last executing test programs:

10.341863686s ago: executing program 0 (id=259):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r0, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r1, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x0, 0x43, 0x0, "0aaa8ff5a212a1bd3bbda613efd9c8b4965dca66db42f66a86e5781cf86717055a7c1d13e6507e5a774ef95f2fc1b947e03d5c8379123f2f1d34b0882e83d41b67cb9ff147c6d33a097d2269351b3ed3"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8)
setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb289519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
listen(r2, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r3, 0x0)
setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x4, @loopback}}, 0x0, 0x0, 0x3e, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb4285bf274bca67efbff2fdf98328de9434031348589bf28046d14810000000e3ffffff00"}, 0xd8)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
listen(r4, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
socket$tipc(0x1e, 0x2, 0x0)
bind$tipc(0xffffffffffffffff, 0x0, 0x0)
listen(r5, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1)
syz_open_procfs(0x0, 0x0)
syz_mount_image$ocfs2(&(0x7f0000000000), &(0x7f0000004480)='./file0\x00', 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f61636c2c636f686572656e63793d66756c6c2c6865617274626561743d6e6f6e652c6a6f75726e616c5f6173796e635f636f6d6d69742c6e6f757365725f78617474722c008e1d54758732e066b2e39f7bd9e6e2dab460"], 0x1, 0x4460, &(0x7f00000044c0)="$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")

10.049447434s ago: executing program 0 (id=261):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="05000000070000004300000001"], 0x50)
bpf$BPF_GET_PROG_INFO(0x4, &(0x7f0000000140)={r0, 0xe0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff99, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10)

9.92231569s ago: executing program 0 (id=262):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@bridge_newvlan={0x18, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}}, 0x18}, 0x1, 0x5502000000000000}, 0x23f58e5b666a3f02)

9.921840353s ago: executing program 0 (id=263):
syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000000380)='./bus\x00', 0x8, &(0x7f0000000240)={[{@space_cache_v1}, {@autodefrag}, {@ref_verify}, {@compress_algo={'compress', 0x3d, 'no'}}, {@clear_cache}, {@discard_sync}, {@space_cache_v1}, {@barrier}, {@nospace_cache}]}, 0x1, 0x55ae, &(0x7f000000ac40)="$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")
r0 = open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x8005, 0x0, 0x0, 0x19, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x8]})
r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x80044940, &(0x7f0000001b00)={<r3=>0x0, ""/256, 0x0, <r4=>0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, <r5=>0x0, 0x0, <r6=>0x0})
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0x1a4243c, &(0x7f0000000680)=ANY=[@ANYRES16=r6, @ANYRES64=r5, @ANYBLOB="12a4095a2aac12f0bfcb206d982e44066381388d27f14002d8d7431d3947f6399c7ff9f5193fc0398653e5a67bbb319f02bf4ac6f6ccd5acbfe1350cc3a6d2d48cf6c089ddf67171ffb3b15988e7b394c5daf3e12ca05e4dbdad7edd45f10cbc296a53a530d4c2d203ee650d5fff3a9b5aae78794fe84327e508172cdd72eeff5af4d6db9379bef20dde8e64b91d31a84ce8a7598bb78cc85108874811fc650f0520a5", @ANYRESOCT=r5, @ANYRESDEC=r3, @ANYRES16=r4, @ANYRESDEC=0x0, @ANYBLOB="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", @ANYRES8, @ANYRES16], 0x0, 0x0, &(0x7f0000000000))
ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f0000000f80)={r3, 0x3})

9.464486283s ago: executing program 0 (id=272):
r0 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), 0xffffffffffffffff)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100000000000000eca20ae40000440003"], 0x58}}, 0x0)

9.161750446s ago: executing program 0 (id=280):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x2018008, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2f93edc77863113d68e33456dfe3c025878b46bc73df14f991a8f7a341a10f44c05fc1c37ad73b0239a18733e7436f3b54758b4ce59af971d50e53c14277216c0bba6ad052fa7a6d77f0b19c8b2381abc46dfa7e4bc6c37bbab3f908f48d1a6055a6457c5d503502300a69dc517cc08b955df0d19ae4c120c512eceffbf3fc154e4ba08f2497b14e95cfdef1c26e8623eab9941404ca9d84df9a2c44e453a0cfffbf23e5bf1e872ee040a582eda3d84714e82dde4c02836e5f66775f4df1bdcfbc28eb5ced2b332944d3ab2b9efe3cbb2111fe"], 0xfe, 0x4b1, &(0x7f0000001d00)="$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")
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)

9.027508683s ago: executing program 32 (id=280):
syz_mount_image$udf(&(0x7f0000000040), &(0x7f0000000480)='./file0\x00', 0x2018008, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="2f93edc77863113d68e33456dfe3c025878b46bc73df14f991a8f7a341a10f44c05fc1c37ad73b0239a18733e7436f3b54758b4ce59af971d50e53c14277216c0bba6ad052fa7a6d77f0b19c8b2381abc46dfa7e4bc6c37bbab3f908f48d1a6055a6457c5d503502300a69dc517cc08b955df0d19ae4c120c512eceffbf3fc154e4ba08f2497b14e95cfdef1c26e8623eab9941404ca9d84df9a2c44e453a0cfffbf23e5bf1e872ee040a582eda3d84714e82dde4c02836e5f66775f4df1bdcfbc28eb5ced2b332944d3ab2b9efe3cbb2111fe"], 0xfe, 0x4b1, &(0x7f0000001d00)="$eJzs201sVNUbx/HfM3c6TIf+/5YXCxgCTTSxgkBfsEBqYnix0YQXLVQj8SWVTrHSdkinKCUgLNWdC5Yu3bpwZdwaEpfGhcEYFibIxs2sxB3m3LlvM5TOjG1nKP1+CJx7zzx3OOc8c+ecM5kRAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQjrx6uLfPWt0KAADQTCdPj/QOMP8DALCmnGH/DwAAsJaYPP0u054LJTvhn5dlj0/OXLo8emx44cvaTaaUPD/e/c329Q/sf2nwwMGwXPz65bZNp06fOdx9tDB9cTZfLObHu0dnJs8VxvN1P8NSr6+2yx+A7ukLl8YnJord/XsHKh6+3Hlv3fquzqHB945mwtjRY8PDpxMx6bb//L8/5FEr/Iw8vSDTx99/ayclpbT0sajx2llp7X4ndvmdGD027HdkanJsZs49aKkgKlU5JplwjJqQiyVJSa5dllmePVubPP0g05F9JTslyQvHYbf/wXBd7WmFtNu6SurRKsjZY2ydPH0g0619nXojGFc//xnpaqsbhxWXDu7/gpXsTf/9wN1P7m3z+Fvdr89MFBKxlgruqNU+PzTTY/7elJWnU/4dX7IR7Wx1c9Bk7fI0LVPmq0/8dYX8delTQwd27DyUXGFsqfE8LnZvcHPVMye3BUsHS7k/y98v1Cdrnv6U6f5vWf+8J5wDpBsPFrvwj6Y0DyvNPE3J9M+1klnVvtRL7O8jq33uX9n2t2ePFi7Oz06e/2huwcdz2cMfFudmx84t/HB57+ola2rtY6ulGtuS5ay84/v801J0XbAH+F/5LG7NN1fj10JPVRlKvn7qOa57F9vAOsq1yczTXZkm3t9anmeUa3hs1gKX/2GZiqWfLcx0kP90+SyR/5fj8ctaZRnxc/v/8uda4Vpi29nNj6pfify7Nrn8vyPTkb+3Bp9plPPvVcW6uC6Z3r25PYhLZVxcOuxO+RknJqfyvS72gUwbfwpj5cfmgthNcWyfiy3K9MWtytj1QezmOLbfxd6W6c6vC8c+HccOuNh5l6873WFszsXuCGK74ti95wpT47WG1eW/X6a3r79mYZ8fmf/E/X+jqow8lPPFj5cr/52JuhtBXs8G+U/XyP+XMs3/tT3stz/24ctqg/9vnH+3Vv7uZmVsuKHcGMf21dutVnP53yDTvVduR30O+hacxhlK5v+ZdGUZjWuL8r8hUdcZtCvT4FisRcX5KxfGpqbysxxwwAEH0UGr35nQDG7+H3Gz+qBn4TommP87ymfxiun+Z/H8P1RVRlo0/29M1A0Fq5a2tJSdm77YtkXKFuev7JmcHjufP5+fGdg/2Nt/aH/vwMG2TLi4i4/qHrsngcv/bpmu/fhLtI+pXP8tvP7PVZWRFuV/U7JPFeuauodiTXL575Bp8O7taL+52Po/3P/3PFtZRvdfi/K/OVHXGbSro8GxAAAAAAAAAAAAAAAAAIDVJGeenpPp8siLFv6GqJ7v/41XlZHl//5X+YfJNb7/1ZWoG2/S7xoaGmgAAAAAAAAAAIAmScnT1zI9r5JddxUd0olkiSfavwEAAP//G6xIAA==")
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xf8}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000)
mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_open_dev$vim2m(&(0x7f0000000040), 0x7, 0x2)

1.928008827s ago: executing program 1 (id=379):
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b51811", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x48)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r0}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x4, 0x4}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xa, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6, 0x9, 0x0, 0x6, 0xe7030000}, {0x4, 0x0, 0x0, 0x6}}, [@printk={@llu, {0x5, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {}, {0x14}}], {{0x4, 0x1, 0x5, 0x3}, {0x5, 0x0, 0xb, 0x3, 0x0, 0x2}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)

1.484641563s ago: executing program 3 (id=381):
r0 = syz_open_dev$video(&(0x7f0000000000), 0x10a7, 0x80)
ioctl$VIDIOC_S_FMT(r0, 0xc0d05640, &(0x7f0000000340)={0x9, @pix_mp={0x7, 0x3781e4b9, 0x33565348, 0x5, 0x2, [{0x8, 0xc81}, {0xfffffff8, 0x5}, {0x1, 0x5}, {0x40, 0x7}, {0x0, 0xd}, {0xfffffffc, 0x4}, {0xdad1, 0x6}, {0x10, 0x7}], 0x2, 0x0, 0x2, 0x1, 0x2}})

1.483567017s ago: executing program 3 (id=382):
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x3, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x2, 0x1}]}]}, {0x0, [0x2e]}}, 0x0, 0x2f, 0x0, 0x1}, 0x28)

1.410651443s ago: executing program 3 (id=383):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000880)='percpu_alloc_percpu\x00', r1}, 0x18)
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})

1.348723735s ago: executing program 3 (id=384):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8e}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1)
sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000)
mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000100)='affs\x00', 0x200000, 0x0)
r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000280), 0x40900, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000000)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x0, r1, 0x0}])
chdir(0x0)
r2 = open(0x0, 0x0, 0x0)
ioctl$AUTOFS_IOC_READY(r2, 0xc0089364, 0x800000000000001)
eventfd2(0xa52, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f0000000980)={0x2020}, 0x2020)

849.458515ms ago: executing program 1 (id=385):
r0 = syz_open_dev$video(&(0x7f00000000c0), 0xff, 0x40002)
r1 = dup(r0)
ioctl$vim2m_VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000940))

787.839918ms ago: executing program 1 (id=386):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x109801, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x74000000)
write$dsp(r0, &(0x7f0000002000)='`', 0x88020)

787.711589ms ago: executing program 1 (id=387):
r0 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private1}}}, 0x108)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2d, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @private2}}}, 0x108)

698.806645ms ago: executing program 1 (id=388):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@local})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x3})
r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9})
close(r1)
close(0x3)

597.569164ms ago: executing program 1 (id=389):
r0 = memfd_create(&(0x7f0000000540)='\x01\xfd\xae.+\xa6\x8c\xb6?2\x199\x94S,|x?Ue[\xbd\xe1!\x033\xbc\'#\xff\x17\x9b%\xf3[d \x06\x00\x00\x00\x97A\xc2\xd8\xf0Uq!\xe4\xc4\xb1\xa2\x1c\xffC;\x94Q\r\xb6}\x9c\xecC\v\xcf\xeb\xe4\x9aR\xe5,\x82\x03\x00\x19\x8d\xe8\xc6\xb9\xe4\xb4\x99\x8a\x19P\xb8\x8cx\b\x99\x04R\x05\xaf\xa2\xea5\f\xcc\x1a\x9b\x00Uf\xa5\xf7\x80Tgiz\nX\b\x91\xfd0\x8e\xb6\xa3\v#\x16\xdf\xb4\xc0\xe6\xb4\xef\xa8i\xd8\xa2\xd2(\x98\x9bA\x8f\x13\xeb\xf4b/\xef!\x8f\xf6]-\xf1k\xb62\x89gEv\x13\xf4\xc7\xb2\xf5\\\x17\x90\xb5\xa6\xa8\xb8o\x0f\xe2 \xe7\x9c$\xd7\xf2@\xf7cdv[\t\x00\x8d\xf3\xcc1\r$\x1e\xff\xf0P\xb2\x97\xb8\xbc\xeb\x91\x87\x8bu\xbf\xd4\'\xff\x1f\f\x016\x9dQ\xeeT\xe8\bY\x00\xb2\x06\xa6\xbel\x9b.o\xbe\x80\x9dx\xd5O\xd6h\\I\xc9\x8d\a\x1d\xc9k\x83\xfc\xa4\xad4\x03\xa2X\x0f\x82\xdbs\xc7\x83L\x9e\xa2\xd1\xb3\xac\x8d\xd8\xb4\xb4\xea\x90Q\xd8\xc7\xeb%\x8bOp\x1ab\x96\xcf\xbb\x15\xcf\xfcN\xed\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00s\xaf\xa2\x14]p+\x96\x1ei|n\xda\xee\\\xae\x96*\x82*\xb8j\xda\xaa\x14\x1f\x1d\xf8\xf8\xae\xfcH\xc4\xb3j\xe8\xcfO\xef\x0e\xafe\xb5*\x89\x18\xb2w\x96\b\x1by\xeaT\xdd\xb3g6\xbc\x85\xb2Y\xccv\x06\x00\x00\x00\xc5e\x90\xc51\x9f\v_# \b\xa5\xbcP,|\xe9\xd6s\x1f\x1f\xbe\xd3\x80\xb1\xa8 \xce|df\x903\v\x02\xea.\x03X\xb5\xe4,8\xb7\xadEI\xdcA\xa7\xcc\xd7\xf9n\x1b\x95\xf8\x11Z\xe6:\x03\xce\xfe\x02\x8ctdy~_oC\x9e\xef\xf0\xa2K\xe9;\x8e:\x01\x03C\x92\xeb\x16\x1c\xbf\xbe\xef\xccUxhg\xdfY\xe6\x83\xa6z\xff\x01\x9d o_{!O\xaajU\x84 \xe9\xb59r\x9cw\x18Z\xd3\xcd\x0e\xba\\\xdb\xf0\xe1\x86\t\xaf\vi\xdc\xbf?\xf5\n\xbd^\x05\xc0\xceuC}\xa8\xc7\xad\x86\xd7\x15&\xb9]1\x05J\x96\xf0\x84\xc1\f\xa6p\x96?\x00\x00\x00\x00\x00\x00\x00\x12\x88\xc8\x9c\xc9Cn\xd4\xa47V\'+\xcc\xbf\r\xa9\x10\x1d\xcf\xebKlb\xe5:\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00G\xdf\xbb\xc0_\x99F\xf4n]\x14\xbc\xcd\xd3\x9f\x9fe\xc5\xe6\xe8Mb\xc6\x82\x82\xcb\xcaXe\xe1\xa2\xaa\x02\x86\xb8\x18\xe2C\xeb\xa9\x17&\x01&\'w\xa1t0\x80\xf0\x93\x80\x9f\x9b\xe0\x9f\xea\xb9\x9eD]#V\xda\x92\xca\xc6\xfa.\xd6\xe31\xfe\xe8\x02\xebX\xbd\nz\x01O\xd3r\xa2\xa9u\x93>m\xd7q\'\xdf\xfajo\xd8n\xa7\xecJi\xde\xdf\x7f\xe3\xc4*Z 4\xe8S$\xa1H=\xdf\x05\xf3\xe3T\xd1\xdd\xc6f\xa4\xb4\x96\\\xa0\xf9\x0f\x17\x11{\xb6\x9d\xd21\xc1\x90Vj\x13r\x00\x00\xde\x03\xab\xff\x8as0\xc6E\xca\"\xd9*\x9a\x15\xb95r\x8f\xaaj\x82\xd6\xd2%\xed\xa2WQ\xec2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xccX\xfdRB\xffU\xe9\xfa\x1f\xf6\xce\b\xde@\x061\xc6z\xe4\xe0\xc9?\xa7\x94>\x9c\xd1\xa5o\x04\xaaim\xae\xfe\xc7f\xa3\x96\xd7\xb4c)r{\r#\xddI&\n\xf2\xec\xd4\xff\x9f\x136zZ-2\x80\xfbH+\x9b8\xf3\xed\xdf\xa2my\xb28c[\xc3\xfe\xb5M\x84\x97\xa5\'s\xe9\xdc=)I\xabLt2\x9c\v\xd9S', 0x6)
fallocate(r0, 0x0, 0x9, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x5, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000f3ffffffff4f89bde08334ed692a002c08ff1a92d4a964b11e44b0576dba48baf8c1abdabe5d40d0257a7c9d2a4039228f68cc53760cda77df6304000000cb50cc290a32f42ad54a530834"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = socket$unix(0x1, 0x1, 0x0)
pipe2$watch_queue(&(0x7f0000000040), 0x80)
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010200000000000000020000000900010073797a300000000040000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000000014000480080001400000000008000240000000002c000000030a03000000000000000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x400c0d1}, 0x0)
dup(0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'batadv_slave_1\x00'})
dup(0xffffffffffffffff)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000004050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000c08000240000000000900010073797a300000000014000000110001"], 0xf8}, 0x1, 0x0, 0x0, 0x40010}, 0x0)
r7 = eventfd2(0x400001, 0x0)
write$eventfd(r7, 0x0, 0x0)

597.342103ms ago: executing program 2 (id=390):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r0)
sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x20, r1, 0x821, 0x70bd2c, 0x2ddfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40480c4)

420.28646ms ago: executing program 2 (id=391):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.net/devices.allow\x00', 0x2, 0x48)
write$cgroup_devices(r0, &(0x7f00000001c0)=ANY=[@ANYBLOB='b *:* wmm'], 0x9)

309.949677ms ago: executing program 2 (id=392):
r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net\x00')
getdents64(r0, &(0x7f0000000100)=""/80, 0x2f)
getdents(r0, 0x0, 0x3b)

219.677055ms ago: executing program 3 (id=393):
syz_mount_image$msdos(&(0x7f00000001c0), &(0x7f0000000080)='./file1\x00', 0x8, &(0x7f0000000500)={[{@dots}, {@fat=@check_normal}, {@nodots}, {@nodots}, {@nodots}, {@dots}, {@nodots}, {@fat=@quiet}, {@fat=@nfs_nostale_ro}, {@nodots}, {@nodots}, {}, {@dots}, {@fat=@umask={'umask', 0x3d, 0x7fff}}, {@nodots}, {@dots}, {@fat=@tz_utc}, {@fat=@nfs}, {@dots}, {@dots}, {@dots}, {@fat=@flush}]}, 0xfd, 0x1bf, &(0x7f0000000840)="$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")
utime(&(0x7f000001f480)='./file0\x00', 0x0)

219.434934ms ago: executing program 3 (id=394):
syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000500)='./file0\x00', 0x22000844, &(0x7f0000000780)=ANY=[@ANYRES8=0x0, @ANYRESDEC=0x0, @ANYBLOB=',discard,\x00', @ANYRESHEX, @ANYRESOCT=0x0, @ANYRES8, @ANYBLOB="0002001100000000303030303030303030303030303030303030303135322c796f636884c178f94be4ee34617273657439697300926f38", @ANYBLOB="51060c4f1adb6e795b70e7edcdc5cd30e197ceacee351e08a6e2ee4650101fb28229b16aecf828a55c8aa0efd840e40fef6612e7b389eb304c41e39360e1f5cb6f78bd7100bd30bbd42aa24b2dc9171d068e92ac848e65c9", @ANYRES64, @ANYRESDEC], 0x81, 0x1536, &(0x7f00000008c0)="$eJzs3AuYjtX6MPB1r7UexiS9TXIY1r3uhzcNlkmSHBJySJIkSXJKSJokSUgMOSUNSchxkhyGkBymMWmcz4eckyZbmiQJCUnWd7Hbn72/9t79+9f3+X977t91rXfWPc9zr+d+3nuueZ/nua6Zb3qMrNu8Xq2mRCT+EPjrl2QhRIwQYqgQ4hohRCCEqBhXMe7i9qsUJP+xg7A/14NpV7oCdiVx/3M37n/uxv3P3bj/uRv3P3fj/v9n0b9zf+5/7sb9Zyw32za76LU8ct3I+7f5/8vn//l+/fzfwx87KvtD+PP/P0hOuUlfbCh3fc/fkcL9z924/7kb9z934/7nbtz/3I37/5+v5r/Zxv3P3bj/jOVm/wOeRf//MmJ+ecuudB1/6rjCP36MMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxnKJs/4yLYT42/xK18UYY4wxxhhjjLE/j897pStgjDHGGGOMMcbY/30gpFBCi0DkEXlFjMgnYsVVIr+4WhQQ14iIuFbEietEQXG9KCQKiyKiqIgXxURxYQQKK0iEooQoKaLiBlFK3CgSRGlRRpQVTpQTieImUV7cLCqIW0RFcauoJG4TlUUVUVVUE7eL6uIOUUPUFLXEnaK2qCPqinriLlFf3C0aiHtEQ3GvaCTuE43F/aKJeEA0FQ+KZuIh0Vw8LFqIR0RL0Uq0Fm1E2/9W/guij3hR9BX9RLLoLwaIl8RAMUgMFkPEUPGyGCZeEcPFqyJFjBAjxWtilHhdjBZviDFirBgn3hTjxQQxUUwSk8UUkSreElPF22KaeEdMFzPETDFLpInZYo54V8wV88R88Z5YIN4XC8UisVgsEeniA5EhlopM8aFYJj4SWWK5WCFWilVitVgj1op1Yr3YIDaKTWKz2CK2im3iY7Fd7BA7xS6xW+wRe8UnYp/4VOwXn4ls8fnvzD/zf+T3BAECJEjQoCEP5IEYiIFYiIX8kB8KQAGIQATiIA4KQkEoBIWgCBSBeIiH4lAcEBAICEpACYhCFEpBKUiABCgDZcCBg0RIhPJwM1SAClARKkIlqASVoQpUgWpQDapDdagBNaAW1ILaUBvqQl24C+6Cu6EBNICG0BAaQSNoDI2hCTSBptAUmkEzaA7NoQW0gJbQElpDa2gLbaEdtIP20B46QkfoBJ2gM3SGJEiCLtAFukJX6AbdoDt0hx7QA3pCL+gFL8AL8CK8CP2gtuwPA2AADISBMBiGwBB4GYbBK/AKvAopMAJGwmvwGrwOo+E0jIGxMA7GQXU5ASbCJCA5BVIhFabCVJgG02A6zIAZMAvSYDbMgTkwF+bBPHgPFsD7Z9+HRbAIlkA6pEMGLIVMyIRlcAayYDmsgJWwClbDKlgL62AtbICNsAE2w2bYClvhY/gYdsAO2AW7YA/sgU/gE/gUPoUUyIZsOAAH4CAchENwCHIgBw7DYTgCR+AoHIVjcAyOwwk4CSfgFJyC03AGzsJZOAfn4Dw8F/9Vsz2l16cIeZGWWuaReWSMjJGxMlbml/llAVlARmRExsk4WVAWlIVkIVlEFpHxMl4Wl8UlSpQkQ1lClpBRGZWlZCmZIBNkGVlGOulkokyU5WV5WUFWkBXlrbKSvE1WllVkB1dNVpPVZUdXQ9aUtWQtWVvWkXVlPVlP1pf1ZQPZQDaUDWUj2Ug2lvfLJrI/DIYH5cXONJcjoIUcCS1lK9latpGvw6OynRwN7WUH2VE+LsfCGOgs27kk+ZTsIidCV/mMnATPyu5yCvSQz8uespfsLV+QfWR711f2k9OhvxwgZ8FAOUgOlkPkXKgjL3asrnxVpsgRcqR8TS6B1+Vo+YYcI8fKcfJNOV5OkBPlJDlZTpGp8i05Vb4tp8l35HQ5Q86Us2SanC3nyHflXDlPzpfvyQXyfblQLpKL5RKZLj+QGXKpzJQfymXyI5kll8sVcqVcJVfLNXKtXCfXyw1yo9wkN8stcqvcJj+W2+UOuVPukrvlHrlXfiL3yU/lfvmZzJafywPyL/Kg/EIekl/KHPmVPCy/lkfkN/Ko/FYek9/J4/KEPCm/l6fkD/K0PCPPyh/lOfmTPC9/lhekl0KBkkoprQKVR+VVMSqfilVXqfzqalVAXaMi6loVp65TBdX1qpAqrIqooipeFVPFlVGorCIVqhKqpIqqG1QpdaNKUKVVGVVWOVVOJaqbVHl1s6qgblEV1a2qkrpNVVZVVFVVTd2uqqs7VA1VU9VSd6raqo6qq+qpu1R9dbdqoO5RDdW9qpG6TzVW96sm6gHVVD2omqmHVHP1sGqhHlEtVSvVWrVRbdWjqp16TLVXHVRH9bjqpJ5QndWTKkk9pbqop1VX9Yzqpp5V3dVzqod6XvVUvVRv9bO6oLzqq/qpZNVfDVAvqYFqkBqshqih6mU1TL2ihqtXVYoaoUaq19Qo9board5QY9RYNU69qcarCWqimqQmqykqVb2lpqq31TT1jpquZqiZapZKU7PV4F9Wmv9fyH/7Un6MEOJy/vBLR9+qtqmP1Xa1Q+1Uu9RutUftVXvVPrVP7Vf7VbbKVgfUAXVQHVSH1CGVo3LUYXVYHVFH1FF1VB1Tx9RxdUL9qL5Xp9QP6rQ6o86oH9U5dU6d/+U9EBq01EprHeg8Oq+O0fl0rL5K59dX6wL6Gh3R1+o4fZ0uqK/XhXRhXUQX1fG6mC6ujUZtNelQl9AldVTfoEvpG3WCLq3L6LLa6XI6Ud/0h/N/q762uq1up9vp9rq97qg76k66k+6sO+sknaS76C66q+6qu+luurvurnvoHrqn7ql76966j+6j++q+Olkn6wH6JT1QD9KD9RA9VL+sh+lhergerlN0ih6pR+pRepQerUfrMXqMHqfH6fF6vJ6oJ+rJerJO1al6qp6qp+lperqermfqmTpNp+k5eo6eq+fq+Xq+XqAX6IV6oV6sF+t0na4zdIbO1Jl6mV6ms/RyvVyv1Cv1ar1ar9Vr9Xq9Xm/UG/VmvVln6W16m96ut+udeqferXfrvXqv3qf36f16v87W2fqAPqAP6oP6kD6kc3SOPqwP6yP6iD6qj+pj+pg+ro/rk/qkPqVP6dP6tD6rz+pz+pw+r8/rC/rCxcu+QAYy0IEO8gR5gpggJogNYoP8Qf6gQFAgiASRIC6ICwoG1weFgsJBkaBoEB8UC4oHJsDABhSEQYmgZBANbghKBTcGCUHpoExQNnBBuSAxuCkoH9wcVAhuCSoGtwaVgtuCykGVoGpQLbg9qB7cEdQIaga1gjuD2kGdoG5QL6gy4a/XpPcEDYN7g0bBfUHj4P6gSfBA0DR4MGgWPBQ0Dx4OWgSPBC2DVkHroE3Q9netf1dQP7g7aBD8q/W9P134MdfX9DPJpr8ZYF4yA80gM9gMMUPNy2aYecUMN6+aFDPCjDSvmVHmdTPavGHGmLFmnHnTjDcTzEQzyUw2U0yqectMNW+baeYdM93MMDPNLJNmZps55l0z18wz8817ZoF53yw0i8xis8Skmw9MhllqMs2HZpn5yGSZ5WaFWWlWmdVmjVlr1pn1ZoPZaDaZzWaL2Wq2mY/NdrPD7DS7zG6zx+w1n5h95lOz33xmss3n5oD5izlovjCHzJcmx3xlDpuvzRHzjTlqvjXHzHfmuDlhTprvzSnzgzltzpiz5kdzzvxkzpufzQXjL17cX/x4R40a82AejMEYjMVYzI/5sQAWwAhGMA7jsCAWxEJYCItgEYzHeCyOxfEiQsISWAKjGMVSWAoTMAHLYBl06DARE7E8lscKWAErYkWshJWwMlbGqlgVb8fb8Q68A2tiTbwT78Q6WAfrYT2sj/WxATbAhtgQG2EjbIyNsQk2wabYFJthM2yOzbEFtsCW2BJbY2tsi22xHbbD9tgeO2JH7ISdsDN2xiRMwi7YBbtiV+yG3bA7dsce2AN7Yk/sjb2xD/bBvtgXkzEZB+AAHIgDcTAOxqE4FIfhMByOwzEFU3AkjsRROApH42gcg2NxHL6J43ECTsRJOBmnYCqm4lScitNwGk7H6TgTZ2IapuEcnINzcS7Ox/m4ABfgQlyIi3ExpmM6ZmAGZmImLsNlmIVZuAJX4CpchWtwDa7DdbgBN+Am3IRbcAtuw224HbfjTtyJu3E37sW9uA/34X7cj9mYjQfwAB7Eg3gID2EO5uBhPIxH8AgexaN4DI/hcTyOJ/EknsJTeBpP41k8i+fwJzyPP+MF9BhjpYi1V9n89mpbwF5jY2w++/dxEVvUxttitrg1tpAt/A8xWmsTbGlbxpa1zpazifamX8WVbRVb1Vazt9vq9g5b41dxfXu3bWDvsQ3tvbaevesf4kb2PtvYPmyb2EdsU9vKNrNtbHP7sG1hH7EtbSvb2raxnewTtrN90ibZp2wX+/Sv4gy71K6z6+0Gu9Hus5/as/ZHe8R+Y8/Zn2xf288OtS/bYfYVO9y+alPsiF/F4+ybdrydYCfaSXaynfKreKadZdPs7LdihbBz7by/xXaOffdSnG4/sAtspl1oF9nFdsml+GJNmfZDu8x+ZLPscrvCrrSr7Gq7xq7937WutJvtFrvV7rWf2O12h91pd9ndds+l+OJ57Lef2Wz7uT1sv7YH7Rf2kD1qc+xXl+KL53fUfmuP2e/scXvCnrTf21P2B3vanrl0/hfP/Xv7s71gvRUEJEmRpoDyUF6KoXwUS1dRfrqaCtA1FKFrKY6uo4J0PRWiwlSEilI8FaPiZAjJElFIJagkRekGKkU3UgKVpjJUlhyVo0S6icrTzVSBbqGKdCtVotuoMlWhqlSNbqfqdAfVoJpUi+6k2lSH6lI9uovq093UgO6hhnQvNaL7qDHdT03oAWpKD1Izeoia08PUgh6hltSKWlMbakuPUjt6jNpTB+pIj1MneoI605OURE9RF3qautIz1I2epe70HPWg56kn9aLe9AL1oRepL/WjZOpPA+glGkiDaDANoaH0Mg2jV2g4vUopNIJG0ms0il6n0fQGjaGxNI7epPE0gSbSJJpMUyiV3qKp9DZNo3doOs2gmTSL0mg2zaF3aS7No/n0Hi2g92khLaLFtITS6QPKoKWUSR/SMvqIsmg5raCVtIpW0xpaS+toPW2gjbSJNtMW2krb6GPaTjtoJ+2i3bSH9tIntI8+pf30GWXT53SA/kIH6Qs6RF9SDn1Fh+lrOkLf0FH6lo7Rd3ScTtBJ+p5O0Q90ms7QWfqRztFPdJ5+pgvkSYQQylCFOgzCPGHeMCbMF8aGV4X5w6vDAuE1YSS8NowLrwsLhteHhcLCYZGwaBgfFguLhybE0IYUhmGJsGQYDW8IS4U3hglh6bBMWDZ0YbkwMbwpLB/eHFYIbwkrhreGlcLbwsphlfDhe6uFt4fVwzvCGmHNsFZ4Z1g7rBPWDeuFd4X1w7vDBuE9YcPw3rBCeF/YOLw/bBI+EDYNHwybhQ+FzcOHwxbhI2HLsFXYOmwTtg0fDduFj4Xtww5hx/DxsFP4RNg5fDJMCp8Ku4RP/+b25LB/OCB8KXwp9P4etTi6JJoe/SCaEV0azYx+GF0W/SiaFV0eXRFdGV0VXR1dE10bXRddH90Q3RjdFN0c3RLdGvW+Xl7hwEmnnHaBy+PyuhiXz8W6q1x+d7Ur4K5xEXeti3PXuYLuelfIFXZFXFEX74q54s44dNaRC10JV9JF3Q2ulLvRJbjSrowr65wr5xJdG9fWtXXt3GOuvevgOrrH3ePuCfeEe9I96Z5yXdzTrqt7xnVzz7ru7jn3nHve9XS9XG/3guvjXnR9XT+X7JLdADfADXQD3WA32A11Q90wN8wNd8NdiktxI91IN8qNcqPdaDfGjXHj3Dg33o13E91EN9lNdqku1U11U900N81Nd9PdTDfTpbk0N8fNcXPdXDffzXcLEha4hW6hW+wWu3SX7jJchst0mW6ZW+ayXJZb4Va4VW6VW+PWuHVundvgNrhNbpPb4ra4bW6b2+62u51up9vtdru9bq/b5/a5/W6/y3bZ7oA74A66g+6Q+9LluK/cYfe1O+K+cUfdt+6Y+84ddyfcSfe9O+V+cKfdGXfW/ejOuZ/cefezu+C8S428FZkaeTsyLfJOZHpkRmRmZFYkLTI7MifybmRuZF5kfuS9yILI+5GFkUWRxZElkfTIB5GMyNJIZuTDyLLIR5GsyPLIisjKyKrI6oj3xbaHvoQv6aP+Bl/K3+gTfGlfxpf1zpfzif4mX97f7Cv4W3xFf6uv5G/zlX0VX9U/4lv6Vr61b+Pb+kd9O/+Yb+87+I7+cd/JP+E7+yd9kn/Kd/FP+67+Gd/NP+u7++d8D/+87+l7+d7+Bd/Hv+j7+n4+2ff3A/xLfqAf5Af7IX6of9kP86/44f5Vn+JH+JH+NT/Kv+5H+zf8GD/Wj/Nv+vF+gp/oJ/nJfopP9W/5qf5tP82/46f7GX6mn+XT/Gw/x7/r5/p5fr5/zy/w7/uFfpFf7Jf4dP+Bz/BLfab/0C/zH/ksv9yv8Cv9Kr/ar/Fr/Tq/3m/wG/0mv9lv8Vv9Nv+x3+53+J1+l9/t9/i9/hO/z3/q9/vPfLb/3B/wf/EH/Rf+kP/S5/iv/GH/tT/iv/FH/bf+mP/OH/cn/En/vT/lf/Cn/Rl/1v/oz/mf/Hn/s7/Af7PGGGOMMfZfsqXQv9/e/598T/4yLhoghLh6R9Gcv9+uLr02vvQ6SMZ3igghnurX48G/jdq1k5OTf9k3S4mg5CIhRORyfh5xOV5+6TVJdBDl/2l9g2Svc/Qb60dvFSL273JixOV4uegonri0/s3/Yv1HHx+XUSk8G/dv1l8kRELJyzn5xOX48voV/sX6hdv9Rv35vkgVov3f5eQXl+PL6yeKx8TTIukf9mSMMcYYY4wxxv5qkKza7bfuny/en8fryzl5xeX48v3nP78/Z4wxxhhjjDHG2JX3bK/eTz6alNShG0/+8ATgf0QZPOHJnzC50r+ZGGOMMcYYY3+2yxf9V7oSxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGMs9/pv/YcwIUTy78i60ufIGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMMcYYY4wxxhhjjDHGGGOMXWn/KwAA//80ezWS")

219.271713ms ago: executing program 2 (id=395):
r0 = socket(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="f668000000000000240012800800010067726500180002800400120006000e0003000020060003"], 0x44}}, 0x0)

274.719µs ago: executing program 2 (id=396):
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x4a20, 0x3, 0x2}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0)
mkdir(&(0x7f0000000140)='./control\x00', 0x8)
rmdir(&(0x7f0000000100)='./control\x00')

0s ago: executing program 2 (id=397):
timer_create(0x7, 0x0, &(0x7f00000000c0)=<r0=>0x0)
timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
timer_settime(r0, 0x1, &(0x7f0000000940)={{}, {0x0, 0x989680}}, &(0x7f0000000a00))

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:33877' (ED25519) to the list of known hosts.
syzkaller login: [   49.080011][ T5826] cgroup: Unknown subsys name 'net'
[   49.186647][ T5826] cgroup: Unknown subsys name 'cpuset'
[   49.191352][ T5826] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   50.904061][ T5826] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   54.965202][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   54.968334][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   54.971740][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   54.975094][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   54.978261][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   54.981101][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   54.984844][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   54.995790][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   55.004150][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   55.007418][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   55.014481][   T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   55.017251][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   55.017970][   T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   55.024409][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   55.028126][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   55.208036][ T5849] chnl_net:caif_netlink_parms(): no params data found
[   55.248317][ T5853] chnl_net:caif_netlink_parms(): no params data found
[   55.329880][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.333060][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.336261][ T5853] bridge_slave_0: entered allmulticast mode
[   55.339481][ T5853] bridge_slave_0: entered promiscuous mode
[   55.350221][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.353084][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.356039][ T5849] bridge_slave_0: entered allmulticast mode
[   55.359164][ T5849] bridge_slave_0: entered promiscuous mode
[   55.362494][ T5845] chnl_net:caif_netlink_parms(): no params data found
[   55.368036][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.370719][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.373669][ T5849] bridge_slave_1: entered allmulticast mode
[   55.377189][ T5849] bridge_slave_1: entered promiscuous mode
[   55.380143][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.382879][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.386239][ T5853] bridge_slave_1: entered allmulticast mode
[   55.389293][ T5853] bridge_slave_1: entered promiscuous mode
[   55.438819][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.443626][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.451831][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.456962][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.485700][ T5849] team0: Port device team_slave_0 added
[   55.495820][ T5853] team0: Port device team_slave_0 added
[   55.507380][ T5849] team0: Port device team_slave_1 added
[   55.510835][ T5853] team0: Port device team_slave_1 added
[   55.542101][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.545197][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.555415][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.559825][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   55.562823][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[   55.565722][ T5845] bridge_slave_0: entered allmulticast mode
[   55.568691][ T5845] bridge_slave_0: entered promiscuous mode
[   55.572133][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   55.574890][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[   55.577279][ T5845] bridge_slave_1: entered allmulticast mode
[   55.580072][ T5845] bridge_slave_1: entered promiscuous mode
[   55.587701][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.590511][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.600650][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.618963][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.621212][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.630439][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.635935][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.638729][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.647421][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.652750][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   55.657030][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   55.682373][ T5845] team0: Port device team_slave_0 added
[   55.699296][ T5845] team0: Port device team_slave_1 added
[   55.719084][ T5853] hsr_slave_0: entered promiscuous mode
[   55.721938][ T5853] hsr_slave_1: entered promiscuous mode
[   55.727820][ T5849] hsr_slave_0: entered promiscuous mode
[   55.730410][ T5849] hsr_slave_1: entered promiscuous mode
[   55.733017][ T5849] debugfs: 'hsr0' already exists in 'hsr'
[   55.736023][ T5849] Cannot create hsr debugfs directory
[   55.746423][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0
[   55.749197][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.760261][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   55.782064][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1
[   55.785587][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   55.796148][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   55.869977][ T5845] hsr_slave_0: entered promiscuous mode
[   55.872851][ T5845] hsr_slave_1: entered promiscuous mode
[   55.876180][ T5845] debugfs: 'hsr0' already exists in 'hsr'
[   55.878517][ T5845] Cannot create hsr debugfs directory
[   55.995999][ T5849] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   56.001504][ T5849] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   56.019363][ T5849] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   56.028696][ T5849] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   56.052382][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   56.056979][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   56.066795][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   56.074208][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   56.095014][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.097837][ T5849] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.100784][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.103488][ T5849] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.109827][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   56.115156][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   56.125264][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   56.130998][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   56.147706][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.150028][ T5853] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.152569][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.155113][ T5853] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.195813][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.198006][ T5845] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.201055][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.203197][ T5845] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.212056][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.217731][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.220851][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.223835][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.227539][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.232276][   T27] bridge0: port 1(bridge_slave_0) entered disabled state
[   56.235251][   T27] bridge0: port 2(bridge_slave_1) entered disabled state
[   56.251251][ T5849] 8021q: adding VLAN 0 to HW filter on device team0
[   56.268562][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.277575][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0
[   56.281474][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.284216][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.288721][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.291258][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.304429][ T5845] 8021q: adding VLAN 0 to HW filter on device team0
[   56.314984][ T5853] 8021q: adding VLAN 0 to HW filter on device team0
[   56.320504][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.323113][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.331850][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.334670][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.345484][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   56.348233][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   56.359814][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state
[   56.362800][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state
[   56.402070][ T5853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[   56.406044][ T5853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[   56.460844][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.480767][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.504677][ T5849] veth0_vlan: entered promiscuous mode
[   56.517862][ T5849] veth1_vlan: entered promiscuous mode
[   56.521756][ T5845] veth0_vlan: entered promiscuous mode
[   56.532864][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0
[   56.540589][ T5845] veth1_vlan: entered promiscuous mode
[   56.546708][ T5849] veth0_macvtap: entered promiscuous mode
[   56.551385][ T5849] veth1_macvtap: entered promiscuous mode
[   56.573335][ T5853] veth0_vlan: entered promiscuous mode
[   56.578407][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.590676][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.596867][ T5853] veth1_vlan: entered promiscuous mode
[   56.599882][ T5845] veth0_macvtap: entered promiscuous mode
[   56.606142][   T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.611308][ T5845] veth1_macvtap: entered promiscuous mode
[   56.616441][   T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.624852][   T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.630078][   T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.639022][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.656067][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.675597][   T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.683234][   T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.686639][   T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.689677][   T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.696453][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.701038][ T5853] veth0_macvtap: entered promiscuous mode
[   56.707691][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.726694][ T5853] veth1_macvtap: entered promiscuous mode
[   56.743163][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.746787][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0
[   56.746823][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.761762][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1
[   56.773443][ T5876] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   56.777927][ T5876] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   56.790080][ T5876] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   56.791475][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   56.793608][ T5876] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   56.810602][   T32] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.826024][   T32] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.861573][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.868053][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.871058][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.871075][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.921881][   T79] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   56.933973][   T79] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   56.968960][ T5917] overlayfs: conflicting lowerdir path
[   57.012465][ T5922] loop0: detected capacity change from 0 to 764
[   57.021198][ T5922] Symlink component flag not implemented
[   57.023526][ T5922] Symlink component flag not implemented
[   57.026594][ T5922] Symlink component flag not implemented (128)
[   57.029210][ T5922] Symlink component flag not implemented (122)
[   57.087032][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6'.
[   57.094357][ T5848] Bluetooth: hci2: command tx timeout
[   57.096494][ T5848] Bluetooth: hci0: command tx timeout
[   57.097364][ T5856] Bluetooth: hci1: command tx timeout
[   57.587998][ T5942] loop2: detected capacity change from 0 to 32768
[   57.592648][ T5942] =======================================================
[   57.592648][ T5942] WARNING: The mand mount option has been deprecated and
[   57.592648][ T5942]          and is ignored by this kernel. Remove the mand
[   57.592648][ T5942]          option from the mount to silence this warning.
[   57.592648][ T5942] =======================================================
[   57.630585][ T5942] ocfs2: Mounting device (7,2) on (node local, slot 0) with writeback data mode.
[   57.647679][ T5942] (syz.2.14,5942,0):ocfs2_check_set_options:1244 ERROR: Invalid heartbeat mount options
[   57.689931][ T5849] ocfs2: Unmounting device (7,2) on (node local)
[   57.748939][ T5953] loop2: detected capacity change from 0 to 2048
[   57.759515][ T5953] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[   57.798883][ T5955] bond0: option packets_per_slave: invalid value (70683304)
[   57.801303][ T5955] bond0: option packets_per_slave: allowed values 0 - 65535
[   58.665537][ T5967] loop1: detected capacity change from 0 to 40427
[   58.690061][ T5967] F2FS-fs (loop1): invalid crc value
[   58.725763][ T5967] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[   58.729673][ T5967] F2FS-fs (loop1): Start checkpoint disabled!
[   58.733525][ T5967] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6
[   58.881202][ T5983] loop2: detected capacity change from 0 to 16
[   59.174019][ T5236] Bluetooth: hci1: command tx timeout
[   59.176110][ T5236] Bluetooth: hci0: command tx timeout
[   59.178066][ T5236] Bluetooth: hci2: command tx timeout
[   60.163675][ T5998] loop0: detected capacity change from 0 to 4096
[   60.245032][ T6000] loop1: detected capacity change from 0 to 128
[   60.277950][ T5998] ntfs3(loop0): Mark volume as dirty due to NTFS errors
[   60.281028][ T6000] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   60.291938][ T6000] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   60.294601][ T5998] ntfs3(loop0): Failed to load $Extend (-22).
[   60.298847][ T5998] ntfs3(loop0): Failed to initialize $Extend.
[   60.305247][ T6004] syz.2.35 uses obsolete (PF_INET,SOCK_PACKET)
[   60.320219][   T33] audit: type=1804 audit(1755906754.011:2): pid=5998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.34" name="/newroot/13/file0/bus" dev="loop0" ino=33 res=1 errno=0
[   60.325064][ T5853] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   60.436887][ T6012] loop0: detected capacity change from 0 to 64
[   60.781182][ T6025] loop1: detected capacity change from 0 to 32768
[   60.842942][ T6025] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,journal_flush_disabled,fsck,recovery_pass_last=set_may_go_rw,reconstruct_alloc,no_data_io
[   60.842956][ T6025]   allowing incompatible features above 0.0: (unknown version)
[   60.842961][ T6025]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   60.858673][ T6025] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[   60.861489][ T6025] bcachefs (loop1): recovering from clean shutdown, journal seq 10
[   60.865817][ T6025] bcachefs (loop1): Version upgrade required:
[   60.865817][ T6025] Version upgrade from 0.24: unwritten_extents to 1.7: mi_btree_bitmap incomplete
[   60.865817][ T6025] Doing incompatible version upgrade from 0.24: unwritten_extents to 1.28: inode_has_case_insensitive
[   60.865817][ T6025]   running recovery passes: check_allocations,check_alloc_info,check_lrus,check_btree_backpointers,check_backpointers_to_extents,check_extents_to_backpointers,check_alloc_to_lru_refs,bucket_gens_init,check_snapshot_trees,check_snapshots,check_subvols,check_subvol_children,delete_dead_snapshots,check_inodes,check_extents,check_indirect_extents,check_dirents,check_xattrs,check_root,check_unreachable_inodes,check_subvolume_structure,check_directory_structure,check_nlinks,check_rebalance_work,set_fs_needs_rebalance
[   60.890674][    C1] vkms_vblank_simulate: vblank timer overrun
[   60.894563][ T6025] bcachefs (loop1): dropping and reconstructing all alloc info
[   60.904801][ T6025] bcachefs (loop1): invalid bkey in btree_node btree=inodes level=0: u64s 18 type inode_v3 0:4099:U32_MAX len 0 ver 0: (unpack error)
[   60.904818][ T6025]   invalid variable length fields, deleting
[   60.916704][ T6025] bcachefs (loop1): accounting_read... done
[   60.919506][ T6025] bcachefs (loop1): alloc_read... done
[   60.922174][ T6025] bcachefs (loop1): snapshots_read... done
[   60.925805][ T6025] bcachefs (loop1): check_allocations... done
[   60.936671][ T6025] bcachefs (loop1): going read-write
[   60.954291][ T6025] bcachefs (loop1): Fixed errors, running fsck a second time to verify fs is clean
[   60.958405][ T6025] bcachefs (loop1): done starting filesystem
[   61.010725][   T40] bcachefs (loop1): bucket incorrectly unset in freespace btree
[   61.010735][   T40]   u64s 5 type deleted 0:43:0 len 0 ver 0, , continuing
[   61.019791][   T40] bcachefs (loop1): bucket incorrectly unset in freespace btree
[   61.019801][   T40]   u64s 5 type deleted 0:47:0 len 0 ver 0, , continuing
[   61.062726][ T5853] bcachefs (loop1): shutting down
[   61.071236][ T6025] syz.1.44 (6025) used greatest stack depth: 16944 bytes left
[   61.074519][ T5853] bcachefs (loop1): going read-only
[   61.076372][ T5853] bcachefs (loop1): finished waiting for writes to stop
[   61.078984][ T5853] bcachefs (loop1): flushing journal and stopping allocators, journal seq 12
[   61.087840][   T40] bcachefs (loop1): bucket incorrectly unset in freespace btree
[   61.087849][   T40]   u64s 5 type deleted 0:52:0 len 0 ver 0, , continuing
[   61.096719][ T5853] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 12
[   61.100389][ T5853] bcachefs (loop1): unclean shutdown complete, journal seq 13
[   61.103527][ T5853] bcachefs (loop1): done going read-only, filesystem not clean
[   61.114561][ T5853] bcachefs (loop1): shutdown complete
[   61.254091][ T5856] Bluetooth: hci2: command tx timeout
[   61.254382][ T5848] Bluetooth: hci1: command tx timeout
[   61.258725][ T5236] Bluetooth: hci0: command tx timeout
[   61.318274][ T6042] loop0: detected capacity change from 0 to 32768
[   61.321762][ T6042] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.49 (6042)
[   61.334768][ T6042] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   61.338702][ T6042] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   61.444663][ T6042] BTRFS info (device loop0): enabling free space tree
[   61.496297][ T5845] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   61.529225][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.57'.
[   61.655437][ T6081] loop2: detected capacity change from 0 to 512
[   61.661313][ T6081] EXT4-fs: Ignoring removed oldalloc option
[   61.668597][ T6081] EXT4-fs error (device loop2): ext4_xattr_inode_iget:433: comm syz.2.59: Parent and EA inode have the same ino 15
[   61.672866][ T6081] EXT4-fs (loop2): 1 orphan inode deleted
[   61.677787][ T6081] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   61.688023][ T6081] EXT4-fs: Remounting file system with no journal so ignoring journalled data option
[   61.691319][ T6081] EXT4-fs: can't change dax mount option while remounting
[   61.704163][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   61.784011][   T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   61.793134][ T6088] loop2: detected capacity change from 0 to 1024
[   61.830974][ T6088] hfsplus: bad catalog entry type
[   61.843795][ T1089] hfsplus: b-tree write err: -5, ino 4
[   61.857263][ T6090] warning: `syz.2.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   61.935988][   T24] usb 1-1: Using ep0 maxpacket: 8
[   61.939450][   T24] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   61.943305][   T24] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[   61.949042][   T24] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.40
[   61.952780][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   61.956176][   T24] usb 1-1: Product: syz
[   61.957992][   T24] usb 1-1: Manufacturer: syz
[   61.964173][   T24] usb 1-1: SerialNumber: syz
[   62.007092][ T6098] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies.
[   62.144032][    T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   62.187979][   T24] usb 1-1: USB disconnect, device number 2
[   62.294168][    T9] usb 3-1: Using ep0 maxpacket: 32
[   62.298680][    T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[   62.303399][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[   62.310971][    T9] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[   62.315520][ T5314] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   62.318798][    T9] usb 3-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[   62.321988][    T9] usb 3-1: Product: syz
[   62.323670][    T9] usb 3-1: Manufacturer: syz
[   62.325745][    T9] usb 3-1: SerialNumber: syz
[   62.329466][    T9] usb 3-1: config 0 descriptor??
[   62.335726][    T9] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[   62.475852][ T5314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   62.480149][ T5314] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   62.486531][ T5314] usb 2-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[   62.490360][ T5314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.495931][ T5314] usb 2-1: config 0 descriptor??
[   62.540818][ T5876] usb 3-1: Failed to submit usb control message: -71
[   62.541051][    T9] usb 3-1: USB disconnect, device number 2
[   62.543721][ T5876] usb 3-1: unable to send the bmi data to the device: -71
[   62.548765][ T5876] usb 3-1: unable to get target info from device
[   62.551318][ T5876] usb 3-1: could not get target info (-71)
[   62.553119][ T5876] usb 3-1: could not probe fw (-71)
[   62.722432][ T5314] usb 2-1: USB disconnect, device number 2
[   62.885121][ T6111] loop0: detected capacity change from 0 to 32768
[   62.890132][ T6111] ocfs2: Slot 0 on device (7,0) was already allocated to this node!
[   62.897544][ T6111] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   62.926906][ T5845] ocfs2: Unmounting device (7,0) on (node local)
[   63.156282][ T6125] usb usb9: usbfs: process 6125 (syz.2.76) did not claim interface 0 before use
[   63.183379][ T6119] loop0: detected capacity change from 0 to 32768
[   63.188274][ T6119] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.73 (6119)
[   63.197338][ T6119] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   63.210527][ T6119] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   63.325206][ T6119] BTRFS info (device loop0): enabling ssd optimizations
[   63.329076][ T6119] BTRFS info (device loop0): enabling free space tree
[   63.334397][ T5848] Bluetooth: hci2: command tx timeout
[   63.334411][ T5856] Bluetooth: hci1: command tx timeout
[   63.336628][ T5236] Bluetooth: hci0: command tx timeout
[   63.385048][ T6153] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'.
[   63.419490][ T5845] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   63.578641][ T6165] netlink: 16 bytes leftover after parsing attributes in process `syz.0.87'.
[   63.671564][ T6172] mmap: syz.0.90 (6172) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   63.694441][ T5314] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   63.846500][ T5314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   63.851001][ T5314] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   63.852462][ T6176] loop0: detected capacity change from 0 to 32768
[   63.854905][ T5314] usb 2-1: New USB device found, idVendor=046d, idProduct=a95b, bcdDevice= 0.00
[   63.860736][ T5314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   63.873011][ T6176] ERROR: (device loop0): dbAlloc: unable to allocate blocks
[   63.873011][ T6176] 
[   63.873386][ T5314] usb 2-1: config 0 descriptor??
[   63.881986][ T6176] ERROR: (device loop0): remounting filesystem as read-only
[   64.098544][ T6184] process 'syz.0.96' launched './file0' with NULL argv: empty string added
[   64.205364][ T6194] bridge1: entered allmulticast mode
[   64.286340][ T5314] hid-generic 0003:046D:A95B.0001: unbalanced collection at end of report description
[   64.290172][ T5314] hid-generic 0003:046D:A95B.0001: probe with driver hid-generic failed with error -22
[   64.496592][ T6214] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   64.497870][ T5314] usb 2-1: USB disconnect, device number 3
[   64.513476][ T6216] loop2: detected capacity change from 0 to 512
[   64.517697][ T6214] batman_adv: batadv0: Removing interface: batadv_slave_0
[   64.540098][ T6216] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   64.545434][ T6216] ext4 filesystem being mounted at /41/bus supports timestamps until 2038-01-19 (0x7fffffff)
[   64.565015][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   65.093334][ T6234] loop2: detected capacity change from 0 to 764
[   65.550498][ T6245] netlink: 'syz.1.122': attribute type 4 has an invalid length.
[   66.010158][ T6249] loop2: detected capacity change from 0 to 32768
[   66.015553][ T6249] bcachefs (/dev/loop2): error validating superblock: Invalid option shard_inode_numbers_bits: too big (max 8)
[   66.020962][ T6249] bcachefs: bch2_fs_get_tree() error: ERANGE_option_too_big
[   66.515341][ T6266] mkiss: ax0: crc mode is auto.
[   66.625251][ T6268] loop2: detected capacity change from 0 to 256
[   66.655136][ T6268] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xc5dfab67, utbl_chksum : 0xe619d30d)
[   66.679337][ T6272] loop0: detected capacity change from 0 to 128
[   66.735603][ T6272] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[   66.749406][ T6272] ext4 filesystem being mounted at /53/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[   66.767241][ T6272] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.135: No space for directory leaf checksum. Please run e2fsck -D.
[   66.779036][ T6272] EXT4-fs error (device loop0): htree_dirblock_to_tree:1051: inode #2: comm syz.0.135: Directory block failed checksum
[   66.802162][ T6272] EXT4-fs warning (device loop0): ext4_dirblock_csum_verify:375: inode #2: comm syz.0.135: No space for directory leaf checksum. Please run e2fsck -D.
[   66.814758][ T6272] EXT4-fs error (device loop0): __ext4_find_entry:1626: inode #2: comm syz.0.135: checksumming directory block 0
[   66.857156][ T5845] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[   66.888260][ T6250] loop1: detected capacity change from 0 to 262144
[   66.926332][ T6250] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   66.974093][ T6250] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   67.942510][ T6307] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue
[   69.012950][ T6337] loop2: detected capacity change from 0 to 1024
[   69.018690][ T6337] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   69.236328][ T6344] netlink: 27 bytes leftover after parsing attributes in process `syz.0.163'.
[   69.672338][ T6362] loop1: detected capacity change from 0 to 40427
[   69.685474][ T6362] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[   69.688654][ T6362] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[   69.748793][ T6362] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   69.753799][ T6362] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[   69.757196][ T6362] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   69.776862][ T6362] F2FS-fs (loop1): Stopped filesystem due to reason: 0
[   69.858911][ T6382] loop0: detected capacity change from 0 to 4096
[   69.875648][ T6382] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   69.916925][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   70.460109][ T6396] loop0: detected capacity change from 0 to 40427
[   70.464052][ T6396] F2FS-fs (loop0): Invalid log blocks per segment (4278190089)
[   70.466945][ T6396] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock
[   70.471329][ T6396] F2FS-fs (loop0): invalid crc value
[   70.503731][ T6396] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   70.508849][ T6396] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0
[   70.511760][ T6396] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5
[   70.535205][ T6396] F2FS-fs (loop0): Corrupted max_depth of 3: 255
[   70.538223][ T6396] F2FS-fs (loop0): f2fs_check_nid_range: out-of-range nid=1, run fsck to fix.
[   70.865604][ T6408] loop1: detected capacity change from 0 to 2048
[   70.875739][ T6409] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   70.902555][ T6408] NILFS error (device loop1): nilfs_bmap_lookup_contig: broken bmap (inode number=2097152)
[   70.907890][ T6408] Remounting filesystem read-only
[   70.920643][ T5853] NILFS (loop1): disposed unprocessed dirty file(s) when detaching log writer
[   71.063289][ T6416] netlink: 'syz.1.190': attribute type 16 has an invalid length.
[   71.294042][ T5314] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   71.485119][ T5314] usb 3-1: Using ep0 maxpacket: 8
[   71.492712][ T5314] usb 3-1: config 162 has an invalid interface number: 45 but max is 1
[   71.497145][ T5314] usb 3-1: config 162 has an invalid descriptor of length 8, skipping remainder of the config
[   71.501549][ T5314] usb 3-1: config 162 has 1 interface, different from the descriptor's value: 2
[   71.509581][ T5314] usb 3-1: config 162 has no interface number 0
[   71.523969][ T5314] usb 3-1: config 162 interface 45 altsetting 4 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   71.528623][ T5314] usb 3-1: config 162 interface 45 has no altsetting 0
[   71.543353][ T5314] usb 3-1: New USB device found, idVendor=067b, idProduct=2303, bcdDevice=32.4e
[   71.550765][ T5314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.553992][ T5314] usb 3-1: Product: syz
[   71.556140][ T5314] usb 3-1: Manufacturer: syz
[   71.558821][ T5314] usb 3-1: SerialNumber: syz
[   71.664972][ T6420] loop1: detected capacity change from 0 to 40427
[   71.676764][ T6420] F2FS-fs (loop1): build fault injection rate: 25
[   71.686691][ T6422] loop0: detected capacity change from 0 to 8
[   71.690707][ T6420] F2FS-fs (loop1): build fault injection type: 0x7698c
[   71.709136][ T6420] F2FS-fs (loop1): invalid crc value
[   71.732916][ T6420] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x1cb/0x970
[   71.796136][ T6420] F2FS-fs (loop1): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[   71.976458][ T6420] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   71.987732][ T6420] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   72.006470][ T6420] F2FS-fs (loop1): inject too big dir depth in f2fs_add_regular_entry of f2fs_add_dentry+0xda/0x1d0
[   72.008552][ T5314] pl2303 3-1:162.45: required endpoints missing
[   72.012733][ T6420] F2FS-fs (loop1): inject no more block in inc_valid_node_count of f2fs_new_node_folio+0x18b/0xa40
[   72.021427][ T6420] F2FS-fs (loop1): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x9f1/0x16a0
[   72.023363][ T5314] usb 3-1: USB disconnect, device number 3
[   72.026639][ T6420] syz.1.192: attempt to access beyond end of device
[   72.026639][ T6420] loop1: rw=2049, sector=45096, nr_sectors = 136 limit=40427
[   72.037927][ T6420] F2FS-fs (loop1): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_map_blocks+0xd84/0x4130
[   72.049835][ T5853] syz-executor: attempt to access beyond end of device
[   72.049835][ T5853] loop1: rw=2049, sector=45232, nr_sectors = 8 limit=40427
[   72.063233][ T5853] CPU: 1 UID: 0 PID: 5853 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   72.063254][ T5853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   72.063263][ T5853] Call Trace:
[   72.063288][ T5853]  <TASK>
[   72.063302][ T5853]  dump_stack_lvl+0x189/0x250
[   72.063326][ T5853]  ? __pfx_dump_stack_lvl+0x10/0x10
[   72.063343][ T5853]  ? __pfx_queue_work_on+0x10/0x10
[   72.063357][ T5853]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   72.063413][ T5853]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   72.063434][ T5853]  f2fs_handle_critical_error+0x37c/0x540
[   72.063455][ T5853]  f2fs_write_end_io+0x886/0xb60
[   72.063474][ T5853]  __submit_merged_bio+0x27a/0x6a0
[   72.063493][ T5853]  __submit_merged_write_cond+0x255/0x530
[   72.063513][ T5853]  f2fs_write_data_pages+0x261d/0x3000
[   72.063540][ T5853]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   72.063562][ T5853]  ? is_bpf_text_address+0x26/0x2b0
[   72.063581][ T5853]  ? rcu_is_watching+0x15/0xb0
[   72.063604][ T5853]  ? rcu_is_watching+0x15/0xb0
[   72.063616][ T5853]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   72.063634][ T5853]  ? __pfx_css_rstat_updated+0x10/0x10
[   72.063650][ T5853]  ? rcu_is_watching+0x15/0xb0
[   72.063665][ T5853]  ? filemap_get_folios_tag+0xed/0x630
[   72.063678][ T5853]  ? rcu_is_watching+0x15/0xb0
[   72.063691][ T5853]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   72.063710][ T5853]  do_writepages+0x32e/0x550
[   72.063728][ T5853]  ? rcu_is_watching+0x15/0xb0
[   72.063741][ T5853]  ? do_raw_spin_unlock+0x4d/0x240
[   72.063758][ T5853]  filemap_fdatawrite+0x199/0x240
[   72.063776][ T5853]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   72.063804][ T5853]  ? rcu_is_watching+0x15/0xb0
[   72.063819][ T5853]  ? do_raw_spin_unlock+0x4d/0x240
[   72.063834][ T5853]  f2fs_sync_dirty_inodes+0x31f/0x830
[   72.063852][ T5853]  f2fs_write_checkpoint+0x95a/0x1df0
[   72.063871][ T5853]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   72.063915][ T5853]  ? kill_f2fs_super+0x298/0x6c0
[   72.063930][ T5853]  kill_f2fs_super+0x2c3/0x6c0
[   72.063943][ T5853]  ? __pfx_kill_f2fs_super+0x10/0x10
[   72.063954][ T5853]  ? radix_tree_delete_item+0x2b6/0x400
[   72.063974][ T5853]  ? shrinker_free+0x2ce/0x3e0
[   72.064006][ T5853]  deactivate_locked_super+0xbc/0x130
[   72.064023][ T5853]  cleanup_mnt+0x425/0x4c0
[   72.064040][ T5853]  task_work_run+0x1d4/0x260
[   72.064058][ T5853]  ? __pfx_task_work_run+0x10/0x10
[   72.064075][ T5853]  ? __x64_sys_umount+0x122/0x160
[   72.064091][ T5853]  ? __pfx___x64_sys_umount+0x10/0x10
[   72.064108][ T5853]  ? rcu_is_watching+0x15/0xb0
[   72.064122][ T5853]  exit_to_user_mode_loop+0xec/0x110
[   72.064140][ T5853]  do_syscall_64+0x2bd/0x3b0
[   72.064159][ T5853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.064192][ T5853]  ? exc_page_fault+0x9f/0xf0
[   72.064210][ T5853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   72.064223][ T5853] RIP: 0033:0x7f5f8ed8ff17
[   72.064237][ T5853] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   72.064248][ T5853] RSP: 002b:00007ffdb2213508 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   72.064263][ T5853] RAX: 0000000000000000 RBX: 00007f5f8ee11c05 RCX: 00007f5f8ed8ff17
[   72.064273][ T5853] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb22135c0
[   72.064281][ T5853] RBP: 00007ffdb22135c0 R08: 0000000000000000 R09: 0000000000000000
[   72.064288][ T5853] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdb2214650
[   72.064296][ T5853] R13: 00007f5f8ee11c05 R14: 00000000000118fb R15: 00007ffdb2214690
[   72.064311][ T5853]  </TASK>
[   72.235710][ T5853] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   72.398558][ T6433] loop0: detected capacity change from 0 to 32768
[   72.418618][ T6433] XFS (loop0): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   72.440014][ T6433] XFS (loop0): Ending clean mount
[   72.476536][ T5845] XFS (loop0): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   72.557820][ T6445] loop1: detected capacity change from 0 to 1024
[   72.562907][ T6445] hfsplus: bad catalog file entry
[   72.567683][ T6445] hfsplus: failed to load root directory
[   72.712669][ T6452] loop2: detected capacity change from 0 to 256
[   72.723438][ T6452] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[   72.729909][ T6452] exFAT-fs (loop2): Medium has reported failures. Some data may be lost.
[   72.739233][ T6452] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe5674ec2, utbl_chksum : 0xe619d30d)
[   72.818420][ T6463] loop1: detected capacity change from 0 to 8
[   72.839021][ T6463] SQUASHFS error: xz decompression failed, data probably corrupt
[   72.844996][ T6463] SQUASHFS error: Failed to read block 0x108: -5
[   72.847613][ T6463] SQUASHFS error: Unable to read metadata cache entry [106]
[   72.850589][ T6463] SQUASHFS error: Unable to read inode 0x11f
[   72.875197][ T6465] IPv6: NLM_F_REPLACE set, but no existing node found!
[   73.222432][ T6477] loop0: detected capacity change from 0 to 512
[   73.276604][ T6477] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -13
[   73.290581][ T6477] EXT4-fs error (device loop0): ext4_orphan_get:1392: inode #13: comm syz.0.212: iget: bad i_size value: 12154757448730
[   73.307114][ T6477] EXT4-fs error (device loop0): ext4_orphan_get:1397: comm syz.0.212: couldn't read orphan inode 13 (err -117)
[   73.316372][ T6477] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[   73.341404][ T5845] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   73.457456][ T6487] loop0: detected capacity change from 0 to 8192
[   73.471442][ T6487] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[   73.476222][ T6487] UDF-fs: Scanning with blocksize 512 failed
[   73.478697][ T6487] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[   73.481022][ T6487] UDF-fs: Scanning with blocksize 1024 failed
[   73.483169][ T6487] UDF-fs: warning (device loop0): udf_load_vrs: No VRS found
[   73.485749][ T6487] UDF-fs: Scanning with blocksize 2048 failed
[   73.489526][ T6487] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[   73.534096][ T5882] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   73.695301][ T5882] usb 2-1: too many configurations: 9, using maximum allowed: 8
[   73.698713][ T5882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   73.703999][ T5882] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   73.707424][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0
[   73.735224][ T5882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   73.738335][ T5882] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   73.746750][ T6489] loop0: detected capacity change from 0 to 32768
[   73.749191][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0
[   73.755225][ T6489] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.218 (6489)
[   73.760293][ T5882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   73.763040][ T5882] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   73.772705][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0
[   73.780941][ T6489] BTRFS info (device loop0): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   73.785775][ T6489] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   73.789404][ T5882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   73.792828][ T5882] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   73.804770][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0
[   73.808207][ T5882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   73.811565][ T5882] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   73.819087][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0
[   73.822747][ T5882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   73.827164][ T5882] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   73.836520][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0
[   73.842350][ T5882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   73.846772][ T5882] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   73.850817][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0
[   73.854346][ T5882] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9
[   73.857178][ T5882] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7
[   73.857544][ T6497] loop2: detected capacity change from 0 to 32768
[   73.860514][ T5882] usb 2-1: config 0 interface 0 has no altsetting 0
[   73.868511][ T6497] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.222 (6497)
[   73.873010][ T5882] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e
[   73.873860][ T6497] BTRFS info (device loop2): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   73.879979][ T6497] BTRFS info (device loop2): using sha256 (sha256-lib) checksum algorithm
[   73.885787][ T6489] BTRFS info (device loop0): enabling ssd optimizations
[   73.888091][ T5882] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168
[   73.890666][ T5882] usb 2-1: Product: syz
[   73.892002][ T5882] usb 2-1: Manufacturer: syz
[   73.893854][ T5882] usb 2-1: SerialNumber: syz
[   73.895640][ T6489] BTRFS info (device loop0): using spread ssd allocation scheme
[   73.898609][ T6489] BTRFS info (device loop0): enabling free space tree
[   73.901228][ T6489] BTRFS info (device loop0): force zlib compression, level 3
[   73.905620][ T5882] usb 2-1: config 0 descriptor??
[   73.916975][ T5882] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0
[   73.956349][ T5845] BTRFS info (device loop0): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[   73.984989][ T6497] BTRFS info (device loop2): rebuilding free space tree
[   74.000404][ T6497] BTRFS info (device loop2): setting nodatasum
[   74.002813][ T6497] BTRFS info (device loop2): enabling ssd optimizations
[   74.013995][ T6497] BTRFS info (device loop2): using spread ssd allocation scheme
[   74.016738][ T6497] BTRFS info (device loop2): turning off barriers
[   74.019013][ T6497] BTRFS info (device loop2): enabling free space tree
[   74.021614][ T6497] BTRFS info (device loop2): force clearing of disk cache
[   74.032408][ T6497] BTRFS info (device loop2): doing ref verification
[   74.109777][ T5849] BTRFS info (device loop2): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   74.121948][ T5882] usb 2-1: USB disconnect, device number 4
[   74.131760][ T5882] yurex 2-1:0.0: USB YUREX #0 now disconnected
[   74.297934][ T6541] loop2: detected capacity change from 0 to 512
[   74.311746][ T6541] EXT4-fs: Ignoring removed nomblk_io_submit option
[   74.323134][ T6541] EXT4-fs: Mount option(s) incompatible with ext3
[   74.342598][ T6541] gfs2: Unexpected value for 'barrier'
[   74.547640][ T6553] vlan0: entered promiscuous mode
[   74.864088][   T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[   74.881160][ T6566] netlink: 256 bytes leftover after parsing attributes in process `syz.1.238'.
[   75.014043][   T24] usb 1-1: Using ep0 maxpacket: 8
[   75.019628][   T24] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[   75.023009][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   75.027250][   T24] usb 1-1: Product: syz
[   75.029370][   T24] usb 1-1: Manufacturer: syz
[   75.031389][   T24] usb 1-1: SerialNumber: syz
[   75.036646][   T24] usb 1-1: config 0 descriptor??
[   75.055265][ T6568] loop1: detected capacity change from 0 to 32768
[   75.067223][ T6568] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   75.077866][ T6568] XFS (loop1): Ending clean mount
[   75.082771][ T6568] XFS (loop1): Quotacheck needed: Please wait.
[   75.091773][ T6568] XFS (loop1): Quotacheck: Done.
[   75.100699][   T33] audit: type=1800 audit(1755907536.798:3): pid=6568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.239" name="file1" dev="loop1" ino=6150 res=0 errno=0
[   75.109358][   T33] audit: type=1800 audit(1755907536.808:4): pid=6568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.239" name="file1" dev="loop1" ino=6150 res=0 errno=0
[   75.247678][   T24] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[   75.308701][ T5853] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[   75.627922][ T6581] loop1: detected capacity change from 0 to 40427
[   75.637575][ T6581] F2FS-fs (loop1): Image doesn't support compression
[   75.639866][ T6581] F2FS-fs (loop1): build fault injection rate: 690
[   75.646849][ T6581] F2FS-fs (loop1): invalid crc value
[   75.666620][ T6581] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[   75.669832][ T6581] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[   75.689567][ T5853] syz-executor: attempt to access beyond end of device
[   75.689567][ T5853] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[   75.695053][ T5853] CPU: 0 UID: 0 PID: 5853 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[   75.695067][ T5853] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   75.695072][ T5853] Call Trace:
[   75.695076][ T5853]  <TASK>
[   75.695080][ T5853]  dump_stack_lvl+0x189/0x250
[   75.695096][ T5853]  ? __pfx_dump_stack_lvl+0x10/0x10
[   75.695105][ T5853]  ? __pfx_queue_work_on+0x10/0x10
[   75.695113][ T5853]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[   75.695123][ T5853]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[   75.695166][ T5853]  f2fs_handle_critical_error+0x37c/0x540
[   75.695180][ T5853]  f2fs_write_end_io+0x886/0xb60
[   75.695191][ T5853]  __submit_merged_bio+0x27a/0x6a0
[   75.695202][ T5853]  __submit_merged_write_cond+0x255/0x530
[   75.695213][ T5853]  f2fs_write_data_pages+0x261d/0x3000
[   75.695230][ T5853]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   75.695250][ T5853]  ? __mod_zone_page_state+0xd7/0x140
[   75.695263][ T5853]  ? folios_put_refs+0x560/0x640
[   75.695273][ T5853]  ? __pfx_folios_put_refs+0x10/0x10
[   75.695280][ T5853]  ? rcu_is_watching+0x15/0xb0
[   75.695288][ T5853]  ? lru_add+0xa2f/0xd80
[   75.695295][ T5853]  ? lru_add+0x198/0xd80
[   75.695302][ T5853]  ? folio_batch_move_lru+0x319/0x3a0
[   75.695311][ T5853]  ? filemap_get_folios_tag+0xed/0x630
[   75.695318][ T5853]  ? rcu_is_watching+0x15/0xb0
[   75.695331][ T5853]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[   75.695342][ T5853]  do_writepages+0x32e/0x550
[   75.695352][ T5853]  ? rcu_is_watching+0x15/0xb0
[   75.695360][ T5853]  ? do_raw_spin_unlock+0x4d/0x240
[   75.695370][ T5853]  filemap_fdatawrite+0x199/0x240
[   75.695380][ T5853]  ? __pfx_filemap_fdatawrite+0x10/0x10
[   75.695398][ T5853]  ? rcu_is_watching+0x15/0xb0
[   75.695406][ T5853]  ? do_raw_spin_unlock+0x4d/0x240
[   75.695415][ T5853]  f2fs_sync_dirty_inodes+0x31f/0x830
[   75.695425][ T5853]  f2fs_write_checkpoint+0x95a/0x1df0
[   75.695437][ T5853]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[   75.695454][ T5853]  ? kill_f2fs_super+0x298/0x6c0
[   75.695463][ T5853]  kill_f2fs_super+0x2c3/0x6c0
[   75.695471][ T5853]  ? __pfx_kill_f2fs_super+0x10/0x10
[   75.695478][ T5853]  ? radix_tree_delete_item+0x2b6/0x400
[   75.695489][ T5853]  ? shrinker_free+0x2ce/0x3e0
[   75.695498][ T5853]  deactivate_locked_super+0xbc/0x130
[   75.695507][ T5853]  cleanup_mnt+0x425/0x4c0
[   75.695516][ T5853]  task_work_run+0x1d4/0x260
[   75.695527][ T5853]  ? __pfx_task_work_run+0x10/0x10
[   75.695535][ T5853]  ? __x64_sys_umount+0x122/0x160
[   75.695545][ T5853]  ? __pfx___x64_sys_umount+0x10/0x10
[   75.695555][ T5853]  ? rcu_is_watching+0x15/0xb0
[   75.695562][ T5853]  exit_to_user_mode_loop+0xec/0x110
[   75.695573][ T5853]  do_syscall_64+0x2bd/0x3b0
[   75.695584][ T5853]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.695591][ T5853]  ? exc_page_fault+0x9f/0xf0
[   75.695601][ T5853]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   75.695608][ T5853] RIP: 0033:0x7f5f8ed8ff17
[   75.695616][ T5853] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[   75.695623][ T5853] RSP: 002b:00007ffdb2213508 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[   75.695632][ T5853] RAX: 0000000000000000 RBX: 00007f5f8ee11c05 RCX: 00007f5f8ed8ff17
[   75.695637][ T5853] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffdb22135c0
[   75.695642][ T5853] RBP: 00007ffdb22135c0 R08: 0000000000000000 R09: 0000000000000000
[   75.695646][ T5853] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffdb2214650
[   75.695651][ T5853] R13: 00007f5f8ee11c05 R14: 000000000001272d R15: 00007ffdb2214690
[   75.695660][ T5853]  </TASK>
[   75.695663][ T5853] F2FS-fs (loop1): Stopped filesystem due to reason: 3
[   76.098202][ T6594] loop1: detected capacity change from 0 to 8192
[   76.327673][ T6602] loop1: detected capacity change from 0 to 32768
[   76.334786][ T6602] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.250 (6602)
[   76.341826][ T6602] BTRFS info (device loop1): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   76.346325][ T6602] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[   76.377866][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[   76.384114][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[   76.408824][ T6602] BTRFS info (device loop1): enabling ssd optimizations
[   76.411513][ T6602] BTRFS info (device loop1): enabling free space tree
[   76.413631][ T6602] BTRFS info (device loop1): use lzo compression, level 0
[   76.443560][   T33] audit: type=1800 audit(1755907538.138:5): pid=6602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.250" name="file1" dev="loop1" ino=260 res=0 errno=0
[   76.669718][   T24] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[   76.675008][   T24] usb 1-1: USB disconnect, device number 3
[   76.924972][    T9] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[   77.084241][    T9] usb 3-1: Using ep0 maxpacket: 8
[   77.096013][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[   77.100153][    T9] usb 3-1: config 8 has an invalid interface number: 255 but max is 0
[   77.103392][    T9] usb 3-1: config 8 has no interface number 0
[   77.114204][    T9] usb 3-1: config 8 interface 255 has no altsetting 0
[   77.119921][    T9] usb 3-1: string descriptor 0 read error: -22
[   77.122511][    T9] usb 3-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf
[   77.127433][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   77.183461][ T5853] BTRFS info (device loop1): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[   77.278413][ T6634] netlink: 'syz.0.258': attribute type 10 has an invalid length.
[   77.290065][ T6634] batman_adv: batadv0: Adding interface: wlan0
[   77.293661][ T6634] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   77.305422][ T6634] batman_adv: batadv0: Interface activated: wlan0
[   77.309414][ T6636] netlink: 201872 bytes leftover after parsing attributes in process `syz.1.256'.
[   77.312936][ T6636] netlink: zone id is out of range
[   77.315949][ T6636] netlink: zone id is out of range
[   77.317670][ T6636] netlink: zone id is out of range
[   77.319326][ T6636] netlink: zone id is out of range
[   77.322009][ T6636] netlink: zone id is out of range
[   77.326103][ T6636] netlink: zone id is out of range
[   77.327785][ T6636] netlink: zone id is out of range
[   77.329585][ T6636] netlink: zone id is out of range
[   77.331573][ T6636] netlink: zone id is out of range
[   77.340096][    T9] catc 3-1:8.255: Can't set altsetting 1.
[   77.340745][ T6636] netlink: zone id is out of range
[   77.343301][    T9] catc 3-1:8.255: probe with driver catc failed with error -5
[   77.354474][    T9] usb 3-1: USB disconnect, device number 4
[   77.422274][ T6640] netlink: 'syz.1.260': attribute type 27 has an invalid length.
[   77.453462][ T6640] bridge0: port 2(bridge_slave_1) entered disabled state
[   77.456596][ T6640] bridge0: port 1(bridge_slave_0) entered disabled state
[   77.490851][ T6640] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   77.503112][ T6640] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   77.506292][   T33] audit: type=1326 audit(1755907539.198:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.1.260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8ed8ebe9 code=0x7ffc0000
[   77.513715][   T33] audit: type=1326 audit(1755907539.198:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.1.260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8ed8ebe9 code=0x7ffc0000
[   77.537573][   T33] audit: type=1326 audit(1755907539.218:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.1.260" exe="/syz-executor" sig=0 arch=c000003e syscall=3 compat=0 ip=0x7f5f8ed8ebe9 code=0x7ffc0000
[   77.553795][   T33] audit: type=1326 audit(1755907539.218:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.1.260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8ed8ebe9 code=0x7ffc0000
[   77.558335][ T6638] loop0: detected capacity change from 0 to 32768
[   77.562254][   T33] audit: type=1326 audit(1755907539.218:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.1.260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8ed8ebe9 code=0x7ffc0000
[   77.578105][   T33] audit: type=1326 audit(1755907539.228:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.1.260" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f5f8ed8ebe9 code=0x7ffc0000
[   77.591551][   T33] audit: type=1326 audit(1755907539.228:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6639 comm="syz.1.260" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8ed8ebe9 code=0x7ffc0000
[   77.592915][ T6638] JBD2: Ignoring recovery information on journal
[   77.628138][ T6638] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[   77.641929][ T6641] 8021q: adding VLAN 0 to HW filter on device bond0
[   77.650598][ T6641] 8021q: adding VLAN 0 to HW filter on device team0
[   77.655878][ T5876] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.659470][ T5876] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.666639][ T5876] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.670200][ T5876] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[   77.680782][ T5845] ocfs2: Unmounting device (7,0) on (node local)
[   77.902903][ T6654] vlan0: left promiscuous mode
[   77.959637][ T6650] loop0: detected capacity change from 0 to 32768
[   77.978237][ T6650] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.263 (6650)
[   77.997074][ T6650] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   78.000274][ T6650] BTRFS info (device loop0): using sha256 (sha256-lib) checksum algorithm
[   78.033346][ T6650] BTRFS info (device loop0): rebuilding free space tree
[   78.046894][ T6650] BTRFS info (device loop0): disabling free space tree
[   78.049005][ T6650] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[   78.051963][ T6650] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[   78.057540][ T6650] BTRFS info (device loop0): enabling ssd optimizations
[   78.060070][ T6650] BTRFS info (device loop0): turning on sync discard
[   78.062338][ T6650] BTRFS info (device loop0): force clearing of disk cache
[   78.065107][ T6650] BTRFS info (device loop0): enabling auto defrag
[   78.067176][ T6650] BTRFS info (device loop0): doing ref verification
[   78.160921][ T6650] loop0: detected capacity change from 32768 to 64
[   78.166671][   T40] kworker/u10:2: attempt to access beyond end of device
[   78.166671][   T40] loop0: rw=67112961, sector=10480, nr_sectors = 8 limit=64
[   78.171731][   T40] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 1, rd 0, flush 0, corrupt 0, gen 0
[   78.176764][   T40] kworker/u10:2: attempt to access beyond end of device
[   78.176764][   T40] loop0: rw=67112961, sector=10488, nr_sectors = 8 limit=64
[   78.189420][   T40] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 2, rd 0, flush 0, corrupt 0, gen 0
[   78.200688][   T40] kworker/u10:2: attempt to access beyond end of device
[   78.200688][   T40] loop0: rw=67112961, sector=10496, nr_sectors = 8 limit=64
[   78.209149][   T40] BTRFS error (device loop0): bdev /dev/loop0 errs: wr 3, rd 0, flush 0, corrupt 0, gen 0
[   78.213573][ T6650] BTRFS error (device loop0 state A): Transaction aborted (error -5)
[   78.220198][ T6650] BTRFS: error (device loop0 state A) in __btrfs_run_delayed_items:1151: errno=-5 IO failure
[   78.223930][ T6650] BTRFS info (device loop0 state EA): forced readonly
[   78.227463][ T6683] netlink: 28 bytes leftover after parsing attributes in process `syz.2.270'.
[   78.239217][ T6650] BTRFS warning (device loop0 state EA): Skipping commit of aborted transaction.
[   78.244739][ T6650] BTRFS: error (device loop0 state EA) in cleanup_transaction:2023: errno=-5 IO failure
[   78.248646][ T6650] BTRFS error (device loop0 state EMA): remounting read-write after error is not allowed
[   78.296527][ T5845] BTRFS info (device loop0 state EA): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[   78.327210][ T6688] wg1 speed is unknown, defaulting to 1000
[   78.329302][ T6688] wg1 speed is unknown, defaulting to 1000
[   78.332570][ T6688] wg1 speed is unknown, defaulting to 1000
[   78.341433][ T6688] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   78.358651][ T6688] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98
[   78.383362][ T6688] wg1 speed is unknown, defaulting to 1000
[   78.387239][ T6688] wg1 speed is unknown, defaulting to 1000
[   78.390375][ T6688] wg1 speed is unknown, defaulting to 1000
[   78.474444][  T792] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[   78.493512][   T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.548269][   T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.589422][   T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.624712][  T792] usb 3-1: Using ep0 maxpacket: 32
[   78.630453][  T792] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[   78.638744][  T792] usb 3-1: config 0 has no interface number 0
[   78.639573][   T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   78.641117][  T792] usb 3-1: config 0 interface 184 has no altsetting 0
[   78.675509][  T792] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[   78.679021][  T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.682015][  T792] usb 3-1: Product: syz
[   78.683656][  T792] usb 3-1: Manufacturer: syz
[   78.685869][  T792] usb 3-1: SerialNumber: syz
[   78.691791][  T792] usb 3-1: config 0 descriptor??
[   78.697598][  T792] smsc75xx v1.0.0
[   78.699071][  T792] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -22
[   78.703004][  T792] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -22
[   78.751985][   T12] bridge_slave_1: left allmulticast mode
[   78.756636][   T12] bridge_slave_1: left promiscuous mode
[   78.758995][   T12] bridge0: port 2(bridge_slave_1) entered disabled state
[   78.763137][   T12] bridge_slave_0: left allmulticast mode
[   78.766404][   T12] bridge_slave_0: left promiscuous mode
[   78.768664][   T12] bridge0: port 1(bridge_slave_0) entered disabled state
[   78.824463][   T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[   78.860822][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   78.863758][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   78.866821][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   78.870292][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   78.873533][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   78.884446][   T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[   78.888952][   T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[   78.892448][   T12] bond0 (unregistering): Released all slaves
[   78.901939][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[   78.908556][ T6681] batman_adv: batadv0: Removing interface: batadv_slave_0
[   78.912438][ T6681] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   78.915733][ T6681] batman_adv: batadv0: Removing interface: batadv_slave_1
[   78.931075][ T6703] wg1 speed is unknown, defaulting to 1000
[   78.975302][   T24] usb 2-1: too many configurations: 151, using maximum allowed: 8
[   78.990239][   T24] usb 2-1: New USB device found, idVendor=04d8, idProduct=0082, bcdDevice=ce.b7
[   78.993712][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=130
[   78.998031][   T24] usb 2-1: Product: syz
[   78.999876][   T24] usb 2-1: Manufacturer: syz
[   79.002194][   T24] usb 2-1: SerialNumber: syz
[   79.006282][   T24] usb 2-1: config 0 descriptor??
[   79.040524][ T6703] chnl_net:caif_netlink_parms(): no params data found
[   79.077709][ T6703] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.080064][ T6703] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.082452][ T6703] bridge_slave_0: entered allmulticast mode
[   79.088084][ T6703] bridge_slave_0: entered promiscuous mode
[   79.092342][   T12] batman_adv: batadv0: Interface deactivated: wlan0
[   79.106407][   T12] batman_adv: batadv0: Removing interface: wlan0
[   79.112565][ T6703] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.117659][ T6703] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.120731][ T6703] bridge_slave_1: entered allmulticast mode
[   79.124069][ T6703] bridge_slave_1: entered promiscuous mode
[   79.153961][ T6703] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   79.160603][   T12] hsr_slave_0: left promiscuous mode
[   79.163378][   T12] hsr_slave_1: left promiscuous mode
[   79.166391][   T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[   79.169295][   T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[   79.176213][   T12] veth1_macvtap: left promiscuous mode
[   79.178448][   T12] veth0_macvtap: left promiscuous mode
[   79.180930][   T12] veth1_vlan: left promiscuous mode
[   79.183402][   T12] veth0_vlan: left promiscuous mode
[   79.211983][ T5882] usb 2-1: USB disconnect, device number 5
[   79.272633][   T12] team0 (unregistering): Port device team_slave_1 removed
[   79.286091][   T12] team0 (unregistering): Port device team_slave_0 removed
[   79.350139][ T6703] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   79.370445][ T6703] team0: Port device team_slave_0 added
[   79.376150][ T6703] team0: Port device team_slave_1 added
[   79.391707][ T6703] batman_adv: batadv0: Adding interface: batadv_slave_0
[   79.394266][ T6703] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.402777][ T6703] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   79.407853][ T6703] batman_adv: batadv0: Adding interface: batadv_slave_1
[   79.410824][ T6703] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   79.419916][ T6703] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   79.442828][ T6703] hsr_slave_0: entered promiscuous mode
[   79.445212][ T6703] hsr_slave_1: entered promiscuous mode
[   79.447721][ T6703] debugfs: 'hsr0' already exists in 'hsr'
[   79.449899][ T6703] Cannot create hsr debugfs directory
[   79.523767][ T6703] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   79.529475][ T6703] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   79.534177][ T6703] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   79.540060][ T6703] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   79.555840][ T6703] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.558322][ T6703] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.560717][ T6703] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.563032][ T6703] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.598079][ T6703] 8021q: adding VLAN 0 to HW filter on device bond0
[   79.605906][   T26] bridge0: port 1(bridge_slave_0) entered disabled state
[   79.609014][   T26] bridge0: port 2(bridge_slave_1) entered disabled state
[   79.615284][ T6703] 8021q: adding VLAN 0 to HW filter on device team0
[   79.622021][   T26] bridge0: port 1(bridge_slave_0) entered blocking state
[   79.624609][   T26] bridge0: port 1(bridge_slave_0) entered forwarding state
[   79.633757][   T26] bridge0: port 2(bridge_slave_1) entered blocking state
[   79.636620][   T26] bridge0: port 2(bridge_slave_1) entered forwarding state
[   79.769692][ T6703] 8021q: adding VLAN 0 to HW filter on device batadv0
[   79.812685][ T6703] veth0_vlan: entered promiscuous mode
[   79.819689][ T6703] veth1_vlan: entered promiscuous mode
[   79.849309][ T6703] veth0_macvtap: entered promiscuous mode
[   79.856370][ T6703] veth1_macvtap: entered promiscuous mode
[   79.871730][ T6703] batman_adv: batadv0: Interface activated: batadv_slave_0
[   79.880148][ T6703] batman_adv: batadv0: Interface activated: batadv_slave_1
[   79.880295][ T6752] overlayfs: empty lowerdir
[   79.887092][ T5910] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   79.894378][ T5910] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   79.899289][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   79.902885][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   79.937394][ T1089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.942303][ T1089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   79.961448][ T1089] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   79.965030][ T1089] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   80.514660][  T792] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   80.664770][  T792] usb 4-1: Using ep0 maxpacket: 16
[   80.668363][  T792] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11
[   80.672451][  T792] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[   80.677204][  T792] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[   80.688579][  T792] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   80.691902][  T792] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   80.695141][  T792] usb 4-1: SerialNumber: syz
[   80.698910][ T6762] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[   80.914259][  T792] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22
[   80.923822][  T792] usb 4-1: USB disconnect, device number 2
[   80.934845][ T5236] Bluetooth: hci0: command tx timeout
[   81.031120][   T47] usb 3-1: USB disconnect, device number 5
[   81.215651][ T6798] loop2: detected capacity change from 0 to 2048
[   81.219806][ T6798] EXT4-fs: Ignoring removed mblk_io_submit option
[   81.248184][ T6798] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[   81.257522][ T6798] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.303: bg 0: block 234: padding at end of block bitmap is not set
[   81.265085][ T6798] EXT4-fs (loop2): Remounting filesystem read-only
[   81.286407][ T5849] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[   81.361388][ T6807] loop2: detected capacity change from 0 to 4096
[   81.373789][ T6808] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   81.495420][  T793] cfg80211: failed to load regulatory.db
[   81.609828][ T6830] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3)
[   81.611860][ T6830] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed)
[   81.614966][ T6830] vhci_hcd vhci_hcd.0: Device attached
[   81.804908][   T47] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[   81.845213][    T9] usb 39-1: new low-speed USB device number 2 using vhci_hcd
[   81.855163][ T5890] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   81.954854][   T47] usb 3-1: Using ep0 maxpacket: 16
[   81.958588][   T47] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 8
[   81.964202][   T47] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00
[   81.972199][   T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   81.977138][   T47] usb 3-1: Product: syz
[   81.978908][   T47] usb 3-1: Manufacturer: syz
[   81.980913][   T47] usb 3-1: SerialNumber: syz
[   81.984142][   T47] usb 3-1: config 0 descriptor??
[   81.993078][   T47] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected
[   81.997778][   T47] usb 3-1: Detected FT232R
[   82.003067][   T33] kauditd_printk_skb: 4 callbacks suppressed
[   82.003149][   T33] audit: type=1326 audit(1755907543.697:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.1.319" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5f8ed8ebe9 code=0x7ffc0000
[   82.015322][ T5890] usb 4-1: Using ep0 maxpacket: 16
[   82.016018][   T33] audit: type=1326 audit(1755907543.707:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.1.319" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f8ed2ade9 code=0x7ffc0000
[   82.021232][ T5890] usb 4-1: config 0 has no interfaces?
[   82.030161][ T5890] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00
[   82.035928][   T33] audit: type=1326 audit(1755907543.727:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.1.319" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f8ed2ade9 code=0x7ffc0000
[   82.036589][ T5890] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.049201][   T33] audit: type=1326 audit(1755907543.727:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.1.319" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f8ed2ade9 code=0x7ffc0000
[   82.058911][   T33] audit: type=1326 audit(1755907543.727:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.1.319" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f8ed2ade9 code=0x7ffc0000
[   82.059272][ T5890] usb 4-1: config 0 descriptor??
[   82.068800][   T33] audit: type=1326 audit(1755907543.727:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.1.319" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f8ed2ade9 code=0x7ffc0000
[   82.078403][   T33] audit: type=1326 audit(1755907543.727:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.1.319" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f8ed2ade9 code=0x7ffc0000
[   82.090856][   T33] audit: type=1326 audit(1755907543.727:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.1.319" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f8ed2ade9 code=0x7ffc0000
[   82.104931][   T33] audit: type=1326 audit(1755907543.727:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.1.319" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f8ed2ade9 code=0x7ffc0000
[   82.112232][   T33] audit: type=1326 audit(1755907543.727:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6837 comm="syz.1.319" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f5f8ed2ade9 code=0x7ffc0000
[   82.198672][   T47] ftdi_sio ttyUSB0: Unable to read latency timer: -32
[   82.310007][ T6831] usb 39-1: recv xbuf, 0
[   82.312194][ T5890] usb 4-1: USB disconnect, device number 3
[   82.317030][ T5716] vhci_hcd: stop threads
[   82.318450][ T5716] vhci_hcd: release socket
[   82.320130][ T5716] vhci_hcd: disconnect device
[   82.385045][    T9] vhci_hcd: vhci_device speed not set
[   82.403800][   T47] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0
[   82.604185][   T47] usb 3-1: USB disconnect, device number 6
[   82.613081][   T47] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[   82.618130][   T47] ftdi_sio 3-1:0.0: device disconnected
[   82.861886][ T6851] bridge0: port 2(bridge_slave_1) entered disabled state
[   82.906376][ T6854] loop3: detected capacity change from 0 to 4096
[   82.917384][ T6855] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[   82.926527][ T6854] NILFS (loop3): unable to set label with more than 80 bytes
[   83.015338][ T5236] Bluetooth: hci0: command tx timeout
[   83.273996][ T6881] wg1 speed is unknown, defaulting to 1000
[   83.496232][    T9] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[   83.547823][ T6901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.346'.
[   83.550656][ T6901] netlink: 'syz.3.346': attribute type 21 has an invalid length.
[   83.645103][    T9] usb 3-1: Using ep0 maxpacket: 16
[   83.646190][ T6907] @: renamed from bond_slave_0
[   83.648846][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   83.653479][    T9] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   83.663120][    T9] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   83.666926][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   83.670273][    T9] usb 3-1: Product: syz
[   83.672141][    T9] usb 3-1: Manufacturer: syz
[   83.674141][    T9] usb 3-1: SerialNumber: syz
[   83.686738][ T6909] fuse: Bad value for 'fd'
[   84.084826][    T9] usb 3-1: 0:2 : does not exist
[   84.116306][ T6924] netlink: 16255 bytes leftover after parsing attributes in process `syz.1.356'.
[   84.170809][ T6928] capability: warning: `syz.1.358' uses 32-bit capabilities (legacy support in use)
[   84.690374][    T9] usb 3-1: USB disconnect, device number 7
[   85.095378][ T5236] Bluetooth: hci0: command tx timeout
[   85.483060][ T6948] loop2: detected capacity change from 0 to 32768
[   85.526912][ T6948] bcachefs (loop2): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,checksum_err_retry_nr=12,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,degraded=yes,nojournal_transaction_names
[   85.526936][ T6948]   allowing incompatible features above 0.0: (unknown version)
[   85.526945][ T6948]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[   85.547905][ T6948] bcachefs (loop2): Using encoding defined by superblock: utf8-12.1.0
[   85.551082][ T6948] bcachefs (loop2): initializing new filesystem
[   85.560082][ T6948] bcachefs (loop2): going read-write
[   85.566149][ T6948] bcachefs (loop2): marking superblocks
[   85.577334][ T6948] bcachefs (loop2): initializing freespace
[   85.582305][ T6948] bcachefs (loop2): done initializing freespace
[   85.589842][ T6948] bcachefs (loop2): reading snapshots table
[   85.592427][ T6948] bcachefs (loop2): reading snapshots done
[   85.615115][ T6948] bcachefs (loop2): done starting filesystem
[   85.687657][ T5849] bcachefs (loop2): shutting down
[   85.690371][ T5849] bcachefs (loop2): going read-only
[   85.693013][ T5849] bcachefs (loop2): finished waiting for writes to stop
[   85.697353][ T5849] bcachefs (loop2): flushing journal and stopping allocators, journal seq 2
[   85.711763][ T5849] bcachefs (loop2): flushing journal and stopping allocators complete, journal seq 3
[   85.718032][ T5849] bcachefs (loop2): clean shutdown complete, journal seq 4
[   85.720733][ T5849] bcachefs (loop2): marking filesystem clean
[   85.732724][ T5849] bcachefs (loop2): shutdown complete
[   86.422606][ T6997] affs: No valid root block on device nullb0
[   87.175710][ T5236] Bluetooth: hci0: command tx timeout
[   87.490813][ T7018] loop3: detected capacity change from 0 to 256
[   87.684850][ T7023] loop3: detected capacity change from 0 to 256
[   87.698658][ T7023] exFAT-fs (loop3): Invalid exboot-signature(sector = 2): 0x1119abd0
[   87.713473][ T7023] exFAT-fs (loop3): Invalid exboot-signature(sector = 5): 0x1119abd0
[   87.717912][ T7023] exFAT-fs (loop3): Invalid exboot-signature(sector = 6): 0x00000000
[   87.721213][ T7023] exFAT-fs (loop3): Invalid exboot-signature(sector = 7): 0x00000000
[   87.724571][ T7023] exFAT-fs (loop3): Invalid exboot-signature(sector = 8): 0x00000000
[   87.728721][ T7023] exFAT-fs (loop3): Invalid boot checksum (boot checksum : 0x00000000, checksum : 0x13a8bc6e)
[   87.737585][ T7023] exFAT-fs (loop3): invalid boot region
[   87.739520][ T7023] exFAT-fs (loop3): failed to recognize exfat type
[   87.772944][ T7029] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI
[   87.776707][ T7029] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[   87.780552][ T7029] CPU: 1 UID: 0 PID: 7029 Comm: syz.2.398 Not tainted syzkaller #0 PREEMPT(full) 
[   87.784032][ T7029] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[   87.787996][ T7029] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[   87.790296][ T7029] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 29 30 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 08 30 36 f9 4d 8b 24 24 48 83 c3
[   87.797399][ T7029] RSP: 0018:ffffc90006d47a60 EFLAGS: 00010206
[   87.799298][ T7029] RAX: 0000000000000005 RBX: ffff88810f4b9500 RCX: 0000000000080000
[   87.801788][ T7029] RDX: ffffc90007e29000 RSI: 00000000000003b2 RDI: 00000000000003b3
[   87.804684][ T7029] RBP: 0000000000000000 R08: ffff88802089592f R09: 1ffff11004112b25
[   87.807966][ T7029] R10: dffffc0000000000 R11: ffffffff88ecbf30 R12: 0000000000000028
[   87.811219][ T7029] R13: dffffc0000000000 R14: ffff888020895800 R15: dffffc0000000000
[   87.813976][ T7029] FS:  00007fa6909f66c0(0000) GS:ffff8881a3c1b000(0000) knlGS:0000000000000000
[   87.816956][ T7029] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   87.819356][ T7029] CR2: 0000001b32623ffc CR3: 0000000110550000 CR4: 00000000000006f0
[   87.821923][ T7029] Call Trace:
[   87.822993][ T7029]  <TASK>
[   87.823987][ T7029]  pcl818_detach+0x66/0xd0
[   87.825456][ T7029]  comedi_device_detach_locked+0x178/0x750
[   87.827625][ T7029]  ? security_capable+0x7e/0x2e0
[   87.829473][ T7029]  comedi_unlocked_ioctl+0xcde/0x1020
[   87.831408][ T7029]  ? tomoyo_path_number_perm+0x47a/0x5a0
[   87.833195][ T7029]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[   87.835363][ T7029]  ? do_futex+0x333/0x420
[   87.837041][ T7029]  ? lock_release+0x4b/0x3e0
[   87.838813][ T7029]  ? __se_sys_futex+0x36f/0x400
[   87.840491][ T7029]  ? __fget_files+0x2a/0x420
[   87.841965][ T7029]  ? __fget_files+0x3a0/0x420
[   87.843485][ T7029]  ? __fget_files+0x2a/0x420
[   87.845199][ T7029]  ? bpf_lsm_file_ioctl+0x9/0x20
[   87.847020][ T7029]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[   87.849145][ T7029]  __se_sys_ioctl+0xfc/0x170
[   87.850793][ T7029]  do_syscall_64+0xfa/0x3b0
[   87.852417][ T7029]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.854242][ T7029]  ? exc_page_fault+0x9f/0xf0
[   87.855858][ T7029]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   87.857728][ T7029] RIP: 0033:0x7fa69278ebe9
[   87.859121][ T7029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[   87.865167][ T7029] RSP: 002b:00007fa6909f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   87.868190][ T7029] RAX: ffffffffffffffda RBX: 00007fa6929b5fa0 RCX: 00007fa69278ebe9
[   87.870747][ T7029] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 0000000000000003
[   87.873359][ T7029] RBP: 00007fa692811e19 R08: 0000000000000000 R09: 0000000000000000
[   87.876053][ T7029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   87.878657][ T7029] R13: 00007fa6929b6038 R14: 00007fa6929b5fa0 R15: 00007ffde1214a38
[   87.881263][ T7029]  </TASK>
[   87.882291][ T7029] Modules linked in:
[   87.883756][    C1] vkms_vblank_simulate: vblank timer overrun
[   87.886531][ T7029] ---[ end trace 0000000000000000 ]---
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[   87.892171][ T7029] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[   87.903617][ T7029] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 29 30 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 08 30 36 f9 4d 8b 24 24 48 83 c3
[   87.926453][ T7029] RSP: 0018:ffffc90006d47a60 EFLAGS: 00010206
[   87.929032][ T7029] RAX: 0000000000000005 RBX: ffff88810f4b9500 RCX: 0000000000080000
[   87.931624][ T7029] RDX: ffffc90007e29000 RSI: 00000000000003b2 RDI: 00000000000003b3
[   87.934250][ T7029] RBP: 0000000000000000 R08: ffff88802089592f R09: 1ffff11004112b25
[   87.937947][ T7029] R10: dffffc0000000000 R11: ffffffff88ecbf30 R12: 0000000000000028
[   87.941037][ T7029] R13: dffffc0000000000 R14: ffff888020895800 R15: dffffc0000000000
[   87.944365][ T7029] FS:  00007fa6909f66c0(0000) GS:ffff8880b861b000(0000) knlGS:0000000000000000
[   87.949530][ T7029] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   87.952067][ T7029] CR2: 00007fa916ae7d60 CR3: 0000000110550000 CR4: 00000000000006f0
[   87.954899][ T7029] Kernel panic - not syncing: Fatal exception
[   87.957518][ T7029] Kernel Offset: disabled
[   87.958912][ T7029] Rebooting in 86400 seconds..

VM DIAGNOSIS:
23:53:01  Registers:
info registers vcpu 0

CPU#0
RAX=b7d5414d3ea49300 RBX=ffffffff819683b8 RCX=b7d5414d3ea49300 RDX=0000000000000001
RSI=ffffffff8be33660 RDI=ffffffff819683b8 RBP=ffffffff8de07eb8 RSP=ffffffff8de07d80
R8 =ffff88804b032f9b R9 =1ffff110096065f3 R10=dffffc0000000000 R11=ffffed10096065f4
R12=ffffffff8fa38330 R13=0000000000000000 R14=0000000000000000 R15=1ffffffff1bd2a20
RIP=ffffffff8b7973f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fa915d733e0 CR3=0000000110550000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81748632 ffffffff8174859b
XMM02=00007fa692987498 ffffffff8174859b XMM03=00007fa6929874a8 00007fa6929874a0
XMM04=00007fa6934ed100 00007fa692987460 XMM05=00007fa692987478 00007fa6929874c0
XMM06=00007fa6929874b8 00007fa6929874b0 XMM07=00007fa6929874a8 00007fa6929874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fa692812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000038 RBX=0000000000000038 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000014e8 RDI=00000000000014e9 RBP=00000000000003f8 RSP=ffffc90006d471f0
R8 =ffff888020878237 R9 =1ffff1100410f046 R10=dffffc0000000000 R11=ffffffff854f1d00
R12=dffffc0000000000 R13=ffffffff99afa8c9 R14=ffffffff99def3e0 R15=0000000000000000
RIP=ffffffff854f1d7c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fa6909f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b32623ffc CR3=0000000110550000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fa692987498 00007fa692987470 XMM03=00007fa6929874a8 00007fa6929874a0
XMM04=00007fa6934ed100 00007fa692987460 XMM05=00007fa692987478 00007fa6929874c0
XMM06=00007fa6929874b8 00007fa6929874b0 XMM07=00007fa6929874a8 00007fa6929874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fa692812fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
