  163.885920][   T33] audit: type=1800 audit(1755053986.548:25): pid=8497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.921" name=3830322E31352E34204D4143 dev="loop3" ino=1048648 res=0 errno=0
[  163.897219][ T8490] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  163.979249][ T8490] syz.1.925: attempt to access beyond end of device
[  163.979249][ T8490] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  164.028050][ T5877] syz-executor: attempt to access beyond end of device
[  164.028050][ T5877] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[  164.046275][ T5877] CPU: 1 UID: 0 PID: 5877 Comm: syz-executor Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  164.046297][ T5877] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  164.046304][ T5877] Call Trace:
[  164.046310][ T5877]  <TASK>
[  164.046315][ T5877]  dump_stack_lvl+0x189/0x250
[  164.046336][ T5877]  ? __pfx_dump_stack_lvl+0x10/0x10
[  164.046349][ T5877]  ? __pfx_queue_work_on+0x10/0x10
[  164.046359][ T5877]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  164.046372][ T5877]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  164.046393][ T5877]  f2fs_handle_critical_error+0x37c/0x540
[  164.046412][ T5877]  f2fs_write_end_io+0x886/0xb60
[  164.046444][ T5877]  __submit_merged_bio+0x27a/0x6a0
[  164.046468][ T5877]  __submit_merged_write_cond+0x255/0x530
[  164.046488][ T5877]  f2fs_write_data_pages+0x261d/0x3000
[  164.046501][ T5877]  ? __lock_acquire+0xab9/0xd20
[  164.046542][ T5877]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  164.046589][ T5877]  ? __mod_zone_page_state+0xd7/0x140
[  164.046615][ T5877]  ? folios_put_refs+0x560/0x640
[  164.046639][ T5877]  ? __pfx_folios_put_refs+0x10/0x10
[  164.046651][ T5877]  ? rcu_is_watching+0x15/0xb0
[  164.046669][ T5877]  ? __lock_acquire+0xab9/0xd20
[  164.046697][ T5877]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  164.046712][ T5877]  do_writepages+0x32e/0x550
[  164.046735][ T5877]  ? do_raw_spin_unlock+0x4d/0x240
[  164.046751][ T5877]  filemap_fdatawrite+0x199/0x240
[  164.046768][ T5877]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  164.046823][ T5877]  ? do_raw_spin_unlock+0x4d/0x240
[  164.046864][ T5877]  f2fs_sync_dirty_inodes+0x31f/0x830
[  164.046893][ T5877]  f2fs_write_checkpoint+0x95a/0x1df0
[  164.046926][ T5877]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  164.046983][ T5877]  ? kill_f2fs_super+0x298/0x6c0
[  164.047004][ T5877]  kill_f2fs_super+0x2c3/0x6c0
[  164.047024][ T5877]  ? __pfx_kill_f2fs_super+0x10/0x10
[  164.047037][ T5877]  ? radix_tree_delete_item+0x2b6/0x400
[  164.047055][ T5877]  ? shrinker_free+0x2ce/0x3e0
[  164.047069][ T5877]  deactivate_locked_super+0xbc/0x130
[  164.047084][ T5877]  cleanup_mnt+0x425/0x4c0
[  164.047096][ T5877]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.047113][ T5877]  task_work_run+0x1d4/0x260
[  164.047133][ T5877]  ? __pfx_task_work_run+0x10/0x10
[  164.047153][ T5877]  ? __x64_sys_umount+0x122/0x160
[  164.047173][ T5877]  ? exit_to_user_mode_loop+0x40/0x110
[  164.047192][ T5877]  exit_to_user_mode_loop+0xec/0x110
[  164.047207][ T5877]  do_syscall_64+0x2bd/0x3b0
[  164.047219][ T5877]  ? lockdep_hardirqs_on+0x9c/0x150
[  164.047231][ T5877]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.047241][ T5877]  ? exc_page_fault+0x9f/0xf0
[  164.047255][ T5877]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  164.047265][ T5877] RIP: 0033:0x7f9ca318ff17
[  164.047276][ T5877] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  164.047288][ T5877] RSP: 002b:00007fffb9fbfa08 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  164.047302][ T5877] RAX: 0000000000000000 RBX: 00007f9ca3211c05 RCX: 00007f9ca318ff17
[  164.047312][ T5877] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fffb9fbfac0
[  164.047319][ T5877] RBP: 00007fffb9fbfac0 R08: 0000000000000000 R09: 0000000000000000
[  164.047327][ T5877] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fffb9fc0b50
[  164.047335][ T5877] R13: 00007f9ca3211c05 R14: 0000000000028036 R15: 00007fffb9fc0b90
[  164.047356][ T5877]  </TASK>
[  164.047361][ T5877] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[  164.484394][ T8524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.938'.
[  164.490307][ T8524] netlink: 28 bytes leftover after parsing attributes in process `syz.4.938'.
[  164.500185][ T8524] gretap0: entered promiscuous mode
[  164.502856][ T8524] gretap0: left promiscuous mode
[  164.714710][ T8539] loop1: detected capacity change from 0 to 256
[  164.729904][ T8539] FAT-fs (loop1): Directory bread(block 64) failed
[  164.732775][ T8539] FAT-fs (loop1): Directory bread(block 65) failed
[  164.737020][ T8539] FAT-fs (loop1): Directory bread(block 66) failed
[  164.739753][ T8539] FAT-fs (loop1): Directory bread(block 67) failed
[  164.742534][ T8539] FAT-fs (loop1): Directory bread(block 68) failed
[  164.745394][ T8539] FAT-fs (loop1): Directory bread(block 69) failed
[  164.748883][ T8539] FAT-fs (loop1): Directory bread(block 70) failed
[  164.753702][ T8539] FAT-fs (loop1): Directory bread(block 71) failed
[  164.758379][ T8539] FAT-fs (loop1): Directory bread(block 72) failed
[  164.761282][ T8539] FAT-fs (loop1): Directory bread(block 73) failed
[  165.425764][   T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[  165.577023][   T10] usb 4-1: Using ep0 maxpacket: 16
[  165.582704][   T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  165.588962][   T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  165.592185][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  165.594937][   T10] usb 4-1: SerialNumber: syz
[  165.600793][   T10] cdc_acm 4-1:1.0: Control and data interfaces are not separated!
[  165.607793][   T10] cdc_acm 4-1:1.0: This needs exactly 3 endpoints
[  165.610509][   T10] cdc_acm 4-1:1.0: probe with driver cdc_acm failed with error -22
[  165.802502][   T10] usb 4-1: USB disconnect, device number 4
[  166.173634][ T8559] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  166.176566][ T8559] IPv6: NLM_F_CREATE should be set when creating new route
[  166.179111][ T8559] IPv6: NLM_F_CREATE should be set when creating new route
[  166.181664][ T8559] IPv6: NLM_F_CREATE should be set when creating new route
[  166.357189][ T8569] overlayfs: failed to clone upperpath
[  166.444117][ T8578] loop1: detected capacity change from 0 to 1024
[  166.456503][ T8578] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  166.471280][ T8578] Quota error (device loop1): do_check_range: Getting block 64 out of range 1-5
[  166.474434][ T8578] Quota error (device loop1): qtree_read_dquot: Can't read quota structure for id 0
[  166.479011][ T8578] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.960: Failed to acquire dquot type 0
[  166.486342][ T8578] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  166.498105][ T8578] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.960: corrupted inode contents
[  166.504314][ T8578] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.960: mark_inode_dirty error
[  166.508448][ T8578] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.960: corrupted inode contents
[  166.513011][ T8578] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.960: mark_inode_dirty error
[  166.517554][ T8578] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.960: corrupted inode contents
[  166.522661][ T8578] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  166.525677][ T8578] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.960: corrupted inode contents
[  166.529670][ T8578] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.960: mark_inode_dirty error
[  166.533447][ T8578] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  166.539175][ T8578] EXT4-fs (loop1): 1 truncate cleaned up
[  166.541866][ T8578] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  166.567393][ T5877] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  166.595409][ T8571] loop3: detected capacity change from 0 to 32768
[  166.634320][ T8571] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  166.679307][ T8571] XFS (loop3): Ending clean mount
[  166.687139][ T8571] XFS (loop3): Quotacheck needed: Please wait.
[  166.715620][ T8571] XFS (loop3): Quotacheck: Done.
[  166.742147][ T8571] XFS (loop3): User initiated shutdown received.
[  166.744992][ T8571] XFS (loop3): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:466).  Shutting down filesystem.
[  166.751469][ T8571] XFS (loop3): Please unmount the filesystem and rectify the problem(s)
[  166.773428][ T7539] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  166.917075][  T125] usb 2-1: new high-speed USB device number 15 using dummy_hcd
[  166.974763][ T8596] netlink: 'syz.4.966': attribute type 2 has an invalid length.
[  167.067642][ T8602] loop3: detected capacity change from 0 to 256
[  167.074394][ T8602] exfat: Deprecated parameter 'namecase'
[  167.080001][  T125] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  167.080208][ T8602] exfat: Deprecated parameter 'utf8'
[  167.083902][  T125] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.092929][  T125] usb 2-1: config 0 descriptor??
[  167.119035][ T8602] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  167.120936][  T125] cp210x 2-1:0.0: cp210x converter detected
[  167.466751][ T8608] loop3: detected capacity change from 0 to 32768
[  167.470989][ T8608] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.972 (8608)
[  167.488230][ T8608] BTRFS info (device loop3): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  167.505250][ T8608] BTRFS info (device loop3): using xxhash64 (xxhash64-generic) checksum algorithm
[  167.508183][  T125] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  167.512420][ T8608] BTRFS info (device loop3): disk space caching is enabled
[  167.518858][ T8608] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  167.542720][  T125] usb 2-1: cp210x converter now attached to ttyUSB0
[  167.632322][ T8608] BTRFS info (device loop3): rebuilding free space tree
[  167.653701][ T8608] BTRFS info (device loop3): disabling free space tree
[  167.659061][ T8608] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  167.663501][ T8608] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  167.722774][ T8608] BTRFS info (device loop3): balance: start -f
[  167.731291][ T8608] BTRFS info (device loop3): balance: ended with status: 0
[  167.749689][  T125] usb 2-1: USB disconnect, device number 15
[  167.773146][  T125] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  167.813208][ T7539] BTRFS info (device loop3): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[  167.840833][  T125] cp210x 2-1:0.0: device disconnected
[  168.368820][ T8659] netlink: 4 bytes leftover after parsing attributes in process `syz.1.987'.
[  169.036368][ T5940] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  169.191519][ T5940] usb 2-1: Using ep0 maxpacket: 8
[  169.195218][ T5940] usb 2-1: config index 0 descriptor too short (expected 30, got 18)
[  169.203733][ T5940] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  169.209980][ T5940] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.213413][ T5940] usb 2-1: Product: syz
[  169.215315][ T5940] usb 2-1: Manufacturer: syz
[  169.220412][ T5940] usb 2-1: SerialNumber: syz
[  169.229345][ T5940] usb 2-1: config 0 descriptor??
[  169.237892][ T5940] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  169.241301][ T5940] usb 2-1: setting power ON
[  169.243553][ T5940] dvb-usb: bulk message failed: -22 (2/0)
[  169.255040][ T5940] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  169.265180][ T5940] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  169.268946][ T5940] usb 2-1: media controller created
[  169.289094][ T5940] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  169.309708][ T5940] usb 2-1: selecting invalid altsetting 6
[  169.312217][ T5940] usb 2-1: digital interface selection failed (-22)
[  169.314795][ T5940] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  169.320603][ T5940] usb 2-1: setting power OFF
[  169.322725][ T5940] dvb-usb: bulk message failed: -22 (2/0)
[  169.325085][ T5940] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  169.342308][ T5940] (NULL device *): no alternate interface
[  169.411804][ T5940] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  169.468064][ T5940] usb 2-1: USB disconnect, device number 16
[  170.465683][  T125] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[  170.625908][  T125] usb 4-1: Using ep0 maxpacket: 32
[  170.630259][  T125] usb 4-1: config 0 has an invalid interface number: 145 but max is 0
[  170.634086][  T125] usb 4-1: config 0 has no interface number 0
[  170.641179][  T125] usb 4-1: New USB device found, idVendor=9710, idProduct=7820, bcdDevice=20.16
[  170.645073][  T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  170.649172][  T125] usb 4-1: Product: syz
[  170.650955][  T125] usb 4-1: Manufacturer: syz
[  170.652618][  T125] usb 4-1: SerialNumber: syz
[  170.657406][  T125] usb 4-1: config 0 descriptor??
[  170.662198][  T125] mos7840 4-1:0.145: required endpoints missing
[  170.868329][  T125] usb 4-1: USB disconnect, device number 5
[  171.715691][  T125] usb 4-1: new full-speed USB device number 6 using dummy_hcd
[  171.867408][  T125] usb 4-1: config 0 has an invalid interface number: 133 but max is 0
[  171.871789][  T125] usb 4-1: config 0 has no interface number 0
[  171.877033][  T125] usb 4-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[  171.880894][  T125] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  171.884469][  T125] usb 4-1: Product: syz
[  171.887894][  T125] usb 4-1: Manufacturer: syz
[  171.889853][  T125] usb 4-1: SerialNumber: syz
[  171.893889][  T125] usb 4-1: config 0 descriptor??
[  172.457686][  T125] keyspan 4-1:0.133: Keyspan 1 port adapter converter detected
[  172.463808][  T125] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 81
[  172.467674][  T125] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 1
[  172.474216][  T125] keyspan 4-1:0.133: found no endpoint descriptor for endpoint 2
[  172.480637][  T125] usb 4-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  172.710356][ T5940] usb 4-1: USB disconnect, device number 6
[  172.715282][ T5940] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  172.720245][ T5940] keyspan 4-1:0.133: device disconnected
[  173.244531][ T8830] loop1: detected capacity change from 0 to 2048
[  173.263082][ T8830] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  173.295793][ T8830] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[  173.340363][   T65] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28
[  173.348770][   T65] EXT4-fs (loop1): This should not happen!! Data will be lost
[  173.348770][   T65] 
[  173.352708][   T65] EXT4-fs (loop1): Total free blocks count 0
[  173.355156][   T65] EXT4-fs (loop1): Free/Dirty block details
[  173.359865][   T65] EXT4-fs (loop1): free_blocks=2415919504
[  173.362248][   T65] EXT4-fs (loop1): dirty_blocks=16
[  173.364265][   T65] EXT4-fs (loop1): Block reservation details
[  173.367181][   T65] EXT4-fs (loop1): i_reserved_data_blocks=1
[  173.372399][ T5877] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  173.439051][ T8841] loop1: detected capacity change from 0 to 256
[  173.671510][ T8851] syz.3.1078: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1
[  173.685621][ T8851] CPU: 1 UID: 0 PID: 8851 Comm: syz.3.1078 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  173.685639][ T8851] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  173.685647][ T8851] Call Trace:
[  173.685653][ T8851]  <TASK>
[  173.685658][ T8851]  dump_stack_lvl+0x189/0x250
[  173.685679][ T8851]  ? __pfx_dump_stack_lvl+0x10/0x10
[  173.685693][ T8851]  ? __pfx__printk+0x10/0x10
[  173.685731][ T8851]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  173.685747][ T8851]  ? cpuset_print_current_mems_allowed+0x1f/0x360
[  173.685761][ T8851]  ? cpuset_print_current_mems_allowed+0x2ee/0x360
[  173.685776][ T8851]  warn_alloc+0x214/0x310
[  173.685795][ T8851]  ? stack_depot_save_flags+0x40/0x860
[  173.685811][ T8851]  ? __pfx_warn_alloc+0x10/0x10
[  173.685828][ T8851]  ? kasan_save_track+0x4f/0x80
[  173.685842][ T8851]  ? xskq_create+0x56/0x170
[  173.685853][ T8851]  ? xsk_init_queue+0xb0/0x110
[  173.685863][ T8851]  ? xsk_setsockopt+0x4dc/0x8d0
[  173.685872][ T8851]  ? do_sock_setsockopt+0x17c/0x1b0
[  173.685885][ T8851]  ? __x64_sys_setsockopt+0x13f/0x1b0
[  173.685898][ T8851]  ? do_syscall_64+0xfa/0x3b0
[  173.685911][ T8851]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.685926][ T8851]  __vmalloc_node_range_noprof+0x125/0x12f0
[  173.685960][ T8851]  ? __pfx___vmalloc_node_range_noprof+0x10/0x10
[  173.685980][ T8851]  ? __kasan_kmalloc+0x93/0xb0
[  173.685997][ T8851]  vmalloc_user_noprof+0xad/0xf0
[  173.686012][ T8851]  ? xskq_create+0xbf/0x170
[  173.686030][ T8851]  xskq_create+0xbf/0x170
[  173.686044][ T8851]  xsk_init_queue+0xb0/0x110
[  173.686057][ T8851]  xsk_setsockopt+0x4dc/0x8d0
[  173.686069][ T8851]  ? __pfx_xsk_setsockopt+0x10/0x10
[  173.686080][ T8851]  ? __pfx_aa_sk_perm+0x10/0x10
[  173.686096][ T8851]  ? aa_sock_opt_perm+0xff/0x1b0
[  173.686112][ T8851]  ? bpf_lsm_socket_setsockopt+0x9/0x20
[  173.686123][ T8851]  ? __pfx_xsk_setsockopt+0x10/0x10
[  173.686135][ T8851]  do_sock_setsockopt+0x17c/0x1b0
[  173.686152][ T8851]  __x64_sys_setsockopt+0x13f/0x1b0
[  173.686171][ T8851]  do_syscall_64+0xfa/0x3b0
[  173.686183][ T8851]  ? lockdep_hardirqs_on+0x9c/0x150
[  173.686195][ T8851]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.686205][ T8851]  ? exc_page_fault+0x9f/0xf0
[  173.686218][ T8851]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  173.686228][ T8851] RIP: 0033:0x7fa00598ebe9
[  173.686239][ T8851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  173.686248][ T8851] RSP: 002b:00007fa006829038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  173.686261][ T8851] RAX: ffffffffffffffda RBX: 00007fa005bb6090 RCX: 00007fa00598ebe9
[  173.686269][ T8851] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006
[  173.686276][ T8851] RBP: 00007fa005a11e19 R08: 0000000000000004 R09: 0000000000000000
[  173.686283][ T8851] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000
[  173.686289][ T8851] R13: 00007fa005bb6128 R14: 00007fa005bb6090 R15: 00007fff3d10a1b8
[  173.686307][ T8851]  </TASK>
[  173.686312][ T8851] Mem-Info:
[  173.863579][ T8853] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  173.969909][ T8851] active_anon:23525 inactive_anon:0 isolated_anon:0
[  173.969909][ T8851]  active_file:13438 inactive_file:38474 isolated_file:0
[  173.969909][ T8851]  unevictable:1769 dirty:498 writeback:0
[  173.969909][ T8851]  slab_reclaimable:10281 slab_unreclaimable:54300
[  173.969909][ T8851]  mapped:19107 shmem:19544 pagetables:1263
[  173.969909][ T8851]  sec_pagetables:0 bounce:0
[  173.969909][ T8851]  kernel_misc_reclaimable:0
[  173.969909][ T8851]  free:260918 free_pcp:21201 free_cma:0
[  174.029324][   T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.059385][ T8851] Node 0 active_anon:72680kB inactive_anon:0kB active_file:33420kB inactive_file:20012kB unevictable:3540kB isolated(anon):0kB isolated(file):0kB mapped:44168kB dirty:1516kB writeback:0kB shmem:62996kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:5476kB pagetables:2540kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  174.107517][ T8851] Node 1 active_anon:20400kB inactive_anon:0kB active_file:20332kB inactive_file:133884kB unevictable:3536kB isolated(anon):0kB isolated(file):0kB mapped:11792kB dirty:476kB writeback:0kB shmem:15180kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:6832kB pagetables:2376kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB
[  174.145631][ T8851] Node 0 DMA free:15360kB boost:0kB min:640kB low:800kB high:960kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB
[  174.185892][ T8851] lowmem_reserve[]: 0 811 811 811 811
[  174.189053][ T8851] Node 0 DMA32 free:281864kB boost:0kB min:33660kB low:42072kB high:50484kB reserved_highatomic:0KB free_highatomic:0KB active_anon:72680kB inactive_anon:0kB active_file:33420kB inactive_file:20012kB unevictable:3540kB writepending:1516kB present:1556484kB managed:831000kB mlocked:4kB bounce:0kB free_pcp:34204kB local_pcp:16060kB free_cma:0kB
[  174.233680][ T8851] lowmem_reserve[]: 0 0 0 0 0
[  174.243962][ T8851] Node 1 DMA32 free:458492kB boost:0kB min:19192kB low:23988kB high:28784kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:524152kB managed:458616kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:116kB free_cma:0kB
[  174.267416][   T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.286954][ T8851] lowmem_reserve[]: 0 0 854 854 854
[  174.288894][ T8851] Node 1 Normal free:311204kB boost:0kB min:36612kB low:45764kB high:54916kB reserved_highatomic:0KB free_highatomic:0KB active_anon:28152kB inactive_anon:0kB active_file:20400kB inactive_file:133884kB unevictable:3536kB writepending:476kB present:1048576kB managed:874952kB mlocked:0kB bounce:0kB free_pcp:38188kB local_pcp:20180kB free_cma:0kB
[  174.346744][ T8851] lowmem_reserve[]: 0 0 0 0 0
[  174.363423][ T8851] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB
[  174.373987][ T8851] Node 0 DMA32: 1236*4kB (UME) 601*8kB (UME) 228*16kB (UME) 242*32kB (UME) 248*64kB (UME) 82*128kB (UME) 24*256kB (UM) 9*512kB (UM) 8*1024kB (UM) 7*2048kB (UM) 55*4096kB (UM) = 306072kB
[  174.412784][   T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.417227][ T8851] Node 1 DMA32: 3*4kB (UM) 2*8kB (M) 2*16kB (M) 2*32kB (M) 2*64kB (M) 2*128kB (UM) 3*256kB (UM) 3*512kB (UM) 3*1024kB (UM) 3*2048kB (UM) 109*4096kB (M) = 458492kB
[  174.511675][ T8851] Node 1 Normal: 3*4kB (UME) 5*8kB (ME) 6*16kB (UE) 10*32kB (UME) 117*64kB (UME) 132*128kB (UM) 81*256kB (UM) 40*512kB (UM) 34*1024kB (UME) 14*2048kB (UM) 40*4096kB (UM) = 293396kB
[  174.517868][ T8851] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  174.520879][ T8851] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB
[  174.523973][ T8851] 76110 total pagecache pages
[  174.525899][ T8851] 0 pages in swap cache
[  174.527280][ T8851] Free swap  = 124996kB
[  174.528845][ T8851] Total swap = 124996kB
[  174.530333][ T8851] 786301 pages RAM
[  174.531650][ T8851] 0 pages HighMem/MovableOnly
[  174.533197][ T8851] 241319 pages reserved
[  174.534500][ T8851] 0 pages cma reserved
[  174.552647][   T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  174.634355][ T5875] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  174.641387][ T5875] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  174.647068][ T5875] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  174.652414][ T5875] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  174.655224][ T5875] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  174.965068][   T13] bridge_slave_1: left allmulticast mode
[  174.967911][   T13] bridge_slave_1: left promiscuous mode
[  174.970310][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  174.989027][   T13] bridge_slave_0: left allmulticast mode
[  174.991396][   T13] bridge_slave_0: left promiscuous mode
[  175.007286][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  175.389611][   T33] audit: type=1326 audit(1755053998.058:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.4.1095" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70a78ebe9 code=0x7ffc0000
[  175.399102][   T33] audit: type=1326 audit(1755053998.068:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.4.1095" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70a78ebe9 code=0x7ffc0000
[  175.413084][   T33] audit: type=1326 audit(1755053998.078:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.4.1095" exe="/syz-executor" sig=0 arch=c000003e syscall=265 compat=0 ip=0x7fc70a78ebe9 code=0x7ffc0000
[  175.422850][   T33] audit: type=1326 audit(1755053998.078:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.4.1095" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70a78ebe9 code=0x7ffc0000
[  175.438558][   T33] audit: type=1326 audit(1755053998.078:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8894 comm="syz.4.1095" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fc70a78ebe9 code=0x7ffc0000
[  175.550609][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  175.558068][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  175.563068][   T13] bond0 (unregistering): Released all slaves
[  175.692726][ T8860] chnl_net:caif_netlink_parms(): no params data found
[  176.055672][ T5940] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  176.070021][ T8860] bridge0: port 1(bridge_slave_0) entered blocking state
[  176.073023][ T8860] bridge0: port 1(bridge_slave_0) entered disabled state
[  176.086429][ T8860] bridge_slave_0: entered allmulticast mode
[  176.090190][ T8860] bridge_slave_0: entered promiscuous mode
[  176.107218][   T13] hsr_slave_0: left promiscuous mode
[  176.110267][   T13] hsr_slave_1: left promiscuous mode
[  176.113304][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  176.117039][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  176.121898][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  176.124901][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  176.140939][   T13] veth1_macvtap: left promiscuous mode
[  176.142891][   T13] veth0_macvtap: left promiscuous mode
[  176.145351][   T13] veth1_vlan: left promiscuous mode
[  176.148456][   T13] veth0_vlan: left promiscuous mode
[  176.235601][ T5940] usb 4-1: Using ep0 maxpacket: 8
[  176.239549][ T5940] usb 4-1: config index 0 descriptor too short (expected 1821, got 853)
[  176.243014][ T5940] usb 4-1: config 0 has an invalid interface number: 103 but max is 2
[  176.258269][ T5940] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  176.262377][ T5940] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[  176.269261][ T5940] usb 4-1: config 0 has no interface number 1
[  176.271851][ T5940] usb 4-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7
[  176.276585][ T5940] usb 4-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  176.281095][ T5940] usb 4-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x8, skipping
[  176.285669][ T5940] usb 4-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[  176.290096][ T5940] usb 4-1: config 0 interface 103 has no altsetting 0
[  176.304464][ T5940] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4
[  176.309039][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  176.312436][ T5940] usb 4-1: Product: syz
[  176.314315][ T5940] usb 4-1: Manufacturer: syz
[  176.318896][ T5940] usb 4-1: SerialNumber: syz
[  176.333449][ T5940] usb 4-1: config 0 descriptor??
[  176.588365][ T5940] videodev: could not get a free minor
[  176.590103][ T5940] dsbr100 4-1:0.0: couldn't register video device
[  176.595312][ T5940] dsbr100 4-1:0.0: probe with driver dsbr100 failed with error -23
[  176.601565][ T5940] usb 4-1: USB disconnect, device number 7
[  176.707873][   T13] team0 (unregistering): Port device team_slave_1 removed
[  176.726943][ T5875] Bluetooth: hci2: command tx timeout
[  176.749258][   T13] team0 (unregistering): Port device team_slave_0 removed
[  177.250120][ T8860] bridge0: port 2(bridge_slave_1) entered blocking state
[  177.254024][ T8860] bridge0: port 2(bridge_slave_1) entered disabled state
[  177.258332][ T8860] bridge_slave_1: entered allmulticast mode
[  177.262411][ T8860] bridge_slave_1: entered promiscuous mode
[  177.413861][ T8860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  177.430248][ T8860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  177.865675][    T9] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  177.874751][ T8860] team0: Port device team_slave_0 added
[  177.881204][ T8860] team0: Port device team_slave_1 added
[  177.924767][ T8860] batman_adv: batadv0: Adding interface: batadv_slave_0
[  177.933159][ T8860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.945052][ T8860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  177.956591][ T8860] batman_adv: batadv0: Adding interface: batadv_slave_1
[  177.958993][ T8860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  177.969251][ T8860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  178.005842][   T13] ------------[ cut here ]------------
[  178.008465][   T13] WARNING: CPU: 0 PID: 13 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0x81/0x100
[  178.012529][   T13] Modules linked in:
[  178.014616][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  178.020822][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.025043][   T13] Workqueue: netns cleanup_net
[  178.027338][   T13] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  178.029800][   T13] Code: 55 41 e0 f7 4b 83 3c 2c 00 75 19 e8 a9 d6 7c f7 49 81 fd f8 07 00 00 74 1d e8 9b d6 7c f7 49 83 c5 08 eb c9 e8 90 d6 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  178.038199][   T13] RSP: 0018:ffffc900001078b0 EFLAGS: 00010293
[  178.040999][   T13] RAX: ffffffff8a42d520 RBX: ffff8880238a8000 RCX: ffff88801c2f8000
[  178.044444][   T13] RDX: 0000000000000000 RSI: ffffffff8d9b4408 RDI: ffff8880238a8000
[  178.048106][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  178.051538][   T13] R10: dffffc0000000000 R11: fffffbfff1f46847 R12: ffff8880238a8000
[  178.054935][   T13] R13: 0000000000000000 R14: ffff88802ec80000 R15: dffffc0000000000
[  178.058453][   T13] FS:  0000000000000000(0000) GS:ffff8880b8624000(0000) knlGS:0000000000000000
[  178.062208][   T13] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  178.065221][   T13] CR2: 000055c043031000 CR3: 000000001c3a4000 CR4: 00000000000006f0
[  178.068989][   T13] Call Trace:
[  178.070471][   T13]  <TASK>
[  178.071754][   T13]  ops_undo_list+0x49a/0x990
[  178.073707][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  178.076022][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  178.078117][   T13]  cleanup_net+0x4c5/0x800
[  178.079968][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  178.082054][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.084294][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  178.086894][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  178.089349][   T13]  process_scheduled_works+0xae1/0x17b0
[  178.091721][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  178.094245][   T13]  worker_thread+0x8a0/0xda0
[  178.096321][   T13]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  178.099064][   T13]  ? __kthread_parkme+0x7b/0x200
[  178.101353][   T13]  kthread+0x711/0x8a0
[  178.103186][   T13]  ? __pfx_worker_thread+0x10/0x10
[  178.105354][   T13]  ? __pfx_kthread+0x10/0x10
[  178.107483][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.109706][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.111977][   T13]  ? __pfx_kthread+0x10/0x10
[  178.114078][   T13]  ret_from_fork+0x3fc/0x770
[  178.116223][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  178.118437][   T13]  ? __switch_to_asm+0x39/0x70
[  178.120554][   T13]  ? __switch_to_asm+0x33/0x70
[  178.122534][   T13]  ? __pfx_kthread+0x10/0x10
[  178.124494][   T13]  ret_from_fork_asm+0x1a/0x30
[  178.126757][   T13]  </TASK>
[  178.128178][   T13] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  178.131134][   T13] CPU: 0 UID: 0 PID: 13 Comm: kworker/u8:1 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[  178.136205][   T13] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  178.140498][   T13] Workqueue: netns cleanup_net
[  178.142666][   T13] Call Trace:
[  178.144326][   T13]  <TASK>
[  178.145768][   T13]  dump_stack_lvl+0x99/0x250
[  178.147881][   T13]  ? __asan_memcpy+0x40/0x70
[  178.149923][   T13]  ? __pfx_dump_stack_lvl+0x10/0x10
[  178.152123][   T13]  ? __pfx__printk+0x10/0x10
[  178.154029][   T13]  vpanic+0x281/0x750
[  178.155672][   T13]  ? __pfx__printk+0x10/0x10
[  178.157574][   T13]  ? __pfx_vpanic+0x10/0x10
[  178.159445][   T13]  ? is_bpf_text_address+0x292/0x2b0
[  178.161625][   T13]  panic+0xb9/0xc0
[  178.163234][   T13]  ? __pfx_panic+0x10/0x10
[  178.165212][   T13]  __warn+0x31b/0x4b0
[  178.167047][   T13]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  178.169400][   T13]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  178.171601][   T13]  report_bug+0x2be/0x4f0
[  178.173436][   T13]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  178.175620][   T13]  ? xfrm6_tunnel_net_exit+0x81/0x100
[  178.177871][   T13]  ? xfrm6_tunnel_net_exit+0x83/0x100
[  178.180021][   T13]  handle_bug+0x84/0x160
[  178.181772][   T13]  exc_invalid_op+0x1a/0x50
[  178.183633][   T13]  asm_exc_invalid_op+0x1a/0x20
[  178.185796][   T13] RIP: 0010:xfrm6_tunnel_net_exit+0x81/0x100
[  178.188425][   T13] Code: 55 41 e0 f7 4b 83 3c 2c 00 75 19 e8 a9 d6 7c f7 49 81 fd f8 07 00 00 74 1d e8 9b d6 7c f7 49 83 c5 08 eb c9 e8 90 d6 7c f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  178.196414][   T13] RSP: 0018:ffffc900001078b0 EFLAGS: 00010293
[  178.199124][   T13] RAX: ffffffff8a42d520 RBX: ffff8880238a8000 RCX: ffff88801c2f8000
[  178.202642][   T13] RDX: 0000000000000000 RSI: ffffffff8d9b4408 RDI: ffff8880238a8000
[  178.205865][   T13] RBP: ffffc900001079b0 R08: ffffffff8fa34237 R09: 1ffffffff1f46846
[  178.209265][   T13] R10: dffffc0000000000 R11: fffffbfff1f46847 R12: ffff8880238a8000
[  178.212700][   T13] R13: 0000000000000000 R14: ffff88802ec80000 R15: dffffc0000000000
[  178.216279][   T13]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  178.218691][   T13]  ops_undo_list+0x49a/0x990
[  178.220707][   T13]  ? __pfx_ops_undo_list+0x10/0x10
[  178.222921][   T13]  ? do_raw_spin_unlock+0x4d/0x240
[  178.225125][   T13]  cleanup_net+0x4c5/0x800
[  178.227058][   T13]  ? __pfx_cleanup_net+0x10/0x10
[  178.229206][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.231511][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  178.234004][   T13]  ? process_scheduled_works+0x9ef/0x17b0
[  178.236535][   T13]  process_scheduled_works+0xae1/0x17b0
[  178.238989][   T13]  ? __pfx_process_scheduled_works+0x10/0x10
[  178.241586][   T13]  worker_thread+0x8a0/0xda0
[  178.243507][   T13]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  178.246118][   T13]  ? __kthread_parkme+0x7b/0x200
[  178.248293][   T13]  kthread+0x711/0x8a0
[  178.250053][   T13]  ? __pfx_worker_thread+0x10/0x10
[  178.252290][   T13]  ? __pfx_kthread+0x10/0x10
[  178.254321][   T13]  ? _raw_spin_unlock_irq+0x23/0x50
[  178.256634][   T13]  ? lockdep_hardirqs_on+0x9c/0x150
[  178.258925][   T13]  ? __pfx_kthread+0x10/0x10
[  178.260814][   T13]  ret_from_fork+0x3fc/0x770
[  178.262726][   T13]  ? __pfx_ret_from_fork+0x10/0x10
[  178.264791][   T13]  ? __switch_to_asm+0x39/0x70
[  178.266788][   T13]  ? __switch_to_asm+0x33/0x70
[  178.268796][   T13]  ? __pfx_kthread+0x10/0x10
[  178.270714][   T13]  ret_from_fork_asm+0x1a/0x30
[  178.272887][   T13]  </TASK>
[  178.275071][   T13] Kernel Offset: disabled
[  178.276880][   T13] Rebooting in 86400 seconds..

VM DIAGNOSIS:
03:00:00  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000033 RBX=0000000000000033 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90000107050
R8 =ffff888106210237 R9 =1ffff11020c42046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af18d5 R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055c043031000 CR3=000000001c3a4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=000000ff00000000 0000000000000000 XMM05=0000000000000000 00007f9f33a12e53
XMM06=0000000000000000 00007f9f33a12e4d XMM07=0000000000000000 00007f9f33a12e61
XMM08=0000000000000000 00007f9f33a12ee7 XMM09=0000000000000000 00007f9f33a12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=ffffffff81b44d6b RBX=1ffff11009608341 RCX=ffff8880234c8000 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90002fdf700 RSP=ffffc90002fdf580
R8 =ffffffff8fa34237 R9 =1ffffffff1f46846 R10=dffffc0000000000 R11=fffffbfff1f46847
R12=ffff88804b041a08 R13=dffffc0000000000 R14=ffff88813663b1c0 R15=0000000000000000
RIP=ffffffff81b44d53 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7ebd2e7d60 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=00007f7ebc7876c3 00007f7ebc7876c3 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 00ff000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000ff0000 XMM05=000055556d2c79b8 000055556d2c7930
XMM06=000055556d2c9ad8 000055556d2c9ad0 XMM07=0808800300736661 01ffffffffffffff
XMM08=fff70801a2800300 30656c69662f2e01 XMM09=660a79656b5f5f2e 6e6f6974656c706d
XMM10=2030323833303061 3966666666666666 XMM11=696c5f6f676c615f 7664617461622062
XMM12=5f5f2e6574616572 635f6b636f737761 XMM13=3030613966666666 666666660a79656b
XMM14=5f70636c6c5f6366 6e20622030306434 XMM15=2e6563697665645f 7265747369676572
