last executing test programs:

19.522451361s ago: executing program 1 (id=2):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000000)={0x1, 0x1, "ac1ac0", 0x5})
syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0)

16.907121035s ago: executing program 1 (id=26):
syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0)
mkdir(&(0x7f0000000300)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000900)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)
chdir(&(0x7f00000003c0)='./bus\x00')
lsetxattr$security_ima(&(0x7f0000000200)='./file1\x00', &(0x7f0000000280), &(0x7f00000002c0)=@ng={0x4, 0x3}, 0x2, 0x1)

16.667336157s ago: executing program 1 (id=27):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112ba000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94)

15.74826879s ago: executing program 1 (id=31):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="c1000000da7ff40d5c0cf50000e6", 0xe}, {&(0x7f0000000480)="f1fe5f", 0x3}], 0x2)

15.461457771s ago: executing program 32 (id=31):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
socket$netlink(0x10, 0x3, 0x0)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
writev(r0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="c1000000da7ff40d5c0cf50000e6", 0xe}, {&(0x7f0000000480)="f1fe5f", 0x3}], 0x2)

1.582627973s ago: executing program 2 (id=168):
r0 = socket$igmp6(0xa, 0x3, 0x2)
sendmsg(r0, &(0x7f0000001e40)={0x0, 0x0, 0x0}, 0x40401)

1.436199929s ago: executing program 2 (id=171):
r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0)
ioctl$IOCTL_START_ACCEL_DEV(r0, 0x40096102, 0x0)

1.368216683s ago: executing program 2 (id=172):
munmap(&(0x7f0000002000/0x1000)=nil, 0x1000)
syz_emit_ethernet(0xfdef, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8dda36479a6b179161b4bbff2d0508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0)

1.356821252s ago: executing program 3 (id=173):
r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6)
write$bt_hci(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8)

1.284872723s ago: executing program 0 (id=174):
mkdir(&(0x7f0000005740)='./file0\x00', 0x3b)
mount$afs(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000400)={[{@dyn}]})
chdir(&(0x7f00000000c0)='./file0\x00')
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}]})

1.284740694s ago: executing program 2 (id=175):
mount(&(0x7f0000000000), &(0x7f0000000040)='./cgroup\x00', 0x0, 0x1001, 0x0)

1.227319667s ago: executing program 3 (id=176):
r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
ioctl$SIOCX25SENDCALLACCPT(r0, 0x89e9)

1.226786248s ago: executing program 2 (id=177):
syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000840)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc0ed000e, &(0x7f0000000200)={[{@jqfmt_vfsold}, {@orlov}, {@debug}, {@noload}, {@nombcache}, {@noblock_validity}, {@init_itable_val={'init_itable', 0x3d, 0x601}}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x8000}}]}, 0xfa, 0x47c, &(0x7f0000000a80)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x8042, 0x0)
pwrite64(r0, &(0x7f0000000100)="c0b4b75dc48003ad1511596285e885648b209750b6609f502cd3ed44539f74bce877b5d3182dcbe6f45b7b5c030aec596990c6466386f30061e417f930f2da4b1a539ca2863ad2eb40f24ca9da1d0250827cc7857cbdfb90de8b84202b3383bcc0cba3a2cdf1437b97f6324dad211878edc39409004845509e2e6d212ede037742fd75041182bb979f0e54694db41ab97aa8a6302f3c27ea9377f69a41f512bc68edddd1a4ac7f78ab16398325a86dc047a103cdd442ace84bcf5976f36e39d878406d4a8a68a6d686b5a4cf37b9b4f609d6f621505091aeb21dfb285da282c6a68f1582aef310094c", 0xff2d, 0x8080c61)
fallocate(r0, 0x3, 0x8080007, 0x8000c60)

1.226405296s ago: executing program 0 (id=178):
r0 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0x5, 0x2, 0x3})
r1 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000040)={0x0, &(0x7f00000002c0)=[<r2=>0x0], 0x0, 0x0, 0xfffffd52, 0x1})
ioctl$DRM_IOCTL_MODE_CURSOR(r0, 0xc01c64a3, &(0x7f0000000280)={0x3, r2, 0x0, 0x7ffffff5, 0xa, 0x1ff, 0x1})

1.22612891s ago: executing program 3 (id=179):
r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, <r1=>0x0, <r2=>0x0, <r3=>0x0}, 0x2020)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
write$FUSE_DIRENTPLUS(r0, &(0x7f0000000a80)={0x5a8, 0x0, r1, [{{0x2, 0x3, 0x4, 0xfffffffffffffff7, 0x5, 0x8, {0x2, 0xbeb2, 0x2, 0x0, 0x8000000000000001, 0x1, 0x4, 0x200, 0x6, 0xa000, 0x1, r2, r3, 0x0, 0x9}}, {0x3, 0x5, 0x10, 0x2, ' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}, {{0x1, 0x3, 0x8001, 0x8000000000000000, 0x7, 0x9, {0x3, 0xd6f4, 0xfffffffffffffff8, 0x3, 0x8000000000000000, 0xbe, 0x5, 0x7ff, 0x100, 0x1000, 0x8, 0x0, 0x0, 0xe, 0x40}}, {0x6, 0x7, 0x9, 0x7, '/dev/kvm\x00'}}, {{0x0, 0x2, 0x6, 0x8000000000000001, 0x80000001, 0x1, {0x3, 0x4, 0xb, 0x8, 0x4, 0x1, 0x6f9, 0xfffffffc, 0x7, 0x1000, 0x5, 0x0, 0x0, 0x8000, 0x3}}, {0x3, 0x2, 0xa, 0x6, '/dev/cuse\x00'}}, {{0x5, 0x1, 0x8000000000000001, 0x85, 0x2, 0x795, {0x0, 0x7, 0x7fff, 0x7, 0x1000, 0x4aa, 0x1, 0x0, 0x8, 0x8000, 0x4, 0x0, 0x0, 0x7, 0x6}}, {0x1, 0x7, 0x99, 0x10001, '\x04ootmode\x8e\x12\x05\xf3\x81}\xa0\xeb`\xbf\xb2T\xf1\xad\xa1\a y\x8b,+\xa2w\xad\xb8&.\xe5>\xd7\x88\xcd\xd8p\xc4F\xa9\x1e{\xf4\x8c\x94\x89\xa3\xa4\xaf\xf0Ng]\x9c\xdc*\xe2G\xa6yV\xd6\xa5\x80O\xa9]`U\xd9\x9b\x95\x8a\xa7Z\xb4\xf1xQ(\x9cy\x9a\xeb\xe7\x1a\x9b\x0e\xf7M\xa0\x0eP\x9aS\x0e7\x90z)o\xceV\x80)^\xef@\xb6\x8c\x17IK\xa1\xb0\x0e:R\x01\x03_\x87\bJj\xd3\x9f\x80\x13\xfadj\x053\x1e\x91r\xaa\b_\x04\xd7\xc1!\xb4\xc5\xe5h'}}, {{0x0, 0x2, 0x8, 0x1, 0x4, 0x5, {0x1, 0x7, 0x5, 0xf46b, 0x6, 0x5, 0xc4, 0x5, 0xc9a7, 0xc000, 0x51, 0xee01, 0x0, 0xa32, 0x101}}, {0x0, 0x9, 0x4, 0xf6, ')+@)'}}, {{0x5, 0x1, 0x6, 0x93, 0xe, 0x9, {0x0, 0x4, 0x0, 0x2, 0x3, 0xffffffffffffffff, 0x1, 0x7f, 0x5, 0xa000, 0x4, r2, 0x0, 0x3ff, 0x9}}, {0x4, 0x1, 0x0, 0x6}}, {{0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x9, 0x2, {0x6, 0xb, 0x8, 0x8000000000000001, 0x100000000, 0xffffffffffffffff, 0x7f, 0x6, 0x5, 0xa000, 0x0, 0x0, r3, 0x400, 0x7fffffff}}, {0x5, 0x2}}, {{0x5, 0x0, 0x8, 0x3, 0x825, 0x7, {0x3, 0xe1c, 0xff, 0x3, 0x0, 0x6, 0x40, 0x8, 0xfffffff8, 0xa000, 0x9, 0x0, 0x0, 0x10001, 0x7}}, {0x6, 0xc, 0x0, 0xb4}}]}, 0x5a8)

1.163826472s ago: executing program 3 (id=180):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10)
listen(r0, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x4)
writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001500add427323b470c45b4560a067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7101400000000000000ffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)

1.097702324s ago: executing program 3 (id=181):
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x380})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2})
ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2})
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15)
syz_clone3(&(0x7f0000001880)={0x100000200, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)

1.097198662s ago: executing program 0 (id=182):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000037c0)={0x0, 0x0, &(0x7f0000003780)={&(0x7f0000001b80)=@newtaction={0x88c, 0x30, 0x12f, 0x0, 0x0, {}, [{0x878, 0x1, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0xffff, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x7}, {0x7, 0x2, 0x40, 0x0, 0x0, 0x7}}}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x1, 0x0, 0xffff84bd, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x8, 0x10000, 0x2, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x0, 0x0, 0x61a0, 0x0, 0x0, 0x9, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x0, 0x80000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0xc0000, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x5, 0xfffffffc, 0xb, 0x37, 0x3a, 0x0, 0x0, 0xfffffffd, 0x0, 0x7ff, 0x2, 0x0, 0x0, 0x0, 0x8, 0xffffff35, 0x0, 0x0, 0x4, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, 0x0, 0x0, 0x7e40cfb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb, 0x0, 0x7ff, 0x9, 0xfffffffd, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x400, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0xa1, 0xfffffff1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8f, 0x100000, 0x0, 0xffffff80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffc, 0x5, 0x5, 0x0, 0xfffffffd, 0x0, 0x0, 0x5, 0x0, 0x0, 0x1, 0x0, 0x1]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x0, 0x5, 0x0, 0x2, 0xb, 0xfffffffb, 0x0, 0x4, 0xfea7, 0xfffffffe, 0xffff8000, 0x90, 0x9fd, 0x200002, 0xb8, 0xca2, 0x0, 0x3c, 0x7, 0x1, 0xa89c, 0x400, 0xc, 0x492217a0, 0xff, 0x7, 0x3, 0x1ff, 0xe5, 0x2f, 0xd, 0x3, 0xa, 0x3, 0xfffffffe, 0x9, 0x11, 0x188, 0x6, 0x3ff, 0x7, 0xd, 0x5, 0xc0000, 0x8, 0x8, 0xffffff40, 0x100, 0x3, 0x5, 0x7, 0xcf, 0xbffffffe, 0x8fc, 0x89e0, 0x9, 0x3, 0x9, 0x80000001, 0x6, 0x2, 0x8, 0x800, 0x9, 0x1, 0x100, 0x401, 0x8, 0x3, 0xb5, 0x10001, 0x401, 0x1, 0x7f, 0x0, 0x8, 0x4, 0x7f, 0x0, 0x2, 0x4, 0x0, 0x75, 0x8000, 0x0, 0xb, 0x80, 0x7, 0x5, 0x1, 0x0, 0x5, 0xeb22, 0xf, 0x8000, 0xfffffff7, 0x0, 0x4, 0x3ff, 0x400002, 0x10, 0x5, 0xffffffff, 0x10000, 0x5, 0x1, 0x0, 0x1000, 0x6, 0x5, 0x6, 0x5, 0x4, 0x2, 0x81, 0x0, 0x10, 0x6, 0x7fff, 0x804, 0xfffffff4, 0x10000, 0x5, 0x8, 0xba, 0x4, 0x89, 0x2, 0x6, 0x100, 0x9, 0xffffa3e0, 0x86b9, 0xff, 0x1, 0x40002, 0xf, 0x24b9, 0x3a, 0xe01, 0x1, 0x6430, 0xd, 0x8, 0x0, 0x3, 0x7eb7, 0x3, 0x0, 0x200, 0xfffffeff, 0x9, 0xff, 0xa, 0x6, 0x7, 0x6d0, 0x10000001, 0xc001, 0x100, 0xb, 0x8, 0x101, 0x6, 0x2, 0xfffffc00, 0x81, 0x81, 0x200, 0x80000001, 0x1, 0xfffffffd, 0x4, 0x7, 0x4, 0xb, 0x80, 0x0, 0x5, 0x0, 0x5, 0x7, 0x65, 0x4, 0xfffffa0c, 0x3, 0x0, 0x5, 0x4, 0x35bc0, 0x9, 0xfffffffa, 0x7, 0x3, 0x3, 0x0, 0x6, 0x8, 0x28, 0x2, 0x5, 0x10001, 0x2, 0xf, 0xffffffff, 0x1, 0x723, 0x0, 0x5, 0x9, 0x4, 0x6, 0x7, 0x200, 0xfffffbff, 0x7, 0x3, 0x8, 0x5, 0xfffffffb, 0x2, 0x7f, 0x2, 0x80000002, 0x0, 0x9, 0x1ff, 0xfffffffe, 0x928, 0x4, 0xffffffff, 0x5, 0x6042, 0xb87, 0x6, 0xd8d, 0x55, 0x101, 0x3, 0x64e8, 0x8, 0x82f, 0x772, 0x400080a, 0xffe, 0x6, 0x7fffffff, 0x4, 0x8, 0x8, 0x1, 0x5d, 0x9, 0xd, 0x80]}]]}, {0x4}, {0xc, 0xb}, {0xc, 0xa, {0x3, 0x3}}}}]}]}, 0x88c}, 0x1, 0x0, 0x0, 0x50}, 0x0)

1.054873331s ago: executing program 0 (id=183):
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='comm\x00')
exit(0x2)
read$FUSE(r0, &(0x7f0000002dc0)={0x2020}, 0x2020)

1.048187098s ago: executing program 2 (id=184):
syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file1\x00', 0x4000, &(0x7f0000000040)=ANY=[], 0xff, 0x60c0, &(0x7f000000d800)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0xc4042, 0x1ff)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000140), 0x2000, 0x0)
sendfile(r0, r1, 0x0, 0xfffe80)

907.802047ms ago: executing program 3 (id=185):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
socket$kcm(0x10, 0x2, 0x0)
setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, 0x0, 0x0)
r1 = socket(0x10, 0x3, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0)
close(r3)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="e1fae0f27ab419a2c868d4f4163664397c1a1e2e182d"], 0x10)
ioctl$sock_FIOGETOWN(r1, 0x8903, 0x0)
rt_tgsigqueueinfo(0x0, 0x0, 0x29, &(0x7f00000004c0)={0x3f, 0x1, 0x1})
socket$inet_mptcp(0x2, 0x1, 0x106)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, 0x0, 0x0}, 0x20)
sendmsg$unix(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000300)="1f567238cdd609515121146971ba930dfccc", 0x12}], 0x1, &(0x7f0000000400)=[@cred={{0x1c}}], 0x20, 0x4}, 0x80)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)

98.666577ms ago: executing program 0 (id=186):
mkdir(&(0x7f0000000140)='./file0\x00', 0x141)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000100)='./file0\x00', 0x8100, 0x31)
getdents(r0, &(0x7f0000001280)=""/4075, 0xffb)

0s ago: executing program 0 (id=187):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
chown(0x0, 0xee00, 0x0)
r1 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=<r2=>0x0, &(0x7f00000007c0)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x40, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x1}, {0x0, 0x47}], 0x2})
io_uring_enter(r1, 0x4d10, 0x2, 0x2, 0x0, 0x0)

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:7871' (ED25519) to the list of known hosts.
syzkaller login: [   49.214173][ T5819] cgroup: Unknown subsys name 'net'
[   49.302327][ T5819] cgroup: Unknown subsys name 'cpuset'
[   49.306780][ T5819] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.715667][ T5819] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.510044][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.510861][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.515751][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.516065][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.521797][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.524372][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.528285][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   54.530823][ T5838] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.533994][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   54.534000][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   54.579528][ T5217] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   54.582643][ T5217] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   54.585389][ T5217] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   54.588109][ T5217] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   54.591321][ T5217] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   54.763200][ T5831] chnl_net:caif_netlink_parms(): no params data found
[   54.784331][ T5833] chnl_net:caif_netlink_parms(): no params data found
[   54.854274][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.856950][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.860263][ T5831] bridge_slave_0: entered allmulticast mode
[   54.862965][ T5831] bridge_slave_0: entered promiscuous mode
[   54.887142][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.889869][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.892285][ T5831] bridge_slave_1: entered allmulticast mode
[   54.894989][ T5831] bridge_slave_1: entered promiscuous mode
[   54.904876][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state
[   54.907305][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state
[   54.910660][ T5833] bridge_slave_0: entered allmulticast mode
[   54.913483][ T5833] bridge_slave_0: entered promiscuous mode
[   54.916877][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state
[   54.919592][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state
[   54.921951][ T5833] bridge_slave_1: entered allmulticast mode
[   54.924677][ T5833] bridge_slave_1: entered promiscuous mode
[   54.969887][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.974478][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   54.982193][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   54.994512][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.010718][ T5831] team0: Port device team_slave_0 added
[   55.026281][ T5840] chnl_net:caif_netlink_parms(): no params data found
[   55.032160][ T5831] team0: Port device team_slave_1 added
[   55.035329][ T5833] team0: Port device team_slave_0 added
[   55.060200][ T5833] team0: Port device team_slave_1 added
[   55.090185][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.092387][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.100653][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.105463][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.107769][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.116407][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.127042][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.130472][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.141330][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.146650][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.149918][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.158254][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.185555][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.187956][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.191260][ T5840] bridge_slave_0: entered allmulticast mode
[   55.193972][ T5840] bridge_slave_0: entered promiscuous mode
[   55.212937][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.215252][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.217546][ T5840] bridge_slave_1: entered allmulticast mode
[   55.220699][ T5840] bridge_slave_1: entered promiscuous mode
[   55.270476][ T5831] hsr_slave_0: entered promiscuous mode
[   55.272788][ T5831] hsr_slave_1: entered promiscuous mode
[   55.277364][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.285442][ T5833] hsr_slave_0: entered promiscuous mode
[   55.287731][ T5833] hsr_slave_1: entered promiscuous mode
[   55.290696][ T5833] debugfs: 'hsr0' already exists in 'hsr'
[   55.293056][ T5833] Cannot create hsr debugfs directory
[   55.297631][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.327048][ T5840] team0: Port device team_slave_0 added
[   55.351401][ T5840] team0: Port device team_slave_1 added
[   55.411650][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.414547][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.424581][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.441618][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.443877][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.453258][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.554426][ T5840] hsr_slave_0: entered promiscuous mode
[   55.557618][ T5840] hsr_slave_1: entered promiscuous mode
[   55.560782][ T5840] debugfs: 'hsr0' already exists in 'hsr'
[   55.563247][ T5840] Cannot create hsr debugfs directory
[   55.663386][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   55.672882][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   55.697599][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   55.730733][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   55.795921][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   55.810754][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   55.821718][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   55.827889][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   55.904604][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   55.915579][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   55.926891][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   55.934065][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.010909][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.045850][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.054291][ T5831] 8021q: adding VLAN 0 to HW filter on device team0
[   56.064048][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.075138][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.078121][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.093472][ T5840] 8021q: adding VLAN 0 to HW filter on device team0
[   56.097428][ T5833] 8021q: adding VLAN 0 to HW filter on device team0
[   56.111936][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.114506][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.118409][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.121042][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.135079][ T3624] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.137401][ T3624] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.147832][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.150632][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.155947][ T3624] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.158657][ T3624] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.231510][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.238517][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.328396][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.357368][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.368085][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.380523][ T5840] veth0_vlan: entered promiscuous mode
[   56.395256][ T5840] veth1_vlan: entered promiscuous mode
[   56.415465][ T5833] veth0_vlan: entered promiscuous mode
[   56.432366][ T5833] veth1_vlan: entered promiscuous mode
[   56.438073][ T5831] veth0_vlan: entered promiscuous mode
[   56.457559][ T5840] veth0_macvtap: entered promiscuous mode
[   56.463983][ T5831] veth1_vlan: entered promiscuous mode
[   56.466712][ T5840] veth1_macvtap: entered promiscuous mode
[   56.497384][ T5833] veth0_macvtap: entered promiscuous mode
[   56.501801][ T5833] veth1_macvtap: entered promiscuous mode
[   56.505903][ T5831] veth0_macvtap: entered promiscuous mode
[   56.511934][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.522639][ T5831] veth1_macvtap: entered promiscuous mode
[   56.528051][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.542824][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.556347][   T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.564527][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.572547][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.578098][   T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.582868][ T5217] Bluetooth: hci0: command tx timeout
[   56.585434][ T5217] Bluetooth: hci1: command tx timeout
[   56.588664][   T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.604046][   T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.609337][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.614686][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.618556][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.623054][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.632258][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.659764][ T5838] Bluetooth: hci2: command tx timeout
[   56.687448][ T5860] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.695675][ T5860] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.710922][   T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.712965][ T5860] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.714381][   T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.737269][ T5860] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.767736][ T3624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.777495][ T3624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.826005][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.845327][  T136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.857055][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.859138][  T136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.869218][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.892152][ T3624] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.900062][ T3624] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.918709][   T64] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.924555][   T64] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   57.096332][ T5910] loop2: detected capacity change from 0 to 4096
[   57.127202][ T5912] netlink: 'syz.0.8': attribute type 21 has an invalid length.
[   57.130564][ T5910] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   57.137007][ T5912] netlink: 132 bytes leftover after parsing attributes in process `syz.0.8'.
[   57.590408][ T5920] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #15: comm syz.2.7: corrupted inode contents
[   57.596307][ T5920] EXT4-fs error (device loop2): ext4_dirty_inode:6454: inode #15: comm syz.2.7: mark_inode_dirty error
[   57.601421][ T5920] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #15: comm syz.2.7: corrupted inode contents
[   57.606206][ T5920] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.7: mark_inode_dirty error
[   57.610802][ T5920] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #15: comm syz.2.7: corrupted inode contents
[   57.614977][ T5920] EXT4-fs error (device loop2): __ext4_ext_dirty:206: inode #15: comm syz.2.7: mark_inode_dirty error
[   57.620291][ T5920] EXT4-fs error (device loop2): ext4_do_update_inode:5563: inode #15: comm syz.2.7: corrupted inode contents
[   57.626012][ T5920] EXT4-fs error (device loop2): ext4_truncate:4592: inode #15: comm syz.2.7: mark_inode_dirty error
[   57.629902][ T5920] EXT4-fs error (device loop2) in ext4_setattr:5981: Corrupt filesystem
[   57.972799][ T5933] syz.0.14 (5933): attempted to duplicate a private mapping with mremap.  This is not supported.
[   58.006407][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   58.051547][ T5935] QAT: failed to copy from user cfg_data.
[   58.287158][ T5939] warning: `syz.2.16' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   58.391089][ T5943] loop0: detected capacity change from 0 to 8192
[   58.659104][ T5217] Bluetooth: hci0: command tx timeout
[   58.661262][ T5838] Bluetooth: hci1: command tx timeout
[   58.739298][ T5838] Bluetooth: hci2: command tx timeout
[   58.839183][   T47] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   58.899757][ T5897] Bluetooth: hci1: Opcode 0x0401 failed: -110
[   58.996126][   T47] usb 3-1: config 0 has an invalid interface number: 64 but max is 0
[   59.008777][   T47] usb 3-1: config 0 has no interface number 0
[   59.014807][   T47] usb 3-1: New USB device found, idVendor=046d, idProduct=0823, bcdDevice= 0.07
[   59.017790][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.021499][   T47] usb 3-1: Product: syz
[   59.023207][   T47] usb 3-1: Manufacturer: syz
[   59.024915][   T47] usb 3-1: SerialNumber: syz
[   59.031309][   T47] usb 3-1: config 0 descriptor??
[   59.249515][   T47] usb 3-1: Found UVC 0.08 device syz (046d:0823)
[   59.252082][   T47] usb 3-1: No valid video chain found.
[   59.264917][   T47] usb 3-1: USB disconnect, device number 2
[   59.607596][ T5961] loop1: detected capacity change from 0 to 40427
[   59.614672][ T5961] F2FS-fs (loop1): invalid crc value
[   59.651459][ T5961] F2FS-fs (loop1): Start checkpoint disabled!
[   59.656119][ T5961] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   59.679096][ T5294] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   59.687754][ T5961] evm: overlay not supported
[   59.709570][ T5840] syz-executor: attempt to access beyond end of device
[   59.709570][ T5840] loop1: rw=524288, sector=45064, nr_sectors = 8 limit=40427
[   59.714997][ T5840] syz-executor: attempt to access beyond end of device
[   59.714997][ T5840] loop1: rw=0, sector=45064, nr_sectors = 8 limit=40427
[   59.733608][ T1094] kworker/u9:6: attempt to access beyond end of device
[   59.733608][ T1094] loop1: rw=2049, sector=45096, nr_sectors = 24 limit=40427
[   59.738616][ T1094] CPU: 0 UID: 0 PID: 1094 Comm: kworker/u9:6 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[   59.738628][ T1094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   59.738633][ T1094] Workqueue: writeback wb_workfn (flush-7:1)
[   59.738652][ T1094] Call Trace:
[   59.738656][ T1094]  <TASK>
[   59.738659][ T1094]  dump_stack_lvl+0x189/0x250
[   59.738672][ T1094]  ? __pfx_dump_stack_lvl+0x10/0x10
[   59.738678][ T1094]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   59.738687][ T1094]  ? __pfx_queue_work_on+0x10/0x10
[   59.738700][ T1094]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   59.738707][ T1094]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   59.738715][ T1094]  ? f2fs_hw_is_readonly+0x39b/0x470
[   59.738729][ T1094]  f2fs_handle_critical_error+0x37c/0x540
[   59.738742][ T1094]  f2fs_write_end_io+0x495/0x810
[   59.738751][ T1094]  ? blkg_put+0x22/0x240
[   59.738767][ T1094]  __submit_merged_bio+0x27a/0x6a0
[   59.738781][ T1094]  __submit_merged_write_cond+0x255/0x530
[   59.738795][ T1094]  f2fs_write_data_pages+0x261d/0x3000
[   59.738840][ T1094]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   59.738854][ T1094]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   59.738878][ T1094]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   59.738891][ T1094]  ? trace_f2fs_writepages+0x7f/0x200
[   59.738899][ T1094]  ? f2fs_write_node_pages+0x478/0x6e0
[   59.738912][ T1094]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   59.738929][ T1094]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   59.738937][ T1094]  do_writepages+0x32e/0x550
[   59.738949][ T1094]  ? reacquire_held_locks+0x127/0x1d0
[   59.738960][ T1094]  ? writeback_sb_inodes+0x372/0x1000
[   59.738973][ T1094]  __writeback_single_inode+0x145/0xff0
[   59.738980][ T1094]  ? do_raw_spin_unlock+0x4d/0x240
[   59.738990][ T1094]  writeback_sb_inodes+0x6b5/0x1000
[   59.739014][ T1094]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   59.739040][ T1094]  ? rcu_is_watching+0x15/0xb0
[   59.739056][ T1094]  wb_writeback+0x43b/0xaf0
[   59.739067][ T1094]  ? queue_io+0x3d1/0x590
[   59.739076][ T1094]  ? __pfx_wb_writeback+0x10/0x10
[   59.739088][ T1094]  ? _raw_spin_unlock_irq+0x23/0x50
[   59.739097][ T1094]  wb_workfn+0x409/0xef0
[   59.739114][ T1094]  ? __pfx_wb_workfn+0x10/0x10
[   59.739126][ T1094]  ? __lock_acquire+0xab9/0xd20
[   59.739140][ T1094]  ? process_scheduled_works+0x9ef/0x17b0
[   59.739153][ T1094]  ? _raw_spin_unlock_irq+0x23/0x50
[   59.739159][ T1094]  ? process_scheduled_works+0x9ef/0x17b0
[   59.739167][ T1094]  ? process_scheduled_works+0x9ef/0x17b0
[   59.739178][ T1094]  process_scheduled_works+0xae1/0x17b0
[   59.739201][ T1094]  ? __pfx_process_scheduled_works+0x10/0x10
[   59.739218][ T1094]  worker_thread+0x8a0/0xda0
[   59.739234][ T1094]  ? __kthread_parkme+0x7b/0x200
[   59.739246][ T1094]  kthread+0x711/0x8a0
[   59.739255][ T1094]  ? __pfx_worker_thread+0x10/0x10
[   59.739265][ T1094]  ? __pfx_kthread+0x10/0x10
[   59.739273][ T1094]  ? _raw_spin_unlock_irq+0x23/0x50
[   59.739280][ T1094]  ? lockdep_hardirqs_on+0x9c/0x150
[   59.739287][ T1094]  ? __pfx_kthread+0x10/0x10
[   59.739295][ T1094]  ret_from_fork+0x3fc/0x770
[   59.739308][ T1094]  ? __pfx_ret_from_fork+0x10/0x10
[   59.739320][ T1094]  ? __switch_to_asm+0x39/0x70
[   59.739327][ T1094]  ? __switch_to_asm+0x33/0x70
[   59.739334][ T1094]  ? __pfx_kthread+0x10/0x10
[   59.739342][ T1094]  ret_from_fork_asm+0x1a/0x30
[   59.739357][ T1094]  </TASK>
[   59.879120][ T5968] netlink: 'syz.2.29': attribute type 1 has an invalid length.
[   59.881789][ T5968] netlink: 224 bytes leftover after parsing attributes in process `syz.2.29'.
[   59.884680][ T1094] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   59.887540][ T1094] CPU: 0 UID: 0 PID: 1094 Comm: kworker/u9:6 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[   59.887556][ T1094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   59.887564][ T1094] Workqueue: writeback wb_workfn (flush-7:1)
[   59.887590][ T1094] Call Trace:
[   59.887596][ T1094]  <TASK>
[   59.887602][ T1094]  dump_stack_lvl+0x189/0x250
[   59.887621][ T1094]  ? __pfx_dump_stack_lvl+0x10/0x10
[   59.887631][ T1094]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   59.887644][ T1094]  ? __pfx_queue_work_on+0x10/0x10
[   59.887664][ T1094]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   59.887674][ T1094]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   59.887682][ T1094]  ? f2fs_hw_is_readonly+0x39b/0x470
[   59.887696][ T1094]  f2fs_handle_critical_error+0x37c/0x540
[   59.887710][ T1094]  f2fs_write_end_io+0x495/0x810
[   59.887718][ T1094]  ? blkg_put+0x22/0x240
[   59.887732][ T1094]  __submit_merged_bio+0x27a/0x6a0
[   59.887746][ T1094]  __submit_merged_write_cond+0x255/0x530
[   59.887766][ T1094]  f2fs_write_data_pages+0x261d/0x3000
[   59.887787][ T1094]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   59.887800][ T1094]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   59.887823][ T1094]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   59.887836][ T1094]  ? trace_f2fs_writepages+0x7f/0x200
[   59.887843][ T1094]  ? f2fs_write_node_pages+0x478/0x6e0
[   59.887856][ T1094]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   59.887872][ T1094]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   59.887880][ T1094]  do_writepages+0x32e/0x550
[   59.887892][ T1094]  ? reacquire_held_locks+0x127/0x1d0
[   59.887902][ T1094]  ? writeback_sb_inodes+0x372/0x1000
[   59.887915][ T1094]  __writeback_single_inode+0x145/0xff0
[   59.887923][ T1094]  ? do_raw_spin_unlock+0x4d/0x240
[   59.887932][ T1094]  writeback_sb_inodes+0x6b5/0x1000
[   59.887951][ T1094]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   59.887976][ T1094]  ? rcu_is_watching+0x15/0xb0
[   59.887991][ T1094]  wb_writeback+0x43b/0xaf0
[   59.888002][ T1094]  ? queue_io+0x3d1/0x590
[   59.888012][ T1094]  ? __pfx_wb_writeback+0x10/0x10
[   59.888024][ T1094]  ? _raw_spin_unlock_irq+0x23/0x50
[   59.888032][ T1094]  wb_workfn+0x409/0xef0
[   59.888049][ T1094]  ? __pfx_wb_workfn+0x10/0x10
[   59.888061][ T1094]  ? __lock_acquire+0xab9/0xd20
[   59.888074][ T1094]  ? process_scheduled_works+0x9ef/0x17b0
[   59.888087][ T1094]  ? _raw_spin_unlock_irq+0x23/0x50
[   59.888093][ T1094]  ? process_scheduled_works+0x9ef/0x17b0
[   59.888102][ T1094]  ? process_scheduled_works+0x9ef/0x17b0
[   59.888112][ T1094]  process_scheduled_works+0xae1/0x17b0
[   59.888134][ T1094]  ? __pfx_process_scheduled_works+0x10/0x10
[   59.888151][ T1094]  worker_thread+0x8a0/0xda0
[   59.888167][ T1094]  ? __kthread_parkme+0x7b/0x200
[   59.888178][ T1094]  kthread+0x711/0x8a0
[   59.888187][ T1094]  ? __pfx_worker_thread+0x10/0x10
[   59.888197][ T1094]  ? __pfx_kthread+0x10/0x10
[   59.888205][ T1094]  ? _raw_spin_unlock_irq+0x23/0x50
[   59.888212][ T1094]  ? lockdep_hardirqs_on+0x9c/0x150
[   59.888219][ T1094]  ? __pfx_kthread+0x10/0x10
[   59.888227][ T1094]  ret_from_fork+0x3fc/0x770
[   59.888238][ T1094]  ? __pfx_ret_from_fork+0x10/0x10
[   59.888251][ T1094]  ? __switch_to_asm+0x39/0x70
[   59.888258][ T1094]  ? __switch_to_asm+0x33/0x70
[   59.888264][ T1094]  ? __pfx_kthread+0x10/0x10
[   59.888272][ T1094]  ret_from_fork_asm+0x1a/0x30
[   59.888287][ T1094]  </TASK>
[   59.888290][ T1094] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   60.007476][ T1094] CPU: 0 UID: 0 PID: 1094 Comm: kworker/u9:6 Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[   60.007489][ T1094] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   60.007494][ T1094] Workqueue: writeback wb_workfn (flush-7:1)
[   60.007512][ T1094] Call Trace:
[   60.007516][ T1094]  <TASK>
[   60.007519][ T1094]  dump_stack_lvl+0x189/0x250
[   60.007532][ T1094]  ? __pfx_dump_stack_lvl+0x10/0x10
[   60.007538][ T1094]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   60.007547][ T1094]  ? __pfx_queue_work_on+0x10/0x10
[   60.007560][ T1094]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   60.007566][ T1094]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   60.007574][ T1094]  ? f2fs_hw_is_readonly+0x39b/0x470
[   60.007589][ T1094]  f2fs_handle_critical_error+0x37c/0x540
[   60.007603][ T1094]  f2fs_write_end_io+0x495/0x810
[   60.007611][ T1094]  ? blkg_put+0x22/0x240
[   60.007625][ T1094]  __submit_merged_bio+0x27a/0x6a0
[   60.007639][ T1094]  __submit_merged_write_cond+0x255/0x530
[   60.007652][ T1094]  f2fs_write_data_pages+0x261d/0x3000
[   60.007674][ T1094]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   60.007688][ T1094]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[   60.007711][ T1094]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[   60.007723][ T1094]  ? trace_f2fs_writepages+0x7f/0x200
[   60.007731][ T1094]  ? f2fs_write_node_pages+0x478/0x6e0
[   60.007743][ T1094]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[   60.007767][ T1094]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   60.007775][ T1094]  do_writepages+0x32e/0x550
[   60.007787][ T1094]  ? reacquire_held_locks+0x127/0x1d0
[   60.007797][ T1094]  ? writeback_sb_inodes+0x372/0x1000
[   60.007810][ T1094]  __writeback_single_inode+0x145/0xff0
[   60.007818][ T1094]  ? do_raw_spin_unlock+0x4d/0x240
[   60.007827][ T1094]  writeback_sb_inodes+0x6b5/0x1000
[   60.007845][ T1094]  ? __pfx_writeback_sb_inodes+0x10/0x10
[   60.007870][ T1094]  ? rcu_is_watching+0x15/0xb0
[   60.007886][ T1094]  wb_writeback+0x43b/0xaf0
[   60.007897][ T1094]  ? queue_io+0x3d1/0x590
[   60.007906][ T1094]  ? __pfx_wb_writeback+0x10/0x10
[   60.007917][ T1094]  ? _raw_spin_unlock_irq+0x23/0x50
[   60.007926][ T1094]  wb_workfn+0x409/0xef0
[   60.007943][ T1094]  ? __pfx_wb_workfn+0x10/0x10
[   60.007955][ T1094]  ? __lock_acquire+0xab9/0xd20
[   60.007968][ T1094]  ? process_scheduled_works+0x9ef/0x17b0
[   60.007981][ T1094]  ? _raw_spin_unlock_irq+0x23/0x50
[   60.007987][ T1094]  ? process_scheduled_works+0x9ef/0x17b0
[   60.007996][ T1094]  ? process_scheduled_works+0x9ef/0x17b0
[   60.008006][ T1094]  process_scheduled_works+0xae1/0x17b0
[   60.008028][ T1094]  ? __pfx_process_scheduled_works+0x10/0x10
[   60.008045][ T1094]  worker_thread+0x8a0/0xda0
[   60.008060][ T1094]  ? __kthread_parkme+0x7b/0x200
[   60.008071][ T1094]  kthread+0x711/0x8a0
[   60.008080][ T1094]  ? __pfx_worker_thread+0x10/0x10
[   60.008090][ T1094]  ? __pfx_kthread+0x10/0x10
[   60.008098][ T1094]  ? _raw_spin_unlock_irq+0x23/0x50
[   60.008104][ T1094]  ? lockdep_hardirqs_on+0x9c/0x150
[   60.008112][ T1094]  ? __pfx_kthread+0x10/0x10
[   60.008119][ T1094]  ret_from_fork+0x3fc/0x770
[   60.008133][ T1094]  ? __pfx_ret_from_fork+0x10/0x10
[   60.008145][ T1094]  ? __switch_to_asm+0x39/0x70
[   60.008152][ T1094]  ? __switch_to_asm+0x33/0x70
[   60.008158][ T1094]  ? __pfx_kthread+0x10/0x10
[   60.008166][ T1094]  ret_from_fork_asm+0x1a/0x30
[   60.008181][ T1094]  </TASK>
[   60.008184][ T1094] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   60.028722][ T5970] loop2: detected capacity change from 0 to 1764
[   60.032002][ T5294] usb 1-1: Using ep0 maxpacket: 8
[   60.039220][ T5970] =======================================================
[   60.039220][ T5970] WARNING: The mand mount option has been deprecated and
[   60.039220][ T5970]          and is ignored by this kernel. Remove the mand
[   60.039220][ T5970]          option from the mount to silence this warning.
[   60.039220][ T5970] =======================================================
[   60.044183][ T5294] usb 1-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[   60.056025][ T5970] iso9660: Unknown parameter '00000000000000000000'
[   60.056411][ T5294] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   60.146159][ T5294] usb 1-1: Product: syz
[   60.147690][ T5294] usb 1-1: Manufacturer: syz
[   60.149444][ T5294] usb 1-1: SerialNumber: syz
[   60.156310][ T5294] usb 1-1: config 0 descriptor??
[   60.163677][ T5294] gspca_main: se401-2.14.0 probing 047d:5003
[   60.422461][ T5860] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.511370][ T5860] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.575456][ T5294] gspca_se401: ExtraFeatures: 117
[   60.577635][ T5294] gspca_se401: Too many frame sizes
[   60.622122][ T5860] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.700151][ T5860] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.739233][ T5217] Bluetooth: hci0: command tx timeout
[   60.742321][ T5838] Bluetooth: hci1: command 0x040f tx timeout
[   60.815853][  T975] usb 1-1: USB disconnect, device number 2
[   61.006561][ T5860] bridge_slave_1: left allmulticast mode
[   61.015802][ T5860] bridge_slave_1: left promiscuous mode
[   61.024368][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.043986][ T5860] bridge_slave_0: left allmulticast mode
[   61.048677][ T5860] bridge_slave_0: left promiscuous mode
[   61.055025][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.387389][ T5217] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   61.396717][ T5217] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   61.405296][ T5217] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   61.412198][ T5217] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   61.415542][ T5217] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   61.499065][ T5860] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   61.512775][ T5860] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   61.520016][ T5860] bond0 (unregistering): Released all slaves
[   61.887856][ T5860] hsr_slave_0: left promiscuous mode
[   61.892367][ T6006] overlayfs: workdir and upperdir must be separate subtrees
[   61.895360][ T5860] hsr_slave_1: left promiscuous mode
[   61.897501][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   61.905983][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_0
[   61.916882][ T5860] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   61.919382][ T5860] batman_adv: batadv0: Removing interface: batadv_slave_1
[   61.948313][ T5860] veth1_macvtap: left promiscuous mode
[   61.958212][ T5860] veth0_macvtap: left promiscuous mode
[   61.963272][ T5860] veth1_vlan: left promiscuous mode
[   61.965530][ T5860] veth0_vlan: left promiscuous mode
[   61.985912][ T5991] loop2: detected capacity change from 0 to 40427
[   61.992160][ T5991] F2FS-fs (loop2): heap/no_heap options were deprecated
[   61.997169][ T5991] F2FS-fs (loop2): invalid crc value
[   62.072499][ T5991] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5
[   62.102354][ T5831] syz-executor: attempt to access beyond end of device
[   62.102354][ T5831] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   62.119781][ T5831] CPU: 1 UID: 0 PID: 5831 Comm: syz-executor Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[   62.119796][ T5831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   62.119802][ T5831] Call Trace:
[   62.119806][ T5831]  <TASK>
[   62.119810][ T5831]  dump_stack_lvl+0x189/0x250
[   62.119844][ T5831]  ? __pfx_dump_stack_lvl+0x10/0x10
[   62.119853][ T5831]  ? _raw_spin_unlock_irqrestore+0x85/0x110
[   62.119862][ T5831]  ? __pfx_queue_work_on+0x10/0x10
[   62.119876][ T5831]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   62.119883][ T5831]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   62.119890][ T5831]  ? f2fs_hw_is_readonly+0x39b/0x470
[   62.119904][ T5831]  f2fs_handle_critical_error+0x37c/0x540
[   62.119919][ T5831]  f2fs_write_end_io+0x495/0x810
[   62.119927][ T5831]  ? blkg_put+0x22/0x240
[   62.119942][ T5831]  __submit_merged_bio+0x27a/0x6a0
[   62.119956][ T5831]  __submit_merged_write_cond+0x255/0x530
[   62.119970][ T5831]  f2fs_write_data_pages+0x261d/0x3000
[   62.120002][ T5831]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   62.120045][ T5831]  ? __lock_acquire+0xab9/0xd20
[   62.120066][ T5831]  ? do_raw_spin_lock+0x121/0x290
[   62.120086][ T5831]  ? do_raw_spin_unlock+0x4d/0x240
[   62.120097][ T5831]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   62.120111][ T5831]  do_writepages+0x32e/0x550
[   62.120135][ T5831]  ? do_raw_spin_unlock+0x4d/0x240
[   62.120150][ T5831]  filemap_fdatawrite+0x191/0x230
[   62.120165][ T5831]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   62.120209][ T5831]  ? do_raw_spin_unlock+0x4d/0x240
[   62.120219][ T5831]  f2fs_sync_dirty_inodes+0x31f/0x830
[   62.120235][ T5831]  f2fs_write_checkpoint+0x94a/0x1de0
[   62.120254][ T5831]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   62.120280][ T5831]  ? f2fs_stop_gc_thread+0x7f/0xb0
[   62.120288][ T5831]  ? kfree+0x18e/0x440
[   62.120299][ T5831]  ? kill_f2fs_super+0x298/0x6c0
[   62.120310][ T5831]  kill_f2fs_super+0x2c3/0x6c0
[   62.120320][ T5831]  ? __pfx_kill_f2fs_super+0x10/0x10
[   62.120327][ T5831]  ? radix_tree_delete_item+0x2b6/0x400
[   62.120339][ T5831]  ? shrinker_free+0x2ce/0x3e0
[   62.120348][ T5831]  deactivate_locked_super+0xbc/0x130
[   62.120356][ T5831]  cleanup_mnt+0x425/0x4c0
[   62.120368][ T5831]  ? lockdep_hardirqs_on+0x9c/0x150
[   62.120378][ T5831]  task_work_run+0x1d4/0x260
[   62.120409][ T5831]  ? __pfx_task_work_run+0x10/0x10
[   62.120418][ T5831]  ? __x64_sys_umount+0x122/0x160
[   62.120429][ T5831]  ? exit_to_user_mode_loop+0x40/0x110
[   62.120440][ T5831]  exit_to_user_mode_loop+0xec/0x110
[   62.120450][ T5831]  do_syscall_64+0x2bd/0x3b0
[   62.120462][ T5831]  ? lockdep_hardirqs_on+0x9c/0x150
[   62.120472][ T5831]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.120483][ T5831]  ? exc_page_fault+0x9f/0xf0
[   62.120497][ T5831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   62.120507][ T5831] RIP: 0033:0x7f4a1878fe97
[   62.120518][ T5831] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   62.120528][ T5831] RSP: 002b:00007ffe9169dad8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   62.120541][ T5831] RAX: 0000000000000000 RBX: 00007f4a18811bdd RCX: 00007f4a1878fe97
[   62.120549][ T5831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9169db90
[   62.120557][ T5831] RBP: 00007ffe9169db90 R08: 0000000000000000 R09: 0000000000000000
[   62.120563][ T5831] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe9169ec20
[   62.120569][ T5831] R13: 00007f4a18811bdd R14: 000000000000f20c R15: 00007ffe9169ec60
[   62.120592][ T5831]  </TASK>
[   62.126274][ T5831] F2FS-fs (loop2): Stopped filesystem due to reason: 3
[   62.517651][ T5860] team0 (unregistering): Port device team_slave_1 removed
[   62.544316][ T5860] team0 (unregistering): Port device team_slave_0 removed
[   62.758950][ T5294] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   62.822520][ T5838] Bluetooth: hci1: command 0x040f tx timeout
[   62.824920][ T5838] Bluetooth: hci0: command tx timeout
[   62.873653][ T5980] chnl_net:caif_netlink_parms(): no params data found
[   62.922667][ T5294] usb 3-1: Using ep0 maxpacket: 16
[   62.929118][ T5294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.932569][ T5294] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.937833][ T5294] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   62.942604][ T5294] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   62.954054][ T5294] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.961702][ T5294] usb 3-1: config 0 descriptor??
[   63.177030][ T5980] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.180854][ T5980] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.185701][ T5980] bridge_slave_0: entered allmulticast mode
[   63.196431][ T5980] bridge_slave_0: entered promiscuous mode
[   63.215616][ T5980] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.218991][ T5980] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.223189][ T5980] bridge_slave_1: entered allmulticast mode
[   63.228607][ T5980] bridge_slave_1: entered promiscuous mode
[   63.357269][ T5980] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   63.412677][ T5294] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   63.416282][ T5294] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   63.419625][ T5294] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   63.422646][ T5294] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   63.431809][ T5294] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   63.438435][ T5294] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   63.446200][ T5980] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   63.450132][ T5294] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   63.452614][ T5294] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   63.455007][ T5294] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   63.459826][ T5217] Bluetooth: hci2: command tx timeout
[   63.466474][ T5294] microsoft 0003:045E:07DA.0001: unknown main item tag 0x0
[   63.501394][ T5294] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0
[   63.514267][ T5294] microsoft 0003:045E:07DA.0001: no inputs found
[   63.528959][ T5294] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway
[   63.570321][ T5980] team0: Port device team_slave_0 added
[   63.615889][ T5980] team0: Port device team_slave_1 added
[   63.660138][  T975] usb 3-1: USB disconnect, device number 3
[   63.783623][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_0
[   63.786776][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.798058][ T5980] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   63.827982][ T5980] batman_adv: batadv0: Adding interface: batadv_slave_1
[   63.837294][ T5980] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   63.851280][ T5980] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   63.947080][ T5980] hsr_slave_0: entered promiscuous mode
[   63.950617][ T5980] hsr_slave_1: entered promiscuous mode
[   63.953223][ T5980] debugfs: 'hsr0' already exists in 'hsr'
[   63.955125][ T5980] Cannot create hsr debugfs directory
[   64.374909][ T6041] loop2: detected capacity change from 0 to 64
[   64.481727][ T5980] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   64.497614][ T5980] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   64.524280][ T5980] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   64.545727][ T5980] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   64.583999][ T6053] loop0: detected capacity change from 0 to 512
[   64.599604][ T6053] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[   64.608032][ T6053] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[   64.644963][ T6053] EXT4-fs (loop0): 1 orphan inode deleted
[   64.647290][ T6053] EXT4-fs (loop0): 1 truncate cleaned up
[   64.659931][ T6053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   64.712247][ T5980] 8021q: adding VLAN 0 to HW filter on device bond0
[   64.714259][ T6059] loop2: detected capacity change from 0 to 4096
[   64.726779][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   64.737918][ T6059] ntfs3(loop2): Different NTFS sector size (4096) and media sector size (512).
[   64.744827][ T5980] 8021q: adding VLAN 0 to HW filter on device team0
[   64.758741][ T3588] bridge0: port 1(bridge_slave_0) entered blocking state
[   64.761247][ T3588] bridge0: port 1(bridge_slave_0) entered forwarding state
[   64.792095][ T3588] bridge0: port 2(bridge_slave_1) entered blocking state
[   64.795062][ T3588] bridge0: port 2(bridge_slave_1) entered forwarding state
[   64.841756][ T6059] ntfs3(loop2): ino=19, mi_enum_attr
[   64.844252][ T6059] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   64.900149][ T5217] Bluetooth: hci1: command 0x040f tx timeout
[   64.994320][ T5980] 8021q: adding VLAN 0 to HW filter on device batadv0
[   65.152741][ T5980] veth0_vlan: entered promiscuous mode
[   65.496370][ T6077] loop2: detected capacity change from 0 to 32768
[   65.533981][ T6077] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[   65.539488][ T5217] Bluetooth: hci2: command tx timeout
[   65.634617][ T5831] ocfs2: Unmounting device (7,2) on (node local)
[   65.680119][ T5980] veth1_vlan: entered promiscuous mode
[   65.784586][ T5980] veth0_macvtap: entered promiscuous mode
[   65.821541][ T5980] veth1_macvtap: entered promiscuous mode
[   65.893402][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_0
[   65.919650][ T5980] batman_adv: batadv0: Interface activated: batadv_slave_1
[   65.947933][ T5861] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   65.960780][ T5861] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   65.963747][ T5861] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   65.972198][ T5861] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   66.053518][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.056476][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.104477][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   66.114009][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   66.214477][ T6093] loop2: detected capacity change from 0 to 32768
[   66.258520][ T6093] XFS (loop2): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   66.328654][ T6093] XFS (loop2): Ending clean mount
[   66.383766][ T5831] XFS (loop2): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   66.414953][ T6124] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   66.914657][ T6152] netlink: 'syz.3.72': attribute type 10 has an invalid length.
[   66.967666][ T6152] bond0: (slave wlan1): Enslaving as an active interface with an up link
[   66.977140][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'.
[   66.979562][ T6151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   67.448936][  T975] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   67.600769][  T975] usb 3-1: Using ep0 maxpacket: 32
[   67.608439][  T975] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 2
[   67.612389][  T975] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 183, using maximum allowed: 30
[   67.616876][  T975] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 183
[   67.622190][ T5217] Bluetooth: hci2: command tx timeout
[   67.639544][  T975] usb 3-1: config 0 interface 0 has no altsetting 1
[   67.643901][  T975] usb 3-1: New USB device found, idVendor=152d, idProduct=0539, bcdDevice= 0.00
[   67.647714][  T975] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[   67.654037][  T975] usb 3-1: SerialNumber: syz
[   67.663600][  T975] usb 3-1: config 0 descriptor??
[   67.679193][  T975] usb-storage 3-1:0.0: USB Mass Storage device detected
[   67.691759][  T975] usb-storage 3-1:0.0: Quirks match for vid 152d pid 0539: 4000000
[   67.792735][ T6192] loop3: detected capacity change from 0 to 1024
[   67.813207][ T6192] EXT4-fs: Ignoring removed mblk_io_submit option
[   67.815948][ T6192] EXT4-fs: inline encryption not supported
[   67.830495][ T6192] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[   67.837713][ T6192] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c842e018, mo2=0000]
[   67.847266][ T6192] EXT4-fs error (device loop3): ext4_orphan_get:1419: comm syz.3.87: bad orphan inode 11
[   67.857185][ T6192] ext4_test_bit(bit=10, block=4) = 1
[   67.860244][ T6192] is_bad_inode(inode)=0
[   67.861810][ T6192] NEXT_ORPHAN(inode)=3254779904
[   67.863668][ T6192] max_ino=32
[   67.864913][ T6192] i_nlink=0
[   67.875685][ T5881] usb 3-1: USB disconnect, device number 4
[   67.890853][ T6192] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 2: comm syz.3.87: lblock 2 mapped to illegal pblock 2 (length 1)
[   67.918027][ T6192] Quota error (device loop3): qtree_write_dquot: dquota write failed
[   67.934718][ T6192] EXT4-fs error (device loop3): ext4_map_blocks:780: inode #3: block 48: comm syz.3.87: lblock 0 mapped to illegal pblock 48 (length 1)
[   67.954704][ T6192] Quota error (device loop3): v2_write_file_info: Can't write info structure
[   67.958549][ T6192] EXT4-fs error (device loop3): ext4_acquire_dquot:6933: comm syz.3.87: Failed to acquire dquot type 0
[   68.040249][ T6192] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6250: Corrupt filesystem
[   68.053446][ T6192] EXT4-fs error (device loop3): ext4_evict_inode:254: inode #11: comm syz.3.87: mark_inode_dirty error
[   68.067443][ T6192] EXT4-fs warning (device loop3): ext4_evict_inode:257: couldn't mark inode dirty (err -117)
[   68.079397][ T6192] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   68.114472][ T5980] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   68.118056][ T5980] EXT4-fs error (device loop3): __ext4_get_inode_loc:4787: comm syz-executor: Invalid inode table block 1 in block_group 0
[   68.129589][ T5980] EXT4-fs error (device loop3) in ext4_reserve_inode_write:6250: Corrupt filesystem
[   68.132931][ T5980] EXT4-fs error (device loop3): ext4_quota_off:7217: inode #3: comm syz-executor: mark_inode_dirty error
[   68.659143][ T5881] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   68.834917][ T5881] usb 3-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=a5.ed
[   68.838517][ T5881] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.844100][ T5881] usb 3-1: Product: syz
[   68.845819][ T5881] usb 3-1: Manufacturer: syz
[   68.847659][ T5881] usb 3-1: SerialNumber: syz
[   68.854525][ T5881] usb 3-1: config 0 descriptor??
[   68.862222][ T5881] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[   68.866929][ T5881] ftdi_sio ttyUSB0: unknown device type: 0xa5ed
[   68.933197][ T6203] loop0: detected capacity change from 0 to 131072
[   68.938322][ T6203] F2FS-fs (loop0): Allow to mount readonly mode only
[   68.989595][   T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   69.066318][ T3145] usb 3-1: USB disconnect, device number 5
[   69.083751][ T3145] ftdi_sio 3-1:0.0: device disconnected
[   69.141285][   T24] usb 4-1: Using ep0 maxpacket: 8
[   69.145201][   T24] usb 4-1: config index 0 descriptor too short (expected 1821, got 853)
[   69.148611][   T24] usb 4-1: config 0 has an invalid interface number: 103 but max is 2
[   69.165887][   T24] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   69.177079][   T24] usb 4-1: config 0 has 2 interfaces, different from the descriptor's value: 3
[   69.182590][   T24] usb 4-1: config 0 has no interface number 1
[   69.185039][   T24] usb 4-1: config 0 interface 103 altsetting 9 endpoint 0x7 has an invalid bInterval 0, changing to 7
[   69.192538][   T24] usb 4-1: config 0 interface 103 altsetting 9 endpoint 0xE has invalid maxpacket 1024, setting to 64
[   69.197061][   T24] usb 4-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x8, skipping
[   69.205327][   T24] usb 4-1: config 0 interface 103 altsetting 9 has a duplicate endpoint with address 0x4, skipping
[   69.209627][   T24] usb 4-1: config 0 interface 103 has no altsetting 0
[   69.215116][   T24] usb 4-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=cd.b4
[   69.220099][   T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.223143][   T24] usb 4-1: Product: syz
[   69.230922][   T24] usb 4-1: Manufacturer: syz
[   69.232736][   T24] usb 4-1: SerialNumber: syz
[   69.243013][   T24] usb 4-1: config 0 descriptor??
[   69.399107][ T6221] input: syz1 as /devices/virtual/input/input5
[   69.477372][   T24] videodev: could not get a free minor
[   69.479774][   T24] dsbr100 4-1:0.0: couldn't register video device
[   69.480181][ T6223] loop0: detected capacity change from 0 to 512
[   69.482502][   T24] dsbr100 4-1:0.0: probe with driver dsbr100 failed with error -23
[   69.491771][ T6223] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[   69.506340][   T24] usb 4-1: USB disconnect, device number 2
[   69.512104][ T6223] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.99: invalid indirect mapped block 4294967295 (level 1)
[   69.531519][ T6223] EXT4-fs error (device loop0): ext4_free_branches:1023: inode #11: comm syz.0.99: invalid indirect mapped block 4294967295 (level 1)
[   69.537900][ T6223] EXT4-fs (loop0): 2 truncates cleaned up
[   69.541731][ T6223] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.558473][ T6223] EXT4-fs (loop0): shut down requested (2)
[   69.590259][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   69.691209][ T6232] loop0: detected capacity change from 0 to 4096
[   69.699170][ T5217] Bluetooth: hci2: command tx timeout
[   69.713889][ T6234] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   69.898944][ T3145] usb 3-1: new full-speed USB device number 6 using dummy_hcd
[   70.014377][ T5294] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   70.053420][ T3145] usb 3-1: config 0 has an invalid interface number: 133 but max is 0
[   70.056691][ T3145] usb 3-1: config 0 has no interface number 0
[   70.059646][ T3145] usb 3-1: config 0 interface 133 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[   70.066537][ T3145] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d
[   70.070248][ T3145] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.073609][ T3145] usb 3-1: Product: syz
[   70.076026][ T3145] usb 3-1: Manufacturer: syz
[   70.077890][ T3145] usb 3-1: SerialNumber: syz
[   70.083804][ T3145] usb 3-1: config 0 descriptor??
[   70.160783][ T5294] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   70.165025][ T5294] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 79
[   70.169059][ T5294] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   70.174043][ T5294] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de
[   70.177564][ T5294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   70.183581][ T5294] usb 1-1: config 0 descriptor??
[   70.188015][ T6236] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[   70.237017][ T6242] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   70.247039][ T6242] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'.
[   70.250947][ T6242] veth1_to_bridge: entered promiscuous mode
[   70.253313][ T6242] veth1_to_bridge: entered allmulticast mode
[   70.302229][ T3145] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected
[   70.306413][ T3145] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81
[   70.326420][ T3145] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1
[   70.329943][ T3145] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2
[   70.336988][ T3145] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[   70.349107][ T3145] usb 3-1: USB disconnect, device number 6
[   70.354825][ T3145] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[   70.361951][ T3145] keyspan 3-1:0.133: device disconnected
[   70.407560][ T5294] ath6kl: Failed to submit usb control message: -71
[   70.415143][ T5294] ath6kl: unable to send the bmi data to the device: -71
[   70.417974][ T5294] ath6kl: Unable to send get target info: -71
[   70.433837][ T5294] ath6kl: Failed to init ath6kl core: -71
[   70.437108][ T5294] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[   70.468974][ T5294] usb 1-1: USB disconnect, device number 3
[   70.915383][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   70.918144][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   71.024708][ T6266] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96
[   71.029865][ T6266] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.117'.
[   71.035645][ T6264] loop2: detected capacity change from 0 to 4096
[   71.045960][ T6264] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[   71.083685][ T6269] loop0: detected capacity change from 0 to 512
[   71.084149][ T6264] ntfs3(loop2): ino=b, mi_enum_attr
[   71.088525][ T6269] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem
[   71.092082][ T6264] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   71.098047][ T6269] EXT4-fs (loop0): invalid journal inode
[   71.104938][ T6269] EXT4-fs (loop0): can't get journal size
[   71.106304][ T6264] ntfs3(loop2): Failed to load $Extend (-22).
[   71.110656][ T6264] ntfs3(loop2): Failed to initialize $Extend.
[   71.120413][ T6269] EXT4-fs (loop0): 1 truncate cleaned up
[   71.127020][ T6269] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   71.170123][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   71.363369][ T6278] loop0: detected capacity change from 0 to 32768
[   71.372502][ T6278] XFS (loop0): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   71.398025][ T6278] XFS (loop0): Ending clean mount
[   71.411008][ T6278] XFS (loop0): User initiated shutdown received.
[   71.413254][ T6278] XFS (loop0): Log I/O Error (0x6) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:476).  Shutting down filesystem.
[   71.417555][ T6278] XFS (loop0): Please unmount the filesystem and rectify the problem(s)
[   71.440159][ T5833] XFS (loop0): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[   71.511897][ T6291] netlink: 20 bytes leftover after parsing attributes in process `syz.3.125'.
[   71.595449][ T6295] netlink: 4 bytes leftover after parsing attributes in process `syz.0.124'.
[   71.808935][  T975] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   71.810573][ T6297] loop0: detected capacity change from 0 to 32768
[   71.819173][ T6297] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.127 (6297)
[   71.842705][ T6297] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   71.847011][ T6297] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   71.851427][ T6297] BTRFS info (device loop0): using free-space-tree
[   71.924895][ T5833] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   71.959164][  T975] usb 4-1: Using ep0 maxpacket: 8
[   71.972060][  T975] usb 4-1: config 252 has an invalid interface number: 104 but max is 0
[   71.975485][  T975] usb 4-1: config 252 has no interface number 0
[   71.977568][  T975] usb 4-1: config 252 interface 104 has no altsetting 0
[   71.985640][  T975] usb 4-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice= b.c7
[   71.994905][  T975] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.997427][  T975] usb 4-1: Product: syz
[   71.999047][  T975] usb 4-1: Manufacturer: syz
[   72.000632][  T975] usb 4-1: SerialNumber: syz
[   72.012817][  T975] gspca_main: spca501-2.14.0 probing 0497:c001
[   72.140436][ T6322] loop2: detected capacity change from 0 to 1024
[   72.169826][ T6322] hfsplus: catalog searching failed
[   72.201877][ T3588] hfsplus: b-tree write err: -5, ino 8
[   72.216855][  T975] gspca_spca501: reg write: error -71
[   72.228926][  T975] spca501 4-1:252.104: Reg write failed for 0x02,0x07,0x05
[   72.231370][  T975] spca501 4-1:252.104: probe with driver spca501 failed with error -22
[   72.259227][  T975] usb 4-1: USB disconnect, device number 3
[   72.304892][ T6327] loop2: detected capacity change from 0 to 4096
[   72.309906][ T6327] ntfs3(loop2): Different NTFS sector size (1024) and media sector size (512).
[   72.326050][ T6327] ntfs3(loop2): ino=1a, mi_enum_attr
[   72.328560][ T6327] ntfs3(loop2): Mark volume as dirty due to NTFS errors
[   72.352954][ T6327] ntfs3(loop2): ino=1e, "file1" ntfs3_write_inode failed, -22.
[   72.353786][   T33] audit: type=1800 audit(1754387169.113:2): pid=6327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.132" name="file1" dev="loop2" ino=30 res=0 errno=0
[   72.392741][ T3588] ntfs3(loop2): ino=1e, ntfs3_write_inode failed, -22.
[   72.454447][ T6334] loop2: detected capacity change from 0 to 512
[   72.458347][ T6334] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode
[   72.464757][ T6334] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ee018, mo2=0002]
[   72.473670][ T6334] System zones: 1-12
[   72.475647][ T6334] EXT4-fs (loop2): orphan cleanup on readonly fs
[   72.480530][ T6334] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck.
[   72.487058][ T6334] EXT4-fs (loop2): 1 truncate cleaned up
[   72.493336][ T6334] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[   72.524779][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.573559][ T6339] loop2: detected capacity change from 0 to 2048
[   72.594763][ T6339] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   72.627872][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   72.720641][ T6345] sctp: [Deprecated]: syz.0.139 (pid 6345) Use of struct sctp_assoc_value in delayed_ack socket option.
[   72.720641][ T6345] Use struct sctp_sack_info instead
[   72.773486][ T6352] loop3: detected capacity change from 0 to 64
[   73.061630][ T6358] loop3: detected capacity change from 0 to 32768
[   73.092068][ T6358] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   73.102824][ T6358] XFS (loop3): Ending clean mount
[   73.107190][ T6358] XFS (loop3): Quotacheck needed: Please wait.
[   73.125477][ T6358] XFS (loop3): Quotacheck: Done.
[   73.144658][ T5980] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[   73.239069][ T5294] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   73.309059][ T5882] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[   73.387662][ T6378] ieee802154 phy0 wpan0: encryption failed: -22
[   73.390658][ T5294] usb 3-1: Using ep0 maxpacket: 16
[   73.400483][ T5294] usb 3-1: unable to get BOS descriptor or descriptor too short
[   73.404785][ T5294] usb 3-1: config 3 has an invalid interface number: 200 but max is 0
[   73.407831][ T5294] usb 3-1: config 3 has no interface number 0
[   73.410090][ T5294] usb 3-1: config 3 interface 200 altsetting 128 bulk endpoint 0xF has invalid maxpacket 32
[   73.419481][ T5294] usb 3-1: config 3 interface 200 has no altsetting 0
[   73.425362][ T5294] usb 3-1: New USB device found, idVendor=294b, idProduct=7b59, bcdDevice=52.61
[   73.432828][ T5294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.435544][ T5294] usb 3-1: Product: syz
[   73.436978][ T5294] usb 3-1: Manufacturer: syz
[   73.438577][ T5294] usb 3-1: SerialNumber: syz
[   73.454482][ T6363] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[   73.470270][ T5882] usb 1-1: Using ep0 maxpacket: 8
[   73.477071][ T5882] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   73.483907][ T5882] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 16
[   73.499581][ T5882] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   73.502578][ T5882] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.509793][ T5882] usb 1-1: Product: syz
[   73.512741][ T5882] usb 1-1: Manufacturer: syz
[   73.514634][ T5882] usb 1-1: SerialNumber: syz
[   73.644948][ T6391] netlink: 4 bytes leftover after parsing attributes in process `syz.3.155'.
[   73.672913][ T5294] usb 3-1: USB disconnect, device number 7
[   73.741334][ T5882] cdc_ncm 1-1:1.0: bind() failure
[   73.750157][ T5882] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found
[   73.753209][ T5882] cdc_ncm 1-1:1.1: bind() failure
[   73.760543][ T5882] usb 1-1: USB disconnect, device number 4
[   73.811476][ T6397] loop3: detected capacity change from 0 to 2048
[   73.818269][ T6397] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   74.260069][ T6400] netlink: 4 bytes leftover after parsing attributes in process `syz.2.159'.
[   74.481933][ T6408] capability: warning: `syz.0.163' uses deprecated v2 capabilities in a way that may be insecure
[   74.698779][ T6416] netlink: 'syz.0.167': attribute type 1 has an invalid length.
[   74.827611][ T6419] process 'syz.0.169' launched './file0' with NULL argv: empty string added
[   74.930949][ T6423] QAT: failed to copy from user cfg_data.
[   75.062564][ T6429] Bluetooth: MGMT ver 1.23
[   75.090293][ T6430] overlay: filesystem on ./bus not supported
[   75.154882][ T6436] loop2: detected capacity change from 0 to 512
[   75.157489][ T6436] EXT4-fs: Ignoring removed orlov option
[   75.160445][ T6436] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem
[   75.166683][ T6436] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c119, mo2=0002]
[   75.180472][ T6436] EXT4-fs error (device loop2): ext4_iget_extra_inode:5030: inode #15: comm syz.2.177: corrupted in-inode xattr: e_value size too large
[   75.193541][ T6436] EXT4-fs error (device loop2): ext4_orphan_get:1398: comm syz.2.177: couldn't read orphan inode 15 (err -117)
[   75.201534][ T6436] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   75.323873][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   75.725117][ T6452] loop2: detected capacity change from 0 to 32768
[   75.775462][   T33] audit: type=1800 audit(1754387172.533:3): pid=6452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.184" name="file1" dev="loop2" ino=4 res=0 errno=0
[   76.166931][ T6452] ERROR: (device loop2): dbAdjCtl: the maximum free buddy is not the old root
[   76.166931][ T6452] 
[   76.173421][ T6452] ERROR: (device loop2): remounting filesystem as read-only
[   76.401578][ T5831] ------------[ cut here ]------------
[   76.404020][ T5831] kernel BUG at fs/jfs/inode.c:169!
[   76.415715][ T5831] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI
[   76.418272][ T5831] CPU: 0 UID: 0 PID: 5831 Comm: syz-executor Not tainted 6.16.0-syzkaller-08685-g260f6f4fda93-dirty #0 PREEMPT(full) 
[   76.423094][ T5831] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   76.427077][ T5831] RIP: 0010:jfs_evict_inode+0x438/0x440
[   76.429249][ T5831] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 17 fe ff ff 4c 89 f7 e8 d3 c9 e9 fe e9 0a fe ff ff e8 79 bc 86 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[   76.436848][ T5831] RSP: 0018:ffffc9000371fae0 EFLAGS: 00010293
[   76.439302][ T5831] RAX: ffffffff8338d097 RBX: ffff8881151e3b80 RCX: ffff88801ee1d640
[   76.442477][ T5831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881151e3b80
[   76.445557][ T5831] RBP: 0000000000000001 R08: ffffffff8fa07237 R09: 1ffffffff1f40e46
[   76.448652][ T5831] R10: dffffc0000000000 R11: ffffffff8338ae30 R12: dffffc0000000000
[   76.451816][ T5831] R13: dffffc0000000000 R14: ffff8881151e3808 R15: ffffffff8338cc60
[   76.454901][ T5831] FS:  000055557aa92500(0000) GS:ffff8880b8679000(0000) knlGS:0000000000000000
[   76.458404][ T5831] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   76.461002][ T5831] CR2: 00005631757c9000 CR3: 000000010f83a000 CR4: 00000000000006f0
[   76.464092][ T5831] Call Trace:
[   76.465470][ T5831]  <TASK>
[   76.466648][ T5831]  ? evict+0x4f8/0x9c0
[   76.468216][ T5831]  ? __pfx_jfs_evict_inode+0x10/0x10
[   76.470214][ T5831]  evict+0x504/0x9c0
[   76.471781][ T5831]  ? __pfx_evict+0x10/0x10
[   76.473578][ T5831]  ? do_raw_spin_unlock+0x4d/0x240
[   76.475594][ T5831]  evict_inodes+0x64c/0x6d0
[   76.477388][ T5831]  ? __pfx_evict_inodes+0x10/0x10
[   76.479409][ T5831]  generic_shutdown_super+0x9a/0x2c0
[   76.481480][ T5831]  kill_block_super+0x44/0x90
[   76.483291][ T5831]  deactivate_locked_super+0xbc/0x130
[   76.485449][ T5831]  cleanup_mnt+0x425/0x4c0
[   76.487266][ T5831]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.489335][ T5831]  task_work_run+0x1d4/0x260
[   76.491170][ T5831]  ? __pfx_task_work_run+0x10/0x10
[   76.493157][ T5831]  ? __x64_sys_umount+0x122/0x160
[   76.495185][ T5831]  ? exit_to_user_mode_loop+0x40/0x110
[   76.497388][ T5831]  exit_to_user_mode_loop+0xec/0x110
[   76.499522][ T5831]  do_syscall_64+0x2bd/0x3b0
[   76.501386][ T5831]  ? lockdep_hardirqs_on+0x9c/0x150
[   76.503448][ T5831]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.505882][ T5831]  ? exc_page_fault+0x9f/0xf0
[   76.507740][ T5831]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   76.510095][ T5831] RIP: 0033:0x7f4a1878fe97
[   76.511895][ T5831] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   76.519449][ T5831] RSP: 002b:00007ffe9169dad8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   76.522661][ T5831] RAX: 0000000000000000 RBX: 00007f4a18811bdd RCX: 00007f4a1878fe97
[   76.525813][ T5831] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9169db90
[   76.528947][ T5831] RBP: 00007ffe9169db90 R08: 0000000000000000 R09: 0000000000000000
[   76.532221][ T5831] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe9169ec20
[   76.535451][ T5831] R13: 00007f4a18811bdd R14: 000000000001294c R15: 00007ffe9169ec60
[   76.538586][ T5831]  </TASK>
[   76.539867][ T5831] Modules linked in:
[   76.541708][    C0] vkms_vblank_simulate: vblank timer overrun
[   76.545111][ T5831] ---[ end trace 0000000000000000 ]---
[   76.558093][ T5831] RIP: 0010:jfs_evict_inode+0x438/0x440
[   76.560919][ T5831] Code: fe e9 e0 fd ff ff 44 89 f1 80 e1 07 80 c1 03 38 c1 0f 8c 17 fe ff ff 4c 89 f7 e8 d3 c9 e9 fe e9 0a fe ff ff e8 79 bc 86 fe 90 <0f> 0b 66 0f 1f 44 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[   76.569104][ T5831] RSP: 0018:ffffc9000371fae0 EFLAGS: 00010293
[   76.571696][ T5831] RAX: ffffffff8338d097 RBX: ffff8881151e3b80 RCX: ffff88801ee1d640
[   76.575218][ T5831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffff8881151e3b80
[   76.578661][ T5831] RBP: 0000000000000001 R08: ffffffff8fa07237 R09: 1ffffffff1f40e46
[   76.583416][ T5831] R10: dffffc0000000000 R11: ffffffff8338ae30 R12: dffffc0000000000
[   76.586831][ T5831] R13: dffffc0000000000 R14: ffff8881151e3808 R15: ffffffff8338cc60
[   76.591117][ T5831] FS:  000055557aa92500(0000) GS:ffff8880b8679000(0000) knlGS:0000000000000000
[   76.595404][ T5831] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   76.598405][ T5831] CR2: 00005631757c9000 CR3: 000000010f83a000 CR4: 00000000000006f0
[   76.601967][ T5831] Kernel panic - not syncing: Fatal exception
[   76.605183][ T5831] Kernel Offset: disabled
[   76.606941][ T5831] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:46:13  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81ad7b3d RBX=ffff88804b023900 RCX=ffff88801eb51cc0 RDX=0000000000010000
RSI=ffffffff8be2fce0 RDI=ffffffff8be2fca0 RBP=0000000000000000 RSP=ffffc90000007e90
R8 =ffffffff8fa07237 R9 =1ffffffff1f40e46 R10=dffffc0000000000 R11=ffffffff81ad7b20
R12=dffffc0000000000 R13=0000000000000000 R14=1ffff11009604720 R15=ffff88804b023900
RIP=ffffffff8b714211 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f6d564be380 ffffffff 00c00000
GS =0000 ffff8880b8679000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00005631757c9000 CR3=0000000029030000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=ffff000000000000 0000000000ff0000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000005838 RBX=ffffffff99c55118 RCX=61c8864680b583eb RDX=0000000000000000
RSI=0000000000000000 RDI=ffffffff99c55120 RBP=ffffc900001b77e0 RSP=ffffc900001b7798
R8 =ffffc900001b786f R9 =0000000000000000 R10=ffffc900001b7848 R11=fffff52000036f0e
R12=ffff8881106a2000 R13=ffff8881106a2f00 R14=0000000000000000 R15=ffffffff81a7d10b
RIP=ffffffff81001530 RFL=00000092 [--S-A--] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c79000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000020000002a000 CR3=000000011358e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000000ff XMM01=2c2c2c2c2c2c2c2c 2c2c2c2c2c2c2c2c
XMM02=6f2064696c61766e 69203a7325002d2d XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
