last executing test programs:

8m10.702846681s ago: executing program 0 (id=601):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000480), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="07022cbd7000000000000100000008000880040007012c0004800500030001000000050003000000000005000300010000000500030080ff0000050003000200000008000100030000000800020001"], 0x58}}, 0x880)

8m10.652971424s ago: executing program 0 (id=602):
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d)
bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000040)={r1, 0xffffffffffffffff, 0x22, 0x0, @val=@netkit={@void, @value=r1}}, 0x1c)

8m10.59257644s ago: executing program 0 (id=603):
syz_mount_image$btrfs(&(0x7f0000005100), &(0x7f0000000000)='./file1\x00', 0x810, &(0x7f00000003c0)={[{@discard}, {@nodatacow}, {@nobarrier}, {@usebackuproot}, {@metadata_ratio={'metadata_ratio', 0x3d, 0x8001}}, {@skip_balance}, {@user_subvol_rm}, {@max_inline={'max_inline', 0x3d, [0x6d, 0x38, 0x67, 0x30, 0x65, 0xb61148b71cab6665]}}]}, 0x3, 0x510e, &(0x7f00000196c0)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x2042, 0x58)
pwrite64(r1, &(0x7f0000000140)='2', 0x1, 0x8000c61)
ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000002680)={0x17c04, 0xffffffffffffffff, 0x2c, 0x100000001})
ioctl$FS_IOC_RESVSP(r0, 0x40305839, &(0x7f0000000040)={0x0, 0x2, 0x1, 0x1000})
r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x108)
write$FUSE_NOTIFY_POLL(r2, &(0x7f0000000140)={0x18, 0x1, 0x0, {0x2}}, 0x18)

8m9.471661014s ago: executing program 0 (id=613):
syz_mount_image$iso9660(&(0x7f00000000c0), &(0x7f0000000280)='./file0\x00', 0x3800813, &(0x7f0000000480)={[{@cruft}, {@map_acorn}, {@unhide}, {@session={'session', 0x3d, 0x31}}, {@nojoliet}, {@overriderock}, {@iocharset={'iocharset', 0x3d, 'utf8'}}, {@nocompress}, {@overriderock}, {}, {@block={'block', 0x3d, 0x200}}, {}, {@overriderock}, {@nojoliet}, {@mode={'mode', 0x3d, 0xf}}]}, 0x1, 0xa61, &(0x7f0000001cc0)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020)

8m8.582451189s ago: executing program 0 (id=617):
unshare(0x4020400)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x2, [@int]}}, 0x0, 0x2a}, 0x20)
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x7, &(0x7f0000000000)=@raw=[@exit, @map_idx, @call, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffc}, @generic={0x20}, @exit], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0), 0x10}, 0x80)

8m8.173228128s ago: executing program 0 (id=619):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002800128008000100687372001c00028008000100", @ANYRES32=r2, @ANYBLOB="050007000100000008000200", @ANYRES32=r3], 0x48}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10)

8m7.98997766s ago: executing program 32 (id=619):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', <r2=>0x0})
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'team0\x00', <r3=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000030400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="15020000000000002800128008000100687372001c00028008000100", @ANYRES32=r2, @ANYBLOB="050007000100000008000200", @ANYRES32=r3], 0x48}, 0x1, 0xba01, 0x0, 0x4000044}, 0x10)

5m3.906834216s ago: executing program 1 (id=2774):
syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000000)='./file0\x00', 0x1008c54, &(0x7f0000000300)={[{@fat=@usefree}, {@shortname_lower}, {@numtail}, {@shortname_win95}, {@iocharset={'iocharset', 0x3d, 'cp437'}}, {@shortname_winnt}, {@utf8}, {@iocharset={'iocharset', 0x3d, 'cp865'}}, {@uni_xlateno}, {@shortname_winnt}, {@uni_xlate}, {@utf8no}, {@utf8no}, {@fat=@uid}, {@rodir}, {@utf8}, {@shortname_lower}, {@utf8no}]}, 0x1, 0x30b, &(0x7f0000000d00)="$eJzs3c1LG2kcwPFfEvOm68bDsizLLjy4sOyyOJjA3vawUhRKAy1qerAgjHVsQ8ZEMkFIKdVDodeee/DQYymUQg+FXkrp1Uv/gr7dvHirUOlTJjOTxGSML60vrd/PQR/n9/x8nsnzRONj5pmN/+4ulhYc46PWIlrHxTckUYn55VX5++Xam9+nXvzgfa3UxNh0NqdUVESu3Hw4/Lw2cPnJj8+Ssj40u7GZe7/+27TIp+nrRUcVHVXWWplqrlKpRdzk+aJTMpS6ZFumY6li2bGqNT9uztmWWrArS0t1ZZbnB/uXqpbjKLNcVyWrrmoVVavWlXnNLJaVYRhqsF/QGKxAtCsWEUntmlh4sKW1bGqtdXJVtNaR7jqrQSGYG8kv7i9OjY7x71m3a3LEjrJnOA5bum/f44/vj/f8f3uP8T+bphIzF8by+fFJpVIii3eWC8sF77MXfz0gRbHFkrXJf2a23ZeIAYm4HyfO58dHVcOQ/Lm44uevLBe8Xw5jC35+VjLu65S2fAnys16+2pkfl/72/Jxk5Kfw/FyQL9G2/IT89UdbviEZeXVVKmLLvLi5rfxbWaXOXcx3tJ9u1AuRPsbhAQAAAAAAAADgUAzV1Fq/j7T+1WsYycY7Pprxxuq3W8+LN9fXRyUj2+Hr86Oh6/t98mvfyZ03AAAAAABniVO/UTJt26oeTSF2P92jibiIuAWR28NuZ3p+w5/9Hu+v9YSIdIdivZvYUUj/67X3aNLvmBzlA/WVCsHFGiXTfhyE0hJWOXqgCTCSCH3kU8d6grKfysHVLgdtIhl6gsG1Lr3SI9vBkV9C6+jI3q1r0443j6RF0ntOtv8P9HTYtZDSHUdG3vln3OOHxofmEh8AAACAb0jbH05dZk+iQwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAnEGH2jzM37e/sdlcKyT+LeKbG6c1dxbovE98sO//0w32EQMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABwanwOAAD//xCPuYM=")

5m3.845806319s ago: executing program 1 (id=2775):
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0xbaa}, 0x50)
bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r0, 0x0, 0x0, 0x4}, 0x20)

5m3.744620993s ago: executing program 1 (id=2777):
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
r0 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d80000001e0081054e81f782dbe8abd22d267e8e1c007c09e8fe08a104000e800a00142603600e1208000fc01e000402a80016c008000e400400027c035c0461c1d67f6f94007134cff6d26efb8000a0ffa290457f0189c129f509c1c9d8c87017eeadc9c809b316277ce06bba0000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccce9500360db7e5167fda40fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e970392", 0xd8}], 0x1}, 0x40400)

5m3.488205998s ago: executing program 1 (id=2779):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r4}, 0x10)
gettid()
rt_sigtimedwait(0x0, 0x0, 0x0, 0x0)
getsockname$packet(r0, 0x0, 0x0)
r5 = semget$private(0x0, 0x4, 0x29b)
semctl$IPC_SET(r5, 0x0, 0x1, &(0x7f0000000580)={{0x2, 0x0, 0x0, 0xee01, 0xee00, 0x0, 0x8}, 0x1, 0x5, 0x0, 0x0, 0x0, 0x0, 0x7})

5m2.306633377s ago: executing program 1 (id=2782):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})

5m0.091404724s ago: executing program 1 (id=2793):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000003bc0)={0x18, 0x0, 0x0, 0x0, 0x0})

4m45.027003206s ago: executing program 33 (id=2793):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r0, 0x3b82, &(0x7f0000003bc0)={0x18, 0x0, 0x0, 0x0, 0x0})

4m25.005094111s ago: executing program 4 (id=3225):
r0 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f00000000c0)={0x2, @pix={0x0, 0x0, 0x34565348, 0x0, 0x0, 0x0, 0x25, 0x3}})

4m25.004601948s ago: executing program 4 (id=3227):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0)
r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0)
mknodat$loop(r0, &(0x7f0000001600)='./file1\x00', 0x0, 0x0)

4m24.915113712s ago: executing program 4 (id=3228):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=@ipv6_newrule={0x34, 0x20, 0x2d2c6d60ea1da725, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x0, 0xcd, 0xff, 0x0, 0x0, 0x1, 0x10002}, [@FIB_RULE_POLICY=@FRA_PRIORITY={0x8}, @FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e20, 0x4e23}}, @FIB_RULE_POLICY=@FRA_PROTOCOL={0x5, 0x15, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x20008081}, 0x0)

4m24.914824285s ago: executing program 4 (id=3229):
syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x43, 0xc11, &(0x7f0000000d00)="$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")
setrlimit(0x1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff})
truncate(&(0x7f0000000080)='./file1\x00', 0x400000f000)
open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111)
mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]})
truncate(&(0x7f0000000200)='./file1\x00', 0x9)

4m24.739383394s ago: executing program 4 (id=3230):
r0 = socket$unix(0x1, 0x5, 0x0)
io_setup(0x6, &(0x7f0000004680)=<r1=>0x0)
r2 = eventfd2(0x7ff, 0x801)
io_submit(r1, 0x2, &(0x7f0000000400)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x499, r0, 0x0, 0x0, 0x62, 0x0, 0x1, r2}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x6, r0, &(0x7f0000000180)="f6", 0x1, 0x7fffffffffffffff}])

4m24.435010612s ago: executing program 4 (id=3235):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01030300ffff"], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0)

4m24.256564925s ago: executing program 34 (id=3235):
r0 = socket(0x10, 0x80002, 0x0)
r1 = socket(0x200000000000011, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', <r2=>0x0})
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', <r4=>0x0})
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB="380000005400e5012abd7000ffffffff07000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r4, @ANYBLOB="01030300ffff"], 0x38}, 0x1, 0x0, 0x0, 0x2800}, 0x40084c0)

3m16.660050709s ago: executing program 5 (id=4033):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha1)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)
r1 = accept4(r0, 0x0, 0x0, 0x80800)
sendmmsg$alg(r1, &(0x7f0000000280)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000008c0)="0928ffffff", 0xffffffd9}, {&(0x7f00000002c0)="ebe3a0e9", 0x4}], 0x2, 0x0, 0x0, 0x800}], 0x1, 0x40800)

3m16.198009543s ago: executing program 5 (id=4035):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x3c, r1, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x82}}]}, 0x3c}}, 0x0)

3m16.19766269s ago: executing program 5 (id=4036):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x85)
mount$tmpfs(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x8011, &(0x7f0000000200)={[{@gid}, {@huge_always}, {@mode={'mode', 0x3d, 0x5}}, {}]})

3m16.103939164s ago: executing program 5 (id=4037):
syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080)={[{@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0xa}}, {@nomblk_io_submit}, {@auto_da_alloc}, {@minixdf}]}, 0xfe, 0x572, &(0x7f0000000240)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

3m16.008685785s ago: executing program 5 (id=4038):
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(r0, 0x10f, 0x80, &(0x7f0000000280)=0x62c, 0x4)

3m15.665206597s ago: executing program 5 (id=4040):
r0 = openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00)
timer_create(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
mknod$loop(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x400, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="8e503ba12553ae35664093744598ff2ed98313cfeff69bbb1f3ba451bc98d27cf439225d75522ac543a153ac5284bf131a87e53d0b20f8dddcb2af841def3e560070344be18fcee4983553ba856738012b512e3dc760fb581a17e5622e0e22e22546476d6cc6d6d94d828a2fa22ec77a1cf082f5ca88f1f8976e8b6c3a7a537f8f50b432bf4df69c912bfcc539a65851f86b23f24e714e0643429ec1198ea1647316538a3ce23fad21e19e087c0dedc7aa6d5e4b0dcbfcbe22c857f5a848aef15126b9ecc810249cbbc82c8b6ba49e46b71cb79f6ef9449d0838b9130946398941a4c64f6e2d84118b60ed4ccfed8a26446032fecf87434e71b7989253f64feb6d2e1013673a9600b1915174e55ad78d1d666fb75c24142e44ceca89a18ca66b4b5e66ba953ca42fb6a36d4a3612a2948393f67a7d1d0957a8553c73855fd007abbb6c3d4bbc943f3b102bb2ea6f40e714516a3de91acc6e1468e9e7b66ee57815da23054153d9d5fca6bdb26ed8f7754d88154d46df2f2e4964ee5d7f47e9218d6877c3b232c945cddeef70b24e5c6c434fa30fd0a2ad1c348c3658494f7cfdfb6bb56b43f1d9b2d049c1166161c3232ada01f3c789b2d6958cdd9f044a654f8397d64cb928f4d57f0c4e9739afbf3afbf0e9f84d56a1aba6db7538d98404b7cdfa97f8770a6df4a13145c1d0cfb7ec0349b5639d9180eada54b2f8c12472fb379901e6d514fbfd6d41d2dd77eb42608a784fc016ae48fb126776b10be5c03f62ec90987e766d20d821a17c03e0d867f4aa3f4902fb803e8261833aa9397e107e6c100daa3d8b792bf4b5081ef56670762b5ae3f528836029ca332f44fcc5cf3750f39091985032afa8dd2e80b69cbffc29aa13fcdc0ff811a108794b4154ecaf70e58a9f70a573cf9d1040e23f5a04a873a583e4ab0fa5f77d620c60f0a45cdc789b849e9e8746528846bbbf8251a84f2aa97ccc3e49f4c9b6abf0248344e86a71486eba9e62ff5920bb80ceccc5813f068da0d5aa208c440b7889118d2f4e8baf22a84544f232d6a3a1aedf31d5fc22f0ece56ac611b1363ff35e5071342a0257d3f146dc3ea1cc795d2f06afeb1d6995e50eb2d2d21dc6c4377a2626dd9486446517d03a4a03c43ef2e255a92b775c198bfe92c21375599235aac33c69190bbbfaad76860d0c9e70ad53273460c370b06bdf94ee8bfc31c48609ff6de0d39f873ec11e8c2835f17b3f18891c8ae335a7074fb5a5c794007a327fbb2622e71d62e43f50a00cc59b7eeb3f8ceed5d87fa5eb62a7a8c74ec90b1096a0b24606bf14b1f13f78ea4ab522304c7ca1d7b8ae47b5859f6a0d9baf3b6ffd29a4fb6782732febcfa51446aa87691ac81bf891717fbf8e4deaccac63477d3bc7b8ed52e9b6ca3fd39eefee6a337c2ad76df9739e2fbff34bf36027be0cfbebfe5b2fd168d75b2fd64479e2faf85654c013955e04044a9b7bf8b3d42da91962796bfe6eb53fe29e36a7a7512a155c712ae561d885703cb26d72e6f1df3976cc665960f871f3110309ffb6b5a79e54057a7a286c62c11e973ef671e86051686f77992f985d729740f38fecf83e03a1fef542cd6b4cee48546f67873a9c682c4afe4a5beccfc64085c622c5a0b5a1f6355f938d16925cabe61426a837c48fd6ad790afe54448fb296a03322f3427e132e8c0623bd311af8a619c2d91415e851744941700f09a2d8471def9dbc448c6aefb4c664f8902c872cc7de9d26e8b300b55b1d08a80257095efef35d9b497487607a22bc95c68f39aeeae243e76ccd40dd1b7ccad6eb39b35d91d239b2b005c8bb6e50037ffb1253276e20384398a5e97ad705fcffd04c720539ddf80cf4e929e82e3fec3d7542e0b7495733eb5da29f6dff5a34ec88a71881f660a5bc9481e755fd3c5683e95ed97cc91ab0edf49afda477aea42bc436b364747d973d61be806e1e63b6982e42814a13c5adb3bd767ec724d2d654afb106198fba6b4c798f4b82f329c2b8055ac4d247da971e32eb4cb971c9ac99d18c0a216d48dd7dffd372e0cad9ce6f05b06e47842c2f53b7c987139c6ddac3446fdb163342f8ca8f5401db91d324a6b710f28dece5839d37760c2515d6ad815a746cd7ccd3a438a5d3f28ca331f6874dedbab107c64127a7590a2813c1287ca977807827d52df80a9c19bc7ef335791da1be53c89f6de8ee1f02f26069b786f22bfd23cd8366e3ca02c0b296d0966d7f8fdbc0ef06895c547224f1a01c92d5f43f81b35539469d1fd9cd76dbf8cdd21b479a6474578863c9906ce6b12d0dbf5a458dafc042fcabe64aeebeb70c0da9300ed22e5d2851c5e77b20f9da1cd26cd810e0b8f1ba17d7c819e8a8ad86aa5bc4eb64748b75ab4a85f05bb1dc542234ac175eced1fe8f3fbd86f1c7349a360f5af0244818df303dce6842ea7afa722be19cf162d671256e5659c77c5569d827b28dc44b7dbb7d9433bc9eff26edbff36cf796b8afb285393f2dab6bb9a3ed40dd065ba8a8ab62cb575e696b97a2853b1700835ae429b983a5bb88972e367f5996a21e9a3b00e943e15c1163fdee023e1cf6e8dc42655cb175590fb6b8c46148b37957c5026aa94e96cbb71bcf9e7899c489edd9b34ca2d3d0dbd29f135cb158652ded6c959820b26a5fb6e8f3a6cfb80bcfa52c36ae0a3868914bda36b5ac09d2ae6cfccff9859550cfc5c6c3b30cddf6a2130c0c563445ae10634f38c65a47aeb8c72a0f25a6747a6787e703e1723303dd6d5bd4303240cb6d4659ee32d80b92859327e882ec84d9bb2a6976d9c6fa450d5598c6af1c92fc4ed7614e3192a06e62e704278424e2e5d521ec4f2cbd87d9b8a65405e807f6247e3f9228e8a5c44e31c9de9247d1b8248ce71d34663cbfcce728c9f08628629fca3f334566118aeb86470886147d714d2dce240408fac3c971b851dd33cb7997e238a2362195ba4f0e83d5c1c5039328817f258d6645bcbc20512398a7a34e2288585b4dc626c6867f3af5a0f573492cdb04e5613bd95bcfe6a61541c3912b4e841b34db2820ed5aca226dcba496f9586b83ab44ed3b9f34cfd2397f36dc4f9811815b975a208b6cd163031296b289b7d202036bca9c4e862f6b1d6356c3c54d47de63e0d0b38e7b9e41e1b25d94fbd03853f786fcf2325020355469e52dd2cfc879e2758382f609173cb2c01775030d1d536af97f5bd0a4b71ad9bf3e5becfccd7dce72fa8882733d2c32cab1338ce67f301be74b1c51dbacff9bdc22868f3f16531cb86b7597aff03040a821c4f7cae2b5b92db792f327dce81e79ac83d4ca15aa248ddc2fad518ebd360c5ac8ff3636e15e8ff61501b1e5c6338847ff43c0d3ed38c87aa623c318c8facffb72fbad8bf4effdd2013dc60ad91f1f5a791905b572321ce0956ffded80e2152b0672875fe71923de673ce343a665d327560c5267223b6fa636ef188b94d4a42884721b4f2d51f90ff3e5145aab164fb56982648a7215601d23017b749c01b684082e250330d109af89bf5d20ca788fbd95fd8d1c128aad3306c4e1bd1c054def7b7ea1948e3c95826078991d234808f55c2314706c8177d7674b2378792afe66b2d65484b481b0e52d8b60e0980163fcf2fffa2cd81f4dbf57afd76fd4e71ec8a6604a697fcaf57e65bba50489f6f0c5b4c046a14303eac05700550ee10fa29d8f68a9eb02fa504b640865f7e2c21f1451ed7d75c90a4734ba64327bc3597b5aff23d0a8f1229f0539720bece2b980f85e11c5ecbf3a560e5dedc40e1260349ccbc647d4d9763b17a45fe1b63e5d16e1a49d55c0011e3ab898b64a6618682bd7bb7e8ed18dafa1b462f20f6aaf2d7c4777a6fb73aa7a1720d67a644f4f4b0bc3ff965e696fd3513979f2e72289dec447af56b240380cfa2a9ce38a808e961d26b6ee6810c75778e9d23a93b3f79b3b293f138f23ef2596b60ecd4afc2036debb7e14f61774d84c1325ee7b8f95dc80c12b001e32e894516473a82aa2c24b5ff7f8c3374e245f1b3ff2a8cf0cc33ecd4b9b7528c34cf54d77756ed3e1b74a0e66c9c1dd8e53c123872c084f70e8a04efe8a8c3527ba75f4d9ced8469229ad7453a1376cae90b155638696103216a07b02e93e3924c4a98d159ce8633b2c8bda44ef28f37ba5edf1e80184c9ac2c8b0db77096dbf2f866536ac4f5ee9eed4bb8dfe0dad4361e901450ba499c119aa1af2a1a7c527b09562a47d8260bd7647e29ee422432f063a84d195e9c843e6f6fa684dd044bd09b8cb3e7a976df68049f09caba37b69a595cea61667f2631e561be743309568b4c37fdaed8ebc628889bc3bf9c5a63bc74e9358a9c2228f51370eb483ee39e682cd4f56f15a16217904c6189ef50044e04f244da23d1c9f41a5209f4f485df4ad8d1922203d365eb11102d48c93c09b700e177aef00f8bf729c0406b89de32490fca998bd34f80c99be60601d4de10e9a86a5a22652eb9df948daa66529b6445cdde70ad125d06e41a3469216233a8b9eeb928f2d041eded321d518f0435ca377e90ae49e95793aabccf299c1f1a82ddec49b2b8732aecd1610d5f09cc5e509d4065c5cfb4edc55f6a15fbaf4dea24439ea95b63bae312ed90e47787000810f22ab9b6aa0622ab969fa30b724b24d82447d6a357468b2d1ec61a80ae680ff7b8b894158218b0e63f99103879f3c1dae33aedec60a1e755755604e33a6698cd0e378b0a0b04017278411f33eade9c4c0e3b7d0d6e62fdc3ebf5559310e0a2913d5aff1ce1bead51578b3879c0e25d96a7a150ba655c97875d864c3a6d5b595ff9dd9698857b3b0bab2d087bbf7f80f5a7225cdebf794ede16a61ca73201f311f87ef9cececb8fd07b2bf384a22a8ae988a5e91e6355e26ac923e78004968bf7f4ae3b319e61a422a43841831a51e2c41df8a118da5239c87b4b0aceb32854413d53e0228090babc167ed6600041390ce04e96c94c65c51fdc00e617e4ed870fe9ed2bbef84c1e1f3f796b2867b0f383b6e01ba2b82ecfced722ac5a7c092716d18b9b41674c342a1a6a7ef961893d451648cce5d0ccb4c180e0493a53f5453de43a6535c486acbfb9f480f3255f998831b684a468a88840e1e7e8a310ef296ce89bef65b7e54265c88bff204e48963cea9945608260e5de37b949acacc938e8e2de9fff925022c010f94a0cd6c7bf16d4e3132034a8a3301f1c1950b9a31ee8227b17cbf460db666f6207a59783064115eac2d4f29f9483ebcd34e8792809d5c25a380b2137bbcd7cda502f4a41a043f7d626e922adec9b4c6478ac0df9842bd4e8912deb2ad2026461510ca392383ee9a7ad0388ae499951a4283db39ca57ed9bebf43dcaa6caa391169077a189641fda3151d8e3a3a0b525dcafa2d9d7b2a01468e658c10c27a8ba74b487a968b05031a3d53b59139068b28ca87c5bfd9db867c0e9b9abd91142c96dbf8883e1a89db8d96c9f0a8999a4f9d6b07f32d6f8bb2ea6d2eaa8a531edf85f25aef35c84eb4bf3f46ab4213602be20cad885d404ef47fafc7793247247848f1c3a06ea31c23d0cbffa07aa5981714dc85736e95cd4d60ed1f25351b1c723e4f042f55f02d24a089862df124c75cc4f618853914439c1406a393a0f1ec0f2346f4cbd6beb17713149d67b9bf1854c814bd8ba3a199218e6eac655db998c955df382c8dee2b4d30c750a63a08e9a88009840e96a331bde3767bce177fc5c44528cb673e862e24c2dc2399be1435cd20916e9e060f8bef39d4b47f335dde4493e0e44b0f619822a35e69b7c5d93dc69575ff71ced7c858e43dbee46f4e50846288cbc8fecbb9291d455a015fdd6e1412aec0e6104d0377074b8e160ec7d813bbc6d3b8e6b0256bce8d255d7a592b408cdf6e63164c99d94f00a693e06c2ecba9dc6d36c6a35697c1647f942df4c805c18344b8e5ac885689068f864c395e8c970702e40cf6c683d10455c7ad75fc035ae260f359c2d8c91305406c6f56ec535be445601c75ffdde1758904787f29a558d0f3bd04bfa08f1612a7ee8a7acf129ed5eb854bba757d34afa354098ed8b4e3a599db4b7611a665fcbbb182a0774cb026a00714d8b91c7fb8691b629b6a93f92da2f3701348885dcefe5a548c90101e50dbaf3f4907611623f7616bcea943bd3feedecf3b3681b4d04a938ac83d9f18a21991a90dc17005e7c56d2e09a0f4ad9f3c676e7da478e96122046d0a167f7e1a28d97d514aa68d24dac8501a1a35ddb6f3703311b26bfa3319361ff5e4d38cd55a04ef1b4fb417a3b638cde7f8569531a22c0fa12ad3a55dfe3c2642205fe1ba0c82d36f8815ec52f6381fe789fcf89efb305498a9b1f0ffafe01bcc5581f5b5d195bba77797085ab1837fd081cf5f086da2a16b6a7f8ca9efbc4c9cf771961b70626120e3715b16b222932291e4ee2449591b1807d56a53d4d86f25011704e7d5efcb799ab130ec2aacd54afd3c43c8acda1c5874ce23234b090c4eaa8ddaedf979b1218a5b9dfb36b8196ce05924dcdc7f50d96b95d0c288551a0498ff23f56c7ccdfb8966480477849c7471bea99cb0af35dbcaa5e781b5ddecf3cde51d78067aed9ca267550dfae119a3d83710ecb92fe80841837b41a40d262f5fad16c20203d1cc3455ca63ebdf0f5dbb7a498b4629dcb87333f2d58726871e6b5adf60faa0f8c9cb4718005e5e199457330da1a11cd0d7e78f617b6805fff8fa45c2cb56e1e17904773e165d2a39470ce1616418e7e15481c798afed92efad9c2babcc3e3346f8022ce30b3e1db015a2b9f5dbd4560ee9776c77eb9cff5cf2af28ebf1085650e29bd8dac01b814e6c285bf964da2eb1a442aeb671589a02c29d58208829c9501c355644ac28c38835f4025dcdabfd3852b1a16e45e9c032e97f7f2f0f612739c6569f44731692e3f3b97ba5bcd0b7f2dea1ee6303b5f92514c022e54aa4c587eff74a5d509c17785686c613bf6b778e3624ff3653674e6daab3f788ec9cf879f06957a673a20fdccf721ced05a0d23e074de82614f775a84dfcd31c621cf0369e28791ab742b62f271218fa1bc8681e9d41b4a93b05cc693013d54d367b1e6e1a7e74b43b44b920192ed8fbb63b89f393e5ffab584d7c201d1b99b7bc6907033109986a4fe7bb79e803315c4df94ed471cba889e148645fd1748374015ea8c696ff64bf6d23bce7e5efa7c7e6215ceefa938cd88aa0374da4ee1e10cbfa96d5283b4a0867f4d76b8492fc618e2bca34ba9bc2ff3368756080a78a1ece2f0d1d1cc30cb721677de3c4cd6da378697c40419bc1f2184b86b8e40abd627aab9c308d8fd2db8daf8b43225003ea9124c11dfcbd1b6ea959a86623e360b40c381d991892c1fa6c0c81bb4d03d8d3656cedd1e48539192fc8bd1474ce961159816dcdc76e95ed9d9893e91a0ca670cd1152cb014310facf952fa9fd0d30900196b604c10596c1a31c1e70416824c207656426b09ef9b558496ae87fc7449bfdba0d5628e9af6397385ddadc986424fde545c07664fb6ef2756ed9e443e39257eef2179fb9e4a9e84062f9b6048125151e2e7fad2560df277323b5e22ab2731dc802d6f372d2a335b5da7e5a86508329b3dceb56f0d4f9f6f9e48507af3ec99fc172c237e67ece3d51198a033a9c66f3243ef694893af85421ff6f93ecb95eacceba5fdc1a76810e999a40733b46433328b24ee17b718b135b74dd535202c7f66de2de5a26412e600971704bb90007e42d3e6a3acd33e7358da6b32883c9ad30c2abb1cdef7452e211734c6fb6d199a397bea8aa3cf1f014929941c34ba06096e70d852fc420effc7924ec29c03bea29f289c82338f0115e00de549007456d5867253a5b9bb4493bcff815a3100fc45a0de0aad7b0b5c641ed1be3e8f07fb3b1a8a496ecfd3dff5abf0d8f5854621faeb4a9920d8c52b7a0338d49fd21d99c24e1943de3ba2668aea7bc95bcf21e2bf0b2d5f899f33d0cec31b60df4ef5a23e1b173cc89390c8bc3ee96e38de06f6016a2b0eafe86af9dc59bead4f5f948a81b1008a95e3ab39f8009bdb4f268f3002245e73ee2ff50cf1cd37e867cbe44ad370b9336e0dddcffb6dd8f2f79155235300bce6385e544105e6d278d345870216e61100337a871ab51b2cde74fe976e1f8b77a90bb8b51eefe7e4201db41915f482edbe1f8ae268314d5af95ffdeb94aba3f4e316990792d281a123d7febbba7f6abaed7ccfc0c567d4bd1c2d9ca217535167c9a09f1ad0ecaa99cc08338fead5deef7fab77d2082d893b91c27f8ea4e48e052a2a31c8e3f9510c4ce94ef16053bcc25eafa324e5a1d045a3de8f7d731e58ec9130427552323bcfde47f6b55b5634e8cb190fe183af132f12d72ef5e4d98508b57106ccb647ab505369c728958a0789c67ee80acc4bbf41b97fa56d8701c3ec5ead411aed16882dfb026c50c28b5fcc442c432837a82f8bfd47650b83aa71b909be61ea77cc029a0c615f8e390874995d19e224c38349c64bc166f50c54332d1a3eff0071d7a0b11a901c56a847b93ab5bd0bfad8f965cbfb53c2184c588fb7dbc5c693a3ade89b303e801a650b79c1ea957aabed937998b5df77ff29fd43515e8a5ffe441e323fefa45a2775237e1c749897d448f1f3ef60c7755d1a1441b96a136a86d341471d57c68c859813656658266c40b8bb8bafded8ed0d940f8c5954923eb43ad5afb58eb452d6430990bc924afb97191f31cd1a1f58e30b0c243f9636245c459280d16da1df1a30ff63de677554d6b252487455e8aff91370c4a0ba9f341384cf8483d18b9d3f2fc51b07ba8a5fa795d7925189ca344f0fddb8bf55e35013f6fab3806b3c4d17499ec1ae819d4f3aa6b6a570c2ea68558fa33373394584dbf11d41f7059b55f186bd54bdc30dea390872737bf0312f4c68dc963d28d5b218eca6314e23b7381cfbcd01c325d9a3869f1176eb82c183b37d65c8500a48e9bbb1c465e27bfb668a16100e5384d9116aa35f3b00b4ee3bc84700ab17283d4db6b420e6140d14d09b51ad020fc8e505d2c820ac307d45b211213c18487ce12dff233a5caf87cd94a77d0eba69d61452f41c1f82cbe32b567a39a4615a6d2155cc73c3b90dc55daf33c8d9eba3eb0e182c79dede1293dd30840ebf048df8a93e38d0136e856d94ea105cd04323406dc429b5551538625109105d88b1ac480d0fb1e9d1977099707f9f9534b683d855c4d3c30a29c6678a3221e0dea7772f8859f572420708da9a030ddf973cf9f221404117b05efb76bb08ecf34aa9b36b0418c74f90a07e8e5c91e1d7c8a8ea596c0de9b10c222e9588c2bbc77d860b7197b42b42a1ab834ce24fccbbe20f2579ec6dbd4efb9aa1a3d2e062de594d289273e98342440045a0c134e400003b50d4243826b029ecd177cf3d2cf3d164ddc58f88a970a0bbdc7f0d60271cab0df2dde79d1b929cd3028effccbe94c05008f4261297024e4f72604d52db9da7b0e5f2f4f59ebe77b319c54aaab9581a8355b75594eb6dc0fc25e91052c89764256ca464f9f6e45bc34d6e5aa28e1fd93997b58f21feff551aa3ecb5375c19ee4543f7339418c11b9ea18fe2637a9bc9744cc9fcb21a7643eb87683694732154bd1eec746f1c57bac65cf18a83267ea437f7993644c510ac44307703ea28b20e52644dbaabbe9ee1e23a38b29b91cf9077fecdb98ff4e4749c9d6ad2901c5a891c07a8b0c26ad1f8126e6db537df7fff65486afeb85eda80e2a04d09d46720330700267cbcf205b5c00076c01d9db0a64d5426864d14cce1781098afdc28f9f5948ab7791627baf78c3e9df2c0ed9ce50b083bc7a34ee0087f4efde579e2dea313e4e20580c5e63d5ef4509c05a9dc38ced91340bbb9cf948bb03ea5e60c666a1a5c4acd385d0c1a01797b9b3183f4afbc925dd2641d21410b4b1af2f21f8cca330fbc08834e1e8210fdcf332f70f08b48a2655cf017ec8a19640f2f263c54876d6f4ad2193be944667f6498baa32225d2b5b82abd3f2fc64033f1db9adff6b1c788555d5ffa1a35d4a691802447b163ba9a615d6c958036528bbab84230d676145054828d530f0e3af417ad0480eaf2004b9002b644bcd8f0ecf860c31766ace95769ab4fd01f297c595b45e6c7b1c9f662044f43fc82b6244e5d08b1e556599096c034600e20ff000d996b6ba3a6700116127b9468c9567ad920ddcf7ccf9c0a74f49984e24a7aaa2321ee58583c1bdba668cb98c319f682ffc5957015ba1799930d4b676bd3bc76037f6bc2d9ddcb47efebd366a90dc7e67076ebc25e2ef2929a89faee06aa04538a3ae7b196dfecd33725ce9f859c5df4713b220ecd18b1613ba76aebbe8f9f93eeaea9e88e46e7ed24c4efbd86fcd57a4f9fc76152175782871ab211a18ae303be8e9459aab930597d17875c5f5f24d9b16bd8dc4e25f6a7a1de05763da11ee7e26e1e32ee0a5ab2de5d069d03a6ea95a33abc1025d59800fccfff1f0e0f7335e2778b8731cbae94828dbe70507c5369f36d457e98d6042e342cbffde2ee74e05cf0f8aa7185de485e5050294472cd8c7ae03977b62cb287a9d6e4d66650dbc4d89e58ad4f7c24d46573acf85f633d1af73cf655788b431bf22315bdae78d9f6f9cfe32330cbf77bb0195a60244d4bcd0ea35b94bcdf7255ff58f1fb11a09a06747337c95f332a0ade622d49ce0f2943517fb4da8049f3c1b53cb68475c2eb52551d40cbeaf5e79a748c5314bb531b4fc28494b65ee8513427e1fd3cc990fe4ef5ead14b65f1c3e9e0598edf42e2862e2eb180b3e674fc3005859ac56ad17022a8f48b49dcc97e991cfece1d52b7ca82e711944a877567ca0da0663276480d69fa4be56f425bb84dc9177d3e3ed45fb737ce026b8df38336f9efedb89a8650f9fb73918d300c909e9f9189458e1930f09b05433980e79a2eacd0dda32852bdb1a417e4ba62b83d0e17ac8d39834f41c8cd49517013ec658c4e10b38d0788df96764d13ce074271b51041671240549d18540271c8898a5c9e4be4895881235d59666a1f0f3b3cd098786afd6ab4781b73275232b488fb3d9eff77e71f8448a95c653fc80d069c15aa2a80d5799e6c45eb27ea8d6675f28f7aa7cfe3cef877c91ecf3e576e942a20312ffb48a64a91876ec5d1ad2f6a68946e73db4785894736106906731793c3482365d4151051c8d5f16dcb0348628e3aba4087ea8c9ce24bb93190fa12916f529c8eed6dfd3f5bc24d09b1ad377699de3f687b392ec921d81e35dc27bd14be4d004e713c3d07cf600255d45fdfb326b4327c9507c6f69d01236eb9383133dbaa787ba37de14a12e850ec60381a9ffab939ce16cb9b490685343048c0933bc280e809fc8114096ae2d303bbcbbc941b70b5d1d03f59f0b534fa195cbcf34e57d2aaee9c1dcddb5eafd8399fd1d53bfdb48a6f6d3153bb903ce411800f7220bdcfa312ac603672c163a0896b85409859b817cd304e73f278634fab0b1dbe226d7e4f93f220180c3434c7c22ac3143e06702f9a21e66a46d4980bd20d9b0c62846362d0a1151584a28a87902dd0f35187850d501c68900", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$FITHAW(0xffffffffffffffff, 0xc0045878)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000100))
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0)

3m15.4475464s ago: executing program 35 (id=4040):
r0 = openat$userfaultfd(0xffffffffffffff9c, 0x0, 0x80800, 0x0)
ioctl$USERFAULTFD_IOC_NEW(r0, 0xaa00)
timer_create(0x0, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8c}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000380)=0x6)
mkdir(&(0x7f0000000340)='./file0\x00', 0x0)
mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x0, 0x0)
read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
mknod$loop(&(0x7f00000001c0)='./file0/../file0/file0\x00', 0x400, 0x0)
write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000380)={0x50, 0x0, r1, {0x7, 0x28, 0x0, 0x40488060, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24522716a989086f, 0xfffffffc}}, 0x50)
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004200)="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", 0x2000, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8)
ioctl$FITHAW(0xffffffffffffffff, 0xc0045878)
ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000100))
read$FUSE(0xffffffffffffffff, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000180), 0x2, 0x141101)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000ab4000000060a01040000000000000000020000280900010073797a30000000000900020073797a320000000088000480100001800c000100636f756e7465720014000180090001006d6173710000000004000280600001800a0001006c696d6974000000500002800c000140000000000000000808000440000000010c00014000000000000080010c00024000000000000000090800034000000fba0c00024000000000000000000c000140000000000000000714000000110001"], 0xdc}}, 0x0)
sendmsg$NFT_MSG_GETRULE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="14000000190a0102"], 0x14}}, 0x0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
ioctl$VIDIOC_SUBDEV_S_FMT(0xffffffffffffffff, 0xc0585605, 0x0)

1m44.246414309s ago: executing program 6 (id=5198):
r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, 0x0)
ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'8255\x00', [0x4f27, 0x5, 0x2, 0x421, 0x1, 0xcc7, 0x7fffffff, 0x5c952399, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x0, 0x8, 0xfffffffa, 0x1ff, 0x80000089, 0xa, 0x0, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x8000000, 0xdffffffa]})

1m44.117242223s ago: executing program 6 (id=5199):
syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00a8bc", 0x20, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xa}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@generic={0x8, 0x2}, @exp_fastopen={0xfe, 0xa, 0xf989, "a442d55ac9a3"}]}}}}}}}}, 0x0)

1m44.11686329s ago: executing program 6 (id=5200):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5", 0x4)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)

1m43.902895154s ago: executing program 6 (id=5204):
syz_mount_image$xfs(&(0x7f0000000800), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000000), 0x1, 0xb95a, &(0x7f0000017a80)="$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")
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0xa0835c, &(0x7f0000000080)={[{@bh}]}, 0x2, 0x44a, &(0x7f0000000880)="$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")
r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x1a1)
ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000000)={0xd2f0, 0x2000, 0x8, 0xadea})
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x1204001, &(0x7f00000011c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}, 0x3a}], [], 0x2f})

1m43.313447832s ago: executing program 6 (id=5210):
r0 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$inet_tcp_int(r0, 0x6, 0x8, &(0x7f0000000000)=0xfffffffa, 0x4)

1m42.481637868s ago: executing program 6 (id=5217):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x6028d}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0)

1m42.296439568s ago: executing program 36 (id=5217):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20000, 0x6028d}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @local}]}}}, @IFLA_MTU={0x8, 0x4, 0x500}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x0)

44.048653683s ago: executing program 7 (id=6106):
r0 = socket(0x10, 0x3, 0x0)
setsockopt$sock_timeval(r0, 0x1, 0x43, &(0x7f0000000180)={0x0, 0x2710}, 0x10)
bind$netlink(r0, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc)
write(r0, &(0x7f00000000c0)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26)
connect$netlink(r0, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1, 0x100}, 0xc)
setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000b4bffc), 0x4)
write(r0, &(0x7f0000000000)='\"', 0xfdef)

43.915201858s ago: executing program 7 (id=6108):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000140)={<r1=>0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x4e24, @private=0xa010101}]}, &(0x7f0000000180)=0x10)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000000c0), 0x4)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r1, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x0, 0x48}, 0x90)

43.000495111s ago: executing program 7 (id=6115):
r0 = socket$inet6(0xa, 0x800000000000002, 0x0)
setsockopt$inet6_udp_int(r0, 0x11, 0x65, &(0x7f0000002100)=0x8, 0x4)
setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000000)=0x28, 0x4)
sendmmsg$inet6(r0, &(0x7f0000000640)=[{{&(0x7f0000000140)={0xa, 0x4e22, 0x7ff, @loopback}, 0x1c, 0x0}}], 0x1, 0x0)

42.926195355s ago: executing program 7 (id=6116):
syz_mount_image$minix(&(0x7f0000000180), &(0x7f00000001c0)='./file0\x00', 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00e611ed6229b237ad2a184a94283e2b34c24caf7280c18475708140abe763dfb52cdb0ba0cdc8c572346d0a832984b36248c4fa844eda0af4b1652605421a7821dcfde12aa77458d811a84538a156b05b0ec3eaf24a90ceb5b7463d9fd38b49d41fbfa868653605702abe43d9c2c30aed4da0b8cc18c6b369f086a965442c1217f19a67a534064b7236a6660000000000"], 0x1, 0x17b, &(0x7f0000000300)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000000)='./file0\x00')
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, 0x0, 0x0)

42.876693528s ago: executing program 7 (id=6117):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r0, 0x6, 0x3, 0x0, &(0x7f0000000140))

42.359899673s ago: executing program 7 (id=6121):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000002540)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="8256a3f765617d33111f6e95c27940f2", 0x10}], 0x1, 0x0, 0x0, 0x404c045}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="842a0a65bd8c2b", 0x7)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

41.730058364s ago: executing program 37 (id=6121):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000002540)=[{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000640)="8256a3f765617d33111f6e95c27940f2", 0x10}], 0x1, 0x0, 0x0, 0x404c045}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0)
r2 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x48, 0x30, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc, 0x4, {0x3}}}}]}]}, 0x48}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=@RTM_NEWMDB={0x38, 0x54, 0x1, 0x1, 0x0, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x1, 0x0, 0x3, {@ip4=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x86dd}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="842a0a65bd8c2b", 0x7)
sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

1.766152548s ago: executing program 8 (id=6640):
add_key(&(0x7f0000000080)='dns_resolver\x00', 0x0, &(0x7f0000000040)="42d7", 0xfffff, 0xfffffffffffffffe)

1.76590174s ago: executing program 8 (id=6641):
r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x2001, 0x0)
ioctl$BLKPBSZGET(r0, 0x80041284, &(0x7f0000000000))

1.723049572s ago: executing program 8 (id=6642):
r0 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x4, {{0xa, 0x0, 0x0, @mcast1, 0xb}}}, 0x88)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x4, {{0xa, 0x4e24, 0x3, @mcast1, 0x5}}, {{0xa, 0x4e21, 0x8b5f, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe57}}}, 0x108)

1.637544192s ago: executing program 8 (id=6643):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000c80)='ns/net\x00')
ioctl$NS_GET_USERNS(r0, 0xb701, 0x0)

1.636856187s ago: executing program 8 (id=6645):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000)
syz_clone(0x6004500, &(0x7f0000000700), 0x0, 0x0, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

1.441142394s ago: executing program 8 (id=6648):
r0 = syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100015ae4c41096050100f5050100030109021b0001000000000904d60001b5e14500090583", @ANYRES32], 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000280)={0x20, 0x31, 0x10, "f941fc05ff0022a3f2b376628e572419"}, 0x0, 0x0})

1.347873008s ago: executing program 3 (id=6650):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
getsockopt$inet_int(r0, 0x0, 0x13, 0x0, &(0x7f0000000c00))

1.265655518s ago: executing program 3 (id=6651):
syz_mount_image$nilfs2(&(0x7f0000000ec0), &(0x7f0000000100)='./file0\x00', 0x2000000, &(0x7f0000000040)=ANY=[@ANYRES64=0x0], 0x2, 0xf5d, &(0x7f0000000f00)="$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")
mknod(&(0x7f0000000080)='./bus\x00', 0x1000, 0x0)

1.184359376s ago: executing program 3 (id=6652):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48)
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x20, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10)

1.183790697s ago: executing program 3 (id=6654):
fsopen(0x0, 0x0)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108)
getdents64(r0, &(0x7f00000000c0)=""/55, 0x37)

1.122385063s ago: executing program 3 (id=6655):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8)
sendto$inet6(r0, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x0, 0x3, @loopback, 0x8}, 0x1c)
getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000040)={0x8, 0x201, 0x9, 0x3}, &(0x7f0000000080)=0x10)

191.260647ms ago: executing program 2 (id=6667):
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000440)='ns/pid_for_children\x00')
ioctl$NS_GET_USERNS(r0, 0x8004b708, 0x0)

139.944858ms ago: executing program 3 (id=6668):
syz_usb_control_io$printer(0xffffffffffffffff, 0x0, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pipe2$9p(0x0, 0x0)
unshare(0x26020480)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = getpid()
syz_pidfd_open(r2, 0x0)
r3 = syz_io_uring_setup(0x10e, &(0x7f00000000c0)={0x0, 0x8d2dc, 0x0, 0xffffffff}, &(0x7f00000003c0)=<r4=>0x0, &(0x7f0000000140)=<r5=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x40, 0x5, r1, 0x0, 0x0, 0x0, 0x80000})
io_uring_enter(r3, 0x47f5, 0x0, 0x0, 0x0, 0x0)

139.628558ms ago: executing program 2 (id=6669):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
shutdown(r1, 0x0)
close(0x3)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={<r2=>0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84)
setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x6}, 0x8)

76.562851ms ago: executing program 2 (id=6670):
syz_init_net_socket$x25(0x9, 0x5, 0x0)
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ff0000/0x10000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff6000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0)
socket$inet_icmp(0x2, 0x2, 0x1)
r0 = creat(&(0x7f0000000100)='./file0\x00', 0x100)
syz_init_net_socket$llc(0x1a, 0x2, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a2, 0xc000, 0x8, 0xc1, 0x0, r0})
syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2)
creat(&(0x7f0000000d00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
socket$inet_udp(0x2, 0x2, 0x0)
pipe(&(0x7f0000000000))
io_uring_enter(r1, 0x2219, 0xcf74, 0x16, 0x0, 0x0)

76.292289ms ago: executing program 2 (id=6671):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000180)={'ip6tnl0\x00', 0xcd})

290.468µs ago: executing program 2 (id=6672):
r0 = socket$igmp6(0xa, 0x3, 0x2)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'geneve1\x00', <r2=>0x0})
ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x0, 0x400, 0xb7, 0xc20022, r2})
sendto$packet(r1, 0x0, 0x0, 0x4c001, &(0x7f00000002c0)={0x11, 0x9, r2, 0x1, 0xd, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x14)

0s ago: executing program 2 (id=6673):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newsa={0x138, 0x1a, 0x1, 0xfffffffe, 0x100, {{@in=@loopback, @in=@local, 0x1, 0x71c, 0x4e23, 0x5, 0x0, 0x0, 0x80, 0x3a}, {@in6=@mcast2, 0x4d4, 0x6c}, @in=@dev={0xac, 0x14, 0x14, 0x25}, {0x0, 0x502a, 0x9ba3, 0xffff, 0x8251c, 0x5, 0x40}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0xfffffffa, 0xfffffffc}, 0x80, 0x3500, 0x2, 0x1, 0x2, 0x20}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0)

kernel console output (not intermixed with test programs):

uid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4411" name="file2" dev="loop6" ino=1048649 res=0 errno=0
[  466.756490][  T123] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[  466.950791][  T123] usb 3-1: Using ep0 maxpacket: 16
[  466.955506][  T123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  466.960233][  T123] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  466.964431][  T123] usb 3-1: New USB device found, idVendor=054c, idProduct=05c4, bcdDevice= 0.00
[  466.965911][T21056] loop6: detected capacity change from 0 to 16384
[  466.968180][  T123] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  466.972597][T21056] nilfs2: Unknown parameter '1844674407370955161501777777777777777777777'
[  466.981731][  T123] usb 3-1: config 0 descriptor??
[  467.049507][T21056] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4421'.
[  467.217751][T21069] loop6: detected capacity change from 0 to 512
[  467.234191][T21069] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  467.240179][T21069] ext4 filesystem being mounted at /73/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  467.256781][T21069] EXT4-fs error (device loop6): ext4_map_blocks:778: inode #2: block 7: comm syz.6.4425: lblock 12 mapped to illegal pblock 7 (length 22)
[  467.269652][T21069] EXT4-fs (loop6): Remounting filesystem read-only
[  467.291075][T19542] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  467.428426][  T123] playstation 0003:054C:05C4.0011: hidraw0: USB HID v0.00 Device [HID 054c:05c4] on usb-dummy_hcd.2-1/input0
[  467.445914][T21083] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4428'.
[  467.449704][T21083] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4428'.
[  467.636537][  T123] playstation 0003:054C:05C4.0011: Invalid byte count transferred, expected 16 got 0
[  467.643840][  T123] playstation 0003:054C:05C4.0011: Failed to retrieve DualShock4 pairing info: -22
[  467.648171][  T123] playstation 0003:054C:05C4.0011: Failed to get MAC address from DualShock4
[  467.651817][  T123] playstation 0003:054C:05C4.0011: Failed to create dualshock4.
[  467.659853][  T123] playstation 0003:054C:05C4.0011: probe with driver playstation failed with error -22
[  467.871680][T17265] usb 3-1: USB disconnect, device number 53
[  468.733432][T21100] delete_channel: no stack
[  469.837709][T21144] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4449'.
[  469.841249][T21144] openvswitch: netlink: push_nsh: missing base or metadata attributes
[  469.844428][T21144] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  470.395165][T21168] loop6: detected capacity change from 0 to 32768
[  470.401944][T21168] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4461 (21168)
[  470.411231][T21168] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  470.416019][T21168] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  470.449605][T21168] BTRFS info (device loop6): enabling ssd optimizations
[  470.452499][T21168] BTRFS info (device loop6): enabling free space tree
[  470.530090][  T123] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  470.542566][T19542] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  470.712342][  T123] usb 3-1: Using ep0 maxpacket: 8
[  470.717614][  T123] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b
[  470.721503][  T123] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.752221][  T123] pvrusb2: Hardware description: Terratec Grabster AV400
[  470.756215][  T123] pvrusb2: **********
[  470.758125][  T123] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental.
[  470.761861][  T123] pvrusb2: Important functionality might not be entirely working.
[  470.764376][  T123] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver.
[  470.768791][  T123] pvrusb2: **********
[  470.964840][ T2396] pvrusb2: Invalid write control endpoint
[  471.007414][ T2396] pvrusb2: Invalid write control endpoint
[  471.009582][ T2396] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work.
[  471.014631][ T2396] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device.
[  471.017844][ T2396] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups.
[  471.021046][ T2396] pvrusb2: Device being rendered inoperable
[  471.027707][ T2396] cx25840 2-0044: Unable to detect h/w, assuming cx23887
[  471.032110][ T2396] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a)
[  471.046219][ T2396] pvrusb2: Attached sub-driver cx25840
[  471.048878][ T2396] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it.
[  471.053518][ T2396] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover.
[  471.178761][  T793] usb 3-1: USB disconnect, device number 54
[  471.264151][T21245] loop6: detected capacity change from 0 to 256
[  471.475067][T21258] loop6: detected capacity change from 0 to 512
[  471.482534][T21258] FAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  471.929131][T21270] loop6: detected capacity change from 0 to 40427
[  472.069918][T21270] F2FS-fs (loop6): invalid crc value
[  472.253228][T21270] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 1
[  472.285823][T21270] F2FS-fs (loop6): Start checkpoint disabled!
[  472.296458][T21270] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  472.550930][   T33] audit: type=1800 audit(1756721336.797:215): pid=21281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4485" name="file1" dev="loop6" ino=10 res=0 errno=0
[  473.380411][T21310] netlink: 256 bytes leftover after parsing attributes in process `syz.3.4502'.
[  473.384015][T21310] unsupported nlmsg_type 40
[  473.676068][   T39] kworker/u9:2: attempt to access beyond end of device
[  473.676068][   T39] loop6: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  473.682912][   T39] CPU: 0 UID: 0 PID: 39 Comm: kworker/u9:2 Not tainted syzkaller #0 PREEMPT(full) 
[  473.682935][   T39] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  473.682944][   T39] Workqueue: writeback wb_workfn (flush-7:6)
[  473.682973][   T39] Call Trace:
[  473.682981][   T39]  <TASK>
[  473.682989][   T39]  dump_stack_lvl+0x189/0x250
[  473.683013][   T39]  ? __pfx_dump_stack_lvl+0x10/0x10
[  473.683029][   T39]  ? __pfx_queue_work_on+0x10/0x10
[  473.683043][   T39]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  473.683063][   T39]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  473.683092][   T39]  f2fs_handle_critical_error+0x37c/0x540
[  473.683118][   T39]  f2fs_write_end_io+0x886/0xb60
[  473.683150][   T39]  __submit_merged_bio+0x27a/0x6a0
[  473.683175][   T39]  __submit_merged_write_cond+0x255/0x530
[  473.683201][   T39]  f2fs_write_data_pages+0x261d/0x3000
[  473.683253][   T39]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  473.683286][   T39]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  473.683333][   T39]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  473.683354][   T39]  ? look_up_lock_class+0x74/0x170
[  473.683381][   T39]  ? trace_f2fs_writepages+0x7f/0x200
[  473.683401][   T39]  ? f2fs_write_node_pages+0x478/0x6e0
[  473.683425][   T39]  ? __pfx_f2fs_write_node_pages+0x10/0x10
[  473.683458][   T39]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  473.683478][   T39]  do_writepages+0x32e/0x550
[  473.683503][   T39]  ? reacquire_held_locks+0x127/0x1d0
[  473.683517][   T39]  ? writeback_sb_inodes+0x384/0x1010
[  473.683591][   T39]  __writeback_single_inode+0x145/0xff0
[  473.683608][   T39]  ? do_raw_spin_unlock+0x4d/0x240
[  473.683638][   T39]  writeback_sb_inodes+0x6c7/0x1010
[  473.683662][   T39]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  473.683695][   T39]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  473.683752][   T39]  ? rcu_is_watching+0x15/0xb0
[  473.683775][   T39]  wb_writeback+0x43b/0xaf0
[  473.683800][   T39]  ? queue_io+0x3a1/0x590
[  473.683820][   T39]  ? __pfx_wb_writeback+0x10/0x10
[  473.683843][   T39]  ? _raw_spin_unlock_irq+0x23/0x50
[  473.683865][   T39]  wb_workfn+0x409/0xef0
[  473.683895][   T39]  ? __pfx_wb_workfn+0x10/0x10
[  473.683915][   T39]  ? __lock_acquire+0xab9/0xd20
[  473.683945][   T39]  ? process_scheduled_works+0x9ef/0x17b0
[  473.683966][   T39]  ? _raw_spin_unlock_irq+0x23/0x50
[  473.683985][   T39]  ? process_scheduled_works+0x9ef/0x17b0
[  473.683998][   T39]  ? process_scheduled_works+0x9ef/0x17b0
[  473.684013][   T39]  process_scheduled_works+0xae1/0x17b0
[  473.684055][   T39]  ? __pfx_process_scheduled_works+0x10/0x10
[  473.684086][   T39]  worker_thread+0x8a0/0xda0
[  473.684127][   T39]  kthread+0x711/0x8a0
[  473.684149][   T39]  ? __pfx_worker_thread+0x10/0x10
[  473.684161][   T39]  ? __pfx_kthread+0x10/0x10
[  473.684180][   T39]  ? _raw_spin_unlock_irq+0x23/0x50
[  473.684196][   T39]  ? lockdep_hardirqs_on+0x9c/0x150
[  473.684213][   T39]  ? __pfx_kthread+0x10/0x10
[  473.684230][   T39]  ret_from_fork+0x3fc/0x770
[  473.684249][   T39]  ? __pfx_ret_from_fork+0x10/0x10
[  473.684266][   T39]  ? __switch_to_asm+0x39/0x70
[  473.684282][   T39]  ? __switch_to_asm+0x33/0x70
[  473.684297][   T39]  ? __pfx_kthread+0x10/0x10
[  473.684315][   T39]  ret_from_fork_asm+0x1a/0x30
[  473.684347][   T39]  </TASK>
[  474.004796][   T39] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  474.407382][T21346] IPVS: ip_vs_add_dest(): server weight less than zero
[  474.532355][T21352] netlink: 35 bytes leftover after parsing attributes in process `syz.3.4516'.
[  474.535711][T21352] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4516'.
[  474.660583][T21368] overlayfs: failed to clone upperpath
[  475.800739][T17265] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  475.985886][T17265] usb 7-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[  475.989851][T17265] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  475.997151][T17265] usb 7-1: config 0 descriptor??
[  476.002427][T17265] gspca_main: spca508-2.14.0 probing 8086:0110
[  476.218295][T17265] gspca_spca508: reg_read err -32
[  476.221410][T17265] gspca_spca508: reg_read err -32
[  476.224376][T17265] gspca_spca508: reg_read err -32
[  476.422369][T21429] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4546'.
[  476.442292][T17265] gspca_spca508: reg_read err -71
[  476.447459][T17265] gspca_spca508: reg write: error -71
[  476.449398][T17265] spca508 7-1:0.0: probe with driver spca508 failed with error -71
[  476.457914][T17265] usb 7-1: USB disconnect, device number 6
[  477.200063][T21478] overlayfs: failed to clone upperpath
[  477.277359][   T10] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  477.438291][   T10] usb 7-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  477.441645][   T10] usb 7-1: config 0 interface 0 has no altsetting 0
[  477.449392][   T10] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  477.452514][   T10] usb 7-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  477.455710][   T10] usb 7-1: Product: syz
[  477.457197][   T10] usb 7-1: Manufacturer: syz
[  477.459351][   T10] usb 7-1: SerialNumber: syz
[  477.464334][   T10] usb 7-1: config 0 descriptor??
[  477.471055][   T10] usb 7-1: selecting invalid altsetting 0
[  477.689901][   T10] usb 7-1: USB disconnect, device number 7
[  478.840993][T21566] loop6: detected capacity change from 0 to 64
[  478.871115][T21566] minix_free_block (loop6:1): bit already cleared
[  478.874594][T21566] minix_free_block (loop6:4): bit already cleared
[  478.881625][T21566] minix_free_block (loop6:3): bit already cleared
[  478.884288][T21566] minix_free_block (loop6:2): bit already cleared
[  478.886849][T21566] minix_free_block (loop6:1): bit already cleared
[  478.949086][T21575] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4597'.
[  478.951877][T21575] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4597'.
[  479.002167][T21579] netlink: 'syz.6.4599': attribute type 12 has an invalid length.
[  479.005257][T21579] netlink: 132 bytes leftover after parsing attributes in process `syz.6.4599'.
[  479.057325][T21583] netlink: 'syz.6.4601': attribute type 46 has an invalid length.
[  479.060551][T21583] netlink: 55 bytes leftover after parsing attributes in process `syz.6.4601'.
[  480.271912][T21625] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  480.357479][T21625] bridge0: port 2(bridge_slave_1) entered disabled state
[  480.365829][T21625] bridge0: port 1(bridge_slave_0) entered disabled state
[  480.599966][T21637] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4621'.
[  480.690640][T21649] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4626'.
[  482.357588][T21694] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4646'.
[  482.375811][T21695] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_team, syncid = 4, id = 0
[  482.525203][T21697] overlayfs: failed to resolve './file1': -2
[  482.723114][T21704] loop6: detected capacity change from 0 to 32768
[  482.755291][T21704] XFS (loop6): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  482.777368][T21704] XFS (loop6): Ending clean mount
[  482.836578][T19542] XFS (loop6): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd
[  483.024935][T21729] netlink: 64 bytes leftover after parsing attributes in process `syz.3.4657'.
[  483.087501][T21733] overlayfs: failed to resolve './file0': -2
[  483.308191][   T33] audit: type=1326 audit(1756721346.871:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21748 comm="syz.6.4666" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b1c38ebe9 code=0x0
[  483.380362][T21752] sctp: [Deprecated]: syz.2.4667 (pid 21752) Use of struct sctp_assoc_value in delayed_ack socket option.
[  483.380362][T21752] Use struct sctp_sack_info instead
[  483.654254][T21756] loop6: detected capacity change from 0 to 32768
[  483.658996][T21756] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4669 (21756)
[  483.671797][T21756] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  483.675867][T21756] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  483.707983][T21756] BTRFS info (device loop6): setting nodatasum
[  483.710520][T21756] BTRFS info (device loop6): enabling free space tree
[  483.713580][T21756] BTRFS info (device loop6): enabling auto defrag
[  483.716305][T21756] BTRFS info (device loop6): doing ref verification
[  483.719006][T21756] BTRFS info (device loop6): max_inline set to 0
[  483.792928][T19542] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  484.150844][T21780] loop6: detected capacity change from 0 to 32768
[  484.265083][T21780] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  484.265103][T21780]   allowing incompatible features above 0.0: (unknown version)
[  484.265109][T21780]   features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes
[  484.280639][T21780] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  484.283744][T21780] bcachefs (loop6): initializing new filesystem
[  484.292411][T21780] bcachefs (loop6): going read-write
[  484.307013][T21780] bcachefs (loop6): marking superblocks
[  484.314877][T21780] bcachefs (loop6): initializing freespace
[  484.319346][T21780] bcachefs (loop6): done initializing freespace
[  484.323134][T21780] bcachefs (loop6): reading snapshots table
[  484.325056][T21780] bcachefs (loop6): reading snapshots done
[  484.362412][T21780] bcachefs (loop6): done starting filesystem
[  484.433109][T19542] bcachefs (loop6): shutting down
[  484.435231][T19542] bcachefs (loop6): going read-only
[  484.437378][T19542] bcachefs (loop6): finished waiting for writes to stop
[  484.464799][T19542] bcachefs (loop6): flushing journal and stopping allocators, journal seq 2
[  484.542112][T19542] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 3
[  484.546363][T19542] bcachefs (loop6): clean shutdown complete, journal seq 4
[  484.549216][T19542] bcachefs (loop6): marking filesystem clean
[  484.574314][T19542] bcachefs (loop6): shutdown complete
[  488.938804][T21891] loop6: detected capacity change from 0 to 32768
[  488.943525][T21891] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4675 (21891)
[  488.957705][T21891] BTRFS info (device loop6 state S): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  488.962270][T21891] BTRFS info (device loop6 state S): using crc32c (crc32c-lib) checksum algorithm
[  489.028496][ T1089] BTRFS warning (device loop6 state S): checksum verify failed on logical 1052672 mirror 1 wanted 0x37e030f7 found 0xb6869543 level 0, ignored
[  489.035083][T21891] BTRFS error (device loop6 state S): failed to find fsid c9fe44da-de57-406a-8241-570000000000 when attempting to open seed devices
[  489.042098][T21891] BTRFS error (device loop6 state S): failed to read chunk tree: -2
[  489.085915][T21891] BTRFS error (device loop6 state S): open_ctree failed: -2
[  489.605335][T21945] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4730'.
[  489.805515][  T123] usb 3-1: new full-speed USB device number 55 using dummy_hcd
[  489.971919][  T123] usb 3-1: unable to get BOS descriptor or descriptor too short
[  489.982779][  T123] usb 3-1: no configurations
[  489.984909][  T123] usb 3-1: can't read configurations, error -22
[  490.067553][T21980] loop6: detected capacity change from 0 to 4096
[  490.090010][T21986] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  490.103127][   T33] audit: type=1800 audit(1756721353.223:217): pid=21980 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4746" name="file1" dev="loop6" ino=15 res=0 errno=0
[  490.690107][T21997] binder: 21994:21997 ioctl c0306201 0 returned -14
[  491.018055][T22011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4757'.
[  491.026318][T22011] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4757'.
[  491.238390][T22019] loop6: detected capacity change from 0 to 2368
[  491.242323][T22019] iso9660: Bad value for 'sbsector'
[  491.268674][   T33] audit: type=1326 audit(1756721354.308:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22018 comm="syz.6.4762" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b1c38ebe9 code=0x0
[  491.389295][T22028] fuse: Bad value for 'fd'
[  491.613072][   T33] audit: type=1326 audit(1756721354.644:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22042 comm="syz.2.4768" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c5b8ebe9 code=0x7ffc0000
[  491.622797][   T33] audit: type=1326 audit(1756721354.644:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22042 comm="syz.2.4768" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c5b8ebe9 code=0x7ffc0000
[  491.633030][   T33] audit: type=1326 audit(1756721354.644:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22042 comm="syz.2.4768" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57c5b8ebe9 code=0x7ffc0000
[  491.650431][   T33] audit: type=1326 audit(1756721354.644:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22042 comm="syz.2.4768" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c5b8ebe9 code=0x7ffc0000
[  491.658798][   T33] audit: type=1326 audit(1756721354.644:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22042 comm="syz.2.4768" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57c5b8ebe9 code=0x7ffc0000
[  491.668314][   T33] audit: type=1326 audit(1756721354.644:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22042 comm="syz.2.4768" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c5b8ebe9 code=0x7ffc0000
[  491.679342][   T33] audit: type=1326 audit(1756721354.644:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22042 comm="syz.2.4768" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c5b8ebe9 code=0x7ffc0000
[  491.689777][   T33] audit: type=1326 audit(1756721354.644:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22042 comm="syz.2.4768" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f57c5b8ebe9 code=0x7ffc0000
[  491.801931][T22051] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4772'.
[  492.139003][  T123] usb 3-1: new high-speed USB device number 57 using dummy_hcd
[  492.290566][T22069] netlink: 'syz.3.4779': attribute type 8 has an invalid length.
[  492.293282][T22069] netem: change failed
[  492.299181][  T123] usb 3-1: config 0 has an invalid interface number: 101 but max is 0
[  492.305787][  T123] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  492.311747][  T123] usb 3-1: config 0 has no interface number 0
[  492.314184][  T123] usb 3-1: config 0 interface 101 has no altsetting 0
[  492.316544][  T123] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[  492.322292][  T123] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  492.327828][  T123] usb 3-1: config 0 descriptor??
[  492.643535][T17265] usb 3-1: USB disconnect, device number 57
[  493.150972][T22107] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4791'.
[  495.470983][   T33] kauditd_printk_skb: 5 callbacks suppressed
[  495.470995][   T33] audit: type=1326 audit(1756721358.236:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22182 comm="syz.6.4825" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0b1c38ebe9 code=0x0
[  495.601633][T22195] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4831'.
[  496.169461][T22229] loop6: detected capacity change from 0 to 40427
[  496.173179][T22229] F2FS-fs (loop6): Invalid log_blocksize (268), supports only 12
[  496.175614][T22229] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock
[  496.229421][T22229] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  496.238871][T22229] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0
[  496.245047][T22229] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  496.487950][T22259] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4853'.
[  498.984045][T22365] netlink: 1 bytes leftover after parsing attributes in process `syz.2.4901'.
[  499.556038][T22373] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4904'.
[  499.685898][T22378] netlink: 'syz.2.4906': attribute type 27 has an invalid length.
[  499.692601][T22378] netlink: 'syz.2.4906': attribute type 1 has an invalid length.
[  499.731664][T22378] bridge0: port 1(bridge_slave_0) entered learning state
[  500.223604][   T33] audit: type=1804 audit(1756721362.689:233): pid=22383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4907" name="file0" dev="tmpfs" ino=9162 res=1 errno=0
[  500.829382][T22409] block nbd6: NBD_DISCONNECT
[  500.831799][T22409] block nbd6: Disconnected due to user request.
[  500.853328][T22409] block nbd6: shutting down sockets
[  501.276435][T22420] loop6: detected capacity change from 0 to 4096
[  501.431628][T22420] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  501.462561][T22420] ntfs3(loop6): ino=1a, mi_enum_attr
[  501.464877][T22420] ntfs3(loop6): ino=1a, mi_enum_attr
[  501.466946][T22420] ntfs3(loop6): Failed to initialize $Extend/$Reparse.
[  502.071805][T22451] vlan2: entered promiscuous mode
[  502.359706][T22457] loop6: detected capacity change from 0 to 32768
[  502.369892][T22457] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  502.459516][T19542] ocfs2: Unmounting device (7,6) on (node local)
[  502.462512][T22464] netlink: 104 bytes leftover after parsing attributes in process `syz.2.4939'.
[  502.656730][T22478] netlink: 168 bytes leftover after parsing attributes in process `syz.6.4943'.
[  503.699974][T22496] macvlan0: entered promiscuous mode
[  503.707878][T22496] netlink: 'syz.2.4950': attribute type 2 has an invalid length.
[  503.796843][T22503] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4953'.
[  503.997281][T22528] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  504.109642][  T123] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  504.262174][T22547] program syz.2.4972 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  504.271813][  T123] usb 7-1: Using ep0 maxpacket: 8
[  504.281614][  T123] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[  504.287736][  T123] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.296239][  T123] usb 7-1: Product: syz
[  504.297865][  T123] usb 7-1: Manufacturer: syz
[  504.302593][  T123] usb 7-1: SerialNumber: syz
[  504.313568][  T123] usb 7-1: config 0 descriptor??
[  504.575979][  T123] usb 7-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[  504.919046][T22556] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4975'.
[  505.074129][T22560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4977'.
[  505.078323][T22560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4977'.
[  505.084129][T22560] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4977'.
[  506.207797][  T123] usb write operation failed. (-71)
[  506.226287][  T123] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  506.230814][  T123] dvbdev: DVB: registering new adapter (Terratec H7)
[  506.233488][  T123] usb 7-1: media controller created
[  506.242589][  T123] usb read operation failed. (-71)
[  506.246230][  T123] usb write operation failed. (-71)
[  506.252822][  T123] dvb_usb_az6007 7-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[  506.260946][  T123] usb 7-1: USB disconnect, device number 8
[  506.287915][T22586] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  506.292548][T22586] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  506.296117][T22586] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  506.299550][T22586] overlayfs: missing 'lowerdir'
[  506.358352][T22588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4984'.
[  506.362667][T22588] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4984'.
[  506.626487][T22600] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4990'.
[  507.103283][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  507.106133][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  507.901417][T22629] syz.2.5001 (22629): drop_caches: 2
[  508.907691][T22666] loop6: detected capacity change from 0 to 4096
[  510.832674][  T123] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  511.167305][   T33] audit: type=1326 audit(1756723950.995:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22745 comm="syz.3.5050" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d4df8ebe9 code=0x0
[  513.168167][  T123] usb 7-1: config 0 has an invalid interface number: 117 but max is 0
[  513.171312][  T123] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  513.175976][  T123] usb 7-1: config 0 has no interface number 0
[  513.178530][  T123] usb 7-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[  513.183066][  T123] usb 7-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  513.190950][  T123] usb 7-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[  513.205701][  T123] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.208904][  T123] usb 7-1: Product: syz
[  513.210510][  T123] usb 7-1: Manufacturer: syz
[  513.212289][  T123] usb 7-1: SerialNumber: syz
[  513.222383][  T123] usb 7-1: config 0 descriptor??
[  513.695239][T22782] openvswitch: netlink: Tunnel attr 5 has unexpected len 4 expected 0
[  513.879764][  T123] input: syz syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.117/input/input15
[  514.010196][ T5915] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  514.105567][  T123] usb 7-1: USB disconnect, device number 9
[  514.199599][ T5915] usb 3-1: Using ep0 maxpacket: 16
[  514.204095][ T5915] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  514.207645][ T5915] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  514.212257][ T5915] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  514.221068][ T5915] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  514.224880][ T5915] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.228154][ T5915] usb 3-1: Product: syz
[  514.229861][ T5915] usb 3-1: Manufacturer: syz
[  514.232998][ T5915] usb 3-1: SerialNumber: syz
[  514.471023][T22786] __nla_validate_parse: 1 callbacks suppressed
[  514.471046][T22786] netlink: 36 bytes leftover after parsing attributes in process `syz.2.5067'.
[  514.481628][ T5915] usb 3-1: 0:2 : does not exist
[  514.503871][ T5915] usb 3-1: USB disconnect, device number 58
[  515.086524][ T5915] usb 7-1: new full-speed USB device number 10 using dummy_hcd
[  515.268788][ T5915] usb 7-1: unable to get BOS descriptor or descriptor too short
[  515.280879][ T5915] usb 7-1: not running at top speed; connect to a high speed hub
[  515.285216][ T5915] usb 7-1: config 12 has an invalid interface number: 173 but max is 1
[  515.288337][ T5915] usb 7-1: config 12 has an invalid interface number: 173 but max is 1
[  515.300399][ T5915] usb 7-1: config 12 has 1 interface, different from the descriptor's value: 2
[  515.307762][ T5915] usb 7-1: config 12 has no interface number 0
[  515.310206][ T5915] usb 7-1: config 12 interface 173 has no altsetting 0
[  515.321833][ T5915] usb 7-1: config 12 interface 173 has no altsetting 1
[  515.327550][ T5915] usb 7-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice=33.b7
[  515.334695][ T5915] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  515.337828][ T5915] usb 7-1: Product: syz
[  515.339554][ T5915] usb 7-1: Manufacturer: syz
[  515.341345][ T5915] usb 7-1: SerialNumber: syz
[  515.829720][ T5915] usb 7-1: USB disconnect, device number 10
[  515.942442][T22923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5107'.
[  515.946465][T22923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5107'.
[  516.468655][ T5236] Bluetooth: hci1: unexpected event for opcode 0x041b
[  516.639501][ T5898] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  516.796811][ T5898] usb 7-1: Using ep0 maxpacket: 8
[  516.801030][ T5898] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  516.805346][ T5898] usb 7-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a
[  516.811800][ T5898] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  516.818724][ T5898] usb 7-1: config 0 descriptor??
[  516.824831][ T5898] gspca_main: vc032x-2.14.0 probing 046d:0892
[  517.059591][T22972] team0 (unregistering): Port device team_slave_0 removed
[  517.062885][T22972] team0 (unregistering): Port device team_slave_1 removed
[  517.260037][ T5898] gspca_vc032x: reg_w err -71
[  517.269929][ T5898] vc032x 7-1:0.0: probe with driver vc032x failed with error -71
[  517.275854][ T5898] usb 7-1: USB disconnect, device number 11
[  518.891280][T23060] overlayfs: failed to resolve './file0': -2
[  518.921793][T23062] loop6: detected capacity change from 0 to 128
[  518.961024][T23062] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  518.980028][T23062] ext4 filesystem being mounted at /224/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  519.029359][T23062] EXT4-fs error (device loop6): dx_make_map:1296: inode #2: block 20: comm syz.6.5150: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1
[  519.056171][T23062] EXT4-fs error (device loop6) in do_split:2029: Corrupt filesystem
[  519.100884][T19542] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  519.381985][T23086] loop6: detected capacity change from 0 to 4096
[  519.891237][T23086] loop6: detected capacity change from 0 to 32768
[  519.906959][T23086] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5159 (23086)
[  520.033400][T23086] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  520.046696][T23086] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  520.105338][T23114] tipc: Bearer <udp:s>: already 2 bearers with priority 10
[  520.108924][T23114] tipc: Bearer <udp:s>: trying with adjusted priority
[  520.113217][T23114] tipc: Enabled bearer <udp:s>, priority 9
[  520.148032][T23086] BTRFS info (device loop6): enabling ssd optimizations
[  520.150782][T23086] BTRFS info (device loop6): enabling free space tree
[  520.160163][T23086] BTRFS info (device loop6): use lzo compression, level 0
[  520.315612][T19542] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  521.916783][ T5898] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  522.079366][ T5898] usb 7-1: config 220 has an invalid interface number: 76 but max is 2
[  522.082887][ T5898] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping
[  522.086563][ T5898] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  522.090975][ T5898] usb 7-1: config 220 has no interface number 2
[  522.093674][ T5898] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  522.099072][ T5898] usb 7-1: config 220 interface 0 has no altsetting 0
[  522.101973][ T5898] usb 7-1: config 220 interface 76 has no altsetting 0
[  522.104854][ T5898] usb 7-1: config 220 interface 1 has no altsetting 0
[  522.111351][ T5898] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  522.115156][ T5898] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.119041][ T5898] usb 7-1: Product: syz
[  522.121046][ T5898] usb 7-1: Manufacturer: syz
[  522.123055][ T5898] usb 7-1: SerialNumber: syz
[  522.355801][ T5898] usb 7-1: Found UVC 7.01 device syz (8086:0b07)
[  522.358402][ T5898] usb 7-1: No valid video chain found.
[  522.360656][ T5898] usb 7-1: selecting invalid altsetting 0
[  522.370260][ T5898] usb 7-1: selecting invalid altsetting 0
[  522.372614][ T5898] usbtest 7-1:220.1: probe with driver usbtest failed with error -22
[  522.379301][ T5898] usb 7-1: USB disconnect, device number 12
[  522.512329][T23168] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  522.517072][T23168] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  522.533299][T23168] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  522.540343][T23168] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  522.542973][T23168] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  522.552158][T23168] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  522.559864][T23168] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  522.570898][T23168] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  522.673755][T23192] netlink: 'syz.2.5186': attribute type 21 has an invalid length.
[  522.678811][T23192] netlink: 128 bytes leftover after parsing attributes in process `syz.2.5186'.
[  522.682588][T23192] netlink: 'syz.2.5186': attribute type 4 has an invalid length.
[  522.685783][T23192] netlink: 'syz.2.5186': attribute type 3 has an invalid length.
[  522.689207][T23192] netlink: 3 bytes leftover after parsing attributes in process `syz.2.5186'.
[  522.979640][T23202] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  522.982565][T23202] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  522.985168][T23202] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  522.988320][T23202] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  522.990601][T23202] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  522.992564][T23202] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  522.992564][T23205] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check.
[  522.994559][T23202] comedi comedi3: 8255: I/O port conflict (0x802,4)
[  523.005310][T23202] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4)
[  523.011702][T23202] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  523.014314][T23202] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  523.017151][T23202] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  523.021085][T23202] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  523.023733][T23202] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  523.026287][T23202] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[  523.030476][T23202] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  523.127750][T23210] overlayfs: empty lowerdir
[  523.268545][T23217] veth0: entered promiscuous mode
[  523.275821][T23212] veth0: left promiscuous mode
[  523.474097][T23223] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  523.476796][T23223] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  523.479812][T23223] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  523.482524][T23223] comedi comedi3: 8255: I/O port conflict (0x7fffffff,4)
[  523.485273][T23223] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  523.488289][T23223] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  523.490775][T23223] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  523.493306][T23223] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  523.495931][T23223] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  523.506609][T23223] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  523.509264][ T5898] usb 3-1: new high-speed USB device number 59 using dummy_hcd
[  523.513046][T23223] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  523.676956][ T5898] usb 3-1: config 1 interface 0 altsetting 9 bulk endpoint 0x1 has invalid maxpacket 1023
[  523.689055][ T5898] usb 3-1: config 1 interface 0 has no altsetting 0
[  523.694927][ T5898] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[  523.698593][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.702646][ T5898] usb 3-1: Product: syz
[  523.704485][ T5898] usb 3-1: Manufacturer: syz
[  523.706343][ T5898] usb 3-1: SerialNumber: syz
[  523.715360][T23213] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  523.958348][ T5898] usb 3-1: USB disconnect, device number 59
[  524.022281][ T5236] Bluetooth: hci2: command 0x0406 tx timeout
[  524.062156][T23258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5208'.
[  524.066353][T23258] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5208'.
[  524.069874][T23258] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5208'.
[  524.241682][T23240] loop6: detected capacity change from 0 to 65536
[  524.267462][T23240] XFS (loop6): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  524.320956][T23240] XFS (loop6): Ending clean mount
[  524.696376][ T5236] Bluetooth: hci1: command 0x0406 tx timeout
[  524.699849][ T5236] Bluetooth: hci0: command 0x0c1a tx timeout
[  524.700002][ T5313] XFS (loop6): Metadata CRC error detected at xfs_agf_read_verify+0x12f/0x1f0, xfs_agf block 0x1 
[  524.714944][ T5313] XFS (loop6): Unmount and run xfs_repair
[  524.719085][ T5313] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  524.723175][ T5313] 00000000: 58 41 47 46 00 00 00 01 00 00 00 00 00 00 40 00  XAGF..........@.
[  524.726560][ T5313] 00000010: 00 00 00 02 00 00 00 03 00 00 00 00 00 00 00 01  ................
[  524.730814][ T5313] 00000020: 00 00 00 01 00 00 00 00 00 00 00 01 00 00 00 04  ................
[  524.733816][ T5313] 00000030: 00 00 00 04 00 00 3f ca 00 00 3f c7 00 00 00 00  ......?...?.....
[  524.736979][ T5313] 00000040: 9b 73 48 e5 2f a0 41 a5 95 26 c5 3a 67 8b 01 f3  .sH./.A..&.:g...
[  524.741214][ T5313] 00000050: 00 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00  ................
[  524.745058][ T5313] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  524.748837][ T5313] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  524.754272][ T5313] XFS (loop6): metadata I/O error in "xfs_read_agf+0x281/0x5c0" at daddr 0x1 len 1 error 74
[  524.779381][ T5313] XFS (loop6): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  524.788360][ T5313] XFS (loop6): Please unmount the filesystem and rectify the problem(s)
[  524.842717][T20516] XFS (loop6): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3
[  525.232215][T23292] dlm: non-version read from control device 29
[  525.297322][T23290] Invalid ELF header magic: != ELF
[  525.324977][   T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.454258][T23295] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5219'.
[  525.460858][   T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.609047][   T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.725480][   T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  525.794660][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  525.821130][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  525.826377][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  525.830853][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  525.837244][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  525.955276][T23348] netlink: 'syz.2.5229': attribute type 11 has an invalid length.
[  526.151454][   T13] bridge_slave_1: left allmulticast mode
[  526.153833][   T13] bridge_slave_1: left promiscuous mode
[  526.156245][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  526.183236][   T13] bridge_slave_0: left allmulticast mode
[  526.188624][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  526.265257][ T5856] Bluetooth: hci2: command 0x0406 tx timeout
[  526.926917][ T5856] Bluetooth: hci1: command 0x0406 tx timeout
[  526.951002][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  526.960116][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  526.967914][   T13] bond0 (unregistering): Released all slaves
[  526.984441][T23459] netlink: 288 bytes leftover after parsing attributes in process `syz.2.5241'.
[  526.997007][T23312] chnl_net:caif_netlink_parms(): no params data found
[  527.104183][   T13] IPVS: stopping master sync thread 21695 ...
[  527.357498][T23514] veth3: entered promiscuous mode
[  527.359353][T23514] veth3: entered allmulticast mode
[  527.387464][T23312] bridge0: port 1(bridge_slave_0) entered blocking state
[  527.399550][T23312] bridge0: port 1(bridge_slave_0) entered disabled state
[  527.403847][T23312] bridge_slave_0: entered allmulticast mode
[  527.411634][T23312] bridge_slave_0: entered promiscuous mode
[  527.427158][T23312] bridge0: port 2(bridge_slave_1) entered blocking state
[  527.429879][T23312] bridge0: port 2(bridge_slave_1) entered disabled state
[  527.453453][T23312] bridge_slave_1: entered allmulticast mode
[  527.457453][T23312] bridge_slave_1: entered promiscuous mode
[  527.736354][T23312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  527.758239][   T13] hsr_slave_0: left promiscuous mode
[  527.761107][   T13] hsr_slave_1: left promiscuous mode
[  527.764433][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  527.767323][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  527.770959][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  527.776375][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  527.821355][   T13] veth1_macvtap: left promiscuous mode
[  527.823683][   T13] veth0_macvtap: left promiscuous mode
[  527.826042][   T13] veth1_vlan: left promiscuous mode
[  527.832154][   T13] veth0_vlan: left promiscuous mode
[  528.044543][ T5856] Bluetooth: hci0: command tx timeout
[  528.467701][ T5856] Bluetooth: hci2: command 0x0406 tx timeout
[  528.485187][T23594] binder: binder_mmap: 23593 200000000000-200000b36000 bad vm_flags failed -1
[  528.490569][T23594] binder: 23593:23594 ioctl c00c620f 0 returned -14
[  528.781860][   T13] team0 (unregistering): Port device team_slave_1 removed
[  528.868156][   T13] team0 (unregistering): Port device team_slave_0 removed
[  529.727421][T23312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  529.841680][T23312] team0: Port device team_slave_0 added
[  529.850843][T23312] team0: Port device team_slave_1 added
[  529.961316][T23312] batman_adv: batadv0: Adding interface: batadv_slave_0
[  529.963905][T23312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  529.976356][T23312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  530.012325][T23312] batman_adv: batadv0: Adding interface: batadv_slave_1
[  530.015173][T23312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  530.027616][T23312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  530.185288][T23312] hsr_slave_0: entered promiscuous mode
[  530.188536][T23312] hsr_slave_1: entered promiscuous mode
[  530.192056][T23312] debugfs: 'hsr0' already exists in 'hsr'
[  530.194468][T23312] Cannot create hsr debugfs directory
[  530.254209][ T5856] Bluetooth: hci0: command tx timeout
[  530.491378][T23312] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  530.502574][T23312] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  530.516432][T23312] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  530.527649][T23312] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  530.599031][T23312] 8021q: adding VLAN 0 to HW filter on device bond0
[  530.616469][T23312] 8021q: adding VLAN 0 to HW filter on device team0
[  530.631441][ T1090] bridge0: port 1(bridge_slave_0) entered blocking state
[  530.633930][ T1090] bridge0: port 1(bridge_slave_0) entered forwarding state
[  530.652645][ T1090] bridge0: port 2(bridge_slave_1) entered blocking state
[  530.654967][ T1090] bridge0: port 2(bridge_slave_1) entered forwarding state
[  530.830413][T23312] 8021q: adding VLAN 0 to HW filter on device batadv0
[  531.171313][T23312] veth0_vlan: entered promiscuous mode
[  531.184924][   T10] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  531.197251][T23312] veth1_vlan: entered promiscuous mode
[  531.246703][T23312] veth0_macvtap: entered promiscuous mode
[  531.261344][T23312] veth1_macvtap: entered promiscuous mode
[  531.295420][T23312] batman_adv: batadv0: Interface activated: batadv_slave_0
[  531.314175][T23312] batman_adv: batadv0: Interface activated: batadv_slave_1
[  531.339690][   T13] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  531.343667][ T5878] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  531.347095][   T10] usb 3-1: Using ep0 maxpacket: 16
[  531.348369][ T5878] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  531.351726][   T10] usb 3-1: config 0 has an invalid interface number: 251 but max is 0
[  531.352769][ T5878] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  531.364071][   T10] usb 3-1: config 0 has no interface number 0
[  531.367822][   T10] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 16
[  531.371772][   T10] usb 3-1: config 0 interface 251 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[  531.464143][   T10] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4
[  531.467670][   T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  531.470867][   T10] usb 3-1: Product: syz
[  531.493737][   T10] usb 3-1: Manufacturer: syz
[  531.495719][   T10] usb 3-1: SerialNumber: syz
[  531.525215][   T10] usb 3-1: config 0 descriptor??
[  531.530170][T23801] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  531.540341][T23801] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  531.541970][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  531.545983][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  531.600492][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  531.603638][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  531.812815][T23801] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  531.835910][T23801] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  531.890598][T23826] loop7: detected capacity change from 0 to 512
[  532.452609][   T10] asix 3-1:0.251 (unnamed net_device) (uninitialized): Interface mode not supported by driver
[  532.473744][   T10] asix 3-1:0.251: probe with driver asix failed with error -524
[  532.479495][ T5856] Bluetooth: hci0: command tx timeout
[  532.724673][   T10] usb 3-1: USB disconnect, device number 60
[  533.609140][T23859] binder: 23858:23859 ioctl c00c620f 200000000040 returned -22
[  534.514701][T23935] overlayfs: empty lowerdir
[  534.735583][ T5856] Bluetooth: hci0: command tx timeout
[  535.228196][T23953] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5330'.
[  535.402305][T23965] : entered promiscuous mode
[  535.466963][T23973] can0: slcan on ttyS3.
[  535.592171][T23985] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5342'.
[  535.596373][T23985] netlink: 84 bytes leftover after parsing attributes in process `syz.3.5342'.
[  535.602895][T23985] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[  535.613106][T23973] can0 (unregistered): slcan off ttyS3.
[  535.618085][T23973] Falling back ldisc for ttyS3.
[  536.208422][  T793] usb 8-1: new high-speed USB device number 2 using dummy_hcd
[  536.337940][T24041] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[  536.346993][T24041] block device autoloading is deprecated and will be removed.
[  536.379531][  T793] usb 8-1: Using ep0 maxpacket: 8
[  536.383997][  T793] usb 8-1: config index 0 descriptor too short (expected 30, got 18)
[  536.394588][  T793] usb 8-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea
[  536.398748][  T793] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  536.408462][  T793] usb 8-1: Product: syz
[  536.417548][  T793] usb 8-1: Manufacturer: syz
[  536.421363][  T793] usb 8-1: SerialNumber: syz
[  536.433666][  T793] usb 8-1: config 0 descriptor??
[  536.441497][  T793] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state.
[  536.451184][  T793] usb 8-1: setting power ON
[  536.457030][  T793] dvb-usb: bulk message failed: -22 (2/0)
[  536.484484][  T793] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  536.494011][  T793] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID))
[  536.504375][  T793] usb 8-1: media controller created
[  536.562861][  T793] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  536.606909][  T793] usb 8-1: selecting invalid altsetting 6
[  536.616694][  T793] usb 8-1: digital interface selection failed (-22)
[  536.622000][  T793] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)'
[  536.632676][  T793] usb 8-1: setting power OFF
[  536.645644][  T793] dvb-usb: bulk message failed: -22 (2/0)
[  536.650676][  T793] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected.
[  536.666405][  T793] (NULL device *): no alternate interface
[  536.746633][  T793] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected.
[  536.771141][  T793] usb 8-1: USB disconnect, device number 2
[  537.417076][T24089] loop7: detected capacity change from 0 to 256
[  537.437876][   T33] audit: type=1800 audit(1756723975.572:235): pid=24089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5376" name="file1" dev="loop7" ino=1048655 res=0 errno=0
[  537.445956][T24089] FAT-fs (loop7): error, corrupted file size (i_pos 196, 2097152)
[  537.457333][T24089] FAT-fs (loop7): Filesystem has been set read-only
[  537.738684][T24122] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5390'.
[  537.794343][T24126] netlink: 12 bytes leftover after parsing attributes in process `syz.7.5392'.
[  537.797488][T24126] netlink: 'syz.7.5392': attribute type 2 has an invalid length.
[  539.104232][T24143] bond0: entered promiscuous mode
[  539.106363][T24143] bond_slave_0: entered promiscuous mode
[  539.109189][T24143] bond_slave_1: entered promiscuous mode
[  539.112394][T24143] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode
[  539.122956][T24143] dummy0: entered promiscuous mode
[  539.132543][T24143] bond0: entered allmulticast mode
[  539.134940][T24143] bond_slave_0: entered allmulticast mode
[  539.140537][T24143] bond_slave_1: entered allmulticast mode
[  539.143042][T24143] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode
[  539.146228][T24143] dummy0: entered allmulticast mode
[  539.177787][T24143] 8021q: adding VLAN 0 to HW filter on device bond0
[  539.427622][T24152] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5404'.
[  539.803342][T24174] loop7: detected capacity change from 0 to 8
[  539.806284][T24174] MTD: Attempt to mount non-MTD device "/dev/loop7"
[  539.847957][T24177] ALSA: mixer_oss: invalid OSS volume ''
[  539.877081][T24182] netlink: 132 bytes leftover after parsing attributes in process `syz.2.5418'.
[  539.939014][   T33] audit: type=1326 audit(1756723968.904:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24186 comm="syz.7.5420" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a0b8ebe9 code=0x7ffc0000
[  539.958153][   T33] audit: type=1326 audit(1756723968.904:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24186 comm="syz.7.5420" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a0b8ebe9 code=0x7ffc0000
[  539.969057][   T33] audit: type=1326 audit(1756723968.922:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24186 comm="syz.7.5420" exe="/syz-executor" sig=0 arch=c000003e syscall=76 compat=0 ip=0x7fd9a0b8ebe9 code=0x7ffc0000
[  539.977436][   T33] audit: type=1326 audit(1756723968.922:239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24186 comm="syz.7.5420" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a0b8ebe9 code=0x7ffc0000
[  539.988419][   T33] audit: type=1326 audit(1756723968.922:240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24186 comm="syz.7.5420" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a0b8ebe9 code=0x7ffc0000
[  540.025595][T24194] binfmt_misc: register: failed to install interpreter file ./file0
[  540.259063][ T5883] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  540.418997][ T5883] usb 3-1: Using ep0 maxpacket: 32
[  540.423618][ T5883] usb 3-1: unable to get BOS descriptor or descriptor too short
[  540.431362][ T5883] usb 3-1: config 4 has an invalid interface number: 91 but max is 0
[  540.437474][ T5883] usb 3-1: config 4 has no interface number 0
[  540.443139][ T5883] usb 3-1: New USB device found, idVendor=084f, idProduct=0001, bcdDevice=6c.05
[  540.448357][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.457505][T24206] loop7: detected capacity change from 0 to 32768
[  540.459417][ T5883] usb 3-1: Product: syz
[  540.462272][ T5883] usb 3-1: Manufacturer: syz
[  540.464021][T24206] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.5428 (24206)
[  540.464082][ T5883] usb 3-1: SerialNumber: syz
[  540.491109][T24206] BTRFS info (device loop7): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  540.495889][T24206] BTRFS info (device loop7): using blake2b (blake2b-256-generic) checksum algorithm
[  540.538992][T24206] BTRFS info (device loop7): enabling ssd optimizations
[  540.542206][T24206] BTRFS info (device loop7): enabling free space tree
[  540.545319][T24206] BTRFS info (device loop7): use zlib compression, level 3
[  540.605613][T23312] BTRFS info (device loop7): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8
[  540.707459][ T5883] empeg 3-1:4.91: empeg converter detected
[  540.709335][ T5883] usb 3-1: active config #4 != 1 ??
[  540.732053][ T5883] usb 3-1: USB disconnect, device number 61
[  540.856341][T24241] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5430'.
[  541.031635][T24246] loop7: detected capacity change from 0 to 764
[  541.051776][T24246] rock: corrupted directory entry. extent=32, offset=2044, size=237
[  541.121464][T24251] loop7: detected capacity change from 0 to 256
[  541.127993][T24251] exFAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  541.146972][T24251] exFAT-fs (loop7): Medium has reported failures. Some data may be lost.
[  541.158606][T24251] exFAT-fs (loop7): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  541.182563][   T33] audit: type=1800 audit(1756723970.073:241): pid=24251 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.5434" name="file1" dev="loop7" ino=1048656 res=0 errno=0
[  541.399920][T24262] openvswitch: netlink: Flow actions attr not present in new flow.
[  541.484637][T24264] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5438'.
[  541.556169][T24266] netlink: 'syz.7.5439': attribute type 1 has an invalid length.
[  541.558828][T24266] netlink: 228 bytes leftover after parsing attributes in process `syz.7.5439'.
[  541.633716][T24270] netlink: 'syz.7.5441': attribute type 3 has an invalid length.
[  541.637684][T24270] netlink: 766 bytes leftover after parsing attributes in process `syz.7.5441'.
[  541.897069][   T33] audit: type=1800 audit(1756723970.737:242): pid=24289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5449" name="bus" dev="tmpfs" ino=10240 res=0 errno=0
[  542.910068][ T5883] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  542.977239][T24337] overlayfs: failed to clone upperpath
[  543.070360][ T5883] usb 3-1: Using ep0 maxpacket: 16
[  543.074883][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  543.079425][ T5883] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[  543.083917][ T5883] usb 3-1: config 0 interface 0 has no altsetting 0
[  543.086700][ T5883] usb 3-1: New USB device found, idVendor=0458, idProduct=0138, bcdDevice= 0.00
[  543.094897][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  543.100704][ T5883] usb 3-1: config 0 descriptor??
[  543.376238][T24352] loop7: detected capacity change from 0 to 64
[  543.542760][ T5883] kye 0003:0458:0138.0012: unknown main item tag 0x0
[  543.545429][ T5883] kye 0003:0458:0138.0012: unknown main item tag 0x0
[  543.547942][ T5883] kye 0003:0458:0138.0012: unknown main item tag 0x0
[  543.552239][ T5883] kye 0003:0458:0138.0012: unknown main item tag 0x0
[  543.554690][ T5883] kye 0003:0458:0138.0012: unknown main item tag 0x0
[  543.557264][ T5883] kye 0003:0458:0138.0012: unknown main item tag 0x0
[  543.559781][ T5883] kye 0003:0458:0138.0012: unknown main item tag 0x0
[  543.565338][ T5883] kye 0003:0458:0138.0012: unknown main item tag 0x0
[  543.567905][ T5883] kye 0003:0458:0138.0012: unknown main item tag 0x0
[  543.570516][ T5883] kye 0003:0458:0138.0012: unknown main item tag 0x0
[  543.581930][ T5883] kye 0003:0458:0138.0012: collection stack underflow
[  543.586457][ T5883] kye 0003:0458:0138.0012: item 0 0 0 12 parsing failed
[  543.589960][ T5883] kye 0003:0458:0138.0012: parse failed
[  543.592279][ T5883] kye 0003:0458:0138.0012: probe with driver kye failed with error -22
[  543.744603][T24366] loop7: detected capacity change from 0 to 32768
[  543.747979][T24366] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop7 (7:7) scanned by syz.7.5480 (24366)
[  543.761530][   T10] usb 3-1: USB disconnect, device number 62
[  543.763551][T24366] BTRFS info (device loop7): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  543.768559][T24366] BTRFS info (device loop7): using sha256 (sha256-lib) checksum algorithm
[  543.831115][T24366] BTRFS info (device loop7): rebuilding free space tree
[  543.847362][T24366] BTRFS info (device loop7): enabling ssd optimizations
[  543.850134][T24366] BTRFS info (device loop7): turning on sync discard
[  543.853194][T24366] BTRFS info (device loop7): enabling free space tree
[  543.855797][T24366] BTRFS info (device loop7): force clearing of disk cache
[  543.858620][T24366] BTRFS info (device loop7): enabling auto defrag
[  543.861371][T24366] BTRFS info (device loop7): doing ref verification
[  543.863902][T24366] BTRFS info (device loop7): max_inline set to 0
[  543.929970][T23312] BTRFS info (device loop7): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  544.314908][T24410] gtp0: entered promiscuous mode
[  544.548412][T24428] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  544.551184][T24428] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  544.552795][T24430] openvswitch: netlink: Flow set message rejected, Key attribute missing.
[  544.554635][T24428] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  544.559900][T24428] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  544.562295][T24428] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  544.564520][T24428] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  544.568543][T24428] comedi comedi3: 8255: I/O port conflict (0x802,4)
[  544.570914][T24428] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  544.573534][T24428] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  544.576693][T24428] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  544.580208][T24428] comedi comedi3: 8255: I/O port conflict (0x8,4)
[  544.582803][T24428] comedi comedi3: 8255: I/O port conflict (0xd4,4)
[  544.585541][T24428] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  544.770183][   T13] batman_adv: batadv0: IGMP Querier appeared
[  544.772608][   T13] batman_adv: batadv0: MLD Querier appeared
[  544.952774][    T9] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  544.969575][  T793] kernel write not supported for file /media2 (pid: 793 comm: kworker/1:2)
[  545.112585][    T9] usb 3-1: Using ep0 maxpacket: 32
[  545.122682][    T9] usb 3-1: config 253 has an invalid descriptor of length 0, skipping remainder of the config
[  545.170281][    T9] usb 3-1: New USB device found, idVendor=04e2, idProduct=1410, bcdDevice=81.85
[  545.314863][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  545.317558][    T9] usb 3-1: Product: syz
[  545.318972][    T9] usb 3-1: Manufacturer: syz
[  545.321170][    T9] usb 3-1: SerialNumber: syz
[  545.338830][    T9] xr_serial 3-1:253.0: failed to claim sibling interface: -16
[  545.341873][    T9] xr_serial 3-1:253.0: probe with driver xr_serial failed with error -16
[  545.544778][ T5915] usb 3-1: USB disconnect, device number 63
[  546.368067][T24506] netlink: 40 bytes leftover after parsing attributes in process `syz.7.5525'.
[  547.045741][   T33] audit: type=1326 audit(2000000000.851:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24512 comm="syz.7.5529" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a0b8ebe9 code=0x7ffc0000
[  547.064281][   T33] audit: type=1326 audit(2000000000.851:244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24512 comm="syz.7.5529" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a0b8ebe9 code=0x7ffc0000
[  547.078114][   T33] audit: type=1326 audit(2000000000.869:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24512 comm="syz.7.5529" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9a0b8ebe9 code=0x7ffc0000
[  547.105339][   T33] audit: type=1326 audit(2000000000.869:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24512 comm="syz.7.5529" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a0b8ebe9 code=0x7ffc0000
[  547.138013][   T33] audit: type=1326 audit(2000000000.869:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24512 comm="syz.7.5529" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a0b8ebe9 code=0x7ffc0000
[  547.156576][   T33] audit: type=1326 audit(2000000000.888:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24512 comm="syz.7.5529" exe="/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd9a0b8ebe9 code=0x7ffc0000
[  547.164925][   T33] audit: type=1326 audit(2000000000.898:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24512 comm="syz.7.5529" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd9a0b8ebe9 code=0x7ffc0000
[  547.172707][   T33] audit: type=1326 audit(2000000000.898:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24512 comm="syz.7.5529" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9a0b85ba7 code=0x7ffc0000
[  547.207516][   T33] audit: type=1326 audit(2000000000.898:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24512 comm="syz.7.5529" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fd9a0b2adb9 code=0x7ffc0000
[  547.238458][   T33] audit: type=1326 audit(2000000000.926:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24512 comm="syz.7.5529" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fd9a0b85ba7 code=0x7ffc0000
[  547.921090][T24534] binder: 24533:24534 ioctl c0306201 200000000640 returned -22
[  547.933063][T24536] usb usb8: check_ctrlrecip: process 24536 (syz.2.5538) requesting ep 01 but needs 81
[  547.938862][T24536] usb usb8: usbfs: process 24536 (syz.2.5538) did not claim interface 0 before use
[  550.460420][T24613] tipc: Enabled bearer <eth:bridge0>, priority 10
[  550.519829][T24619] loop7: detected capacity change from 0 to 1024
[  550.538909][T24619] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  550.562737][T23312] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  550.607117][ T5856] Bluetooth: hci0: command tx timeout
[  550.674776][T24632] loop7: detected capacity change from 0 to 256
[  550.865192][T24639] netlink: 136 bytes leftover after parsing attributes in process `syz.2.5578'.
[  550.953401][    C1] I/O error, dev loop2, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  550.957603][T24641] FAT-fs (loop2): unable to read inode block for updating (i_pos 1050)
[  550.964256][    C1] I/O error, dev loop2, sector 65 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2
[  550.968220][T24641] FAT-fs (loop2): unable to read inode block for updating (i_pos 1050)
[  550.973664][T24641] FAT-fs (loop2): Failed to update on disk inode for unused fallocated blocks, inode could be corrupted. Please run fsck
[  551.127689][T24651] openvswitch: netlink: Message has 4784 unknown bytes.
[  551.131934][T24651] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  551.399496][T24671] overlayfs: failed to clone upperpath
[  551.524154][T24675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5594'.
[  551.528283][T24675] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5594'.
[  552.126910][T24715] loop7: detected capacity change from 0 to 512
[  552.130197][T24715] EXT4-fs: Ignoring removed nobh option
[  552.133091][T24715] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  552.142487][T24715] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.5612: iget: bad i_size value: 38620345925642
[  552.150811][T24715] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.5612: couldn't read orphan inode 15 (err -117)
[  552.158054][T24715] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  552.174411][T24715] EXT4-fs error (device loop7): ext4_validate_block_bitmap:432: comm syz.7.5612: bg 0: block 5: invalid block bitmap
[  552.604033][T23312] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  553.953673][ T5915] usb 8-1: new high-speed USB device number 3 using dummy_hcd
[  554.134585][ T5915] usb 8-1: Using ep0 maxpacket: 8
[  554.141314][ T5915] usb 8-1: unable to get BOS descriptor or descriptor too short
[  554.145180][ T5915] usb 8-1: config 7 has an invalid interface number: 67 but max is 0
[  554.147995][ T5915] usb 8-1: config 7 has no interface number 0
[  554.154256][ T5915] usb 8-1: string descriptor 0 read error: -22
[  554.157802][ T5915] usb 8-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice=6b.16
[  554.161192][ T5915] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  554.393760][ T5915] usb 8-1: USB disconnect, device number 3
[  554.435595][T24771] tmpfs: Bad value for 'size'
[  555.227518][T24801] loop7: detected capacity change from 0 to 1024
[  555.232796][T24801] EXT4-fs (loop7): Cannot use DAX on a filesystem that may contain inline data
[  555.832004][T24810] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  555.835354][T24810] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  555.839399][T24810] overlayfs: missing 'lowerdir'
[  555.890622][T24811] fuse: Unknown parameter './bus'
[  556.260186][T24825] 9pnet: p9_errstr2errno: server reported unknown error 00000000000000000000004
[  556.612879][T24851] Option '    ' to dns_resolver key: bad/missing value
[  557.084617][ T5915] usb 8-1: new high-speed USB device number 4 using dummy_hcd
[  557.247486][ T5915] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64
[  557.252480][ T5915] usb 8-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32
[  557.256544][ T5915] usb 8-1: config 1 interface 0 has no altsetting 0
[  557.261938][ T5915] usb 8-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  557.265645][ T5915] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  557.271388][ T5915] usb 8-1: Product: syz
[  557.273150][ T5915] usb 8-1: Manufacturer: syz
[  557.274949][ T5915] usb 8-1: SerialNumber: syz
[  557.282797][T24862] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  557.289765][T24862] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  557.623527][T24876] openvswitch: netlink: Message has 24 unknown bytes.
[  557.764627][ T5915] rtl8150 8-1:1.0: couldn't reset the device
[  557.766888][ T5915] rtl8150 8-1:1.0: probe with driver rtl8150 failed with error -5
[  557.779401][ T5915] usb 8-1: USB disconnect, device number 4
[  557.939604][T24908] netlink: 'syz.3.5672': attribute type 10 has an invalid length.
[  559.030739][ T5883] usb 8-1: new high-speed USB device number 5 using dummy_hcd
[  559.198246][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  559.212983][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  559.216649][ T5883] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0
[  559.225865][ T5883] usb 8-1: New USB device found, idVendor=07c9, idProduct=0012, bcdDevice=c2.f4
[  559.229341][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  559.232513][ T5883] usb 8-1: Product: syz
[  559.236735][ T5883] usb 8-1: Manufacturer: syz
[  559.238581][ T5883] usb 8-1: SerialNumber: syz
[  559.243554][ T5883] usb 8-1: config 0 descriptor??
[  559.273205][T24963] netlink: 'syz.3.5694': attribute type 2 has an invalid length.
[  559.419075][T24968] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5696'.
[  559.478061][ T5883] usb 8-1: USB disconnect, device number 5
[  559.499657][T24968] netlink: 'syz.3.5696': attribute type 10 has an invalid length.
[  559.503827][T24968] bridge_slave_1: left allmulticast mode
[  559.506755][T24968] bridge_slave_1: left promiscuous mode
[  559.511512][T24968] bridge0: port 2(bridge_slave_1) entered disabled state
[  559.519192][T24968] bridge_slave_1: entered promiscuous mode
[  559.521702][T24968] bridge_slave_1: entered allmulticast mode
[  559.535334][T24968] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link
[  560.258124][T25012] netlink: 'syz.7.5714': attribute type 11 has an invalid length.
[  561.114957][   T33] kauditd_printk_skb: 74 callbacks suppressed
[  561.114973][   T33] audit: type=1326 audit(2000000013.985:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25034 comm="syz.3.5722" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4df8ebe9 code=0x7ffc0000
[  561.124316][   T33] audit: type=1326 audit(2000000013.985:328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25034 comm="syz.3.5722" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4df8ebe9 code=0x7ffc0000
[  561.148515][   T33] audit: type=1326 audit(2000000013.985:329): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25034 comm="syz.3.5722" exe="/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7f1d4df8ebe9 code=0x7ffc0000
[  561.160210][   T33] audit: type=1326 audit(2000000013.985:330): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25034 comm="syz.3.5722" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4df8ebe9 code=0x7ffc0000
[  561.169731][   T33] audit: type=1326 audit(2000000013.985:331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25034 comm="syz.3.5722" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4df8ebe9 code=0x7ffc0000
[  561.178039][   T33] audit: type=1326 audit(2000000013.985:332): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25034 comm="syz.3.5722" exe="/syz-executor" sig=0 arch=c000003e syscall=18 compat=0 ip=0x7f1d4df8ebe9 code=0x7ffc0000
[  561.185835][   T33] audit: type=1326 audit(2000000013.985:333): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25034 comm="syz.3.5722" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4df8ebe9 code=0x7ffc0000
[  561.202710][   T33] audit: type=1326 audit(2000000013.985:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25034 comm="syz.3.5722" exe="/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1d4df8ebe9 code=0x7ffc0000
[  561.209747][   T33] audit: type=1326 audit(2000000013.985:335): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25034 comm="syz.3.5722" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4df8ebe9 code=0x7ffc0000
[  561.217070][   T33] audit: type=1326 audit(2000000014.003:336): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25034 comm="syz.3.5722" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4df8ebe9 code=0x7ffc0000
[  561.568358][T25044] cgroup: none used incorrectly
[  561.662574][T25054] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609)
[  561.666593][T25054] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647
[  561.888117][T25076] sctp: [Deprecated]: syz.2.5741 (pid 25076) Use of struct sctp_assoc_value in delayed_ack socket option.
[  561.888117][T25076] Use struct sctp_sack_info instead
[  562.015630][T25084] loop7: detected capacity change from 0 to 256
[  562.027105][T25084] exfat: Deprecated parameter 'utf8'
[  562.028921][T25084] exfat: Unknown parameter 'iocharseC'
[  562.033838][T25084] Invalid source name
[  562.156974][T25102] loop7: detected capacity change from 0 to 512
[  562.193399][T25102] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  562.199133][T25102] ext4 filesystem being mounted at /171/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  562.218151][T25102] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.5752: corrupted inode contents
[  562.226089][T25102] EXT4-fs error (device loop7): ext4_dirty_inode:6538: inode #2: comm syz.7.5752: mark_inode_dirty error
[  562.232540][T25102] EXT4-fs error (device loop7): ext4_do_update_inode:5653: inode #2: comm syz.7.5752: corrupted inode contents
[  562.239922][T25102] EXT4-fs error (device loop7): __ext4_ext_dirty:206: inode #2: comm syz.7.5752: mark_inode_dirty error
[  562.248171][T25102] EXT4-fs error (device loop7): ext4_lookup:1784: inode #18: comm syz.7.5752: 'bus' linked to parent dir
[  562.277395][T23312] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  562.430856][T25114] loop7: detected capacity change from 0 to 4096
[  563.003598][T25153] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5771'.
[  563.011674][T25153] netem: change failed
[  563.349004][ T5883] usb 8-1: new high-speed USB device number 6 using dummy_hcd
[  563.528668][ T5883] usb 8-1: Using ep0 maxpacket: 16
[  563.548218][ T5883] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  563.575419][ T5883] usb 8-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  563.581905][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  563.587533][ T5883] usb 8-1: Product: syz
[  563.590645][ T5883] usb 8-1: Manufacturer: syz
[  563.592450][ T5883] usb 8-1: SerialNumber: syz
[  563.656349][ T5883] usb 8-1: config 0 descriptor??
[  563.733252][ T5883] hub 8-1:0.0: bad descriptor, ignoring hub
[  563.740300][ T5883] hub 8-1:0.0: probe with driver hub failed with error -5
[  563.745314][ T5883] usb 8-1: Quirk or no altset; falling back to MIDI 1.0
[  563.770041][ T5883] snd-usb-audio 8-1:0.0: probe with driver snd-usb-audio failed with error -2
[  564.001407][    T9] usb 8-1: USB disconnect, device number 6
[  565.457506][T25233] erspan1: entered allmulticast mode
[  565.585309][T25246] bridge0: port 3(syz_tun) entered blocking state
[  565.588067][T25246] bridge0: port 3(syz_tun) entered disabled state
[  565.590954][T25246] syz_tun: entered allmulticast mode
[  565.596027][T25246] syz_tun: entered promiscuous mode
[  565.598658][T25246] bridge0: port 3(syz_tun) entered blocking state
[  565.601461][T25246] bridge0: port 3(syz_tun) entered forwarding state
[  565.756936][T25261] netlink: 384 bytes leftover after parsing attributes in process `syz.7.5813'.
[  565.814893][T25267] loop7: detected capacity change from 0 to 2048
[  565.836196][T25267] UDF-fs: warning (device loop7): udf_load_vrs: No anchor found
[  565.838711][T25267] UDF-fs: Scanning with blocksize 512 failed
[  565.851889][T25267] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  566.220421][T25304] C: renamed from team_slave_0
[  566.230898][T25304] netlink: 'syz.3.5834': attribute type 2 has an invalid length.
[  566.234640][T25304] netlink: 116 bytes leftover after parsing attributes in process `syz.3.5834'.
[  566.241562][T25304] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  567.136737][T25316] loop7: detected capacity change from 0 to 32768
[  567.570927][T25352] netlink: 14 bytes leftover after parsing attributes in process `syz.7.5851'.
[  567.576537][T25352] hsr_slave_0: left promiscuous mode
[  567.580342][T25352] hsr_slave_1: left promiscuous mode
[  567.802050][T25365] loop7: detected capacity change from 0 to 1024
[  567.808098][T25365] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869)
[  567.811842][T25365] EXT4-fs (loop7): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  567.822391][T25365] EXT4-fs (loop7): invalid journal inode
[  567.824571][T25365] EXT4-fs (loop7): can't get journal size
[  567.829073][T25365] EXT4-fs error (device loop7): ext4_protect_reserved_inode:182: inode #2: comm syz.7.5857: blocks 48-48 from inode overlap system zone
[  567.834759][T25365] EXT4-fs (loop7): failed to initialize system zone (-117)
[  567.837951][T25365] EXT4-fs (loop7): mount failed
[  568.504373][T25387] loop7: detected capacity change from 0 to 1024
[  568.792105][T25404] afs: Bad value for 'source'
[  568.849861][T25408] loop7: detected capacity change from 0 to 1024
[  568.882989][T25408] EXT4-fs (loop7): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  568.888472][T25408] ext4 filesystem being mounted at /210/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  569.214092][ T5856] Bluetooth: hci1: SCO packet for unknown connection handle 200
[  569.554071][  T267] EXT4-fs error (device loop7): ext4_map_blocks:814: inode #15: comm kworker/u10:2: lblock 0 mapped to illegal pblock 0 (length 1)
[  569.586355][  T267] EXT4-fs (loop7): Remounting filesystem read-only
[  569.597691][T23312] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  569.684607][T25451] netlink: 'syz.3.5890': attribute type 21 has an invalid length.
[  569.726424][T25454] loop7: detected capacity change from 0 to 128
[  569.779791][T25454] hpfs: Bad version 183,140. Mount readonly to go around
[  569.790069][T25454] hpfs: please try recent version of HPFS driver at http://artax.karlin.mff.cuni.cz/~mikulas/vyplody/hpfs/index-e.cgi and if it still can't understand this format, contact author - mikulas@artax.karlin.mff.cuni.cz
[  569.997224][T25474] atomic_op ffff88803aff6198 conn xmit_atomic 0000000000000000
[  570.479341][T25511] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  570.950076][T25523] binder: 25522:25523 ioctl 4018620d 0 returned -22
[  571.016175][T25526] binder: 25522:25526 ioctl c018620c 0 returned -14
[  571.212547][T25540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5926'.
[  571.217399][T25540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5926'.
[  571.220950][T25540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5926'.
[  571.226487][T25540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5926'.
[  571.230391][T25540] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5926'.
[  572.053172][   T33] kauditd_printk_skb: 3 callbacks suppressed
[  572.053196][   T33] audit: type=1326 audit(2000000024.237:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25565 comm="syz.7.5938" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd9a0b8ebe9 code=0x0
[  572.760588][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[  572.762698][ T1362] ieee802154 phy1 wpan1: encryption failed: -22
[  573.275044][T25625] veth5: entered promiscuous mode
[  573.451301][ T5883] usb 8-1: new high-speed USB device number 7 using dummy_hcd
[  573.611592][ T5883] usb 8-1: Using ep0 maxpacket: 8
[  573.618619][ T5883] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  573.622513][ T5883] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.625746][ T5883] usb 8-1: Product: syz
[  573.627618][ T5883] usb 8-1: Manufacturer: syz
[  573.629587][ T5883] usb 8-1: SerialNumber: syz
[  573.635283][ T5883] usb 8-1: config 0 descriptor??
[  573.776171][   T10] libceph: connect (1)[c::]:6789 error -101
[  573.778932][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  573.791553][   T10] libceph: connect (1)[c::]:6789 error -101
[  573.794792][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  573.867145][ T5883] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  574.075509][   T10] libceph: connect (1)[c::]:6789 error -101
[  574.078013][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  574.617286][   T10] libceph: connect (1)[c::]:6789 error -101
[  574.620083][   T10] libceph: mon0 (1)[c::]:6789 connect error
[  574.627308][T25672] ceph: No mds server is up or the cluster is laggy
[  575.174083][ T5883] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71
[  575.179996][ T5883] usb 8-1: USB disconnect, device number 7
[  576.352440][T25740] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5998'.
[  576.962631][T25764] loop7: detected capacity change from 0 to 32768
[  576.977148][T25764] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  577.015307][T25764] XFS (loop7): Ending clean mount
[  577.027088][T25764] XFS (loop7): Quotacheck needed: Please wait.
[  577.083109][T25764] XFS (loop7): Quotacheck: Done.
[  577.111226][T25764] XFS (loop7): User initiated shutdown received.
[  577.120359][T25764] XFS (loop7): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x71/0x150 (fs/xfs/xfs_fsops.c:472).  Shutting down filesystem.
[  577.125755][T25764] XFS (loop7): Please unmount the filesystem and rectify the problem(s)
[  577.159614][T23312] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  577.398786][T25790] loop7: detected capacity change from 0 to 2048
[  577.460024][T25797] NILFS (loop7): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  577.494008][T25797] NILFS (loop7): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3)
[  577.498832][T25797] NILFS error (device loop7): nilfs_bmap_propagate: broken bmap (inode number=4)
[  577.522877][T25797] Remounting filesystem read-only
[  577.548874][   T33] audit: type=1800 audit(2000000029.382:341): pid=25796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6019" name="file1" dev="tmpfs" ino=10250 res=0 errno=0
[  577.559777][T23312] NILFS (loop7): disposed unprocessed dirty file(s) when stopping log writer
[  579.018689][T25826] syz.7.6030 uses old SIOCAX25GETINFO
[  579.059749][T25828] netlink: 56 bytes leftover after parsing attributes in process `syz.2.6033'.
[  579.142856][T25838] Invalid source name
[  579.143530][T25837] loop7: detected capacity change from 0 to 1024
[  579.144620][T25838] UBIFS error (pid: 25838): cannot open "ubifs", error -22
[  579.152341][T25837] EXT4-fs: Ignoring removed nobh option
[  579.166679][T25837] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  579.209931][T23312] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  579.571748][T25861] loop7: detected capacity change from 0 to 128
[  581.247330][T25903] netlink: set zone limit has 4 unknown bytes
[  581.254244][T25903] netlink: del zone limit has 4 unknown bytes
[  581.628988][    T9] usb 8-1: new full-speed USB device number 8 using dummy_hcd
[  581.911681][    T9] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  581.933525][    T9] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2ced, bcdDevice= 0.00
[  581.937297][    T9] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  581.942905][    T9] usb 8-1: config 0 descriptor??
[  581.945898][T25915] raw-gadget.0 gadget.7: fail, usb_ep_enable returned -22
[  582.039476][T25942] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0)
[  582.083987][T25944] netlink: 'syz.2.6080': attribute type 3 has an invalid length.
[  582.326828][T25963] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6085'.
[  582.329731][T25963] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6085'.
[  582.333632][T25963] netlink: 52 bytes leftover after parsing attributes in process `syz.2.6085'.
[  582.391146][    T9] kone 0003:1E7D:2CED.0013: hidraw0: USB HID v1.00 Device [HID 1e7d:2ced] on usb-dummy_hcd.7-1/input0
[  582.600792][ T5883] usb 8-1: USB disconnect, device number 8
[  583.573781][T26014] loop7: detected capacity change from 0 to 1024
[  583.607857][T18645] hfsplus: b-tree write err: -5, ino 4
[  584.740459][T26051] loop7: detected capacity change from 0 to 64
[  584.824450][T23312] VFS: Lookup of '.' in minix loop7 would have caused loop
[  584.831531][T23312] VFS: Lookup of '.' in minix loop7 would have caused loop
[  585.390173][   T13] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  585.467059][T26066] blktrace: Concurrent blktraces are not allowed on loop4
[  585.912081][   T13] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.022005][   T13] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.200262][   T13] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  586.445622][T23274] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  586.460399][T23274] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  586.467500][T23274] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  586.471138][   T13] bridge_slave_1: left allmulticast mode
[  586.473650][T23274] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  586.476555][   T13] bridge_slave_1: left promiscuous mode
[  586.483938][T23274] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  586.486902][   T13] bridge0: port 2(bridge_slave_1) entered disabled state
[  586.517321][   T13] bridge_slave_0: left allmulticast mode
[  586.519904][   T13] bridge_slave_0: left promiscuous mode
[  586.522191][   T13] bridge0: port 1(bridge_slave_0) entered disabled state
[  587.385106][   T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  587.392013][   T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  587.397356][   T13] bond0 (unregistering): Released all slaves
[  587.549047][   T13] : left promiscuous mode
[  587.586416][T26140] netlink: 'syz.3.6140': attribute type 15 has an invalid length.
[  587.983789][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  587.986838][   T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[  588.001529][   T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  588.004719][   T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[  588.024455][   T13] veth1_macvtap: left promiscuous mode
[  588.026198][   T13] veth0_macvtap: left promiscuous mode
[  588.028033][   T13] veth1_vlan: left promiscuous mode
[  588.032751][   T13] veth0_vlan: left promiscuous mode
[  588.298240][T26241] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[  588.301195][T26241] IPv6: NLM_F_CREATE should be set when creating new route
[  588.682532][T23274] Bluetooth: hci0: command tx timeout
[  588.839794][   T13] team0 (unregistering): Port device team_slave_1 removed
[  588.910410][   T13] team0 (unregistering): Port device team_slave_0 removed
[  590.649705][T26093] chnl_net:caif_netlink_parms(): no params data found
[  590.708075][T26261] 9pnet_virtio: no channels available for device syz
[  590.801508][T26241] lo: entered allmulticast mode
[  590.803885][T26241] tunl0: entered allmulticast mode
[  590.815720][T26241] gre0: entered allmulticast mode
[  590.839734][T26241] gretap0: entered allmulticast mode
[  590.846982][T26241] erspan0: entered allmulticast mode
[  590.860491][T26241] ip_vti0: entered allmulticast mode
[  590.870450][T26241] ip6_vti0: entered allmulticast mode
[  590.876810][T26241] sit0: entered allmulticast mode
[  590.887495][T23274] Bluetooth: hci0: command tx timeout
[  590.888853][T26241] ip6tnl0: entered allmulticast mode
[  590.898716][T26241] tipc: Resetting bearer <eth:ip6gre0>
[  590.904764][T26241] ip6gre0: entered allmulticast mode
[  590.916844][T26241] bridge0: port 3(syz_tun) entered disabled state
[  590.921456][T26241] ip6gretap0: entered allmulticast mode
[  590.931812][T26241] bridge0: port 2(bridge_slave_1) entered disabled state
[  590.934577][T26241] bridge0: port 1(bridge_slave_0) entered disabled state
[  590.938231][T26241] bridge0: entered allmulticast mode
[  590.944752][T26241] vcan0: entered allmulticast mode
[  590.952698][T26241] bond0: entered allmulticast mode
[  590.954426][T26241] @: entered allmulticast mode
[  590.956176][T26241] bond_slave_1: entered allmulticast mode
[  590.968673][T26241] team0: entered allmulticast mode
[  590.970330][T26241] C: entered allmulticast mode
[  590.972830][T26241] team_slave_1: entered allmulticast mode
[  590.975057][T26241] geneve0: entered allmulticast mode
[  590.986676][T26241] dummy0: entered allmulticast mode
[  590.989349][T26241] nlmon0: entered allmulticast mode
[  590.994937][T26241] caif0: entered allmulticast mode
[  590.997676][T26241] veth0: entered allmulticast mode
[  591.003467][T26241] veth1: entered allmulticast mode
[  591.010783][T26241] wg0: entered allmulticast mode
[  591.017023][T26241] wg1: entered allmulticast mode
[  591.022171][T26241] wg2: entered allmulticast mode
[  591.028804][T26241] veth0_to_bridge: entered allmulticast mode
[  591.044139][T26241] veth1_to_bridge: entered allmulticast mode
[  591.055148][T26241] veth0_to_bond: entered allmulticast mode
[  591.064511][T26241] veth1_to_bond: entered allmulticast mode
[  591.077437][T26241] veth0_to_team: entered allmulticast mode
[  591.086781][T26241] veth1_to_team: entered allmulticast mode
[  591.096808][T26241] xfrm0: entered allmulticast mode
[  591.102848][T26241] veth0_to_hsr: entered allmulticast mode
[  591.109537][T26241] hsr_slave_0: entered allmulticast mode
[  591.115339][T26241] veth1_to_hsr: entered allmulticast mode
[  591.123212][T26241] hsr_slave_1: entered allmulticast mode
[  591.128727][T26241] hsr0: entered allmulticast mode
[  591.137029][T26241] veth1_virt_wifi: entered allmulticast mode
[  591.144749][T26241] veth0_virt_wifi: entered allmulticast mode
[  591.152889][T26241] net veth1_virt_wifi virt_wifi0: entered allmulticast mode
[  591.157924][T26241] veth1_vlan: entered allmulticast mode
[  591.165287][T26241] veth0_vlan: entered allmulticast mode
[  591.182972][T26241] vlan0: entered allmulticast mode
[  591.184803][T26241] vlan1: entered allmulticast mode
[  591.186889][T26241] macvlan0: left promiscuous mode
[  591.188801][T26241] macvlan0: entered allmulticast mode
[  591.191609][T26241] macvlan1: entered allmulticast mode
[  591.197979][T26241] ipvlan0: entered allmulticast mode
[  591.200315][T26241] ipvlan1: entered allmulticast mode
[  591.202649][T26241] veth1_macvtap: entered allmulticast mode
[  591.209329][T26241] veth0_macvtap: entered allmulticast mode
[  591.214777][T26241] tipc: Resetting bearer <eth:macvtap0>
[  591.218895][T26241] macvtap0: entered allmulticast mode
[  591.229447][T26241] macsec0: entered allmulticast mode
[  591.245304][T26241] geneve1: entered allmulticast mode
[  591.253284][T26241] netdevsim netdevsim2 netdevsim1: entered allmulticast mode
[  591.258739][T26241] netdevsim netdevsim2 netdevsim2: entered allmulticast mode
[  591.269643][T26241] netdevsim netdevsim2 netdevsim3: entered allmulticast mode
[  591.277460][T26241] mac80211_hwsim hwsim4 wlan0: left promiscuous mode
[  591.279643][T26241] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode
[  591.288043][T26241] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode
[  591.292985][T26241] syztnl2: entered allmulticast mode
[  591.295091][T26241] ip6_vti1: entered allmulticast mode
[  591.298251][T26241] vlan2: entered allmulticast mode
[  591.302342][T26241] ip6gretap1: entered allmulticast mode
[  591.304507][T26241] mac80211_hwsim hwsim10 wlan2: entered allmulticast mode
[  591.311577][T26241] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode
[  591.315231][T26241] sit1: entered allmulticast mode
[  591.317024][T26241] syztnl1: entered allmulticast mode
[  591.318817][T26241] mac80211_hwsim hwsim12 wlan3: entered allmulticast mode
[  591.321649][T26241] bond2: entered allmulticast mode
[  591.324711][T26241] gre1: entered allmulticast mode
[  591.327011][T26241] ip6tnl1: entered allmulticast mode
[  591.332125][T26241] macvlan2: left promiscuous mode
[  591.333932][T26241] macvlan2: entered allmulticast mode
[  591.339269][T26241] vti0: entered allmulticast mode
[  591.343535][T26241] sit2: entered allmulticast mode
[  591.347349][T26241] sit3: entered allmulticast mode
[  591.349501][T26241] ip6gre1: entered allmulticast mode
[  591.353255][T26241] veth2: entered allmulticast mode
[  591.355184][T26241] veth3: left promiscuous mode
[  591.358063][T26241] macsec1: entered allmulticast mode
[  591.412318][T26266] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6149'.
[  591.466700][ T5878] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  591.469753][ T5878] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  591.472538][ T5878] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  591.488957][ T5878] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  591.552468][T26307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6153'.
[  591.555475][T26307] netlink: 'syz.3.6153': attribute type 30 has an invalid length.
[  591.558223][T26307] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6153'.
[  591.616113][T26093] bridge0: port 1(bridge_slave_0) entered blocking state
[  591.619154][T26093] bridge0: port 1(bridge_slave_0) entered disabled state
[  591.621568][T26093] bridge_slave_0: entered allmulticast mode
[  591.625300][T26093] bridge_slave_0: entered promiscuous mode
[  591.631258][T26093] bridge0: port 2(bridge_slave_1) entered blocking state
[  591.633900][T26093] bridge0: port 2(bridge_slave_1) entered disabled state
[  591.639154][T26093] bridge_slave_1: entered allmulticast mode
[  591.652073][T26093] bridge_slave_1: entered promiscuous mode
[  591.750950][T26093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  591.772802][T26093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  591.832228][T26093] team0: Port device team_slave_0 added
[  591.836500][T26093] team0: Port device team_slave_1 added
[  591.899555][T26093] batman_adv: batadv0: Adding interface: batadv_slave_0
[  591.902976][T26093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  591.912301][T26093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  591.921006][T26093] batman_adv: batadv0: Adding interface: batadv_slave_1
[  591.926413][T26093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  591.946777][T26093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  592.029058][T26093] hsr_slave_0: entered promiscuous mode
[  592.039113][T26093] hsr_slave_1: entered promiscuous mode
[  592.044870][T26093] debugfs: 'hsr0' already exists in 'hsr'
[  592.047501][T26093] Cannot create hsr debugfs directory
[  592.083515][T26448] netlink: 495 bytes leftover after parsing attributes in process `syz.3.6159'.
[  592.336631][T26093] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  592.348743][T26093] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  592.364915][T26093] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  592.390115][T26093] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  592.426974][T26093] bridge0: port 2(bridge_slave_1) entered blocking state
[  592.430380][T26093] bridge0: port 2(bridge_slave_1) entered forwarding state
[  592.433287][T26093] bridge0: port 1(bridge_slave_0) entered blocking state
[  592.435919][T26093] bridge0: port 1(bridge_slave_0) entered forwarding state
[  592.484481][T26093] 8021q: adding VLAN 0 to HW filter on device bond0
[  592.495292][ T3633] bridge0: port 1(bridge_slave_0) entered disabled state
[  592.503523][ T3633] bridge0: port 2(bridge_slave_1) entered disabled state
[  592.525426][T26093] 8021q: adding VLAN 0 to HW filter on device team0
[  592.543927][ T3633] bridge0: port 1(bridge_slave_0) entered blocking state
[  592.547018][ T3633] bridge0: port 1(bridge_slave_0) entered forwarding state
[  592.558097][ T3633] bridge0: port 2(bridge_slave_1) entered blocking state
[  592.561070][ T3633] bridge0: port 2(bridge_slave_1) entered forwarding state
[  592.773849][T26093] 8021q: adding VLAN 0 to HW filter on device batadv0
[  592.960060][T26093] veth0_vlan: entered promiscuous mode
[  592.969267][T26093] veth1_vlan: entered promiscuous mode
[  592.990671][T26093] veth0_macvtap: entered promiscuous mode
[  592.999472][T26093] veth1_macvtap: entered promiscuous mode
[  593.011949][T26093] batman_adv: batadv0: Interface activated: batadv_slave_0
[  593.021913][T26093] batman_adv: batadv0: Interface activated: batadv_slave_1
[  593.029934][ T5878] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  593.032687][ T5878] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  593.037613][ T5878] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  593.040862][ T5878] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  593.110266][T23274] Bluetooth: hci0: command tx timeout
[  593.133355][  T267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  593.136489][  T267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  593.219312][  T267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  593.223068][  T267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  594.117222][T26610] netlink: 'syz.2.6194': attribute type 4 has an invalid length.
[  594.617268][ T5899] usb 9-1: new high-speed USB device number 2 using dummy_hcd
[  594.777762][ T5899] usb 9-1: Using ep0 maxpacket: 8
[  594.782229][ T5899] usb 9-1: config 162 has an invalid interface number: 161 but max is 1
[  594.785912][ T5899] usb 9-1: config 162 has an invalid interface number: 187 but max is 1
[  594.789489][ T5899] usb 9-1: config 162 has an invalid descriptor of length 0, skipping remainder of the config
[  594.793653][ T5899] usb 9-1: config 162 has no interface number 0
[  594.796248][ T5899] usb 9-1: config 162 has no interface number 1
[  594.799551][ T5899] usb 9-1: config 162 interface 161 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  594.804821][ T5899] usb 9-1: config 162 interface 187 altsetting 1 endpoint 0x5 has invalid wMaxPacketSize 0
[  594.808813][ T5899] usb 9-1: config 162 interface 187 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  594.814285][ T5899] usb 9-1: config 162 interface 161 has no altsetting 0
[  594.817035][ T5899] usb 9-1: config 162 interface 187 has no altsetting 0
[  594.826276][ T5899] usb 9-1: New USB device found, idVendor=13d3, idProduct=3346, bcdDevice=62.b7
[  594.830019][ T5899] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  594.833659][ T5899] usb 9-1: Product: syz
[  594.835388][ T5899] usb 9-1: Manufacturer: syz
[  594.837423][ T5899] usb 9-1: SerialNumber: syz
[  595.063530][ T5899] usb 9-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  595.071612][ T5899] usb 9-1: ath9k_htc: Device endpoint numbers are not the expected ones
[  595.082736][ T5899] usb 9-1: USB disconnect, device number 2
[  595.222593][T26652] netlink: 'syz.2.6206': attribute type 1 has an invalid length.
[  595.334617][T23274] Bluetooth: hci0: command tx timeout
[  595.692796][T26678] Bluetooth: MGMT ver 1.23
[  597.543203][T26742] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6246'.
[  598.016407][T26761] trusted_key: encrypted_key: hex blob is missing
[  599.112796][   T33] audit: type=1326 audit(2000000049.560:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26808 comm="syz.2.6274" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c5b8ebe9 code=0x7ffc0000
[  599.123125][   T33] audit: type=1326 audit(2000000049.569:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26808 comm="syz.2.6274" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c5b8ebe9 code=0x7ffc0000
[  599.132535][   T33] audit: type=1326 audit(2000000049.578:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26808 comm="syz.2.6274" exe="/syz-executor" sig=0 arch=c000003e syscall=104 compat=0 ip=0x7f57c5b8ebe9 code=0x7ffc0000
[  599.150113][   T33] audit: type=1326 audit(2000000049.578:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26808 comm="syz.2.6274" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c5b8ebe9 code=0x7ffc0000
[  599.159182][   T33] audit: type=1326 audit(2000000049.578:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26808 comm="syz.2.6274" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f57c5b8ebe9 code=0x7ffc0000
[  599.380433][T26819] overlayfs: failed to clone upperpath
[  599.705253][T26823] overlayfs: failed to clone upperpath
[  600.404800][T26847] fuse: Bad value for 'fd'
[  600.824800][T26853] netlink: 48 bytes leftover after parsing attributes in process `syz.3.6294'.
[  600.828758][T26853] tc_dump_action: action bad kind
[  601.795058][T26907] C: renamed from team_slave_0 (while UP)
[  601.803838][T26907] netlink: 'syz.8.6320': attribute type 1 has an invalid length.
[  601.806959][T26907] netlink: 152 bytes leftover after parsing attributes in process `syz.8.6320'.
[  601.811233][T26907] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check.
[  601.985430][T26920] futex_wake_op: syz.3.6326 tries to shift op by 32; fix this program
[  602.010308][T26922] loop8: detected capacity change from 0 to 64
[  602.046949][T26922] Trying to free block not in datazone
[  602.049477][T26922] Trying to free block not in datazone
[  602.055634][T26922] Trying to free block not in datazone
[  602.064597][T26922] syz.8.6327: attempt to access beyond end of device
[  602.064597][T26922] loop8: rw=0, sector=8192, nr_sectors = 2 limit=64
[  602.073642][T26922] Buffer I/O error on dev loop8, logical block 4096, async page read
[  602.077035][T26922] syz.8.6327: attempt to access beyond end of device
[  602.077035][T26922] loop8: rw=0, sector=8192, nr_sectors = 2 limit=64
[  602.082351][T26922] Buffer I/O error on dev loop8, logical block 4096, async page read
[  602.086908][   T33] audit: type=1800 audit(2000000052.338:347): pid=26922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.6327" name="file1" dev="loop8" ino=5 res=0 errno=0
[  602.439929][T26940] netlink: 'syz.2.6333': attribute type 2 has an invalid length.
[  602.879769][T26932] loop8: detected capacity change from 0 to 32768
[  603.360841][T26975] overlayfs: failed to clone upperpath
[  603.800197][T23274] Bluetooth: hci1: unexpected event for opcode 0x202a
[  604.346399][T26992] loop8: detected capacity change from 0 to 512
[  604.350850][T26992] EXT4-fs: Ignoring removed mblk_io_submit option
[  604.367930][T26992] EXT4-fs (loop8): orphan cleanup on readonly fs
[  604.370806][T26992] EXT4-fs (loop8): Cannot turn on journaled quota: type 0: error -13
[  604.395090][T26992] EXT4-fs error (device loop8): ext4_clear_blocks:876: inode #13: comm syz.8.6352: attempt to clear invalid blocks 2 len 1
[  604.406904][T26992] EXT4-fs (loop8): Remounting filesystem read-only
[  604.410362][T26992] EXT4-fs (loop8): 1 truncate cleaned up
[  604.413690][T26992] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  604.421661][T26992] EXT4-fs (loop8): Quota file not on filesystem root. Journaled quota will not work
[  604.444236][T26093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  604.951205][T27024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.6365'.
[  605.499947][ T5899] usb 9-1: new high-speed USB device number 3 using dummy_hcd
[  605.679378][ T5899] usb 9-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc
[  605.692055][ T5899] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  605.695585][ T5899] usb 9-1: Product: syz
[  605.697377][ T5899] usb 9-1: Manufacturer: syz
[  605.699273][ T5899] usb 9-1: SerialNumber: syz
[  605.703892][ T5899] usb 9-1: config 0 descriptor??
[  605.709188][ T5899] i2c-tiny-usb 9-1:0.0: version 6d.cc found at bus 009 address 003
[  605.926121][ T5899]  (null): failure setting delay to 10us
[  605.930113][ T5899] i2c-tiny-usb 9-1:0.0: probe with driver i2c-tiny-usb failed with error -5
[  605.936569][ T5899] usb 9-1: USB disconnect, device number 3
[  606.449394][T27079] overlayfs: failed to clone upperpath
[  606.456732][T27079] overlayfs: failed to clone upperpath
[  607.561659][T27113] loop8: detected capacity change from 0 to 2048
[  607.578571][T27113] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  608.333842][ T5912] usb 9-1: new high-speed USB device number 4 using dummy_hcd
[  608.439627][T27176] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6428'.
[  608.442622][T27176] netlink: 4 bytes leftover after parsing attributes in process `syz.3.6428'.
[  608.504891][ T5912] usb 9-1: Using ep0 maxpacket: 16
[  608.508785][ T5912] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11
[  608.513357][ T5912] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8
[  608.518720][ T5912] usb 9-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[  608.525442][ T5912] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  608.528918][ T5912] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  608.531846][ T5912] usb 9-1: SerialNumber: syz
[  608.538703][T27129] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  608.772861][ T5912] cdc_ether 9-1:1.0: probe with driver cdc_ether failed with error -22
[  608.777552][ T5912] usb 9-1: USB disconnect, device number 4
[  609.451911][T27237] loop8: detected capacity change from 0 to 4096
[  609.464927][T27237] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  609.499001][T26093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  609.794864][T27250] loop8: detected capacity change from 0 to 32768
[  609.799258][T27250] XFS: attr2 mount option is deprecated.
[  609.844955][T27250] XFS (loop8): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  609.888867][T27250] XFS (loop8): Ending clean mount
[  609.899220][T27250] XFS (loop8): Quotacheck needed: Please wait.
[  609.962438][T27250] XFS (loop8): Quotacheck: Done.
[  610.122953][T27270] sctp: [Deprecated]: syz.2.6456 (pid 27270) Use of int in max_burst socket option deprecated.
[  610.122953][T27270] Use struct sctp_assoc_value instead
[  610.471963][T26093] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  611.132437][T27284] loop8: detected capacity change from 0 to 32768
[  611.965336][T27308] loop8: detected capacity change from 0 to 40427
[  611.976924][T27308] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504)
[  611.980283][T27308] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock
[  611.984116][T27308] F2FS-fs (loop8): build fault injection rate: 17008
[  611.986985][T27308] F2FS-fs (loop8): build fault injection type: 0x7
[  611.993198][T27308] F2FS-fs (loop8): invalid crc value
[  612.086530][T27308] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  612.099495][T27308] F2FS-fs (loop8): Try to recover 1th superblock, ret: 0
[  612.105685][   T33] audit: type=1800 audit(2000000061.711:348): pid=27327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.6477" name="SYSV00000000" dev="hugetlbfs" ino=4 res=0 errno=0
[  612.115901][T27308] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e5
[  612.224050][T26093] syz-executor: attempt to access beyond end of device
[  612.224050][T26093] loop8: rw=2049, sector=45096, nr_sectors = 8 limit=40427
[  612.237114][T26093] CPU: 0 UID: 0 PID: 26093 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) 
[  612.237139][T26093] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  612.237149][T26093] Call Trace:
[  612.237156][T26093]  <TASK>
[  612.237164][T26093]  dump_stack_lvl+0x189/0x250
[  612.237189][T26093]  ? __pfx_dump_stack_lvl+0x10/0x10
[  612.237203][T26093]  ? __pfx_queue_work_on+0x10/0x10
[  612.237216][T26093]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  612.237235][T26093]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  612.237259][T26093]  f2fs_handle_critical_error+0x37c/0x540
[  612.237283][T26093]  f2fs_write_end_io+0x886/0xb60
[  612.237308][T26093]  __submit_merged_bio+0x27a/0x6a0
[  612.237332][T26093]  __submit_merged_write_cond+0x255/0x530
[  612.237354][T26093]  f2fs_write_data_pages+0x261d/0x3000
[  612.237395][T26093]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  612.237441][T26093]  ? rcu_is_watching+0x15/0xb0
[  612.237456][T26093]  ? trace_sched_exit_tp+0x36/0x110
[  612.237473][T26093]  ? __schedule+0x17ae/0x4cc0
[  612.237504][T26093]  ? folios_put_refs+0x559/0x640
[  612.237530][T26093]  ? __pfx_folios_put_refs+0x10/0x10
[  612.237578][T26093]  ? __lock_acquire+0xab9/0xd20
[  612.237613][T26093]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  612.237634][T26093]  do_writepages+0x32e/0x550
[  612.237660][T26093]  ? do_raw_spin_unlock+0x4d/0x240
[  612.237678][T26093]  filemap_fdatawrite+0x199/0x240
[  612.237697][T26093]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  612.237778][T26093]  ? do_raw_spin_unlock+0x4d/0x240
[  612.237800][T26093]  f2fs_sync_dirty_inodes+0x31f/0x830
[  612.237827][T26093]  f2fs_write_checkpoint+0x95a/0x1df0
[  612.237862][T26093]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  612.237915][T26093]  ? kill_f2fs_super+0x298/0x6c0
[  612.237935][T26093]  kill_f2fs_super+0x2c3/0x6c0
[  612.237955][T26093]  ? __pfx_kill_f2fs_super+0x10/0x10
[  612.237967][T26093]  ? radix_tree_delete_item+0x2b6/0x400
[  612.237993][T26093]  ? shrinker_free+0x2ce/0x3e0
[  612.238012][T26093]  deactivate_locked_super+0xbc/0x130
[  612.238031][T26093]  cleanup_mnt+0x425/0x4c0
[  612.238047][T26093]  ? lockdep_hardirqs_on+0x9c/0x150
[  612.238069][T26093]  task_work_run+0x1d4/0x260
[  612.238092][T26093]  ? __pfx_task_work_run+0x10/0x10
[  612.238107][T26093]  ? __x64_sys_umount+0x122/0x160
[  612.238131][T26093]  ? exit_to_user_mode_loop+0x40/0x110
[  612.238154][T26093]  exit_to_user_mode_loop+0xec/0x110
[  612.238173][T26093]  do_syscall_64+0x2bd/0x3b0
[  612.238192][T26093]  ? lockdep_hardirqs_on+0x9c/0x150
[  612.238210][T26093]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.238224][T26093]  ? exc_page_fault+0x9f/0xf0
[  612.238244][T26093]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  612.238258][T26093] RIP: 0033:0x7f142198ff17
[  612.238273][T26093] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  612.238284][T26093] RSP: 002b:00007fff84800868 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  612.238301][T26093] RAX: 0000000000000000 RBX: 00007f1421a11c05 RCX: 00007f142198ff17
[  612.238310][T26093] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff84800920
[  612.238319][T26093] RBP: 00007fff84800920 R08: 0000000000000000 R09: 0000000000000000
[  612.238328][T26093] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007fff848019b0
[  612.238337][T26093] R13: 00007f1421a11c05 R14: 000000000009265a R15: 00007fff848019f0
[  612.238361][T26093]  </TASK>
[  612.238391][T26093] F2FS-fs (loop8): Stopped filesystem due to reason: 3
[  612.383521][T27340] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6484'.
[  613.320243][T27362] loop8: detected capacity change from 0 to 32768
[  615.067639][    T9] usb 9-1: new high-speed USB device number 5 using dummy_hcd
[  615.249066][    T9] usb 9-1: Using ep0 maxpacket: 16
[  615.254636][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  615.258804][    T9] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  615.270924][    T9] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  615.276012][    T9] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  615.279451][    T9] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.288083][    T9] usb 9-1: config 0 descriptor??
[  615.939758][    T9] hid_parser_main: 643 callbacks suppressed
[  615.939785][    T9] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[  615.944740][    T9] microsoft 0003:045E:07DA.0014: ignoring exceeding usage max
[  615.952357][    T9] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[  615.960028][    T9] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[  615.963576][    T9] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[  615.968398][    T9] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[  615.971507][    T9] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[  615.974273][    T9] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[  615.976896][    T9] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[  615.979589][    T9] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[  615.982571][    T9] microsoft 0003:045E:07DA.0014: unknown main item tag 0x0
[  615.991330][    T9] microsoft 0003:045E:07DA.0014: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.8-1/input0
[  615.995850][    T9] microsoft 0003:045E:07DA.0014: no inputs found
[  615.998475][    T9] microsoft 0003:045E:07DA.0014: could not initialize ff, continuing anyway
[  616.217835][ T5883] usb 9-1: USB disconnect, device number 5
[  617.972096][T27490] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6531'.
[  617.977192][T27490] netlink: 28 bytes leftover after parsing attributes in process `syz.8.6531'.
[  618.210578][T27500] loop8: detected capacity change from 0 to 8
[  618.232285][T27500] SQUASHFS error: Failed to read block 0x2d7: -5
[  618.236159][T27500] SQUASHFS error: Unable to read metadata cache entry [2d5]
[  618.575742][T27518] netlink: 32 bytes leftover after parsing attributes in process `syz.2.6540'.
[  619.944421][T27552] loop8: detected capacity change from 0 to 1024
[  619.961440][T27552] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[  619.968465][T27552] ext4 filesystem being mounted at /82/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  619.986147][T27552] EXT4-fs error (device loop8): ext4_free_blocks:6696: comm syz.8.6556: Freeing blocks not in datazone - block = 0, count = 16
[  620.184202][T27556] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 21 vs 268369941 free clusters
[  620.295986][T26093] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[  620.407776][T27566] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6559'.
[  620.452575][T27570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6561'.
[  620.457301][T27570] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6561'.
[  620.535626][T27578] netlink: 104 bytes leftover after parsing attributes in process `syz.3.6565'.
[  620.573628][T27580] loop8: detected capacity change from 0 to 256
[  620.588644][T27583] openvswitch: netlink: Geneve option length err (len 612, max 255).
[  620.595757][T27580] FAT-fs (loop8): Directory bread(block 64) failed
[  620.598662][T27580] FAT-fs (loop8): Directory bread(block 65) failed
[  620.601738][T27580] FAT-fs (loop8): Directory bread(block 66) failed
[  620.604507][T27580] FAT-fs (loop8): Directory bread(block 67) failed
[  620.609026][T27580] FAT-fs (loop8): Directory bread(block 68) failed
[  620.611690][T27580] FAT-fs (loop8): Directory bread(block 69) failed
[  620.614855][T27580] FAT-fs (loop8): Directory bread(block 70) failed
[  620.618341][T27580] FAT-fs (loop8): Directory bread(block 71) failed
[  620.621210][T27580] FAT-fs (loop8): Directory bread(block 72) failed
[  620.623993][T27580] FAT-fs (loop8): Directory bread(block 73) failed
[  620.710002][T27591] netlink: 8 bytes leftover after parsing attributes in process `syz.8.6570'.
[  621.910025][T27614] /dev/loop3: Can't lookup blockdev
[  621.979561][   T33] audit: type=1326 audit(2000000070.954:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27638 comm="syz.3.6588" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1d4df8ebe9 code=0x0
[  623.001442][T27655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6595'.
[  623.611250][T27691] netlink: 28 bytes leftover after parsing attributes in process `syz.2.6609'.
[  623.649935][T27691] bridge_slave_1: left allmulticast mode
[  623.652853][T27691] bridge_slave_1: left promiscuous mode
[  623.658399][T27691] bridge0: port 2(bridge_slave_1) entered disabled state
[  624.809807][   T33] audit: type=1326 audit(2000000073.601:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27707 comm="syz.3.6618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4df8ebe9 code=0x7fc00000
[  624.819554][   T33] audit: type=1326 audit(2000000073.601:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27707 comm="syz.3.6618" exe="/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f1d4df8ebe9 code=0x7fc00000
[  624.829812][   T33] audit: type=1326 audit(2000000073.601:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27707 comm="syz.3.6618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4df8ebe9 code=0x7fc00000
[  625.162575][   T33] audit: type=1326 audit(2000000073.601:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27707 comm="syz.3.6618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4df8ebe9 code=0x7fc00000
[  625.169901][   T33] audit: type=1326 audit(2000000073.601:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27707 comm="syz.3.6618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4df8ebe9 code=0x7fc00000
[  625.182406][   T33] audit: type=1326 audit(2000000073.601:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27707 comm="syz.3.6618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4df8ebe9 code=0x7fc00000
[  625.201420][   T33] audit: type=1326 audit(2000000073.601:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27707 comm="syz.3.6618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4df8ebe9 code=0x7fc00000
[  625.209943][   T33] audit: type=1326 audit(2000000073.601:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27707 comm="syz.3.6618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4df8ebe9 code=0x7fc00000
[  625.220979][   T33] audit: type=1326 audit(2000000073.601:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27707 comm="syz.3.6618" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1d4df8ebe9 code=0x7fc00000
[  625.300491][T27733] overlayfs: failed to clone upperpath
[  625.439402][T27741] netlink: 20 bytes leftover after parsing attributes in process `syz.3.6631'.
[  626.257031][T27776] tipc: Bearer <udp:syz0>: already 2 bearers with priority 10
[  626.262882][T27776] tipc: Bearer <udp:syz0>: trying with adjusted priority
[  626.265774][T27776] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  626.516261][ T5313] usb 9-1: new high-speed USB device number 6 using dummy_hcd
[  626.698510][ T5313] usb 9-1: Using ep0 maxpacket: 16
[  626.703283][ T5313] usb 9-1: config 0 has an invalid interface number: 214 but max is 0
[  626.706739][ T5313] usb 9-1: config 0 has no interface number 0
[  626.709462][ T5313] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11
[  626.714163][ T5313] usb 9-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024
[  626.720396][ T5313] usb 9-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  626.724183][ T5313] usb 9-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3
[  626.726999][ T5313] usb 9-1: Manufacturer: syz
[  626.728613][ T5313] usb 9-1: SerialNumber: syz
[  626.732379][ T5313] usb 9-1: config 0 descriptor??
[  626.735407][T27778] raw-gadget.0 gadget.8: fail, usb_ep_enable returned -22
[  627.173842][ T5313] usbtouchscreen 9-1:0.214: probe with driver usbtouchscreen failed with error -71
[  627.180332][ T5313] usb 9-1: USB disconnect, device number 6
[  627.705943][T27841] ==================================================================
[  627.709233][T27841] BUG: KASAN: slab-use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  627.712495][T27841] Read of size 2 at addr ffff8881155f60c2 by task syz.2.6673/27841
[  627.716352][T27841] 
[  627.717746][T27841] CPU: 1 UID: 0 PID: 27841 Comm: syz.2.6673 Not tainted syzkaller #0 PREEMPT(full) 
[  627.717769][T27841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  627.717780][T27841] Call Trace:
[  627.717788][T27841]  <TASK>
[  627.717797][T27841]  dump_stack_lvl+0x189/0x250
[  627.717821][T27841]  ? __kasan_check_byte+0x12/0x40
[  627.717844][T27841]  ? __pfx_dump_stack_lvl+0x10/0x10
[  627.717860][T27841]  ? lock_release+0x4b/0x3e0
[  627.717884][T27841]  ? __virt_addr_valid+0x4a5/0x5c0
[  627.717902][T27841]  print_report+0xca/0x240
[  627.717915][T27841]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  627.717930][T27841]  kasan_report+0x118/0x150
[  627.717949][T27841]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  627.717966][T27841]  __xfrm_state_lookup+0x6ad/0x8d0
[  627.717982][T27841]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  627.717998][T27841]  ? xfrm_state_lookup+0x45/0x1e0
[  627.718013][T27841]  xfrm_state_lookup+0x11e/0x1e0
[  627.718031][T27841]  ipcomp4_init_state+0x205/0xb20
[  627.718048][T27841]  ? __xfrm_init_state+0x7ef/0x13f0
[  627.718066][T27841]  __xfrm_init_state+0xa76/0x13f0
[  627.718082][T27841]  ? __xfrm_init_state+0x7ef/0x13f0
[  627.718099][T27841]  xfrm_add_sa+0x2f5b/0x4070
[  627.718119][T27841]  ? __pfx_xfrm_add_sa+0x10/0x10
[  627.718133][T27841]  ? apparmor_capable+0x137/0x1b0
[  627.718152][T27841]  ? __nla_parse+0x40/0x60
[  627.718174][T27841]  xfrm_user_rcv_msg+0x7a3/0xab0
[  627.718193][T27841]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  627.718224][T27841]  ? __pfx___mutex_trylock_common+0x10/0x10
[  627.718241][T27841]  ? rcu_is_watching+0x15/0xb0
[  627.718255][T27841]  ? trace_contention_end+0x39/0x120
[  627.718270][T27841]  ? __mutex_lock+0x335/0x1350
[  627.718293][T27841]  netlink_rcv_skb+0x208/0x470
[  627.718316][T27841]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  627.718333][T27841]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  627.718359][T27841]  ? netlink_deliver_tap+0x2e/0x1b0
[  627.718388][T27841]  ? netlink_deliver_tap+0x2e/0x1b0
[  627.718410][T27841]  xfrm_netlink_rcv+0x79/0x90
[  627.718427][T27841]  netlink_unicast+0x82f/0x9e0
[  627.718449][T27841]  ? __pfx_netlink_unicast+0x10/0x10
[  627.718469][T27841]  ? netlink_sendmsg+0x642/0xb30
[  627.718488][T27841]  ? skb_put+0x11b/0x210
[  627.718504][T27841]  netlink_sendmsg+0x805/0xb30
[  627.718562][T27841]  ? __pfx_netlink_sendmsg+0x10/0x10
[  627.718585][T27841]  ? aa_sock_msg_perm+0xf1/0x1d0
[  627.718599][T27841]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  627.718616][T27841]  ? __pfx_netlink_sendmsg+0x10/0x10
[  627.718635][T27841]  __sock_sendmsg+0x21c/0x270
[  627.718655][T27841]  ____sys_sendmsg+0x505/0x830
[  627.718673][T27841]  ? __pfx_____sys_sendmsg+0x10/0x10
[  627.718691][T27841]  ? import_iovec+0x74/0xa0
[  627.718708][T27841]  ___sys_sendmsg+0x21f/0x2a0
[  627.718723][T27841]  ? __pfx____sys_sendmsg+0x10/0x10
[  627.718751][T27841]  ? __fget_files+0x2a/0x420
[  627.718771][T27841]  ? __fget_files+0x3a0/0x420
[  627.718795][T27841]  __x64_sys_sendmsg+0x19b/0x260
[  627.718811][T27841]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  627.718832][T27841]  ? do_syscall_64+0xbe/0x3b0
[  627.718854][T27841]  do_syscall_64+0xfa/0x3b0
[  627.718874][T27841]  ? lockdep_hardirqs_on+0x9c/0x150
[  627.718893][T27841]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.718906][T27841]  ? exc_page_fault+0x9f/0xf0
[  627.718925][T27841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.718939][T27841] RIP: 0033:0x7f57c5b8ebe9
[  627.718955][T27841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  627.718969][T27841] RSP: 002b:00007f57c6a0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  627.718987][T27841] RAX: ffffffffffffffda RBX: 00007f57c5dc5fa0 RCX: 00007f57c5b8ebe9
[  627.718999][T27841] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  627.719009][T27841] RBP: 00007f57c5c11e19 R08: 0000000000000000 R09: 0000000000000000
[  627.719019][T27841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  627.719027][T27841] R13: 00007f57c5dc6038 R14: 00007f57c5dc5fa0 R15: 00007ffda91de4b8
[  627.719043][T27841]  </TASK>
[  627.719048][T27841] 
[  627.873994][T27841] Allocated by task 22627:
[  627.875759][T27841]  kasan_save_track+0x3e/0x80
[  627.877653][T27841]  __kasan_slab_alloc+0x6c/0x80
[  627.879575][T27841]  kmem_cache_alloc_noprof+0x1c1/0x3c0
[  627.881899][T27841]  xfrm_state_alloc+0x24/0x2f0
[  627.883860][T27841]  xfrm_state_find+0x37d4/0x5400
[  627.885893][T27841]  xfrm_resolve_and_create_bundle+0x768/0x2f80
[  627.888295][T27841]  xfrm_lookup_with_ifid+0x2a7/0x1a70
[  627.890332][T27841]  xfrm_lookup_route+0x3c/0x1c0
[  627.892249][T27841]  rawv6_sendmsg+0xdab/0x1820
[  627.894141][T27841]  __sock_sendmsg+0x19c/0x270
[  627.896061][T27841]  ____sys_sendmsg+0x52d/0x830
[  627.897977][T27841]  ___sys_sendmsg+0x21f/0x2a0
[  627.899876][T27841]  __sys_sendmmsg+0x227/0x430
[  627.901782][T27841]  __x64_sys_sendmmsg+0xa0/0xc0
[  627.903736][T27841]  do_syscall_64+0xfa/0x3b0
[  627.905623][T27841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  627.907978][T27841] 
[  627.908963][T27841] Freed by task 17265:
[  627.910609][T27841]  kasan_save_track+0x3e/0x80
[  627.912528][T27841]  kasan_save_free_info+0x46/0x50
[  627.914533][T27841]  __kasan_slab_free+0x5b/0x80
[  627.916455][T27841]  kmem_cache_free+0x18f/0x400
[  627.918336][T27841]  xfrm_state_gc_task+0x52d/0x6b0
[  627.920289][T27841]  process_scheduled_works+0xae1/0x17b0
[  627.922284][T27841]  worker_thread+0x8a0/0xda0
[  627.924043][T27841]  kthread+0x711/0x8a0
[  627.925719][T27841]  ret_from_fork+0x3fc/0x770
[  627.927593][T27841]  ret_from_fork_asm+0x1a/0x30
[  627.929515][T27841] 
[  627.930483][T27841] The buggy address belongs to the object at ffff8881155f5f80
[  627.930483][T27841]  which belongs to the cache xfrm_state of size 928
[  627.935989][T27841] The buggy address is located 322 bytes inside of
[  627.935989][T27841]  freed 928-byte region [ffff8881155f5f80, ffff8881155f6320)
[  627.941198][T27841] 
[  627.942183][T27841] The buggy address belongs to the physical page:
[  627.944720][T27841] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8881155f4000 pfn:0x1155f4
[  627.948775][T27841] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  627.952289][T27841] flags: 0x57ff00000000040(head|node=1|zone=2|lastcpupid=0x7ff)
[  627.955138][T27841] page_type: f5(slab)
[  627.956509][T27841] raw: 057ff00000000040 ffff888104880c80 ffffea0004117400 0000000000000002
[  627.959678][T27841] raw: ffff8881155f4000 00000000000e0000 00000000f5000000 0000000000000000
[  627.962530][T27841] head: 057ff00000000040 ffff888104880c80 ffffea0004117400 0000000000000002
[  627.965547][T27841] head: ffff8881155f4000 00000000000e0000 00000000f5000000 0000000000000000
[  627.968717][T27841] head: 057ff00000000002 ffffea0004557d01 00000000ffffffff 00000000ffffffff
[  627.971884][T27841] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  627.974554][T27841] page dumped because: kasan: bad access detected
[  627.976738][T27841] page_owner tracks the page as allocated
[  627.978791][T27841] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 7449, tgid 7448 (syz.1.425), ts 115941373597, free_ts 114772157256
[  627.986078][T27841]  post_alloc_hook+0x240/0x2a0
[  627.987841][T27841]  get_page_from_freelist+0x21e4/0x22c0
[  627.989904][T27841]  __alloc_frozen_pages_noprof+0x181/0x370
[  627.991731][T27841]  alloc_pages_mpol+0x232/0x4a0
[  627.993275][T27841]  allocate_slab+0x8a/0x370
[  627.994800][T27841]  ___slab_alloc+0xbeb/0x1420
[  627.996258][T27841]  kmem_cache_alloc_noprof+0x283/0x3c0
[  627.998051][T27841]  xfrm_state_alloc+0x24/0x2f0
[  627.999622][T27841]  __find_acq_core+0x8a7/0x1c00
[  628.001581][T27841]  xfrm_find_acq+0x78/0xa0
[  628.003399][T27841]  xfrm_alloc_userspi+0x6b3/0xc90
[  628.005512][T27841]  xfrm_user_rcv_msg+0x7a3/0xab0
[  628.007519][T27841]  netlink_rcv_skb+0x208/0x470
[  628.009452][T27841]  xfrm_netlink_rcv+0x79/0x90
[  628.010958][T27841]  netlink_unicast+0x82f/0x9e0
[  628.012813][T27841]  netlink_sendmsg+0x805/0xb30
[  628.014767][T27841] page last free pid 7370 tgid 7369 stack trace:
[  628.017321][T27841]  __free_frozen_pages+0xbc4/0xd30
[  628.019391][T27841]  stack_depot_save_flags+0x436/0x860
[  628.021321][T27841]  kasan_save_track+0x4f/0x80
[  628.022788][T27841]  __kasan_kmalloc+0x93/0xb0
[  628.024571][T27841]  __kmalloc_noprof+0x27a/0x4f0
[  628.026112][T27841]  skcipher_next_slow+0xee/0x230
[  628.027803][T27841]  ecb_encrypt+0x1d4/0x260
[  628.029514][T27841]  skcipher_recvmsg+0xb00/0x11c0
[  628.031029][T27841]  sock_recvmsg+0x22c/0x270
[  628.032832][T27841]  ____sys_recvmsg+0x1c9/0x460
[  628.034778][T27841]  ___sys_recvmsg+0x1b5/0x510
[  628.037001][T27841]  __x64_sys_recvmsg+0x198/0x260
[  628.039064][T27841]  do_syscall_64+0xfa/0x3b0
[  628.040901][T27841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.043250][T27841] 
[  628.044239][T27841] Memory state around the buggy address:
[  628.046442][T27841]  ffff8881155f5f80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  628.049423][T27841]  ffff8881155f6000: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  628.052299][T27841] >ffff8881155f6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  628.055043][T27841]                                            ^
[  628.057223][T27841]  ffff8881155f6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  628.060100][T27841]  ffff8881155f6180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  628.063179][T27841] ==================================================================
[  628.069642][T27841] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  628.072828][T27841] CPU: 0 UID: 0 PID: 27841 Comm: syz.2.6673 Not tainted syzkaller #0 PREEMPT(full) 
[  628.076846][T27841] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  628.081126][T27841] Call Trace:
[  628.082625][T27841]  <TASK>
[  628.083940][T27841]  dump_stack_lvl+0x99/0x250
[  628.085985][T27841]  ? __asan_memcpy+0x40/0x70
[  628.088014][T27841]  ? __pfx_dump_stack_lvl+0x10/0x10
[  628.090267][T27841]  ? __pfx__printk+0x10/0x10
[  628.092234][T27841]  vpanic+0x281/0x750
[  628.093990][T27841]  ? preempt_schedule+0xae/0xc0
[  628.096142][T27841]  ? __pfx_vpanic+0x10/0x10
[  628.098090][T27841]  ? preempt_schedule_common+0x83/0xd0
[  628.100306][T27841]  ? preempt_schedule+0xae/0xc0
[  628.102417][T27841]  ? __pfx_preempt_schedule+0x10/0x10
[  628.104746][T27841]  panic+0xb9/0xc0
[  628.106409][T27841]  ? __pfx_panic+0x10/0x10
[  628.108356][T27841]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  628.110924][T27841]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  628.113236][T27841]  check_panic_on_warn+0x89/0xb0
[  628.115398][T27841]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  628.117635][T27841]  end_report+0x78/0x160
[  628.119568][T27841]  kasan_report+0x129/0x150
[  628.121663][T27841]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  628.123966][T27841]  __xfrm_state_lookup+0x6ad/0x8d0
[  628.126132][T27841]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  628.128516][T27841]  ? xfrm_state_lookup+0x45/0x1e0
[  628.130720][T27841]  xfrm_state_lookup+0x11e/0x1e0
[  628.132890][T27841]  ipcomp4_init_state+0x205/0xb20
[  628.135007][T27841]  ? __xfrm_init_state+0x7ef/0x13f0
[  628.137202][T27841]  __xfrm_init_state+0xa76/0x13f0
[  628.139301][T27841]  ? __xfrm_init_state+0x7ef/0x13f0
[  628.141436][T27841]  xfrm_add_sa+0x2f5b/0x4070
[  628.143499][T27841]  ? __pfx_xfrm_add_sa+0x10/0x10
[  628.145719][T27841]  ? apparmor_capable+0x137/0x1b0
[  628.147970][T27841]  ? __nla_parse+0x40/0x60
[  628.149940][T27841]  xfrm_user_rcv_msg+0x7a3/0xab0
[  628.152116][T27841]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  628.154535][T27841]  ? __pfx___mutex_trylock_common+0x10/0x10
[  628.157071][T27841]  ? rcu_is_watching+0x15/0xb0
[  628.159135][T27841]  ? trace_contention_end+0x39/0x120
[  628.161177][T27841]  ? __mutex_lock+0x335/0x1350
[  628.162994][T27841]  netlink_rcv_skb+0x208/0x470
[  628.164969][T27841]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  628.167125][T27841]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  628.169176][T27841]  ? netlink_deliver_tap+0x2e/0x1b0
[  628.171210][T27841]  ? netlink_deliver_tap+0x2e/0x1b0
[  628.173379][T27841]  xfrm_netlink_rcv+0x79/0x90
[  628.175301][T27841]  netlink_unicast+0x82f/0x9e0
[  628.177236][T27841]  ? __pfx_netlink_unicast+0x10/0x10
[  628.179415][T27841]  ? netlink_sendmsg+0x642/0xb30
[  628.181453][T27841]  ? skb_put+0x11b/0x210
[  628.183231][T27841]  netlink_sendmsg+0x805/0xb30
[  628.185216][T27841]  ? __pfx_netlink_sendmsg+0x10/0x10
[  628.187413][T27841]  ? aa_sock_msg_perm+0xf1/0x1d0
[  628.189435][T27841]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  628.191649][T27841]  ? __pfx_netlink_sendmsg+0x10/0x10
[  628.193804][T27841]  __sock_sendmsg+0x21c/0x270
[  628.195743][T27841]  ____sys_sendmsg+0x505/0x830
[  628.197703][T27841]  ? __pfx_____sys_sendmsg+0x10/0x10
[  628.199875][T27841]  ? import_iovec+0x74/0xa0
[  628.201700][T27841]  ___sys_sendmsg+0x21f/0x2a0
[  628.203557][T27841]  ? __pfx____sys_sendmsg+0x10/0x10
[  628.205732][T27841]  ? __fget_files+0x2a/0x420
[  628.207626][T27841]  ? __fget_files+0x3a0/0x420
[  628.209555][T27841]  __x64_sys_sendmsg+0x19b/0x260
[  628.211505][T27841]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  628.213728][T27841]  ? do_syscall_64+0xbe/0x3b0
[  628.215615][T27841]  do_syscall_64+0xfa/0x3b0
[  628.217399][T27841]  ? lockdep_hardirqs_on+0x9c/0x150
[  628.219555][T27841]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.221986][T27841]  ? exc_page_fault+0x9f/0xf0
[  628.223938][T27841]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  628.226347][T27841] RIP: 0033:0x7f57c5b8ebe9
[  628.228174][T27841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  628.235831][T27841] RSP: 002b:00007f57c6a0b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  628.239161][T27841] RAX: ffffffffffffffda RBX: 00007f57c5dc5fa0 RCX: 00007f57c5b8ebe9
[  628.242360][T27841] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003
[  628.245580][T27841] RBP: 00007f57c5c11e19 R08: 0000000000000000 R09: 0000000000000000
[  628.248639][T27841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  628.251854][T27841] R13: 00007f57c5dc6038 R14: 00007f57c5dc5fa0 R15: 00007ffda91de4b8
[  628.254941][T27841]  </TASK>
[  628.256879][T27841] Kernel Offset: disabled
[  628.258663][T27841] Rebooting in 86400 seconds..

VM DIAGNOSIS:
10:11:35  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000000 RBX=1ffff11026cc7f61 RCX=ffff888021b35640 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc90006e677e0 RSP=ffffc90006e67660
R8 =ffffffff8fa38a37 R9 =1ffffffff1f47146 R10=dffffc0000000000 R11=fffffbfff1f47147
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44ce8 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000200000000040 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=00007f57c68fd100 00007f57c5d97460 XMM05=00007f57c5d97478 00007f57c5d974c0
XMM06=00007f57c5d974b8 00007f57c5d974b0 XMM07=00007f57c5d974a8 00007f57c5d974a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f57c5c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000037 RBX=0000000000000037 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000143d RDI=000000000000143e RBP=00000000000003f8 RSP=ffffc90022946930
R8 =ffff8881079e0237 R9 =1ffff11020f3c046 R10=dffffc0000000000 R11=ffffffff854f3380
R12=dffffc0000000000 R13=ffffffff99afa8c6 R14=ffffffff99def420 R15=0000000000000000
RIP=ffffffff854f33fc RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f57c6a0b6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f57c6a0afc8 CR3=000000003bf08000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f57c5d97498 00007f57c5d97470 XMM03=00007f57c5d974a8 00007f57c5d974a0
XMM04=00007f57c68fd100 00007f57c5d97460 XMM05=00007f57c5d97478 00007f57c5d974c0
XMM06=00007f57c5d974b8 00007f57c5d974b0 XMM07=00007f57c5d974a8 00007f57c5d974a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f57c5c12fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
