last executing test programs:

14m32.00662264s ago: executing program 32 (id=110):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720a00fef8ffffff71a4f1ff0000000071302000000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00ff040400007203000000000000b500f7ff000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3380d28e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51bf900000000000000d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93020000000000000080e69db384ac7eeedcf2ba3a9508f9d6aba582a896a9f1e096df6ecea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6032399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20}, 0x48)

14m1.999052878s ago: executing program 33 (id=340):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$IOMMU_OPTION$IOMMU_OPTION_RLIMIT_MODE(r0, 0x3b87, &(0x7f00000003c0)={0x18, 0x0, 0x0, 0x0, 0x0, 0x1})

13m11.031493264s ago: executing program 34 (id=781):
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000001440), 0x200, 0x0)
ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, 0x0)

12m45.702897064s ago: executing program 35 (id=1001):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000080)=ANY=[@ANYBLOB='acl,heartbeat=none,dir_resv_level=00003,coherency=full,coherency=full,localflocks,coherency=full,noacl,\x00'/119], 0x1, 0x442c, &(0x7f00000088c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x0)
ioctl(r0, 0x1, &(0x7f0000000080))

12m40.456694814s ago: executing program 5 (id=1034):
syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000040)='./file0\x00', 0x10400, &(0x7f0000000d40)=ANY=[], 0xfe, 0x2ae, &(0x7f0000000a40)="$eJzs3c9qY1UYAPDvpkka7SJZuBLBu5iFG8tkti7MIBXErpQs/AM6ODMwNGGggcCoGGblE7hw4Xu4cy+48Q0EH8CdgxSO3NzbJLZp2rSmlfr7bXo45/vu+U7uabO43NPPXxsePHw6evz869+i1cqi1otevMiiE7U4lioBANwKL1KKPy71/V6vbaomAGCzFr7/G2eEbJ/uenvTZQEAG/ThRx+/f39/f++DPG9FDL8d97Mof5bj9x/HkxjEo7gb7TiaPwtIqWy/+97+XtTzQifuDCfjfpE5/OyXxccGRX432tFZnt/NSwv5k3G/ES9HZFnEk15RyL1oxyun8ovxvXtL8qPfjDda1SKL+XejHb9+EU9jEA+nzzTm83/TzfN30nd/fvVJEVzkZ5Nxf3saN5e2rvveAAAAAAAAAAAAAAAAAAAAAABwe+3mM524Myy6qvN3to6m47v/GJ+er1Objpf5WURz2jhxPtAkxQ/H5+vczfM8ZWX8/Hyferxaj/qNLRwAAAAAAAAAAAAAAAAAAAD+Q0bPvjx4MBg8OvxXGtVL/rPX+i97nd5Cz+uxOnh7rbliqwovaj0Z0/350+Gsp1jEZYofN/KIVTU3TvW8VNRz/pX/SimlLIu42m1qXGSucxo7q2OKD/in73fePHiQnfcZto5v3I+LQ804HD07cU8jW6fCtNb2a66IaVY75kLX2bniL9Fbv5eTVT3ZGqtoVI04a/u11trP1/c3CAAAAAAAAAAAAAAAAAAAKM1f+l0y+Hxlam1jRQEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADANZv///81GpMqeXlMSmky62nG4eiGlwgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMD/wN8BAAD//7DYbww=")
truncate(&(0x7f0000000080)='./file1\x00', 0xf0fe)

12m40.268760115s ago: executing program 5 (id=1036):
r0 = syz_open_dev$sndpcmc(&(0x7f0000004240), 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_STATUS64(r0, 0xc06c4124, &(0x7f0000000080))

12m40.177810838s ago: executing program 5 (id=1037):
r0 = socket$kcm(0x2, 0x2, 0x0)
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="30000000000000000000000007000000070b07a50000000000000044140901"], 0x30}, 0x0)

12m40.125068859s ago: executing program 5 (id=1038):
syz_mount_image$hfsplus(&(0x7f0000000100), &(0x7f0000000000)='./file1\x00', 0x80, &(0x7f0000000340)=ANY=[@ANYBLOB="756d61736b3d30303030303030303030303031373737373737373737372c6e6c733d63703934392c63726561746f723d7af940e22c63726561746f723d0aee18b02c666f7263652c6769643d", @ANYRESHEX=0x0, @ANYBLOB="2c63726561746f723d1362a84f2c001ff9431eef5603a24fd03ed91e53947f1c1b0db87d311ac2332606851a5634c431970f558844dd9de7c5411a6a043cd24b8dac907e9e8575657ddeae1a3b6113873ccbc19593f645cac58983c2694a9c166df86f5cc5fdb0a4f7285667940bab9d107a53ca4f3f986662f9c2050388a55392282348754d"], 0x1, 0x6f4, &(0x7f0000000680)="$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")
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='hugetlbfs\x00', 0x0, 0x0)
chdir(&(0x7f0000000640)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
fallocate(r0, 0x10, 0x6, 0x10001)

12m39.926194768s ago: executing program 5 (id=1039):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000005140)='./file0\x00', 0x12, &(0x7f0000000000)={[{@datacow}, {@datacow}, {@compress_algo={'compress', 0x3d, 'lzo'}}]}, 0x1, 0x510c, &(0x7f000000a2c0)="$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")
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0x10)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15)
openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x0, 0x80)

12m39.637967448s ago: executing program 5 (id=1040):
fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x1, 0x40}}, 0x0}, 0x0)

12m39.350696067s ago: executing program 36 (id=1040):
fspick(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000580)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x29, 0xf, {0xf, 0x29, 0x9, 0x3, 0x1, 0x40}}, 0x0}, 0x0)

12m9.975218759s ago: executing program 6 (id=1242):
syz_usb_connect$uac1(0x2, 0xbc, &(0x7f0000000000)=ANY=[@ANYBLOB="12010003000000106b1d01014000010203010902aa00030156c0020904000000010100000a24010101bb02010211240601040507000a0008000300020005052405060f0f2406020504020002000a000a00040c240202030202508000090111240605020507002e130a004ef10200000924030102020505f50904010000010200000904010101010200000905010920009301050725010003480f090402000001020000090402010101ff0000090582"], &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0})

12m8.644731693s ago: executing program 6 (id=1246):
bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x48)
getpriority(0x2, r0)
bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0x3, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18)
prctl$PR_SET_MM(0x23, 0xa, &(0x7f00002d5000/0x2000)=nil)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00')
preadv(r4, &(0x7f0000001400)=[{&(0x7f0000000040)=""/113, 0x200000b1}], 0x1, 0xc002a0, 0x0)

12m7.117107049s ago: executing program 6 (id=1249):
openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000000000010ac05470200000000000109022400010000500009040002010300010009210000000122f80409058103"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000100)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="000706000000ff"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0)

12m5.289619612s ago: executing program 6 (id=1263):
syz_mount_image$jfs(&(0x7f0000000100), &(0x7f0000000140)='./file1\x00', 0x1010006, &(0x7f0000000640)=ANY=[@ANYBLOB='quota,discard=0x000000000000aff9,iocharset=none,errors=continue,iocharset=cp869,discard=0x0000000000000005,nodiscard,uid=', @ANYRESHEX=0x0, @ANYRES8=0x0, @ANYRESHEX=0x0, @ANYBLOB=',\x00'], 0x22, 0x61b6, &(0x7f000001b700)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})
r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000000)=""/41, 0x29)

12m4.873510093s ago: executing program 6 (id=1265):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r1 = socket(0x400000000010, 0x3, 0x0)
r2 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xd, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000005480)=@newtfilter={0x68, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r3, {0x0, 0x3}, {}, {0x3}}, [@filter_kind_options=@f_matchall={{0xd}, {0x34, 0x2, [@TCA_MATCHALL_ACT={0x30, 0x2, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x0)

12m4.355533031s ago: executing program 6 (id=1269):
unshare(0x2040400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1, &(0x7f00000005c0)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x90)

12m3.895492086s ago: executing program 37 (id=1269):
unshare(0x2040400)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002500)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1, &(0x7f00000005c0)=@raw=[@func], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, r0}, 0x90)

10m45.488769974s ago: executing program 8 (id=1972):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0)
write$binfmt_aout(r0, &(0x7f0000000200)=ANY=[], 0xff2e)
r1 = syz_io_uring_setup(0x234, &(0x7f0000000580)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r1, 0x207a98, 0x0, 0x0, 0x0, 0x0)
ioctl$TIOCVHANGUP(r0, 0x5437, 0x0)

10m45.395582841s ago: executing program 8 (id=1973):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0x1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x1, r1})
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1})

10m45.395180245s ago: executing program 8 (id=1974):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001e0001", @ANYRESHEX=r0], 0x24}}, 0x0)

10m45.33804597s ago: executing program 8 (id=1975):
syz_mount_image$exfat(&(0x7f0000000080), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000000480)={[{@iocharset={'iocharset', 0x3d, 'iso8859-15'}}, {@umask={'umask', 0x3d, 0x3}}, {@keep_last_dots}, {}, {@umask={'umask', 0x3d, 0x7f}}, {@discard}, {@fmask={'fmask', 0x3d, 0x8}}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'macinuit'}}, {@allow_utime={'allow_utime', 0x3d, 0xce38}}]}, 0x1, 0x1528, &(0x7f00000037c0)="$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")
mkdirat(0xffffffffffffff9c, 0x0, 0x1c0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
chroot(&(0x7f0000000100)='./file0\x00')
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a95005, 0x0)
pivot_root(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00')

10m45.285853658s ago: executing program 8 (id=1976):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x64, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x76ea}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x24000000}, 0x800)

10m45.188739213s ago: executing program 8 (id=1978):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2101c84, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x1)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

10m45.046999541s ago: executing program 38 (id=1978):
creat(&(0x7f0000000240)='./file0\x00', 0x0)
pipe2$9p(&(0x7f0000001900)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[], [], 0x6b}})
mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x2101c84, 0x0)
umount2(&(0x7f0000000000)='./file0\x00', 0x1)
creat(&(0x7f0000000300)='./file0\x00', 0x0)

9m27.067852842s ago: executing program 7 (id=2920):
r0 = socket(0x11, 0x3, 0x0)
setsockopt$packet_int(r0, 0x107, 0x12, &(0x7f0000000080)=0xe9, 0x4)

9m26.989944585s ago: executing program 7 (id=2922):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2000002, &(0x7f0000000300)={[{@iocharset={'iocharset', 0x3d, 'cp437'}}, {@gid}, {@gid}, {@gid_ignore}, {@uid}, {}, {@gid_ignore}, {@anchor={'anchor', 0x3d, 0x4}}, {@noadinicb}]}, 0x1, 0xc43, &(0x7f0000001a40)="$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")

9m26.891936358s ago: executing program 7 (id=2924):
r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x490420, 0x2}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x1000800, 0x0, 0x9, 0x1ff, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, r3, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0)
io_setup(0x2, &(0x7f0000000200)=<r5=>0x0)
io_submit(r5, 0x140b, &(0x7f0000000700)=[&(0x7f0000000440)={0x18, 0x7000000, 0x20, 0x1, 0x0, r4, &(0x7f0000000180)='\x00', 0xfdfe}])
dup3(r0, r1, 0x6700000000000000)

9m26.601804905s ago: executing program 7 (id=2925):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x2125099, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0)
mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0)
umount2(&(0x7f0000000280)='./file0/file0/file0\x00', 0xa)

9m26.513044258s ago: executing program 7 (id=2926):
r0 = syz_open_procfs(0x0, &(0x7f0000000400)='fd\x00')
getdents(r0, 0xffffffffffffffff, 0x5a)

9m26.230306459s ago: executing program 7 (id=2931):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000000001000000050007000000000008000900000000101400200000000000000000000000ffff0000000008000a000000000014001f00000000000000000000000040000000000600020011"], 0x64}, 0x1, 0x620b}, 0x0)

9m26.052175497s ago: executing program 39 (id=2931):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100ffffffff0000000001000000050007000000000008000900000000101400200000000000000000000000ffff0000000008000a000000000014001f00000000000000000000000040000000000600020011"], 0x64}, 0x1, 0x620b}, 0x0)

7m40.052727357s ago: executing program 9 (id=4110):
r0 = socket$inet(0x2, 0x1, 0x0)
getsockopt(r0, 0x0, 0x15, 0xffffffffffffffff, &(0x7f0000000040)=0xfe)

7m39.961527274s ago: executing program 9 (id=4112):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={0x54, 0x0, 0x2, 0x401, 0x0, 0x0, {0x2, 0x0, 0x5}, [@CTA_EXPECT_TUPLE={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_EXPECT_MASK={0x18, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}]}, @CTA_EXPECT_MASTER={0x4}]}, 0x54}}, 0x0)

7m39.878781582s ago: executing program 9 (id=4114):
r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000)
write$dsp(r0, &(0x7f00000000c0)="c119", 0x2)
ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)=0x10004)

7m39.761750271s ago: executing program 9 (id=4117):
syz_mount_image$cramfs(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="00af268263b121dc03d7d9b98b9cdb76841d31005b31fdfd141b652968fbeae7aac982a517703dc5950f6728aecf5ec337b119ffd66d0a02970718ba573db352906385cece74366e628b6a775c9a6f6fff046416c6240e39a647186c4cf0b360bd17d4cdbd912dc61fd24e6f17d8"], 0x1, 0x152, &(0x7f00000007c0)="$eJzs0E1LKnEUx/Hf3Bnlcq/eBzKwFia0aEjMacRatdBIEtKBwk0rwSYKFCOhXBrRrkXQ1oXlVnwLlrWxRgh7E23cBS0n/o7Rw67977MZ5nsOh2FWlnoqgoAMx3KpuLdvlsvmVnDdSCc3ntrtuOhuAD8/zZ39qziwI54KMDgCRL7xAtu7BXMuXyqI90EcUAEkfjtdg7P7SzSf0+YhSaKp00Bn3Gn6aO9ji47apAIk/r7fsy+AGXHv/9s94BlApRZquZCxbNu2xfeepEJTY5LTm3cZq5sKzwbMUz050fD4ZWTN20skhvPHSDf8EGk1+z0rvWakjV5U1xeimqJpsb5xb6Vi1TMoq54DYPPLPTf8ASULHEvA+XA2uJa8ADr1F6P4Z7E++tfVQzkISJVaPud3NXK+fz8gq5BARERERERERERERERERET0Xa8BAAD//wFeZcY=")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f00000001c0)='./file0\x00')
setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f0000000040), &(0x7f0000000240)=ANY=[], 0x25, 0x2)

7m39.633424585s ago: executing program 9 (id=4119):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="580000001000010400004000fedbdf2501f80000", @ANYRES32=0x0, @ANYBLOB="01020400000000002800128008000100736974001c00028008000200c6120001060008001900000005000a00fd000000080004000100010008000a00fa"], 0x58}}, 0x0)

7m39.292198223s ago: executing program 9 (id=4123):
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_cancel(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f0000000180)="7e32c806221048449b684392b514ba6293730f87a817a6688f39d3d74effbb19fe471630fe20cba9dc132229cfa3721c88e6c8c8522dc1970c6a3d7e6657eb9b44b69f427267edcb92456dcb043f1ea3a2d31638b5983cbca4ba2d82c1", 0x5d, 0x3}, &(0x7f0000000240))

7m39.117165211s ago: executing program 40 (id=4123):
io_setup(0x2, &(0x7f0000000140)=<r0=>0x0)
io_cancel(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x5, 0xffffffffffffffff, &(0x7f0000000180)="7e32c806221048449b684392b514ba6293730f87a817a6688f39d3d74effbb19fe471630fe20cba9dc132229cfa3721c88e6c8c8522dc1970c6a3d7e6657eb9b44b69f427267edcb92456dcb043f1ea3a2d31638b5983cbca4ba2d82c1", 0x5d, 0x3}, &(0x7f0000000240))

4m54.964545871s ago: executing program 2 (id=6544):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, 0x0, &(0x7f0000000040))

4m54.964246665s ago: executing program 2 (id=6546):
r0 = socket(0x22, 0x2, 0x3)
ioctl$IMGETCOUNT(r0, 0x80044943, &(0x7f0000000000))

4m54.963938292s ago: executing program 2 (id=6547):
r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r0, <r1=>0xffffffffffffffff}, 0x4)
r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x2, 0x1c, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000100000000000800000085000000a5000000bf91000000000000b7020000000000008500000085000000b7001f000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

4m54.900735348s ago: executing program 2 (id=6549):
syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1ee, &(0x7f0000000440)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0)
ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000280)=0x10)

4m54.862399617s ago: executing program 2 (id=6550):
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001500000000120800030043000000a80016000400dfbfdb2d47782a462c9c801f298225c506000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d9308e56539322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3", 0xd8}], 0x1}, 0x8040)

4m54.498971449s ago: executing program 2 (id=6557):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0x538d28a0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20})
socket$tipc(0x1e, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x4)
listen(r0, 0xfff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)

4m54.40579688s ago: executing program 41 (id=6557):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
clock_adjtime(0x0, &(0x7f0000000040)={0x37db, 0x538d28a0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20})
socket$tipc(0x1e, 0x5, 0x0)
socket$kcm(0x10, 0x2, 0x4)
listen(r0, 0xfff)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @random="cf3cccaf382f", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0)

1m36.748447087s ago: executing program 0 (id=9402):
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_sys\x00', 0x275a, 0x0)
fcntl$lock(r0, 0x26, &(0x7f0000000080)={0x0, 0x0, 0x2007, 0x1fd})
fcntl$lock(r0, 0x25, &(0x7f0000000280)={0x1, 0x0, 0x2f, 0x9})
fcntl$lock(r0, 0x24, &(0x7f0000000180)={0x2, 0x1, 0x3ff, 0x401})

1m36.748069459s ago: executing program 0 (id=9403):
ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2})
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
bpf$MAP_CREATE(0x0, 0x0, 0x50)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x2, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x6)
bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0)
bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0x0, 0x1000000, 0x0})

1m35.708889111s ago: executing program 0 (id=9409):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f0000000300)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@quota}, {@stripe={'stripe', 0x3d, 0x2}}, {@jqfmt_vfsold}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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")
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x0, 0x0, 0x0, 0x9})
renameat2(0xffffffffffffff9c, &(0x7f00000007c0)='./file1\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./file3\x00', 0x4)

1m35.614376009s ago: executing program 0 (id=9411):
syz_mount_image$vfat(&(0x7f0000000280), &(0x7f00000002c0)='./file0\x00', 0x2bc3c1f, 0xffffffffffffffff, 0x7, 0x0, 0x0)
mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000440)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0)
mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0)
mount$bind(&(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x2125099, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)

1m35.556108147s ago: executing program 0 (id=9414):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x48080}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_RANGE_FROM_DATA={0xc, 0x3, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, ' '}]}, @NFTA_RANGE_OP={0x8}, @NFTA_RANGE_TO_DATA={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, '\''}]}, @NFTA_RANGE_SREG={0x8}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x94}}, 0x24000000)

1m35.228365782s ago: executing program 0 (id=9421):
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000200))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00'}, 0x18)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x2f, 0x0, 0x0, 0x0, 0x0}, 0x48)

1m34.999175037s ago: executing program 42 (id=9421):
ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, 0x0)
socketpair(0x1, 0x5, 0x0, &(0x7f0000000200))
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00'}, 0x18)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r0, 0x18000000000002a0, 0x204, 0xfffff000, &(0x7f0000000040)="5aee41dea43e63a3f7fb7f11c72b", 0x0, 0xf000, 0x2f, 0x0, 0x0, 0x0, 0x0}, 0x48)

1.353546108s ago: executing program 1 (id=10746):
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000380)={{}, {}, [], {0x4, 0x1}, [{0x8, 0x3, 0xffffffffffffffff}], {0x10, 0x1}}, 0x2c, 0x3)

1.320814608s ago: executing program 1 (id=10748):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x1, 0x3, &(0x7f0000000140)=ANY=[], &(0x7f00000005c0)='GPL\x00', 0x5, 0xd1, &(0x7f00000002c0)=""/209}, 0x94)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000604000000002e"], 0x0, 0x37}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000300)={r0, 0x20, &(0x7f00000002c0)={0x0, 0x0, 0x0, &(0x7f0000002b00)=""/171, 0xab}}, 0x10)

1.245125915s ago: executing program 1 (id=10753):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0xd, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000020642500000000002020207b1af8ff00000000bfa108000000000047010000f6ffffffb702000008000000b70b000000000000850000000500000095"], &(0x7f0000000300)='GPL\x00', 0x1, 0x17, &(0x7f0000000000)=""/23}, 0x94)

1.1712409s ago: executing program 1 (id=10755):
syz_mount_image$fuse(0x0, &(0x7f0000000240)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x10a002, 0x0, 0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x275a, 0x0)
syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000100)='./bus\x00', 0x2129c1b, 0x0, 0x4, 0x0, &(0x7f0000000100))

1.042251238s ago: executing program 1 (id=10758):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x2, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f0000000040)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}})

1.042038255s ago: executing program 4 (id=10759):
mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c23c000, 0x3, 0x2})

987.782642ms ago: executing program 4 (id=10761):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680))
fstatfs(0xffffffffffffffff, 0x0)

987.674809ms ago: executing program 4 (id=10762):
r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x204, 0x2)
mmap(&(0x7f00005b9000/0x1000)=nil, 0x1000, 0x1000003, 0x11012, r0, 0x68255000)
setreuid(0x0, 0xee00)
mincore(&(0x7f0000000000/0x800000)=nil, 0x800000, &(0x7f0000000440)=""/173)

900.993984ms ago: executing program 3 (id=10763):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='system.posix_acl_default\x00', &(0x7f0000000500)={{}, {0x4}, [], {}, [], {0x10, 0x4}, {0x20, 0x4}}, 0x24, 0x0)

900.601753ms ago: executing program 4 (id=10764):
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wlan0\x00'})
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f00000005c0)=ANY=[@ANYBLOB="12010000413f5f201d0650c16fce0102030109021b00010000100009043300011870fd00090582020002"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xa8, &(0x7f0000000400)=ANY=[@ANYBLOB="1b1b"])

854.513303ms ago: executing program 3 (id=10765):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
ioctl$USBDEVFS_CLEAR_HALT(r0, 0x80045515, &(0x7f0000000040)={0x1, 0x1})

780.652531ms ago: executing program 3 (id=10766):
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
futex_waitv(&(0x7f0000004040)=[{0x0, &(0x7f0000000080), 0x2}], 0x1, 0x0, 0x0, 0x1)

727.97168ms ago: executing program 3 (id=10767):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='auxv\x00')
pread64(r0, 0x0, 0x0, 0xc2a)

727.746566ms ago: executing program 3 (id=10768):
r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x90)
bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f00000008c0)={'team0\x00', 0xe761})

618.986542ms ago: executing program 3 (id=10769):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = socket$inet_mptcp(0x2, 0x1, 0x106)
bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10)
setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8)
connect$inet(r3, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10)
syz_open_dev$midi(0x0, 0x2, 0x0)
close(r3)

75.663268ms ago: executing program 4 (id=10770):
r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0)
socket$inet(0x2, 0x5, 0x0)
r2 = socket$nl_rdma(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)={0x38, 0x1412, 0x1, 0x70bd25, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_RES_LQPN={0x8, 0x15, 0x5}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x8010)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r3}, 0x10)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
sendfile(r0, r1, 0x0, 0x106f)

590.949µs ago: executing program 1 (id=10771):
r0 = syz_open_dev$loop(&(0x7f0000000140), 0x1d4, 0x0)
ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0)

0s ago: executing program 4 (id=10772):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0)
sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002a600000200"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000bb0000000032"], 0xf8}}, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @empty, 0x1}, 0x1c)
sendmsg$nl_xfrm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[], 0x134}}, 0x0)

kernel console output (not intermixed with test programs):

x7fcc9958ebe9 code=0x7ffc0000
[  724.664693][   T33] audit: type=1326 audit(1755177765.718:452): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24808 comm="syz.0.7335" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9958ebe9 code=0x7ffc0000
[  724.685703][   T33] audit: type=1326 audit(1755177765.736:453): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24808 comm="syz.0.7335" exe="/syz-executor" sig=0 arch=c000003e syscall=276 compat=0 ip=0x7fcc9958ebe9 code=0x7ffc0000
[  724.708041][   T33] audit: type=1326 audit(1755177765.736:454): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24808 comm="syz.0.7335" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9958ebe9 code=0x7ffc0000
[  724.723769][   T33] audit: type=1326 audit(1755177765.736:455): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24808 comm="syz.0.7335" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9958ebe9 code=0x7ffc0000
[  725.037343][T14293] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  725.204995][T14293] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  725.208954][T14293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0
[  725.221543][T14293] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0
[  725.225227][T14293] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  725.245403][T14293] usb 1-1: New USB device found, idVendor=0bfd, idProduct=010c, bcdDevice=2d.16
[  725.248721][T14293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  725.251808][T14293] usb 1-1: Product: syz
[  725.253485][T14293] usb 1-1: Manufacturer: syz
[  725.264732][T14293] usb 1-1: SerialNumber: syz
[  725.268831][T14293] usb 1-1: config 0 descriptor??
[  725.272855][T14293] kvaser_usb 1-1:0.0: error -ENODEV: Cannot get usb endpoint(s)
[  725.496453][T14293] usb 1-1: USB disconnect, device number 16
[  726.081040][T24849] veth1_vlan: entered allmulticast mode
[  726.092673][T24849] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check.
[  726.235923][T24859] overlayfs: failed to clone upperpath
[  726.787041][T24882] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7369'.
[  726.939309][T24890] netlink: 'syz.3.7373': attribute type 3 has an invalid length.
[  727.177998][   T33] audit: type=1326 audit(1755177768.062:456): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24905 comm="syz.4.7381" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  727.189245][   T33] audit: type=1326 audit(1755177768.062:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24905 comm="syz.4.7381" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  727.198170][   T33] audit: type=1326 audit(1755177768.062:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24905 comm="syz.4.7381" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x0
[  728.983465][T24954] netlink: 16 bytes leftover after parsing attributes in process `syz.4.7402'.
[  729.312153][   T33] audit: type=1326 audit(1755177770.028:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24962 comm="syz.3.7406" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effb7b8ebe9 code=0x0
[  730.158569][T24972] afs: Bad value for 'source'
[  730.291444][T24982] unknown channel width for channel at 909000KHz?
[  730.372818][T24985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  731.126441][T25008] netlink: 'syz.0.7427': attribute type 5 has an invalid length.
[  731.135882][T25008] ip6erspan0: entered promiscuous mode
[  731.876953][T25042] netlink: 'syz.3.7443': attribute type 3 has an invalid length.
[  731.880148][T25042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7443'.
[  731.932901][T25045] netlink: 32 bytes leftover after parsing attributes in process `syz.3.7446'.
[  732.087854][T25056] netlink: 12 bytes leftover after parsing attributes in process `syz.4.7451'.
[  732.398848][T25071] netlink: 68 bytes leftover after parsing attributes in process `syz.3.7453'.
[  733.399746][T25085] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7462'.
[  733.691818][T25108] netlink: 'syz.3.7473': attribute type 2 has an invalid length.
[  733.697644][T25108] netlink: 132 bytes leftover after parsing attributes in process `syz.3.7473'.
[  733.918350][T25115] netlink: 'syz.4.7476': attribute type 3 has an invalid length.
[  733.920954][T25115] netlink: 'syz.4.7476': attribute type 27 has an invalid length.
[  735.554545][T25169] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode
[  735.558280][T25169] batadv_slave_0: entered promiscuous mode
[  735.560583][T25169] debugfs: 'hsr1' already exists in 'hsr'
[  735.562662][T25169] Cannot create hsr debugfs directory
[  735.564560][T25169] hsr1: Slave A (wlan0) is not up; please bring it up to get a fully working HSR network
[  735.577801][T25169] hsr1: entered promiscuous mode
[  736.325114][T14293] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[  736.421860][T25216] netlink: 17 bytes leftover after parsing attributes in process `syz.4.7523'.
[  736.425065][T25216] netlink: zone id is out of range
[  736.426858][T25216] netlink: zone id is out of range
[  736.428637][T25216] netlink: zone id is out of range
[  736.430282][T25216] netlink: zone id is out of range
[  736.432231][T25216] netlink: zone id is out of range
[  736.434180][T25216] netlink: zone id is out of range
[  736.438031][T25216] netlink: zone id is out of range
[  736.440011][T25216] netlink: zone id is out of range
[  736.441909][T25216] netlink: zone id is out of range
[  736.443486][T25216] netlink: zone id is out of range
[  736.489002][T14293] usb 1-1: Using ep0 maxpacket: 16
[  736.492687][T14293] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  736.496265][T14293] usb 1-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  736.501459][T14293] usb 1-1: config 0 interface 0 has no altsetting 0
[  736.504573][T14293] usb 1-1: New USB device found, idVendor=060b, idProduct=500a, bcdDevice= 0.00
[  736.508544][T14293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  736.513875][T14293] usb 1-1: config 0 descriptor??
[  736.745347][T25230] netlink: 56 bytes leftover after parsing attributes in process `syz.3.7529'.
[  736.975743][T14293] cougar 0003:060B:500A.001E: unexpected long global item
[  736.980685][T14293] cougar 0003:060B:500A.001E: parse failed
[  736.983192][T14293] cougar 0003:060B:500A.001E: probe with driver cougar failed with error -22
[  737.180031][ T5974] usb 1-1: USB disconnect, device number 17
[  737.372454][T25246] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[  737.567783][T25264] overlayfs: failed to clone upperpath
[  737.690219][T25271] netlink: 'syz.3.7548': attribute type 6 has an invalid length.
[  737.693193][T25271] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.7548'.
[  738.056604][T25295] ip6gretap1: entered promiscuous mode
[  738.058456][T25295] ip6gretap1: entered allmulticast mode
[  738.382513][T25304] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (16777216)
[  739.522912][ T5974] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  739.687228][ T5974] usb 1-1: Using ep0 maxpacket: 32
[  739.690511][ T5974] usb 1-1: config 0 has an invalid interface number: 78 but max is 0
[  739.693099][ T5974] usb 1-1: config 0 has no interface number 0
[  739.695355][ T5974] usb 1-1: config 0 interface 78 has no altsetting 0
[  739.704373][ T5974] usb 1-1: New USB device found, idVendor=07ca, idProduct=b800, bcdDevice=9b.26
[  739.708667][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  739.718452][ T5974] usb 1-1: Product: syz
[  739.720143][ T5974] usb 1-1: Manufacturer: syz
[  739.721751][ T5974] usb 1-1: SerialNumber: syz
[  739.729224][ T5974] usb 1-1: config 0 descriptor??
[  739.743602][ T5974]  (null): radio-mr800 - initialization failed
[  739.747420][ T5974] radio-mr800 1-1:0.78: probe with driver radio-mr800 failed with error -8
[  739.761338][ T5974] usbhid 1-1:0.78: couldn't find an input interrupt endpoint
[  739.975247][ T5974] usb 1-1: USB disconnect, device number 18
[  740.440773][T25337] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7579'.
[  741.180343][T14293] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  741.368024][T14293] usb 1-1: config 10 has an invalid interface number: 185 but max is 0
[  741.371456][T14293] usb 1-1: config 10 has no interface number 0
[  741.373608][T14293] usb 1-1: config 10 interface 185 has no altsetting 0
[  741.378346][T14293] usb 1-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice=72.2f
[  741.385596][T14293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  741.388615][T14293] usb 1-1: Product: syz
[  741.390091][T14293] usb 1-1: Manufacturer: syz
[  741.391905][T14293] usb 1-1: SerialNumber: syz
[  741.645355][T14293] snd-usb-caiaq 1-1:10.185: can't set alt interface.
[  741.648163][T14293] usb 1-1: unable to init card! (ret=-5)
[  741.650622][T14293] snd-usb-caiaq 1-1:10.185: probe with driver snd-usb-caiaq failed with error -5
[  741.657913][T14293] usb 1-1: USB disconnect, device number 19
[  741.684214][ T5910] Bluetooth: hci2: unexpected event for opcode 0x0403
[  741.729553][T25363] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7591'.
[  741.734141][T25363] netlink: 36 bytes leftover after parsing attributes in process `syz.3.7591'.
[  743.132777][T25399] overlayfs: failed to clone upperpath
[  743.280778][T25407] netlink: 'syz.3.7612': attribute type 10 has an invalid length.
[  743.286300][T25407] netdevsim netdevsim3 netdevsim0: left allmulticast mode
[  743.289525][T25407] bridge0: port 4(netdevsim0) entered blocking state
[  743.292398][T25407] bridge0: port 4(netdevsim0) entered disabled state
[  743.295650][T25407] netdevsim netdevsim3 netdevsim0: entered allmulticast mode
[  743.300688][T25407] netdevsim netdevsim3 netdevsim0: entered promiscuous mode
[  744.246865][   T33] audit: type=1326 audit(1755177783.781:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25425 comm="syz.0.7621" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9958ebe9 code=0x7ffc0000
[  744.261657][   T33] audit: type=1326 audit(1755177783.781:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25425 comm="syz.0.7621" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9958ebe9 code=0x7ffc0000
[  744.283519][   T33] audit: type=1326 audit(1755177783.781:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25425 comm="syz.0.7621" exe="/syz-executor" sig=0 arch=c000003e syscall=102 compat=0 ip=0x7fcc9958ebe9 code=0x7ffc0000
[  744.309848][   T33] audit: type=1326 audit(1755177783.781:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25425 comm="syz.0.7621" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcc9958ebe9 code=0x7ffc0000
[  744.806842][   T33] audit: type=1326 audit(1755177784.325:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25442 comm="syz.3.7628" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb7b8ebe9 code=0x7ffc0000
[  744.826250][   T33] audit: type=1326 audit(1755177784.344:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25442 comm="syz.3.7628" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb7b8ebe9 code=0x7ffc0000
[  744.843297][   T33] audit: type=1326 audit(1755177784.362:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25442 comm="syz.3.7628" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7effb7b8ebe9 code=0x7ffc0000
[  744.872796][   T33] audit: type=1326 audit(1755177784.362:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25442 comm="syz.3.7628" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb7b8ebe9 code=0x7ffc0000
[  744.888463][   T33] audit: type=1326 audit(1755177784.362:468): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25442 comm="syz.3.7628" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb7b8ebe9 code=0x7ffc0000
[  744.998299][T25453] net_ratelimit: 76 callbacks suppressed
[  744.998320][T25453] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  746.272398][T14293] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  746.446772][T14293] usb 1-1: Using ep0 maxpacket: 8
[  746.463230][T14293] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  746.467722][T14293] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  746.475532][T14293] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.40
[  746.481336][T14293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  746.484267][T14293] usb 1-1: Product: syz
[  746.499903][T14293] usb 1-1: Manufacturer: syz
[  746.501785][T14293] usb 1-1: SerialNumber: syz
[  746.732363][T14293] usb 1-1: USB disconnect, device number 20
[  747.105700][T25523] netlink: 'syz.4.7665': attribute type 2 has an invalid length.
[  747.109874][T25523] netlink: 119 bytes leftover after parsing attributes in process `syz.4.7665'.
[  748.093379][ T5974] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  748.266225][ T5974] usb 1-1: Using ep0 maxpacket: 32
[  748.270455][ T5974] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  748.275043][ T5974] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  748.280857][ T5974] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  748.288552][ T5974] usb 1-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  748.292597][ T5974] usb 1-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  748.295178][ T5974] usb 1-1: Product: syz
[  748.296506][ T5974] usb 1-1: Manufacturer: syz
[  748.297982][ T5974] usb 1-1: SerialNumber: syz
[  748.313522][ T5974] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input35
[  748.537492][T14293] usb 1-1: USB disconnect, device number 21
[  748.567490][T14293] appletouch 1-1:1.0: input: appletouch disconnected
[  748.592165][T25577] netlink: 'syz.3.7690': attribute type 10 has an invalid length.
[  748.595143][T25577] netlink: 40 bytes leftover after parsing attributes in process `syz.3.7690'.
[  748.602805][T25577] team0: Port device geneve0 added
[  748.608126][ T5919] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  748.611585][ T5919] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  748.621977][ T5919] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  748.630418][ T5919] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  748.999521][T25582] sctp: [Deprecated]: syz.4.7692 (pid 25582) Use of struct sctp_assoc_value in delayed_ack socket option.
[  748.999521][T25582] Use struct sctp_sack_info instead
[  749.288176][T25596] netlink: 'syz.0.7699': attribute type 30 has an invalid length.
[  749.447164][T25602] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7702'.
[  749.451477][T25602] netlink: 52 bytes leftover after parsing attributes in process `syz.0.7702'.
[  749.517555][T25606] overlayfs: failed to resolve './file0/../file0': -2
[  749.607253][T25614] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  749.920365][    C0] hpet: Lost 1 RTC interrupts
[  750.362928][T25660] wg1: entered promiscuous mode
[  750.365000][T25660] wg1: entered allmulticast mode
[  750.530571][T14293] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  750.692821][T14293] usb 1-1: Using ep0 maxpacket: 16
[  750.699905][T14293] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  750.703461][T14293] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  750.706418][T14293] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  750.709470][T14293] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[  750.725641][T14293] usb 1-1: config 1 interface 0 altsetting 0 has an invalid endpoint descriptor of length 3, skipping
[  750.729071][T14293] usb 1-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  750.761405][T14293] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  750.765061][T14293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  750.768150][T14293] usb 1-1: Product: syz
[  750.770114][T14293] usb 1-1: Manufacturer: syz
[  750.771926][T14293] usb 1-1: SerialNumber: syz
[  751.008312][T14293] usb 1-1: 0:2 : does not exist
[  751.022671][T14293] usb 1-1: USB disconnect, device number 22
[  752.296370][T14293] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  752.461460][T14293] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  752.468521][T14293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 203, changing to 4
[  752.473206][T14293] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 46388, setting to 1023
[  752.479165][T14293] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b
[  752.483042][T14293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  752.488507][T14293] usb 1-1: config 0 descriptor??
[  752.714445][T14293] ath6kl: Failed to submit usb control message: -71
[  752.716790][T14293] ath6kl: unable to send the bmi data to the device: -71
[  752.719515][T14293] ath6kl: Unable to send get target info: -71
[  752.722079][T14293] ath6kl: Failed to init ath6kl core: -71
[  752.724614][T14293] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -71
[  752.730000][T14293] usb 1-1: USB disconnect, device number 23
[  754.151723][T25774] program syz.0.7780 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  754.186752][T25776] openvswitch: netlink: VXLAN extension 11 out of range max 1
[  754.475095][   T33] audit: type=1326 audit(1755177793.260:469): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25799 comm="syz.4.7793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  754.497989][   T33] audit: type=1326 audit(1755177793.260:470): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25799 comm="syz.4.7793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  754.517392][   T33] audit: type=1326 audit(1755177793.269:471): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25799 comm="syz.4.7793" exe="/syz-executor" sig=0 arch=c000003e syscall=161 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  754.518812][   T47] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  754.525767][   T33] audit: type=1326 audit(1755177793.269:472): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25799 comm="syz.4.7793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  754.549232][   T33] audit: type=1326 audit(1755177793.269:473): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25799 comm="syz.4.7793" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  754.659715][T25816] netlink: 'syz.3.7800': attribute type 1 has an invalid length.
[  754.662184][T25816] netlink: 'syz.3.7800': attribute type 2 has an invalid length.
[  754.666663][T25816] netlink: 'syz.3.7800': attribute type 1 has an invalid length.
[  754.671673][T25816] netlink: 'syz.3.7800': attribute type 2 has an invalid length.
[  754.724422][   T47] usb 1-1: Using ep0 maxpacket: 32
[  754.728174][   T47] usb 1-1: config 0 interface 0 has no altsetting 0
[  754.733097][   T47] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[  754.738664][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  754.741856][   T47] usb 1-1: Product: syz
[  754.743607][   T47] usb 1-1: Manufacturer: syz
[  754.745472][   T47] usb 1-1: SerialNumber: syz
[  754.748696][   T47] usb 1-1: config 0 descriptor??
[  755.197092][   T47] gs_usb 1-1:0.0: Configuring for 2 interfaces
[  755.329590][T25827] netlink: 8 bytes leftover after parsing attributes in process `syz.3.7805'.
[  755.332860][T25827] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7805'.
[  755.552127][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  755.554728][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  755.626536][   T47] gs_usb 1-1:0.0: Disabling termination support for channel 0 (-EPIPE)
[  755.870424][   T47] gs_usb 1-1:0.0: Disabling termination support for channel 1 (-EPROTO)
[  755.898652][   T47] usb 1-1: USB disconnect, device number 24
[  755.946422][T25849] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7816'.
[  756.012090][T25851] netlink: 'syz.4.7817': attribute type 32 has an invalid length.
[  757.994485][T25934] netlink: 68 bytes leftover after parsing attributes in process `syz.0.7850'.
[  759.579326][T26004] Bluetooth: MGMT ver 1.23
[  760.951133][T26040] tmpfs: Bad value for 'size'
[  762.031921][T26082] netlink: 16 bytes leftover after parsing attributes in process `syz.3.7923'.
[  762.925187][    C1] vcan0: j1939_tp_rxtimer: 0xffff88811320bc00: rx timeout, send abort
[  762.933917][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88811320bc00: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  763.565199][T26151] ref_ctr going negative. vaddr: 0x200000ffd000, curr val: -19135, delta: 1
[  763.569619][T26151] ref_ctr increment failed for inode: 0x752 offset: 0x5 ref_ctr_offset: 0x1000 of mm: 0xffff8880235260c0
[  763.892931][T26167] netlink: 13 bytes leftover after parsing attributes in process `syz.0.7963'.
[  763.896739][T26167] netlink: 'syz.0.7963': attribute type 3 has an invalid length.
[  763.900388][T26167] netlink: 2 bytes leftover after parsing attributes in process `syz.0.7963'.
[  764.522636][T26173] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7965'.
[  769.847479][ T5910] Bluetooth: hci2: ACL packet for unknown connection handle 201
[  770.773739][T26363] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8055'.
[  770.813950][T26363] netlink: 20 bytes leftover after parsing attributes in process `syz.3.8055'.
[  773.036025][T26447] : entered promiscuous mode
[  773.694039][   T24] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  773.856428][   T24] usb 1-1: Using ep0 maxpacket: 8
[  773.860446][   T24] usb 1-1: unable to get BOS descriptor or descriptor too short
[  773.864159][   T24] usb 1-1: config 0 has an invalid interface number: 88 but max is 0
[  773.870170][   T24] usb 1-1: config 0 has no interface number 0
[  773.872179][   T24] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  773.875468][   T24] usb 1-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0
[  773.878649][   T24] usb 1-1: config 0 interface 88 has no altsetting 0
[  773.885039][   T24] usb 1-1: string descriptor 0 read error: -22
[  773.887004][   T24] usb 1-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31
[  773.890934][   T24] usb 1-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3
[  773.895743][   T24] usb 1-1: config 0 descriptor??
[  773.901067][   T24] input: USB Acecad Flair Tablet 0460:0004 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.88/input/input36
[  774.121973][   T24] usb 1-1: USB disconnect, device number 25
[  776.676589][T26599] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8158'.
[  776.681498][T26599] netlink: 4 bytes leftover after parsing attributes in process `syz.0.8158'.
[  777.030837][ T9758] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  777.189518][T26616] netlink: 32 bytes leftover after parsing attributes in process `syz.3.8166'.
[  777.222756][ T9758] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83
[  777.228287][ T9758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0
[  777.236279][ T9758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0
[  777.241164][ T9758] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[  777.245653][ T9758] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  777.254339][ T9758] usb 1-1: config 0 descriptor??
[  777.261607][ T9758] em28xx 1-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers !
[  777.364394][T26628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8172'.
[  777.369323][T26628] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8172'.
[  777.458403][T26638] overlayfs: failed to clone upperpath
[  777.497490][T14293] usb 1-1: USB disconnect, device number 26
[  777.556458][T26646] netlink: 'syz.4.8181': attribute type 21 has an invalid length.
[  779.347058][T26711] sctp: [Deprecated]: syz.3.8208 (pid 26711) Use of int in maxseg socket option.
[  779.347058][T26711] Use struct sctp_assoc_value instead
[  780.047351][T26736] sctp: [Deprecated]: syz.3.8219 (pid 26736) Use of struct sctp_assoc_value in delayed_ack socket option.
[  780.047351][T26736] Use struct sctp_sack_info instead
[  781.388087][T26782] overlayfs: failed to clone upperpath
[  781.440261][   T24] usb 1-1: new full-speed USB device number 27 using dummy_hcd
[  781.627489][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  781.631844][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  781.646074][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 8192, setting to 64
[  781.650897][   T24] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  781.673651][   T24] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  781.677356][   T24] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  781.684009][   T24] usb 1-1: Manufacturer: syz
[  781.690800][   T24] usb 1-1: config 0 descriptor??
[  781.983643][   T24] rc_core: IR keymap rc-hauppauge not found
[  781.988036][   T24] Registered IR keymap rc-empty
[  781.991363][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  782.021331][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  782.128522][   T24] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  782.135230][   T24] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input37
[  782.162612][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  782.201453][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  782.773232][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  782.794861][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  782.816827][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  782.839141][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  782.860099][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  782.881602][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  782.904759][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  783.008588][   T24] mceusb 1-1:0.0: Error: mce write urb status = -71
[  783.048191][   T24] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  783.051838][   T24] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  783.060516][   T24] usb 1-1: USB disconnect, device number 27
[  783.390514][T26843] netlink: 91 bytes leftover after parsing attributes in process `syz.4.8267'.
[  783.393809][T26843] netlink: 91 bytes leftover after parsing attributes in process `syz.4.8267'.
[  783.816901][T26858] openvswitch: netlink: Message has 4784 unknown bytes.
[  783.819344][T26858] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  784.515190][   T24] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  785.286539][   T24] usb 1-1: Using ep0 maxpacket: 16
[  785.293784][   T24] usb 1-1: config 3 has an invalid interface number: 155 but max is 0
[  785.302291][   T24] usb 1-1: config 3 has an invalid interface association descriptor of length 3, skipping
[  785.314612][   T24] usb 1-1: config 3 has an invalid descriptor of length 0, skipping remainder of the config
[  785.323540][   T24] usb 1-1: config 3 has no interface number 0
[  785.326025][   T24] usb 1-1: config 3 interface 155 has no altsetting 0
[  785.338473][   T24] usb 1-1: New USB device found, idVendor=05a9, idProduct=264a, bcdDevice=e5.4c
[  785.343350][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  785.346662][   T24] usb 1-1: Product: syz
[  785.348498][   T24] usb 1-1: Manufacturer: syz
[  785.350491][   T24] usb 1-1: SerialNumber: syz
[  785.602162][   T24] uvcvideo 1-1:3.155: probe with driver uvcvideo failed with error -22
[  785.607067][   T24] usb 1-1: USB disconnect, device number 28
[  785.864533][T26900] netlink: 16 bytes leftover after parsing attributes in process `syz.4.8292'.
[  787.724214][ T9795] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  787.752838][T26940] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8311'.
[  787.888544][ T9795] usb 1-1: Using ep0 maxpacket: 16
[  787.906561][ T9795] usb 1-1: New USB device found, idVendor=5fc9, idProduct=0063, bcdDevice=93.52
[  787.919542][ T9795] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  787.922863][ T9795] usb 1-1: Product: syz
[  787.924589][ T9795] usb 1-1: Manufacturer: syz
[  787.926449][ T9795] usb 1-1: SerialNumber: syz
[  787.955355][ T9795] usb 1-1: config 0 descriptor??
[  788.186300][   T24] usb 1-1: USB disconnect, device number 29
[  788.778811][T26978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.8328'.
[  789.428216][T26996] vivid-000: =================  START STATUS  =================
[  789.432054][T26996] vivid-000: Radio HW Seek Mode: Bounded
[  789.435143][T26996] vivid-000: Radio Programmable HW Seek: false
[  789.444028][T26996] vivid-000: RDS Rx I/O Mode: Block I/O
[  789.447441][T26996] vivid-000: Generate RBDS Instead of RDS: false
[  789.450054][T26996] vivid-000: RDS Reception: true
[  789.452227][T26996] vivid-000: RDS Program Type: 0 inactive
[  789.454666][T26996] vivid-000: RDS PS Name:  inactive
[  789.456964][T26996] vivid-000: RDS Radio Text:  inactive
[  789.461499][T26996] vivid-000: RDS Traffic Announcement: false inactive
[  789.464437][T26996] vivid-000: RDS Traffic Program: false inactive
[  789.467051][T26996] vivid-000: RDS Music: false inactive
[  789.470269][T26996] vivid-000: ==================  END STATUS  ==================
[  789.823797][T27015] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8345'.
[  789.838809][T27015] (unnamed net_device) (uninitialized): option mode: invalid value (7)
[  790.402966][   T33] audit: type=1804 audit(1755177826.405:474): pid=27066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.8370" name="file0" dev="tmpfs" ino=7309 res=1 errno=0
[  790.814172][T27107] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  791.608147][T27154] overlayfs: failed to clone upperpath
[  791.677705][T27160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8404'.
[  791.683833][T27160] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8404'.
[  792.800724][   T33] audit: type=1326 audit(1755177828.629:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27198 comm="syz.4.8421" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  792.811357][   T33] audit: type=1326 audit(1755177828.639:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27198 comm="syz.4.8421" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  792.837914][   T33] audit: type=1326 audit(1755177828.657:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27198 comm="syz.4.8421" exe="/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  792.845680][   T33] audit: type=1326 audit(1755177828.657:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27198 comm="syz.4.8421" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  792.866289][   T33] audit: type=1326 audit(1755177828.657:479): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27198 comm="syz.4.8421" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  792.874145][   T33] audit: type=1326 audit(1755177828.657:480): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27198 comm="syz.4.8421" exe="/syz-executor" sig=0 arch=c000003e syscall=242 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  792.883342][   T33] audit: type=1326 audit(1755177828.657:481): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27198 comm="syz.4.8421" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  792.890924][   T33] audit: type=1326 audit(1755177828.657:482): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27198 comm="syz.4.8421" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  793.391491][T27229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8436'.
[  793.401468][T27229] netlink: 20 bytes leftover after parsing attributes in process `syz.4.8436'.
[  793.582325][T27240] netlink: 24 bytes leftover after parsing attributes in process `syz.0.8441'.
[  793.674182][T27248] netlink: 'syz.3.8445': attribute type 1 has an invalid length.
[  793.775522][    C0] hpet: Lost 1 RTC interrupts
[  793.870184][T27262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8452'.
[  793.906637][T27262] 8021q: adding VLAN 0 to HW filter on device bond3
[  793.929614][T27267] sd 0:0:0:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x24 ascq=0x0
[  793.938478][T27262] 8021q: adding VLAN 0 to HW filter on device bond3
[  793.947473][T27262] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address
[  793.953206][T27262] bond3: (slave vxcan1): Error -95 calling set_mac_address
[  793.997290][T27271] netlink: 'syz.0.8456': attribute type 12 has an invalid length.
[  794.000375][T27271] netlink: 'syz.0.8456': attribute type 29 has an invalid length.
[  794.003448][T27271] netlink: 148 bytes leftover after parsing attributes in process `syz.0.8456'.
[  794.007215][T27271] netlink: 'syz.0.8456': attribute type 2 has an invalid length.
[  794.011225][T27271] netlink: 23 bytes leftover after parsing attributes in process `syz.0.8456'.
[  794.100640][T27277] netlink: 'syz.0.8459': attribute type 13 has an invalid length.
[  794.104546][T27277] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8459'.
[  794.126789][T27277] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len
[  794.550835][ T9795] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  794.712237][ T9795] usb 1-1: Using ep0 maxpacket: 16
[  794.716981][ T9795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  794.721500][ T9795] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00
[  794.726416][ T9795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  794.731740][ T9795] usb 1-1: config 0 descriptor??
[  795.606139][ T9795] mcp2221 0003:04D8:00DD.001F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0
[  795.878727][ T9795] usb 1-1: USB disconnect, device number 30
[  796.633419][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  796.791385][T27345] __nla_validate_parse: 1 callbacks suppressed
[  796.791403][T27345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8486'.
[  796.940279][T27355] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8490'.
[  796.944103][T27355] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8490'.
[  797.039643][T27357] IPVS: lblc: UDP 224.0.0.2:0 - no destination available
[  797.377922][T27371] macsec1: entered promiscuous mode
[  797.384089][T27371] hsr0: entered promiscuous mode
[  797.386069][T27371] macsec1: entered allmulticast mode
[  797.388287][T27371] hsr0: entered allmulticast mode
[  797.397362][T27371] hsr_slave_0: entered allmulticast mode
[  797.399994][T27371] hsr_slave_1: entered allmulticast mode
[  797.483981][T27381] netlink: 48 bytes leftover after parsing attributes in process `syz.3.8502'.
[  797.985300][T27406] netlink: 16 bytes leftover after parsing attributes in process `syz.0.8513'.
[  798.108420][T27416] netlink: 'syz.0.8518': attribute type 4 has an invalid length.
[  798.120584][T27416] netlink: 'syz.0.8518': attribute type 4 has an invalid length.
[  798.406792][ T9795] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  798.570928][ T9795] usb 1-1: Using ep0 maxpacket: 32
[  798.578694][ T9795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  798.588215][ T9795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  798.598867][ T9795] usb 1-1: New USB device found, idVendor=0403, idProduct=6030, bcdDevice= 0.00
[  798.609758][ T9795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  798.622838][ T9795] usb 1-1: config 0 descriptor??
[  799.081588][ T9795] ft260 0003:0403:6030.0020: unknown main item tag 0x0
[  799.297201][ T9795] ft260 0003:0403:6030.0020: chip code: 6424 8183
[  799.515844][ T9795] ft260 0003:0403:6030.0020: USB HID v0.00 Device [HID 0403:6030] on usb-dummy_hcd.0-1/input0
[  799.733892][ T9795] ft260 0003:0403:6030.0020: failed to retrieve status: -71, no wakeup
[  799.747898][ T9795] ft260 0003:0403:6030.0020: failed to retrieve status: -71
[  799.758842][ T9795] ft260 0003:0403:6030.0020: failed to reset I2C controller: -71
[  799.780577][ T9795] usb 1-1: USB disconnect, device number 31
[  801.602211][T27533] netlink: 'syz.4.8572': attribute type 11 has an invalid length.
[  801.752221][T27541] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8576'.
[  804.122541][T27570] team0: entered promiscuous mode
[  804.124335][T27570] team_slave_0: entered promiscuous mode
[  804.126707][T27570] team_slave_1: entered promiscuous mode
[  804.163717][T27570] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  804.184934][T27570] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  804.921249][T27310] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  805.014403][T27605] pvfs2: Unexpected value for 'acl'
[  805.092225][T27310] usb 1-1: Using ep0 maxpacket: 32
[  805.102199][T27310] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 56, changing to 9
[  805.105647][T27310] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 50668, setting to 1024
[  805.130380][T27310] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  805.134400][T27310] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  805.145514][T27310] usb 1-1: Product: syz
[  805.147946][T27310] usb 1-1: Manufacturer: syz
[  805.152140][T27612] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  805.156160][T27310] hub 1-1:4.0: USB hub found
[  805.376545][T27310] hub 1-1:4.0: 2 ports detected
[  805.383747][T27310] hub 1-1:4.0: insufficient power available to use all downstream ports
[  805.599912][    C0] hpet: Lost 1 RTC interrupts
[  805.740920][    C0] hpet: Lost 1 RTC interrupts
[  805.850381][T27310] hub 1-1:4.0: set hub depth failed
[  805.883249][T27310] usb 1-1: USB disconnect, device number 32
[  806.430330][T27675] netlink: 32 bytes leftover after parsing attributes in process `syz.0.8638'.
[  806.603301][T27687] cgroup: Bad value for 'name'
[  806.769098][T27697] bridge1: entered promiscuous mode
[  807.356863][   T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  807.535084][T27743] netlink: 12 bytes leftover after parsing attributes in process `syz.4.8671'.
[  807.538760][T27743] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8671'.
[  807.544709][   T24] usb 1-1: config 0 has an invalid interface number: 156 but max is 0
[  807.551666][   T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  807.558927][   T24] usb 1-1: config 0 has no interface number 0
[  807.562124][   T24] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[  807.567433][   T24] usb 1-1: config 0 interface 156 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  807.571648][   T24] usb 1-1: config 0 interface 156 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  807.577082][   T24] usb 1-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9
[  807.583220][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  807.589102][   T24] usb 1-1: config 0 descriptor??
[  807.597185][   T24] gspca_main: spca561-2.14.0 probing abcd:cdee
[  807.809324][T27754] netlink: 136 bytes leftover after parsing attributes in process `syz.4.8676'.
[  807.819101][   T24] spca561 1-1:0.156: probe with driver spca561 failed with error -22
[  807.829930][   T24] usb 1-1: Quirk or no altset; falling back to MIDI 1.0
[  807.834067][   T24] usb 1-1: MIDIStreaming interface descriptor not found
[  807.863022][   T24] usb 1-1: USB disconnect, device number 33
[  808.979538][T27788] netlink: 'syz.0.8691': attribute type 1 has an invalid length.
[  809.096661][T27809] IPv6: Can't replace route, no match found
[  809.111731][T27810] 9pnet_fd: p9_fd_create_tcp (27810): problem binding to privport
[  809.213963][T27817] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  809.245569][T27820] (unnamed net_device) (uninitialized): option fail_over_mac: invalid value (15)
[  809.632190][T27853] netlink: 'syz.3.8724': attribute type 11 has an invalid length.
[  810.103247][T27869] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.8731'.
[  810.121529][T27869] netlink: zone id is out of range
[  810.141636][T27869] netlink: get zone limit has 8 unknown bytes
[  810.307290][T27874] trusted_key: encrypted_key: insufficient parameters specified
[  810.638920][T14293] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[  810.812417][T14293] usb 1-1: Using ep0 maxpacket: 16
[  810.817123][T14293] usb 1-1: too many configurations: 9, using maximum allowed: 8
[  810.828981][T14293] usb 1-1: config 222 has an invalid interface number: 127 but max is 0
[  810.843590][T14293] usb 1-1: config 222 has no interface number 0
[  810.848556][T14293] usb 1-1: config 222 has an invalid interface number: 127 but max is 0
[  810.851792][T14293] usb 1-1: config 222 has no interface number 0
[  810.854761][T14293] usb 1-1: config 222 has an invalid interface number: 127 but max is 0
[  810.866042][T14293] usb 1-1: config 222 has no interface number 0
[  810.870326][T14293] usb 1-1: config 222 has an invalid interface number: 127 but max is 0
[  810.873673][T14293] usb 1-1: config 222 has no interface number 0
[  810.892142][T14293] usb 1-1: config 222 has an invalid interface number: 127 but max is 0
[  810.899892][T14293] usb 1-1: config 222 has no interface number 0
[  810.905265][T14293] usb 1-1: config 222 has an invalid interface number: 127 but max is 0
[  810.908623][T14293] usb 1-1: config 222 has no interface number 0
[  810.912419][T14293] usb 1-1: config 222 has an invalid interface number: 127 but max is 0
[  810.915411][T14293] usb 1-1: config 222 has no interface number 0
[  810.918198][T14293] usb 1-1: config 222 has an invalid interface number: 127 but max is 0
[  810.921270][T14293] usb 1-1: config 222 has no interface number 0
[  810.925772][T14293] usb 1-1: New USB device found, idVendor=19d2, idProduct=1142, bcdDevice=1b.18
[  810.929938][T14293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  810.933386][T14293] usb 1-1: Product: syz
[  810.935001][T14293] usb 1-1: Manufacturer: syz
[  810.936840][T14293] usb 1-1: SerialNumber: syz
[  811.166145][T14293] hub 1-1:222.127: Invalid hub with more than one config or interface
[  811.168599][T14293] hub 1-1:222.127: probe with driver hub failed with error -22
[  811.174360][T14293] option 1-1:222.127: GSM modem (1-port) converter detected
[  811.178980][T14293] usb 1-1: USB disconnect, device number 34
[  811.183884][T14293] option 1-1:222.127: device disconnected
[  811.358268][T27916] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8751'.
[  811.954979][ T5910] Bluetooth: hci2: unexpected event for opcode 0x0c05
[  816.104650][T28006] 9pnet_fd: Insufficient options for proto=fd
[  816.315158][T28016] fuse: Bad value for 'user_id'
[  816.324429][T28016] fuse: Bad value for 'user_id'
[  818.176160][T28051] netlink: 16 bytes leftover after parsing attributes in process `syz.3.8810'.
[  818.227869][   T33] audit: type=1326 audit(1755177852.101:483): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28054 comm="syz.3.8812" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7effb7b8ebe9 code=0x0
[  819.635238][   T33] audit: type=1326 audit(1755177853.403:484): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28113 comm="syz.4.8837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  819.657752][   T33] audit: type=1326 audit(1755177853.412:485): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28113 comm="syz.4.8837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  819.672215][   T33] audit: type=1326 audit(1755177853.412:486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28113 comm="syz.4.8837" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  819.685875][   T33] audit: type=1326 audit(1755177853.412:487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28113 comm="syz.4.8837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  819.695196][   T33] audit: type=1326 audit(1755177853.412:488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28113 comm="syz.4.8837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  819.706091][   T33] audit: type=1326 audit(1755177853.421:489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28113 comm="syz.4.8837" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  819.715641][   T33] audit: type=1326 audit(1755177853.421:490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28113 comm="syz.4.8837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  819.728509][   T33] audit: type=1326 audit(1755177853.421:491): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28113 comm="syz.4.8837" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  819.750423][   T33] audit: type=1326 audit(1755177853.421:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=28113 comm="syz.4.8837" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  819.827720][T28122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8841'.
[  819.832442][T28122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8841'.
[  820.352506][T28142] netlink: 'syz.0.8850': attribute type 8 has an invalid length.
[  820.355824][T28142] netlink: 'syz.0.8850': attribute type 4 has an invalid length.
[  820.362667][T28142] netlink: 'syz.0.8850': attribute type 5 has an invalid length.
[  820.373956][T28142] netlink: 40 bytes leftover after parsing attributes in process `syz.0.8850'.
[  820.559592][T28146] CIFS mount error: No usable UNC path provided in device string!
[  820.559592][T28146] 
[  820.564066][T28146] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  821.420927][   T47] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[  821.581075][   T47] usb 1-1: Using ep0 maxpacket: 32
[  821.584768][   T47] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC4, changing to 0x84
[  821.588983][   T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7
[  821.598100][   T47] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=51.16
[  821.601951][   T47] usb 1-1: New USB device strings: Mfr=154, Product=2, SerialNumber=3
[  821.605430][   T47] usb 1-1: Product: syz
[  821.607163][   T47] usb 1-1: Manufacturer: syz
[  821.609064][   T47] usb 1-1: SerialNumber: syz
[  821.613226][   T47] usb 1-1: config 0 descriptor??
[  821.621241][   T47] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  821.836856][   T47] usb 1-1: USB disconnect, device number 35
[  821.840274][ T5681] usb 1-1: Failed to submit usb control message: -71
[  821.843385][ T5681] usb 1-1: unable to send the bmi data to the device: -71
[  821.847886][ T5681] usb 1-1: unable to get target info from device
[  821.851075][ T5681] usb 1-1: could not get target info (-71)
[  821.854830][ T5681] usb 1-1: could not probe fw (-71)
[  822.117635][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  822.120273][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  822.239960][T28200] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8875'.
[  822.331521][T28210] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms)
[  822.335699][T28210] bridge0: entered allmulticast mode
[  822.592511][T28233] netlink: 'syz.4.8890': attribute type 5 has an invalid length.
[  823.838389][T28285] netlink: 209588 bytes leftover after parsing attributes in process `syz.0.8914'.
[  825.547632][T28341] netlink: 'syz.4.8939': attribute type 4 has an invalid length.
[  825.551580][T28341] netlink: 'syz.4.8939': attribute type 4 has an invalid length.
[  826.230458][T28367] netlink: 212376 bytes leftover after parsing attributes in process `syz.4.8952'.
[  826.754154][T28399] netlink: 'syz.4.8968': attribute type 5 has an invalid length.
[  827.001427][T28407] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  828.179240][    C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  828.679183][T28429] tmpfs: Bad value for 'mpol'
[  829.056938][   T24] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[  829.242133][   T24] usb 1-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  829.245813][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  829.249076][   T24] usb 1-1: Product: syz
[  829.250878][   T24] usb 1-1: Manufacturer: syz
[  829.254137][   T24] usb 1-1: SerialNumber: syz
[  829.258398][   T24] usb 1-1: config 0 descriptor??
[  829.265127][   T24] gspca_main: sunplus-2.14.0 probing 055f:c230
[  829.923525][   T24] gspca_sunplus: reg_r err -71
[  829.925603][   T24] sunplus 1-1:0.0: probe with driver sunplus failed with error -71
[  829.931681][   T24] usb 1-1: USB disconnect, device number 36
[  830.634877][T28508] netlink: 56 bytes leftover after parsing attributes in process `syz.4.9016'.
[  831.050310][   T24] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[  831.358231][   T24] usb 1-1: config 0 has an invalid interface number: 199 but max is 1
[  831.363039][   T24] usb 1-1: config 0 has no interface number 1
[  831.365523][   T24] usb 1-1: config 0 interface 199 altsetting 0 endpoint 0xA has invalid wMaxPacketSize 0
[  831.369307][   T24] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  831.369405][T28525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9025'.
[  831.374083][   T24] usb 1-1: New USB device found, idVendor=0002, idProduct=0000, bcdDevice= 0.00
[  831.381457][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  831.384349][   T24] usb 1-1: SerialNumber: syz
[  831.389146][   T24] usb 1-1: config 0 descriptor??
[  831.393809][   T24] usb 1-1: Found UVC 0.00 device <unnamed> (0002:0000)
[  831.399229][   T24] usb 1-1: No valid video chain found.
[  831.725397][ T9795] usb 1-1: USB disconnect, device number 37
[  832.707941][ T9795] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[  832.873957][ T9795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  832.881168][ T9795] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  832.884988][ T9795] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  832.905341][ T9795] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  832.909012][ T9795] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  832.916308][ T9795] usb 1-1: config 0 descriptor??
[  833.107260][T28590] netlink: 'syz.3.9053': attribute type 3 has an invalid length.
[  833.110737][T28590] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.9053'.
[  833.151451][T28592] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9054'.
[  833.359474][ T9795] plantronics 0003:047F:FFFF.0021: reserved main item tag 0xe
[  833.363689][ T9795] plantronics 0003:047F:FFFF.0021: unknown main item tag 0x0
[  833.369592][ T9795] plantronics 0003:047F:FFFF.0021: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[  833.513066][   T12] batman_adv: batadv0: IGMP Querier appeared
[  833.515506][   T12] batman_adv: batadv0: MLD Querier appeared
[  833.664243][ T9795] usb 1-1: USB disconnect, device number 38
[  833.771882][T28602] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9058'.
[  833.913671][T28610] sock: sock_timestamping_bind_phc: sock not bind to device
[  833.991592][T28614] tmpfs: Group quota inode hardlimit too large.
[  834.493868][T28648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9081'.
[  834.507840][T28648] netlink: 4 bytes leftover after parsing attributes in process `syz.4.9081'.
[  835.737012][T28658] netlink: 24 bytes leftover after parsing attributes in process `syz.0.9084'.
[  836.147474][T28681] netlink: 'syz.4.9096': attribute type 7 has an invalid length.
[  836.150759][T28681] netlink: 'syz.4.9096': attribute type 8 has an invalid length.
[  836.808704][T28693] netlink: 'syz.3.9099': attribute type 29 has an invalid length.
[  836.817371][T28693] netlink: 'syz.3.9099': attribute type 29 has an invalid length.
[  837.550711][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881133b5400: rx timeout, send abort
[  838.092639][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881133b4c00: rx timeout, send abort
[  838.096411][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881133b5400: abort rx timeout. Force session deactivation
[  838.637856][    C1] vcan0: j1939_tp_rxtimer: 0xffff8881133b4c00: abort rx timeout. Force session deactivation
[  839.394530][T28757] netlink: 240 bytes leftover after parsing attributes in process `syz.0.9126'.
[  839.398185][T28757] netlink: 56 bytes leftover after parsing attributes in process `syz.0.9126'.
[  839.782702][   T24] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[  839.948607][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64
[  839.952861][   T24] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A
[  839.958768][   T24] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64
[  839.965520][   T24] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10
[  839.969411][   T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  839.972711][   T24] usb 1-1: Product: syz
[  839.974394][   T24] usb 1-1: Manufacturer: syz
[  839.976265][   T24] usb 1-1: SerialNumber: syz
[  839.982907][   T24] usb 1-1: config 0 descriptor??
[  839.985569][T28765] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  839.989876][T28765] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  839.993529][   T24] usb 1-1: ucan: probing device on interface #0
[  840.518606][T28800] netlink: 'syz.4.9146': attribute type 4 has an invalid length.
[  840.522547][T28800] netlink: 17 bytes leftover after parsing attributes in process `syz.4.9146'.
[  840.556669][T28802] veth1_vlan: left promiscuous mode
[  840.651510][   T24] ucan 1-1:0.0: probe with driver ucan failed with error -71
[  840.659664][   T24] usb 1-1: USB disconnect, device number 39
[  841.711251][   T24] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[  841.873941][   T24] usb 1-1: Using ep0 maxpacket: 32
[  841.878476][   T24] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[  841.881885][   T24] usb 1-1: config 0 has no interface number 0
[  841.884651][   T24] usb 1-1: config 0 interface 12 has no altsetting 0
[  841.890188][   T24] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=70.40
[  841.894352][   T24] usb 1-1: New USB device strings: Mfr=231, Product=2, SerialNumber=3
[  841.899591][   T24] usb 1-1: Product: syz
[  841.901419][   T24] usb 1-1: Manufacturer: syz
[  841.903366][   T24] usb 1-1: SerialNumber: syz
[  841.908704][   T24] usb 1-1: config 0 descriptor??
[  842.378384][    C0] hpet_rtc_timer_reinit: 23 callbacks suppressed
[  842.378398][    C0] hpet: Lost 1 RTC interrupts
[  842.457236][  T793] Process accounting resumed
[  842.616474][T28837] Process accounting resumed
[  843.013905][T28871] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9178'.
[  843.026172][   T24] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71
[  843.028646][   T24] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[  843.031209][   T24] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[  843.034978][   T24] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[  843.039996][   T24] usb 1-1: USB disconnect, device number 40
[  843.317536][T28885] netlink: 'syz.3.9185': attribute type 4 has an invalid length.
[  844.226181][T28922] netlink: 56 bytes leftover after parsing attributes in process `syz.3.9202'.
[  846.322821][T28973] netlink: 'syz.4.9220': attribute type 4 has an invalid length.
[  846.339674][T28973] netlink: 'syz.4.9220': attribute type 4 has an invalid length.
[  846.864205][T28986] siw: device registration error -23
[  846.903941][T28989] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  847.226953][T28992] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048)
[  847.307311][T28998] geneve2: entered allmulticast mode
[  847.310976][ T5681] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0
[  847.320885][ T5681] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0
[  847.331362][ T5681] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0
[  847.337815][ T5681] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0
[  847.359330][T29002] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.9234'.
[  847.899966][ T9795] IPVS: starting estimator thread 0...
[  848.009872][T29018] IPVS: using max 69 ests per chain, 165600 per kthread
[  848.825964][T29023] overlayfs: failed to clone upperpath
[  849.000992][T29029] tipc: Enabling of bearer <udp:syz2> rejected, failed to enable media
[  849.222673][T29033] : renamed from veth0_vlan (while UP)
[  849.275781][ T6053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  849.278353][ T6053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  852.435170][T29235] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9309'.
[  853.090560][T29268] netlink: 28 bytes leftover after parsing attributes in process `syz.0.9324'.
[  853.147936][ T5910] Bluetooth: hci2: unexpected event for opcode 0x1004
[  853.521526][T29296] dvmrp0: entered allmulticast mode
[  854.304019][T29307] netlink: 'syz.0.9341': attribute type 1 has an invalid length.
[  854.307542][T29307] netlink: 'syz.0.9341': attribute type 1 has an invalid length.
[  854.353679][T29308] delete_channel: no stack
[  854.424150][T29313] netlink: 'syz.0.9344': attribute type 2 has an invalid length.
[  854.905769][T14293] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[  855.093214][T14293] usb 1-1: config 0 has an invalid interface number: 122 but max is 0
[  855.096734][T14293] usb 1-1: config 0 has no interface number 0
[  855.099160][T14293] usb 1-1: config 0 interface 122 has no altsetting 0
[  855.110021][T14293] usb 1-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67
[  855.117391][T14293] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  855.123952][T14293] usb 1-1: Product: syz
[  855.126690][T14293] usb 1-1: Manufacturer: syz
[  855.128873][T14293] usb 1-1: SerialNumber: syz
[  855.133366][T14293] usb 1-1: config 0 descriptor??
[  855.725160][ T9795] usb 1-1: USB disconnect, device number 41
[  855.728847][ T9795] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected.
[  856.441890][T29369] bond0: up delay (5) is not a multiple of miimon (4), value rounded to 4 ms
[  856.448942][T29369] netlink: 'syz.3.9370': attribute type 10 has an invalid length.
[  856.452186][T29369] bridge0: left allmulticast mode
[  856.460213][T29369] bridge0: entered promiscuous mode
[  856.462354][T29369] bridge0: entered allmulticast mode
[  856.464963][T29369] bond0: (slave bridge0): Enslaving as an active interface with a down link
[  856.587412][T14293] usb 1-1: new high-speed USB device number 42 using dummy_hcd
[  856.761626][T14293] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  856.765186][T14293] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  856.771131][T14293] usb 1-1: config 0 descriptor??
[  856.776307][T14293] gspca_main: cpia1-2.14.0 probing 0813:0001
[  856.947936][T29383] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9377'.
[  857.043049][T29387] netlink: 6 bytes leftover after parsing attributes in process `syz.4.9379'.
[  857.224364][T14293] gspca_cpia1: usb_control_msg 03, error -32
[  857.237051][T14293] gspca_cpia1: usb_control_msg 03, error -71
[  857.240129][T14293] gspca_cpia1: usb_control_msg 01, error -71
[  857.245299][T14293] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0)
[  857.255552][T14293] usb 1-1: USB disconnect, device number 42
[  857.572484][ T5910] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  857.578466][ T5910] Bluetooth: hci2: Injecting HCI hardware error event
[  857.585031][ T5910] Bluetooth: hci2: hardware error 0x00
[  858.133794][T29421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.9395'.
[  859.579773][T29443] binder: 29440:29443 ioctl c0306201 200000000040 returned -22
[  859.826261][ T5910] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  860.742777][T29475] netlink: 'syz.4.9419': attribute type 29 has an invalid length.
[  860.822093][T29475] netlink: 'syz.4.9419': attribute type 29 has an invalid length.
[  860.830783][T29475] netlink: 'syz.4.9419': attribute type 29 has an invalid length.
[  860.834849][T29475] netlink: 'syz.4.9419': attribute type 29 has an invalid length.
[  861.371932][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  861.381918][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  861.389278][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  861.398563][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  861.402827][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  861.810266][T29496] chnl_net:caif_netlink_parms(): no params data found
[  861.942368][T29496] bridge0: port 1(bridge_slave_0) entered blocking state
[  861.945178][T29496] bridge0: port 1(bridge_slave_0) entered disabled state
[  861.948443][T29496] bridge_slave_0: entered allmulticast mode
[  861.952601][T29496] bridge_slave_0: entered promiscuous mode
[  861.958686][T29496] bridge0: port 2(bridge_slave_1) entered blocking state
[  861.965379][T29496] bridge0: port 2(bridge_slave_1) entered disabled state
[  861.968544][T29496] bridge_slave_1: entered allmulticast mode
[  861.972767][T29496] bridge_slave_1: entered promiscuous mode
[  862.008031][T29496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  862.020265][T29496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  862.082010][T29496] team0: Port device team_slave_0 added
[  862.087065][T29496] team0: Port device team_slave_1 added
[  862.137046][T29496] batman_adv: batadv0: Adding interface: batadv_slave_0
[  862.139290][T29496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  862.148517][T29496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  862.154830][T29496] batman_adv: batadv0: Adding interface: batadv_slave_1
[  862.158426][T29496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  862.168889][T29496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  862.349880][T29496] hsr_slave_0: entered promiscuous mode
[  862.354816][T29496] hsr_slave_1: entered promiscuous mode
[  862.357741][T29496] debugfs: 'hsr0' already exists in 'hsr'
[  862.360075][T29496] Cannot create hsr debugfs directory
[  862.818470][T29527] IPVS: Error connecting to the multicast addr
[  863.476183][    C0] hpet: Lost 1 RTC interrupts
[  863.569733][    C0] hpet: Lost 1 RTC interrupts
[  863.631973][   T55] Bluetooth: hci0: command tx timeout
[  863.706512][    C0] hpet: Lost 1 RTC interrupts
[  863.793455][    C0] hpet: Lost 1 RTC interrupts
[  864.446531][T29496] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  864.466920][T29496] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  864.476223][T29578] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  864.496825][T29496] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  864.554560][T29496] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  864.697017][T29496] 8021q: adding VLAN 0 to HW filter on device bond0
[  864.730276][T29496] 8021q: adding VLAN 0 to HW filter on device team0
[  864.740705][T29224] bridge0: port 1(bridge_slave_0) entered blocking state
[  864.743115][T29224] bridge0: port 1(bridge_slave_0) entered forwarding state
[  864.769563][T29233] bridge0: port 2(bridge_slave_1) entered blocking state
[  864.772056][T29233] bridge0: port 2(bridge_slave_1) entered forwarding state
[  864.930714][T29496] 8021q: adding VLAN 0 to HW filter on device batadv0
[  864.966925][T29496] veth0_vlan: entered promiscuous mode
[  864.977467][T29496] veth1_vlan: entered promiscuous mode
[  865.000150][T29496] veth0_macvtap: entered promiscuous mode
[  865.007846][T29496] veth1_macvtap: entered promiscuous mode
[  865.020758][T29496] batman_adv: batadv0: Interface activated: batadv_slave_0
[  865.038792][T29496] batman_adv: batadv0: Interface activated: batadv_slave_1
[  865.047438][ T5971] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  865.067586][ T5971] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  865.074185][ T5971] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  865.077553][ T5971] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  865.185133][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  865.197626][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  865.222252][T29186] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  865.224652][T29186] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  865.406251][T29615] loop1: detected capacity change from 0 to 512
[  865.431605][T29615] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  865.861420][T29618] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters
[  865.882463][   T55] Bluetooth: hci0: command tx timeout
[  865.893593][T29615] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  866.024159][T29626] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 2 with error 28
[  866.029058][T29626] EXT4-fs (loop1): This should not happen!! Data will be lost
[  866.029058][T29626] 
[  866.033582][T29626] EXT4-fs (loop1): Total free blocks count 0
[  866.060677][T29626] EXT4-fs (loop1): Free/Dirty block details
[  866.066511][T29626] EXT4-fs (loop1): free_blocks=65280
[  866.069398][T29626] EXT4-fs (loop1): dirty_blocks=2
[  866.074969][T29626] EXT4-fs (loop1): Block reservation details
[  866.076901][T29626] EXT4-fs (loop1): i_reserved_data_blocks=2
[  866.109785][   T33] audit: type=1326 audit(1755177895.731:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29608 comm="syz.4.9454" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  866.126132][   T33] audit: type=1326 audit(1755177895.731:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29608 comm="syz.4.9454" exe="/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  866.134498][   T33] audit: type=1326 audit(1755177895.741:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29608 comm="syz.4.9454" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  866.141921][   T33] audit: type=1326 audit(1755177895.741:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29608 comm="syz.4.9454" exe="/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  866.152553][T29496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  866.179932][   T33] audit: type=1326 audit(1755177895.741:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29608 comm="syz.4.9454" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  866.194583][   T33] audit: type=1326 audit(1755177895.741:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=29608 comm="syz.4.9454" exe="/syz-executor" sig=0 arch=c000003e syscall=190 compat=0 ip=0x7f38a258ebe9 code=0x7ffc0000
[  866.388958][T29640] overlayfs: failed to clone upperpath
[  867.401930][T29690] netlink: 'syz.3.9481': attribute type 11 has an invalid length.
[  867.413204][T29689] 9pnet: Could not find request transport: fd0xffffffffffffffff
[  867.723694][T29712] loop1: detected capacity change from 0 to 1024
[  867.799107][T29712] hfsplus: invalid xattr key length: 0
[  867.860308][T29202] hfsplus: b-tree write err: -5, ino 8
[  868.161442][   T55] Bluetooth: hci0: command tx timeout
[  868.269741][T29739] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  868.295128][T29739] 8021q: adding VLAN 0 to HW filter on device macvlan3
[  868.522387][T29748] netlink: 'syz.3.9505': attribute type 1 has an invalid length.
[  869.383639][T29806] netlink: 'syz.4.9526': attribute type 16 has an invalid length.
[  869.531411][T29812] loop1: detected capacity change from 0 to 2048
[  869.553293][T29812] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  869.812673][T29832] loop1: detected capacity change from 0 to 4096
[  869.825660][T29832] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  870.201861][T29854] overlayfs: failed to clone upperpath
[  870.216359][T29854] overlayfs: failed to clone upperpath
[  870.400722][   T55] Bluetooth: hci0: command tx timeout
[  870.478776][T29874] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  870.832146][T29496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  871.032612][T29882] input: syz1 as /devices/virtual/input/input38
[  871.418678][T14293] usb 2-1: new full-speed USB device number 16 using dummy_hcd
[  871.601425][T14293] usb 2-1: unable to get BOS descriptor or descriptor too short
[  871.607383][T14293] usb 2-1: not running at top speed; connect to a high speed hub
[  871.613786][T14293] usb 2-1: config 4 has an invalid interface number: 147 but max is 0
[  871.617124][T14293] usb 2-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[  871.621189][T14293] usb 2-1: config 4 has no interface number 0
[  871.627735][T14293] usb 2-1: Dual-Role OTG device on HNP port
[  871.630428][T14293] usb 2-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e
[  871.633936][T14293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=38
[  871.639181][T14293] usb 2-1: Product: syz
[  871.640931][T14293] usb 2-1: Manufacturer: syz
[  871.642897][T14293] usb 2-1: SerialNumber: syz
[  871.883565][T14293] usb 2-1: Found UVC 0.02 device syz (04f2:b746)
[  871.896649][T14293] usb 2-1: No valid video chain found.
[  871.900722][T14293] usb 2-1: USB disconnect, device number 16
[  872.422984][T29932] netlink: 65051 bytes leftover after parsing attributes in process `syz.4.9565'.
[  872.514881][T29938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.9568'.
[  872.705841][T29952] loop1: detected capacity change from 0 to 256
[  872.733839][T29952] exFAT-fs (loop1): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  872.750346][T29952] exFAT-fs (loop1): Medium has reported failures. Some data may be lost.
[  872.768927][T29952] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  872.937878][T29958] loop1: detected capacity change from 0 to 1024
[  872.941101][T29958] EXT4-fs: Ignoring removed orlov option
[  872.950138][T29958] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  872.971853][   T33] kauditd_printk_skb: 27 callbacks suppressed
[  872.971869][   T33] audit: type=1800 audit(1755177902.626:547): pid=29958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.9577" name="bus" dev="loop1" ino=18 res=0 errno=0
[  873.016009][   T33] audit: type=1804 audit(1755177902.663:548): pid=29958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.9577" name="/newroot/25/bus/bus" dev="loop1" ino=18 res=1 errno=0
[  873.926570][T29496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  874.038645][T29978] netlink: 28 bytes leftover after parsing attributes in process `syz.1.9583'.
[  874.390094][T30007] netlink: 'syz.1.9600': attribute type 5 has an invalid length.
[  874.464234][T30014] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9603'.
[  874.467886][T30014] netlink: 12 bytes leftover after parsing attributes in process `syz.3.9603'.
[  874.499676][T30014] bond3: entered promiscuous mode
[  874.501887][T30014] bond3: entered allmulticast mode
[  874.504466][T30014] 8021q: adding VLAN 0 to HW filter on device bond3
[  874.586883][T30019] sctp: [Deprecated]: syz.1.9605 (pid 30019) Use of struct sctp_assoc_value in delayed_ack socket option.
[  874.586883][T30019] Use struct sctp_sack_info instead
[  874.688601][T30027] team0: entered promiscuous mode
[  874.690886][T30027] team_slave_0: entered promiscuous mode
[  874.693554][T30027] team_slave_1: entered promiscuous mode
[  874.697654][T30026] team0: left promiscuous mode
[  874.700138][T30026] team_slave_0: left promiscuous mode
[  874.706810][T30026] team_slave_1: left promiscuous mode
[  875.386843][T14293] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  875.546663][T14293] usb 2-1: Using ep0 maxpacket: 32
[  875.559059][T14293] usb 2-1: config 0 has an invalid interface number: 229 but max is 0
[  875.564978][T14293] usb 2-1: config 0 has no interface number 0
[  875.573103][T14293] usb 2-1: New USB device found, idVendor=3b53, idProduct=a0d3, bcdDevice=e3.d4
[  875.581891][T14293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  875.588926][T14293] usb 2-1: Product: syz
[  875.591496][T14293] usb 2-1: Manufacturer: syz
[  875.593568][T14293] usb 2-1: SerialNumber: syz
[  875.597984][T14293] usb 2-1: config 0 descriptor??
[  875.606773][T14293] usb-storage 2-1:0.229: USB Mass Storage device detected
[  875.828916][T14293] usb 2-1: USB disconnect, device number 17
[  877.037759][T30105] sp0: Synchronizing with TNC
[  877.623543][   T33] audit: type=1326 audit(1755177906.752:549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=30106 comm="syz.1.9644" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb61498ebe9 code=0x7ffe0000
[  879.441109][T30162] netlink: 9 bytes leftover after parsing attributes in process `syz.4.9669'.
[  879.451460][T30162] 0: renamed from hsr_slave_1 (while UP)
[  879.456369][T30162] 0: entered allmulticast mode
[  879.458916][T30162] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check.
[  879.468575][   T24] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  879.629789][T30174] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  879.632884][   T24] usb 2-1: Using ep0 maxpacket: 32
[  879.636531][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  879.641187][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34047, setting to 1024
[  879.645784][   T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  879.649609][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  879.657079][   T24] usb 2-1: config 0 descriptor??
[  879.659836][T30142] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  879.666417][   T24] hub 2-1:0.0: USB hub found
[  879.883149][   T24] hub 2-1:0.0: 1 port detected
[  880.990734][   T24] hub 2-1:0.0: hub_ext_port_status failed (err = -71)
[  880.991473][T29560] usb 2-1: USB disconnect, device number 18
[  881.860293][T30224] netlink: 60 bytes leftover after parsing attributes in process `syz.3.9696'.
[  881.872801][T30224] netlink: 35 bytes leftover after parsing attributes in process `syz.3.9696'.
[  882.358771][T30236] loop1: detected capacity change from 0 to 32768
[  882.372798][T30236] XFS (loop1): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  882.400760][T30236] XFS (loop1): Ending clean mount
[  882.408982][T30236] XFS (loop1): Quotacheck needed: Please wait.
[  882.459193][T30236] XFS (loop1): Quotacheck: Done.
[  882.525876][T29496] XFS (loop1): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  882.821114][T30256] loop1: detected capacity change from 0 to 2048
[  882.835147][T30256] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  882.843121][T30256] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  882.890099][T29496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  883.094639][T30279] netlink: 104 bytes leftover after parsing attributes in process `syz.3.9717'.
[  883.407646][T30301] loop1: detected capacity change from 0 to 1024
[  883.410999][T30301] EXT4-fs: Ignoring removed orlov option
[  883.418539][T30301] EXT4-fs: Ignoring removed nomblk_io_submit option
[  883.464913][T30301] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  883.716376][T29496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  883.807230][T30323] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9739'.
[  884.770885][T30336] netlink: 55631 bytes leftover after parsing attributes in process `syz.1.9743'.
[  884.775005][T30336] netlink: 6320 bytes leftover after parsing attributes in process `syz.1.9743'.
[  884.780357][T30336] tc_dump_action: action bad kind
[  884.933375][T30340] loop1: detected capacity change from 0 to 1024
[  884.945175][T30340] EXT4-fs: Ignoring removed oldalloc option
[  884.948439][T30340] EXT4-fs (loop1): stripe (3) is not aligned with cluster size (16), stripe is disabled
[  884.988195][T30340] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  885.014225][T30340] EXT4-fs (loop1): Online resizing not supported with bigalloc
[  885.064180][T29496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  885.561615][T30372] loop1: detected capacity change from 0 to 128
[  885.575497][T30372] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  885.580490][T30372] ext4 filesystem being mounted at /80/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  885.624182][T29496] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  885.675683][T30377] input: syz1 as /devices/virtual/input/input39
[  886.000706][T30395] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (36)
[  886.478445][T30414] !: renamed from dummy0
[  887.376583][T30444] netlink: 'syz.3.9788': attribute type 3 has an invalid length.
[  887.442533][  T793] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  887.610385][  T793] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  887.614608][  T793] usb 2-1: config 0 has no interfaces?
[  887.616994][  T793] usb 2-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[  887.620705][  T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  887.627466][  T793] usb 2-1: config 0 descriptor??
[  887.669502][T30451] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9791'.
[  887.858223][   T24] usb 2-1: USB disconnect, device number 19
[  888.634619][T30482] binder_alloc: 30481: binder_alloc_buf, no vma
[  888.681653][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  888.685718][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  888.722799][T30486] netlink: 'syz.1.9807': attribute type 3 has an invalid length.
[  888.725886][T30486] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.9807'.
[  890.438026][T30526] loop1: detected capacity change from 0 to 4096
[  890.473021][T30526] ntfs3(loop1): ino=21, "file1" fiemap is not supported for compressed file (cp -r)
[  890.588903][T30535] netlink: 8 bytes leftover after parsing attributes in process `syz.4.9829'.
[  890.880213][  T793] usb 2-1: new high-speed USB device number 20 using dummy_hcd
[  890.938786][T30553] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9837'.
[  890.943515][T30553] netlink: 28 bytes leftover after parsing attributes in process `syz.4.9837'.
[  890.967151][T30553] gretap0: entered promiscuous mode
[  890.978043][T30553] gretap0: left promiscuous mode
[  891.072030][  T793] usb 2-1: Using ep0 maxpacket: 32
[  891.080122][  T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  891.084723][  T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  891.088847][  T793] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  891.092584][  T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  891.118087][  T793] usb 2-1: config 0 descriptor??
[  891.271594][T30564] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9842'.
[  891.602160][  T793] savu 0003:1E7D:2D5A.0022: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.1-1/input0
[  891.820163][  T793] usb 2-1: USB disconnect, device number 20
[  892.673501][T30595] netlink: 28 bytes leftover after parsing attributes in process `syz.3.9855'.
[  892.821754][T30587] loop1: detected capacity change from 0 to 32768
[  892.833400][T30587] BTRFS: device fsid 5e4b7888-5e56-43f0-8345-635ad0fd87c6 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.9851 (30587)
[  892.845982][T30587] BTRFS info (device loop1): first mount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  892.855293][T30587] BTRFS info (device loop1): using blake2b (blake2b-256-generic) checksum algorithm
[  892.858626][T30587] BTRFS info (device loop1): using free-space-tree
[  893.031888][T30627] netlink: 88 bytes leftover after parsing attributes in process `syz.3.9863'.
[  893.269911][T29496] BTRFS info (device loop1): last unmount of filesystem 5e4b7888-5e56-43f0-8345-635ad0fd87c6
[  894.860769][T30659] loop1: detected capacity change from 0 to 256
[  894.864418][T30659] exfat: Deprecated parameter 'namecase'
[  894.880207][T30659] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x1c5e6afd, utbl_chksum : 0xe619d30d)
[  894.906680][    C0] hpet: Lost 1 RTC interrupts
[  895.649046][T14293] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  895.696838][T30678] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  895.839153][T14293] usb 2-1: Using ep0 maxpacket: 16
[  895.848256][T14293] usb 2-1: config 0 has an invalid interface number: 126 but max is 0
[  895.851873][T14293] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  895.855921][T14293] usb 2-1: config 0 has no interface number 0
[  895.858695][T14293] usb 2-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87
[  895.863513][T14293] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024
[  895.868020][T14293] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64
[  895.873981][T14293] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0
[  895.877844][T14293] usb 2-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4
[  895.883061][T14293] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  895.887645][T14293] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  895.893167][T14293] usb 2-1: config 0 descriptor??
[  895.895879][T30670] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  895.904602][T14293] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  896.127450][ T9795] usb 2-1: USB disconnect, device number 21
[  896.768377][T30699] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9893'.
[  897.313284][T30702] loop1: detected capacity change from 0 to 40427
[  897.316154][T30702] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  897.318648][T30702] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  897.333796][T30702] F2FS-fs (loop1): invalid crc value
[  897.394262][T30702] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  897.398131][T30702] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  897.402032][T30702] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  898.509802][T30737] bridge0: port 1(bridge_slave_0) entered disabled state
[  898.513773][T30737] bridge0: port 2(bridge_slave_1) entered disabled state
[  898.554651][T30737] netlink: 'syz.1.9907': attribute type 16 has an invalid length.
[  898.557037][T30737] netlink: 'syz.1.9907': attribute type 17 has an invalid length.
[  898.585377][T30737] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  899.484616][T30774] overlayfs: failed to clone lowerpath
[  899.491288][T14293] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  899.602248][T30782] netlink: 'syz.3.9928': attribute type 7 has an invalid length.
[  899.615538][T30782] : entered promiscuous mode
[  899.675278][T14293] usb 2-1: Using ep0 maxpacket: 8
[  899.679946][T14293] usb 2-1: unable to get BOS descriptor or descriptor too short
[  899.684338][T14293] usb 2-1: config 7 has an invalid interface number: 142 but max is 0
[  899.691994][T14293] usb 2-1: config 7 has no interface number 0
[  899.697487][T14293] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice=dd.6d
[  899.703076][T14293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  899.706461][T14293] usb 2-1: Product: syz
[  899.711080][T14293] usb 2-1: Manufacturer: syz
[  899.712925][T14293] usb 2-1: SerialNumber: syz
[  899.814080][    C0] hpet: Lost 1 RTC interrupts
[  899.841498][T30790] batman_adv: batadv0: Removing interface: batadv_slave_0
[  899.946602][T14293] usb 2-1: USB disconnect, device number 22
[  900.687092][T30799] netlink: 16 bytes leftover after parsing attributes in process `syz.4.9934'.
[  901.060193][T30812] loop1: detected capacity change from 0 to 256
[  901.066891][T30812] exfat: Deprecated parameter 'namecase'
[  901.075105][T30812] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5441951d, utbl_chksum : 0xe619d30d)
[  901.219939][T30823] loop1: detected capacity change from 0 to 164
[  901.229728][T30823] isofs_fill_super: get root inode failed
[  901.308183][T30827] loop1: detected capacity change from 0 to 256
[  901.324525][T30827] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xecfd5def, utbl_chksum : 0xe619d30d)
[  901.587962][T30841] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  901.662059][T30846] netlink: 72 bytes leftover after parsing attributes in process `syz.3.9957'.
[  901.822369][T30856] PKCS7: Unknown OID: [4] 0.38.107.217331280.32(bad)
[  901.833801][T30856] PKCS7: Only support pkcs7_signedData type
[  902.959485][T30883] loop1: detected capacity change from 0 to 4096
[  902.963547][T30883] ntfs3(loop1): Different NTFS sector size (1024) and media sector size (512).
[  902.970555][T30883] ntfs3(loop1): MFT: r=0, expect seq=1 instead of 0!
[  902.973314][T30883] ntfs3(loop1): Mark volume as dirty due to NTFS errors
[  902.976608][T30883] ntfs3(loop1): Failed to load $MFT (-22).
[  904.249993][  T793] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  904.437949][  T793] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18
[  904.445292][  T793] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  904.449424][  T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  904.455675][  T793] usb 2-1: SerialNumber: syz
[  904.691192][T30916] loop1: detected capacity change from 0 to 1024
[  904.694558][T30916] EXT4-fs: Ignoring removed bh option
[  904.708043][T30916] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-001000000000 r/w without journal. Quota mode: writeback.
[  904.779567][T30933] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.9987: corrupted in-inode xattr: e_value out of bounds
[  904.793814][  T793] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71
[  904.801242][  T793] usb 2-1: USB disconnect, device number 23
[  905.357037][T29496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-001000000000.
[  905.425674][T30945] 9pnet_fd: Insufficient options for proto=fd
[  905.541233][T30950] loop1: detected capacity change from 0 to 512
[  905.549338][T30950] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.10000: corrupted in-inode xattr: invalid ea_ino
[  905.554974][T30950] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.10000: couldn't read orphan inode 15 (err -117)
[  905.561000][T30950] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  906.387225][T29496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  906.575539][T30980] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -2
[  906.579413][T30980] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db
[  906.804127][T30977] loop1: detected capacity change from 0 to 32768
[  906.835320][T30977] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=metadata_checksum=none,data_checksum=none,compression=lz4,nochanges,nojournal_transaction_names,read_only,version_upgrade=none
[  906.835345][T30977]   allowing incompatible features above 0.0: (unknown version)
[  906.835356][T30977]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  906.851802][T30977] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0
[  906.855165][T30977] bcachefs (loop1): recovering from clean shutdown, journal seq 13
[  906.878331][T30977] bcachefs (loop1): accounting_read... done
[  906.881432][T30977] bcachefs (loop1): alloc_read... done
[  906.883944][T30977] bcachefs (loop1): snapshots_read... done
[  906.890742][T30977] bcachefs (loop1): journal_replay... done
[  906.893633][T30977] bcachefs (loop1): resume_logged_ops... done
[  906.896526][T30977] bcachefs (loop1): delete_dead_inodes... done
[  906.900314][T30977] bcachefs (loop1): done starting filesystem
[  906.930417][T29496] bcachefs (loop1): shutting down
[  906.954281][T29496] bcachefs (loop1): shutdown complete
[  908.004997][   T33] audit: type=1804 audit(1755177934.959:550): pid=31009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.10027" name="/newroot/151/file0" dev="tmpfs" ino=804 res=1 errno=0
[  908.053253][    C0] hpet: Lost 1 RTC interrupts
[  908.649177][T31026] netlink: 44 bytes leftover after parsing attributes in process `syz.4.10036'.
[  908.652737][T31026] netlink: 51 bytes leftover after parsing attributes in process `syz.4.10036'.
[  908.656389][T31026] netlink: 51 bytes leftover after parsing attributes in process `syz.4.10036'.
[  909.744689][T31045] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  909.966105][T31060] netlink: 'syz.3.10052': attribute type 1 has an invalid length.
[  910.027528][   T33] audit: type=1326 audit(1755177936.833:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31062 comm="syz.3.10055" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb7b8ebe9 code=0x7ffc0000
[  910.044040][   T33] audit: type=1326 audit(1755177936.833:552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31062 comm="syz.3.10055" exe="/syz-executor" sig=0 arch=c000003e syscall=282 compat=0 ip=0x7effb7b8ebe9 code=0x7ffc0000
[  910.070957][   T33] audit: type=1326 audit(1755177936.833:553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31062 comm="syz.3.10055" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb7b8ebe9 code=0x7ffc0000
[  910.098161][   T33] audit: type=1326 audit(1755177936.833:554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=31062 comm="syz.3.10055" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7effb7b8ebe9 code=0x7ffc0000
[  910.133688][T31070] netlink: 'syz.4.10057': attribute type 16 has an invalid length.
[  910.136888][T31070] netlink: 48 bytes leftover after parsing attributes in process `syz.4.10057'.
[  910.504248][T31097] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  910.914213][T31107] loop1: detected capacity change from 0 to 32768
[  910.924368][T31107] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10075 (31107)
[  910.933278][T31107] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  910.937583][T31107] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  910.941198][T31107] BTRFS info (device loop1): using free-space-tree
[  911.045468][T29496] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  911.350727][    C0] hpet: Lost 1 RTC interrupts
[  911.411992][    C0] hpet: Lost 1 RTC interrupts
[  912.543730][T31205] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10111'.
[  913.737907][   T24] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  913.932112][   T24] usb 2-1: Using ep0 maxpacket: 32
[  913.941228][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  913.948388][   T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  913.952360][   T24] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  913.961340][   T24] usb 2-1: New USB device found, idVendor=0458, idProduct=501a, bcdDevice= 0.00
[  913.967837][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  913.974213][   T24] usb 2-1: config 0 descriptor??
[  914.447015][   T24] input: HID 0458:501a as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:501A.0023/input/input40
[  914.469966][   T24] input: HID 0458:501a as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:0458:501A.0023/input/input41
[  914.482973][   T24] kye 0003:0458:501A.0023: input,hiddev0,hidraw0: USB HID v0.00 Mouse [HID 0458:501a] on usb-dummy_hcd.1-1/input0
[  914.672191][   T24] usb 2-1: USB disconnect, device number 24
[  915.306999][T31325] netlink: 'syz.1.10169': attribute type 1 has an invalid length.
[  915.310706][T31325] netlink: 8 bytes leftover after parsing attributes in process `syz.1.10169'.
[  915.314266][T31325] netlink: 32 bytes leftover after parsing attributes in process `syz.1.10169'.
[  915.324640][T31325] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1
[  915.329427][T31325] gretap1: entered promiscuous mode
[  915.755591][T31341] loop1: detected capacity change from 0 to 32768
[  915.759198][T31341] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10175 (31341)
[  915.765654][T31341] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  915.769807][T31341] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  915.773371][T31341] BTRFS info (device loop1): using free-space-tree
[  915.804686][T31341] BTRFS info (device loop1): rebuilding free space tree
[  915.941540][T29496] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  916.035936][    C0] hpet: Lost 1 RTC interrupts
[  916.321786][T31376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10185'.
[  916.492898][T31388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.10190'.
[  916.502046][T31387] delete_channel: no stack
[  918.591181][   T24] usb 2-1: new full-speed USB device number 25 using dummy_hcd
[  918.768040][   T24] usb 2-1: config 3 has an invalid interface number: 61 but max is 0
[  918.771235][   T24] usb 2-1: config 3 has no interface number 0
[  918.788991][   T24] usb 2-1: config 3 interface 61 has no altsetting 0
[  918.803549][   T24] usb 2-1: string descriptor 0 read error: -22
[  918.806064][   T24] usb 2-1: New USB device found, idVendor=0499, idProduct=101a, bcdDevice=44.26
[  918.819399][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  918.834713][   T24] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  918.848095][   T24] snd-usb-audio 2-1:3.61: probe with driver snd-usb-audio failed with error -2
[  919.052423][   T24] usb 2-1: USB disconnect, device number 25
[  919.941683][T31504] loop1: detected capacity change from 0 to 1024
[  919.956179][T31504] EXT4-fs: Ignoring removed oldalloc option
[  919.984444][T31504] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  920.090944][T29496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  920.202089][T31516] overlayfs: failed to create directory ./bus/work (errno: 1); mounting read-only
[  920.206667][T31516] overlayfs: NFS export requires an index dir, falling back to nfs_export=off.
[  920.551930][T31518] team0 (unregistering): Port device team_slave_0 removed
[  920.561344][T31518] team0 (unregistering): Port device team_slave_1 removed
[  920.669163][T31522] netlink: 'syz.4.10253': attribute type 12 has an invalid length.
[  920.677893][T31522] netlink: 211856 bytes leftover after parsing attributes in process `syz.4.10253'.
[  920.766634][T31530] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[  920.819954][T31532] netlink: 36 bytes leftover after parsing attributes in process `syz.1.10258'.
[  920.839611][T31532] netlink: 4 bytes leftover after parsing attributes in process `syz.1.10258'.
[  920.925353][T31534] netlink: 16 bytes leftover after parsing attributes in process `syz.3.10259'.
[  921.016661][T31540] loop1: detected capacity change from 0 to 128
[  921.027852][T31540] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  921.035424][T31540] ext4 filesystem being mounted at /213/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  921.038427][T31544] delete_channel: no stack
[  921.089319][T29496] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  921.120580][    C0] hpet: Lost 1 RTC interrupts
[  921.561760][T31581] nfs4: Unexpected value for 'acl'
[  922.730400][T31605] ipvlan2: entered promiscuous mode
[  922.732591][T31605] ipvlan2: entered allmulticast mode
[  922.795657][T31611] overlayfs: failed to clone upperpath
[  922.955169][T31621] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  923.026644][T31623] vlan0: entered allmulticast mode
[  923.028732][T31623] vlan1: entered allmulticast mode
[  923.030917][T31623] : entered allmulticast mode
[  923.150836][T31617] loop1: detected capacity change from 0 to 32768
[  923.155077][T31617] bcachefs (/dev/loop1): error validating superblock: Invalid superblock section members_v2: device 0: freespace initialized but fs has no alloc info
[  923.155077][T31617] members_v2 (size 152):
[  923.155077][T31617] Device:                        0
[  923.155077][T31617]   Label:                       (none)
[  923.155077][T31617]   UUID:                        7af6772b-00de-4159-84cd-1faead05aceb
[  923.155077][T31617]   Size:                        16777216
[  923.155077][T31617]   read errors:                 0
[  923.155077][T31617]   write errors:                0
[  923.155077][T31617]   checksum errors:             0
[  923.155077][T31617]   seqread iops:                0
[  923.155077][T31617]   seqwrite iops:               0
[  923.155077][T31617]   randread iops:               0
[  923.155077][T31617]   randwrite iops:              0
[  923.155077][T31617]   Bucket size:                 131072
[  923.155077][T31617]   First bucket:                0
[  923.155077][T31617]   Buckets:                     128
[  923.155077][T31617]   Last mount:                  1714681267
[  923.155077][T31617]   Last superblock write:       42
[  923.155077][T31617]   State:                       rw
[  923.155077][T31617]   Data allowed:                journal,btree,user
[  923.155077][T31617]   Has data:                    (none)
[  923.155077][T31617]   Btree allocated bitmap blocksize:256
[  923.155077][T31617]   Btree allocated bitmap:      0000000000000000000001000010000010011000000000000000000000000000
[  923.155077][T31617]  
[  923.155280][T31617] bcachefs: bch2_fs_get_tree() error: invalid_sb_members
[  924.553768][T31677] loop1: detected capacity change from 0 to 4096
[  924.559188][T31677] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[  924.567544][T31677] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[  924.570672][T31677] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[  924.574318][T31677] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[  924.577417][T31677] ntfs3(loop1): try to read out of volume at offset 0x3fffffc1c00
[  924.580642][T31677] ntfs3(loop1): try to read out of volume at offset 0x3fffffc2c00
[  924.587449][T31677] ntfs3(loop1): try to read out of volume at offset 0x3fffffc4c00
[  924.590493][T31677] ntfs3(loop1): try to read out of volume at offset 0x3fffffc8c00
[  924.595128][T31677] ntfs3(loop1): try to read out of volume at offset 0x3fffffd0c00
[  924.598478][T31677] ntfs3(loop1): try to read out of volume at offset 0x3fffffe0c00
[  926.088200][   T24] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  926.253600][   T24] usb 2-1: Using ep0 maxpacket: 16
[  926.259485][   T24] usb 2-1: config 0 has an invalid interface number: 4 but max is 0
[  926.262367][   T24] usb 2-1: config 0 has no interface number 0
[  926.264364][   T24] usb 2-1: config 0 interface 4 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  926.267409][   T24] usb 2-1: config 0 interface 4 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  926.273109][   T24] usb 2-1: New USB device found, idVendor=0742, idProduct=200a, bcdDevice=7e.46
[  926.276500][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  926.279313][   T24] usb 2-1: Product: syz
[  926.280733][   T24] usb 2-1: Manufacturer: syz
[  926.282300][   T24] usb 2-1: SerialNumber: syz
[  926.288510][   T24] usb 2-1: config 0 descriptor??
[  926.290967][T31711] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  926.293742][T31711] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  926.298694][   T24] HFC-S_USB 2-1:0.4: probe with driver HFC-S_USB failed with error -5
[  926.517212][   T24] usb 2-1: USB disconnect, device number 26
[  927.179735][T31734] netlink: 40 bytes leftover after parsing attributes in process `syz.4.10344'.
[  927.309953][T31742] loop1: detected capacity change from 0 to 2048
[  927.314830][T31742] EXT4-fs: Ignoring removed mblk_io_submit option
[  927.357178][T31742] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  927.582063][T31760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10355'.
[  927.602240][   T12] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  927.602313][T31760] netlink: 4 bytes leftover after parsing attributes in process `syz.3.10355'.
[  927.619450][   T12] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  927.623164][   T12] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  927.638438][   T12] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  927.641482][T29157] EXT4-fs error (device loop1): ext4_validate_block_bitmap:441: comm kworker/u10:12: bg 0: block 234: padding at end of block bitmap is not set
[  927.662549][T29157] EXT4-fs (loop1): Remounting filesystem read-only
[  927.675801][T29496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  927.707606][    C0] hpet: Lost 1 RTC interrupts
[  928.331428][T29560] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  929.426434][T29560] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  929.479365][T31804] netlink: 8 bytes leftover after parsing attributes in process `syz.4.10372'.
[  929.483381][T31804] netlink: 20 bytes leftover after parsing attributes in process `syz.4.10372'.
[  929.493541][T31804] geneve2: entered promiscuous mode
[  929.495891][T31804] geneve2: entered allmulticast mode
[  929.543089][T31806] netlink: 'syz.4.10373': attribute type 1 has an invalid length.
[  929.600811][T31806] 8021q: adding VLAN 0 to HW filter on device bond4
[  929.611445][   T12] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  929.788856][T31808] vlan2: entered allmulticast mode
[  929.791336][T31808] bond4: entered allmulticast mode
[  930.169970][T31795] loop1: detected capacity change from 0 to 262144
[  930.174660][T31795] BTRFS: device fsid 7e32c2af-f87a-45a1-bcba-64dea7c56a53 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10369 (31795)
[  930.183924][T31795] BTRFS info (device loop1): first mount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  930.188162][T31795] BTRFS info (device loop1): using xxhash64 (xxhash64-generic) checksum algorithm
[  930.192714][T31795] BTRFS info (device loop1): using free-space-tree
[  930.277981][T31815] overlayfs: failed to clone upperpath
[  930.484078][T29496] BTRFS info (device loop1): last unmount of filesystem 7e32c2af-f87a-45a1-bcba-64dea7c56a53
[  930.714929][ T5681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  930.719182][ T5681] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  930.833448][    C0] hpet: Lost 1 RTC interrupts
[  930.843283][T31833] netlink: 12 bytes leftover after parsing attributes in process `syz.4.10379'.
[  931.018559][ T9795] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  931.436674][T31852] 8021q: adding VLAN 0 to HW filter on device bond4
[  931.649868][T31866] rtc_cmos 00:04: Alarms can be up to one day in the future
[  931.749892][ T9795] rtc_cmos 00:04: Alarms can be up to one day in the future
[  931.755069][ T9795] rtc_cmos 00:04: Alarms can be up to one day in the future
[  931.758971][ T9795] rtc_cmos 00:04: Alarms can be up to one day in the future
[  931.763066][ T9795] rtc_cmos 00:04: Alarms can be up to one day in the future
[  931.792473][ T9795] rtc rtc0: __rtc_set_alarm: err=-22
[  933.368592][T31913] loop1: detected capacity change from 0 to 4096
[  935.394963][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  935.626783][T31959] loop1: detected capacity change from 0 to 256
[  935.632202][T31959] FAT-fs (loop1): Invalid FSINFO signature: 0x00fffff8, 0x00000000 (sector = 1)
[  935.637004][T31959] FAT-fs (loop1): bogus number of directory entries (1)
[  935.647160][T31959] FAT-fs (loop1): Can't find a valid FAT filesystem
[  935.854166][T31967] loop1: detected capacity change from 0 to 4096
[  937.235278][T32008] loop1: detected capacity change from 0 to 512
[  937.239000][T32008] EXT4-fs: Ignoring removed mblk_io_submit option
[  937.242285][T32008] EXT4-fs: Ignoring removed mblk_io_submit option
[  937.246550][T32008] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem
[  937.253459][T32008] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8042c118, mo2=0002]
[  937.259102][T32008] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.10452: corrupted in-inode xattr: e_value size too large
[  937.266247][T32008] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.10452: couldn't read orphan inode 15 (err -117)
[  937.297248][T32008] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  937.617903][T32008] EXT4-fs (loop1): shut down requested (1)
[  937.655604][T29496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  937.979011][T32019] loop1: detected capacity change from 0 to 32768
[  938.043511][T32019] JBD2: Ignoring recovery information on journal
[  938.097577][T32019] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  938.143277][T29496] ocfs2: Unmounting device (7,1) on (node local)
[  938.440572][T32034] loop1: detected capacity change from 0 to 32768
[  938.444270][T32034] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10459 (32034)
[  938.451131][T32034] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  938.454528][T32034] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  938.457504][T32034] BTRFS info (device loop1): using free-space-tree
[  938.598593][T32034] BTRFS error: failed to open device for path nhؤo6:ƾ+@W4xF	2i{!Xg]C with flags 0x1: -2
[  938.627080][T29496] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  939.180874][T32068] loop1: detected capacity change from 0 to 1024
[  939.186477][T32068] EXT4-fs: Ignoring removed orlov option
[  939.189586][T32068] EXT4-fs (loop1): Test dummy encryption mode enabled
[  939.243424][T32068] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  939.335670][T29496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  939.489600][T32088] nft_compat: unsupported protocol 0
[  939.601045][T32101] loop1: detected capacity change from 0 to 512
[  939.624036][T32101] EXT4-fs error (device loop1): ext4_iget_extra_inode:5104: inode #15: comm syz.1.10486: corrupted in-inode xattr: invalid ea_ino
[  939.628715][T32101] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.10486: couldn't read orphan inode 15 (err -117)
[  939.636282][T32101] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  939.650619][T32101] EXT4-fs error (device loop1): ext4_add_entry:2417: inode #2: comm syz.1.10486: Directory hole found for htree leaf block 0
[  939.681982][T29496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  939.764409][ T5919] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  939.784138][ T5919] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  939.786917][ T5919] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  939.789688][ T5919] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  941.066320][T32147] CIFS mount error: No usable UNC path provided in device string!
[  941.066320][T32147] 
[  941.070294][T32147] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  941.089966][T32149] netlink: 256 bytes leftover after parsing attributes in process `syz.1.10507'.
[  941.326095][T32164] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant.
[  941.326095][T32164] The task syz.3.10511 (32164) triggered the difference, watch for misbehavior.
[  941.811002][T32174] 8021q: adding VLAN 0 to HW filter on device bond2
[  942.623024][T14293] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  942.796530][T14293] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  942.803798][T14293] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 24
[  942.813064][T14293] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  942.821438][T14293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  942.828209][T14293] usb 2-1: Product: syz
[  942.831156][T14293] usb 2-1: Manufacturer: syz
[  942.835416][T14293] usb 2-1: SerialNumber: syz
[  942.851592][T14293] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  942.854923][T14293] cdc_ncm 2-1:1.0: bind() failure
[  942.872139][T14293] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  942.874657][T14293] cdc_ncm 2-1:1.1: bind() failure
[  943.071582][ T9795] usb 2-1: USB disconnect, device number 27
[  944.290291][T32243] loop1: detected capacity change from 0 to 32768
[  944.293834][T32243] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.10546 (32243)
[  944.300653][T32243] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  944.304189][T32243] BTRFS info (device loop1): using crc32c (crc32c-lib) checksum algorithm
[  944.307231][T32243] BTRFS info (device loop1): disk space caching is enabled
[  944.309947][T32243] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  944.336592][T32243] BTRFS info (device loop1): rebuilding free space tree
[  944.351869][T32243] BTRFS info (device loop1): disabling free space tree
[  944.355037][T32243] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  944.358974][T32243] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  944.413783][T29496] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  944.629460][T32267] loop1: detected capacity change from 0 to 512
[  944.633462][T32267] EXT4-fs (loop1): Test dummy encryption mode enabled
[  944.635936][T32267] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  944.654199][T32267] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.10550: bad orphan inode 131083
[  944.658695][T32267] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  944.795211][   T33] audit: type=1800 audit(1755177968.916:555): pid=32279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.10550" name="file1" dev="loop1" ino=19 res=0 errno=0
[  945.530475][T29496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  945.557434][    C1] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured!
[  945.836732][T32315] cgroup: none used incorrectly
[  945.866476][T32317] netlink: 'syz.1.10571': attribute type 9 has an invalid length.
[  946.396051][T32326] netlink: 8 bytes leftover after parsing attributes in process `syz.3.10574'.
[  946.518117][T32330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10572'.
[  946.534063][T32330] netlink: 12 bytes leftover after parsing attributes in process `syz.1.10572'.
[  946.817832][T32332] overlayfs: failed to clone upperpath
[  946.871395][T32338] veth1_to_bond: entered allmulticast mode
[  946.873982][T32337] veth1_to_bond: left allmulticast mode
[  946.933296][   T33] audit: type=1326 audit(1755177970.873:556): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32335 comm="syz.4.10578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7fc00000
[  946.941926][   T33] audit: type=1326 audit(1755177970.873:557): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32335 comm="syz.4.10578" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f38a258ebe9 code=0x7fc00000
[  946.956941][   T33] audit: type=1326 audit(1755177970.882:558): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32335 comm="syz.4.10578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7fc00000
[  946.965379][   T33] audit: type=1326 audit(1755177970.882:559): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32335 comm="syz.4.10578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7fc00000
[  946.974746][   T33] audit: type=1326 audit(1755177970.882:560): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32335 comm="syz.4.10578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7fc00000
[  946.984219][   T33] audit: type=1326 audit(1755177970.882:561): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32335 comm="syz.4.10578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7fc00000
[  946.992686][   T33] audit: type=1326 audit(1755177970.882:562): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32335 comm="syz.4.10578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7fc00000
[  946.994808][T32346] macvtap0: entered promiscuous mode
[  947.000846][   T33] audit: type=1326 audit(1755177970.882:563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32335 comm="syz.4.10578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7fc00000
[  947.000873][   T33] audit: type=1326 audit(1755177970.882:564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32335 comm="syz.4.10578" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f38a258ebe9 code=0x7fc00000
[  947.021932][T32346] macvtap0: left promiscuous mode
[  947.838576][T32401] overlayfs: failed to clone upperpath
[  947.842905][T32401] overlayfs: failed to clone upperpath
[  947.846000][T32402] loop1: detected capacity change from 0 to 1024
[  947.862354][T32402] EXT4-fs error (device loop1): ext4_acquire_dquot:6933: comm syz.1.10607: Failed to acquire dquot type 0
[  947.870162][T32402] EXT4-fs error (device loop1): mb_free_blocks:2017: group 0, inode 13: block 144:freeing already freed block (bit 9); block bitmap corrupt.
[  947.882499][T32402] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.10607: corrupted inode contents
[  947.888711][T32402] EXT4-fs error (device loop1): ext4_dirty_inode:6538: inode #13: comm syz.1.10607: mark_inode_dirty error
[  947.892940][T32402] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.10607: corrupted inode contents
[  947.897123][T32402] EXT4-fs error (device loop1): __ext4_ext_dirty:206: inode #13: comm syz.1.10607: mark_inode_dirty error
[  947.904354][T32402] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.10607: corrupted inode contents
[  947.914022][T32402] EXT4-fs error (device loop1) in ext4_orphan_del:305: Corrupt filesystem
[  947.916945][T32402] EXT4-fs error (device loop1): ext4_do_update_inode:5653: inode #13: comm syz.1.10607: corrupted inode contents
[  947.924895][T32402] EXT4-fs error (device loop1): ext4_truncate:4666: inode #13: comm syz.1.10607: mark_inode_dirty error
[  947.932397][T32402] EXT4-fs error (device loop1) in ext4_process_orphan:347: Corrupt filesystem
[  947.936698][T32402] EXT4-fs (loop1): 1 truncate cleaned up
[  947.939393][T32402] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  947.974389][T29496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  949.204119][T32456] loop1: detected capacity change from 0 to 512
[  949.207300][T32456] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  949.223340][T32456] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  949.227832][T32456] ext4 filesystem being mounted at /315/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  949.244304][T32456] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters
[  949.275274][T29496] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  949.337369][T32462] netlink: 'syz.1.10633': attribute type 1 has an invalid length.
[  951.018749][T32521] netlink: 'syz.3.10661': attribute type 1 has an invalid length.
[  951.101750][T32521] bond5: (slave veth5): Enslaving as an active interface with a down link
[  951.249288][T32540] netlink: 4 bytes leftover after parsing attributes in process `syz.4.10670'.
[  951.285993][T32535] netlink: 56 bytes leftover after parsing attributes in process `syz.3.10668'.
[  951.375524][T14293] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  951.381535][T32546] 9pnet: p9_errstr2errno: server reported unknown error @0xffffffffffffffff
[  951.478739][T32548] batman_adv: batadv0: Adding interface: gretap3
[  951.481418][T32548] batman_adv: batadv0: The MTU of interface gretap3 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  951.496344][T32548] batman_adv: batadv0: Interface activated: gretap3
[  951.552217][T14293] usb 2-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7
[  951.557509][T14293] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  951.560374][T14293] usb 2-1: Product: syz
[  951.561888][T14293] usb 2-1: Manufacturer: syz
[  951.563398][T14293] usb 2-1: SerialNumber: syz
[  951.566370][T14293] usb 2-1: config 0 descriptor??
[  952.324404][T14293] usb 2-1: f81604_read: reg: 105 failed: -EPROTO
[  952.327221][T14293] f81604 2-1:0.0: Setting termination of CH#1 failed: -EPROTO
[  952.330509][T14293] f81604 2-1:0.0: probe with driver f81604 failed with error -71
[  952.336586][T14293] usb 2-1: USB disconnect, device number 28
[  953.020586][T32589] netlink: 'syz.1.10693': attribute type 25 has an invalid length.
[  953.042248][T32591] netlink: 'syz.4.10694': attribute type 2 has an invalid length.
[  953.458877][T32624] loop1: detected capacity change from 0 to 128
[  953.463310][T32624] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  953.473201][T32624] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  954.428845][T32675] loop1: detected capacity change from 0 to 4096
[  954.432643][T32675] ntfs3(loop1): It is recommened to use chkdsk.
[  954.435208][T32675] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[  954.437725][T32675] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[  954.440523][T32675] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[  954.444841][T32675] ntfs3(loop1): try to read out of volume at offset 0x3fffffc0c00
[  954.448122][T32675] ntfs3(loop1): try to read out of volume at offset 0x3fffffc1c00
[  954.450804][T32675] ntfs3(loop1): try to read out of volume at offset 0x3fffffc2c00
[  954.453796][T32675] ntfs3(loop1): try to read out of volume at offset 0x3fffffc4c00
[  954.456381][T32675] ntfs3(loop1): try to read out of volume at offset 0x3fffffc8c00
[  954.458896][T32675] ntfs3(loop1): try to read out of volume at offset 0x3fffffd0c00
[  954.605850][T32695] kAFS: unable to lookup cell 'syz169@=R'
[  955.068596][T32732] tipc: Cannot configure node identity twice
[  955.257063][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  955.259742][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  955.361164][T32747] team_slave_1: mtu greater than device maximum
[  955.366199][T32747] team0: Device team_slave_1 failed to change mtu
[  955.714942][T32751] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  956.079119][T32758] ==================================================================
[  956.081674][T32758] BUG: KASAN: slab-use-after-free in xfrm_alloc_spi+0x570/0xf30
[  956.084001][T32758] Read of size 4 at addr ffff888120e10e44 by task syz.4.10772/32758
[  956.086555][T32758] 
[  956.087446][T32758] CPU: 1 UID: 0 PID: 32758 Comm: syz.4.10772 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  956.087462][T32758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  956.087469][T32758] Call Trace:
[  956.087477][T32758]  <TASK>
[  956.087483][T32758]  dump_stack_lvl+0x189/0x250
[  956.087499][T32758]  ? __kasan_check_byte+0x12/0x40
[  956.087513][T32758]  ? __pfx_dump_stack_lvl+0x10/0x10
[  956.087524][T32758]  ? lock_release+0x4b/0x3e0
[  956.087540][T32758]  ? __virt_addr_valid+0x4a5/0x5c0
[  956.087552][T32758]  print_report+0xca/0x240
[  956.087561][T32758]  ? xfrm_alloc_spi+0x570/0xf30
[  956.087582][T32758]  kasan_report+0x118/0x150
[  956.087594][T32758]  ? xfrm_alloc_spi+0x570/0xf30
[  956.087606][T32758]  xfrm_alloc_spi+0x570/0xf30
[  956.087615][T32758]  ? xfrm_alloc_spi+0x2a0/0xf30
[  956.087629][T32758]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  956.087637][T32758]  ? xfrm_find_acq+0x87/0xa0
[  956.087646][T32758]  xfrm_alloc_userspi+0x70b/0xc90
[  956.087659][T32758]  ? apparmor_capable+0x137/0x1b0
[  956.087669][T32758]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  956.087678][T32758]  ? __nla_parse+0x40/0x60
[  956.087692][T32758]  xfrm_user_rcv_msg+0x7a3/0xab0
[  956.087704][T32758]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  956.087721][T32758]  ? __pfx___mutex_trylock_common+0x10/0x10
[  956.087731][T32758]  ? rcu_is_watching+0x15/0xb0
[  956.087740][T32758]  ? trace_contention_end+0x39/0x120
[  956.087748][T32758]  ? __mutex_lock+0x335/0x1360
[  956.087761][T32758]  netlink_rcv_skb+0x208/0x470
[  956.087774][T32758]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  956.087785][T32758]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  956.087799][T32758]  ? netlink_deliver_tap+0x2e/0x1b0
[  956.087809][T32758]  ? netlink_deliver_tap+0x2e/0x1b0
[  956.087820][T32758]  xfrm_netlink_rcv+0x79/0x90
[  956.087828][T32758]  netlink_unicast+0x82f/0x9e0
[  956.087840][T32758]  ? __pfx_netlink_unicast+0x10/0x10
[  956.087849][T32758]  ? netlink_sendmsg+0x642/0xb30
[  956.087860][T32758]  ? skb_put+0x11b/0x210
[  956.087868][T32758]  netlink_sendmsg+0x805/0xb30
[  956.087880][T32758]  ? __pfx_netlink_sendmsg+0x10/0x10
[  956.087892][T32758]  ? aa_sock_msg_perm+0xf1/0x1d0
[  956.087903][T32758]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  956.087912][T32758]  ? __pfx_netlink_sendmsg+0x10/0x10
[  956.087923][T32758]  __sock_sendmsg+0x21c/0x270
[  956.087934][T32758]  ____sys_sendmsg+0x505/0x830
[  956.087943][T32758]  ? __pfx_____sys_sendmsg+0x10/0x10
[  956.087952][T32758]  ? import_iovec+0x74/0xa0
[  956.087961][T32758]  ___sys_sendmsg+0x21f/0x2a0
[  956.087969][T32758]  ? __pfx____sys_sendmsg+0x10/0x10
[  956.087984][T32758]  ? __fget_files+0x2a/0x420
[  956.087991][T32758]  ? __fget_files+0x3a0/0x420
[  956.087999][T32758]  __x64_sys_sendmsg+0x19b/0x260
[  956.088008][T32758]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  956.088019][T32758]  ? do_syscall_64+0xbe/0x3b0
[  956.088032][T32758]  do_syscall_64+0xfa/0x3b0
[  956.088043][T32758]  ? lockdep_hardirqs_on+0x9c/0x150
[  956.088052][T32758]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.088061][T32758]  ? exc_page_fault+0x9f/0xf0
[  956.088071][T32758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.088080][T32758] RIP: 0033:0x7f38a258ebe9
[  956.088091][T32758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  956.088099][T32758] RSP: 002b:00007f38a33ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  956.088110][T32758] RAX: ffffffffffffffda RBX: 00007f38a27b5fa0 RCX: 00007f38a258ebe9
[  956.088118][T32758] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  956.088124][T32758] RBP: 00007f38a2611e19 R08: 0000000000000000 R09: 0000000000000000
[  956.088129][T32758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  956.088136][T32758] R13: 00007f38a27b6038 R14: 00007f38a27b5fa0 R15: 00007fff0669e4d8
[  956.088146][T32758]  </TASK>
[  956.088150][T32758] 
[  956.221356][T32758] Allocated by task 31407:
[  956.223084][T32758]  kasan_save_track+0x3e/0x80
[  956.224941][T32758]  __kasan_slab_alloc+0x6c/0x80
[  956.226954][T32758]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  956.229208][T32758]  xfrm_state_alloc+0x24/0x2f0
[  956.231123][T32758]  __find_acq_core+0x8a7/0x1c00
[  956.233116][T32758]  xfrm_find_acq+0x78/0xa0
[  956.234853][T32758]  xfrm_alloc_userspi+0x6b3/0xc90
[  956.236875][T32758]  xfrm_user_rcv_msg+0x7a3/0xab0
[  956.238829][T32758]  netlink_rcv_skb+0x208/0x470
[  956.240692][T32758]  xfrm_netlink_rcv+0x79/0x90
[  956.242587][T32758]  netlink_unicast+0x82f/0x9e0
[  956.244433][T32758]  netlink_sendmsg+0x805/0xb30
[  956.246299][T32758]  __sock_sendmsg+0x21c/0x270
[  956.248134][T32758]  ____sys_sendmsg+0x505/0x830
[  956.249975][T32758]  ___sys_sendmsg+0x21f/0x2a0
[  956.251923][T32758]  __x64_sys_sendmsg+0x19b/0x260
[  956.253974][T32758]  do_syscall_64+0xfa/0x3b0
[  956.255852][T32758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.258203][T32758] 
[  956.259179][T32758] Freed by task 5970:
[  956.260837][T32758]  kasan_save_track+0x3e/0x80
[  956.262748][T32758]  kasan_save_free_info+0x46/0x50
[  956.264662][T32758]  __kasan_slab_free+0x5b/0x80
[  956.266539][T32758]  kmem_cache_free+0x18f/0x400
[  956.268465][T32758]  xfrm_state_gc_task+0x52d/0x6b0
[  956.270489][T32758]  process_scheduled_works+0xae1/0x17b0
[  956.272716][T32758]  worker_thread+0x8a0/0xda0
[  956.274595][T32758]  kthread+0x711/0x8a0
[  956.276250][T32758]  ret_from_fork+0x3fc/0x770
[  956.278161][T32758]  ret_from_fork_asm+0x1a/0x30
[  956.280141][T32758] 
[  956.281129][T32758] The buggy address belongs to the object at ffff888120e10d80
[  956.281129][T32758]  which belongs to the cache xfrm_state of size 928
[  956.286555][T32758] The buggy address is located 196 bytes inside of
[  956.286555][T32758]  freed 928-byte region [ffff888120e10d80, ffff888120e11120)
[  956.291940][T32758] 
[  956.292909][T32758] The buggy address belongs to the physical page:
[  956.295460][T32758] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff888120e10d80 pfn:0x120e10
[  956.299450][T32758] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  956.302831][T32758] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  956.305797][T32758] page_type: f5(slab)
[  956.307449][T32758] raw: 057ff00000000040 ffff88801afd5780 dead000000000122 0000000000000000
[  956.310855][T32758] raw: ffff888120e10d80 00000000800e000b 00000000f5000000 0000000000000000
[  956.314177][T32758] head: 057ff00000000040 ffff88801afd5780 dead000000000122 0000000000000000
[  956.317461][T32758] head: ffff888120e10d80 00000000800e000b 00000000f5000000 0000000000000000
[  956.320922][T32758] head: 057ff00000000002 ffffea0004838401 00000000ffffffff 00000000ffffffff
[  956.324410][T32758] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  956.327792][T32758] page dumped because: kasan: bad access detected
[  956.330349][T32758] page_owner tracks the page as allocated
[  956.332621][T32758] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 20470, tgid 20458 (syz.4.5433), ts 601797638365, free_ts 584913446778
[  956.340249][T32758]  post_alloc_hook+0x240/0x2a0
[  956.342198][T32758]  get_page_from_freelist+0x21e4/0x22c0
[  956.344489][T32758]  __alloc_frozen_pages_noprof+0x181/0x370
[  956.346819][T32758]  alloc_pages_mpol+0x232/0x4a0
[  956.348780][T32758]  allocate_slab+0x8a/0x370
[  956.350651][T32758]  ___slab_alloc+0xbeb/0x1410
[  956.352579][T32758]  kmem_cache_alloc_noprof+0x283/0x3c0
[  956.354802][T32758]  xfrm_state_alloc+0x24/0x2f0
[  956.356762][T32758]  xfrm_state_find+0x37d4/0x5400
[  956.358789][T32758]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  956.361242][T32758]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  956.363427][T32758]  xfrm_lookup_route+0x3c/0x1c0
[  956.365350][T32758]  rawv6_sendmsg+0xdab/0x1820
[  956.367232][T32758]  __sock_sendmsg+0x19c/0x270
[  956.369103][T32758]  ____sys_sendmsg+0x52d/0x830
[  956.370818][T32758]  ___sys_sendmsg+0x21f/0x2a0
[  956.372329][T32758] page last free pid 19932 tgid 19931 stack trace:
[  956.374446][T32758]  __free_frozen_pages+0xbc4/0xd30
[  956.376509][T32758]  pagetable_dtor_free+0x2d2/0x3b0
[  956.378498][T32758]  __mmdrop+0xb5/0x580
[  956.380149][T32758]  exit_mm+0x1da/0x2c0
[  956.381814][T32758]  do_exit+0x648/0x2300
[  956.383530][T32758]  do_group_exit+0x21c/0x2d0
[  956.385429][T32758]  get_signal+0x1286/0x1340
[  956.387264][T32758]  arch_do_signal_or_restart+0x9a/0x750
[  956.389510][T32758]  exit_to_user_mode_loop+0x75/0x110
[  956.391661][T32758]  do_syscall_64+0x2bd/0x3b0
[  956.393580][T32758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.395934][T32758] 
[  956.396909][T32758] Memory state around the buggy address:
[  956.399166][T32758]  ffff888120e10d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  956.402268][T32758]  ffff888120e10d80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  956.405482][T32758] >ffff888120e10e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  956.408670][T32758]                                            ^
[  956.411077][T32758]  ffff888120e10e80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  956.414304][T32758]  ffff888120e10f00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  956.417504][T32758] ==================================================================
[  956.420926][T32758] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  956.423858][T32758] CPU: 1 UID: 0 PID: 32758 Comm: syz.4.10772 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  956.428797][T32758] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  956.432788][T32758] Call Trace:
[  956.434123][T32758]  <TASK>
[  956.435328][T32758]  dump_stack_lvl+0x99/0x250
[  956.437118][T32758]  ? __asan_memcpy+0x40/0x70
[  956.439020][T32758]  ? __pfx_dump_stack_lvl+0x10/0x10
[  956.441081][T32758]  ? __pfx__printk+0x10/0x10
[  956.442977][T32758]  vpanic+0x281/0x750
[  956.444644][T32758]  ? __pfx_vpanic+0x10/0x10
[  956.446505][T32758]  ? irqentry_exit+0x74/0x90
[  956.448429][T32758]  panic+0xb9/0xc0
[  956.450253][T32758]  ? __pfx_panic+0x10/0x10
[  956.452091][T32758]  ? _raw_spin_unlock_irqrestore+0xa8/0x110
[  956.454445][T32758]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  956.456850][T32758]  ? xfrm_alloc_spi+0x570/0xf30
[  956.458836][T32758]  check_panic_on_warn+0x89/0xb0
[  956.460855][T32758]  ? xfrm_alloc_spi+0x570/0xf30
[  956.462859][T32758]  end_report+0x78/0x160
[  956.464605][T32758]  kasan_report+0x129/0x150
[  956.466476][T32758]  ? xfrm_alloc_spi+0x570/0xf30
[  956.468443][T32758]  xfrm_alloc_spi+0x570/0xf30
[  956.470357][T32758]  ? xfrm_alloc_spi+0x2a0/0xf30
[  956.472315][T32758]  ? __pfx_xfrm_alloc_spi+0x10/0x10
[  956.474442][T32758]  ? xfrm_find_acq+0x87/0xa0
[  956.476344][T32758]  xfrm_alloc_userspi+0x70b/0xc90
[  956.478357][T32758]  ? apparmor_capable+0x137/0x1b0
[  956.480441][T32758]  ? __pfx_xfrm_alloc_userspi+0x10/0x10
[  956.482687][T32758]  ? __nla_parse+0x40/0x60
[  956.484521][T32758]  xfrm_user_rcv_msg+0x7a3/0xab0
[  956.486539][T32758]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  956.488758][T32758]  ? __pfx___mutex_trylock_common+0x10/0x10
[  956.491450][T32758]  ? rcu_is_watching+0x15/0xb0
[  956.493354][T32758]  ? trace_contention_end+0x39/0x120
[  956.495281][T32758]  ? __mutex_lock+0x335/0x1360
[  956.497176][T32758]  netlink_rcv_skb+0x208/0x470
[  956.499069][T32758]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  956.501225][T32758]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  956.503301][T32758]  ? netlink_deliver_tap+0x2e/0x1b0
[  956.505391][T32758]  ? netlink_deliver_tap+0x2e/0x1b0
[  956.507332][T32758]  xfrm_netlink_rcv+0x79/0x90
[  956.509188][T32758]  netlink_unicast+0x82f/0x9e0
[  956.511103][T32758]  ? __pfx_netlink_unicast+0x10/0x10
[  956.513051][T32758]  ? netlink_sendmsg+0x642/0xb30
[  956.514808][T32758]  ? skb_put+0x11b/0x210
[  956.516497][T32758]  netlink_sendmsg+0x805/0xb30
[  956.518017][T32758]  ? __pfx_netlink_sendmsg+0x10/0x10
[  956.519677][T32758]  ? aa_sock_msg_perm+0xf1/0x1d0
[  956.521347][T32758]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  956.523079][T32758]  ? __pfx_netlink_sendmsg+0x10/0x10
[  956.524802][T32758]  __sock_sendmsg+0x21c/0x270
[  956.526233][T32758]  ____sys_sendmsg+0x505/0x830
[  956.527801][T32758]  ? __pfx_____sys_sendmsg+0x10/0x10
[  956.529501][T32758]  ? import_iovec+0x74/0xa0
[  956.531009][T32758]  ___sys_sendmsg+0x21f/0x2a0
[  956.532863][T32758]  ? __pfx____sys_sendmsg+0x10/0x10
[  956.534717][T32758]  ? __fget_files+0x2a/0x420
[  956.536605][T32758]  ? __fget_files+0x3a0/0x420
[  956.538561][T32758]  __x64_sys_sendmsg+0x19b/0x260
[  956.540589][T32758]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  956.542835][T32758]  ? do_syscall_64+0xbe/0x3b0
[  956.544382][T32758]  do_syscall_64+0xfa/0x3b0
[  956.545913][T32758]  ? lockdep_hardirqs_on+0x9c/0x150
[  956.547738][T32758]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.549849][T32758]  ? exc_page_fault+0x9f/0xf0
[  956.551597][T32758]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  956.553464][T32758] RIP: 0033:0x7f38a258ebe9
[  956.554876][T32758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  956.560867][T32758] RSP: 002b:00007f38a33ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  956.563500][T32758] RAX: ffffffffffffffda RBX: 00007f38a27b5fa0 RCX: 00007f38a258ebe9
[  956.565957][T32758] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[  956.568439][T32758] RBP: 00007f38a2611e19 R08: 0000000000000000 R09: 0000000000000000
[  956.570903][T32758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  956.573413][T32758] R13: 00007f38a27b6038 R14: 00007f38a27b5fa0 R15: 00007fff0669e4d8
[  956.575879][T32758]  </TASK>
[  956.577521][T32758] Kernel Offset: disabled
[  956.578893][T32758] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:22:26  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=1ffff11026cc7f61 RCX=ffff88802ae59cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000745f6c0 RSP=ffffc9000745f540
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44d38 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556d43d500 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000280 CR3=000000002c798000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=2525252525252525 2525252525252525
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 00000000000000ff XMM05=7712c53e93b9f1e8 728370bf3cb3486e
XMM06=63e772d7f3a22482 dabb339f3c035440 XMM07=bd0dad416e16bee6 46815929601aad29
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007effb7c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=1ffffffff33bdc60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=000000000001359a RDI=000000000001359b RBP=ffffffff99dee630 RSP=ffffc9000346e990
R8 =ffff88801fdf0237 R9 =1ffff11003fbe046 R10=dffffc0000000000 R11=ffffffff854f08a0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854f0917 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f38a33ad6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f38a33acfc8 CR3=0000000123b0e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f38a2787498 00007f38a2787470 XMM03=00007f38a27874a8 00007f38a27874a0
XMM04=00007f38a32ed100 00007f38a2787460 XMM05=00007f38a2787478 00007f38a27874c0
XMM06=00007f38a27874b8 00007f38a27874b0 XMM07=00007f38a27874a8 00007f38a27874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f38a2612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
