last executing test programs:

24m43.717981523s ago: executing program 32 (id=474):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x3, 0x3, &(0x7f0000000480)=@framed, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@map=0x1, r0, 0x2e, 0x0, 0xffffffffffffffff, @void, @value=0x0}, 0x20)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)=ANY=[], 0x20)

24m7.47144971s ago: executing program 33 (id=857):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="f80000000101015bfcffff00000000000a00000944001980080002000200000008000200b00000000800010080000000080002002008000008000200080a0000080002000200000008000100020000000800020004080000080008400000a71d9800018014000180080001000000000008000200ac14141b060003400000000006000340000200002c0001801400030000000000000000000000000000000000140004"], 0xf8}}, 0x8004)

23m58.250976782s ago: executing program 34 (id=944):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(0x3)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)

21m50.43046751s ago: executing program 35 (id=2355):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x103a, 0x1000, 0x103a, 0xfffffffc, 0xff, 0x80000000}, 0x1c)

21m10.692647962s ago: executing program 36 (id=2784):
socket(0x10, 0x803, 0x0)
socket$inet_sctp(0x2, 0x1, 0x84)
socket(0x400000000010, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48)
socket$kcm(0x10, 0x3, 0x10)
socket$kcm(0x21, 0x2, 0x2)
socket$nl_netfilter(0x10, 0x3, 0xc)
bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="05000000060000000800000005"], 0x48)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0)

20m2.843396149s ago: executing program 37 (id=3602):
r0 = socket$nl_generic(0x11, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', <r1=>0x0})
sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@ll={0x11, 0x16, r1, 0x1, 0x3, 0x6, @local}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000140)="4ba72c4cfd81685544f46c3f080042dea1ffb0cf623aa963b8c8f850f23ca9c2c66f", 0x22}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)

19m22.392062069s ago: executing program 38 (id=4103):
r0 = syz_open_dev$media(&(0x7f0000000340), 0x4, 0x0)
ioctl$MEDIA_IOC_ENUM_LINKS(r0, 0xc0287c02, &(0x7f0000000500)={0x80000000, &(0x7f0000000380), &(0x7f00000003c0)})

18m47.453153423s ago: executing program 39 (id=4546):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="ceaa000000000000711019000000000095"], &(0x7f0000000480)='syzkaller\x00'}, 0x94)

18m7.805857577s ago: executing program 40 (id=4939):
timer_create(0x2, &(0x7f000049efa0)={0x0, 0x21, 0x1, @thr={0x0, 0x0}}, &(0x7f0000044000))
timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x9}}, 0x0)

17m27.440487237s ago: executing program 41 (id=5272):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x1, 0x70bd21, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40938, 0x3}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_team\x00'}, @IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x1}]}]}, @IFLA_MTU={0x8, 0x4, 0x200}]}, 0x4c}, 0x1, 0x0, 0x0, 0x68010}, 0x0)

16m7.04579266s ago: executing program 42 (id=5599):
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x8, {{0xa, 0x4e21, 0xa3f, @mcast1, 0xbfb}}, {{0xa, 0x4e21, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}, 0x40}}}, 0x108)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x3, 0x0, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19c00}, 0x94)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000180)=""/214, &(0x7f0000000080)=0xd6)

16m6.523072624s ago: executing program 43 (id=5601):
r0 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x70, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @empty}, 0x10)
setsockopt$sock_int(r0, 0x1, 0xc, &(0x7f0000000400)=0x5, 0x4)
sendto$inet(r0, &(0x7f0000000700)="09268a60fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88ff4f90b1a7511bf746bec66ba1fe92e8615fc3f7af9c3310b39cc2dc3616dcdfaebc65ca325fd99357ed9d11b266a7c88", 0x65, 0x40040, 0x0, 0x0)

16m6.135559954s ago: executing program 44 (id=5600):
r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0xc4042, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000)
sendfile(r1, r0, 0x0, 0xfffa83)

15m51.5744952s ago: executing program 5 (id=5627):
syz_read_part_table(0x5be, &(0x7f00000005c0)="$eJzs2z9o02kYB/AnahAUzsXJ4bAOTi6KoxmsJFFRCNEu4qCgiJgpghAhINihzdDSDKVjl1LI0j9T0wwdjpYWOpfSoUehQ6ejXQpdmuOu7+3t9Q8Inw/8ePK+7zd58gy/8Q1+aZfir263m4mI7tWTf7uvlS88u116XH4dkYm3EdHzx28z/5xkUuK/X72T1ptpPTF+rTO49zTb2ni1f/fdYuNSOv+RnuuT7b5TD8e5m8ot3fjZXy0O1XKf14v17YG11ZfTu/ly+0WjOfM8++RDyi2neiXVr1GL7/El3kclKvExqmfUf6y1df/wVrE19+nRQaEzvPAg5UqnnPO4/b/1jLxp1nvvzd4cfVibXynvXD7KVf7H2wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMWbyi3d+NlfLQ7Vcp/Xi/XtgbXVl9O7+XL7RaM58zz75EPKLad6JdWvUYvv8SXeRyUq8TGqZ9R/rLV1//BWsTX36dFBoTO88CDlSqec87j9v/WMvGnWe+/N3hx9WJtfKe9cPspVrp7THwAAAAAAAAAAAAAAAAAAAICIyBee3S49Lr+OyMTbiGj/3vvvVf9uuu+eSbk76cNm2p8Yv9YZ3HuabW282r/7brHxZ9r/kZ7rk+2+i5+Gk/o7AAD//5Yblcc=")

15m51.407720451s ago: executing program 5 (id=5631):
syz_mount_image$squashfs(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYRES64=0x0], 0x1, 0x22b, &(0x7f0000000000)="$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")

15m51.335454769s ago: executing program 5 (id=5633):
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1ee, &(0x7f0000000440)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10)

15m51.254721439s ago: executing program 5 (id=5635):
syz_mount_image$fuse(0x0, &(0x7f0000002080)='./file0\x00', 0x22000b0, 0x0, 0x0, 0x0, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0)
pivot_root(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00')

15m51.254414261s ago: executing program 5 (id=5636):
r0 = syz_mount_image$nilfs2(&(0x7f00000008c0), &(0x7f0000000e00)='./file0\x00', 0x10000, &(0x7f0000000940)=ANY=[], 0x0, 0xdab, &(0x7f0000000e80)="$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")
ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000000)="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")

15m50.398445783s ago: executing program 5 (id=5637):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0)

15m50.272140217s ago: executing program 45 (id=5637):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002280)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc287, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x8, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x20, 0x0, 0x4}}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x5, "17321748"}]}}, 0x0}, 0x0)

15m34.126294488s ago: executing program 6 (id=5720):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000540), 0x1)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000140)={{0x3, 0xa}, 'port1\x00', 0x4, 0x100020, 0x1, 0x400, 0x6, 0x16, 0x1, 0x0, 0x7, 0xf2})

15m34.104615109s ago: executing program 6 (id=5721):
syz_mount_image$iso9660(&(0x7f0000000940), &(0x7f0000000980)='./file0\x00', 0x4c8, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x937, &(0x7f0000001300)="$eJzs3U9vHGcZAPBn1l7iulVISVo77qGjJEYmAmd3oyREueB4184W24tsR2rFxUBcFMWiiIIUKg5BQpyI4IA4wC1HThG99ITyKThwyQfgEnHyzdXMrBOn2T+O5Xhd5/eTZmdn5pn3eWbf2XcUb3Yn+Drb2trKpz0u3/znQRbL4XO9/vjBw/vZ9Pt78Y0YikvJFxEjEZFGDEfEeER5tr7cWuzT0J2ItYh4FJFExLEo5ruyFsmf461ny48i+UeWl1dvi9faoM8/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA4jJLZeqVSTWKhuXTzw7S7/BbgPbZvt9cqZY+lVt+8EUk2xcjI9q2+x08+2/xO9nAmxsr50lh+Q/IYic/efPfEtZPDpe39exR0ID797Wd3frKxsf6rQRcyIPONpeZKq7k4M99Imyut9Orly5ULN+ZW0rnmQmPlo5XVxmI6u9yYWW0tp1Oz30mrV69eTBvTH7VuLs3XZxYa2yuvfK9WqVxOP5j+UWNmeaW1dOGD6ZXZG82FhebSfB6Tbc5irmQn4g+bq+lqY2YxTT++vbF+sV+RWVB1N0G1fkG1Sq1WrdZq1cuXrl66UqkMv7Ci8hXxQsTgT1oGa/8Hcdijrfb1HwAAADi6khgr/hof5fzv8EnMNRcalUGXBQAAAOyj/JP/sWxWjog32mv9+x8AAACOkjP55/+9vmPXNyL5bpwuIk7fKua32hH/OpZHjM41FxrTs62Fa9X49tNv+3VurZz/94PzMVFETYwW89F2VPubgyNZVHX6WjXOx3tFxHtTZ7PZ2akOkbUisv3Nm7RH5MUsEgCOujN9rse7uf6fj8kiYnIiu5jG8ESHK2vFlRUADounv2DzCp8M+hgBgOe5SgMAAAAAAAAAAAAAAAAAAAAAAAAAAMD+O4jf//fEE0++bk8GPTIBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALyekoihTutLEcciohIRFw6+qlfn3qALGLBkMzbjbhwfdB0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEdN+/f/S1HM3yxWxXApYjIi1iLix4OucU863tUgYvOg6zhkdvz+f9bnsZXEcNHtkZRn68utxaz783s/lB4/eHg/m/aSJ2sgy/BcN7QzdN/r7Xyv0fr6p3d+/ckv0/r1vMjrq3ML9cX55R88C3w3+TwijWJq2761w/3fTf77Lx2O/PPsSHeXdy7PW38x71invbdfp855e7m9sV7LMq02Plz9zS9u392x6VsxEXF2KmLq+Uw/z6YumSai3Ctb8iT5Y3I8/hZref9nr0aylcRQ0VlReuPj2xvr0z/7ZONWl5pOxHhE3IoY2X1N4/l40lF+1pXKWdZKHpQ9nOrTXk87Wqx2OYa343REjL7UMZzufgy5Pq97u6KLXSo6Ge+/dE+/3ydjR8mT5L/JjfhP/GHH/T9K2Vt0Mnbz7sxi8sgdZ0rXyFIRmR95rWebXd+V7E2p18Y/xU/j+0/7v7Rj/G/31cGMRzsyHtD7Ih/kTn3litQefbrt067zVBHVpc534lzE8MRLjSjn+owoL+5f3u1xdpc8Sf6eTMX/4577/wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIdfEjHUaX0pYjIiTkTEN7PlNGJrP/KVRpP43/H9aGlv7g0u9aGQbMZm3I0B9gAAAAAAAAAA++l6/fGDh/ezKckWh+Jc8kXESPFJ/3BEnEj+Wp6tL7cW+zRUjliLiEd7qCHbL956tvwoWxrfQ0MAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABxZXwYAAP//AoOyMA==")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000240)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000002180)='./file0\x00', 0x0, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000))
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000001240))

15m33.992694462s ago: executing program 6 (id=5722):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, 0x40818, 0x10043}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x14, 0x5, 0x0, 0x1, [@IFLA_BRPORT_PRIORITY={0x6, 0x2, 0x68}, @IFLA_BRPORT_COST={0x8, 0x3, 0x5}]}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x38f54add4fcfee77}, 0x4000000)

15m33.877195421s ago: executing program 6 (id=5723):
syz_mount_image$jfs(&(0x7f0000000200), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="646973636172642c71756f74612c6572726f72733d72656d6f756e742d726f2c696f636861727365743d6d61637475726b6973682c6572726f72733d72656d6f756e742d726f2c71756f74612c696f636861727365743d6d616363726f617469616e006e6f646973636172642c75737271756f74b23194d8726f72733d72656d6f756e742d726f2c726573697a653d3078666666666666666666666666666666652c6572726f726e75652c726573697a652c646973636172642c61707072616973652c7375626a5f757365723d21952c7375626a5f726f6c653d726573697a652c0000000000000000d398e30e7cdc23a1553be48fabf3f19f3ca197da8932a8e170520258e19420036141172352466ff223e87948b103"], 0x1, 0x62cd, &(0x7f00000042c0)="$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")
ioctl$BTRFS_IOC_SNAP_CREATE_V2(0xffffffffffffffff, 0x50009417, &(0x7f0000000480)={{}, 0x0, 0x2, @unused=[0x3, 0x3, 0x577, 0x2], @name="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"})
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001480)={{0x7f, 0x45, 0x4c, 0x46, 0xb4, 0x0, 0xa, 0x9, 0x7f, 0xd798cc7d6ed4fd84, 0x6, 0x5, 0x209, 0x40, 0xb7, 0x400, 0x1000, 0x38, 0x1, 0xed0, 0x8, 0x2}, [{0x1, 0x6, 0x9, 0x3, 0x4, 0x7f, 0xfffffffffffffeec, 0x6}]}, 0x78)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

15m33.537772226s ago: executing program 6 (id=5724):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
write$FUSE_INIT(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_clone(0x0, 0x0, 0x9, 0x0, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10)
bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0)
r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0)
write$UHID_CREATE2(r2, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r2, 0x1000)
r3 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042)
read(r3, 0x0, 0x0)
close_range(r0, 0xffffffffffffffff, 0x0)

15m32.968552589s ago: executing program 6 (id=5725):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet_SIOCADDRT(r0, 0x8918, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x78, 0x0, 0x0, 0x0, 0x3})

15m32.875353238s ago: executing program 46 (id=5725):
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0x18, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
ioctl$sock_inet_SIOCADDRT(r0, 0x8918, &(0x7f0000000380)={0x0, {0x2, 0x0, @empty}, {0x2, 0x0, @remote}, {0x2, 0x0, @empty}, 0x78, 0x0, 0x0, 0x0, 0x3})

12m0.892392548s ago: executing program 0 (id=7900):
openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}}, 0x20000800)
bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10)
syz_emit_ethernet(0x3e, &(0x7f0000000280)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x8, 0x30, 0x1, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x1c, 0x0, @opaque="a1967882a468f13c6abffe248d2ab42605d7706e"}}}}}, 0x0)

12m0.828605755s ago: executing program 0 (id=7901):
r0 = socket(0x10, 0x3, 0x0)
write(r0, &(0x7f0000000000)="240000001a005f0400f9f4070009040180000000000000200000000008001e8040000000", 0x24)

12m0.828471757s ago: executing program 0 (id=7902):
r0 = socket$kcm(0x10, 0x400000002, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x2c, 0x0, 0x1, 0x3, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8, 0x2, @local}}}]}]}, 0x2c}}, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="c00e00007200911fdabcf8b30771a54a07"], 0xfe33)

12m0.828389392s ago: executing program 0 (id=7903):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101097, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(0x0, &(0x7f00000004c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)

12m0.754653607s ago: executing program 0 (id=7904):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10)
mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0)
r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x2)
r2 = dup2(r1, r1)
ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x1, 0x40000000, 0x10})
syz_open_dev$evdev(0x0, 0x2, 0x0)
ioctl$BLKTRACESTART(r1, 0x1274, 0x0)

12m0.485958196s ago: executing program 0 (id=7905):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x16, 0x0, 0x3})

12m0.403094229s ago: executing program 47 (id=7905):
r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={0x0, 0x0, 0x16, 0x0, 0x3})

7m36.660578679s ago: executing program 3 (id=11262):
r0 = socket(0x40000000015, 0x5, 0x0)
setsockopt$sock_int(r0, 0x1, 0x23, &(0x7f0000000000)=0x2, 0x4)
bind$inet(r0, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10)
recvmmsg(r0, &(0x7f00000040c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000015c0)=""/127, 0x7f}}], 0x1, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2, 0x0, @loopback}, 0x10)

7m36.582378507s ago: executing program 3 (id=11267):
syz_emit_ethernet(0x86, &(0x7f0000000040)={@broadcast, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @private, @loopback, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x7, 0x0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@rand_addr=0x64010101}, {@private}, {@multicast1}, {@remote}, {@multicast2}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x80}, {@private}]}]}}}}}}}, 0x0)

7m36.523174392s ago: executing program 3 (id=11269):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x2940, 0x0)
ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000040)={0x18, 0xd, 0x8, 0x6})

7m36.522750012s ago: executing program 3 (id=11271):
capset(0x0, &(0x7f0000000100)={0xffff8001, 0x6, 0x2, 0x2087, 0xffffffff, 0xef})
unshare(0x28000600)
syz_mount_image$ext4(&(0x7f0000000bc0)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x10000, &(0x7f00000002c0), 0x2, 0xbd1, &(0x7f0000001340)="$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")
syz_mount_image$erofs(&(0x7f0000000340), &(0x7f0000004080)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x4c000, &(0x7f00000004c0)=ANY=[], 0x2, 0x222, &(0x7f0000000800)="$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")
mount(0x0, &(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000000)='binfmt_misc\x00', 0xc00, 0x0)
sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x4000000)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000200)='./file0/file0\x00')
pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='./file0\x00')

7m36.383457361s ago: executing program 3 (id=11274):
r0 = syz_open_dev$sndctrl(&(0x7f00000000c0), 0x20000000, 0x101000)
ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0xc4c85513, &(0x7f0000000b80)={0x5, 0x1, 0x2a, 0x5, 'syz1\x00', 0x5})

7m36.073794032s ago: executing program 3 (id=11277):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff82}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000ffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

7m35.740712246s ago: executing program 48 (id=11277):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffff82}, [@call={0x85, 0x0, 0x0, 0x36}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000ffff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x3100, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)

5m33.647424427s ago: executing program 1 (id=12877):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58)
r1 = accept4(r0, 0x0, 0x0, 0x800)
recvmsg$can_j1939(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000100)=""/86, 0x56}, {0x0}], 0x2}, 0x10043)

5m33.647317426s ago: executing program 1 (id=12878):
r0 = socket$inet6(0xa, 0x2, 0x3a)
munmap(&(0x7f0000001000/0x3000)=nil, 0x3000)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback, 0x9}, 0x1c)
sendto$inet6(r0, &(0x7f0000000080)="800037bbfa9ba1ce", 0xffd8, 0x0, 0x0, 0x0)

5m33.561813635s ago: executing program 1 (id=12880):
r0 = timerfd_create(0x0, 0x0)
timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0)
read(r0, &(0x7f0000000240)=""/123, 0x7b)
clock_adjtime(0x0, &(0x7f0000000000)={0x8003ff, 0x0, 0x23e654d4, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfffffffffffffffd, 0x9, 0x10, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x1000, 0x8, 0x2, 0x3, 0x0, 0x3})

5m33.475055517s ago: executing program 1 (id=12883):
syz_mount_image$udf(&(0x7f0000000280), &(0x7f00000001c0)='./file0\x00', 0x10004d0, &(0x7f0000000340)=ANY=[@ANYBLOB="73686f72746164000000006d653d3030303030303030303030303030303030b030342c6e6f6164696e6963622c7569643d00", @ANYRES8, @ANYRESHEX], 0x2, 0xa1b, &(0x7f0000001f80)="$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")
r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
fcntl$setstatus(r0, 0x4, 0x6000)
io_setup(0x202, &(0x7f0000000200)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000080)=[&(0x7f0000000240)={0x25, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f00000002c0)="135bd94a01f90605ee1a7b", 0xb, 0x3018}])

5m33.331067263s ago: executing program 1 (id=12887):
r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0)
sendmsg$802154_raw(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000540)="5553fe", 0x3}, 0x1, 0x0, 0x0, 0x4040000}, 0x4)

5m32.961976811s ago: executing program 1 (id=12888):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000fc71f1c3fa7268001000010403000000fa", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c000280080014"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0)

5m32.907091105s ago: executing program 49 (id=12888):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000fc71f1c3fa7268001000010403000000fa", @ANYRES32=0x0, @ANYBLOB="900100008ba5072f1c00128009000100626f6e64000000000c000280080014"], 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x240080c1)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0)

2m50.880283895s ago: executing program 7 (id=15006):
r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x1)
ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000080)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xee01})

2m50.829879578s ago: executing program 7 (id=15007):
r0 = syz_open_dev$admmidi(&(0x7f0000000000), 0x2, 0x1a9882)
ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f0000000040)={0x0, 0x10001, 0x3c, 0x0, 0x9})

2m50.712922618s ago: executing program 7 (id=15009):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x1, 0x8, 0x8}, 0x48)
bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='sched_switch\x00'}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
clock_getres(0x9, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff99, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78)
bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040)={r4, r0}, 0xc)

2m49.626484418s ago: executing program 7 (id=15031):
syz_mount_image$ext4(&(0x7f0000000b80)='ext4\x00', &(0x7f0000000bc0)='./file0\x00', 0x200000, &(0x7f0000000040)={[{@grpquota}]}, 0x1, 0xbac, &(0x7f00000017c0)="$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")
r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000300), 0x1, 0x0)
mount$bind(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x21, 0x0)
write$binfmt_register(r0, &(0x7f0000000140)={0x3a, 'syz3', 0x3a, 'E', 0x3a, 0x2007, 0x3a, '\r', 0x3a, '\x84\xa3\xea\xd6O\x89|\xeb\x80\xf0\xe96\xf4`&\xd4E\xe7L\x82n;H\xd8\xdf\x9a, \\E\xd4\xab\x1ed', 0x3a, './file2', 0x3a, [0x46]}, 0x4b)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x0, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0)
syz_mount_image$msdos(&(0x7f0000000f40), &(0x7f0000000f00)='.\x00', 0x1258438, &(0x7f0000000f80)=ANY=[], 0xb, 0x0, &(0x7f0000000000))

2m49.440313717s ago: executing program 7 (id=15033):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x1, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, r2, 0x49810, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GROUP_FWD_MASK={0x6, 0x1f, 0x3}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040485}, 0x4000000)

2m49.194834135s ago: executing program 7 (id=15034):
r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0x0)

2m49.088939983s ago: executing program 50 (id=15034):
r0 = syz_open_dev$sndctrl(&(0x7f0000000280), 0x20000, 0x800)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, 0x0)

2m40.453619163s ago: executing program 2 (id=15170):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000180)=[{0x6, 0x0, 0x0, 0x7fc00101}]})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000028c0)={<r1=>0x0})
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10)
r3 = socket$key(0xf, 0x3, 0x2)
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000100)={r1, 0x0, r3})

2m39.482781407s ago: executing program 2 (id=15197):
syz_mount_image$exfat(&(0x7f0000000180), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x810000, &(0x7f0000000280)=ANY=[@ANYBLOB="6572726f72733d636f6e74696e75652c696f636861727365743d69736f383835392d312c646d61736b3d30303030303030303030303033373737373737373737372c696f636861727365743d6b6f69382d72752c696f636861727365743d63703433372c6e616d65636173653d312c6e616d65636173653d312c009a8d4d9016e3d8128333e260a1b926dd0c5f7619710e03ea1ae6521494f87e5737dc0c5bec3f76668140a15258818b6fbc51f9a13940e63c378688559c351287f0e09ef0b7330db20eef797e5004484649e7f5fb64b746683a75b9ed822f5ae34fac"], 0x1, 0x1501, &(0x7f0000002a80)="$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")
mount$afs(&(0x7f0000000100)=@cell={0x5c, 'syz1:', 'syz0', '', 0x3c}, &(0x7f0000000140)='./file0\x00', 0x0, 0x2000, 0x0)

2m39.417095595s ago: executing program 2 (id=15199):
mkdir(&(0x7f0000000040)='./file0\x00', 0xb)
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff})
faccessat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x7)

2m39.416674777s ago: executing program 2 (id=15201):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f00000000c0)={[{@noinit_itable}, {@dax_inode}, {@nolazytime}, {@abort}, {@dax_inode}, {@lazytime}, {@noload}, {}, {@noauto_da_alloc}]}, 0xfe, 0x558, &(0x7f0000000c00)="$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")
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x0, 0x0)
r1 = fanotify_init(0x200, 0x0)
fanotify_mark(r1, 0x1, 0x4800003e, r0, 0x0)
mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}], [], 0x2c})

2m39.290343441s ago: executing program 2 (id=15203):
socket$inet(0x2, 0x4000000000000001, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x2)
r1 = socket(0x40000000015, 0x5, 0x0)
getsockopt(r1, 0x200000000114, 0x2721, &(0x7f0000000580)=""/102393, &(0x7f0000000040)=0x18ff9)

2m38.954819286s ago: executing program 2 (id=15206):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x2f126000)
pread64(r0, &(0x7f0000000200)=""/62, 0x3e, 0x2)

2m38.649694935s ago: executing program 51 (id=15206):
r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x7fff, 0x2)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000002a82, 0x0)
r2 = dup(r1)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000006, 0x28011, r2, 0x2f126000)
pread64(r0, &(0x7f0000000200)=""/62, 0x3e, 0x2)

1.871148795s ago: executing program 8 (id=17505):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', <r2=>0x0})
sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)={0x2c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x2}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000)

1.871042627s ago: executing program 8 (id=17506):
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
lseek(r0, 0x1000001, 0x0)
getdents64(r0, 0x0, 0x0)

1.783701528s ago: executing program 8 (id=17509):
r0 = mq_open(&(0x7f0000000a00)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\x81W\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb\x00\x00\x00\x00\x00', 0x42, 0x1f0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x0, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x6, 0x0)
mq_timedsend(r0, 0x0, 0x0, 0x800, 0x0)

1.709779867s ago: executing program 8 (id=17512):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x0)
r2 = dup(r1)
socket$inet6_sctp(0xa, 0x1, 0x84)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
r4 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010, 0x1, 0x39d}, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000080)=<r6=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
io_uring_enter(r4, 0x47ba, 0x3e80, 0x0, 0x0, 0x0)

1.302115497s ago: executing program 9 (id=17524):
syz_mount_image$romfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="00f3000000be5500200800000000c19e57fc847c52a19b0b247df0690ca7d757194d0335d8e8a065e069e1294e9f28bcee7085d4988309e751e0eec20f77d6c68ae8"], 0x1, 0x14a, &(0x7f0000000080)="$eJzs2j9Lw0AYBvBXEJSOjk6FShQ0/7WuOoqbu0OouTR4MSURpP0C4iQonINfQvAT+Akko5suRfwSkWsPTaNCFk2E57f0gbe93r0HN716Ekc2S3WijcHVwXgpiaN2193uMZt5NLVHRG0Zsjy/MeiL5496lpPxzRfqtfI2/eysBWL/goXcd+reEgAAAAAAAAAAAAAAAAAAAAAAVKS1VGj1RXTOQu7bhWo6HB17nPtJSrRY0w7rpbXVDBcxwW9lf9yZVqzLvCNTKHYTWbdmf3+twmpf8Jdyf83TaGCmw5EeRl7gB/6J47hda9OythxzspZZXlG7U3uiLL+3CuNkxuOhK+uFebOnKvNm6v7nl0NxeVb+t8/7R2hCmKPfWfm1KQdE+Ceh+gvacJP3b0xEC27nQb5/Ri/mR6r4F+2s9/gA8JP3AAAA///ltzsl")
r0 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0)
getdents64(r0, &(0x7f00000004c0)=""/55, 0x37)

1.301797981s ago: executing program 9 (id=17526):
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0x1, 0x0, 0x0)

791.667806ms ago: executing program 8 (id=17532):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000100)={[{}, {}, {@nls={'nls', 0x3d, 'cp864'}}, {@uid}, {@nobarrier}, {@nobarrier}]}, 0x20, 0x6de, &(0x7f0000000840)="$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")
mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0)
mount$nfs(&(0x7f00000001c0)='\xb2\x83\x87J9I\xc3i\xe4\x81\xc5:\xccLD\x9d\xd8\xc7\x90v\x8b\x82\x90\xa4\xdd\x98\xb8\rQh#\xfacl\x01\x8cC\x1f|\xa5\xcb\x8f\xe5WJ\x00>\xf2\xd6\t\xf4IE\xcb\x15A\xb5\xbbG\xa0\xea\xc4\x03\xf2\xf5\xf4\xa1\x98', &(0x7f0000000240)='./file0\x00', 0x0, 0x201008, 0x0)

791.262295ms ago: executing program 8 (id=17533):
socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, 0x0, 0x0)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r3 = fsopen(&(0x7f0000000000)='pipefs\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0xffffffff85001014, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000042c0), 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x8}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
close_range(r3, 0xffffffffffffffff, 0x0)
gettid()
getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000440)={{{@in6=@remote, @in6}}, {{@in6=@loopback}, 0x0, @in=@multicast2}}, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000001ec0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000907acc5128ecc5b0850000000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x18, 0x20000010}}], 0x1, 0x1)
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@empty, 0x0, 0x3c}, @in=@loopback, {}, {}, {0x0, 0x1ec}, 0x0, 0x0, 0xa, 0x2}, [@coaddr={0x14, 0xe, @in6=@private2}]}, 0x104}}, 0x0)

309.525296ms ago: executing program 9 (id=17534):
openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0)
r0 = syz_io_uring_setup(0x70ca, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x179}, &(0x7f0000000100)=<r1=>0x0, &(0x7f00000007c0)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x3, 0x0, &(0x7f0000000440)=[{&(0x7f0000000580)="1a", 0x38}, {0x0}], 0x2})
io_uring_enter(r0, 0x5976, 0x9765, 0x2, 0x0, 0x0)

309.366572ms ago: executing program 9 (id=17535):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005b80)=@delchain={0x24, 0x26, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffe0}, {0x9}}}, 0x24}}, 0x0)
recvmmsg(r0, &(0x7f0000004f00)=[{{0x0, 0x0, 0x0}, 0xfffffffa}], 0x1, 0x2, 0x0)

246.756704ms ago: executing program 9 (id=17537):
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f00000004c0)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r0}, 0x10)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
mbind(&(0x7f0000400000/0xc00000)=nil, 0xc01100, 0x0, 0x0, 0x0, 0x2)

246.469341ms ago: executing program 4 (id=17538):
r0 = userfaultfd(0x80001)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, 0x0, 0x4000)
r2 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000014c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3)
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f000001aa40)=""/102400, 0x19000)
syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000003c0)='projid_map\x00')
r4 = shmget$private(0x0, 0x9000, 0x4, &(0x7f0000ff7000/0x9000)=nil)
shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-aesni-avx2\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fd", 0xf}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158", 0x65}], 0x3}], 0x1, 0x40800)
recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
shmctl$SHM_INFO(r4, 0xe, 0x0)
ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, 0x0)

159.540705ms ago: executing program 4 (id=17539):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]})
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
bind$vsock_stream(r1, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10)
listen(r1, 0xa)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x1d64, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000073"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020097b1af8ff00000000bfa100000000000007010000b8ffffffb702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r3}, 0x18)
close_range(r0, r2, 0x0)

159.205756ms ago: executing program 9 (id=17540):
r0 = socket$packet(0x11, 0x3, 0x300)
recvmmsg(r0, &(0x7f0000000ac0)=[{{0x0, 0x0, &(0x7f00000000c0)}, 0x101}, {{&(0x7f00000001c0)=@nl, 0x80, 0x0, 0x0, &(0x7f00000004c0)=""/11, 0xb}, 0x5}], 0x2, 0x10000, 0x0)

159.042369ms ago: executing program 4 (id=17541):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002180)='blkio.bfq.io_merged\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r0, 0x0)
ftruncate(r0, 0xc17a)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="b4000000000000006111cc000000000006000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0xf, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48)

85.709615ms ago: executing program 4 (id=17542):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sys_enter\x00', r0}, 0x18)
lstat(0x0, 0x0)

85.572604ms ago: executing program 4 (id=17543):
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0), 0x200, 0x0)
ioctl$sock_inet_sctp_SIOCINQ(r0, 0x541b, 0x0)

0s ago: executing program 4 (id=17544):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, 0x0}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/86, 0x56}], 0x1}, 0x0)

kernel console output (not intermixed with test programs):

4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1337.797135][T30211] netlink: 20 bytes leftover after parsing attributes in process `syz.7.14121'.
[ 1337.839589][T30213] loop7: detected capacity change from 0 to 512
[ 1337.856290][T30213] EXT4-fs (loop7): 1 truncate cleaned up
[ 1337.860005][T30213] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1337.905972][T30213] EXT4-fs error (device loop7): ext4_free_branches:1023: inode #13: comm syz.7.14122: invalid indirect mapped block 234881024 (level 0)
[ 1337.960821][T26793] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1338.399903][T30227] loop7: detected capacity change from 0 to 40427
[ 1338.403290][T30227] F2FS-fs (loop7): Invalid log_blocksize (268), supports only 12
[ 1338.405896][T30227] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock
[ 1338.412483][T30227] F2FS-fs (loop7): invalid crc value
[ 1338.466932][T30227] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1338.472565][T30227] F2FS-fs (loop7): Try to recover 1th superblock, ret: 0
[ 1338.475352][T30227] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e5
[ 1338.490843][T30227] syz.7.14127: attempt to access beyond end of device
[ 1338.490843][T30227] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1338.745555][T30254] loop7: detected capacity change from 0 to 256
[ 1339.154523][T30272] netlink: 'syz.9.14144': attribute type 10 has an invalid length.
[ 1339.267927][T30277] netlink: 16 bytes leftover after parsing attributes in process `syz.8.14145'.
[ 1339.287672][T30277] gretap0: entered promiscuous mode
[ 1339.292918][T30277] gretap0: left promiscuous mode
[ 1340.803564][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[ 1340.995577][T30328] loop7: detected capacity change from 0 to 512
[ 1341.012130][T30328] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1341.150409][T30328] EXT4-fs (loop7): 1 orphan inode deleted
[ 1341.153096][T30328] EXT4-fs (loop7): 1 truncate cleaned up
[ 1341.331662][T30328] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1341.376344][T30328] EXT4-fs error (device loop7): ext4_inlinedir_to_tree:1314: inode #12: block 7: comm syz.7.14162: path /232/file0/file0: bad entry in directory: directory entry overrun - offset=788, inode=13, rec_len=784, size=60 fake=0
[ 1341.389293][T30328] EXT4-fs (loop7): Remounting filesystem read-only
[ 1341.415412][T26793] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1341.548206][T30339] loop7: detected capacity change from 0 to 256
[ 1341.567260][T30339] exfat: Deprecated parameter 'utf8'
[ 1341.574070][T30339] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[ 1342.082263][T30363] loop7: detected capacity change from 0 to 512
[ 1342.092920][T30363] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.14175: casefold flag without casefold feature
[ 1342.100440][T30363] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.14175: couldn't read orphan inode 15 (err -117)
[ 1342.116003][T30363] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1342.165350][T26793] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1342.361612][T30379] loop7: detected capacity change from 0 to 128
[ 1343.346144][T30392] trusted_key: encrypted_key: insufficient parameters specified
[ 1343.590271][T30397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1345.699366][   T33] audit: type=1326 audit(1755052818.155:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30441 comm="syz.8.14204" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1345.794956][   T33] audit: type=1326 audit(1755052818.361:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30441 comm="syz.8.14204" exe="/syz-executor" sig=0 arch=c000003e syscall=2 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1345.820663][   T33] audit: type=1326 audit(1755052818.361:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30441 comm="syz.8.14204" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1345.839572][   T33] audit: type=1326 audit(1755052818.361:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30441 comm="syz.8.14204" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1345.851577][   T33] audit: type=1326 audit(1755052818.370:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30441 comm="syz.8.14204" exe="/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1345.859212][   T33] audit: type=1326 audit(1755052818.370:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30441 comm="syz.8.14204" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1345.876026][   T33] audit: type=1326 audit(1755052818.370:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30441 comm="syz.8.14204" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1347.993536][T30511] openvswitch: netlink: Missing key (keys=40, expected=2000)
[ 1349.629320][T30551] 9pnet_fd: Insufficient options for proto=fd
[ 1350.377953][T30580] netlink: 24 bytes leftover after parsing attributes in process `syz.9.14265'.
[ 1350.404335][T30570] loop7: detected capacity change from 0 to 32768
[ 1351.646169][T30611] 9pnet_fd: Insufficient options for proto=fd
[ 1352.702545][T30637] netlink: 4 bytes leftover after parsing attributes in process `syz.8.14288'.
[ 1353.864374][T30659] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1356.961277][T30720] veth1_vlan: left allmulticast mode
[ 1356.965888][T26653] netdevsim netdevsim8 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1356.973635][T26653] netdevsim netdevsim8 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1356.979898][T26653] netdevsim netdevsim8 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1356.983410][T26653] netdevsim netdevsim8 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[ 1358.698760][T30759] 9pnet_virtio: no channels available for device 127.0.0.1
[ 1359.556735][T30785] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14345'.
[ 1359.684982][T30799] batadv_slave_0: entered promiscuous mode
[ 1361.279608][T30870] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[ 1361.609132][T30878] loop7: detected capacity change from 0 to 512
[ 1363.632270][T30927] netlink: 28 bytes leftover after parsing attributes in process `syz.9.14406'.
[ 1364.403693][T30956] loop7: detected capacity change from 0 to 1024
[ 1364.432111][T30956] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1364.586756][T30964] Bluetooth: MGMT ver 1.23
[ 1364.588429][T30964] Bluetooth: hci0: invalid length 2, exp 1 for type 31
[ 1364.630519][T30965] [U] v
[ 1364.732005][T30975] loop7: detected capacity change from 0 to 2048
[ 1364.748973][T30975] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1364.773451][T30975] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[ 1364.793204][T26793] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1365.028679][   T33] audit: type=1326 audit(1755052836.358:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31009 comm="syz.8.14439" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1365.048699][   T33] audit: type=1326 audit(1755052836.358:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31009 comm="syz.8.14439" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1365.064280][   T33] audit: type=1326 audit(1755052836.358:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31009 comm="syz.8.14439" exe="/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1365.073773][   T33] audit: type=1326 audit(1755052836.358:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31009 comm="syz.8.14439" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1365.091826][   T33] audit: type=1326 audit(1755052836.358:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31009 comm="syz.8.14439" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1365.209284][T31021] loop7: detected capacity change from 0 to 1024
[ 1366.574496][T22395] hfsplus: b-tree write err: -5, ino 4
[ 1366.589171][T31037] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[ 1366.796703][T31041] loop7: detected capacity change from 0 to 32768
[ 1366.808649][T31041] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[ 1366.837567][T26793] ocfs2: Unmounting device (7,7) on (node local)
[ 1367.078670][T31060] netlink: 39 bytes leftover after parsing attributes in process `syz.7.14457'.
[ 1367.126912][T31063] loop7: detected capacity change from 0 to 256
[ 1367.132285][T31063] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1367.135722][T31063] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[ 1367.152455][T31063] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1367.461581][   T33] audit: type=1800 audit(1755052838.613:523): pid=31069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.14459" name="file1" dev="loop7" ino=1048980 res=0 errno=0
[ 1368.529964][T31084] loop7: detected capacity change from 0 to 4096
[ 1368.559301][T31089] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[ 1368.600112][T26793] NILFS error (device loop7): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=4096, inode=0, rec_len=0, name_len=0
[ 1368.619872][T26793] Remounting filesystem read-only
[ 1368.622956][T26793] NILFS error (device loop7): nilfs_readdir: bad page in #2
[ 1368.647918][T26793] NILFS error (device loop7): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=8192, inode=0, rec_len=0, name_len=0
[ 1368.654253][T26793] NILFS error (device loop7): nilfs_readdir: bad page in #2
[ 1370.463876][T31157] overlayfs: failed to clone upperpath
[ 1370.653771][T31175] netlink: 16178 bytes leftover after parsing attributes in process `syz.9.14505'.
[ 1371.143851][T31198] tipc: Started in network mode
[ 1371.145550][T31198] tipc: Node identity c, cluster identity 4711
[ 1371.150133][T31198] tipc: Node number set to 12
[ 1371.853393][T31230] netlink: 'syz.9.14530': attribute type 1 has an invalid length.
[ 1372.114754][T31246] libceph: resolve '4' (ret=-3): failed
[ 1372.146767][   T33] audit: type=1326 audit(1755052843.022:524): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31249 comm="syz.7.14540" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f44fb78ebe9 code=0x0
[ 1374.088744][T31287] tmpfs: Bad value for 'grpquota_block_hardlimit'
[ 1374.315412][T31299] loop7: detected capacity change from 0 to 256
[ 1374.333148][T31299] FAT-fs (loop7): Directory bread(block 64) failed
[ 1374.335923][T31299] FAT-fs (loop7): Directory bread(block 65) failed
[ 1374.338667][T31299] FAT-fs (loop7): Directory bread(block 66) failed
[ 1374.342539][T31299] FAT-fs (loop7): Directory bread(block 67) failed
[ 1374.345731][T31299] FAT-fs (loop7): Directory bread(block 68) failed
[ 1374.348444][T31299] FAT-fs (loop7): Directory bread(block 69) failed
[ 1374.351545][T31299] FAT-fs (loop7): Directory bread(block 70) failed
[ 1374.354287][T31299] FAT-fs (loop7): Directory bread(block 71) failed
[ 1374.356385][T31299] FAT-fs (loop7): Directory bread(block 72) failed
[ 1374.358421][T31299] FAT-fs (loop7): Directory bread(block 73) failed
[ 1374.903838][T31332] nfs: Deprecated parameter 'nointr'
[ 1374.944173][T31336] netlink: 788 bytes leftover after parsing attributes in process `syz.8.14576'.
[ 1376.742116][T31376] macvlan1: entered promiscuous mode
[ 1376.744783][T31376] ipvlan0: entered promiscuous mode
[ 1376.747348][T31376] ipvlan0: left promiscuous mode
[ 1376.749283][T31376] macvlan1: left promiscuous mode
[ 1377.168933][T31404] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1377.424593][T31412] netlink: 14 bytes leftover after parsing attributes in process `syz.8.14605'.
[ 1377.435521][T31412] hsr_slave_0: left promiscuous mode
[ 1377.438623][T31412] hsr_slave_1: left promiscuous mode
[ 1377.985962][T31432] netlink: 20 bytes leftover after parsing attributes in process `syz.8.14611'.
[ 1378.059938][T31427] loop7: detected capacity change from 0 to 32768
[ 1378.067811][T31427] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[ 1378.094243][T26793] ocfs2: Unmounting device (7,7) on (node local)
[ 1379.293118][T31470] loop7: detected capacity change from 0 to 512
[ 1379.787827][T31514] loop7: detected capacity change from 0 to 512
[ 1379.796310][T31514] EXT4-fs: Ignoring removed oldalloc option
[ 1379.820641][T31514] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.14643: Parent and EA inode have the same ino 15
[ 1379.828331][T31514] EXT4-fs error (device loop7): ext4_xattr_inode_iget:433: comm syz.7.14643: Parent and EA inode have the same ino 15
[ 1379.835839][T31514] EXT4-fs (loop7): 1 orphan inode deleted
[ 1379.839848][T31514] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1379.880870][T26793] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1381.352728][T31561] loop7: detected capacity change from 0 to 32768
[ 1386.843456][T31689] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1387.506675][T31705] netlink: 'syz.8.14720': attribute type 1 has an invalid length.
[ 1387.927748][T31717] netlink: 12 bytes leftover after parsing attributes in process `syz.9.14726'.
[ 1388.805699][T31760] kAFS: No cell specified
[ 1389.473645][T31784] netlink: 'syz.9.14756': attribute type 66 has an invalid length.
[ 1391.112923][T31827] netlink: 'syz.8.14773': attribute type 1 has an invalid length.
[ 1391.790412][T31833] loop7: detected capacity change from 0 to 131072
[ 1391.793682][T31833] F2FS-fs (loop7): Invalid log sectors per block(570425347) log sectorsize(9)
[ 1391.793870][T31847] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1391.796908][T31833] F2FS-fs (loop7): Can't find valid F2FS filesystem in 2th superblock
[ 1391.798274][T31833] F2FS-fs (loop7): invalid crc value
[ 1391.849959][T31833] F2FS-fs (loop7): f2fs_check_nid_range: out-of-range nid=3000000, run fsck to fix.
[ 1391.857764][T31833] F2FS-fs (loop7): Bad quota inode 2:50331648
[ 1391.858767][T31855] netlink: 32 bytes leftover after parsing attributes in process `syz.8.14785'.
[ 1391.859910][T31833] F2FS-fs (loop7): Failed to enable quota tracking (type=2, err=-22). Please run fsck to fix.
[ 1391.859924][T31833] F2FS-fs (loop7): Cannot turn on quotas: error -22
[ 1391.870462][T31833] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[ 1391.876146][T31833] F2FS-fs (loop7): Try to recover 2th superblock, ret: 0
[ 1391.879171][T31833] F2FS-fs (loop7): Mounted with checkpoint version = 753bd00b
[ 1392.247409][T31867] loop7: detected capacity change from 0 to 512
[ 1392.264123][T31867] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1392.269052][T31867] ext4 filesystem being mounted at /374/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1392.335551][T26793] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1392.404470][T31875] IPv6: Can't replace route, no match found
[ 1392.439289][   T33] audit: type=1326 audit(1755052862.011:525): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31876 comm="syz.7.14791" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb78ebe9 code=0x7ffc0000
[ 1392.449072][   T33] audit: type=1326 audit(1755052862.011:526): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31876 comm="syz.7.14791" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb78ebe9 code=0x7ffc0000
[ 1392.458455][   T33] audit: type=1326 audit(1755052862.020:527): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31876 comm="syz.7.14791" exe="/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7f44fb78ebe9 code=0x7ffc0000
[ 1392.469125][   T33] audit: type=1326 audit(1755052862.020:528): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31876 comm="syz.7.14791" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb78ebe9 code=0x7ffc0000
[ 1392.477931][   T33] audit: type=1326 audit(1755052862.020:529): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31876 comm="syz.7.14791" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f44fb78ebe9 code=0x7ffc0000
[ 1393.345412][T31923] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1393.348474][T31923] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1393.786607][T31969] netlink: 4 bytes leftover after parsing attributes in process `syz.7.14823'.
[ 1394.014380][T31982] loop7: detected capacity change from 0 to 512
[ 1394.017910][T31982] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode
[ 1394.030484][T31982] EXT4-fs (loop7): 1 truncate cleaned up
[ 1394.035344][T31982] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1394.095659][T26793] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1394.288798][T32001] sctp: [Deprecated]: syz.7.14835 (pid 32001) Use of int in maxseg socket option.
[ 1394.288798][T32001] Use struct sctp_assoc_value instead
[ 1394.343926][T32005] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[ 1394.347796][T32005] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[ 1394.358371][T32005] overlayfs: missing 'lowerdir'
[ 1394.549283][ T6548] libceph: connect (1)[c::]:6789 error -101
[ 1394.552763][ T6548] libceph: mon0 (1)[c::]:6789 connect error
[ 1394.571724][ T6548] libceph: connect (1)[c::]:6789 error -101
[ 1394.574348][ T6548] libceph: mon0 (1)[c::]:6789 connect error
[ 1394.724573][T32016] ceph: No mds server is up or the cluster is laggy
[ 1394.919197][ T6548] libceph: connect (1)[c::]:6789 error -101
[ 1394.923891][ T6548] libceph: mon0 (1)[c::]:6789 connect error
[ 1395.930052][T32043] vti0: entered promiscuous mode
[ 1396.014835][T32046] CIFS mount error: No usable UNC path provided in device string!
[ 1396.014835][T32046] 
[ 1396.019062][T32046] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[ 1397.449989][T32068] loop7: detected capacity change from 0 to 32768
[ 1397.545282][T32075] loop7: detected capacity change from 0 to 256
[ 1397.552087][T32075] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d)
[ 1398.920506][T32138] kAFS: No cell specified
[ 1399.581064][T32160] netlink: 8 bytes leftover after parsing attributes in process `syz.9.14884'.
[ 1403.819104][T32301] loop7: detected capacity change from 0 to 2048
[ 1403.847938][T32301] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1403.856945][T32301] EXT4-fs (loop7): shut down requested (2)
[ 1403.869702][T26793] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1405.666170][T32328] cifs: Unknown parameter 'no'aN[Gzob,er;%j
[ 1405.666170][T32328] z,@qJ#"h/.W1ȱnNC"C<+`#k'
[ 1405.888685][T32338] dummy0: left allmulticast mode
[ 1406.431241][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[ 1406.458388][T32355] netlink: 60 bytes leftover after parsing attributes in process `syz.9.14968'.
[ 1406.576206][T32361] netlink: 766 bytes leftover after parsing attributes in process `syz.9.14971'.
[ 1408.039434][T32401] Invalid ELF header magic: != ELF
[ 1408.866766][T32440] 9pnet_fd: Insufficient options for proto=fd
[ 1408.985593][T32445] netlink: 'syz.7.15001': attribute type 4 has an invalid length.
[ 1410.364663][T32508] loop7: detected capacity change from 0 to 4096
[ 1410.380462][T32508] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1410.394195][T32508] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 ro.
[ 1410.450713][T32508] EXT4-fs (loop7): re-mounted 00000000-0000-0000-0000-000000000000 r/w.
[ 1410.475590][T26793] EXT4-fs error (device loop7): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109
[ 1410.481987][T26793] EXT4-fs error (device loop7): ext4_lookup:1787: inode #14: comm syz-executor: invalid fast symlink length 131109
[ 1411.056050][T28792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1411.060216][T28792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1411.068715][T28792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1411.072182][T28792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1411.091671][T28792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1411.129055][T22383] libceph: connect (1)[c::]:6789 error -22
[ 1411.131772][T22383] libceph: mon0 (1)[c::]:6789 connect error
[ 1411.167976][T32530] ceph: No mds server is up or the cluster is laggy
[ 1411.416474][T32583] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15041'.
[ 1411.430531][T32526] chnl_net:caif_netlink_parms(): no params data found
[ 1411.510278][T32526] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1411.512818][T32526] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1411.515447][T32526] bridge_slave_0: entered allmulticast mode
[ 1411.518292][T32526] bridge_slave_0: entered promiscuous mode
[ 1411.521659][T32526] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1411.529833][T32526] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1411.532588][T32526] bridge_slave_1: entered allmulticast mode
[ 1411.536279][T32526] bridge_slave_1: entered promiscuous mode
[ 1411.571716][T32526] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1411.577115][T32526] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1411.616253][T32526] team0: Port device team_slave_0 added
[ 1411.619739][T32526] team0: Port device team_slave_1 added
[ 1411.654386][T32526] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1411.657206][T32526] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1411.668996][T32526] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1411.674973][T32526] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1411.677927][T32526] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1411.687548][T32526] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1411.733412][T32526] hsr_slave_0: entered promiscuous mode
[ 1411.736003][T32526] hsr_slave_1: entered promiscuous mode
[ 1412.384216][T32526] netdevsim netdevsim2 netdevsim0: renamed from eth0
[ 1412.391812][T32526] netdevsim netdevsim2 netdevsim1: renamed from eth1
[ 1412.396425][T32526] netdevsim netdevsim2 netdevsim2: renamed from eth2
[ 1412.401604][T32526] netdevsim netdevsim2 netdevsim3: renamed from eth3
[ 1412.448939][T32526] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1412.461468][T32526] 8021q: adding VLAN 0 to HW filter on device team0
[ 1412.468498][T22388] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1412.470833][T22388] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1412.482142][T22388] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1412.484521][T22388] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1412.679425][T32526] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1412.708335][T32526] veth0_vlan: entered promiscuous mode
[ 1412.714342][T32526] veth1_vlan: entered promiscuous mode
[ 1412.735883][T32526] veth0_macvtap: entered promiscuous mode
[ 1412.739576][T32526] veth1_macvtap: entered promiscuous mode
[ 1412.760191][T32526] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1412.770518][T32526] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1412.781504][T26653] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1412.789204][T26653] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1412.802432][T26653] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1412.816302][T26653] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1412.825884][  T460] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15059'.
[ 1412.925233][T16841] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1412.928200][T16841] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1412.954226][T16841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1412.957415][T16841] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1413.231933][  T516] loop2: detected capacity change from 0 to 512
[ 1413.241247][  T516] EXT4-fs: Ignoring removed i_version option
[ 1413.243825][  T516] EXT4-fs: Ignoring removed nobh option
[ 1413.248715][  T516] EXT4-fs: journaled quota format not specified
[ 1413.266171][ T5237] Bluetooth: hci0: command tx timeout
[ 1413.738762][  T544] 9pnet_fd: Insufficient options for proto=fd
[ 1414.334422][ T5849] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 1414.516793][ T5849] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[ 1414.519723][ T5849] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1414.525657][ T5849] usb 3-1: Product: syz
[ 1414.528978][ T5849] usb 3-1: Manufacturer: syz
[ 1414.533267][ T5849] usb 3-1: SerialNumber: syz
[ 1414.537382][ T5849] usb 3-1: config 0 descriptor??
[ 1414.788000][  T580] bpq0: entered promiscuous mode
[ 1414.800109][ T5849] usb-storage 3-1:0.0: USB Mass Storage device detected
[ 1415.466385][  T616] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15106'.
[ 1415.500941][ T5237] Bluetooth: hci0: command tx timeout
[ 1415.507126][ T5849] usb 3-1: USB disconnect, device number 31
[ 1415.582546][  T625] loop2: detected capacity change from 0 to 2048
[ 1415.772048][  T649] netlink: 16 bytes leftover after parsing attributes in process `syz.9.15118'.
[ 1416.626981][  T692] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check.
[ 1416.914224][  T706] loop2: detected capacity change from 0 to 32768
[ 1416.931897][  T706] (syz.2.15143,706,0):ocfs2_journal_init:961 ERROR: Journal file size (0) is too small!
[ 1416.935156][  T706] (syz.2.15143,706,0):ocfs2_check_volume:2347 ERROR: Could not initialize journal!
[ 1416.938173][  T706] (syz.2.15143,706,0):ocfs2_check_volume:2432 ERROR: status = -22
[ 1416.940787][  T706] (syz.2.15143,706,0):ocfs2_mount_volume:1764 ERROR: status = -22
[ 1416.970579][  T706] (syz.2.15143,706,0):ocfs2_fill_super:1177 ERROR: status = -22
[ 1417.079952][  T722] ip6tnl3: entered allmulticast mode
[ 1417.160482][  T727] netlink: 72 bytes leftover after parsing attributes in process `syz.2.15150'.
[ 1417.725460][ T5237] Bluetooth: hci0: command tx timeout
[ 1419.347035][  T763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.15164'.
[ 1419.359746][  T765] netlink: 4 bytes leftover after parsing attributes in process `syz.8.15165'.
[ 1419.557627][  T783] /dev/nullb0: Can't lookup blockdev
[ 1419.653649][  T797] 9pnet_fd: Insufficient options for proto=fd
[ 1419.689183][  T802] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check.
[ 1419.933033][ T5237] Bluetooth: hci0: command tx timeout
[ 1420.417366][   T33] audit: type=1326 audit(1755052888.197:530): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=780 comm="syz.2.15170" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb000b8ebe9 code=0x7fc00000
[ 1420.458877][  T840] loop2: detected capacity change from 0 to 256
[ 1420.463748][  T840] exfat: Deprecated parameter 'namecase'
[ 1420.465560][  T840] exfat: Deprecated parameter 'namecase'
[ 1420.471188][  T840] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xfcc0b04e, utbl_chksum : 0xe619d30d)
[ 1420.552090][  T852] loop2: detected capacity change from 0 to 1024
[ 1420.575549][  T852] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1420.639774][T32526] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[ 1420.644884][T32526] EXT4-fs error (device loop2): ext4_lookup:1791: inode #2: comm syz-executor: deleted inode referenced: 11
[ 1420.913146][T32526] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1421.117754][ T5856] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1421.291961][ T5856] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1421.479152][ T5856] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1421.636587][ T5856] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1421.702644][T28792] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 1421.723934][T28792] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 1421.735228][T28792] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 1421.742967][T28792] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 1421.749622][T28792] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 1421.940409][ T5856] bridge_slave_1: left allmulticast mode
[ 1421.944210][ T5856] bridge_slave_1: left promiscuous mode
[ 1421.947624][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1421.962574][ T5856] bridge_slave_0: left allmulticast mode
[ 1421.965222][ T5856] bridge_slave_0: left promiscuous mode
[ 1421.967693][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1422.942298][ T5856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1422.948189][ T5856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1422.952624][ T5856] bond0 (unregistering): Released all slaves
[ 1423.214711][  T878] chnl_net:caif_netlink_parms(): no params data found
[ 1423.399760][  T878] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1423.403250][  T878] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1423.411616][  T878] bridge_slave_0: entered allmulticast mode
[ 1423.415728][  T878] bridge_slave_0: entered promiscuous mode
[ 1423.425330][ T5856] hsr_slave_0: left promiscuous mode
[ 1423.430786][ T5856] hsr_slave_1: left promiscuous mode
[ 1423.434527][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1423.441110][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1423.449101][ T5856] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1423.452178][ T5856] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1423.472832][ T5856] veth1_macvtap: left promiscuous mode
[ 1423.475204][ T5856] veth0_macvtap: left promiscuous mode
[ 1423.477636][ T5856] veth1_vlan: left promiscuous mode
[ 1423.480018][ T5856] veth0_vlan: left promiscuous mode
[ 1423.953762][ T5237] Bluetooth: hci0: command tx timeout
[ 1424.373573][ T5856] team0 (unregistering): Port device team_slave_1 removed
[ 1424.462025][ T5856] team0 (unregistering): Port device team_slave_0 removed
[ 1425.402427][  T878] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1425.406498][  T878] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1425.408779][  T878] bridge_slave_1: entered allmulticast mode
[ 1425.411418][  T878] bridge_slave_1: entered promiscuous mode
[ 1425.491868][  T878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 1425.498954][  T878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 1425.572448][ T1180] netlink: 'syz.9.15229': attribute type 8 has an invalid length.
[ 1425.608669][  T878] team0: Port device team_slave_0 added
[ 1425.612032][  T878] team0: Port device team_slave_1 added
[ 1425.726422][  T878] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 1425.731626][  T878] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1425.756373][  T878] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 1425.760960][  T878] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 1425.763931][  T878] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 1425.775742][  T878] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 1425.921423][  T878] hsr_slave_0: entered promiscuous mode
[ 1425.924086][  T878] hsr_slave_1: entered promiscuous mode
[ 1426.161420][   T33] audit: type=1326 audit(1755052893.569:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1224 comm="syz.9.15232" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46378ebe9 code=0x7ffc0000
[ 1426.173286][   T33] audit: type=1326 audit(1755052893.569:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1224 comm="syz.9.15232" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46378ebe9 code=0x7ffc0000
[ 1426.177790][ T5237] Bluetooth: hci0: command tx timeout
[ 1426.225885][   T33] audit: type=1326 audit(1755052893.598:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1224 comm="syz.9.15232" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa46378ebe9 code=0x7ffc0000
[ 1426.249379][   T33] audit: type=1326 audit(1755052893.598:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1224 comm="syz.9.15232" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46378ebe9 code=0x7ffc0000
[ 1426.265528][   T33] audit: type=1326 audit(1755052893.598:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1224 comm="syz.9.15232" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46378ebe9 code=0x7ffc0000
[ 1426.285131][   T33] audit: type=1326 audit(1755052893.598:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1224 comm="syz.9.15232" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa46378ebe9 code=0x7ffc0000
[ 1426.294710][   T33] audit: type=1326 audit(1755052893.598:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1224 comm="syz.9.15232" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46378ebe9 code=0x7ffc0000
[ 1426.304436][   T33] audit: type=1326 audit(1755052893.598:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1224 comm="syz.9.15232" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46378ebe9 code=0x7ffc0000
[ 1426.313738][   T33] audit: type=1326 audit(1755052893.598:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1224 comm="syz.9.15232" exe="/syz-executor" sig=0 arch=c000003e syscall=318 compat=0 ip=0x7fa46378ebe9 code=0x7ffc0000
[ 1426.321761][   T33] audit: type=1326 audit(1755052893.598:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1224 comm="syz.9.15232" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46378ebe9 code=0x7ffc0000
[ 1426.916957][  T878] netdevsim netdevsim4 netdevsim0: renamed from eth0
[ 1426.922045][  T878] netdevsim netdevsim4 netdevsim1: renamed from eth1
[ 1426.927981][  T878] netdevsim netdevsim4 netdevsim2: renamed from eth2
[ 1426.934838][  T878] netdevsim netdevsim4 netdevsim3: renamed from eth3
[ 1427.003724][  T878] 8021q: adding VLAN 0 to HW filter on device bond0
[ 1427.018599][  T878] 8021q: adding VLAN 0 to HW filter on device team0
[ 1427.024931][T22413] bridge0: port 1(bridge_slave_0) entered blocking state
[ 1427.027855][T22413] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 1427.041757][T22413] bridge0: port 2(bridge_slave_1) entered blocking state
[ 1427.044730][T22413] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 1427.068527][  T878] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1427.183785][  T878] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1427.193006][ T1403] wg2: entered promiscuous mode
[ 1427.194628][ T1403] wg2: entered allmulticast mode
[ 1427.343747][  T878] veth0_vlan: entered promiscuous mode
[ 1427.353079][  T878] veth1_vlan: entered promiscuous mode
[ 1427.373401][  T878] veth0_macvtap: entered promiscuous mode
[ 1427.379539][  T878] veth1_macvtap: entered promiscuous mode
[ 1427.396519][  T878] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 1427.403903][  T878] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 1427.410167][T22066] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 1427.419694][T22066] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 1427.495240][T22066] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 1427.499216][T22066] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 1427.578892][T22388] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1427.581727][T22388] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1427.611152][T22388] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 1427.614438][T22388] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 1428.052543][ T1447] loop4: detected capacity change from 0 to 32768
[ 1428.056755][ T1447] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.15249 (1447)
[ 1428.063096][ T1447] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1428.066514][ T1447] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[ 1428.069209][ T1447] BTRFS info (device loop4): using free-space-tree
[ 1428.482904][ T5237] Bluetooth: hci0: command tx timeout
[ 1428.890077][ T1478] IPVS: sh: UDP 224.0.0.2:0 - no destination available
[ 1428.891908][  T878] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1429.073839][ T1485] loop4: detected capacity change from 0 to 256
[ 1429.091869][ T1485] exFAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[ 1429.095308][ T1485] exFAT-fs (loop4): Medium has reported failures. Some data may be lost.
[ 1429.110066][ T1485] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[ 1429.667140][ T2350] usb 5-1: new high-speed USB device number 9 using dummy_hcd
[ 1430.076585][ T2350] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1430.079863][ T2350] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1430.086663][ T2350] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1430.090557][ T2350] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1430.098844][ T2350] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1430.102484][ T2350] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1430.108080][ T2350] usb 5-1: Product: syz
[ 1430.109665][ T2350] usb 5-1: Manufacturer: syz
[ 1430.121551][ T2350] cdc_wdm 5-1:1.0: skipping garbage
[ 1430.123530][ T2350] cdc_wdm 5-1:1.0: skipping garbage
[ 1430.128670][ T2350] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1430.130901][ T2350] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1430.346169][ T6548] usb 5-1: USB disconnect, device number 9
[ 1430.404032][ T1544] IPVS: Scheduler module ip_vs_ not found
[ 1430.703723][ T5237] Bluetooth: hci0: command tx timeout
[ 1430.831860][T24407] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[ 1430.994184][T24407] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 1430.997867][T24407] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1431.006227][T24407] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 1431.009992][T24407] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1431.018080][T24407] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 1431.021918][T24407] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 1431.030268][T24407] usb 5-1: Product: syz
[ 1431.034360][T24407] usb 5-1: Manufacturer: syz
[ 1431.042090][T24407] cdc_wdm 5-1:1.0: skipping garbage
[ 1431.044390][T24407] cdc_wdm 5-1:1.0: skipping garbage
[ 1431.060699][T24407] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 1431.063393][T24407] cdc_wdm 5-1:1.0: Unknown control protocol
[ 1433.168226][T22383] usb 5-1: USB disconnect, device number 10
[ 1433.195199][ T1650] loop4: detected capacity change from 0 to 16
[ 1433.199423][ T1650] erofs (device loop4): mounted with root inode @ nid 36.
[ 1433.209431][ T1650] erofs (device loop4): readahead error at folio 2 @ nid 89
[ 1433.218666][T15573] erofs (device loop4): failed to decompress -33 in[4096, 0] out[8192]
[ 1433.224143][ T1650] erofs (device loop4): failed to decompress -33 in[4096, 0] out[4096]
[ 1433.229167][ T1650] erofs (device loop4): read error -117 @ 0 of nid 89
[ 1433.232135][   T33] kauditd_printk_skb: 10 callbacks suppressed
[ 1433.232147][   T33] audit: type=1800 audit(1755052900.186:551): pid=1650 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.15315" name="file3" dev="loop4" ino=89 res=0 errno=0
[ 1433.356383][ T1659] loop4: detected capacity change from 0 to 1024
[ 1433.384333][T22402] hfsplus: b-tree write err: -5, ino 4
[ 1434.886010][   T33] audit: type=1800 audit(1755052901.740:552): pid=1694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.9.15330" name="file1" dev="tmpfs" ino=16981 res=0 errno=0
[ 1434.916358][ T1696] loop4: detected capacity change from 0 to 256
[ 1434.950424][ T1696] FAT-fs (loop4): Directory bread(block 64) failed
[ 1434.953181][ T1696] FAT-fs (loop4): Directory bread(block 65) failed
[ 1434.955739][ T1696] FAT-fs (loop4): Directory bread(block 66) failed
[ 1434.959413][ T1696] FAT-fs (loop4): Directory bread(block 67) failed
[ 1434.961888][ T1696] FAT-fs (loop4): Directory bread(block 68) failed
[ 1434.964331][ T1696] FAT-fs (loop4): Directory bread(block 69) failed
[ 1434.971235][ T1696] FAT-fs (loop4): Directory bread(block 70) failed
[ 1434.973525][ T1696] FAT-fs (loop4): Directory bread(block 71) failed
[ 1434.975752][ T1696] FAT-fs (loop4): Directory bread(block 72) failed
[ 1434.979182][ T1696] FAT-fs (loop4): Directory bread(block 73) failed
[ 1435.782405][ T1740] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1436.087263][ T1746] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 1, id = 0
[ 1437.102938][ T1806] netlink: 'syz.9.15374': attribute type 21 has an invalid length.
[ 1437.107123][ T1806] netlink: 'syz.9.15374': attribute type 1 has an invalid length.
[ 1437.110355][ T1806] netlink: 144 bytes leftover after parsing attributes in process `syz.9.15374'.
[ 1437.537194][ T1824] PKCS7: Unknown OID: [4] 5.25.373.87(bad)
[ 1437.539926][ T1824] PKCS7: Only support pkcs7_signedData type
[ 1438.872305][ T1891] loop4: detected capacity change from 0 to 512
[ 1438.875818][ T1891] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349)
[ 1438.882890][ T1891] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=c842e02c, mo2=0002]
[ 1438.885628][ T1891] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1438.887853][ T1891] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.15409: bad orphan inode 267
[ 1438.892120][ T1891] EXT4-fs (loop4): Remounting filesystem read-only
[ 1438.895277][ T1891] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none.
[ 1438.911972][ T1891] EXT4-fs warning (device loop4): dx_probe:861: inode #2: comm syz.4.15409: dx entry: limit 0 != root limit 125
[ 1438.916554][ T1891] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.15409: Corrupt directory, running e2fsck is recommended
[ 1438.936370][  T878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007.
[ 1439.231272][ T6548] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[ 1439.372936][ T1926] netlink: 28 bytes leftover after parsing attributes in process `syz.9.15422'.
[ 1439.375868][ T1926] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15422'.
[ 1439.378793][ T1926] netlink: 156 bytes leftover after parsing attributes in process `syz.9.15422'.
[ 1439.817621][ T6548] usb 5-1: Using ep0 maxpacket: 16
[ 1439.821346][ T6548] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1439.825462][ T6548] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1439.839322][ T6548] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1439.842689][ T6548] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1439.845290][ T6548] usb 5-1: Product: syz
[ 1439.846681][ T6548] usb 5-1: Manufacturer: syz
[ 1439.848415][ T6548] usb 5-1: SerialNumber: syz
[ 1440.286939][ T6548] usb 5-1: 0:2 : does not exist
[ 1440.724838][ T6548] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[ 1440.740984][ T6548] usb 5-1: USB disconnect, device number 11
[ 1442.315084][ T2038] loop4: detected capacity change from 0 to 512
[ 1442.320274][ T2038] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[ 1442.345131][ T2038] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 546, start 22000003)
[ 1442.349401][ T2038] FAT-fs (loop4): Filesystem has been set read-only
[ 1442.360124][ T2038] FAT-fs (loop4): error, invalid access to FAT (entry 0x22000003)
[ 1442.583241][ T2051] loop4: detected capacity change from 0 to 4096
[ 1442.829832][ T2062] bridge0: port 1(erspan0) entered blocking state
[ 1442.836310][ T2062] bridge0: port 1(erspan0) entered disabled state
[ 1442.839328][ T2062] erspan0: entered allmulticast mode
[ 1442.844166][ T2062] erspan0: entered promiscuous mode
[ 1442.853381][ T2062] bridge0: port 1(erspan0) entered blocking state
[ 1442.856593][ T2062] bridge0: port 1(erspan0) entered forwarding state
[ 1443.262276][ T2076] tmpfs: Unknown parameter 'no'
[ 1443.742108][ T2097] loop4: detected capacity change from 0 to 512
[ 1443.746390][ T2097] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1443.756145][ T2097] EXT4-fs (loop4): 1 truncate cleaned up
[ 1443.759807][ T2097] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1443.788217][  T878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1443.860444][ T2106] loop4: detected capacity change from 0 to 512
[ 1443.875592][ T2106] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2
[ 1443.880051][ T2106] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.15486: invalid indirect mapped block 2683928664 (level 1)
[ 1443.886184][ T2106] EXT4-fs (loop4): Remounting filesystem read-only
[ 1443.890111][ T2106] EXT4-fs (loop4): 1 truncate cleaned up
[ 1443.893274][ T2106] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1443.903823][ T2106] EXT4-fs (loop4): Quota file not on filesystem root. Journaled quota will not work
[ 1443.919011][  T878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1444.100471][ T2122] netlink: 32 bytes leftover after parsing attributes in process `syz.4.15492'.
[ 1444.131658][ T2124] loop4: detected capacity change from 0 to 512
[ 1444.158056][ T2124] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1444.163379][ T2124] ext4 filesystem being mounted at /69/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 1444.197455][ T2124] EXT4-fs: Ignoring removed orlov option
[ 1444.201473][ T2124] EXT4-fs: can't change dax mount option while remounting
[ 1444.240940][  T878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1444.555783][ T2147] netlink: 140 bytes leftover after parsing attributes in process `syz.9.15502'.
[ 1444.646004][ T2150] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1445.232858][ T2154] netlink: 'syz.4.15505': attribute type 1 has an invalid length.
[ 1445.279612][ T2156] loop4: detected capacity change from 0 to 256
[ 1445.639997][ T2185] netlink: 'syz.9.15515': attribute type 5 has an invalid length.
[ 1445.652494][ T6548] usb 5-1: new full-speed USB device number 12 using dummy_hcd
[ 1445.814188][ T6548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 1445.819081][ T6548] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1445.824619][ T6548] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00
[ 1445.831988][ T6548] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1445.840953][ T6548] usb 5-1: config 0 descriptor??
[ 1446.432293][ T6548] bigben 0003:146B:0902.005A: unexpected rdesc, please submit for review
[ 1446.441678][ T6548] bigben 0003:146B:0902.005A: hidraw0: USB HID v0.01 Device [HID 146b:0902] on usb-dummy_hcd.4-1/input0
[ 1446.446751][ T6548] bigben 0003:146B:0902.005A: not enough fields in HID_OUTPUT_REPORT 0
[ 1446.450171][ T6548] bigben 0003:146B:0902.005A: no output report found
[ 1446.644438][ T2350] usb 5-1: USB disconnect, device number 12
[ 1447.437312][ T2261] netlink: 'syz.9.15542': attribute type 1 has an invalid length.
[ 1447.465522][ T2263] loop4: detected capacity change from 0 to 512
[ 1447.471038][ T2263] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1447.475315][ T2263] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.15543: corrupted in-inode xattr: invalid ea_ino
[ 1447.481259][ T2263] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.15543: couldn't read orphan inode 15 (err -117)
[ 1447.486043][ T2263] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1447.495331][ T2263] EXT4-fs error (device loop4): htree_dirblock_to_tree:1080: inode #2: block 13: comm syz.4.15543: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[ 1447.526656][  T878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1447.763185][ T2282] loop4: detected capacity change from 0 to 4096
[ 1448.084354][ T2293] batadv0: entered promiscuous mode
[ 1448.090432][ T2293] macsec1: entered allmulticast mode
[ 1448.092920][ T2293] batadv0: entered allmulticast mode
[ 1448.107256][ T2293] batadv0: left allmulticast mode
[ 1448.113224][ T2293] batadv0: left promiscuous mode
[ 1448.851598][ T2315] loop4: detected capacity change from 0 to 2048
[ 1448.855934][ T2315] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 1448.860350][ T2315] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1449.116758][ T2328] loop4: detected capacity change from 0 to 32768
[ 1449.120346][ T2328] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.15566 (2328)
[ 1449.130231][ T2328] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1449.133826][ T2328] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[ 1449.137515][ T2328] BTRFS info (device loop4): using free-space-tree
[ 1449.258449][  T878] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1449.517571][ T2353] netlink: 24 bytes leftover after parsing attributes in process `syz.8.15569'.
[ 1450.331681][T24407] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[ 1450.393224][ T2404] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15589'.
[ 1450.399434][ T2404] netlink: 336 bytes leftover after parsing attributes in process `syz.9.15589'.
[ 1450.525246][T24407] usb 5-1: Using ep0 maxpacket: 8
[ 1450.535494][T24407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1450.539911][T24407] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1450.543967][T24407] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[ 1450.553297][T24407] usb 5-1: New USB device found, idVendor=045e, idProduct=008e, bcdDevice= 0.00
[ 1450.557404][T24407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1450.575068][T24407] usb 5-1: config 0 descriptor??
[ 1451.022742][T24407] hid-generic 0003:045E:008E.005B: unbalanced collection at end of report description
[ 1451.026556][T24407] hid-generic 0003:045E:008E.005B: probe with driver hid-generic failed with error -22
[ 1451.223338][ T2433] netlink: 300 bytes leftover after parsing attributes in process `syz.8.15600'.
[ 1451.238376][T24407] usb 5-1: USB disconnect, device number 13
[ 1451.978520][ T2460] loop4: detected capacity change from 0 to 256
[ 1451.985450][ T2460] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 1452.233221][ T2470] loop4: detected capacity change from 0 to 24
[ 1452.237433][ T2470] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 1452.320522][ T2470] romfs: Mounting image 'rom 637cf1fa' through the block layer
[ 1453.537200][T31138] usb 5-1: new high-speed USB device number 14 using dummy_hcd
[ 1453.698147][T31138] usb 5-1: Using ep0 maxpacket: 32
[ 1453.705169][ T5237] Bluetooth: hci0: Dropping invalid advertising data
[ 1453.712403][T31138] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1453.715164][T31138] usb 5-1: no configurations
[ 1453.716723][T31138] usb 5-1: can't read configurations, error -22
[ 1453.832532][ T2520] erspan1: entered promiscuous mode
[ 1453.834429][ T2520] erspan1: entered allmulticast mode
[ 1456.028460][   T33] audit: type=1326 audit(1755052921.525:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2641 comm="syz.8.15665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1456.043909][   T33] audit: type=1326 audit(1755052921.525:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2641 comm="syz.8.15665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1456.059356][T22383] usb 5-1: new high-speed USB device number 16 using dummy_hcd
[ 1456.063006][   T33] audit: type=1326 audit(1755052921.525:555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2641 comm="syz.8.15665" exe="/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1456.071586][   T33] audit: type=1326 audit(1755052921.525:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2641 comm="syz.8.15665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1456.080743][   T33] audit: type=1326 audit(1755052921.534:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=2641 comm="syz.8.15665" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1456.304889][T22383] usb 5-1: Using ep0 maxpacket: 8
[ 1456.309188][T22383] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 1456.313217][T22383] usb 5-1: config 4 interface 0 has no altsetting 0
[ 1456.323252][T22383] usb 5-1: string descriptor 0 read error: -22
[ 1456.326082][T22383] usb 5-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05
[ 1456.329798][T22383] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=3
[ 1456.338765][T22383] usb 5-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state
[ 1456.345311][T22383] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 1456.354225][T22383] dvbdev: DVB: registering new adapter (Sigmatek DVB-110)
[ 1456.357385][T22383] usb 5-1: media controller created
[ 1456.579566][T22383] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 1456.605870][T22383] zl10353_read_register: readreg error (reg=127, ret==0)
[ 1456.655908][T22383] usb 5-1: USB disconnect, device number 16
[ 1457.512101][T22383] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[ 1457.676183][T22383] usb 5-1: Using ep0 maxpacket: 8
[ 1457.680246][T22383] usb 5-1: config 128 has an invalid interface number: 25 but max is 0
[ 1457.685878][T22383] usb 5-1: config 128 has no interface number 0
[ 1457.692220][T22383] usb 5-1: New USB device found, idVendor=0cf2, idProduct=76f6, bcdDevice=9b.f5
[ 1457.702996][T22383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1457.709651][T22383] usb 5-1: Product: syz
[ 1457.711497][T22383] usb 5-1: Manufacturer: syz
[ 1457.713445][T22383] usb 5-1: SerialNumber: syz
[ 1457.737806][T22383] usb-storage 5-1:128.25: USB Mass Storage device detected
[ 1457.958285][ T6548] usb 5-1: USB disconnect, device number 17
[ 1458.944414][ T2791] loop4: detected capacity change from 0 to 32768
[ 1458.948153][ T2791] BTRFS info: device /dev/loop4 (7:4) using temp-fsid fd3a663e-807f-46d1-ba82-aee662684f36
[ 1458.952439][ T2791] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.15702 (2791)
[ 1458.960214][ T2791] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1458.963777][ T2791] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[ 1458.970575][ T2791] BTRFS info (device loop4): disk space caching is enabled
[ 1458.973166][ T2791] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 1459.003846][ T2791] BTRFS info (device loop4): rebuilding free space tree
[ 1459.012275][ T2791] BTRFS info (device loop4): disabling free space tree
[ 1459.014709][ T2791] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1459.017847][ T2791] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1459.113262][  T878] BTRFS info (device loop4): last unmount of filesystem fd3a663e-807f-46d1-ba82-aee662684f36
[ 1459.119145][T26653] BTRFS info (device loop4): qgroup scan completed (inconsistency flag cleared)
[ 1459.408707][ T2849] loop4: detected capacity change from 0 to 256
[ 1459.420031][ T2849] FAT-fs (loop4): Directory bread(block 64) failed
[ 1459.422229][ T2849] FAT-fs (loop4): Directory bread(block 65) failed
[ 1459.424559][ T2849] FAT-fs (loop4): Directory bread(block 66) failed
[ 1459.426749][ T2849] FAT-fs (loop4): Directory bread(block 67) failed
[ 1459.429147][ T2849] FAT-fs (loop4): Directory bread(block 68) failed
[ 1459.431297][ T2849] FAT-fs (loop4): Directory bread(block 69) failed
[ 1459.433390][ T2849] FAT-fs (loop4): Directory bread(block 70) failed
[ 1459.435832][ T2849] FAT-fs (loop4): Directory bread(block 71) failed
[ 1459.438065][ T2849] FAT-fs (loop4): Directory bread(block 72) failed
[ 1459.440318][ T2849] FAT-fs (loop4): Directory bread(block 73) failed
[ 1459.602319][ T2864] netlink: 'syz.8.15722': attribute type 7 has an invalid length.
[ 1459.608714][ T2864] netlink: 'syz.8.15722': attribute type 8 has an invalid length.
[ 1460.988669][T24407] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[ 1461.297096][T24407] usb 5-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[ 1461.300852][T24407] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1461.304196][T24407] usb 5-1: Product: syz
[ 1461.306617][T24407] usb 5-1: Manufacturer: syz
[ 1461.308699][T24407] usb 5-1: SerialNumber: syz
[ 1461.312796][T24407] usb 5-1: config 0 descriptor??
[ 1461.318439][T24407] gspca_main: sunplus-2.14.0 probing 055f:c230
[ 1461.823484][T24407] usb 5-1: USB disconnect, device number 18
[ 1463.222348][ T3072] netlink: 4388 bytes leftover after parsing attributes in process `syz.9.15795'.
[ 1463.792584][ T3096] loop4: detected capacity change from 0 to 32768
[ 1463.806131][ T3096] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.15805 (3096)
[ 1463.812774][ T3096] BTRFS info (device loop4): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1463.816575][ T3096] BTRFS info (device loop4): using xxhash64 (xxhash64-generic) checksum algorithm
[ 1463.820069][ T3096] BTRFS info (device loop4): disk space caching is enabled
[ 1463.822614][ T3096] BTRFS warning (device loop4): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[ 1463.870386][ T3096] BTRFS info (device loop4): rebuilding free space tree
[ 1463.879079][ T3096] BTRFS info (device loop4): disabling free space tree
[ 1463.882530][ T3096] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1463.885676][ T3096] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1463.914719][  T878] BTRFS info (device loop4): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2
[ 1464.467995][T31138] usb 5-1: new high-speed USB device number 19 using dummy_hcd
[ 1464.639504][T31138] usb 5-1: Using ep0 maxpacket: 16
[ 1464.644041][T31138] usb 5-1: config 1 interface 0 altsetting 206 endpoint 0x81 has invalid maxpacket 1080, setting to 1024
[ 1464.648417][T31138] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1464.653214][T31138] usb 5-1: New USB device found, idVendor=046d, idProduct=c53a, bcdDevice= 0.40
[ 1464.656240][T31138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1464.658967][T31138] usb 5-1: Product: syz
[ 1464.660665][T31138] usb 5-1: Manufacturer: syz
[ 1464.667038][T31138] usb 5-1: SerialNumber: syz
[ 1464.676020][ T3129] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1465.099691][T31138] usbhid 5-1:1.0: can't add hid device: -71
[ 1465.102299][T31138] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[ 1465.107729][T31138] usb 5-1: USB disconnect, device number 19
[ 1465.208458][ T3163] ceph: No mds server is up or the cluster is laggy
[ 1465.553896][ T3181] loop4: detected capacity change from 0 to 1024
[ 1465.577168][ T3185] netlink: 830 bytes leftover after parsing attributes in process `syz.8.15825'.
[ 1465.585773][ T3181] EXT4-fs error (device loop4): __ext4_fill_super:5500: comm syz.4.15824: inode #2: comm syz.4.15824: iget: illegal inode #
[ 1465.592918][ T3181] EXT4-fs (loop4): get root inode failed
[ 1465.595100][ T3181] EXT4-fs (loop4): mount failed
[ 1465.802238][ T3193] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15828'.
[ 1465.811299][ T3193] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15828'.
[ 1466.048511][ T3201] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15830'.
[ 1466.067241][ T3201] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15830'.
[ 1466.309491][   T33] audit: type=1326 audit(1755052931.146:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3214 comm="syz.9.15835" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46378ebe9 code=0x7ffc0000
[ 1466.321227][   T33] audit: type=1326 audit(1755052931.146:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3214 comm="syz.9.15835" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46378ebe9 code=0x7ffc0000
[ 1466.331354][   T33] audit: type=1326 audit(1755052931.165:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3214 comm="syz.9.15835" exe="/syz-executor" sig=0 arch=c000003e syscall=268 compat=0 ip=0x7fa46378ebe9 code=0x7ffc0000
[ 1466.340527][   T33] audit: type=1326 audit(1755052931.165:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3214 comm="syz.9.15835" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46378ebe9 code=0x7ffc0000
[ 1466.349474][   T33] audit: type=1326 audit(1755052931.165:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=3214 comm="syz.9.15835" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46378ebe9 code=0x7ffc0000
[ 1466.412562][ T5849] usb 5-1: new high-speed USB device number 20 using dummy_hcd
[ 1466.572949][ T5849] usb 5-1: Using ep0 maxpacket: 16
[ 1466.576949][ T5849] usb 5-1: config 7 has an invalid interface number: 148 but max is 0
[ 1466.580278][ T5849] usb 5-1: config 7 has no interface number 0
[ 1466.582825][ T5849] usb 5-1: config 7 interface 148 altsetting 6 endpoint 0x5 has invalid maxpacket 512, setting to 64
[ 1466.589576][ T5849] usb 5-1: config 7 interface 148 has no altsetting 0
[ 1466.597758][ T5849] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice=58.61
[ 1466.600793][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1466.603691][ T5849] usb 5-1: Product: syz
[ 1466.607367][ T5849] usb 5-1: Manufacturer: syz
[ 1466.609319][ T5849] usb 5-1: SerialNumber: syz
[ 1466.836770][ T5849] usb 5-1: probing VID:PID(0424:012C)   
[ 1466.840211][ T5849] usb 5-1: vub300 testing UNKNOWN EndPoint(0) 01
[ 1466.842780][ T5849] usb 5-1: vub300 ignoring EndPoint(0) 01
[ 1466.848779][ T5849] usb 5-1: vub300 testing UNKNOWN EndPoint(1) 05
[ 1466.851664][ T5849] usb 5-1: vub300 ignoring EndPoint(1) 05
[ 1466.854469][ T5849] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs
[ 1466.857800][ T5849] vub300 5-1:7.148: probe with driver vub300 failed with error -22
[ 1466.875176][ T5849] usb 5-1: USB disconnect, device number 20
[ 1467.055471][ T3265] netlink: 'syz.9.15851': attribute type 10 has an invalid length.
[ 1467.072127][ T3265] team0: Device syz_tun failed to register rx_handler
[ 1468.970235][ T3321] loop4: detected capacity change from 0 to 4096
[ 1469.014179][ T3321] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[ 1469.078334][ T3321] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[ 1469.086820][ T3321] ntfs3(loop4): ino=19, mi_enum_attr
[ 1469.109817][ T3321] ntfs3(loop4): failed to convert "c46c" to macceltic
[ 1469.133137][ T3321] ntfs3(loop4): ino=20, mi_enum_attr
[ 1469.740175][ T3374] netlink: 'syz.9.15887': attribute type 3 has an invalid length.
[ 1469.900185][ T3381] atomic_op ffff888036c19998 conn xmit_atomic 0000000000000000
[ 1470.726978][ T3387] tracefs: Invalid uid '0x00000000ffffffff'
[ 1471.007034][ T3401] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 1471.010256][ T3401] IPv6: NLM_F_CREATE should be set when creating new route
[ 1471.013537][ T3401] IPv6: NLM_F_CREATE should be set when creating new route
[ 1471.016729][ T3401] IPv6: NLM_F_CREATE should be set when creating new route
[ 1471.108767][ T3406] 9pnet_fd: Insufficient options for proto=fd
[ 1472.079710][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[ 1472.689440][ T3454] loop4: detected capacity change from 0 to 32768
[ 1472.694002][ T3454] BTRFS info: device /dev/loop4 (7:4) using temp-fsid 3644ffcc-2f9d-4904-98ce-751e2bdee2ce
[ 1472.699800][ T3454] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.15922 (3454)
[ 1472.718297][ T3454] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1472.722565][ T3454] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[ 1472.726182][ T3454] BTRFS info (device loop4): using free-space-tree
[ 1472.820641][  T878] BTRFS info (device loop4): last unmount of filesystem 3644ffcc-2f9d-4904-98ce-751e2bdee2ce
[ 1473.932202][ T3520] loop4: detected capacity change from 0 to 512
[ 1473.936086][ T3520] ext4: Unknown parameter 'uid>00000000000000000000'
[ 1474.018750][ T3530] loop4: detected capacity change from 0 to 256
[ 1474.190542][ T3544] netlink: 'syz.4.15947': attribute type 11 has an invalid length.
[ 1474.474264][ T3566] loop4: detected capacity change from 0 to 512
[ 1474.500463][ T3566] EXT4-fs error (device loop4): ext4_get_branch:178: inode #11: block 4294967295: comm syz.4.15955: invalid block
[ 1474.509137][ T3566] EXT4-fs (loop4): Remounting filesystem read-only
[ 1474.512711][ T3566] EXT4-fs (loop4): 2 truncates cleaned up
[ 1474.516362][ T3566] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1474.566134][  T878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1475.088084][ T3624] loop4: detected capacity change from 0 to 1764
[ 1475.108035][ T3624] isofs_fill_super: root inode is not a directory. Corrupted media?
[ 1475.555221][ T3679] loop4: detected capacity change from 0 to 32768
[ 1475.567350][ T3679] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.15963 (3679)
[ 1475.576507][ T3679] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1475.579832][ T3679] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[ 1475.602263][ T3679] BTRFS info (device loop4): rebuilding free space tree
[ 1475.620240][ T3679] BTRFS info (device loop4): disabling free space tree
[ 1475.622545][ T3679] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[ 1475.629129][ T3679] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[ 1475.770738][  T878] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1476.071163][ T3751] 9pnet_fd: Insufficient options for proto=fd
[ 1477.638672][ T3774] loop4: detected capacity change from 0 to 164
[ 1477.646554][ T3774] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[ 1477.650868][ T3774] rock: corrupted directory entry. extent=28, offset=16056320, size=0
[ 1477.661866][ T3774] rock: directory entry would overflow storage
[ 1477.664484][ T3774] rock: sig=0x4f50, size=4, remaining=3
[ 1477.666404][ T3774] iso9660: Corrupted directory entry in block 4 of inode 1792
[ 1477.756740][ T3786] sch_fq: defrate 4294967295 ignored.
[ 1477.807450][ T3789] 8021q: adding VLAN 0 to HW filter on device macvlan2
[ 1477.857525][ T3795] macsec0: entered promiscuous mode
[ 1477.859454][ T3795] macsec0: entered allmulticast mode
[ 1477.861461][ T3795] veth1_macvtap: entered allmulticast mode
[ 1477.864515][ T3795] batman_adv: batadv0: Adding interface: macsec0
[ 1477.890378][ T3795] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500.
[ 1477.904079][ T3795] batman_adv: batadv0: Interface activated: macsec0
[ 1479.405285][ T2350] usb 5-1: new high-speed USB device number 21 using dummy_hcd
[ 1479.605928][ T2350] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 1479.610735][ T2350] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[ 1479.614588][ T2350] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 1479.618017][ T2350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1479.628022][ T3851] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 1479.635357][ T2350] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1479.785242][ T3880] bridge3: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[ 1479.841730][ T3886] 9pnet_fd: Insufficient options for proto=fd
[ 1479.858239][ T5849] usb 5-1: USB disconnect, device number 21
[ 1479.987547][ T3909] netlink: 28 bytes leftover after parsing attributes in process `syz.9.16033'.
[ 1480.198724][ T3929] IPVS: length: 24 != 3277873272
[ 1480.774388][ T3957] loop4: detected capacity change from 0 to 32768
[ 1480.778316][ T3957] BTRFS info: device /dev/loop4 (7:4) using temp-fsid 15ef5a57-4391-4f5b-aa49-d369124ec936
[ 1480.781582][ T3957] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.16056 (3957)
[ 1480.787657][ T3957] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1480.791179][ T3957] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[ 1480.794063][ T3957] BTRFS info (device loop4): using free-space-tree
[ 1480.894434][  T878] BTRFS info (device loop4): last unmount of filesystem 15ef5a57-4391-4f5b-aa49-d369124ec936
[ 1482.706431][ T4008] overlayfs: failed to clone upperpath
[ 1483.380911][ T4022] futex_wake_op: syz.8.16076 tries to shift op by 32; fix this program
[ 1483.996829][ T4056] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1484.057294][ T4060] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[ 1485.556174][T31138] usb 5-1: new high-speed USB device number 22 using dummy_hcd
[ 1485.732362][T31138] usb 5-1: Using ep0 maxpacket: 8
[ 1485.737467][T31138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1485.746571][T31138] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1485.758474][T31138] usb 5-1: New USB device found, idVendor=06cb, idProduct=81a7, bcdDevice= 0.00
[ 1485.762463][T31138] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1485.774734][T31138] usb 5-1: config 0 descriptor??
[ 1486.036441][ T4163] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16136'.
[ 1486.193371][ T4167] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16138'.
[ 1486.216877][T31138] hid-rmi 0003:06CB:81A7.005C: unknown main item tag 0x0
[ 1486.219493][T31138] hid-rmi 0003:06CB:81A7.005C: unknown main item tag 0x0
[ 1486.221771][T31138] hid-rmi 0003:06CB:81A7.005C: unknown main item tag 0x0
[ 1486.232853][T31138] hid-rmi 0003:06CB:81A7.005C: unknown main item tag 0x0
[ 1486.235860][T31138] hid-rmi 0003:06CB:81A7.005C: unknown main item tag 0x7
[ 1486.238967][T31138] hid-rmi 0003:06CB:81A7.005C: unknown main item tag 0x0
[ 1486.249375][T31138] hid-rmi 0003:06CB:81A7.005C: unknown main item tag 0x0
[ 1486.259269][T31138] hid-rmi 0003:06CB:81A7.005C: hidraw0: USB HID v0.00 Device [HID 06cb:81a7] on usb-dummy_hcd.4-1/input0
[ 1486.269491][ T4178] netlink: 12 bytes leftover after parsing attributes in process `syz.9.16143'.
[ 1486.503329][   T47] usb 5-1: USB disconnect, device number 22
[ 1486.588212][ T4194] sctp: [Deprecated]: syz.9.16145 (pid 4194) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1486.588212][ T4194] Use struct sctp_sack_info instead
[ 1487.450318][ T4208] loop4: detected capacity change from 0 to 40427
[ 1487.454741][ T4208] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12
[ 1487.457557][ T4208] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1487.461911][ T4208] F2FS-fs (loop4): invalid crc value
[ 1487.475470][ T4208] F2FS-fs (loop4): invalid journal entries nats 26624 sits 6
[ 1487.477956][ T4208] F2FS-fs (loop4): Failed to initialize F2FS segment manager (-22)
[ 1487.751720][ T4232] netlink: 12 bytes leftover after parsing attributes in process `syz.4.16157'.
[ 1489.347118][ T4297] overlayfs: failed to clone upperpath
[ 1489.467137][ T4310] loop4: detected capacity change from 0 to 1024
[ 1489.478931][ T4310] hfsplus: bad catalog entry type
[ 1489.494944][ T3687] hfsplus: b-tree write err: -5, ino 4
[ 1489.783198][ T4328] netlink: 140 bytes leftover after parsing attributes in process `syz.4.16192'.
[ 1490.456751][ T4384] bridge0: port 1(erspan0) entered disabled state
[ 1491.064211][ T4402] /dev/nullb0: Can't lookup blockdev
[ 1491.295041][ T4416] batman_adv: batadv0: Adding interface: dummy0
[ 1491.308625][ T4416] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active
[ 1491.613730][ T4427] loop4: detected capacity change from 0 to 32768
[ 1491.631555][ T4427] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1491.641979][ T4427] XFS (loop4): Ending clean mount
[ 1491.695157][  T878] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[ 1491.939257][ T4446] bridge0: the hash_elasticity option has been deprecated and is always 16
[ 1491.942453][ T4446] bridge0: entered promiscuous mode
[ 1491.944196][ T4446] bridge0: entered allmulticast mode
[ 1491.988079][ T4445] loop4: detected capacity change from 0 to 4096
[ 1492.007379][ T4445] ntfs3(loop4): ino=9, attr_set_size
[ 1493.093182][ T4524] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16266'.
[ 1493.164216][ T4526] netdevsim netdevsim4 netdevsim0: entered promiscuous mode
[ 1493.170344][ T4526] macsec1: entered promiscuous mode
[ 1493.177710][ T4526] netdevsim netdevsim4 netdevsim0: left promiscuous mode
[ 1493.381909][ T4542] tipc: Failed to remove unknown binding: 66,1,1/2130706433:1349104810/1349104812
[ 1493.468863][ T4539] loop4: detected capacity change from 0 to 40427
[ 1493.472453][ T4539] F2FS-fs (loop4): Wrong SSA boundary, start(3584) end(4096) blocks(0)
[ 1493.475207][ T4539] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock
[ 1493.478646][ T4539] F2FS-fs (loop4): build fault injection type: 0x6
[ 1493.482234][ T4539] F2FS-fs (loop4): invalid crc value
[ 1493.512987][ T4539] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[ 1493.516402][ T4539] F2FS-fs (loop4): Start checkpoint disabled!
[ 1493.544546][ T4539] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0
[ 1493.547848][ T4539] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[ 1493.577114][ T4539] syz.4.16272: attempt to access beyond end of device
[ 1493.577114][ T4539] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[ 1493.628731][T22409] kworker/u9:25: attempt to access beyond end of device
[ 1493.628731][T22409] loop4: rw=2049, sector=45104, nr_sectors = 8 limit=40427
[ 1493.634649][T22409] CPU: 0 UID: 0 PID: 22409 Comm: kworker/u9:25 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[ 1493.634673][T22409] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1493.634682][T22409] Workqueue: writeback wb_workfn (flush-7:4)
[ 1493.634708][T22409] Call Trace:
[ 1493.634714][T22409]  <TASK>
[ 1493.634721][T22409]  dump_stack_lvl+0x189/0x250
[ 1493.634744][T22409]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1493.634760][T22409]  ? __pfx_queue_work_on+0x10/0x10
[ 1493.634772][T22409]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1493.634790][T22409]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 1493.634812][T22409]  f2fs_handle_critical_error+0x37c/0x540
[ 1493.634834][T22409]  f2fs_write_end_io+0x886/0xb60
[ 1493.634868][T22409]  __submit_merged_bio+0x27a/0x6a0
[ 1493.634889][T22409]  __submit_merged_write_cond+0x255/0x530
[ 1493.634910][T22409]  f2fs_write_data_pages+0x261d/0x3000
[ 1493.634954][T22409]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1493.634982][T22409]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[ 1493.635026][T22409]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[ 1493.635053][T22409]  ? trace_f2fs_writepages+0x7f/0x200
[ 1493.635069][T22409]  ? f2fs_write_node_pages+0x478/0x6e0
[ 1493.635088][T22409]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[ 1493.635114][T22409]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[ 1493.635132][T22409]  do_writepages+0x32e/0x550
[ 1493.635154][T22409]  ? reacquire_held_locks+0x127/0x1d0
[ 1493.635167][T22409]  ? writeback_sb_inodes+0x384/0x1010
[ 1493.635189][T22409]  __writeback_single_inode+0x145/0xff0
[ 1493.635204][T22409]  ? do_raw_spin_unlock+0x4d/0x240
[ 1493.635225][T22409]  writeback_sb_inodes+0x6c7/0x1010
[ 1493.635260][T22409]  ? __pfx_writeback_sb_inodes+0x10/0x10
[ 1493.635329][T22409]  ? rcu_is_watching+0x15/0xb0
[ 1493.635350][T22409]  wb_writeback+0x43b/0xaf0
[ 1493.635373][T22409]  ? queue_io+0x391/0x590
[ 1493.635392][T22409]  ? __pfx_wb_writeback+0x10/0x10
[ 1493.635414][T22409]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1493.635431][T22409]  wb_workfn+0x409/0xef0
[ 1493.635454][T22409]  ? __pfx_wb_workfn+0x10/0x10
[ 1493.635473][T22409]  ? __lock_acquire+0xab9/0xd20
[ 1493.635499][T22409]  ? process_scheduled_works+0x9ef/0x17b0
[ 1493.635549][T22409]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1493.635560][T22409]  ? process_scheduled_works+0x9ef/0x17b0
[ 1493.635571][T22409]  ? process_scheduled_works+0x9ef/0x17b0
[ 1493.635584][T22409]  process_scheduled_works+0xae1/0x17b0
[ 1493.635621][T22409]  ? __pfx_process_scheduled_works+0x10/0x10
[ 1493.635653][T22409]  worker_thread+0x8a0/0xda0
[ 1493.635688][T22409]  kthread+0x711/0x8a0
[ 1493.635707][T22409]  ? __pfx_worker_thread+0x10/0x10
[ 1493.635720][T22409]  ? __pfx_kthread+0x10/0x10
[ 1493.635736][T22409]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1493.635749][T22409]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1493.635763][T22409]  ? __pfx_kthread+0x10/0x10
[ 1493.635778][T22409]  ret_from_fork+0x3fc/0x770
[ 1493.635795][T22409]  ? __pfx_ret_from_fork+0x10/0x10
[ 1493.635814][T22409]  ? __switch_to_asm+0x39/0x70
[ 1493.635829][T22409]  ? __switch_to_asm+0x33/0x70
[ 1493.635844][T22409]  ? __pfx_kthread+0x10/0x10
[ 1493.635861][T22409]  ret_from_fork_asm+0x1a/0x30
[ 1493.635892][T22409]  </TASK>
[ 1493.637182][T22409] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[ 1493.933422][ T4556] overlayfs: failed to clone upperpath
[ 1494.516945][ T4568] loop4: detected capacity change from 0 to 1024
[ 1494.520474][ T4568] EXT4-fs: inline encryption not supported
[ 1494.522842][ T4568] EXT4-fs: Ignoring removed i_version option
[ 1494.557443][ T4568] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1494.578920][ T4568] EXT4-fs error (device loop4): mb_free_blocks:2017: group 0, inode 15: block 225:freeing already freed block (bit 14); block bitmap corrupt.
[ 1494.634312][  T878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1495.072345][T31138] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[ 1495.347402][T31138] usb 5-1: Using ep0 maxpacket: 32
[ 1495.358529][T31138] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[ 1495.361997][T31138] usb 5-1: config 0 has no interface number 0
[ 1495.364435][T31138] usb 5-1: config 0 interface 12 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0
[ 1495.368282][T31138] usb 5-1: config 0 interface 12 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 0
[ 1495.374798][T31138] usb 5-1: config 0 interface 12 has no altsetting 0
[ 1495.382676][T31138] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 1495.386370][T31138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1495.389635][T31138] usb 5-1: Product: syz
[ 1495.392971][T31138] usb 5-1: Manufacturer: syz
[ 1495.397449][T31138] usb 5-1: SerialNumber: syz
[ 1495.405414][T31138] usb 5-1: config 0 descriptor??
[ 1495.410731][T31138] f81534 5-1:0.12: unsupported endpoint max packet size
[ 1495.634057][T24407] usb 5-1: USB disconnect, device number 23
[ 1496.347000][ T4620] loop4: detected capacity change from 0 to 512
[ 1496.357240][ T4620] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1496.360789][ T4620] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1496.386017][ T4620] EXT4-fs (loop4): 1 truncate cleaned up
[ 1496.389673][ T4620] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1497.306343][  T878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1497.414053][ T4641] netlink: 56 bytes leftover after parsing attributes in process `syz.4.16302'.
[ 1497.603467][ T4650] netlink: 'syz.4.16307': attribute type 10 has an invalid length.
[ 1497.631144][ T4650] bond0: (slave dummy0): Enslaving as an active interface with an up link
[ 1497.684826][ T4655] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16309'.
[ 1497.689140][ T4655] netlink: 'syz.8.16309': attribute type 15 has an invalid length.
[ 1497.693223][ T4655] netlink: 12 bytes leftover after parsing attributes in process `syz.8.16309'.
[ 1498.365062][ T4681] 9pnet_virtio: no channels available for device syz
[ 1499.120543][T31138] usb 5-1: new high-speed USB device number 24 using dummy_hcd
[ 1499.266252][ T4740] macvtap0: refused to change device tx_queue_len
[ 1499.292441][T31138] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1499.296827][T31138] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 1499.307545][T31138] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[ 1499.313349][T31138] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[ 1499.321085][T31138] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1499.330108][T31138] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1499.333639][T31138] usb 5-1: Product: syz
[ 1499.335190][T31138] usb 5-1: Manufacturer: syz
[ 1499.336976][T31138] usb 5-1: SerialNumber: syz
[ 1499.341085][T31138] usb 5-1: config 0 descriptor??
[ 1499.352302][T31138] garmin_gps 5-1:0.0: Garmin GPS usb/tty converter detected
[ 1499.359856][T31138] garmin_gps ttyUSB0: garmin_write_bulk - usb_submit_urb(write bulk) failed with status = -8
[ 1499.364431][T31138] garmin_gps ttyUSB0: probe with driver garmin_gps failed with error -8
[ 1499.564065][T26653] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1499.573279][T26653] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1499.576463][   T47] usb 5-1: USB disconnect, device number 24
[ 1499.583852][   T47] garmin_gps 5-1:0.0: device disconnected
[ 1499.705588][T26653] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1499.710141][T26653] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1499.818422][T26653] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1499.822858][T26653] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1499.872062][ T4761] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16347'.
[ 1500.095114][T26653] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 1500.099585][T26653] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0
[ 1500.186953][ T4771] loop4: detected capacity change from 0 to 512
[ 1500.225634][ T4771] EXT4-fs error (device loop4): ext4_iget_extra_inode:5104: inode #15: comm syz.4.16348: corrupted in-inode xattr: invalid ea_ino
[ 1500.236261][ T4771] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.16348: couldn't read orphan inode 15 (err -117)
[ 1500.258611][ T4771] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1500.333826][  T878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1500.426582][ T4792] loop4: detected capacity change from 0 to 4096
[ 1500.430098][ T4792] ntfs3(loop4): Different NTFS sector size (4096) and media sector size (512).
[ 1500.430279][T26653] bridge_slave_1: left allmulticast mode
[ 1500.433936][ T4792] ntfs3(loop4): It is recommened to use chkdsk.
[ 1500.437448][T26653] bridge_slave_1: left promiscuous mode
[ 1500.440263][T26653] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1500.449650][T26653] bridge_slave_0: left allmulticast mode
[ 1500.451629][T26653] bridge_slave_0: left promiscuous mode
[ 1500.453702][T26653] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1500.574133][ T5237] Bluetooth: hci0: link tx timeout
[ 1500.581348][ T5237] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1500.599599][T28792] Bluetooth: hci0: link tx timeout
[ 1500.601402][T28792] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa
[ 1501.328220][ T4806] loop4: detected capacity change from 0 to 32768
[ 1501.797619][T26653] bond1 (unregistering): (slave geneve2): Releasing backup interface
[ 1502.262866][ T4830] /dev/nullb0: Can't lookup blockdev
[ 1502.795584][ T4807] Bluetooth: hci0: command 0x0406 tx timeout
[ 1502.822911][T26653] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 1502.839914][T26653] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 1502.844900][T26653] bond0 (unregistering): Released all slaves
[ 1503.363775][T26653] bond1 (unregistering): Released all slaves
[ 1503.460888][T26653] : left promiscuous mode
[ 1503.472823][ T4866] netlink: 'syz.8.16380': attribute type 3 has an invalid length.
[ 1503.475434][ T4866] netlink: 8 bytes leftover after parsing attributes in process `syz.8.16380'.
[ 1503.533110][ T2350] usb 5-1: new high-speed USB device number 25 using dummy_hcd
[ 1503.597613][T26653] tipc: Left network mode
[ 1503.744291][ T2350] usb 5-1: New USB device found, idVendor=0c45, idProduct=60a8, bcdDevice=b5.55
[ 1503.749121][ T2350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1503.751916][ T2350] usb 5-1: Product: syz
[ 1503.753439][ T2350] usb 5-1: Manufacturer: syz
[ 1503.755038][ T2350] usb 5-1: SerialNumber: syz
[ 1503.758364][ T2350] usb 5-1: config 0 descriptor??
[ 1503.786955][ T2350] gspca_main: sonixb-2.14.0 probing 0c45:60a8
[ 1503.880044][T26653] hsr_slave_0: left promiscuous mode
[ 1503.882716][T26653] hsr_slave_1: left promiscuous mode
[ 1503.885419][T26653] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1503.888660][T26653] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 1503.900040][T26653] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1503.902570][T26653] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 1503.939421][T26653] veth1_macvtap: left promiscuous mode
[ 1503.941481][T26653] veth0_macvtap: left promiscuous mode
[ 1503.943413][T26653] veth1_vlan: left promiscuous mode
[ 1503.945201][T26653] veth0_vlan: left promiscuous mode
[ 1504.240380][ T2350] input: sonixb as /devices/platform/dummy_hcd.4/usb5/5-1/input/input97
[ 1504.480323][ T2350] usb 5-1: USB disconnect, device number 25
[ 1505.174295][ T4921] loop4: detected capacity change from 0 to 256
[ 1505.182405][ T4921] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d)
[ 1505.630424][T26653] team0 (unregistering): Port device team_slave_1 removed
[ 1505.686798][ T4944] loop4: detected capacity change from 0 to 1024
[ 1505.761249][T26653] team0 (unregistering): Port device team_slave_0 removed
[ 1505.837319][ T4951] loop4: detected capacity change from 0 to 8
[ 1506.046624][ T4965] loop4: detected capacity change from 0 to 512
[ 1506.051196][ T4965] EXT4-fs: Ignoring removed nomblk_io_submit option
[ 1506.080066][ T4965] EXT4-fs (loop4): revision level too high, forcing read-only mode
[ 1506.083570][ T4965] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002]
[ 1506.087496][ T4965] System zones: 0-1, 15-15, 18-18, 34-34
[ 1506.090160][ T4965] EXT4-fs (loop4): orphan cleanup on readonly fs
[ 1506.093552][ T4965] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #16: comm syz.4.16410: casefold flag without casefold feature
[ 1506.106046][ T4965] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.16410: couldn't read orphan inode 16 (err -117)
[ 1506.112662][ T4965] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[ 1506.176562][  T878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1506.231964][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1507.074026][ T4977] netlink: 830 bytes leftover after parsing attributes in process `syz.9.16413'.
[ 1507.359614][ T4990] netlink: 24 bytes leftover after parsing attributes in process `syz.9.16419'.
[ 1507.951536][   T33] audit: type=1326 audit(1755052970.114:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.9.16428" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46378ebe9 code=0x7ffc0000
[ 1507.960688][   T33] audit: type=1326 audit(1755052970.114:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.9.16428" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46378ebe9 code=0x7ffc0000
[ 1507.976206][   T33] audit: type=1326 audit(1755052970.133:565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.9.16428" exe="/syz-executor" sig=0 arch=c000003e syscall=447 compat=0 ip=0x7fa46378ebe9 code=0x7ffc0000
[ 1507.993424][   T33] audit: type=1326 audit(1755052970.133:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.9.16428" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46378ebe9 code=0x7ffc0000
[ 1508.003065][   T33] audit: type=1326 audit(1755052970.133:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5009 comm="syz.9.16428" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46378ebe9 code=0x7ffc0000
[ 1508.826004][ T5053] overlayfs: failed to clone upperpath
[ 1510.086353][ T2350] usb 5-1: new high-speed USB device number 26 using dummy_hcd
[ 1510.281727][ T2350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[ 1510.312769][ T2350] usb 5-1: New USB device found, idVendor=1ac7, idProduct=0001, bcdDevice=cc.19
[ 1510.320605][ T2350] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1510.323939][ T2350] usb 5-1: Product: syz
[ 1510.325714][ T2350] usb 5-1: Manufacturer: syz
[ 1510.327423][ T2350] usb 5-1: SerialNumber: syz
[ 1510.342740][ T2350] usb 5-1: config 0 descriptor??
[ 1510.348097][ T2350] usbtouchscreen 5-1:0.0: probe with driver usbtouchscreen failed with error -32
[ 1510.570622][ T6548] usb 5-1: USB disconnect, device number 26
[ 1511.376346][ T5151] netlink: 'syz.8.16482': attribute type 11 has an invalid length.
[ 1511.547209][ T5161] netlink: 'syz.9.16487': attribute type 1 has an invalid length.
[ 1511.560853][ T5161] netlink: 'syz.9.16487': attribute type 2 has an invalid length.
[ 1511.576578][ T5161] netlink: 'syz.9.16487': attribute type 1 has an invalid length.
[ 1511.579941][ T5161] netlink: 'syz.9.16487': attribute type 2 has an invalid length.
[ 1511.652093][ T5163] netlink: 28 bytes leftover after parsing attributes in process `syz.8.16488'.
[ 1511.671692][ T5163] netlink: 'syz.8.16488': attribute type 7 has an invalid length.
[ 1511.675167][ T5163] netlink: 'syz.8.16488': attribute type 8 has an invalid length.
[ 1511.682534][ T5163] netlink: 4 bytes leftover after parsing attributes in process `syz.8.16488'.
[ 1511.712547][ T5163] gretap0: entered promiscuous mode
[ 1511.720261][ T5163] batadv_slave_1: entered promiscuous mode
[ 1511.729952][ T5163] erspan0: entered promiscuous mode
[ 1511.748214][ T5163] debugfs: 'hsr0' already exists in 'hsr'
[ 1511.751033][ T5163] Cannot create hsr debugfs directory
[ 1511.759110][ T5163] hsr0: Slave A (gretap0) is not up; please bring it up to get a fully working HSR network
[ 1511.763494][ T5163] hsr0: Slave B (batadv_slave_1) is not up; please bring it up to get a fully working HSR network
[ 1511.768956][ T5163] hsr0: Interlink (erspan0) is not up; please bring it up to get a fully working HSR network
[ 1514.273765][ T5226] loop4: detected capacity change from 0 to 512
[ 1514.280679][ T5226] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.16515: casefold flag without casefold feature
[ 1514.285611][ T5226] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.16515: couldn't read orphan inode 15 (err -117)
[ 1514.290532][ T5226] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1514.318941][  T878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1514.393238][ T5240] netlink: 'syz.4.16517': attribute type 1 has an invalid length.
[ 1514.609919][ T5254] loop4: detected capacity change from 0 to 4096
[ 1514.620357][ T5254] ntfs3(loop4): Primary boot: invalid record size -64.
[ 1514.623846][ T5254] ntfs3(loop4): try to read out of volume at offset 0x1ffe00
[ 1515.139801][ T5297] loop4: detected capacity change from 0 to 2048
[ 1516.150716][ T5297] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1516.662296][ T5337] 9pnet_fd: Insufficient options for proto=fd
[ 1516.723466][ T5342] loop4: detected capacity change from 0 to 512
[ 1516.732888][ T5342] ext4: Unknown parameter 'euid'
[ 1517.643726][T22383] usb 5-1: new high-speed USB device number 27 using dummy_hcd
[ 1517.806867][T22383] usb 5-1: New USB device found, idVendor=59cc, idProduct=980d, bcdDevice=b4.8e
[ 1517.810829][T22383] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1517.816902][T22383] usb 5-1: config 0 descriptor??
[ 1517.820652][T22383] usb-storage 5-1:0.0: USB Mass Storage device detected
[ 1518.212483][ T6548] usb 5-1: USB disconnect, device number 27
[ 1519.841534][ T5451] loop4: detected capacity change from 0 to 512
[ 1519.861987][ T5451] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1520.666944][  T878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1522.059369][ T5547] afs: Unknown parameter 'A~|vN'
[ 1522.248937][   T33] audit: type=1326 audit(1755052983.491:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5554 comm="syz.8.16643" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1522.261877][   T33] audit: type=1326 audit(1755052983.491:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5554 comm="syz.8.16643" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1522.270938][   T33] audit: type=1326 audit(1755052983.491:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5554 comm="syz.8.16643" exe="/syz-executor" sig=0 arch=c000003e syscall=118 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1522.293086][   T33] audit: type=1326 audit(1755052983.491:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5554 comm="syz.8.16643" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1522.309801][   T33] audit: type=1326 audit(1755052983.491:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5554 comm="syz.8.16643" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9d1f8ebe9 code=0x7ffc0000
[ 1522.461068][ T5569] loop4: detected capacity change from 0 to 256
[ 1522.473266][ T5569] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011f41, chksum : 0x31e44978, utbl_chksum : 0xe619d30d)
[ 1522.582089][ T5574] pim6reg0: tun_chr_ioctl cmd 1074025677
[ 1522.588430][ T5574] pim6reg0: linktype set to 805
[ 1522.682335][ T5587] netlink: 'syz.4.16655': attribute type 9 has an invalid length.
[ 1522.685969][ T5587] netlink: 'syz.4.16655': attribute type 6 has an invalid length.
[ 1523.370978][ T5608] tmpfs: Bad value for 'mpol'
[ 1525.395735][ T5672] netlink: 'syz.9.16687': attribute type 1 has an invalid length.
[ 1525.974715][ T5682] loop4: detected capacity change from 0 to 32768
[ 1525.978308][ T5682] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.16690 (5682)
[ 1525.984683][ T5682] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1525.992876][ T5682] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[ 1525.995764][ T5682] BTRFS info (device loop4): using free-space-tree
[ 1526.115359][  T878] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1526.163153][ T5705] fuse: Bad value for 'fd'
[ 1526.878978][ T5744] overlayfs: missing 'lowerdir'
[ 1527.051472][T22383] usb 5-1: new high-speed USB device number 28 using dummy_hcd
[ 1527.214925][T22383] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36
[ 1527.218846][T22383] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1527.224530][T22383] usb 5-1: Product: syz
[ 1527.226073][T22383] usb 5-1: Manufacturer: syz
[ 1527.227632][T22383] usb 5-1: SerialNumber: syz
[ 1527.236196][T22383] usb 5-1: config 0 descriptor??
[ 1527.241619][T22383] ch341 5-1:0.0: ch341-uart converter detected
[ 1528.313261][T22383] ch341-uart ttyUSB0: failed to read break control: -71
[ 1528.315742][T22383] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -71
[ 1528.321949][T22383] usb 5-1: USB disconnect, device number 28
[ 1528.327528][T22383] ch341 5-1:0.0: device disconnected
[ 1528.393055][ T5821] 8021q: adding VLAN 0 to HW filter on device team0
[ 1528.397926][ T5821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1528.418929][ T5821] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[ 1528.884915][ T5828] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes.
[ 1529.113434][ T5852] netlink: 'syz.4.16749': attribute type 10 has an invalid length.
[ 1529.123773][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 1529.128402][ T5852] bond0: (slave batadv0): Enslaving as an active interface with an up link
[ 1529.890864][ T5917] sctp: [Deprecated]: syz.8.16766 (pid 5917) Use of struct sctp_assoc_value in delayed_ack socket option.
[ 1529.890864][ T5917] Use struct sctp_sack_info instead
[ 1529.943602][ T5920] netlink: 16 bytes leftover after parsing attributes in process `syz.8.16767'.
[ 1530.525526][ T5937] loop4: detected capacity change from 0 to 512
[ 1530.534737][ T5937] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1530.544453][ T5937] EXT4-fs (loop4): 1 truncate cleaned up
[ 1530.549813][ T5937] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1530.593301][  T878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1532.036730][ T5995] loop4: detected capacity change from 0 to 4096
[ 1532.040713][ T5995] ntfs3(loop4): ino=0, mi_enum_attr
[ 1532.045446][ T5995] ntfs3(loop4): ino=0, mi_enum_attr
[ 1532.048429][ T5995] ntfs3(loop4): Failed to load $MFT (-22).
[ 1532.278159][ T6002] loop4: detected capacity change from 0 to 32768
[ 1532.283926][ T6002] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.16799 (6002)
[ 1532.292653][ T6002] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1532.296888][ T6002] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[ 1532.300838][ T6002] BTRFS info (device loop4): using free-space-tree
[ 1532.565862][  T878] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[ 1533.055248][   T33] audit: type=1326 audit(1755053249.596:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.16806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcdd8ebe9 code=0x7ffc0000
[ 1533.067104][   T33] audit: type=1326 audit(1755053249.596:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.16806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcdd8ebe9 code=0x7ffc0000
[ 1533.096286][   T33] audit: type=1326 audit(1755053249.596:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.16806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcdd8ebe9 code=0x7ffc0000
[ 1533.106737][   T33] audit: type=1326 audit(1755053249.596:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.16806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcdd8ebe9 code=0x7ffc0000
[ 1533.166297][   T33] audit: type=1326 audit(1755053249.624:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.16806" exe="/syz-executor" sig=0 arch=c000003e syscall=43 compat=0 ip=0x7fafcdd8ebe9 code=0x7ffc0000
[ 1533.173859][   T33] audit: type=1326 audit(1755053249.624:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.16806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcdd8ebe9 code=0x7ffc0000
[ 1533.184847][   T33] audit: type=1326 audit(1755053249.624:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.16806" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcdd8ebe9 code=0x7ffc0000
[ 1533.193010][   T33] audit: type=1326 audit(1755053249.624:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.16806" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fafcdd8ebe9 code=0x7ffc0000
[ 1533.227658][   T33] audit: type=1326 audit(1755053249.624:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6039 comm="syz.4.16806" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fafcdd8ebe9 code=0x7ffc0000
[ 1533.406259][ T6055] delete_channel: no stack
[ 1533.637972][ T6066] loop4: detected capacity change from 0 to 32768
[ 1533.642778][ T6066] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.16819 (6066)
[ 1533.651179][ T6066] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1533.655560][ T6066] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[ 1533.659318][ T6066] BTRFS info (device loop4): using free-space-tree
[ 1533.813998][ T6066] BTRFS info (device loop4): rebuilding free space tree
[ 1534.956217][  T878] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[ 1535.126640][ T6115] loop4: detected capacity change from 0 to 4096
[ 1535.130680][ T6115] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[ 1535.183566][ T6115] ntfs3(loop4): try to read out of volume at offset 0xffffffff0000
[ 1535.186163][ T6115] ntfs3(loop4): Failed to initialize $Bitmap (-5).
[ 1535.508112][ T6126] loop4: detected capacity change from 0 to 32768
[ 1535.592115][ T6126] bcachefs (loop4): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[ 1535.592128][ T6126]   allowing incompatible features above 0.0: (unknown version)
[ 1535.592133][ T6126]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[ 1535.606165][ T6126] bcachefs (loop4): Using encoding defined by superblock: utf8-12.1.0
[ 1535.608846][ T6126] bcachefs (loop4): initializing new filesystem
[ 1535.615658][ T6126] bcachefs (loop4): going read-write
[ 1535.632133][ T6126] bcachefs (loop4): marking superblocks
[ 1535.666597][ T6126] bcachefs (loop4): initializing freespace
[ 1535.692027][ T6126] bcachefs (loop4): done initializing freespace
[ 1535.703964][ T6126] bcachefs (loop4): reading snapshots table
[ 1535.715017][ T6126] bcachefs (loop4): reading snapshots done
[ 1535.972760][ T6126] bcachefs (loop4): done starting filesystem
[ 1536.158672][  T878] bcachefs (loop4): shutting down
[ 1536.164592][  T878] bcachefs (loop4): going read-only
[ 1536.166637][  T878] bcachefs (loop4): finished waiting for writes to stop
[ 1536.171498][  T878] bcachefs (loop4): flushing journal and stopping allocators, journal seq 5
[ 1536.218041][  T878] bcachefs (loop4): flushing journal and stopping allocators complete, journal seq 5
[ 1536.224957][  T878] bcachefs (loop4): clean shutdown complete, journal seq 6
[ 1536.227897][  T878] bcachefs (loop4): marking filesystem clean
[ 1536.239933][  T878] bcachefs (loop4): shutdown complete
[ 1536.540238][ T6172] 9pnet_fd: Insufficient options for proto=fd
[ 1537.744389][ T1365] ieee802154 phy0 wpan0: encryption failed: -22
[ 1537.816275][   T33] audit: type=1326 audit(1755053254.049:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6222 comm="syz.9.16874" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa46378ebe9 code=0x7ffc0000
[ 1538.310283][ T6243] loop4: detected capacity change from 0 to 32768
[ 1538.313780][ T6243] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.16882 (6243)
[ 1538.319898][ T6243] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1538.323213][ T6243] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[ 1538.326009][ T6243] BTRFS info (device loop4): using free-space-tree
[ 1539.215971][  T878] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[ 1539.449505][ T6268] Invalid ELF header magic: != ELF
[ 1540.804627][ T6281] Process accounting resumed
[ 1541.206898][ T5849] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[ 1541.376652][ T5849] usb 5-1: Using ep0 maxpacket: 8
[ 1541.388230][ T5849] usb 5-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a
[ 1541.391484][ T5849] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1541.394183][ T5849] usb 5-1: Product: syz
[ 1541.398502][ T5849] usb 5-1: Manufacturer: syz
[ 1541.400131][ T5849] usb 5-1: SerialNumber: syz
[ 1541.409498][ T5849] usb 5-1: config 0 descriptor??
[ 1541.414417][ T5849] gspca_main: sq930x-2.14.0 probing 2770:930c
[ 1542.533478][ T5849] gspca_sq930x: reg_w 0105 0f00 failed -71
[ 1542.777382][ T5849] gspca_sq930x: Sensor ov9630 not yet treated
[ 1542.780234][ T5849] sq930x 5-1:0.0: probe with driver sq930x failed with error -22
[ 1542.785693][ T5849] usb 5-1: USB disconnect, device number 29
[ 1545.853012][ T6514] overlayfs: failed to clone upperpath
[ 1545.866926][ T2350] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[ 1546.027576][ T2350] usb 5-1: Using ep0 maxpacket: 8
[ 1546.036811][ T2350] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1546.043152][ T2350] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 1546.047044][ T2350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1546.055461][ T2350] usb 5-1: config 0 descriptor??
[ 1546.276474][ T2350] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 1546.785331][ T2350] usb 5-1: USB disconnect, device number 30
[ 1547.391484][ T6580] pimreg: entered allmulticast mode
[ 1547.395767][ T6580] pimreg: left allmulticast mode
[ 1547.555323][ T6593] loop4: detected capacity change from 0 to 512
[ 1547.570496][ T6593] EXT4-fs: Ignoring removed nobh option
[ 1547.575683][ T6593] EXT4-fs (loop4): Test dummy encryption mode enabled
[ 1547.588365][ T6593] EXT4-fs error (device loop4): __ext4_iget:5464: inode #11: block 1: comm syz.4.17018: invalid block
[ 1547.603190][ T6593] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.17018: couldn't read orphan inode 11 (err -117)
[ 1547.608081][ T6593] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1547.628256][ T5237] Bluetooth: hci0: unexpected event for opcode 0x080d
[ 1547.650540][  T878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1547.701653][ T6606] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17023'.
[ 1548.719321][ T6654] loop4: detected capacity change from 0 to 2048
[ 1548.724796][ T6656] 9pnet_fd: Insufficient options for proto=fd
[ 1548.772354][ T6654] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1548.810216][ T6654] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters
[ 1548.838371][ T3687] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 65793 with max blocks 1 with error 28
[ 1548.846463][ T3687] EXT4-fs (loop4): This should not happen!! Data will be lost
[ 1548.846463][ T3687] 
[ 1548.854105][ T3687] EXT4-fs (loop4): Total free blocks count 0
[ 1548.856567][ T3687] EXT4-fs (loop4): Free/Dirty block details
[ 1548.856705][ T6665] overlayfs: failed to clone upperpath
[ 1548.879244][ T3687] EXT4-fs (loop4): free_blocks=2415919504
[ 1548.885840][ T3687] EXT4-fs (loop4): dirty_blocks=16
[ 1548.901094][ T3687] EXT4-fs (loop4): Block reservation details
[ 1548.904583][ T3687] EXT4-fs (loop4): i_reserved_data_blocks=1
[ 1548.910787][  T878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1548.995102][ T6673] loop4: detected capacity change from 0 to 256
[ 1548.999777][ T6673] exfat: Deprecated parameter 'utf8'
[ 1549.006797][ T6673] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x4d7dfc9d, utbl_chksum : 0xe619d30d)
[ 1549.170590][ T6694] tipc: Started in network mode
[ 1549.173456][ T6694] tipc: Node identity fec0ffffffffffff0000000000000001, cluster identity 4711
[ 1549.176927][ T6694] tipc: Enabling of bearer <udp:syz1> rejected, failed to enable media
[ 1549.259001][ T6699] loop4: detected capacity change from 0 to 512
[ 1549.398607][ T6699] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1549.415213][ T6699] ext4 filesystem being mounted at /413/bus supports timestamps until 2038-01-19 (0x7fffffff)
[ 1549.614995][  T878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1549.691041][ T6709] loop4: detected capacity change from 0 to 256
[ 1549.699260][ T6709] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[ 1551.763533][ T6764] mkiss: ax0: crc mode is auto.
[ 1551.939134][ T5237] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[ 1551.944543][ T5237] Bluetooth: hci0: Injecting HCI hardware error event
[ 1551.954758][ T5237] Bluetooth: hci0: hardware error 0x00
[ 1552.314324][ T6827] syz.9.17116 (6827): attempted to duplicate a private mapping with mremap.  This is not supported.
[ 1552.320288][ T6829] serio: Serial port ptm0
[ 1554.168990][ T5237] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[ 1554.597893][ T6900] loop4: detected capacity change from 0 to 512
[ 1554.602609][ T6900] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[ 1554.624213][ T6900] EXT4-fs error (device loop4): ext4_validate_block_bitmap:432: comm syz.4.17146: bg 0: block 104: invalid block bitmap
[ 1554.635947][ T6900] EXT4-fs error (device loop4) in ext4_mb_clear_bb:6657: Corrupt filesystem
[ 1554.639492][ T6900] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #11: comm syz.4.17146: invalid indirect mapped block 1 (level 1)
[ 1554.646458][ T6900] EXT4-fs (loop4): 1 truncate cleaned up
[ 1554.650147][ T6900] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 1554.716902][  T878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1555.007337][  T973] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[ 1555.167663][  T973] usb 5-1: Using ep0 maxpacket: 32
[ 1555.170772][  T973] usb 5-1: config 0 has an invalid interface number: 134 but max is 0
[ 1555.173497][  T973] usb 5-1: config 0 has no interface number 0
[ 1555.178603][  T973] usb 5-1: New USB device found, idVendor=05ac, idProduct=024c, bcdDevice=ea.6f
[ 1555.181728][  T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1555.187014][  T973] usb 5-1: Product: syz
[ 1555.197788][  T973] usb 5-1: Manufacturer: syz
[ 1555.199938][  T973] usb 5-1: SerialNumber: syz
[ 1555.202992][  T973] usb 5-1: config 0 descriptor??
[ 1555.207311][  T973] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.134/input/input99
[ 1555.423184][ T5281] bcm5974 5-1:0.134: could not read from device
[ 1555.427757][  T973] usb 5-1: USB disconnect, device number 31
[ 1555.427837][ T5281] bcm5974 5-1:0.134: could not read from device
[ 1556.017300][ T6975] syzkaller1: entered promiscuous mode
[ 1556.019327][ T6975] syzkaller1: entered allmulticast mode
[ 1557.292919][ T2350] kernel write not supported for file bpf-prog (pid: 2350 comm: kworker/1:3)
[ 1558.006432][ T7074] 9pnet_fd: Insufficient options for proto=fd
[ 1558.798699][ T7112] overlayfs: failed to clone lowerpath
[ 1560.191827][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1560.271754][ T7172] netlink: 40 bytes leftover after parsing attributes in process `syz.8.17251'.
[ 1560.367067][ T7182] loop4: detected capacity change from 0 to 128
[ 1560.383770][ T7182] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=16, mo=a842c018, mo2=0002]
[ 1560.386793][ T7182] System zones: 1-3, 19-19, 35-36
[ 1560.405757][ T7182] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[ 1560.420771][ T7182] ext4 filesystem being mounted at /465/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[ 1560.459154][  T878] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[ 1560.547400][ T7193] netlink: 'syz.8.17254': attribute type 3 has an invalid length.
[ 1560.551145][ T7193] netlink: 'syz.8.17254': attribute type 3 has an invalid length.
[ 1560.562533][ T7193] netlink: 16 bytes leftover after parsing attributes in process `syz.8.17254'.
[ 1560.699092][   T33] kauditd_printk_skb: 16 callbacks suppressed
[ 1560.699105][   T33] audit: type=1326 audit(1755053275.460:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.4.17258" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcdd8ebe9 code=0x7ffc0000
[ 1560.718340][   T33] audit: type=1326 audit(1755053275.460:600): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.4.17258" exe="/syz-executor" sig=0 arch=c000003e syscall=262 compat=0 ip=0x7fafcdd8ebe9 code=0x7ffc0000
[ 1560.725433][   T33] audit: type=1326 audit(1755053275.460:601): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.4.17258" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcdd8ebe9 code=0x7ffc0000
[ 1560.734451][   T33] audit: type=1326 audit(1755053275.460:602): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.4.17258" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcdd8ebe9 code=0x7ffc0000
[ 1560.902011][ T7213] loop4: detected capacity change from 0 to 2048
[ 1560.907664][ T7213] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 1560.968547][ T7224] 9pnet_fd: Insufficient options for proto=fd
[ 1561.110323][ T7236] loop4: detected capacity change from 0 to 8
[ 1561.116738][ T7236] MTD: Attempt to mount non-MTD device "/dev/loop4"
[ 1561.361470][ T7262] netlink: 8 bytes leftover after parsing attributes in process `syz.9.17287'.
[ 1561.425298][ T2350] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[ 1561.439359][ T7272] 9pnet_fd: Insufficient options for proto=fd
[ 1561.461896][ T7275] 9pnet_fd: Insufficient options for proto=fd
[ 1561.594619][ T2350] usb 5-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08
[ 1561.597978][ T2350] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1561.602583][ T2350] usb 5-1: config 0 descriptor??
[ 1561.823384][ T2350] udl 5-1:0.0: [drm] Unrecognized vendor firmware descriptor
[ 1562.037941][ T2350] [drm:udl_init] *ERROR* Selecting channel failed
[ 1562.055935][ T2350] [drm] Initialized udl 0.0.1 for 5-1:0.0 on minor 3
[ 1562.058947][ T2350] [drm] Initialized udl on minor 3
[ 1562.064962][ T2350] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1562.069177][ T2350] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1562.082912][ T2350] usb 5-1: USB disconnect, device number 32
[ 1562.086057][T24407] udl 5-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9
[ 1562.095740][T24407] udl 5-1:0.0: [drm] Cannot find any crtc or sizes
[ 1562.731290][ T7308] overlayfs: missing 'lowerdir'
[ 1563.089574][T24407] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[ 1563.262318][T24407] usb 5-1: config 0 has an invalid interface number: 156 but max is 0
[ 1563.265059][T24407] usb 5-1: config 0 has no interface number 0
[ 1563.267122][T24407] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1563.270774][T24407] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[ 1563.292400][T24407] usb 5-1: config 0 interface 156 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 1563.295735][T24407] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[ 1563.298736][T24407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1563.303453][T24407] usb 5-1: config 0 descriptor??
[ 1563.308160][T24407] gspca_main: spca561-2.14.0 probing abcd:cdee
[ 1563.522626][T24407] spca561 5-1:0.156: probe with driver spca561 failed with error -22
[ 1563.525911][T24407] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[ 1563.528376][T24407] usb 5-1: MIDIStreaming interface descriptor not found
[ 1563.542999][T24407] usb 5-1: USB disconnect, device number 33
[ 1564.109841][ T7360] loop4: detected capacity change from 0 to 512
[ 1564.117660][ T7360] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[ 1564.132537][   T33] audit: type=1326 audit(1755053278.640:603): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.4.17312" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcdd8ebe9 code=0x7ffc0000
[ 1564.140966][   T33] audit: type=1326 audit(1755053278.640:604): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.4.17312" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fafcdd8ebe9 code=0x7ffc0000
[ 1564.156476][   T33] audit: type=1326 audit(1755053278.640:605): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.4.17312" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fafcdd8ebe9 code=0x7ffc0000
[ 1564.180391][ T7360] EXT4-fs (loop4): 1 truncate cleaned up
[ 1564.183646][ T7360] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 1564.188218][   T33] audit: type=1326 audit(1755053278.640:606): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.4.17312" exe="/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fafcdd8ec23 code=0x7ffc0000
[ 1564.199834][   T33] audit: type=1326 audit(1755053278.650:607): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.4.17312" exe="/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fafcdd8d69f code=0x7ffc0000
[ 1564.219525][   T33] audit: type=1326 audit(1755053278.650:608): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7359 comm="syz.4.17312" exe="/syz-executor" sig=0 arch=c000003e syscall=11 compat=0 ip=0x7fafcdd8ec77 code=0x7ffc0000
[ 1564.249489][  T878] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 1564.827328][ T7367] 9pnet_fd: Insufficient options for proto=fd
[ 1565.313238][T24407] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[ 1565.477491][T24407] usb 5-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33
[ 1565.484615][T24407] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1565.492891][T24407] usb 5-1: config 0 descriptor??
[ 1565.717830][T24407] usb 5-1: Cannot read MAC address
[ 1565.724653][T24407] MOSCHIP usb-ethernet driver 5-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71
[ 1565.734084][T24407] usb 5-1: USB disconnect, device number 34
[ 1566.321085][ T7421] loop4: detected capacity change from 0 to 64
[ 1566.331739][ T7421] BFS-fs: bfs_fill_super(): loop4 is unclean, continuing
[ 1566.541851][ T7430] loop4: detected capacity change from 0 to 8192
[ 1566.697981][ T7435] loop4: detected capacity change from 0 to 8
[ 1566.702322][ T7435] SQUASHFS error: Unable to read inode 0x127
[ 1567.641291][ T7471] Invalid option length (1047378) for dns_resolver key
[ 1570.218101][ T7573] netlink: 8 bytes leftover after parsing attributes in process `syz.8.17402'.
[ 1572.162084][ T7642] lo: entered promiscuous mode
[ 1572.170942][ T7641] lo: left promiscuous mode
[ 1576.601505][ T7724] Process accounting resumed
[ 1576.985997][   T12] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[ 1576.990126][   T12] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[ 1577.001261][   T12] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[ 1577.005665][   T12] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[ 1577.979795][ T7799] 9pnet_fd: Insufficient options for proto=fd
[ 1578.342802][ T7826] netlink: 'syz.9.17515': attribute type 10 has an invalid length.
[ 1578.345650][ T7826] netlink: 40 bytes leftover after parsing attributes in process `syz.9.17515'.
[ 1578.349005][ T7826] dummy0: entered promiscuous mode
[ 1578.352571][ T7826] batman_adv: batadv0: Interface activated: dummy0
[ 1578.355819][ T7826] batman_adv: batadv0: Interface deactivated: dummy0
[ 1578.358587][ T7826] batman_adv: batadv0: Removing interface: dummy0
[ 1578.369392][ T7826] bridge0: port 2(dummy0) entered blocking state
[ 1578.371972][ T7826] bridge0: port 2(dummy0) entered disabled state
[ 1578.374654][ T7826] dummy0: entered allmulticast mode
[ 1578.379281][ T7826] bridge0: port 2(dummy0) entered blocking state
[ 1578.381960][ T7826] bridge0: port 2(dummy0) entered forwarding state
[ 1578.614627][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.4.17523'.
[ 1579.432801][ T7870] fuse: Bad value for 'fd'
[ 1580.017103][ T7898] ==================================================================
[ 1580.019963][ T7898] BUG: KASAN: use-after-free in xfrm_alloc_spi+0x570/0xf30
[ 1580.022503][ T7898] Read of size 4 at addr ffff88803f99a4c4 by task syz.4.17545/7898
[ 1580.025878][ T7898] 
[ 1580.026929][ T7898] CPU: 0 UID: 0 PID: 7898 Comm: syz.4.17545 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[ 1580.026943][ T7898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1580.026949][ T7898] Call Trace:
[ 1580.026954][ T7898]  <TASK>
[ 1580.026958][ T7898]  dump_stack_lvl+0x189/0x250
[ 1580.026972][ T7898]  ? __kasan_check_byte+0x12/0x40
[ 1580.026987][ T7898]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1580.026998][ T7898]  ? lock_release+0x4b/0x3e0
[ 1580.027013][ T7898]  ? __virt_addr_valid+0x4a5/0x5c0
[ 1580.027024][ T7898]  print_report+0xca/0x240
[ 1580.027034][ T7898]  ? xfrm_alloc_spi+0x570/0xf30
[ 1580.027045][ T7898]  kasan_report+0x118/0x150
[ 1580.027056][ T7898]  ? xfrm_alloc_spi+0x570/0xf30
[ 1580.027068][ T7898]  xfrm_alloc_spi+0x570/0xf30
[ 1580.027079][ T7898]  ? xfrm_alloc_spi+0x2a0/0xf30
[ 1580.027093][ T7898]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[ 1580.027106][ T7898]  ? xfrm_find_acq+0x87/0xa0
[ 1580.027119][ T7898]  xfrm_alloc_userspi+0x70b/0xc90
[ 1580.027130][ T7898]  ? apparmor_capable+0x137/0x1b0
[ 1580.027168][ T7898]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[ 1580.027181][ T7898]  ? __nla_parse+0x40/0x60
[ 1580.027194][ T7898]  xfrm_user_rcv_msg+0x7a3/0xab0
[ 1580.027204][ T7898]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[ 1580.027216][ T7898]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1580.027225][ T7898]  ? rcu_is_watching+0x15/0xb0
[ 1580.027235][ T7898]  ? trace_contention_end+0x39/0x120
[ 1580.027244][ T7898]  ? __mutex_lock+0x335/0x1360
[ 1580.027257][ T7898]  netlink_rcv_skb+0x208/0x470
[ 1580.027268][ T7898]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[ 1580.027275][ T7898]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1580.027286][ T7898]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1580.027294][ T7898]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1580.027303][ T7898]  xfrm_netlink_rcv+0x79/0x90
[ 1580.027310][ T7898]  netlink_unicast+0x82f/0x9e0
[ 1580.027320][ T7898]  ? __pfx_netlink_unicast+0x10/0x10
[ 1580.027327][ T7898]  ? netlink_sendmsg+0x642/0xb30
[ 1580.027336][ T7898]  ? skb_put+0x11b/0x210
[ 1580.027346][ T7898]  netlink_sendmsg+0x805/0xb30
[ 1580.027356][ T7898]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1580.027366][ T7898]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1580.027375][ T7898]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1580.027384][ T7898]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1580.027393][ T7898]  __sock_sendmsg+0x21c/0x270
[ 1580.027401][ T7898]  ____sys_sendmsg+0x505/0x830
[ 1580.027412][ T7898]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1580.027423][ T7898]  ? import_iovec+0x74/0xa0
[ 1580.027431][ T7898]  ___sys_sendmsg+0x21f/0x2a0
[ 1580.027441][ T7898]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1580.027457][ T7898]  ? __fget_files+0x2a/0x420
[ 1580.027468][ T7898]  ? __fget_files+0x3a0/0x420
[ 1580.027480][ T7898]  __x64_sys_sendmsg+0x19b/0x260
[ 1580.027490][ T7898]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1580.027501][ T7898]  ? rcu_is_watching+0x15/0xb0
[ 1580.027509][ T7898]  ? do_syscall_64+0xbe/0x3b0
[ 1580.027519][ T7898]  do_syscall_64+0xfa/0x3b0
[ 1580.027527][ T7898]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1580.027535][ T7898]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1580.027543][ T7898]  ? exc_page_fault+0x9f/0xf0
[ 1580.027551][ T7898]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1580.027559][ T7898] RIP: 0033:0x7fafcdd8ebe9
[ 1580.027567][ T7898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1580.027574][ T7898] RSP: 002b:00007fafcec35038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1580.027583][ T7898] RAX: ffffffffffffffda RBX: 00007fafcdfb5fa0 RCX: 00007fafcdd8ebe9
[ 1580.027589][ T7898] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005
[ 1580.027595][ T7898] RBP: 00007fafcde11e19 R08: 0000000000000000 R09: 0000000000000000
[ 1580.027600][ T7898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1580.027606][ T7898] R13: 00007fafcdfb6038 R14: 00007fafcdfb5fa0 R15: 00007ffd49401b88
[ 1580.027615][ T7898]  </TASK>
[ 1580.027618][ T7898] 
[ 1580.160277][ T7898] The buggy address belongs to the physical page:
[ 1580.162411][ T7898] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3f99a
[ 1580.165205][ T7898] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 1580.167463][ T7898] raw: 00fff00000000000 dead000000000100 dead000000000122 0000000000000000
[ 1580.171025][ T7898] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[ 1580.174692][ T7898] page dumped because: kasan: bad access detected
[ 1580.177346][ T7898] page_owner tracks the page as freed
[ 1580.179482][ T7898] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 7720, tgid 7719 (syz.4.17467), ts 1575581220239, free_ts 1575643276129
[ 1580.187283][ T7898]  post_alloc_hook+0x240/0x2a0
[ 1580.189244][ T7898]  get_page_from_freelist+0x21e4/0x22c0
[ 1580.191557][ T7898]  __alloc_frozen_pages_noprof+0x181/0x370
[ 1580.193881][ T7898]  alloc_pages_mpol+0x232/0x4a0
[ 1580.195944][ T7898]  alloc_pages_noprof+0xa9/0x190
[ 1580.197974][ T7898]  __vmalloc_node_range_noprof+0x97d/0x12f0
[ 1580.200502][ T7898]  __vmalloc_noprof+0xb1/0xf0
[ 1580.202334][ T7898]  pcpu_create_chunk+0x34c/0xbf0
[ 1580.204402][ T7898]  pcpu_alloc_noprof+0x789/0x16b0
[ 1580.206534][ T7898]  bpf_map_alloc_percpu+0xbc/0x1b0
[ 1580.208728][ T7898]  prealloc_init+0x225/0x630
[ 1580.210749][ T7898]  htab_map_alloc+0x6ce/0xc70
[ 1580.212842][ T7898]  map_create+0xaa3/0x14d0
[ 1580.214743][ T7898]  __sys_bpf+0x60f/0x870
[ 1580.216590][ T7898]  __x64_sys_bpf+0x7c/0x90
[ 1580.218535][ T7898]  do_syscall_64+0xfa/0x3b0
[ 1580.220469][ T7898] page last free pid 6548 tgid 6548 stack trace:
[ 1580.223083][ T7898]  __free_frozen_pages+0xbc4/0xd30
[ 1580.225255][ T7898]  vfree+0x25a/0x400
[ 1580.226886][ T7898]  pcpu_balance_free+0x6ae/0x940
[ 1580.228866][ T7898]  pcpu_balance_workfn+0xd01/0xe00
[ 1580.230855][ T7898]  process_scheduled_works+0xae1/0x17b0
[ 1580.233061][ T7898]  worker_thread+0x8a0/0xda0
[ 1580.235049][ T7898]  kthread+0x711/0x8a0
[ 1580.236814][ T7898]  ret_from_fork+0x3fc/0x770
[ 1580.238757][ T7898]  ret_from_fork_asm+0x1a/0x30
[ 1580.240670][ T7898] 
[ 1580.241652][ T7898] Memory state around the buggy address:
[ 1580.243930][ T7898]  ffff88803f99a380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1580.246999][ T7898]  ffff88803f99a400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1580.250068][ T7898] >ffff88803f99a480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1580.253311][ T7898]                                            ^
[ 1580.255924][ T7898]  ffff88803f99a500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1580.259218][ T7898]  ffff88803f99a580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 1580.262472][ T7898] ==================================================================
[ 1580.266073][ T7898] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 1580.269111][ T7898] CPU: 0 UID: 0 PID: 7898 Comm: syz.4.17545 Not tainted 6.16.0-syzkaller-11895-gcca7a0aae895-dirty #0 PREEMPT(full) 
[ 1580.274225][ T7898] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[ 1580.278544][ T7898] Call Trace:
[ 1580.280007][ T7898]  <TASK>
[ 1580.281275][ T7898]  dump_stack_lvl+0x99/0x250
[ 1580.283239][ T7898]  ? __asan_memcpy+0x40/0x70
[ 1580.285202][ T7898]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1580.287443][ T7898]  ? __pfx__printk+0x10/0x10
[ 1580.289425][ T7898]  vpanic+0x281/0x750
[ 1580.291168][ T7898]  ? __pfx_vpanic+0x10/0x10
[ 1580.293164][ T7898]  ? irqentry_exit+0x74/0x90
[ 1580.295222][ T7898]  panic+0xb9/0xc0
[ 1580.296884][ T7898]  ? __pfx_panic+0x10/0x10
[ 1580.298801][ T7898]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[ 1580.301338][ T7898]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 1580.303900][ T7898]  ? xfrm_alloc_spi+0x570/0xf30
[ 1580.305990][ T7898]  check_panic_on_warn+0x89/0xb0
[ 1580.308159][ T7898]  ? xfrm_alloc_spi+0x570/0xf30
[ 1580.310287][ T7898]  end_report+0x78/0x160
[ 1580.312159][ T7898]  kasan_report+0x129/0x150
[ 1580.314166][ T7898]  ? xfrm_alloc_spi+0x570/0xf30
[ 1580.316327][ T7898]  xfrm_alloc_spi+0x570/0xf30
[ 1580.318413][ T7898]  ? xfrm_alloc_spi+0x2a0/0xf30
[ 1580.320558][ T7898]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[ 1580.322816][ T7898]  ? xfrm_find_acq+0x87/0xa0
[ 1580.324804][ T7898]  xfrm_alloc_userspi+0x70b/0xc90
[ 1580.326975][ T7898]  ? apparmor_capable+0x137/0x1b0
[ 1580.329199][ T7898]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[ 1580.331625][ T7898]  ? __nla_parse+0x40/0x60
[ 1580.333529][ T7898]  xfrm_user_rcv_msg+0x7a3/0xab0
[ 1580.335713][ T7898]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[ 1580.338120][ T7898]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 1580.340626][ T7898]  ? rcu_is_watching+0x15/0xb0
[ 1580.342712][ T7898]  ? trace_contention_end+0x39/0x120
[ 1580.345014][ T7898]  ? __mutex_lock+0x335/0x1360
[ 1580.347007][ T7898]  netlink_rcv_skb+0x208/0x470
[ 1580.349064][ T7898]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[ 1580.351452][ T7898]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1580.353735][ T7898]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1580.355938][ T7898]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1580.358170][ T7898]  xfrm_netlink_rcv+0x79/0x90
[ 1580.360161][ T7898]  netlink_unicast+0x82f/0x9e0
[ 1580.362250][ T7898]  ? __pfx_netlink_unicast+0x10/0x10
[ 1580.364530][ T7898]  ? netlink_sendmsg+0x642/0xb30
[ 1580.366647][ T7898]  ? skb_put+0x11b/0x210
[ 1580.368489][ T7898]  netlink_sendmsg+0x805/0xb30
[ 1580.370610][ T7898]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1580.372883][ T7898]  ? aa_sock_msg_perm+0xf1/0x1d0
[ 1580.375060][ T7898]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[ 1580.377231][ T7898]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1580.379525][ T7898]  __sock_sendmsg+0x21c/0x270
[ 1580.381515][ T7898]  ____sys_sendmsg+0x505/0x830
[ 1580.383457][ T7898]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1580.385624][ T7898]  ? import_iovec+0x74/0xa0
[ 1580.387539][ T7898]  ___sys_sendmsg+0x21f/0x2a0
[ 1580.389581][ T7898]  ? __pfx____sys_sendmsg+0x10/0x10
[ 1580.391690][ T7898]  ? __fget_files+0x2a/0x420
[ 1580.393520][ T7898]  ? __fget_files+0x3a0/0x420
[ 1580.395403][ T7898]  __x64_sys_sendmsg+0x19b/0x260
[ 1580.397495][ T7898]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[ 1580.399311][ T7898]  ? rcu_is_watching+0x15/0xb0
[ 1580.400922][ T7898]  ? do_syscall_64+0xbe/0x3b0
[ 1580.402506][ T7898]  do_syscall_64+0xfa/0x3b0
[ 1580.404025][ T7898]  ? lockdep_hardirqs_on+0x9c/0x150
[ 1580.405787][ T7898]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1580.407780][ T7898]  ? exc_page_fault+0x9f/0xf0
[ 1580.409345][ T7898]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 1580.411269][ T7898] RIP: 0033:0x7fafcdd8ebe9
[ 1580.412700][ T7898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 1580.419321][ T7898] RSP: 002b:00007fafcec35038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1580.422552][ T7898] RAX: ffffffffffffffda RBX: 00007fafcdfb5fa0 RCX: 00007fafcdd8ebe9
[ 1580.425246][ T7898] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000005
[ 1580.427870][ T7898] RBP: 00007fafcde11e19 R08: 0000000000000000 R09: 0000000000000000
[ 1580.430541][ T7898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1580.433581][ T7898] R13: 00007fafcdfb6038 R14: 00007fafcdfb5fa0 R15: 00007ffd49401b88
[ 1580.436738][ T7898]  </TASK>
[ 1580.438652][ T7898] Kernel Offset: disabled
[ 1580.440157][ T7898] Rebooting in 86400 seconds..

VM DIAGNOSIS:
02:32:06  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000007a RBX=000000000000007a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000001400 RDI=0000000000001401 RBP=00000000000003f8 RSP=ffffc9000646e9f0
R8 =ffff888107d30237 R9 =1ffff11020fa6046 R10=dffffc0000000000 R11=ffffffff854e72a0
R12=dffffc0000000000 R13=ffffffff99af190a R14=ffffffff99de64e0 R15=0000000000000000
RIP=ffffffff854e731c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fafcec356c0 ffffffff 00c00000
GS =0000 ffff8880b8624000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fafcec34fc8 CR3=00000000373f6000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fafcdf87498 00007fafcdf87470 XMM03=00007fafcdf874a8 00007fafcdf874a0
XMM04=00007fafceaed100 00007fafcdf87460 XMM05=00007fafcdf87478 00007fafcdf874c0
XMM06=00007fafcdf874b8 00007fafcdf874b0 XMM07=00007fafcdf874a8 00007fafcdf874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fafcde12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=c53588ffc3e45800 RBX=ffffffff81968308 RCX=c53588ffc3e45800 RDX=0000000000000001
RSI=ffffffff8d9b4408 RDI=ffffffff8be32600 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa34230 R13=0000000000000001 R14=0000000000000001 R15=1ffff110200d0000
RIP=ffffffff8b7893f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c24000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c2de274 CR3=0000000028f2a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000001 XMM01=0004000c8c030404 000c88030402000c
XMM02=effe08000c980307 85f49608000c9003 XMM03=0302100011b00320 100010900304ddfe
XMM04=080011e003001000 11d00300100011c0 XMM05=0120100011800401 0000040806060168
XMM06=d400080011e00300 100011d003001000 XMM07=11c00302100011b0 0320100010900304
XMM08=ddfeeffe08000c98 030785f49608000c XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
