last executing test programs:

9m23.717084729s ago: executing program 0 (id=1263):
r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000001a000000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
unshare(0x2040400)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', <r3=>0x0})
sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="44000000100001082abd70000000000000000000", @ANYRES32=r3, @ANYBLOB="00000000000000001c002b80080003001900000008000800", @ANYRES32=r0, @ANYBLOB="08000100d59042dc"], 0x44}}, 0x0)

9m23.648388486s ago: executing program 0 (id=1265):
syz_usb_connect(0x3, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203"], 0x0)

9m22.205660562s ago: executing program 0 (id=1274):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x22000406, &(0x7f00000000c0)={[{@dioread_lock}, {@noblock_validity}, {@abort}, {@nodelalloc}, {@user_xattr}, {@grpjquota, 0x2e}, {@max_batch_time={'max_batch_time', 0x3d, 0x3}}, {@errors_remount}, {@test_dummy_encryption_v1}, {@grpid}], [], 0x2c}, 0x84, 0x4d0, &(0x7f0000001cc0)="$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")

9m22.114466195s ago: executing program 0 (id=1275):
syz_mount_image$ext4(&(0x7f00000002c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0xe, &(0x7f00000005c0)={[{@bh}, {@errors_remount}]}, 0x3, 0x445, &(0x7f0000000b00)="$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")
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x200000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000)

9m21.923144498s ago: executing program 0 (id=1276):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=@framed={{}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94)

9m21.637332799s ago: executing program 0 (id=1282):
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000100)={0x0, 0xf786, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

9m21.422240589s ago: executing program 32 (id=1282):
socket$inet_smc(0x2b, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18)
prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = syz_io_uring_setup(0x10d, &(0x7f0000000100)={0x0, 0xf786, 0x800, 0x0, 0x36c}, &(0x7f0000000040)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x18})
io_uring_enter(r1, 0x3516, 0x0, 0x0, 0x0, 0x0)

8m1.981586154s ago: executing program 3 (id=2250):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@loopback, 0x0, 0x8, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000002}}, [@tmpl={0x44, 0x5, [{{@in6=@private2, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x2, 0x4, 0x3}]}]}, 0xfc}}, 0x48000)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001100)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc0200000000000000000000000000006401010200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa0000000000000000000004007f000001000000000000000000000000fe880000000000000000000000000101fe8000000000000000000000000000aa3c040000020000000a"], 0xa0}, 0x1, 0x0, 0x0, 0x44000}, 0x0)

8m1.90482593s ago: executing program 3 (id=2251):
r0 = socket(0x1d, 0x2, 0x6)
setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, 0x0, 0x0)

8m1.904533832s ago: executing program 3 (id=2252):
madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0)
r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100000800000000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000032ce8500000004000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='global_dirty_state\x00', r2}, 0x10)
sendfile(r1, r1, 0x0, 0x200000)

8m1.761689699s ago: executing program 3 (id=2253):
syz_mount_image$udf(&(0x7f00000000c0), &(0x7f0000000180)='./file0\x00', 0x4080, &(0x7f0000000540)=ANY=[@ANYBLOB='lastblock=00000000000000000000,umask=00000000000000000000002,dmode=00000000000000000077777,novrs,shortad,shortad,undelete,iocharset=cp437,shortad,umask=00000000000000000000006,dmode=00000000000000000000002,nostrict,uid=', @ANYRESOCT=0x0, @ANYRESDEC], 0x2, 0xc36, &(0x7f0000002540)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)
mount$bind(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000001c40)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x81105a, 0x0)
mount$bind(&(0x7f0000000880)='./file0/../file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x1adc11, 0x0)
mount$bind(&(0x7f0000000100)='./file0/../file0\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x887008, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x206e)

8m1.727485611s ago: executing program 3 (id=2254):
r0 = syz_io_uring_setup(0x1104, &(0x7f0000000700)={0x0, 0x0, 0x400, 0x10, 0x21e}, &(0x7f0000000400)=<r1=>0x0, &(0x7f0000000300)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
io_uring_enter(r0, 0x47fa, 0x0, 0x0, 0x0, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x32120, 0x1})

8m1.361488211s ago: executing program 3 (id=2257):
r0 = fanotify_init(0x200, 0x0)
r1 = memfd_create(&(0x7f0000000540)='-B\xd5NI\xc5j\x9appp\xf0\n\x84\xae\n\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1\x03\x00\x00\x00\xe3LS\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh\x9c\xea\xc9\x01c\x10d\xee\xa9\x1a\xcaR\xcf\xbcs\x86\xdf\xb9\xb9\x12\x8b\x04\xa3\xbd\xf2C\x93\xb8\x9a\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xd0\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04(\xcc\xce\x8b\x19\xea\xef\x17d\xc7d\xc5\xfa\b<\xe3?ip\x9dX4U\xd70\xfdM1\x17\xe1G\x81\xd1\x84\v{\x16\xcc7\xd8fP\x12\x0e\xe07)[;\xa4\xc1\x05S\xf9~\x8e7\xa8sKkR\x16\aA\x9a\xf4\x1a\x01\xe5vm\x18&\x8f.\x87\a\xde\xd7M\xda\xa1\xa2b\x0f)\xd0\xf1\x02;\x01\xd5\x94gD\x87\xd3E\xcf!\xf8K\xa4\xee\xb7rS\x8e\xbc`;\xb8\x8er\xe1\xb2\x8b\xb9wN\x87\xad\xd1W\xa7\xe7\xff_&\bv\xb46\xf6\x89\t\x1d\x8b@\xd63\x1d\x80\\\xef\xd0g`\xc6\xaem\n', 0x6)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x2016})
r3 = dup(r1)
fanotify_mark(r0, 0x1, 0x4800105c, r3, 0x0)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

8m1.266271358s ago: executing program 33 (id=2257):
r0 = fanotify_init(0x200, 0x0)
r1 = memfd_create(&(0x7f0000000540)='-B\xd5NI\xc5j\x9appp\xf0\n\x84\xae\n\x00\v\x18\x004\xa6Ey\xdb\xd1\xa7\xb1\x03\x00\x00\x00\xe3LS\xf1:)\x00\xca\xd7Uw\x00\xbc\xfa2\xb3\xbb\x8d\xac\xac\xbe\xe1}knh\x9c\xea\xc9\x01c\x10d\xee\xa9\x1a\xcaR\xcf\xbcs\x86\xdf\xb9\xb9\x12\x8b\x04\xa3\xbd\xf2C\x93\xb8\x9a\x06\x97k\xde\xc5\xe96\xddU)\xc98M\xd0\xfb\xcc\x82n=\x7f=\xcdJx\xaa\xcf~\xb90a\xa9\xb2\x04(\xcc\xce\x8b\x19\xea\xef\x17d\xc7d\xc5\xfa\b<\xe3?ip\x9dX4U\xd70\xfdM1\x17\xe1G\x81\xd1\x84\v{\x16\xcc7\xd8fP\x12\x0e\xe07)[;\xa4\xc1\x05S\xf9~\x8e7\xa8sKkR\x16\aA\x9a\xf4\x1a\x01\xe5vm\x18&\x8f.\x87\a\xde\xd7M\xda\xa1\xa2b\x0f)\xd0\xf1\x02;\x01\xd5\x94gD\x87\xd3E\xcf!\xf8K\xa4\xee\xb7rS\x8e\xbc`;\xb8\x8er\xe1\xb2\x8b\xb9wN\x87\xad\xd1W\xa7\xe7\xff_&\bv\xb46\xf6\x89\t\x1d\x8b@\xd63\x1d\x80\\\xef\xd0g`\xc6\xaem\n', 0x6)
r2 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000140)={0x2016})
r3 = dup(r1)
fanotify_mark(r0, 0x1, 0x4800105c, r3, 0x0)
execveat(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000)

5m28.506117126s ago: executing program 4 (id=4058):
syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x2000c12, &(0x7f0000001240)={[{@dmode={'dmode', 0x3d, 0xb1}}, {@check_strict}, {@overriderock}, {@sbsector={'sbsector', 0x3d, 0x8}}, {@map_acorn}, {}, {@showassoc}, {@hide}, {@gid={'gid', 0x3d, 0xee01}}, {}, {@overriderock}, {@mode={'mode', 0x3d, 0x1000}}, {@map_normal}, {@iocharset={'iocharset', 0x3d, 'cp949'}}, {@cruft}, {@gid}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@smackfstransmute={'smackfstransmute', 0x3d, 'norock'}}, {@flag='mand'}, {@subj_user={'subj_user', 0x3d, '\x9d\xf9\x12\x10\xdfG=\xd4V\xe7\x8d(\xef\xba\x17\x88\xf9#;`\x00cz\xa8@-\x8f6\x96!A\xfc\xfb\x9a/\xfd5\x11G\x16\xff\x99_{\a\xab\xd5\xd5\x00\xef]\xe2\x87K\x01k#\x11\xdad?^\xda\xa2\xf5\xbe\x8e\xaf\xcb\xd6\xc1\x96\xa6\xce\x13\"\xc9\xee\xfbNh\xed\x8f\xda\x96$\x9d\xf3\'\xa8rv\xe1G\xb8jpZ\xb0\xf5\xfe\xb8<\xbcZ'}}]}, 0x1, 0xa4a, &(0x7f00000007c0)="$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")

5m28.296514199s ago: executing program 4 (id=4060):
syz_emit_ethernet(0xfc0, &(0x7f0000007940)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd606410a60f8a0000fec00000002c00001200ffffe0000012fe8000000000000000000000000000aa"], 0x0)

5m28.14569521s ago: executing program 4 (id=4063):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x34, r1, 0x701, 0x70bd25, 0x2, {0xb}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2004c840}, 0x800)

5m28.06544559s ago: executing program 4 (id=4066):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1e)
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0)
mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
move_mount(0xffffffffffffff9c, &(0x7f0000008080)='./file0\x00', r0, 0x0, 0x160)

5m27.986946719s ago: executing program 4 (id=4067):
r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x80080, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x3)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000300)=0xffffffff)

5m27.625877799s ago: executing program 4 (id=4068):
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
splice(r0, &(0x7f0000000140)=0x3, r1, 0x0, 0x81, 0x4)

5m27.455914698s ago: executing program 34 (id=4068):
r0 = syz_open_procfs$userns(0x0, &(0x7f0000000040))
pipe2(&(0x7f00000000c0)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x800)
splice(r0, &(0x7f0000000140)=0x3, r1, 0x0, 0x81, 0x4)

4m26.329887273s ago: executing program 5 (id=4862):
r0 = socket(0x2000000000000021, 0x2, 0x10000000000002)
getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0)

4m26.260366216s ago: executing program 5 (id=4863):
syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0)
syz_mount_image$fuse(0x0, &(0x7f0000000000)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x10000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@metacopy_on}]})
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x42, 0x80)
linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x0)
stat(&(0x7f00000000c0)='./file0/file1\x00', 0x0)

4m26.210991566s ago: executing program 5 (id=4864):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0)
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0), 0x48100)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x1)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'})
write$sndseq(r3, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8)
poll(&(0x7f0000000780)=[{r3, 0x3230}], 0x1, 0x40000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, &(0x7f00000001c0)={0x0, 0x80, 0x0, 'queue0\x00'})
close_range(r1, 0xffffffffffffffff, 0x0)

4m26.05052326s ago: executing program 5 (id=4867):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000080)='./file2\x00', 0x400410, &(0x7f00000001c0)={[{@nodiscard}, {@nocheckpoint_merge}, {@fault_type={'fault_type', 0x3d, 0x7fff}}, {@inline_data}, {@flush_merge}, {@fault_injection={'fault_injection', 0x3d, 0x4ee}}, {@acl}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@noextent_cache}, {@grpjquota}, {@checkpoint_diasble}]}, 0x4, 0x550c, &(0x7f00000089c0)="$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")
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})

4m25.549136513s ago: executing program 5 (id=4880):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002000d5"], 0x14}], 0x1}, 0x4000)

4m24.378260047s ago: executing program 5 (id=4888):
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0)

4m24.099682049s ago: executing program 35 (id=4888):
sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x10c}, 0x1, 0x0, 0x0, 0x1}, 0x10)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_DELETE(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e40000000201010800000000000000000a000000d00001800c000280050001000000000014000180080001000000000008000200000000002c00018014000300ff01000000000000000000000000000114000400ff0100000000000000000000000000010c00028005000100000000004700028005000100010000000600064000000000060005"], 0xe4}}, 0x0)

1.88802814s ago: executing program 2 (id=9013):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x1f, 0x4, &(0x7f0000000140)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffe0}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x13}, 0x94)

1.887315829s ago: executing program 2 (id=9015):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x0, 0x13012, r0, 0x0)
mprotect(&(0x7f0000ff7000/0x1000)=nil, 0x1000, 0xb)
syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0)

1.791701253s ago: executing program 2 (id=9018):
syz_mount_image$nilfs2(&(0x7f0000000000), &(0x7f0000000f00)='./file1\x00', 0x208800, &(0x7f0000003100)=ANY=[], 0x1, 0xf04, &(0x7f0000000f40)="$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")
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001540)=ANY=[@ANYBLOB="280000001e000100000000000000000007"], 0x28}}, 0x0)

1.54534129s ago: executing program 2 (id=9023):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]})
r0 = syz_open_procfs(0x0, &(0x7f00000005c0)='smaps_rollup\x00')
lseek(r0, 0x2000, 0x0)

1.420873462s ago: executing program 2 (id=9025):
mount$fuseblk(0x0, 0x0, 0x0, 0xc9844d, 0x0)
r0 = syz_usb_connect$uac1(0x2, 0xad, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000000000106b1d010140000102030109029b0003010000000904000000010100000a2401000000020102092408000000004c58062404000052072405000053f10b24050000133b9bda531c092405fc0596efc359090401000001020000090401010101020000090501090000000000072501000600000904020000010200000904020101010200000b2402017f0200018b7e8e07240100000000090582091000000000072501f5"], 0x0)
syz_usb_control_io$uac1(r0, &(0x7f0000001100)={0x14, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0)
syz_usb_control_io(r0, &(0x7f00000021c0)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000003"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.22907908s ago: executing program 1 (id=9028):
r0 = dup(0xffffffffffffffff)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x7}, 0x1c)
getsockopt$inet6_buf(r0, 0x29, 0x3d, &(0x7f0000000280)=""/166, &(0x7f0000000140)=0xa6)
openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
sendto$inet6(r4, 0x0, 0x0, 0x20004041, 0x0, 0x0)
connect$inet6(r4, &(0x7f0000000280)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x19}, 0x7}, 0x1c)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0900000000000000000002000000140001800500020001"], 0x28}}, 0x0)
syz_mount_image$f2fs(&(0x7f0000000040), &(0x7f0000000680)='./file2\x00', 0x1, &(0x7f0000000000)=ANY=[@ANYRES32], 0x0, 0x5542, &(0x7f0000005c00)="$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")

659.433227ms ago: executing program 6 (id=9029):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x5}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r0}, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0xc, 0x3}]}, &(0x7f0000000200)='syzkaller\x00'}, 0x94)

503.237208ms ago: executing program 2 (id=9030):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000300)={0xa, 0x0, 0x70, @loopback, 0x400}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000340)=@gcm_128={{0x304}, "a6341a1a379332f5", "1fd33cb95d66a1781f31bf07fd2ae874", "62266bd8", "d1b29b99d21d88a2"}, 0x28)
write$binfmt_script(r0, &(0x7f0000000780)={'#! ', './file0'}, 0xb)
r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x4}]})
msgget$private(0x0, 0x0)
close_range(r1, 0xffffffffffffffff, 0x0)

260.741696ms ago: executing program 1 (id=9031):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2f}}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000400), &(0x7f0000000300)=@tcp6=r0}, 0x20)

260.499526ms ago: executing program 6 (id=9032):
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYBLOB="2b030000000000002000128008000100736974001400028008000300ffff"], 0x40}}, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000003e0007012dbd7000fcdbdf25047c0000040000001400018006000600800a0000080016"], 0x2c}, 0x1, 0xc00000000000000}, 0x0)

229.481343ms ago: executing program 1 (id=9033):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newqdisc={0x54, 0x10, 0x1, 0x600, 0xfffffffc, {0x6, 0x0, 0x8100, 0x0, {0x1, 0x10}, {0x12}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x400c800}, 0x0)

178.182025ms ago: executing program 6 (id=9034):
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc000, 0x1)
mount(&(0x7f0000000040)=@filename='./file0\x00', &(0x7f0000000180)='./file0\x00', &(0x7f0000000200)='fuseblk\x00', 0x0, 0x0)

127.805558ms ago: executing program 6 (id=9035):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c)
sendto$inet6(r0, &(0x7f0000000040)='N', 0x1, 0x80, &(0x7f0000000280)={0xa, 0x4e24, 0x1, @private2}, 0x1c)
shutdown(r0, 0x1)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000180)=0x8)

127.344415ms ago: executing program 1 (id=9036):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000000280)={0x48, 0x1, r1, 0x0, 0x1, 0xb97d})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r0, 0x3ba0, &(0x7f0000001140)={0x48, 0x1, r1, 0x0, 0x6, 0x1})
ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000080)={0x28, 0x2, r1, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1})

59.072319ms ago: executing program 6 (id=9037):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x815, 0x81, 0xffffffff})
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
setns(r1, 0x40000000)

58.893831ms ago: executing program 1 (id=9038):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001080)={0x54, r1, 0x1, 0x0, 0xfffffffd, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @empty}}, {0x14, 0x2, @in={0x2, 0x0, @private=0xa010102}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)

322.858µs ago: executing program 6 (id=9039):
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x4, [@const={0x0, 0x0, 0x0, 0x2}, @var={0x1, 0x0, 0x0, 0xe, 0x3}, @var={0x2, 0x0, 0x0, 0x11, 0x3}]}, {0x0, [0x2e, 0x5f]}}, 0x0, 0x48}, 0x28)

0s ago: executing program 1 (id=9040):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000001100010026bd7000fbdbdf25e0000001000000001b00000000000000000004d50a00ff000c0015"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x0)

kernel console output (not intermixed with test programs):

 0 descriptor??
[  551.805296][T20332] netlink: 'syz.1.5778': attribute type 21 has an invalid length.
[  551.808349][T20332] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5778'.
[  551.850372][T18406] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0
[  552.089377][T18406] usb 7-1: USB disconnect, device number 10
[  552.830012][T20377] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5799'.
[  554.482429][T20418] overlayfs: failed to clone upperpath
[  555.493130][T20467] netlink: 24 bytes leftover after parsing attributes in process `syz.6.5838'.
[  555.621271][T20471] loop6: detected capacity change from 0 to 4096
[  555.630832][T20471] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  555.634252][T20471] ntfs3(loop6): $Volume is corrupted.
[  555.909302][   T47] usb 7-1: new full-speed USB device number 11 using dummy_hcd
[  556.061371][   T47] usb 7-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  556.069074][   T47] usb 7-1: config 0 interface 0 has no altsetting 0
[  556.071847][   T47] usb 7-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00
[  556.075492][   T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  556.088562][   T47] usb 7-1: config 0 descriptor??
[  556.092033][T20473] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  556.513011][   T47] thrustmaster 0003:044F:B323.001D: unknown main item tag 0x2
[  556.516464][   T47] thrustmaster 0003:044F:B323.001D: item fetching failed at offset 4/5
[  556.521134][   T47] thrustmaster 0003:044F:B323.001D: parse failed
[  556.524085][   T47] thrustmaster 0003:044F:B323.001D: probe with driver thrustmaster failed with error -22
[  556.712609][   T47] usb 7-1: USB disconnect, device number 11
[  557.648899][T20513] loop6: detected capacity change from 0 to 32768
[  557.667937][T20513] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  557.749767][T20513] XFS (loop6): Ending clean mount
[  557.757703][T20513] XFS (loop6): Quotacheck needed: Please wait.
[  557.806809][T20513] XFS (loop6): Quotacheck: Done.
[  557.906383][T18201] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  558.266916][   T33] audit: type=1326 audit(1755180733.518:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20557 comm="syz.6.5878" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  558.276907][   T33] audit: type=1326 audit(1755180733.518:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20557 comm="syz.6.5878" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  558.288698][   T33] audit: type=1326 audit(1755180733.528:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20557 comm="syz.6.5878" exe="/syz-executor" sig=0 arch=c000003e syscall=453 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  558.301709][   T33] audit: type=1326 audit(1755180733.528:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20557 comm="syz.6.5878" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  558.316005][   T33] audit: type=1326 audit(1755180733.528:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20557 comm="syz.6.5878" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  559.614652][T20616] netlink: 72 bytes leftover after parsing attributes in process `syz.6.5905'.
[  562.450144][T20696] netlink: 4 bytes leftover after parsing attributes in process `syz.6.5937'.
[  562.533761][T20698] IPVS: set_ctl: invalid protocol: 136 10.1.1.2:20004
[  562.631576][T20700] sctp: [Deprecated]: syz.2.5939 (pid 20700) Use of int in max_burst socket option deprecated.
[  562.631576][T20700] Use struct sctp_assoc_value instead
[  563.307598][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  563.311602][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  563.323893][T20712] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5945'.
[  563.684199][T20723] overlayfs: failed to clone upperpath
[  563.736298][T20728] overlayfs: failed to clone upperpath
[  563.944747][T20745] syz.6.5960 uses old SIOCAX25GETINFO
[  565.102762][T20770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5971'.
[  565.199655][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810fd5e000: rx timeout, send abort
[  565.243742][T20777] IPv6: NLM_F_CREATE should be specified when creating new route
[  565.571948][T18406] usb 7-1: new full-speed USB device number 12 using dummy_hcd
[  565.699468][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810fd5c400: rx timeout, send abort
[  565.703233][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810fd5e000: abort rx timeout. Force session deactivation
[  565.721102][T18406] usb 7-1: config 8 has an invalid interface number: 177 but max is 0
[  565.724442][T18406] usb 7-1: config 8 has no interface number 0
[  565.726959][T18406] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x8 has invalid maxpacket 1023, setting to 64
[  565.731516][T18406] usb 7-1: config 8 interface 177 altsetting 9 endpoint 0x5 has invalid wMaxPacketSize 0
[  565.735774][T18406] usb 7-1: config 8 interface 177 has no altsetting 0
[  565.738473][T18406] usb 7-1: New USB device found, idVendor=04d8, idProduct=fd08, bcdDevice=59.b1
[  565.742193][T18406] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  565.749204][T20781] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  565.963712][T18406] usb 7-1: string descriptor 0 read error: -71
[  565.975437][T18406] ir_toy 7-1:8.177: required endpoints not found
[  565.985036][T18406] usb 7-1: USB disconnect, device number 12
[  566.202196][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810fd5dc00: rx timeout, send abort
[  566.205531][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88810fd5dc00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session.
[  566.215147][    C1] vcan0: j1939_tp_rxtimer: 0xffff88810fd5c400: abort rx timeout. Force session deactivation
[  566.380626][T20796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5983'.
[  566.383634][T20796] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5983'.
[  566.785139][T20809] loop6: detected capacity change from 0 to 32768
[  566.790702][T20809] BTRFS warning: excessive commit interval 2147483647, use with care
[  566.800694][T20809] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.5989 (20809)
[  566.827511][T20809] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  566.831984][T20809] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  566.835390][T20809] BTRFS info (device loop6): disk space caching is enabled
[  566.838320][T20809] BTRFS warning (device loop6): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2
[  566.919285][T20809] BTRFS info (device loop6): rebuilding free space tree
[  566.949874][T20809] BTRFS info (device loop6): disabling free space tree
[  566.952676][T20809] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  566.956543][T20809] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  567.057468][T18201] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  568.085660][T20856] loop6: detected capacity change from 0 to 4096
[  568.096518][T20856] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  568.134082][   T33] audit: type=1800 audit(1755180743.378:113): pid=20856 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.6003" name="file1" dev="loop6" ino=33 res=0 errno=0
[  568.218170][T20862] 9pnet_fd: Insufficient options for proto=fd
[  568.501484][T20869] sch_fq: defrate 4294967295 ignored.
[  568.532159][T10244] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  568.689079][T10244] usb 7-1: Using ep0 maxpacket: 8
[  568.701953][T10244] usb 7-1: config 0 has an invalid interface number: 148 but max is 0
[  568.705340][T10244] usb 7-1: config 0 has no interface number 0
[  568.715730][T10244] usb 7-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36
[  568.723280][T10244] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  568.726511][T10244] usb 7-1: Product: syz
[  568.728193][T10244] usb 7-1: Manufacturer: syz
[  568.742966][T20882] netlink: 676 bytes leftover after parsing attributes in process `syz.1.6015'.
[  568.746335][T10244] usb 7-1: SerialNumber: syz
[  568.748858][T20882] netlink: 676 bytes leftover after parsing attributes in process `syz.1.6015'.
[  568.750987][T10244] usb 7-1: config 0 descriptor??
[  568.762023][T10244] kobil_sct 7-1:0.148: required endpoints missing
[  568.835619][T20892] overlayfs: failed to clone upperpath
[  568.871888][T20896] netlink: 256 bytes leftover after parsing attributes in process `syz.1.6022'.
[  568.969371][   T47] usb 7-1: USB disconnect, device number 13
[  569.712254][T20930] netlink: 68 bytes leftover after parsing attributes in process `syz.6.6037'.
[  570.022497][T20946] trusted_key: syz.2.6045 sent an empty control message without MSG_MORE.
[  570.097833][T20938] loop6: detected capacity change from 0 to 32768
[  570.162244][T20938] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  570.227112][T20938] XFS (loop6): Ending clean mount
[  570.273576][T18201] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  570.964454][T21003] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.6067'.
[  571.536977][T21020] netlink: 12 bytes leftover after parsing attributes in process `syz.6.6073'.
[  572.380260][T21045] RDS: rds_bind could not find a transport for fc02::1, load rds_tcp or rds_rdma?
[  572.725655][T21070] loop6: detected capacity change from 0 to 64
[  572.999108][T10244] usb 7-1: new full-speed USB device number 14 using dummy_hcd
[  573.152121][T10244] usb 7-1: config 0 has an invalid interface number: 235 but max is 0
[  573.155591][T10244] usb 7-1: config 0 has no interface number 0
[  573.158548][T10244] usb 7-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid maxpacket 194, setting to 64
[  573.165341][T10244] usb 7-1: config 0 interface 235 has no altsetting 0
[  573.173284][T10244] usb 7-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18
[  573.177926][T10244] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.183402][T10244] usb 7-1: Product: syz
[  573.185122][T10244] usb 7-1: Manufacturer: syz
[  573.186980][T10244] usb 7-1: SerialNumber: syz
[  573.193848][T10244] usb 7-1: config 0 descriptor??
[  573.199398][T21070] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  573.206104][T10244] keyspan 7-1:0.235: Keyspan 1 port adapter converter detected
[  573.209870][T10244] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 87
[  573.213213][T10244] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 7
[  573.218050][T10244] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 81
[  573.225400][T10244] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 1
[  573.229755][T10244] keyspan 7-1:0.235: found no endpoint descriptor for endpoint 85
[  573.234260][T10244] usb 7-1: Keyspan 1 port adapter converter now attached to ttyUSB0
[  573.406269][T10244] usb 7-1: USB disconnect, device number 14
[  573.421930][T10244] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0
[  573.431878][T10244] keyspan 7-1:0.235: device disconnected
[  574.222018][T21143] loop6: detected capacity change from 0 to 2048
[  574.245953][T21143] EXT4-fs (loop6): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  574.281690][T18201] EXT4-fs (loop6): unmounting filesystem 00000800-0000-0000-0000-000000000000.
[  575.171197][T21172] overlayfs: failed to clone upperpath
[  576.033420][T21246] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  577.119735][T10242] psmouse serio5: Failed to reset mouse on : -5
[  580.384009][T21391] netlink: 'syz.2.6242': attribute type 1 has an invalid length.
[  580.453412][T21394] 8021q: adding VLAN 0 to HW filter on device bond5
[  580.939455][T10242] misc userio: Buffer overflowed, userio client isn't keeping up
[  581.081106][T21407] 9pnet_fd: p9_fd_create_tcp (21407): problem connecting socket to 127.0.0.1
[  581.401455][T21421] netlink: 'syz.1.6256': attribute type 1 has an invalid length.
[  581.462311][T21421] 8021q: adding VLAN 0 to HW filter on device bond5
[  581.469991][T21421] bond4: (slave bond5): making interface the new active one
[  581.474224][T21421] bond4: (slave bond5): Enslaving as an active interface with an up link
[  582.283067][T10242] input: PS/2 Generic Mouse as /devices/serio5/input/input25
[  582.499213][T10242] psmouse serio5: Failed to enable mouse on 
[  583.033005][T21486] openvswitch: netlink: Message has 4 unknown bytes.
[  583.035789][T21486] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  583.247259][T21484] loop6: detected capacity change from 0 to 32768
[  583.284464][T21484] XFS (loop6): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  583.317943][T21484] XFS (loop6): Ending clean mount
[  583.338445][T21484] XFS (loop6): Quotacheck needed: Please wait.
[  583.401507][T21484] XFS (loop6): Quotacheck: Done.
[  583.443408][T18201] XFS (loop6): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  583.530876][T21521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6294'.
[  583.608484][T21521] netlink: 16 bytes leftover after parsing attributes in process `syz.2.6294'.
[  583.736850][T21531] loop6: detected capacity change from 0 to 2048
[  583.760957][T21531] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  584.125478][T21551] macvtap0: entered allmulticast mode
[  584.127762][T21551] veth0_macvtap: entered allmulticast mode
[  584.299077][T10242] usb 7-1: new high-speed USB device number 15 using dummy_hcd
[  584.451119][T10242] usb 7-1: Using ep0 maxpacket: 32
[  584.455014][T10242] usb 7-1: unable to get BOS descriptor or descriptor too short
[  584.458596][T10242] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  584.467898][T10242] usb 7-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec
[  584.471396][T10242] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  584.473977][T10242] usb 7-1: Product: syz
[  584.475749][T10242] usb 7-1: Manufacturer: syz
[  584.477692][T10242] usb 7-1: SerialNumber: syz
[  584.482489][T10242] usb 7-1: config 0 descriptor??
[  584.696681][T18406] usb 7-1: USB disconnect, device number 15
[  585.326604][T21588] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  585.330054][T21588] comedi comedi3: 8255: I/O port conflict (0x2,4)
[  585.333009][T21588] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  585.337956][T21588] comedi comedi3: 8255: I/O port conflict (0x5c952399,4)
[  585.344129][T21588] comedi comedi3: 8255: I/O port conflict (0x5,4)
[  585.346970][T21588] comedi comedi3: 8255: I/O port conflict (0x3ff,4)
[  585.350518][T21588] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  585.355620][T21588] comedi comedi3: 8255: I/O port conflict (0x1,4)
[  585.358062][T21588] comedi comedi3: 8255: I/O port conflict (0x9,4)
[  585.361488][T21588] comedi comedi3: 8255: I/O port conflict (0x6,4)
[  585.364653][T21588] comedi comedi3: 8255: I/O port conflict (0x4,4)
[  585.367336][T21588] comedi comedi3: 8255: I/O port conflict (0x3,4)
[  585.370230][T21588] comedi comedi3: 8255: I/O port conflict (0xffffffff80000089,4)
[  585.373672][T21588] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffd,4)
[  585.492601][T21595] overlayfs: failed to clone upperpath
[  585.926648][T21603] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6331'.
[  586.787183][T21630] macsec0: entered promiscuous mode
[  586.790066][T21630] macsec0: entered allmulticast mode
[  586.792199][T21630] veth1_macvtap: entered allmulticast mode
[  586.924444][   T33] audit: type=1326 audit(1755181018.166:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21635 comm="syz.2.6346" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x0
[  587.000271][T21627] loop6: detected capacity change from 0 to 32768
[  587.014606][T21627] ERROR: (device loop6): diNewExt: no free extents
[  587.014606][T21627] 
[  587.027557][T21627] ERROR: (device loop6): remounting filesystem as read-only
[  587.032288][T21627] ialloc: diAlloc returned -5!
[  587.218435][T21641] loop6: detected capacity change from 0 to 128
[  587.242081][T21641] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  587.255802][T21641] ext4 filesystem being mounted at /336/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  587.310794][T18201] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  587.483559][T21651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  587.516261][T21651] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  587.618745][T21657] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6355'.
[  587.623786][T21657] netlink: 72 bytes leftover after parsing attributes in process `syz.1.6355'.
[  588.616195][T21711] random: crng reseeded on system resumption
[  588.693843][T21715] netlink: 32 bytes leftover after parsing attributes in process `syz.6.6383'.
[  588.833113][T21729] overlayfs: failed to clone upperpath
[  588.878911][   T33] audit: type=1326 audit(1755181020.116:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21732 comm="syz.2.6392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  588.888912][   T33] audit: type=1326 audit(1755181020.116:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21732 comm="syz.2.6392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  588.898177][   T33] audit: type=1326 audit(1755181020.126:117): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21732 comm="syz.2.6392" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  588.927518][   T33] audit: type=1326 audit(1755181020.126:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21732 comm="syz.2.6392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  588.937667][   T33] audit: type=1326 audit(1755181020.126:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21732 comm="syz.2.6392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  588.946162][   T33] audit: type=1326 audit(1755181020.136:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21732 comm="syz.2.6392" exe="/syz-executor" sig=0 arch=c000003e syscall=101 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  588.954037][   T33] audit: type=1326 audit(1755181020.136:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21732 comm="syz.2.6392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  588.967789][   T33] audit: type=1326 audit(1755181020.136:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21732 comm="syz.2.6392" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  589.602507][T18406] usb 7-1: new full-speed USB device number 16 using dummy_hcd
[  589.772999][T18406] usb 7-1: unable to get BOS descriptor or descriptor too short
[  589.777498][T18406] usb 7-1: not running at top speed; connect to a high speed hub
[  589.782452][T18406] usb 7-1: config 5 has an invalid interface number: 246 but max is 0
[  589.785210][T18406] usb 7-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  589.788743][T18406] usb 7-1: config 5 has no interface number 0
[  589.791792][T18406] usb 7-1: config 5 interface 246 altsetting 4 endpoint 0x3 has invalid maxpacket 255, setting to 64
[  589.795647][T18406] usb 7-1: config 5 interface 246 altsetting 4 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  589.799935][T18406] usb 7-1: config 5 interface 246 has no altsetting 0
[  589.804319][T18406] usb 7-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=f5.e4
[  589.807658][T18406] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.810458][T18406] usb 7-1: Product: syz
[  589.812068][T18406] usb 7-1: Manufacturer: syz
[  589.814175][T18406] usb 7-1: SerialNumber: syz
[  590.074944][T18406] usb 7-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  590.081364][T18406] usb 7-1: USB disconnect, device number 16
[  590.090375][   T12] usb 7-1: Failed to submit usb control message: -71
[  590.093702][   T12] usb 7-1: unable to send the bmi data to the device: -71
[  590.106551][   T12] usb 7-1: unable to get target info from device
[  590.115300][   T12] usb 7-1: could not get target info (-71)
[  590.117832][   T12] usb 7-1: could not probe fw (-71)
[  590.301808][T21778] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6410'.
[  590.384030][   T33] audit: type=1326 audit(1755181021.626:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=21782 comm="syz.2.6413" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9468f8ebe9 code=0x0
[  590.412748][T21788] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  590.445375][T21791] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6416'.
[  591.044686][T21800] loop6: detected capacity change from 0 to 32768
[  591.047988][T21800] btrfs: Deprecated parameter 'usebackuproot'
[  591.050407][T21800] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  591.068744][T21800] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6420 (21800)
[  591.078869][T21800] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  591.083110][T21800] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  591.086622][T21800] BTRFS info (device loop6): using free-space-tree
[  591.324828][T21800] BTRFS info (device loop6): rebuilding free space tree
[  591.465263][T21823] BTRFS info (device loop6): space_info DATA+METADATA (sub-group id 0) has 159744 free, is not full
[  591.469668][T21823] BTRFS info (device loop6): space_info total=3276800, used=53248, pinned=20480, reserved=1236992, may_use=1806336, readonly=0 zone_unusable=0
[  591.474869][T21823] BTRFS info (device loop6): global_block_rsv: size 1441792 reserved 1441792
[  591.478239][T21823] BTRFS info (device loop6): trans_block_rsv: size 0 reserved 0
[  591.480820][T21823] BTRFS info (device loop6): chunk_block_rsv: size 0 reserved 0
[  591.483230][T21823] BTRFS info (device loop6): delayed_block_rsv: size 0 reserved 0
[  591.486217][T21823] BTRFS info (device loop6): delayed_refs_rsv: size 196608 reserved 65536
[  591.526293][T21827] netlink: 'syz.2.6424': attribute type 4 has an invalid length.
[  591.542110][T21827] netlink: 'syz.2.6424': attribute type 4 has an invalid length.
[  591.956342][T18201] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  592.504478][T21848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6433'.
[  593.466360][T21892] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6452'.
[  593.646222][T21898] 9pnet_fd: Insufficient options for proto=fd
[  593.689191][T21902] netlink: 'syz.1.6457': attribute type 29 has an invalid length.
[  593.874274][ T5850] Bluetooth: hci0: unexpected event for opcode 0x0803
[  594.700872][T21949] bond6: entered promiscuous mode
[  594.702569][T21949] bond6: entered allmulticast mode
[  594.704483][T21949] 8021q: adding VLAN 0 to HW filter on device bond6
[  594.786666][T21954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6482'.
[  595.213190][T21992] netlink: 'syz.2.6501': attribute type 1 has an invalid length.
[  595.234493][T21992] 8021q: adding VLAN 0 to HW filter on device bond6
[  595.251439][T21992] bond6: (slave gretap1): making interface the new active one
[  595.256314][T21992] bond6: (slave gretap1): Enslaving as an active interface with an up link
[  595.698547][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  595.698559][   T33] audit: type=1326 audit(1755181026.936:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22005 comm="syz.1.6506" exe="/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fadc158ebe9 code=0x0
[  597.177411][T22051] bridge0: port 2(bridge_slave_1) entered disabled state
[  597.180111][T22051] bridge0: port 1(bridge_slave_0) entered disabled state
[  597.230653][T22051] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  597.253168][T22051] hsr0: left promiscuous mode
[  597.270372][T22051] veth0_macvtap: left allmulticast mode
[  597.276132][T22051] veth1_macvtap: left allmulticast mode
[  597.318645][   T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0
[  597.323267][   T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  597.329391][   T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0
[  597.332278][   T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  597.335387][   T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0
[  597.338732][   T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  597.344279][   T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0
[  597.347877][   T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  597.939371][ T5850] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0
[  597.943583][ T5850] Bluetooth: hci0: Injecting HCI hardware error event
[  597.950649][ T5850] Bluetooth: hci0: hardware error 0x00
[  598.451187][T22068] bridge0: entered promiscuous mode
[  598.454189][T22068] bridge_slave_0: entered promiscuous mode
[  598.457708][T22068] hsr1: Slave A (bridge0) is not up; please bring it up to get a fully working HSR network
[  598.465315][T22068] hsr1: Slave B (bridge_slave_0) is not up; please bring it up to get a fully working HSR network
[  598.468934][T22068] hsr1: entered allmulticast mode
[  598.615568][T22076] netlink: 172 bytes leftover after parsing attributes in process `syz.2.6535'.
[  599.835603][T22122] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6556'.
[  600.019286][ T5850] Bluetooth: hci0: Opcode 0x0c03 failed: -110
[  600.604564][T22134] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6562'.
[  600.608409][T22134] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6562'.
[  600.614331][T22134] netlink: 'syz.2.6562': attribute type 11 has an invalid length.
[  600.641843][T22137] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6563'.
[  600.826613][T22150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6569'.
[  600.832027][T22150] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6569'.
[  601.161971][T22156] netlink: 16 bytes leftover after parsing attributes in process `syz.1.6571'.
[  602.124962][T22190] netlink: 'syz.2.6587': attribute type 9 has an invalid length.
[  603.513587][   T33] audit: type=1400 audit(1755181034.756:126): apparmor="DENIED" operation="setprocattr" info="exec" error=-22 profile="unconfined" pid=22221 comm="syz.1.6601"
[  604.072385][T22257] netlink: 'syz.6.6618': attribute type 4 has an invalid length.
[  605.249176][T22294] netlink: 60 bytes leftover after parsing attributes in process `syz.6.6634'.
[  605.282236][T22294] netlink: 35 bytes leftover after parsing attributes in process `syz.6.6634'.
[  605.358761][T22300] syz.6.6637 (22300): /proc/22299/oom_adj is deprecated, please use /proc/22299/oom_score_adj instead.
[  605.612195][T22316] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6645'.
[  606.085030][T10242] usb 7-1: new high-speed USB device number 17 using dummy_hcd
[  606.239684][T10242] usb 7-1: Using ep0 maxpacket: 16
[  606.244135][T10242] usb 7-1: unable to get BOS descriptor or descriptor too short
[  606.248122][T10242] usb 7-1: config 5 has an invalid interface number: 29 but max is 0
[  606.251793][T10242] usb 7-1: config 5 has no interface number 0
[  606.254314][T10242] usb 7-1: config 5 interface 29 has no altsetting 0
[  606.260674][T10242] usb 7-1: New USB device found, idVendor=05ac, idProduct=8501, bcdDevice=90.00
[  606.264126][T10242] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  606.267334][T10242] usb 7-1: Product: syz
[  606.269544][T10242] usb 7-1: Manufacturer: syz
[  606.271334][T10242] usb 7-1: SerialNumber: syz
[  606.489554][T10242] usb 7-1: Found UVC 0.00 device syz (05ac:8501)
[  606.492225][T10242] usb 7-1: No valid video chain found.
[  606.500272][T10242] usb 7-1: USB disconnect, device number 17
[  606.777218][T22365] netlink: 'syz.1.6668': attribute type 10 has an invalid length.
[  607.622922][T22380] loop6: detected capacity change from 0 to 32768
[  607.626904][T22380] BTRFS: device fsid a6a605fc-d5f1-4e66-8595-3726e2b761d6 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.6675 (22380)
[  607.651160][T22380] BTRFS info (device loop6): first mount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  607.657515][T22380] BTRFS info (device loop6): using blake2b (blake2b-256-generic) checksum algorithm
[  607.668645][T22380] BTRFS info (device loop6): using free-space-tree
[  607.835951][ T8604] BTRFS warning (device loop6): checksum verify failed on logical 5337088 mirror 1 wanted 0x324c5e2d0cac2dc8f61cbfdfc8cd69d9816061b1498b9e1bff7d10a59610160b found 0xf8bb6bdef03b64ff3b11a2a87ba7a2aeacfdb41cc49a87adad5cc1644d216b29 level 0
[  607.852171][T22380] BTRFS error (device loop6): failed to load root extent
[  607.855441][  T163] BTRFS warning (device loop6 state C): checksum verify failed on logical 5341184 mirror 1 wanted 0xc53d3c5bb04ba5dfc01f4c277f0b81815915cb99da5074f609a3f7f617cf284a found 0xd34891a64d32c06b063fbbf3d26e09cb4d5acf5ade8dc51c4cd532bb53f895d0 level 0
[  607.877693][T22380] BTRFS error (device loop6 state C): failed to load root free space
[  607.887862][ T1089] BTRFS warning (device loop6 state C): checksum verify failed on logical 5287936 mirror 1 wanted 0x31987782e3a542b4b1826f4a60605b79838e23bf27075900db4b92202c72b2fd found 0xceda3bc49047826ec4468b88ec74a14d6cd3232f25b2c41331ed48993507590e level 0
[  607.908306][ T1089] BTRFS warning (device loop6 state C): checksum verify failed on logical 5292032 mirror 1 wanted 0xcbbb23d5b53a3b4892a5068ee5011732ffcd94742b434497e3f11d7ca86a6d23 found 0x6ab87e71a537053373402d980abd70276b583e303a68e0dd0a46bb41cfc306c8 level 0
[  608.003223][T18201] BTRFS info (device loop6 state C): last unmount of filesystem a6a605fc-d5f1-4e66-8595-3726e2b761d6
[  608.449248][T22411] loop6: detected capacity change from 0 to 8
[  608.452595][T22411] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  608.605129][T22417] netlink: 71 bytes leftover after parsing attributes in process `syz.2.6685'.
[  608.854269][T22419] cramfs: Error -3 while decompressing!
[  608.857310][T22419] cramfs: ffffffff99beb628(26)->ffff888132dfc000(4096)
[  608.860685][T22419] cramfs: Error -3 while decompressing!
[  608.863230][T22419] cramfs: ffffffff99beb642(26)->ffff888132dfd000(4096)
[  608.866366][T22419] cramfs: Error -3 while decompressing!
[  608.868926][T22419] cramfs: ffffffff99beb65c(16)->ffff888132dfe000(4096)
[  608.872320][T22419] cramfs: Error -3 while decompressing!
[  608.874854][T22419] cramfs: ffffffff99beb628(26)->ffff888132dfc000(4096)
[  609.819122][    T9] usb 7-1: new high-speed USB device number 18 using dummy_hcd
[  610.047481][T22446] 8021q: VLANs not supported on lo
[  610.056272][    T9] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  610.068092][    T9] usb 7-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00
[  610.079063][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.086214][    T9] usb 7-1: config 0 descriptor??
[  610.653720][    T9] sunplus 0003:04FC:05D8.001E: hidraw0: USB HID v0.00 Device [HID 04fc:05d8] on usb-dummy_hcd.6-1/input0
[  610.819280][    T9] usb 7-1: USB disconnect, device number 18
[  611.539357][ T5850] Bluetooth: hci2: command 0x0406 tx timeout
[  611.702969][T22482] cgroup: release_agent respecified
[  612.046978][T22502] ptrace attach of "/syz-executor exec"[5846] was attempted by "ߖ鷴)Qo  \x0dvҢ9T{-92\x0ap_3j nޭOa)bkߟ.\x0aK~򜛱تKOkF^3B3){\x5crHBd,X\x09\x0b3c\x22&W\x22\x1bTL'\x09!_Nhٹ=n>a (G6茷A+&ϋЈUߍa{@{\x0b[ɸYacAzÂGl:d<]u~v!9,?Ŵ>\x22ar\x1blKڬY*VS8ȁ6]kK.=`#\x07x!gMDR*OLK\x0c}oKbA>{@aMdnQj̖5)];r,L\x0c=\x0dWAE n`>Ɵs-3`yfeH^/$L1&NP\x0d1D<\x07cPd(EdtaE!ҭ \x09@ݞHG~H<D$\x0crX`-ͪ/IFEtI;{*W\x0c\x0a:ÈV'\x0c8sejke~ɫRLB*\x0b-r@\x07VMšv%OymWGܕ|ʤ=tU?hK0uӣٜ0G 'b,\x22ߊ;2Ո'G/޳7Wd\x5c!w%xg\x22x[4!NlQ(\x0a@[+ ؐǬ[[zN sB&X>%3{- ^Qǚ4e3\x0b>sF̗H]+\x0
[  612.349547][T10244] usb 7-1: new high-speed USB device number 19 using dummy_hcd
[  612.570749][T10244] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  612.574354][T10244] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  612.577610][T10244] usb 7-1: config 1 has no interface number 0
[  612.582024][T10244] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  612.587708][T10244] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping
[  612.595038][T10244] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  612.599132][T10244] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.603342][T10244] usb 7-1: Product: syz
[  612.606142][T10244] usb 7-1: Manufacturer: syz
[  612.609173][T10244] usb 7-1: SerialNumber: syz
[  612.716482][T22520] netlink: 'syz.2.6730': attribute type 8 has an invalid length.
[  613.412269][T22563] netlink: 132 bytes leftover after parsing attributes in process `syz.2.6749'.
[  613.433004][T10244] cdc_ncm 7-1:1.1: bind() failure
[  613.512471][T22571] netlink: 14 bytes leftover after parsing attributes in process `syz.2.6753'.
[  613.514118][T22573] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6754'.
[  613.515556][T22571] batman_adv: batadv0: Removing interface: batadv_slave_0
[  613.518731][T22573] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6754'.
[  613.652142][T10244] usb 7-1: USB disconnect, device number 19
[  614.386211][T22588] loop6: detected capacity change from 0 to 32768
[  614.403617][T22588] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  614.457903][T22588] XFS (loop6): Ending clean mount
[  614.512928][T18201] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  615.184743][T22624] loop6: detected capacity change from 0 to 4096
[  615.197280][T22624] ntfs3(loop6): ino=3, ntfs_set_state failed, -22.
[  615.200532][T22624] ntfs3(loop6): Failed to initialize $Extend/$ObjId.
[  615.202729][T22624] ntfs3(loop6): mft corrupted
[  615.204388][T22624] ntfs3(loop6): Failed to load root (-22).
[  615.206477][T22624] ntfs3(loop6): ino=3, ntfs3_write_inode failed, -22.
[  616.572288][T22666] loop6: detected capacity change from 0 to 16
[  616.575952][T22666] MTD: Attempt to mount non-MTD device "/dev/loop6"
[  616.617322][T22666] cramfs: bad root offset 1048572
[  616.678068][T22671] bridge2: entered promiscuous mode
[  617.961151][   T33] audit: type=1326 audit(1755181049.197:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22710 comm="syz.2.6811" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  617.979204][   T33] audit: type=1326 audit(1755181049.197:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22710 comm="syz.2.6811" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  617.997850][   T33] audit: type=1326 audit(1755181049.217:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22710 comm="syz.2.6811" exe="/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  618.016422][   T33] audit: type=1326 audit(1755181049.217:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22710 comm="syz.2.6811" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  618.040118][   T33] audit: type=1326 audit(1755181049.217:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22710 comm="syz.2.6811" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  618.047532][   T33] audit: type=1326 audit(1755181049.227:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22710 comm="syz.2.6811" exe="/syz-executor" sig=0 arch=c000003e syscall=431 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  618.079091][   T33] audit: type=1326 audit(1755181049.227:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22710 comm="syz.2.6811" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  618.086225][   T33] audit: type=1326 audit(1755181049.227:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22710 comm="syz.2.6811" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  618.119094][   T33] audit: type=1326 audit(1755181049.227:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22710 comm="syz.2.6811" exe="/syz-executor" sig=0 arch=c000003e syscall=432 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  618.128822][T22703] loop6: detected capacity change from 0 to 32768
[  618.136877][   T33] audit: type=1326 audit(1755181049.227:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22710 comm="syz.2.6811" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  618.147703][T22703] ocfs2: Mounting device (7,6) on (node local, slot 0) with ordered data mode.
[  618.234893][T18201] ocfs2: Unmounting device (7,6) on (node local)
[  618.259759][T22727] overlayfs: failed to clone upperpath
[  618.596580][T22749] loop6: detected capacity change from 0 to 512
[  618.610150][T22749] EXT4-fs: Ignoring removed i_version option
[  618.612598][T22749] EXT4-fs: Ignoring removed nobh option
[  618.615452][T22749] EXT4-fs: journaled quota format not specified
[  618.984388][T22775] loop6: detected capacity change from 0 to 1024
[  619.020470][T22775] hfsplus: request for non-existent node 211 in B*Tree
[  619.023457][T22775] hfsplus: request for non-existent node 211 in B*Tree
[  619.040914][ T6077] hfsplus: b-tree write err: -5, ino 8
[  619.945359][T22817] netlink: 'syz.2.6859': attribute type 1 has an invalid length.
[  619.948782][T22817] netlink: 'syz.2.6859': attribute type 2 has an invalid length.
[  619.952483][T22817] netlink: 1164 bytes leftover after parsing attributes in process `syz.2.6859'.
[  620.802443][T22859] netlink: 68 bytes leftover after parsing attributes in process `syz.1.6877'.
[  620.838547][T22856] loop6: detected capacity change from 0 to 4096
[  620.864420][T22856] ntfs3(loop6): ino=3, Correct links count -> 2.
[  621.220305][T18406] usb 7-1: new high-speed USB device number 20 using dummy_hcd
[  621.396452][T18406] usb 7-1: Using ep0 maxpacket: 32
[  621.402932][T18406] usb 7-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7
[  621.405877][T18406] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  621.423418][T18406] usb 7-1: config 0 descriptor??
[  621.431017][T18406] gspca_main: sq930x-2.14.0 probing 041e:403c
[  622.279189][T18406] gspca_sq930x: reg_w 0105 bf00 failed -71
[  622.341113][T18406] sq930x 7-1:0.0: probe with driver sq930x failed with error -71
[  622.347888][T18406] usb 7-1: USB disconnect, device number 20
[  623.927442][T22995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6937'.
[  623.942863][T22995] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6937'.
[  624.174775][T23005] batman_adv: batadv0: Adding interface: gretap1
[  624.177403][T23005] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  624.218266][T23005] batman_adv: batadv0: Interface activated: gretap1
[  624.755326][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  624.758127][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  624.832961][T23038] loop6: detected capacity change from 0 to 512
[  624.844726][T23038] EXT4-fs: inline encryption not supported
[  624.862680][T23038] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  625.088911][T23038] EXT4-fs (loop6): 1 truncate cleaned up
[  625.092771][T23038] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  625.213065][T18201] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  625.902011][T23057] bridge0: port 1(bridge_slave_0) entered disabled state
[  625.924243][T23063] netlink: 'syz.6.6965': attribute type 16 has an invalid length.
[  625.927497][T23063] netlink: 'syz.6.6965': attribute type 17 has an invalid length.
[  625.967877][T23063] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check.
[  626.167144][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  626.167158][   T33] audit: type=1326 audit(1755181057.407:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23075 comm="syz.2.6974" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  626.193742][   T33] audit: type=1326 audit(1755181057.407:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23075 comm="syz.2.6974" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  626.215693][   T33] audit: type=1326 audit(1755181057.407:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23075 comm="syz.2.6974" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  626.235201][   T33] audit: type=1326 audit(1755181057.407:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23075 comm="syz.2.6974" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  626.267639][   T33] audit: type=1326 audit(1755181057.407:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23075 comm="syz.2.6974" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  626.284268][   T33] audit: type=1326 audit(1755181057.407:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23075 comm="syz.2.6974" exe="/syz-executor" sig=0 arch=c000003e syscall=222 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  626.300075][   T33] audit: type=1326 audit(1755181057.407:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23075 comm="syz.2.6974" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  626.308532][   T33] audit: type=1326 audit(1755181057.407:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23075 comm="syz.2.6974" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  626.318376][   T33] audit: type=1326 audit(1755181057.407:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23075 comm="syz.2.6974" exe="/syz-executor" sig=0 arch=c000003e syscall=223 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  626.327724][   T33] audit: type=1326 audit(1755181057.407:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23075 comm="syz.2.6974" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f9468f85ba7 code=0x7ffc0000
[  626.586715][T23093] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6981'.
[  626.921285][T10240] usb 7-1: new high-speed USB device number 21 using dummy_hcd
[  627.069091][T10240] usb 7-1: Using ep0 maxpacket: 32
[  627.073289][T10240] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  627.079098][T10240] usb 7-1: config 0 has no interface number 0
[  627.081870][T10240] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  627.086095][T10240] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  627.090301][T10240] usb 7-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00
[  627.093930][T10240] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  627.101510][T10240] usb 7-1: config 0 descriptor??
[  627.838852][T10240] uclogic 0003:28BD:0094.001F: pen parameters not found
[  627.849646][T10240] uclogic 0003:28BD:0094.001F: interface is invalid, ignoring
[  628.040088][T10240] usb 7-1: USB disconnect, device number 21
[  628.156723][T23149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7006'.
[  628.160671][T23149] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7006'.
[  628.722075][T23169] netlink: 'syz.1.7016': attribute type 9 has an invalid length.
[  628.762776][T23171] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7017'.
[  629.061389][T23195] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  629.353029][ T5850] Bluetooth: hci1: ACL packet for unknown connection handle 201
[  629.504436][T23221] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7040'.
[  629.561700][T10244] usb 7-1: new high-speed USB device number 22 using dummy_hcd
[  629.562293][T23226] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7042'.
[  629.568612][T23226] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7042'.
[  629.631213][T23231] 9pnet_fd: Insufficient options for proto=fd
[  629.711811][T10244] usb 7-1: unable to get BOS descriptor or descriptor too short
[  629.721325][T10244] usb 7-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  629.724924][T10244] usb 7-1: config 1 has an invalid descriptor of length 5, skipping remainder of the config
[  629.736500][T10244] usb 7-1: config 1 interface 1 has no altsetting 0
[  629.741812][T23232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  629.748436][T10244] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  629.752584][T10244] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  629.755860][T10244] usb 7-1: Product: syz
[  629.757628][T10244] usb 7-1: Manufacturer: syz
[  629.757682][T23246] bridge0: port 3(wlan0) entered blocking state
[  629.759737][T10244] usb 7-1: SerialNumber: syz
[  629.766629][T23246] bridge0: port 3(wlan0) entered disabled state
[  629.771806][T23246] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode
[  629.776265][T23246] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode
[  629.883701][T23250] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7050'.
[  629.983402][T10244] usb 7-1: 2:1 : no or invalid class specific endpoint descriptor
[  629.986693][T10244] usb 7-1: found format II with max.bitrate = 2418, frame size=7
[  629.990398][T10244] usb 7-1: 2:1: All rates were zero
[  630.021647][T10244] usb 7-1: USB disconnect, device number 22
[  630.843098][T23264] veth0: entered promiscuous mode
[  631.487577][T23262] veth0: left promiscuous mode
[  632.022620][T23288] loop6: detected capacity change from 0 to 32768
[  632.247923][T23298] loop6: detected capacity change from 0 to 256
[  632.264124][T23298] exfat: Deprecated parameter 'namecase'
[  632.267659][T23298] exfat: Deprecated parameter 'utf8'
[  632.281565][T23298] exfat: Deprecated parameter 'utf8'
[  632.292661][T23298] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d)
[  632.303313][   T33] kauditd_printk_skb: 11 callbacks suppressed
[  632.303331][   T33] audit: type=1800 audit(1755181063.547:159): pid=23298 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7072" name="file1" dev="loop6" ino=1048783 res=0 errno=0
[  632.497420][T23312] i801_smbus 0000:00:1f.3: Illegal SMBus block read size 0
[  632.565321][T23317] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7081'.
[  632.569195][T23317] netlink: 24 bytes leftover after parsing attributes in process `syz.6.7081'.
[  632.759936][T23327] IPv6: sit2: Disabled Multicast RS
[  632.763013][T23327] sit2: entered allmulticast mode
[  632.891455][T23335] loop6: detected capacity change from 0 to 16
[  632.900199][T23335] erofs (device loop6): mounted with root inode @ nid 36.
[  633.087563][   T33] audit: type=1326 audit(1755181064.327:160): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23344 comm="syz.2.7095" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  633.106144][T23346] netlink: 'syz.6.7096': attribute type 3 has an invalid length.
[  633.114562][   T33] audit: type=1326 audit(1755181064.327:161): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23344 comm="syz.2.7095" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  633.129042][T23346] netlink: 130984 bytes leftover after parsing attributes in process `syz.6.7096'.
[  633.139115][   T33] audit: type=1326 audit(1755181064.327:162): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23344 comm="syz.2.7095" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9468f8d550 code=0x7ffc0000
[  633.154394][   T33] audit: type=1326 audit(1755181064.327:163): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23344 comm="syz.2.7095" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9468f8d550 code=0x7ffc0000
[  633.169811][   T33] audit: type=1326 audit(1755181064.327:164): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23344 comm="syz.2.7095" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  633.183571][   T33] audit: type=1326 audit(1755181064.327:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23344 comm="syz.2.7095" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  633.206215][   T33] audit: type=1326 audit(1755181064.327:166): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23344 comm="syz.2.7095" exe="/syz-executor" sig=0 arch=c000003e syscall=267 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  633.214402][   T33] audit: type=1326 audit(1755181064.327:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23344 comm="syz.2.7095" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  633.227767][   T33] audit: type=1326 audit(1755181064.327:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23344 comm="syz.2.7095" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  633.293403][T23353] loop6: detected capacity change from 0 to 4096
[  633.320339][T23353] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  633.872451][T23373] loop6: detected capacity change from 0 to 32768
[  633.883941][T23373] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  633.900111][T23373] XFS (loop6): Ending clean mount
[  633.985675][T18201] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  634.649268][T10240] usb 7-1: new full-speed USB device number 23 using dummy_hcd
[  634.803517][T10240] usb 7-1: config 2 has an invalid interface number: 20 but max is 0
[  634.807214][T10240] usb 7-1: config 2 has no interface number 0
[  634.816135][T10240] usb 7-1: New USB device found, idVendor=0c0b, idProduct=a109, bcdDevice=17.a3
[  634.820876][T10240] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  634.824145][T10240] usb 7-1: Product: syz
[  634.825885][T10240] usb 7-1: Manufacturer: syz
[  634.827790][T10240] usb 7-1: SerialNumber: syz
[  635.051292][T10240] ums-datafab 7-1:2.20: USB Mass Storage device detected
[  635.084025][T10240] ums-datafab 7-1:2.20: Quirks match for vid 0c0b pid a109: 1
[  635.146625][T10240] ums-sddr55 7-1:2.20: USB Mass Storage device detected
[  635.222336][T10240] usb 7-1: USB disconnect, device number 23
[  635.262478][T23440] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma?
[  635.957385][T23447] loop6: detected capacity change from 0 to 4096
[  636.334251][T23454] netlink: 48 bytes leftover after parsing attributes in process `syz.1.7139'.
[  636.355559][T23456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.7140'.
[  637.267730][T23474] loop6: detected capacity change from 0 to 32768
[  637.287514][T23474] syz.6.7149: attempt to access beyond end of device
[  637.287514][T23474] loop6: rw=0, sector=153240, nr_sectors = 8 limit=32768
[  637.294840][T23474] lbmIODone: I/O error in JFS log
[  637.297983][T23474] syz.6.7149: attempt to access beyond end of device
[  637.297983][T23474] loop6: rw=2049, sector=153240, nr_sectors = 8 limit=32768
[  637.329484][T23474] lbmIODone: I/O error in JFS log
[  637.332219][T23474] lmLogInit: exit(-5)
[  637.333898][T23474] lmLogOpen: exit(-5)
[  637.335551][T23474] jfs_mount_rw failed, return code = -5
[  637.493796][T23484] loop6: detected capacity change from 0 to 512
[  637.512826][T23484] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  637.572341][T18201] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  638.039156][T10244] usb 7-1: new high-speed USB device number 24 using dummy_hcd
[  638.259277][T10244] usb 7-1: Using ep0 maxpacket: 16
[  638.263311][T10244] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0
[  638.269951][T10244] usb 7-1: New USB device found, idVendor=4752, idProduct=0011, bcdDevice=32.4f
[  638.272949][T10244] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.275619][T10244] usb 7-1: Product: syz
[  638.277078][T10244] usb 7-1: Manufacturer: syz
[  638.278592][T10244] usb 7-1: SerialNumber: syz
[  638.281958][T10244] usb 7-1: config 0 descriptor??
[  638.290298][T10244] hub 7-1:0.0: bad descriptor, ignoring hub
[  638.292705][T10244] hub 7-1:0.0: probe with driver hub failed with error -5
[  638.296413][T10244] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  638.515104][T10244] snd-usb-audio 7-1:0.0: probe with driver snd-usb-audio failed with error -2
[  638.533574][T22357] udevd[22357]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  638.544626][T10244] usb 7-1: USB disconnect, device number 24
[  639.244628][T23538] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7177'.
[  639.301798][   T33] audit: type=1326 audit(1755181070.547:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23541 comm="syz.6.7179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  639.329595][   T33] audit: type=1326 audit(1755181070.557:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23541 comm="syz.6.7179" exe="/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  639.336911][   T33] audit: type=1326 audit(1755181070.557:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23541 comm="syz.6.7179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  639.364164][   T33] audit: type=1326 audit(1755181070.557:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23541 comm="syz.6.7179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  639.386429][   T33] audit: type=1326 audit(1755181070.557:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23541 comm="syz.6.7179" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  639.403672][   T33] audit: type=1326 audit(1755181070.557:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23541 comm="syz.6.7179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  639.420308][   T33] audit: type=1326 audit(1755181070.557:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23541 comm="syz.6.7179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  639.428468][   T33] audit: type=1326 audit(1755181070.557:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23541 comm="syz.6.7179" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  639.437222][   T33] audit: type=1326 audit(1755181070.557:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23541 comm="syz.6.7179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  639.444478][   T33] audit: type=1326 audit(1755181070.557:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=23541 comm="syz.6.7179" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  639.980402][T23584] binder: 23583:23584 ioctl c0306201 200000000100 returned -14
[  640.042944][T23586] netlink: 964 bytes leftover after parsing attributes in process `syz.1.7200'.
[  640.275913][T23604] geneve3: entered allmulticast mode
[  640.281952][ T5879] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 20001 - 0
[  640.287657][ T5879] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 20001 - 0
[  640.300844][ T5879] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 20001 - 0
[  640.306658][ T5879] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 20001 - 0
[  640.337574][T23606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7208'.
[  640.953597][T23615] netlink: 16 bytes leftover after parsing attributes in process `syz.6.7211'.
[  641.695725][T23652] netlink: 96 bytes leftover after parsing attributes in process `syz.1.7227'.
[  643.421055][T22057] Bluetooth: hci2: command 0x0406 tx timeout
[  644.016956][T23734] netlink: 56 bytes leftover after parsing attributes in process `syz.2.7262'.
[  644.019587][T10240] usb 7-1: new full-speed USB device number 25 using dummy_hcd
[  644.021187][T23734] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7262'.
[  644.163765][T23739] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7264'.
[  644.167096][T23739] netlink: 16 bytes leftover after parsing attributes in process `syz.2.7264'.
[  644.171125][T23739] netlink: 36 bytes leftover after parsing attributes in process `syz.2.7264'.
[  644.176119][T10240] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  644.196777][T10240] usb 7-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22
[  644.211722][T10240] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  644.215848][T23741] openvswitch: netlink: Unknown key attributes 2
[  644.218786][T10240] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[  644.225877][T10240] usb 7-1: SerialNumber: syz
[  644.456506][T10240] usb 7-1: USB disconnect, device number 25
[  644.574606][T23760] __nla_validate_parse: 1 callbacks suppressed
[  644.574627][T23760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7274'.
[  644.582348][T23760] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7274'.
[  645.057413][T23780] netlink: 'syz.6.7281': attribute type 10 has an invalid length.
[  645.371862][T23785] loop6: detected capacity change from 0 to 8
[  645.398557][T23785] SQUASHFS error: xz decompression failed, data probably corrupt
[  645.410197][T23785] SQUASHFS error: Failed to read block 0x108: -5
[  645.413050][T23785] SQUASHFS error: Unable to read metadata cache entry [106]
[  645.416144][T23785] SQUASHFS error: Unable to read inode 0x11f
[  645.674320][T23806] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  646.604103][T23841] lo: Caught tx_queue_len zero misconfig
[  646.710604][T23848] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7312'.
[  646.716653][T23848] netlink: 'syz.1.7312': attribute type 2 has an invalid length.
[  646.931772][T23864] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.7320'.
[  647.868055][T23902] loop6: detected capacity change from 0 to 1764
[  647.916946][T23902] iso9660: Corrupted directory entry in block 2 of inode 1920
[  648.200368][T23919] netlink: 100 bytes leftover after parsing attributes in process `syz.2.7345'.
[  648.259597][    T9] usb 7-1: new high-speed USB device number 26 using dummy_hcd
[  648.331834][T23928] trusted_key: encrypted_key: insufficient parameters specified
[  648.429521][    T9] usb 7-1: Using ep0 maxpacket: 32
[  648.435636][    T9] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  648.440040][    T9] usb 7-1: config 0 has no interface number 0
[  648.452198][    T9] usb 7-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8
[  648.456027][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  648.464210][    T9] usb 7-1: Product: syz
[  648.466120][    T9] usb 7-1: Manufacturer: syz
[  648.468202][    T9] usb 7-1: SerialNumber: syz
[  648.476676][    T9] usb 7-1: config 0 descriptor??
[  648.483441][    T9] usb 7-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state
[  648.487413][    T9] usb 7-1: selecting invalid altsetting 1
[  648.491903][    T9] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-22
[  648.503115][    T9] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[  648.506869][    T9] dvbdev: DVB: registering new adapter (Intel CE9500 reference design)
[  648.510126][    T9] usb 7-1: media controller created
[  648.528013][    T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  648.694307][    T9] usb 7-1: dvb_usb_ce6230: usb_control_msg() failed=-71
[  648.698431][    T9] zl10353_read_register: readreg error (reg=127, ret==-71)
[  648.703042][    T9] usb 7-1: dvb_usb_ce6230: usb_set_interface() failed=-71
[  648.745582][    T9] usb 7-1: USB disconnect, device number 26
[  648.832314][T23942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7356'.
[  648.836029][T23942] batman_adv: batadv0: Removing interface: batadv_slave_0
[  648.840476][T23942] batman_adv: batadv0: Interface deactivated: gretap1
[  648.843136][T23942] batman_adv: batadv0: Removing interface: gretap1
[  649.066661][T23951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.7360'.
[  649.248705][T23963] netlink: 'syz.1.7365': attribute type 21 has an invalid length.
[  649.278773][T23963] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7365'.
[  649.457313][T23976] netdevsim netdevsim6 netdevsim0: entered promiscuous mode
[  649.861075][T23987] PM: Enabling pm_trace changes system date and time during resume.
[  649.861075][T23987] PM: Correct system time has to be restored manually after resume.
[  649.936308][T23996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7379'.
[  649.940139][T23996] netlink: 'syz.1.7379': attribute type 5 has an invalid length.
[  649.942940][T23996] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7379'.
[  649.950377][T23996] geneve4: entered promiscuous mode
[  649.952163][T23996] geneve4: entered allmulticast mode
[  649.954795][ T5879] netdevsim netdevsim1 eth0: set [1, 2] type 2 family 0 port 256 - 0
[  649.958170][ T5879] netdevsim netdevsim1 eth1: set [1, 2] type 2 family 0 port 256 - 0
[  649.961463][ T5879] netdevsim netdevsim1 eth2: set [1, 2] type 2 family 0 port 256 - 0
[  649.964665][ T5879] netdevsim netdevsim1 eth3: set [1, 2] type 2 family 0 port 256 - 0
[  650.159112][    T9] usb 7-1: new high-speed USB device number 27 using dummy_hcd
[  650.322749][    T9] usb 7-1: unable to get BOS descriptor or descriptor too short
[  650.327086][    T9] usb 7-1: config 9 has an invalid interface number: 64 but max is 0
[  650.331160][    T9] usb 7-1: config 9 has no interface number 0
[  650.333652][    T9] usb 7-1: config 9 interface 64 has no altsetting 0
[  650.347364][    T9] usb 7-1: New USB device found, idVendor=0572, idProduct=cb00, bcdDevice=1e.21
[  650.356531][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  650.360276][    T9] usb 7-1: Product: syz
[  650.362034][    T9] usb 7-1: Manufacturer: syz
[  650.363920][    T9] usb 7-1: SerialNumber: syz
[  650.366903][   T33] kauditd_printk_skb: 23 callbacks suppressed
[  650.366914][   T33] audit: type=1326 audit(1755181081.607:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24015 comm="syz.2.7389" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  650.389102][   T33] audit: type=1326 audit(1755181081.607:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24015 comm="syz.2.7389" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  650.397466][   T33] audit: type=1326 audit(1755181081.627:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24015 comm="syz.2.7389" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9468f8d550 code=0x7ffc0000
[  650.417737][   T33] audit: type=1326 audit(1755181081.627:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24015 comm="syz.2.7389" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9468f8d550 code=0x7ffc0000
[  650.431861][   T33] audit: type=1326 audit(1755181081.627:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24015 comm="syz.2.7389" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  650.451922][   T33] audit: type=1326 audit(1755181081.627:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24015 comm="syz.2.7389" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  650.463071][   T33] audit: type=1326 audit(1755181081.627:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24015 comm="syz.2.7389" exe="/syz-executor" sig=0 arch=c000003e syscall=187 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  650.472049][   T33] audit: type=1326 audit(1755181081.627:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24015 comm="syz.2.7389" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  650.482184][   T33] audit: type=1326 audit(1755181081.627:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24015 comm="syz.2.7389" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  650.560469][T24024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7393'.
[  650.564258][T24024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7393'.
[  650.567976][T24024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.7393'.
[  650.597313][    T9] cxacru 7-1:9.64: cxacru_bind: interface has incorrect endpoints
[  650.612802][    T9] cxacru 7-1:9.64: usbatm_usb_probe: bind failed: -19!
[  650.622265][    T9] usb 7-1: USB disconnect, device number 27
[  652.575827][T24075] loop6: detected capacity change from 0 to 40427
[  652.594734][T24075] F2FS-fs: heap/no_heap options were deprecated
[  652.597935][T24075] F2FS-fs (loop6): build fault injection rate: 19
[  652.609945][T24075] F2FS-fs (loop6): invalid crc value
[  652.665754][T24075] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  652.671508][T24075] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  652.688362][T24075] F2FS-fs (loop6): inconsistent node block, node_type:1, nid:11, node_footer[nid:11,ino:3,ofs:2041,cpver:0,blkaddr:0]
[  652.952915][T24100] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7426'.
[  653.116437][T24098] loop6: detected capacity change from 0 to 32768
[  653.390682][T24119] loop6: detected capacity change from 0 to 256
[  653.394796][T24119] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  653.398480][T24119] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  653.408819][T24119] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d)
[  653.650829][T24121] loop6: detected capacity change from 0 to 32768
[  653.676275][T24121] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.7436 (24121)
[  653.708812][T24121] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  653.713478][T24121] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  653.717012][T24121] BTRFS info (device loop6): using free-space-tree
[  653.878717][T18201] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  654.573425][T24181] syzkaller1: tun_chr_ioctl cmd 1074025681
[  654.704709][T24189] veth1_macvtap: left promiscuous mode
[  654.707095][T24189] macsec0: entered allmulticast mode
[  654.721198][T24189] veth1_macvtap: entered promiscuous mode
[  654.723267][T24189] veth1_macvtap: entered allmulticast mode
[  654.728343][T24189] macsec0: left allmulticast mode
[  654.732382][T24189] veth1_macvtap: left allmulticast mode
[  654.956869][T24199] netlink: 'syz.2.7467': attribute type 1 has an invalid length.
[  654.961409][T24199] netlink: 1 bytes leftover after parsing attributes in process `syz.2.7467'.
[  655.101170][T10240] usb 7-1: new high-speed USB device number 28 using dummy_hcd
[  655.371952][T10240] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  655.376325][T10240] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  655.385244][T10240] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  655.388746][T10240] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  655.395270][T10240] usb 7-1: config 0 descriptor??
[  655.956479][T10240] cp2112 0003:10C4:EA90.0020: unknown main item tag 0x0
[  655.960907][T10240] cp2112 0003:10C4:EA90.0020: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0
[  656.149605][T10240] cp2112 0003:10C4:EA90.0020: Part Number: 0x82 Device Version: 0xFE
[  656.173777][T24222] rdma_op ffff888106a3b9f0 conn xmit_rdma 0000000000000000
[  656.528162][T24241] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7484'.
[  656.532659][T24241] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7484'.
[  656.566998][T24241] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7484'.
[  656.580691][T24241] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7484'.
[  656.665060][T24241] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7484'.
[  656.669314][T24241] netlink: 60 bytes leftover after parsing attributes in process `syz.1.7484'.
[  656.756716][T10240] cp2112 0003:10C4:EA90.0020: error reading lock byte: -71
[  656.763120][T10240] usb 7-1: USB disconnect, device number 28
[  657.021345][T24263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.7493'.
[  657.570141][T10240] usb 7-1: new high-speed USB device number 29 using dummy_hcd
[  657.721398][T10240] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  657.724926][T10240] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  657.729285][T10240] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  657.733051][T10240] usb 7-1: config 1 has no interface number 1
[  657.735523][T10240] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  657.740945][T10240] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  657.748751][T10240] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  657.752533][T10240] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  657.755573][T10240] usb 7-1: Product: syz
[  657.757190][T10240] usb 7-1: Manufacturer: syz
[  657.759089][T10240] usb 7-1: SerialNumber: syz
[  657.987681][T10240] usb 7-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  657.999410][T10240] usb 7-1: MIDIStreaming interface descriptor not found
[  658.038152][T10240] usb 7-1: USB disconnect, device number 29
[  658.142407][T24300] udevd[24300]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  658.640439][T24313] overlayfs: failed to clone upperpath
[  659.375356][T24351] loop6: detected capacity change from 0 to 256
[  659.381191][T24351] exFAT-fs (loop6): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  659.390050][T24351] exFAT-fs (loop6): Medium has reported failures. Some data may be lost.
[  659.396470][T24351] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d)
[  659.714206][T24359] loop6: detected capacity change from 0 to 256
[  659.728646][T24359] exfat: Deprecated parameter 'utf8'
[  660.634502][T24373] loop6: detected capacity change from 0 to 32768
[  660.680567][T24373] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  660.720347][T24373] XFS (loop6): Ending clean mount
[  660.725126][T24373] XFS (loop6): Quotacheck needed: Please wait.
[  660.831415][T24373] XFS (loop6): Quotacheck: Done.
[  660.909995][T18201] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  661.342912][T24408] loop6: detected capacity change from 0 to 256
[  661.367874][T24408] FAT-fs (loop6): Directory bread(block 64) failed
[  661.389471][T24408] FAT-fs (loop6): Directory bread(block 65) failed
[  661.392247][T24408] FAT-fs (loop6): Directory bread(block 66) failed
[  661.396438][T24408] FAT-fs (loop6): Directory bread(block 67) failed
[  661.405460][T24408] FAT-fs (loop6): Directory bread(block 68) failed
[  661.408185][T24408] FAT-fs (loop6): Directory bread(block 69) failed
[  661.411541][T24408] FAT-fs (loop6): Directory bread(block 70) failed
[  661.413954][T24408] FAT-fs (loop6): Directory bread(block 71) failed
[  661.416658][T24408] FAT-fs (loop6): Directory bread(block 72) failed
[  661.419728][T24408] FAT-fs (loop6): Directory bread(block 73) failed
[  661.527950][T24416] loop6: detected capacity change from 0 to 512
[  661.537433][T24416] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  661.558812][T24416] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c11c, mo2=0002]
[  661.568438][T24416] System zones: 1-12
[  661.581070][T24416] EXT4-fs (loop6): 1 truncate cleaned up
[  661.589975][T24416] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  661.632966][T18201] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  662.165607][T24449] loop6: detected capacity change from 0 to 1024
[  662.171169][T24449] hfsplus: write access to a journaled filesystem is not supported, use the force option at your own risk, mounting read-only.
[  662.621823][T24455] loop6: detected capacity change from 0 to 256
[  662.665747][T24455] exfat: Deprecated parameter 'utf8'
[  662.707972][T24455] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x1a9973fb, utbl_chksum : 0xe619d30d)
[  662.877460][T24461] loop6: detected capacity change from 0 to 16
[  662.885675][T24461] erofs (device loop6): rootino(nid 36) is not a directory(i_mode 145700)
[  663.599184][T10240] usb 7-1: new high-speed USB device number 30 using dummy_hcd
[  663.769763][T10240] usb 7-1: Using ep0 maxpacket: 8
[  663.862502][T10240] usb 7-1: New USB device found, idVendor=0c45, idProduct=614a, bcdDevice=c4.6d
[  663.866399][T10240] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  663.870238][T10240] usb 7-1: Product: syz
[  663.872090][T10240] usb 7-1: Manufacturer: syz
[  663.874095][T10240] usb 7-1: SerialNumber: syz
[  663.880840][T10240] usb 7-1: config 0 descriptor??
[  663.891102][T10240] gspca_main: sonixj-2.14.0 probing 0c45:614a
[  664.283098][T24493] netlink: 212368 bytes leftover after parsing attributes in process `syz.1.7593'.
[  664.287050][T24493] openvswitch: netlink: Port -8 exceeds max allowable 65535
[  664.846563][T24499] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7596'.
[  664.895749][T10240] gspca_sonixj: reg_w err -71
[  664.898588][T10240] sonixj 7-1:0.0: probe with driver sonixj failed with error -71
[  664.911355][T10240] usb 7-1: USB disconnect, device number 30
[  665.434832][T22057] Bluetooth: hci1: Malformed MSFT vendor event: 0x02
[  665.525195][T24521] overlayfs: workdir and upperdir must be separate subtrees
[  665.887594][T24543] netlink: 12 bytes leftover after parsing attributes in process `syz.6.7618'.
[  667.107734][T10240] usb 7-1: new low-speed USB device number 31 using dummy_hcd
[  668.128191][T24592] trusted_key: encrypted_key: keyword 'new' not recognized
[  668.234058][T10240] usb 7-1: config 0 has an invalid interface number: 153 but max is 0
[  668.237473][T10240] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  668.259193][T10240] usb 7-1: config 0 has no interface number 0
[  668.261724][T10240] usb 7-1: config 0 interface 153 has no altsetting 0
[  668.280928][T10240] usb 7-1: string descriptor 0 read error: -22
[  668.283644][T10240] usb 7-1: New USB device found, idVendor=05ac, idProduct=8514, bcdDevice=ea.83
[  668.287610][T10240] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  668.296306][T10240] usb 7-1: config 0 descriptor??
[  668.310846][T10240] uvcvideo 7-1:0.153: probe with driver uvcvideo failed with error -22
[  668.357413][T24606] netlink: 104 bytes leftover after parsing attributes in process `syz.1.7647'.
[  668.511062][T18406] usb 7-1: USB disconnect, device number 31
[  669.146652][T24667] 9pnet_fd: Insufficient options for proto=fd
[  669.806501][   T33] audit: type=1326 audit(1755181101.047:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.1.7682" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc158ebe9 code=0x7ffc0000
[  669.833039][   T33] audit: type=1326 audit(1755181101.067:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.1.7682" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc158ebe9 code=0x7ffc0000
[  669.856637][   T33] audit: type=1326 audit(1755181101.067:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.1.7682" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fadc158ebe9 code=0x7ffc0000
[  669.888757][   T33] audit: type=1326 audit(1755181101.067:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.1.7682" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc158ebe9 code=0x7ffc0000
[  669.897483][   T33] audit: type=1326 audit(1755181101.067:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.1.7682" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc158ebe9 code=0x7ffc0000
[  669.907324][   T33] audit: type=1326 audit(1755181101.067:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.1.7682" exe="/syz-executor" sig=0 arch=c000003e syscall=312 compat=0 ip=0x7fadc158ebe9 code=0x7ffc0000
[  669.915018][   T33] audit: type=1326 audit(1755181101.067:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.1.7682" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc158ebe9 code=0x7ffc0000
[  669.925972][   T33] audit: type=1326 audit(1755181101.067:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24696 comm="syz.1.7682" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc158ebe9 code=0x7ffc0000
[  670.417584][T24734] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7698'.
[  670.850848][T24743] netlink: 'syz.2.7703': attribute type 1 has an invalid length.
[  670.969471][T24743] 8021q: adding VLAN 0 to HW filter on device bond7
[  671.004502][T24746] vlan1: entered allmulticast mode
[  671.015499][T24746] bond7: (slave vlan1): Opening slave failed
[  672.772148][T24798] netlink: 212364 bytes leftover after parsing attributes in process `syz.1.7729'.
[  672.775279][T24798] openvswitch: netlink: Message has 5 unknown bytes.
[  673.353795][T24810] sock: sock_set_timeout: `syz.1.7735' (pid 24810) tries to set negative timeout
[  673.514344][T24817] netlink: 72 bytes leftover after parsing attributes in process `syz.6.7738'.
[  674.100977][    T9] usb 7-1: new high-speed USB device number 32 using dummy_hcd
[  674.202962][T24838] netlink: 52 bytes leftover after parsing attributes in process `syz.1.7747'.
[  674.269359][    T9] usb 7-1: Using ep0 maxpacket: 32
[  674.283202][    T9] usb 7-1: config 0 has an invalid interface number: 222 but max is 0
[  674.287472][    T9] usb 7-1: config 0 has no interface number 0
[  674.297310][    T9] usb 7-1: New USB device found, idVendor=0ab4, idProduct=0010, bcdDevice=61.2f
[  674.305408][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  674.308757][    T9] usb 7-1: Product: syz
[  674.315507][    T9] usb 7-1: Manufacturer: syz
[  674.317337][    T9] usb 7-1: SerialNumber: syz
[  674.326487][    T9] usb 7-1: config 0 descriptor??
[  674.332111][    T9] esd_usb 7-1:0.222: sending version message failed
[  674.334934][    T9] esd_usb 7-1:0.222: probe with driver esd_usb failed with error -22
[  675.498413][T24911] netlink: 'syz.2.7783': attribute type 3 has an invalid length.
[  675.526399][T24913] netlink: 'syz.1.7784': attribute type 21 has an invalid length.
[  675.531326][T24913] netlink: 128 bytes leftover after parsing attributes in process `syz.1.7784'.
[  675.536285][T24913] netlink: 'syz.1.7784': attribute type 5 has an invalid length.
[  675.545052][T24913] netlink: 'syz.1.7784': attribute type 6 has an invalid length.
[  675.549737][T24913] netlink: 3 bytes leftover after parsing attributes in process `syz.1.7784'.
[  676.617742][T10240] usb 7-1: USB disconnect, device number 32
[  676.981870][T24979] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  678.387129][T25023] netlink: 2036 bytes leftover after parsing attributes in process `syz.2.7835'.
[  678.391096][T25023] netlink: 24 bytes leftover after parsing attributes in process `syz.2.7835'.
[  679.157315][T25037] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long
[  679.863040][T18406] usb 7-1: new high-speed USB device number 33 using dummy_hcd
[  680.010165][T18406] usb 7-1: Using ep0 maxpacket: 16
[  680.018389][T18406] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 63, changing to 7
[  680.023748][T18406] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[  680.027884][T18406] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  680.036107][T18406] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  680.041463][T18406] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  680.044973][T18406] usb 7-1: Product: syz
[  680.046879][T18406] usb 7-1: Manufacturer: syz
[  680.127915][T18406] usb 7-1: SerialNumber: syz
[  680.347100][T18406] usb 7-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  680.361851][T18406] usb 7-1: unit 1 not found!
[  680.378911][T18406] usb 7-1: USB disconnect, device number 33
[  680.421094][T22357] udevd[22357]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  680.952056][T25110] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7876'.
[  680.956762][T25110] netlink: 660 bytes leftover after parsing attributes in process `syz.6.7876'.
[  682.470395][T25150] loop6: detected capacity change from 0 to 32768
[  682.473778][T25150] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.7892 (25150)
[  682.480762][T25150] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  682.484885][T25150] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  682.487646][T25150] BTRFS info (device loop6): using free-space-tree
[  682.635844][T25173] netlink: 201392 bytes leftover after parsing attributes in process `syz.1.7895'.
[  682.644705][T25173] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16)
[  682.647516][T25173] openvswitch: netlink: Message has 8454 unknown bytes.
[  682.689935][T18201] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  683.279169][   T47] usb 7-1: new high-speed USB device number 34 using dummy_hcd
[  683.431657][   T47] usb 7-1: config 0 has an invalid interface number: 48 but max is 0
[  683.434609][   T47] usb 7-1: config 0 has no interface number 0
[  683.436812][   T47] usb 7-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[  683.442103][   T47] usb 7-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  683.446976][   T47] usb 7-1: config 0 interface 48 has no altsetting 0
[  683.452112][   T47] usb 7-1: New USB device found, idVendor=08fd, idProduct=0002, bcdDevice=ca.fd
[  683.456239][   T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  683.459748][   T47] usb 7-1: Product: syz
[  683.461437][   T47] usb 7-1: Manufacturer: syz
[  683.463471][   T47] usb 7-1: SerialNumber: syz
[  683.471865][   T47] usb 7-1: config 0 descriptor??
[  683.505568][T25209] team0: No ports can be present during mode change
[  683.696591][   T47] usb 7-1: USB disconnect, device number 34
[  684.286878][T25238] loop6: detected capacity change from 0 to 2048
[  684.352503][T22357]  loop6: p3 < > p4 < >
[  684.356679][T22357] loop6: partition table partially beyond EOD, truncated
[  684.364537][T22357] loop6: p3 start 4284289 is beyond EOD, truncated
[  684.373365][T25238]  loop6: p3 < > p4 < >
[  684.375135][T25238] loop6: partition table partially beyond EOD, truncated
[  684.388499][T25238] loop6: p3 start 4284289 is beyond EOD, truncated
[  684.461312][ T5295]  loop6: p3 < > p4 < >
[  684.463121][ T5295] loop6: partition table partially beyond EOD, truncated
[  684.468610][ T5295] loop6: p3 start 4284289 is beyond EOD, truncated
[  684.518871][T22357] udevd[22357]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  684.550223][T22357] udevd[22357]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory
[  684.816745][   T33] audit: type=1326 audit(1755181117.063:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25269 comm="syz.6.7934" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  684.846229][   T33] audit: type=1326 audit(1755181117.063:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25269 comm="syz.6.7934" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  684.881637][T25271] netlink: 'syz.1.7929': attribute type 9 has an invalid length.
[  684.884324][T25271] netlink: 'syz.1.7929': attribute type 7 has an invalid length.
[  684.887321][T25271] netlink: 'syz.1.7929': attribute type 8 has an invalid length.
[  684.908657][   T33] audit: type=1326 audit(1755181117.063:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25269 comm="syz.6.7934" exe="/syz-executor" sig=0 arch=c000003e syscall=68 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  684.975999][   T33] audit: type=1326 audit(1755181117.063:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25269 comm="syz.6.7934" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  685.036509][   T33] audit: type=1326 audit(1755181117.063:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25269 comm="syz.6.7934" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  685.061548][   T33] audit: type=1326 audit(1755181117.063:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25269 comm="syz.6.7934" exe="/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  685.080252][   T33] audit: type=1326 audit(1755181117.063:225): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25269 comm="syz.6.7934" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  685.088077][   T33] audit: type=1326 audit(1755181117.063:226): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25269 comm="syz.6.7934" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efcac18ebe9 code=0x7ffc0000
[  685.717468][T25302] loop6: detected capacity change from 0 to 8192
[  685.734354][T25302] msdos: Unknown parameter 'dk'
[  686.197394][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  686.200787][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  687.690801][T25344] tipc: Cannot configure node identity twice
[  687.719104][T25316] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  689.283734][T25407] loop6: detected capacity change from 0 to 512
[  689.287068][T25407] EXT4-fs: Ignoring removed oldalloc option
[  689.306779][T25407] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  689.315595][T25407] ext4 filesystem being mounted at /690/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  689.332030][T25407] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.7997: bg 0: block 217: padding at end of block bitmap is not set
[  689.352452][T18201] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  689.686848][T25431] loop6: detected capacity change from 0 to 32768
[  689.690704][T25431] XFS: ikeep mount option is deprecated.
[  689.719256][T25431] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  689.771470][T25431] XFS (loop6): Ending clean mount
[  689.779300][T25431] XFS (loop6): Quotacheck needed: Please wait.
[  689.825976][T25431] XFS (loop6): Quotacheck: Done.
[  689.836875][   T33] audit: type=1800 audit(1755181122.083:227): pid=25431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.8007" name="file1" dev="loop6" ino=9286 res=0 errno=0
[  689.865457][T18201] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  690.086517][T25445] overlayfs: failed to clone upperpath
[  690.206968][T25450] tc_dump_action: action bad kind
[  690.216076][   T33] audit: type=1326 audit(1755181122.463:228): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=25417 comm="syz.1.8002" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fadc158ebe9 code=0x7fc00000
[  690.751469][T25462] IPVS: Error connecting to the multicast addr
[  691.729816][T25480] loop6: detected capacity change from 0 to 32768
[  691.791243][T25480] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  691.805713][T25487] netlink: 20 bytes leftover after parsing attributes in process `syz.1.8025'.
[  691.833151][T25480] XFS (loop6): Ending clean mount
[  691.845763][T25480] XFS (loop6): Quotacheck needed: Please wait.
[  691.952633][T25480] XFS (loop6): Quotacheck: Done.
[  691.976013][T18201] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  693.322953][T25527] loop6: detected capacity change from 0 to 256
[  693.336819][T25527] exfat: Unknown parameter 'sys_tz'
[  693.504645][T25533] loop6: detected capacity change from 0 to 4096
[  693.520904][T25533] NILFS (loop6): invalid segment: Checksum error in segment payload
[  693.524302][T25533] NILFS (loop6): trying rollback from an earlier position
[  693.545142][T25533] NILFS (loop6): recovery complete
[  693.557998][T25534] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  693.787068][T25540] 9pnet: p9_errstr2errno: server reported unknown error 1844674
[  694.162051][T25553] ptrace attach of "/syz-executor exec"[5846] was attempted by "/syz-executor exec"[25553]
[  694.362906][T25559] netlink: 24 bytes leftover after parsing attributes in process `syz.1.8055'.
[  695.142948][T25567] loop6: detected capacity change from 0 to 32768
[  695.166569][T25567] ERROR: (device loop6): diAllocAG: numfree > numinos
[  695.166569][T25567] 
[  695.181107][T25567] ialloc: diAlloc returned -5!
[  695.395058][T25577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8063'.
[  697.196674][T25683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8092'.
[  697.506694][T25702] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  697.880072][T25716] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8107'.
[  698.166543][T25721] loop6: detected capacity change from 0 to 8
[  698.815842][T25767] netlink: 5 bytes leftover after parsing attributes in process `syz.6.8132'.
[  698.821419][T25767] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  698.875455][T25773] loop6: detected capacity change from 0 to 512
[  698.900594][T25773] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  698.937566][T25773] FAT-fs (loop6): error, fat_free_clusters: deleting FAT entry beyond EOF
[  698.944377][T25773] FAT-fs (loop6): Filesystem has been set read-only
[  699.078494][T25785] loop6: detected capacity change from 0 to 256
[  699.094646][T25785] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x89cb6648, utbl_chksum : 0xe619d30d)
[  699.105743][T25785] exFAT-fs (loop6): start_clu is invalid cluster(0xffffffff)
[  699.165620][T25787] loop6: detected capacity change from 0 to 256
[  699.185701][T25787] FAT-fs (loop6): Directory bread(block 64) failed
[  699.188471][T25787] FAT-fs (loop6): Directory bread(block 65) failed
[  699.194443][T25787] FAT-fs (loop6): Directory bread(block 66) failed
[  699.197100][T25787] FAT-fs (loop6): Directory bread(block 67) failed
[  699.200350][T25787] FAT-fs (loop6): Directory bread(block 68) failed
[  699.202743][T25787] FAT-fs (loop6): Directory bread(block 69) failed
[  699.205578][T25787] FAT-fs (loop6): Directory bread(block 70) failed
[  699.208207][T25787] FAT-fs (loop6): Directory bread(block 71) failed
[  699.212322][T25787] FAT-fs (loop6): Directory bread(block 72) failed
[  699.214951][T25787] FAT-fs (loop6): Directory bread(block 73) failed
[  699.690392][    T9] usb 7-1: new high-speed USB device number 35 using dummy_hcd
[  699.854141][    T9] usb 7-1: config 0 has an invalid interface number: 120 but max is 0
[  699.857371][    T9] usb 7-1: config 0 has no interface number 0
[  699.864869][    T9] usb 7-1: config 0 interface 120 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  699.870262][    T9] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8F has an invalid bInterval 52, changing to 9
[  699.874497][    T9] usb 7-1: config 0 interface 120 altsetting 0 endpoint 0x8F has invalid maxpacket 8241, setting to 1024
[  699.880015][    T9] usb 7-1: New USB device found, idVendor=16e3, idProduct=f9e9, bcdDevice= 0.58
[  699.883568][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  699.889784][    T9] usb 7-1: config 0 descriptor??
[  699.894665][    T9] input: USB Touchscreen 16e3:f9e9 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.120/input/input26
[  700.096318][   T47] usb 7-1: USB disconnect, device number 35
[  700.121579][T25838] overlayfs: failed to clone upperpath
[  701.193706][T25897] netlink: 136 bytes leftover after parsing attributes in process `syz.2.8196'.
[  701.318912][T25904] netlink: 'syz.6.8199': attribute type 6 has an invalid length.
[  702.208208][T25918] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8205'.
[  702.210169][T25916] overlayfs: failed to clone upperpath
[  702.523515][T25927] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  703.764589][T25948] loop6: detected capacity change from 0 to 32768
[  703.787485][T25948] jfs_lookup: iget failed on inum 32
[  703.790262][T25948] jfs_lookup: iget failed on inum 32
[  705.312565][   T47] usb 7-1: new high-speed USB device number 36 using dummy_hcd
[  705.380799][T25992] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8239'.
[  705.384265][T25992] netlink: 'syz.2.8239': attribute type 7 has an invalid length.
[  705.387356][T25992] netlink: 'syz.2.8239': attribute type 8 has an invalid length.
[  705.398015][T25992] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8239'.
[  705.475144][   T47] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  705.479507][   T47] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  705.484298][   T47] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  705.487859][   T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  705.491977][   T47] usb 7-1: SerialNumber: syz
[  705.708196][   T47] usb 7-1: 0:2 : does not exist
[  705.723952][   T47] usb 7-1: USB disconnect, device number 36
[  705.748156][T22357] udevd[22357]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  706.479215][   T47] usb 7-1: new full-speed USB device number 37 using dummy_hcd
[  706.630589][   T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  706.639375][   T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  706.642792][   T47] usb 7-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  706.645776][   T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  706.651005][   T47] usb 7-1: config 0 descriptor??
[  707.080761][   T47] savu 0003:1E7D:2D5A.0021: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.6-1/input0
[  707.508410][   T47] usb 7-1: USB disconnect, device number 37
[  708.299631][   T47] usb 7-1: new high-speed USB device number 38 using dummy_hcd
[  708.453634][   T47] usb 7-1: New USB device found, idVendor=055f, idProduct=c230, bcdDevice=b6.ac
[  708.457344][   T47] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  708.462414][   T47] usb 7-1: Product: syz
[  708.463945][   T47] usb 7-1: Manufacturer: syz
[  708.465831][   T47] usb 7-1: SerialNumber: syz
[  708.468863][   T47] usb 7-1: config 0 descriptor??
[  708.478635][   T47] gspca_main: sunplus-2.14.0 probing 055f:c230
[  709.504823][   T47] gspca_sunplus: reg_r err -71
[  709.507826][   T47] sunplus 7-1:0.0: probe with driver sunplus failed with error -71
[  709.533220][   T47] usb 7-1: USB disconnect, device number 38
[  709.748358][T26169] Invalid ELF header magic: != ELF
[  710.068238][T26178] loop6: detected capacity change from 0 to 65
[  710.075741][T26178] BFS-fs: bfs_fill_super(): NOTE: filesystem loop6 was created with 512 inodes, the real maximum is 511, mounting anyway
[  710.730391][T26181] vimc link validate: Scaler:src:16x2160 (0x33424752, 0, 0, 0, 0) RGB/YUV Capture:snk:640x480 (0x33424752, 8, 0, 0, 0)
[  711.187181][T26192] netlink: 12 bytes leftover after parsing attributes in process `syz.6.8326'.
[  711.411714][T26208] tipc: Started in network mode
[  711.413359][T26208] tipc: Node identity 2212575c4dbd, cluster identity 4711
[  711.416080][T26208] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  711.421815][T26208] syzkaller0: entered promiscuous mode
[  711.423981][T26208] syzkaller0: entered allmulticast mode
[  711.429801][T26208] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) !
[  711.459940][T26208] tipc: Resetting bearer <eth:syzkaller0>
[  711.467780][T26207] tipc: Resetting bearer <eth:syzkaller0>
[  711.516123][T26207] tipc: Disabling bearer <eth:syzkaller0>
[  711.641799][T26218] netlink: 'syz.2.8334': attribute type 3 has an invalid length.
[  711.645040][T26218] netlink: 'syz.2.8334': attribute type 3 has an invalid length.
[  711.658716][T26218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8334'.
[  711.678604][T26218] netlink: 16 bytes leftover after parsing attributes in process `syz.2.8334'.
[  712.460108][ T5925] usb 7-1: new high-speed USB device number 39 using dummy_hcd
[  712.609602][ T5925] usb 7-1: Using ep0 maxpacket: 32
[  712.638115][ T5925] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  712.655611][ T5925] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  712.682151][ T5925] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  712.718147][ T5925] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  712.727210][ T5925] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  712.736082][ T5925] usb 7-1: Product: syz
[  712.738272][ T5925] usb 7-1: Manufacturer: syz
[  712.743084][ T5925] usb 7-1: SerialNumber: syz
[  712.816355][ T5925] cdc_ncm 7-1:1.0: skipping garbage
[  712.822064][ T5925] cdc_ncm 7-1:1.0: skipping garbage
[  712.826520][ T5925] cdc_ncm 7-1:1.0: CDC Union missing and no IAD found
[  712.830767][ T5925] cdc_ncm 7-1:1.0: bind() failure
[  713.022652][ T5925] usb 7-1: USB disconnect, device number 39
[  714.162601][T26278] loop6: detected capacity change from 0 to 512
[  714.168697][T26278] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  714.178381][T26278] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a002c018, mo2=0002]
[  714.185006][T26278] System zones: 0-7
[  714.191083][T26278] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  714.225804][T18201] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  715.542672][T26340] loop6: detected capacity change from 0 to 2048
[  715.564973][T26340] NILFS (loop6): broken superblock, retrying with spare superblock (blocksize = 1024)
[  715.568491][T26340] NILFS (loop6): mounting unchecked fs
[  715.573850][T22357] udevd[22357]: incorrect nilfs2 checksum on /dev/loop6
[  715.592606][T26340] NILFS (loop6): recovery complete
[  715.644976][T26343] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  715.907053][T26349] loop6: detected capacity change from 0 to 1024
[  716.287295][T26371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8407'.
[  716.306679][T26371] netlink: 28 bytes leftover after parsing attributes in process `syz.1.8407'.
[  716.315493][ T5850] Bluetooth: hci2: unexpected event for opcode 0x1004
[  717.590483][T26407] overlayfs: failed to clone upperpath
[  717.944306][T26425] netlink: 'syz.1.8429': attribute type 21 has an invalid length.
[  717.947517][T26425] netlink: 'syz.1.8429': attribute type 6 has an invalid length.
[  717.951341][T26425] netlink: 64 bytes leftover after parsing attributes in process `syz.1.8429'.
[  718.168157][T26435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8434'.
[  718.174252][T26435] (unnamed net_device) (uninitialized): option mode: invalid value (7)
[  718.397363][T26453] netlink: 'syz.6.8443': attribute type 2 has an invalid length.
[  718.551804][T26465] loop6: detected capacity change from 0 to 256
[  718.558076][T26465] exFAT-fs (loop6): bogus data start sector
[  718.566049][T26465] exFAT-fs (loop6): failed to read boot sector
[  718.568216][T26465] exFAT-fs (loop6): failed to recognize exfat type
[  718.633692][T26471] macvlan2: entered promiscuous mode
[  718.636618][T26471] macvlan2: entered allmulticast mode
[  718.641855][T26471] veth1_vlan: entered allmulticast mode
[  718.647964][T26471] bond0: (slave macvlan2): Enslaving as an active interface with an up link
[  718.942080][T26489] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode
[  718.950689][T26489] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode
[  720.339567][ T5850] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  720.344012][ T5850] Bluetooth: hci2: Injecting HCI hardware error event
[  720.354920][ T5850] Bluetooth: hci2: hardware error 0x00
[  720.439155][T26537] sock: sock_set_timeout: `syz.1.8480' (pid 26537) tries to set negative timeout
[  721.793872][T26574] loop6: detected capacity change from 0 to 32768
[  721.806598][T26574] jfs_mount: Mount Failure: File System Dirty.
[  721.817745][T26574] Mount JFS Failure: -22
[  721.999550][T26596] loop6: detected capacity change from 0 to 512
[  722.010638][T26596] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode
[  722.026561][T26596] EXT4-fs (loop6): 1 truncate cleaned up
[  722.034915][T26596] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  722.040541][T26598] netlink: set zone limit has 4 unknown bytes
[  722.073507][T18201] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  722.350103][T26622] netlink: 16 bytes leftover after parsing attributes in process `syz.6.8518'.
[  722.419199][ T5850] Bluetooth: hci2: Opcode 0x0c03 failed: -110
[  722.560897][T26629] loop6: detected capacity change from 0 to 32768
[  722.601357][T26629] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  722.625009][T26629] XFS (loop6): Ending clean mount
[  722.641439][T26629] XFS (loop6): Quotacheck needed: Please wait.
[  722.670098][T26640] lo speed is unknown, defaulting to 1000
[  722.725682][T26629] XFS (loop6): Quotacheck: Done.
[  722.792274][T18201] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  723.267621][T26655] loop6: detected capacity change from 0 to 32768
[  723.305691][T26655] XFS (loop6): DAX unsupported by block device. Turning off DAX.
[  723.309700][T26655] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  723.344196][T26655] XFS (loop6): Ending clean mount
[  723.348287][T26655] XFS (loop6): Quotacheck needed: Please wait.
[  723.371192][   T27] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x10 
[  723.381107][   T27] XFS (loop6): Unmount and run xfs_repair
[  723.385803][   T27] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  723.393247][   T27] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  723.398929][   T27] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  723.406548][   T27] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  723.413359][   T27] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  723.418880][   T27] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  723.422869][   T27] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  723.426356][   T27] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  723.432993][   T27] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  723.436854][   T27] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x10 len 8 error 74
[  723.462320][T26655] XFS (loop6): Quotacheck: Unsuccessful (Error -117): Disabling quotas.
[  723.501419][T26655] XFS (loop6): Metadata CRC error detected at xfs_allocbt_read_verify+0x42/0xe0, xfs_cntbt block 0x10 
[  723.505971][T26655] XFS (loop6): Unmount and run xfs_repair
[  723.507912][T26655] XFS (loop6): First 128 bytes of corrupted metadata buffer:
[  723.510648][T26655] 00000000: 41 42 33 43 00 00 00 02 ff ff ff ff ff ff ff ff  AB3C............
[  723.513545][T26655] 00000010: 00 00 00 00 00 00 00 10 00 00 00 01 00 00 00 10  ................
[  723.516949][T26655] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb  ...^T.Lr......N.
[  723.520249][T26655] 00000030: 00 00 00 00 20 bb 84 11 00 00 04 4e 00 00 00 02  .... ......N....
[  723.523723][T26655] 00000040: 00 00 04 60 00 00 0b a0 00 00 00 00 00 00 00 00  ...`............
[  723.526611][T26655] 00000050: 00 00 00 00 00 00 07 00 00 00 00 00 00 00 00 00  ................
[  723.530071][T26655] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  723.533239][T26655] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  723.536308][T26655] XFS (loop6): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x10 len 8 error 74
[  723.553928][T26655] XFS (loop6): Metadata I/O Error (0x1) detected at xfs_trans_read_buf_map+0x517/0x8e0 (fs/xfs/xfs_trans_buf.c:311).  Shutting down filesystem.
[  723.558768][T26655] XFS (loop6): Please unmount the filesystem and rectify the problem(s)
[  723.621022][T18201] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  724.207446][   T33] audit: type=1326 audit(1755181156.453:229): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26692 comm="syz.2.8540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  724.253632][   T33] audit: type=1326 audit(1755181156.473:230): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26692 comm="syz.2.8540" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9468f8d550 code=0x7ffc0000
[  724.296074][   T33] audit: type=1326 audit(1755181156.473:231): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26692 comm="syz.2.8540" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9468f8d550 code=0x7ffc0000
[  724.322864][   T33] audit: type=1326 audit(1755181156.473:232): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26692 comm="syz.2.8540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  724.383237][   T33] audit: type=1326 audit(1755181156.473:233): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26692 comm="syz.2.8540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  724.409352][   T33] audit: type=1326 audit(1755181156.473:234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26692 comm="syz.2.8540" exe="/syz-executor" sig=0 arch=c000003e syscall=8 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  724.438844][   T33] audit: type=1326 audit(1755181156.473:235): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26692 comm="syz.2.8540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  724.481541][   T33] audit: type=1326 audit(1755181156.473:236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26692 comm="syz.2.8540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  724.531232][   T33] audit: type=1326 audit(1755181156.483:237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26692 comm="syz.2.8540" exe="/syz-executor" sig=0 arch=c000003e syscall=78 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  724.568651][   T33] audit: type=1326 audit(1755181156.483:238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=26692 comm="syz.2.8540" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x7ffc0000
[  725.072552][T26719] overlayfs: failed to clone upperpath
[  725.720340][T26765] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8571'.
[  725.858117][T26778] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma?
[  727.909123][    T9] usb 7-1: new high-speed USB device number 40 using dummy_hcd
[  727.966987][T26824] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8598'.
[  728.059350][    T9] usb 7-1: Using ep0 maxpacket: 8
[  728.071593][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  728.079213][    T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  728.082871][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10
[  728.097501][    T9] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024
[  728.105447][    T9] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  728.109505][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  728.120006][    T9] hub 7-1:1.0: bad descriptor, ignoring hub
[  728.126020][    T9] hub 7-1:1.0: probe with driver hub failed with error -5
[  728.132849][    T9] cdc_wdm 7-1:1.0: skipping garbage
[  728.135022][    T9] cdc_wdm 7-1:1.0: skipping garbage
[  728.144166][    T9] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  728.146650][    T9] cdc_wdm 7-1:1.0: Unknown control protocol
[  728.866503][T26792] usb 7-1: reset high-speed USB device number 40 using dummy_hcd
[  729.035577][T26792] usb 7-1: device firmware changed
[  729.053441][T26792] cdc_wdm 7-1:1.0: Error autopm - -16
[  729.079437][    T9] usb 7-1: USB disconnect, device number 40
[  729.219244][    T9] usb 7-1: new high-speed USB device number 41 using dummy_hcd
[  729.379469][    T9] usb 7-1: Using ep0 maxpacket: 8
[  729.383430][    T9] usb 7-1: config 1 has an invalid descriptor of length 100, skipping remainder of the config
[  729.388270][    T9] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 2
[  729.400749][    T9] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  729.406164][    T9] usb 7-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00
[  729.419177][    T9] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  729.430983][    T9] hub 7-1:1.0: bad descriptor, ignoring hub
[  729.433357][    T9] hub 7-1:1.0: probe with driver hub failed with error -5
[  729.436703][    T9] cdc_wdm 7-1:1.0: skipping garbage
[  729.438776][    T9] cdc_wdm 7-1:1.0: skipping garbage
[  729.460149][    T9] cdc_wdm 7-1:1.0: probe with driver cdc_wdm failed with error -22
[  729.739344][    T9] usb 7-1: USB disconnect, device number 41
[  730.411944][T26921] afs: Unknown parameter 'A~|vN'
[  731.236109][T26954] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  732.270134][T26976] loop6: detected capacity change from 0 to 40427
[  732.278112][T26976] F2FS-fs (loop6): Image doesn't support compression
[  732.303528][T26976] F2FS-fs (loop6): build fault injection rate: 690
[  732.306237][T26976] F2FS-fs (loop6): build fault injection type: 0x35f7
[  732.315556][T26976] F2FS-fs (loop6): invalid crc value
[  732.405592][T26998] netlink: 'syz.2.8675': attribute type 29 has an invalid length.
[  732.410061][T26998] netlink: 'syz.2.8675': attribute type 29 has an invalid length.
[  732.413673][T26998] netlink: 500 bytes leftover after parsing attributes in process `syz.2.8675'.
[  732.418781][T26976] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  732.423913][T26976] F2FS-fs (loop6): Start checkpoint disabled!
[  732.427407][T26976] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e6
[  732.909765][    T9] usb 7-1: new full-speed USB device number 42 using dummy_hcd
[  733.093507][    T9] usb 7-1: unable to get BOS descriptor or descriptor too short
[  733.097157][    T9] usb 7-1: not running at top speed; connect to a high speed hub
[  733.102213][    T9] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  733.106507][    T9] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4
[  733.115791][    T9] usb 7-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  733.124898][    T9] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  733.128642][    T9] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  733.132198][    T9] usb 7-1: Product: syz
[  733.134408][    T9] usb 7-1: Manufacturer: syz
[  733.136595][    T9] usb 7-1: SerialNumber: syz
[  733.391787][    T9] usb 7-1: USB disconnect, device number 42
[  733.413401][T22357] udevd[22357]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  733.436660][T27031] netlink: 6 bytes leftover after parsing attributes in process `syz.2.8689'.
[  733.515983][T27033] netlink: 'syz.2.8690': attribute type 1 has an invalid length.
[  733.688008][T27050] netlink: 12 bytes leftover after parsing attributes in process `syz.1.8698'.
[  734.740014][    T9] usb 7-1: new high-speed USB device number 43 using dummy_hcd
[  734.919474][    T9] usb 7-1: Using ep0 maxpacket: 32
[  734.928627][    T9] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024
[  734.935424][    T9] usb 7-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79
[  734.938647][    T9] usb 7-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2
[  734.942944][    T9] usb 7-1: Product: syz
[  734.944308][    T9] usb 7-1: Manufacturer: syz
[  734.945803][    T9] usb 7-1: SerialNumber: syz
[  734.950475][    T9] usb 7-1: config 0 descriptor??
[  734.952714][T27091] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  735.162194][ T5925] usb 7-1: USB disconnect, device number 43
[  735.782742][T27141] loop6: detected capacity change from 0 to 64
[  736.152737][   T33] kauditd_printk_skb: 1 callbacks suppressed
[  736.152751][   T33] audit: type=1800 audit(1755181168.403:240): pid=27144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.8737" name="nullb0" dev="tmpfs" ino=9931 res=0 errno=0
[  736.821973][T27178] netlink: 'syz.1.8754': attribute type 1 has an invalid length.
[  736.989565][   T47] usb 7-1: new full-speed USB device number 44 using dummy_hcd
[  737.152040][   T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  737.156864][   T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  737.161543][   T47] usb 7-1: New USB device found, idVendor=0461, idProduct=4e72, bcdDevice= 0.00
[  737.165233][   T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  737.173004][   T47] usb 7-1: config 0 descriptor??
[  737.177156][T27172] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22
[  737.306426][T27208] netlink: 392 bytes leftover after parsing attributes in process `syz.2.8768'.
[  737.640339][   T47] hid-rmi 0003:0461:4E72.0022: item fetching failed at offset 2/5
[  737.643661][   T47] hid-rmi 0003:0461:4E72.0022: parse failed
[  737.646086][   T47] hid-rmi 0003:0461:4E72.0022: probe with driver hid-rmi failed with error -22
[  737.702854][T27217] tipc: Enabling of bearer <eth:syzkaller0> rejected, failed to enable media
[  738.052994][   T47] usb 7-1: USB disconnect, device number 44
[  738.987442][T27248] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8784'.
[  739.384041][T27260] IPVS: fo: SCTP 172.20.20.187:0 - no destination available
[  739.460004][ T5925] IPVS: starting estimator thread 0...
[  739.560150][T27261] IPVS: using max 40 ests per chain, 96000 per kthread
[  739.677238][T27263] netlink: 4 bytes leftover after parsing attributes in process `syz.2.8790'.
[  741.675348][T27340] netlink: 65039 bytes leftover after parsing attributes in process `syz.1.8825'.
[  742.818917][   T33] audit: type=1326 audit(1755181175.003:241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27369 comm="syz.1.8840" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadc158ebe9 code=0x0
[  743.125076][T27394] loop6: detected capacity change from 0 to 128
[  743.148886][T27394] Invalid source name
[  743.169118][T27394] UBIFS error (pid: 27394): cannot open "/dev/loop6", error -22
[  743.639214][   T47] usb 7-1: new high-speed USB device number 45 using dummy_hcd
[  743.819474][   T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11
[  743.823683][   T47] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  743.833563][   T47] usb 7-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00
[  743.837103][   T47] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  743.847418][   T47] usb 7-1: config 0 descriptor??
[  743.943329][T27433] tipc: Enabling of bearer <udp:s> rejected, failed to enable media
[  744.161845][T27448] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8874'.
[  744.212393][T27452] overlayfs: missing 'lowerdir'
[  744.283832][   T47] uclogic 0003:145F:0212.0023: interface is invalid, ignoring
[  744.330909][T27458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.8879'.
[  744.486706][   T47] usb 7-1: USB disconnect, device number 45
[  746.444122][T27517] sctp: [Deprecated]: syz.2.8906 (pid 27517) Use of int in max_burst socket option.
[  746.444122][T27517] Use struct sctp_assoc_value instead
[  747.287181][   T33] audit: type=1326 audit(1755181179.533:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27541 comm="syz.1.8918" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fadc158ebe9 code=0x0
[  747.386958][T27549] overlayfs: missing 'lowerdir'
[  747.630824][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  747.634590][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  747.671489][T27557] loop6: detected capacity change from 0 to 164
[  747.676915][T27557] Unable to read rock-ridge attributes
[  747.682861][T27557] iso9660: Corrupted directory entry in block 4 of inode 1792
[  748.161085][T27580] loop6: detected capacity change from 0 to 4096
[  748.166150][T27580] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  748.187487][T27580] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  748.194151][T27580] ntfs3(loop6): ino=19, mi_enum_attr
[  748.498787][T27600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8945'.
[  749.002936][T27642] netlink: 24 bytes leftover after parsing attributes in process `syz.6.8966'.
[  749.118834][T27646] ubi0: attaching mtd0
[  749.269748][T27654] loop6: detected capacity change from 0 to 64
[  749.538118][T27667] loop6: detected capacity change from 0 to 1024
[  749.553794][T27667] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  749.989253][T27673] loop6: detected capacity change from 0 to 32768
[  750.004118][T27673] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.8980 (27673)
[  750.037633][T27673] BTRFS info (device loop6): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  750.050238][T27673] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  750.053683][T27673] BTRFS info (device loop6): using free-space-tree
[  750.155648][T27711] bond0: Device is already in use.
[  750.321552][T18201] BTRFS info (device loop6): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885
[  750.492352][T27735] loop6: detected capacity change from 0 to 128
[  750.514071][T27735] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  750.537612][T27735] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  750.597400][ T8604] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  750.772360][T27747] netlink: 4 bytes leftover after parsing attributes in process `syz.2.9007'.
[  750.825942][    C1] vkms_vblank_simulate: vblank timer overrun
[  750.839557][T27750] syzkaller1: entered promiscuous mode
[  750.841713][T27750] syzkaller1: entered allmulticast mode
[  751.102553][T27767] loop6: detected capacity change from 0 to 4096
[  751.118738][T27767] NILFS (loop6): mounting unchecked fs
[  751.121367][T27767] NILFS (loop6): recovery required for readonly filesystem
[  751.124304][T27767] NILFS (loop6): write access will be enabled during recovery
[  751.144753][T27767] NILFS (loop6): invalid segment: Checksum error in super root
[  751.162481][T27767] NILFS (loop6): error -22 while loading super root
[  751.456283][T27785] sctp: [Deprecated]: syz.6.9026 (pid 27785) Use of struct sctp_assoc_value in delayed_ack socket option.
[  751.456283][T27785] Use struct sctp_sack_info instead
[  751.717804][T27787] loop6: detected capacity change from 0 to 32768
[  751.764447][T27787] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  751.806483][T27787] XFS (loop6): Ending clean mount
[  751.898510][T27799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9028'.
[  751.901963][T27799] netlink: 8 bytes leftover after parsing attributes in process `syz.1.9028'.
[  752.171870][T18201] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  752.384171][   T33] audit: type=1326 audit(1755181184.633:243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=27800 comm="syz.2.9030" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f9468f8ebe9 code=0x0
[  752.613813][T27808] openvswitch: netlink: ct_state flags 0000ffff unsupported
[  752.670076][T27811] ./file0: Can't lookup blockdev
[  752.673484][T27812] netlink: 'syz.1.9033': attribute type 16 has an invalid length.
[  752.677531][T27812] netlink: 'syz.1.9033': attribute type 17 has an invalid length.
[  752.806699][T27820] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  752.863211][T27824] ==================================================================
[  752.866478][T27824] BUG: KASAN: use-after-free in __xfrm_state_lookup+0x6ad/0x8d0
[  752.869533][T27824] Read of size 2 at addr ffff888110ed8142 by task syz.1.9040/27824
[  752.873449][T27824] 
[  752.874305][T27824] CPU: 0 UID: 0 PID: 27824 Comm: syz.1.9040 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  752.874326][T27824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  752.874339][T27824] Call Trace:
[  752.874349][T27824]  <TASK>
[  752.874360][T27824]  dump_stack_lvl+0x189/0x250
[  752.874385][T27824]  ? __kasan_check_byte+0x12/0x40
[  752.874410][T27824]  ? __pfx_dump_stack_lvl+0x10/0x10
[  752.874428][T27824]  ? lock_release+0x4b/0x3e0
[  752.874453][T27824]  ? __virt_addr_valid+0x4a5/0x5c0
[  752.874467][T27824]  print_report+0xca/0x240
[  752.874477][T27824]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  752.874496][T27824]  kasan_report+0x118/0x150
[  752.874517][T27824]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  752.874544][T27824]  __xfrm_state_lookup+0x6ad/0x8d0
[  752.874571][T27824]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  752.874588][T27824]  ? xfrm_state_lookup+0x45/0x1e0
[  752.874601][T27824]  xfrm_state_lookup+0x11e/0x1e0
[  752.874619][T27824]  xfrm_user_state_lookup+0x231/0x370
[  752.874640][T27824]  ? __pfx_xfrm_user_state_lookup+0x10/0x10
[  752.874662][T27824]  xfrm_del_sa+0xf1/0x3e0
[  752.874679][T27824]  ? __pfx_xfrm_del_sa+0x10/0x10
[  752.874694][T27824]  ? apparmor_capable+0x137/0x1b0
[  752.874708][T27824]  ? __nla_parse+0x40/0x60
[  752.874727][T27824]  xfrm_user_rcv_msg+0x7a3/0xab0
[  752.874746][T27824]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  752.874770][T27824]  ? __pfx___mutex_trylock_common+0x10/0x10
[  752.874785][T27824]  ? rcu_is_watching+0x15/0xb0
[  752.874798][T27824]  ? trace_contention_end+0x39/0x120
[  752.874814][T27824]  ? __mutex_lock+0x335/0x1360
[  752.874879][T27824]  netlink_rcv_skb+0x208/0x470
[  752.874904][T27824]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  752.874925][T27824]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  752.874950][T27824]  ? netlink_deliver_tap+0x2e/0x1b0
[  752.874964][T27824]  ? netlink_deliver_tap+0x2e/0x1b0
[  752.874983][T27824]  xfrm_netlink_rcv+0x79/0x90
[  752.874998][T27824]  netlink_unicast+0x82f/0x9e0
[  752.875019][T27824]  ? __pfx_netlink_unicast+0x10/0x10
[  752.875038][T27824]  ? netlink_sendmsg+0x642/0xb30
[  752.875057][T27824]  ? skb_put+0x11b/0x210
[  752.875069][T27824]  netlink_sendmsg+0x805/0xb30
[  752.875091][T27824]  ? __pfx_netlink_sendmsg+0x10/0x10
[  752.875113][T27824]  ? aa_sock_msg_perm+0xf1/0x1d0
[  752.875142][T27824]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  752.875158][T27824]  ? __pfx_netlink_sendmsg+0x10/0x10
[  752.875177][T27824]  __sock_sendmsg+0x21c/0x270
[  752.875198][T27824]  ____sys_sendmsg+0x505/0x830
[  752.875214][T27824]  ? __pfx_____sys_sendmsg+0x10/0x10
[  752.875229][T27824]  ? import_iovec+0x74/0xa0
[  752.875245][T27824]  ___sys_sendmsg+0x21f/0x2a0
[  752.875259][T27824]  ? __pfx____sys_sendmsg+0x10/0x10
[  752.875284][T27824]  ? __fget_files+0x2a/0x420
[  752.875299][T27824]  ? __fget_files+0x3a0/0x420
[  752.875315][T27824]  __x64_sys_sendmsg+0x19b/0x260
[  752.875330][T27824]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  752.875348][T27824]  ? rcu_is_watching+0x15/0xb0
[  752.875357][T27824]  ? do_syscall_64+0xbe/0x3b0
[  752.875370][T27824]  do_syscall_64+0xfa/0x3b0
[  752.875382][T27824]  ? lockdep_hardirqs_on+0x9c/0x150
[  752.875393][T27824]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  752.875403][T27824]  ? exc_page_fault+0x9f/0xf0
[  752.875414][T27824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  752.875424][T27824] RIP: 0033:0x7fadc158ebe9
[  752.875434][T27824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  752.875444][T27824] RSP: 002b:00007fadc2433038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  752.875455][T27824] RAX: ffffffffffffffda RBX: 00007fadc17b5fa0 RCX: 00007fadc158ebe9
[  752.875462][T27824] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  752.875468][T27824] RBP: 00007fadc1611e19 R08: 0000000000000000 R09: 0000000000000000
[  752.875474][T27824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  752.875479][T27824] R13: 00007fadc17b6038 R14: 00007fadc17b5fa0 R15: 00007ffdbc2e7118
[  752.875490][T27824]  </TASK>
[  752.875494][T27824] 
[  753.019302][T27824] The buggy address belongs to the physical page:
[  753.021874][T27824] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x200000000 pfn:0x110ed8
[  753.025669][T27824] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff)
[  753.028582][T27824] raw: 057ff00000000000 ffffea0004933788 ffffea0004277ec8 0000000000000000
[  753.032045][T27824] raw: 0000000200000000 ffff888123ad17e0 00000000ffffffff 0000000000000000
[  753.035336][T27824] page dumped because: kasan: bad access detected
[  753.037756][T27824] page_owner tracks the page as freed
[  753.039791][T27824] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x440dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO|__GFP_COMP), pid 18201, tgid 18201 (syz-executor), ts 747363428468, free_ts 747459853908
[  753.047072][T27824]  post_alloc_hook+0x240/0x2a0
[  753.049030][T27824]  get_page_from_freelist+0x21e4/0x22c0
[  753.051271][T27824]  __alloc_frozen_pages_noprof+0x181/0x370
[  753.053626][T27824]  alloc_pages_mpol+0x232/0x4a0
[  753.055438][T27824]  alloc_pages_noprof+0xa9/0x190
[  753.057024][T27824]  __pmd_alloc+0x3a/0x3b0
[  753.058477][T27824]  copy_pmd_range+0x6dbb/0x71d0
[  753.060132][T27824]  copy_page_range+0xc14/0x1270
[  753.061665][T27824]  dup_mmap+0xf57/0x1ac0
[  753.063043][T27824]  copy_mm+0x13c/0x4b0
[  753.064339][T27824]  copy_process+0x1706/0x3c00
[  753.066141][T27824]  kernel_clone+0x21e/0x840
[  753.067800][T27824]  __x64_sys_clone+0x18b/0x1e0
[  753.069761][T27824]  do_syscall_64+0xfa/0x3b0
[  753.071587][T27824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.073893][T27824] page last free pid 27556 tgid 27556 stack trace:
[  753.076370][T27824]  __free_frozen_pages+0xbc4/0xd30
[  753.078367][T27824]  __tlb_remove_table+0x2d2/0x3b0
[  753.080287][T27824]  tlb_remove_table_rcu+0x85/0x100
[  753.082154][T27824]  rcu_core+0xcab/0x1770
[  753.083823][T27824]  handle_softirqs+0x286/0x870
[  753.085564][T27824]  __irq_exit_rcu+0xca/0x1f0
[  753.087098][T27824]  irq_exit_rcu+0x9/0x30
[  753.088469][T27824]  sysvec_apic_timer_interrupt+0xa6/0xc0
[  753.090484][T27824]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  753.092877][T27824] 
[  753.093841][T27824] Memory state around the buggy address:
[  753.095955][T27824]  ffff888110ed8000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  753.098998][T27824]  ffff888110ed8080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  753.102213][T27824] >ffff888110ed8100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  753.105481][T27824]                                            ^
[  753.108153][T27824]  ffff888110ed8180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  753.111228][T27824]  ffff888110ed8200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[  753.114336][T27824] ==================================================================
[  753.141337][T27824] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  753.144008][T27824] CPU: 0 UID: 0 PID: 27824 Comm: syz.1.9040 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  753.148493][T27824] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  753.152047][T27824] Call Trace:
[  753.153238][T27824]  <TASK>
[  753.154315][T27824]  dump_stack_lvl+0x99/0x250
[  753.155880][T27824]  ? __asan_memcpy+0x40/0x70
[  753.157426][T27824]  ? __pfx_dump_stack_lvl+0x10/0x10
[  753.159555][T27824]  ? __pfx__printk+0x10/0x10
[  753.161250][T27824]  vpanic+0x281/0x750
[  753.162738][T27824]  ? preempt_schedule+0xae/0xc0
[  753.164748][T27824]  ? __pfx_vpanic+0x10/0x10
[  753.166342][T27824]  ? preempt_schedule_common+0x83/0xd0
[  753.168097][T27824]  ? preempt_schedule+0xae/0xc0
[  753.169680][T27824]  ? __pfx_preempt_schedule+0x10/0x10
[  753.171492][T27824]  panic+0xb9/0xc0
[  753.172745][T27824]  ? __pfx_panic+0x10/0x10
[  753.174214][T27824]  ? _raw_spin_unlock_irqrestore+0xfd/0x110
[  753.176241][T27824]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  753.178404][T27824]  check_panic_on_warn+0x89/0xb0
[  753.180251][T27824]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  753.182195][T27824]  end_report+0x78/0x160
[  753.183594][T27824]  kasan_report+0x129/0x150
[  753.185158][T27824]  ? __xfrm_state_lookup+0x6ad/0x8d0
[  753.187042][T27824]  __xfrm_state_lookup+0x6ad/0x8d0
[  753.188871][T27824]  ? __pfx___xfrm_state_lookup+0x10/0x10
[  753.190539][T27824]  ? xfrm_state_lookup+0x45/0x1e0
[  753.192077][T27824]  xfrm_state_lookup+0x11e/0x1e0
[  753.193827][T27824]  xfrm_user_state_lookup+0x231/0x370
[  753.195709][T27824]  ? __pfx_xfrm_user_state_lookup+0x10/0x10
[  753.197494][T27824]  xfrm_del_sa+0xf1/0x3e0
[  753.199094][T27824]  ? __pfx_xfrm_del_sa+0x10/0x10
[  753.201081][T27824]  ? apparmor_capable+0x137/0x1b0
[  753.203017][T27824]  ? __nla_parse+0x40/0x60
[  753.204833][T27824]  xfrm_user_rcv_msg+0x7a3/0xab0
[  753.206907][T27824]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  753.209138][T27824]  ? __pfx___mutex_trylock_common+0x10/0x10
[  753.211193][T27824]  ? rcu_is_watching+0x15/0xb0
[  753.212711][T27824]  ? trace_contention_end+0x39/0x120
[  753.214375][T27824]  ? __mutex_lock+0x335/0x1360
[  753.216085][T27824]  netlink_rcv_skb+0x208/0x470
[  753.217542][T27824]  ? __pfx_xfrm_user_rcv_msg+0x10/0x10
[  753.219198][T27824]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  753.220812][T27824]  ? netlink_deliver_tap+0x2e/0x1b0
[  753.222330][T27824]  ? netlink_deliver_tap+0x2e/0x1b0
[  753.224004][T27824]  xfrm_netlink_rcv+0x79/0x90
[  753.225742][T27824]  netlink_unicast+0x82f/0x9e0
[  753.227291][T27824]  ? __pfx_netlink_unicast+0x10/0x10
[  753.228928][T27824]  ? netlink_sendmsg+0x642/0xb30
[  753.230712][T27824]  ? skb_put+0x11b/0x210
[  753.232241][T27824]  netlink_sendmsg+0x805/0xb30
[  753.233960][T27824]  ? __pfx_netlink_sendmsg+0x10/0x10
[  753.235614][T27824]  ? aa_sock_msg_perm+0xf1/0x1d0
[  753.237216][T27824]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  753.238897][T27824]  ? __pfx_netlink_sendmsg+0x10/0x10
[  753.240827][T27824]  __sock_sendmsg+0x21c/0x270
[  753.242776][T27824]  ____sys_sendmsg+0x505/0x830
[  753.244761][T27824]  ? __pfx_____sys_sendmsg+0x10/0x10
[  753.246970][T27824]  ? import_iovec+0x74/0xa0
[  753.248851][T27824]  ___sys_sendmsg+0x21f/0x2a0
[  753.250771][T27824]  ? __pfx____sys_sendmsg+0x10/0x10
[  753.252959][T27824]  ? __fget_files+0x2a/0x420
[  753.254875][T27824]  ? __fget_files+0x3a0/0x420
[  753.256823][T27824]  __x64_sys_sendmsg+0x19b/0x260
[  753.258873][T27824]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  753.261139][T27824]  ? rcu_is_watching+0x15/0xb0
[  753.262911][T27824]  ? do_syscall_64+0xbe/0x3b0
[  753.264460][T27824]  do_syscall_64+0xfa/0x3b0
[  753.266249][T27824]  ? lockdep_hardirqs_on+0x9c/0x150
[  753.268168][T27824]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.270215][T27824]  ? exc_page_fault+0x9f/0xf0
[  753.271740][T27824]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  753.273835][T27824] RIP: 0033:0x7fadc158ebe9
[  753.275371][T27824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  753.282496][T27824] RSP: 002b:00007fadc2433038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  753.285718][T27824] RAX: ffffffffffffffda RBX: 00007fadc17b5fa0 RCX: 00007fadc158ebe9
[  753.288157][T27824] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[  753.290749][T27824] RBP: 00007fadc1611e19 R08: 0000000000000000 R09: 0000000000000000
[  753.293381][T27824] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  753.295974][T27824] R13: 00007fadc17b6038 R14: 00007fadc17b5fa0 R15: 00007ffdbc2e7118
[  753.298563][T27824]  </TASK>
[  753.300261][T27824] Kernel Offset: disabled
[  753.301767][T27824] Rebooting in 86400 seconds..

VM DIAGNOSIS:
13:45:35  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000000d RBX=000000000000000d RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000013b6 RDI=00000000000013b7 RBP=00000000000003f8 RSP=ffffc90007be6970
R8 =ffff88801f840237 R9 =1ffff11003f08046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af9917 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007fadc24336c0 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007fadc2432fc8 CR3=000000010b58e000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007fadc1787498 00007fadc1787470 XMM03=00007fadc17874a8 00007fadc17874a0
XMM04=00007fadc22ed100 00007fadc1787460 XMM05=00007fadc1787478 00007fadc17874c0
XMM06=00007fadc17874b8 00007fadc17874b0 XMM07=00007fadc17874a8 00007fadc17874a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007fadc1612fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=a6998f8fb0759600 RBX=ffffffff81968308 RCX=a6998f8fb0759600 RDX=0000000000000001
RSI=ffffffff8d9b6df7 RDI=ffffffff8be33480 RBP=ffffc90000177f20 RSP=ffffc90000177de0
R8 =ffff888136632f9b R9 =1ffff11026cc65f3 R10=dffffc0000000000 R11=ffffed1026cc65f4
R12=ffffffff8fa37e30 R13=0000000000000001 R14=0000000000000001 R15=1ffff11020007000
RIP=ffffffff8b7943f3 RFL=00000282 [--S----] CPL=0 II=0 A20=1 SMM=0 HLT=1
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000055607ddb7000 CR3=0000000027864000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
