last executing test programs:

1m33.93679687s ago: executing program 2 (id=1679):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0)
pipe2$9p(&(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000080)=ANY=[@ANYBLOB="1500000065ffff097b000008003950323030302e4c"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000002100)=ANY=[@ANYBLOB="b0000000000000001659ec0889419429aa5db97288b0f8a87ea8e66d9a8b"], 0xb0)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000140)=ANY=[], 0x10)
write$FUSE_DIRENTPLUS(r2, &(0x7f0000000280)=ANY=[@ANYBLOB="a8"], 0xa8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0)
mount$9p_fd(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',posixacl'])

1m33.936659742s ago: executing program 2 (id=1680):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0)

1m33.848321326s ago: executing program 2 (id=1682):
epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa0028000})
rt_tgsigqueueinfo(0x0, 0x0, 0x14, &(0x7f00000000c0)={0x18, 0x2, 0x2c})

1m33.847728163s ago: executing program 2 (id=1684):
syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x800002, &(0x7f0000000380)={[{@nls={'nls', 0x3d, 'cp932'}}, {@nodecompose}, {@nobarrier}, {@uid}, {@part={'part', 0x3d, 0xff}}, {@gid}, {}, {@nobarrier}]}, 0xff, 0x6b3, &(0x7f0000000780)="$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")
mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x109041, 0x0)

1m33.777412303s ago: executing program 2 (id=1686):
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x3, 0x3, 0x3, 0xa, 0x0, 0xff00}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport}, 0x48)

1m33.428508452s ago: executing program 2 (id=1692):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/177, 0xb1, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg(r0, &(0x7f0000000a40)={0x1, {&(0x7f0000000500)=""/82, 0xfffffea4, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000580)={0x2, 0x0, {&(0x7f0000000ac0)=""/255, 0xff, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000009c0)={0x2, 0x0, {&(0x7f00000007c0)=""/225, 0xe1, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000440)=""/184, 0xfe53, 0x0, 0x3, 0x3}}, 0x48)

1m32.875110033s ago: executing program 32 (id=1692):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000000)=0x200000000)
write$vhost_msg_v2(r0, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000340)=""/177, 0xb1, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg(r0, &(0x7f0000000a40)={0x1, {&(0x7f0000000500)=""/82, 0xfffffea4, 0x0, 0x2, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000580)={0x2, 0x0, {&(0x7f0000000ac0)=""/255, 0xff, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f00000009c0)={0x2, 0x0, {&(0x7f00000007c0)=""/225, 0xe1, 0x0, 0x3, 0x2}}, 0x48)
write$vhost_msg_v2(r0, &(0x7f0000000180)={0x2, 0x0, {&(0x7f0000000440)=""/184, 0xfe53, 0x0, 0x3, 0x3}}, 0x48)

1m1.094710653s ago: executing program 3 (id=2122):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94)
write$qrtrtun(0xffffffffffffffff, &(0x7f0000000400)="0b8ca3756ea769f253", 0x9)
bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYRESDEC=r1], &(0x7f0000000000)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r1, 0x0, 0xd}, 0x18)
r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r2, 0x2)
r3 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0)
flock(r3, 0x2)
open(&(0x7f0000000180)='.\x00', 0x10000, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
timer_create(0x0, &(0x7f0000000680)={0x0, 0x21, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000100))
timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0)
openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
pselect6(0x40, &(0x7f00000001c0)={0x3, 0x0, 0x3, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x8}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, 0x0, 0x0)

59.802244606s ago: executing program 3 (id=2131):
syz_emit_ethernet(0x33, &(0x7f0000000040)={@random="e90c610faca2", @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x25, 0x0, 0xe000, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0x11, 0x0, @gue={{0x2, 0x1, 0x2, 0xc, 0x100}, '\t'}}}}}}, 0x0)
syz_emit_ethernet(0xfc0, &(0x7f0000002840)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfb2, 0x0, 0x2, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x0, 0xf9e, 0x0, @wg=@data={0x4, 0x9, 0xb2b, "c5e5a0e729133e2d4624b99885deff491e5725ab03d01101dc408623861dfcd185cc5a44ee88ca2b754321dba1c26eb48f19bab4b83f9de88783e3f12db90ba130fd9c23fb527757956b33841df481b6317788819c7c48b227bd4f9069796154a4e69c994f0b8e5d6c7e2f17267c3699dfc64bb03b38c3dd45a74cd8d81ddf378e0f003be59253a3eb1132cb603aac1cb62dc5a27d55adc9504758701a46e9181a61f84d2fee1a00ea10c4ddc5b546a0099bfd6396455eddaa90b91e3c4477ef591ef52fc5ec76941ff9fe1fd311ebd1975f2548fd43eacd20359f10194889a425fbdeca76b4a67d3e13e8c003780c1bae9be048be28ea615aa9b002783da61aa4b5e00930db5c0e3b4637c290534488ae3ca785f15753742141b839b6a68ee472d9ef550983cdc52823afc2b559803591af95a3abc9f0f91ea09b400e2bab970347c70ad19e3fc8239e27f6718d0eec70c8b2ce91bdc5430260d48801252b439c94bf2fb5ed5a236ec7abc23d6f235c595f6c3deec067c756aa9cf46467aef929bd6a6856928a54e14aa1a18734befc878e21c4ba45f7e9abb69586292e1eedddc0da9541e2d11884cb9891a5cfcb03e5b27354e7865c19022b1cc30c48dc98e430d84fa8f3f7c1636336b3a454ee9c436b7e97f608eccd132d131d42546b20a0327a9c3fdcaf00d988caacff6d3b980765a326dd93db12df2df5dbcb7558440d4bb17f1038d502d93f6d8634d050f09b5115464c8c9e985c11ba84d903c7974cd94428339b6d608a3af2f1f025dcaae8b41418889e0251c81d5e5f72a06da4f76a3bb5948ba664f59d3d3aeeab38c008723c4da24fe3c2dde46b92edd73fd3d110afdce1d0eb0c68bcf95a66016f499ac23fc2ffc6ee3764f4eb31e03a40a829b3a45ac5b9ecdc0a78853eb6d21c3e13e37123a8f37a11d7c53ccf5b92d6eff924b21c16329c8d55df3ab27babe45064654176128994f8d6d35c010b07246fea814bc36075e4c8973143423f43e2bc5f2fe014886cd03d69af3b0ed1848c7cac44a6642949acd7df45f97457ee71224d66d4f7f1eca5004831f8e5f3e88656faffb3d215f793c523a30aba90111562e00aae47c56e167f92935eaacbacbfa90e9080db32c220be915a318d96c5d45ff67221416b1d698d952a4a0c3a79ca02a6c77e8bcd2f1b4064b0dd61d77fbb1b40d7b2f9dd7eec000ea5a0b67795c5dc75e97b6d29fe5d1e0914a6fce6325fee107996a13435440d4d20f5af00f5e6e22289174946cc8b175b13b7a08b6070d158be574f23b6b30a7da5b9946a626a1f85daee42c1e7bc9eafffbbae5d697f46b7acf244dadc759fed29673cd7a6ee81e42394f6646dad03c081969a702f637dcf56be3a84c73c3a733425a7aaee3c0b79c99837a712c0b1880a50c2438f80140bcd0861a92033578e75cc23a276dc4ee227fb16dac30529cbe0c39eb5beeb6b086e549a59711195f03f6717036daafa92b95a563bbd3079e2c94703feb94803148d2777e31e9033eba47774e102e57591710e611e1b1e431660d64a7a7512d16749ee5b1ea842fb6d5a8ba9d730c4c966f157c232b280c5407b2cd586c785602d8b2fc8f9c796b930c3997fffaec9acc854a1c93da195ce474012e6d5dca0cf9637a2a0e7481e5434b9722a41f805673b9373ebdaca1ba8a8bbdfa83fa2227391c2289091a4aa99821b92a8859d3c51576789d414c6e8dd5be783ce3e47f0884324e693bc53a411f7acb376d4b0d78c3173b184f470a446b3f972db7ac62c50efebec412b22249877c4d9ac55197e7a38bdea1e9346ad8836c92748ce86c640b3249e0d9f6fbcdcfd28e1cfa6d92ed5ec5431b4103d3aa8c73382a65ae529092a73cde2c20bfa99281dd818878b36f547bbf150c08ff67079e419cf63522532db6669004ec31b66740f45c93200cb0dd11b1c0352b26e659f78151cbbed92a5d315391c31483213599f26f781467194f1ae66618a1a85281361512f44d30dc01ee9960de7a62f2bf8924c4d5fa0de469714c26fcf03898305121b49aafd14453fee8c5169c7ca294d4971573d057e985c0d2f528eefc3b3ad281778dae58b4ccaed09bd0958d436fe519684c3242912125b6d2c60486aff24af4c3ed64582304b88c3d43ba77b21ec6c8ddc3de4e5b12add2ead29e7c0d39732723715d46036272b01c5fb09e69bb29e05ffeebc08ab64481a027a4c727d5d93c252fe0957fd2cab8fb67c4c78adddecdb2d9597f1a3d3c3aa74f583bd82a479e01ba8089f42c34f1d9b71f4e785e54607bb453fa0075ad77c44c353ede74638adfa881e6cd47b26b6757463485fa4068f198966e7245e2e6b74d961c214dca0a224b1ca49852219254a801b4e71cd8ad5323229499e322c4bb42805e9458bcfdcc7c272714690856fe01811fef7dd91bcf27a6ec67b3796b0be04ea8d0ba5791ef81fc366ac238cd6291a25a8f37647a81627a49254a16bb7465e9f271b7611376c6163f4bf4ab4fb54747e9d9fb996d98e37dcadbec3bf749e9f564f24ddcc14cd7f60577774536ec052d38142ef2adaf8d45225b79eb0ff168ce3e64182366c4446de454ccf4adcd7551f5e6a2911099703d6968871dd30842620932ca650c855f3c1e7e18fbf04d597191b34477d2635352782d8ffae6eb1e11f7d1d4e0c8ed6420c7f542bf8e51cb37f2fea0f280754d4b7f45828addac6b3ae0c0f9327ade9feb37012972c102e80d4faeb32b4b82ab0e8bf9141136ae6d9778bc756e65a3885575c24049b2c9977436b5e54d1990fc78e7f4362ac88c29386769d6ff3ad78e00c13999070b3e10736fde6aacb71a03f9058575b89ed6144a04ebc55c776ecea3465b13e37789eed8dca20adc35e970c40a98bd30c24cb58fd01a2b2d5e0838b4c21ecad4f10dd6569809d6d4e2352d2fdf8b485a4a5fdaf15862f6b06a3b5de609fefa4a76d096e6019e59319ba2f696ff158a73c763c20bf1f821a764fe0dc8606e21135b26b2ba2428098342d063ad97212bebd6d2dbd57edb366b9b53b09955da903017369bac8bb2fbc540c7d934ab7e39c46fa606926fc8d7ed27a055d2bb52004b86356122c5ceafc6e544281f05643d642a106b13d579e6413d061324f2a82e05eafdbdbc0fc700e5da19f77265fb6fc81dff0ec652bb19602cc212d3362fa6a1821fd26dbe51ba4fe0c37dec83172c7fce58d43c94ad9874cf0226b89157a7181d36e7c92111b472bfaa91633d397dd89eba1a3d7d356ef8a8a21097e86391143ed3cdd56f4df346ec75af251c758835d0e14c7f37525178c47421539aa1b405bcdbf225809fc76131cca5a70b4415b5beecca8957c90f6cb861b935d2f3b0da391eabbbe5ed918f30487bc8a44c9a185d351c27bc71f4cad01ac669251e7662c7dbf013f9adcdd41b2898e2f4dfc590317004ca1093e652898525cd896862e781e507fc791269e886a7ddcf4b326fe343c8a77a658023ac4c4480369d1e502da183820cd729e1c8a480588b4282a304e1091fb59de4a7d9d33e4acf77b8bafe19d936f1c4f3bd99e56a0d9228c8ba745ded5ab33ea794351e80bea4edac99ed82a65613eb47d8e4076a00a2b1a578edb68ade6085a6702a16480007258d8320a2263e40e352827899952af88c2e8e69a0680c353f464d2e2e7a76705eb58c9373f164bc5da1ff1882d86d36d9105a52ebc115f71145ec4ed0007febf21f278d4fadc5a73b52a535562935b3de90348326fe9e8bc6110aef9778fd3de77f219b26339bb4218356d70ffd4aa5f47d78b0c292dd5876e05e381f790e92e1ef1a4c70c866166869d57205801c24d313ec3a4b53e0f9f49ab9cee684703e2d6c55bb09f672cb926f13768cbff22767c90a37008d68f0e81d858d2c6529be65e2b2ca4b7ca59b6889b9e891ac72f63db17d1a94106b96caace0d54a4b4cc8e4390430b9bf101071de6e797936afb4191b00b3fdfdca2b8dd19905ea1a9f035adfab63db7436ee27968c5a441dca65f29545912fa0fc810c0cc2af4abc78611832c0108972d5ca96f9862df19c5709878b254aec482df959e616ce2aa980fe9e70286799d39a4718d5b8abe96163ad156ff7b64759db32dc9a5b4de766c11e277fa47366e4c40dd9c957f76536ae09a37fa4f28c62b2d30682fc1b4b3150d547a873258cc4c85df84e519ff4b51019e6f7a4d9293b51cddf67d68dd3beb5ef2893ee2558f70fd6e78629fa07525d148ac774a2f0161e3f4d8739f38143192735de2bc212f09152aeb5f1a0a5b5581e8e2b82f44a5046b63f4eec336dc769fc5ea0990f0f9c0cd4b92495678d280a97fb441c57f9513975a0a58abace097d3cd27948b2378ffa91456f9a4d964295d185fde49c6ceb29c4d2df605f988edd321ebd835f6a56a2b184b9a6b819484e9129d2b71dfdd43614622b3e94bea04144a61168b7f1325c094132ca1e382b5c3294075ddee278341fed88ffdee3f968893aa890a9dc75aace955f12e4e3025f4d4cb5d944eb632a034416f77661eba70cbf300318f3e11f0074f5ab8ee3b86829e5920b6ef6a2bbe9a3d48d2190749102390e74e476fed28d2074ad2ca71972948f5d170513f772d5e7f265b17304803483ac529ad69bca4fc2946e39f0cbe90d94ae9efe64e0591842fcee0129b4583a0da867f3bca076af2004c0e1c389fc3d104aead462f096017f62f37bebfd5637f4410f165e7c2ccbd4b41c076ab020e505dca0494fa080e2bedafcc6a2cff0fbb448c830190276925e8cc801fc0b751ae39bc8177fd5ed7d6e659ee0f3660122ca3e0360dd1df4b7e2d0a4b7db5e646a5fb6d566a5bb5de9dada48b438c72ea7124f6b394329565bb669e343ecae5f6b2e7039b05ad8f6a6cb580e5d915b6377801cc652b7b12dc0fcca44e912c8e53e87e47aef6111ea78e68bc3c62874a6f6aa0e09953290e9d4bf6c807682f411b67220c4bc3e5221bf277bc294836837aa0423c07df9d7f55c9f3ff9caf8110e33a438aedf0d896ed0c2ceafb97b41a120b617d42bb33d4e4156948ce2b639ce3f21b281913f0e6e46170682a4a0897914d10e6043db62c77d87996d0ade4901e0ff78f40f3c6cbb6a531ea7ad5a83e766c331aeb349e0f32f98a08b927c0aee8f27473d02905fc8a5e14ac035d96607d3bb8caad7b38cbaa6a1f3cd1c090dfe0c76d6860cb21683955d7d9b72b1589b46d3a8791ce6a05ca3597527def6cea8b4a506dbd8147cee393b26c97bc2c9e07e18a1dfa4070d8a7b50621027a5dffc9d4a373ac436fdc59ffc3b6ef399640d8b5fe0ac7c11bd2b2bbbb0a9fbe174b74b0e07ecec0d76b0d76dbf3b646ffb8d4c5f02daa121d910b71e3a60a596e2b5745fdd78abe123db496386b66bb6af1dcd63b74192b02c89d3c66e4d9361e37b96c2c176dace7f16e225d3b61d57574bf74da6970880119b8ecac42339be231df861f803743b5e38af7ffd5ad00f6e8d859d4213ca9af6bc7dfeb148987943917c15522013a3a2f9461c86a1a556c434fc378f3af9a3070ef8aaa23c83bfc5a3182ea6611dc8598e2a19957fb9096f35f25d75fcd478dee268597984f632e23d911383f1b8bd67831b8"}}}}}}, 0x0)

59.724619193s ago: executing program 3 (id=2132):
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a310000000054000000030a01020000000000000000010000000900030073"], 0xe8}}, 0x0)
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000980)=ANY=[@ANYBLOB="12010000b1bd2f087d0403508c2f010203010902120001000000000904"], 0x0)
syz_usb_control_io$cdc_ecm(r0, &(0x7f00000000c0)={0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="0000f50000000341e9"], 0x0}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

58.142473102s ago: executing program 3 (id=2146):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000)
sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a80000000060a010400000000000000000a0000010900010073797a310000000054000480500001800b00010074617267657400004000028008000240000000012c0003007339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c70000000000000000000000000000000008000100544545000900020073797a3200"], 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840)
ioctl$AUTOFS_IOC_READY(r0, 0x9360, 0xfffffffffffffffd)
syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x2048c5, &(0x7f0000000340)=ANY=[@ANYBLOB="726f6469722c756e695f786c6174653d312c726f6469722c756e695f786c6174653d302c636865636b3d72656c617865642c73686f72746e616d653d77696e6e742c6e6f636173652c73686f72746e616d653d6c6f7765722c747a3d5554432c756e695f786c6174653d312c73686f77657865632c6e6f6e756d7461696c00002c007d88658bba9f86c7bbf19329c9a2a1c1511e3af2126ad5803a0f4e3d8521dd3f1b515a0673be6fb14db7c6534edf0e5e1d29e4f05d5c82fd3e0372c644e7ba7ccec22efc923b0beac1490e"], 0x0, 0x29f, &(0x7f0000000580)="$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")
r1 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00')
mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0)
mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0)
mount$bind(&(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x11080, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0x2020)
socket$nl_route(0x10, 0x3, 0x0)

58.085787062s ago: executing program 3 (id=2150):
r0 = socket(0xa, 0x2400000001, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000003c0)={0x4, {{0xa, 0x0, 0x0, @mcast1, 0xb}}}, 0x88)
setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000180)={0x4, {{0xa, 0x4e24, 0x3, @mcast1, 0x5}}, {{0xa, 0x4e21, 0x8b5f, @private1={0xfc, 0x1, '\x00', 0x1}, 0xe57}}}, 0x108)

57.834842582s ago: executing program 3 (id=2153):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="048000002120000028001280090001007665746800000000180002801400390000000000", @ANYRES32=0x0, @ANYBLOB="10c000024d4d000008003a00060001"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

57.590384741s ago: executing program 33 (id=2153):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000ffff26bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="048000002120000028001280090001007665746800000000180002801400390000000000", @ANYRES32=0x0, @ANYBLOB="10c000024d4d000008003a00060001"], 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x20040040)

21.53040081s ago: executing program 1 (id=2646):
syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x88c0, &(0x7f00000000c0)=ANY=[@ANYBLOB="6e6f61636c2c67727071756f74612c636c75737465725f737461636b3d6fe363622c75737271756f74612c00"], 0x1, 0x4450, &(0x7f0000008900)="$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")
mount(&(0x7f0000000100)=@loop={'/dev/loop', 0x0}, &(0x7f00000001c0)='.\x00', &(0x7f0000000000)='bfs\x00', 0x401, 0x0)

20.650773935s ago: executing program 1 (id=2651):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}, {0x30, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x10}, @NFTA_NAT_REG_ADDR_MIN={0x8, 0x3, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}, 0x1, 0x0, 0x0, 0x850}, 0x0)

20.551020718s ago: executing program 1 (id=2653):
syz_mount_image$vfat(&(0x7f0000000300), &(0x7f00000000c0)='./file0\x00', 0x204888, &(0x7f0000000380)=ANY=[@ANYBLOB="756e695f786c6174653d312c696f636861727365743d757466382c0097b75cbdde02821d0f899c2377ee9577397fc18b433d0c59e692b381740ca495e1c145c5922679338b5ff21c0653a98440a5725268a242c0263564f988d3c178704feaf8a412df818275708882ea9a4048c6e458a1f05b83f2e69b965b1df203b21de2b0ee375647f886a5310889982079aa7b1fb42e2382d40feefe7f768eec58b19cf50faaf129503175f4262df740183df51d3641ff78b86127c1db8ef165bfa3bd20797fde6ff91a0e45d3d7c1c6d1ce0a72be8c1fdb00000000"], 0x1, 0x336, &(0x7f0000000880)="$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")
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='+', 0x1, 0x24000045, 0x0, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff)

20.371132738s ago: executing program 1 (id=2655):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x64, 0x2, [@TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffd, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x94}}, 0x0)
sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0x122}}, 0x0)

20.370744846s ago: executing program 1 (id=2656):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x220)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0)
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})

19.481515605s ago: executing program 1 (id=2663):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000440)="5800000014001d2340834b80040d8d560a067ee500ff000000000000000058000b4824ca945f64009400140425010ebc000000000000008000f0fffeffe809005300fff5dd80000010000100080c10000000000000000100", 0x58}], 0x1)

4.938059612s ago: executing program 4 (id=2800):
r0 = socket$inet6(0xa, 0x3, 0x75)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@private1={0xfc, 0x1, '\x00', 0x1}, @in6=@dev={0xfe, 0x80, '\x00', 0x38}, 0x0, 0x1, 0x4, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x800000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffff7}, {0x0, 0xfef2, 0xd, 0x40000000000}, 0x101, 0x1, 0x1, 0x0, 0x3, 0x1}, {{@in6=@empty, 0x4d4, 0x32}, 0x0, @in=@multicast1, 0xfffffffe, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x35ced141}}, 0xe8)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x4, 0x0, 0x0, 0x0, 0x2, 0x0, 0x20, 0x2f}, {0xfffffefffffffffd, 0xeca, 0x2d, 0x0, 0x0, 0x0, 0x400778e, 0xffff}, {0xfffffffffffffff7, 0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x4d6, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x4}}, 0xe8)
close(r0)

4.88767111s ago: executing program 4 (id=2802):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0304000000000000300012800e00018069703665727370616e0000001c00028006001800020000a080b29f2dc230252b6c6b0c7d5d000800050001"], 0x58}}, 0x0)

4.838965808s ago: executing program 4 (id=2804):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000480)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x1}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000200)={0x0, 0x15, 0x3b, "46a497ff30ad9b71bb68198e61715b6a155f9f4a0d802bd4c19be6f4204137c949ac28e58eb940b6cf432f5c90e50e5bb73bebea10d82ec63d5fbe"}, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f00000003c0)={0x20, 0x0, 0x8, {0x10, 0x40, [0xf0]}}, 0x0, &(0x7f0000000440)={0x40, 0x9, 0x1, 0x88}, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0x17, 0x6, @link_local}, 0x0, 0x0, 0x0, &(0x7f0000000680)={0x40, 0x1e, 0x1, 0x4}, 0x0})

4.076853908s ago: executing program 34 (id=2663):
r0 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r0, &(0x7f0000000140)=[{&(0x7f0000000440)="5800000014001d2340834b80040d8d560a067ee500ff000000000000000058000b4824ca945f64009400140425010ebc000000000000008000f0fffeffe809005300fff5dd80000010000100080c10000000000000000100", 0x58}], 0x1)

2.328178961s ago: executing program 4 (id=2819):
r0 = gettid()
ioprio_get$pid(0x2, r0)

2.266798078s ago: executing program 4 (id=2821):
prctl$PR_SET_TIMERSLACK(0x1d, 0x0)

2.189227845s ago: executing program 4 (id=2823):
bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x94)
r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000004c0)=r0, 0x4)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0)
pipe2$9p(0x0, 0x0)
syz_usb_connect(0x0, 0x36, 0x0, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
mknod$loop(&(0x7f0000000000)='./file0\x00', 0x400, 0x1)
openat$ppp(0xffffffffffffff9c, &(0x7f0000000280), 0x2000, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = socket$kcm(0x29, 0x2, 0x0)
r3 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0)
pwritev(r3, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
sendfile(r2, r3, 0x0, 0x8000fb00)

1.398488519s ago: executing program 0 (id=2831):
r0 = syz_open_dev$cec(&(0x7f00000000c0), 0x0, 0x0)
ioctl$CEC_ADAP_S_LOG_ADDRS(r0, 0xc05c6104, &(0x7f00000001c0)={"1b00", 0x100, 0x5, 0x2, 0x800, 0x0, "f759e100edc710000000d9fc6300", '\x00', "0300", "e8cc1304", ["8b59b4d766cbd6e4af000700", "c2fed6e1dcc98a1c907c6b40", "000000ff0000000000000020", "0000000000000000001000"]})
ioctl$CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000000)={0x9, 0xd6, 0x7fffffff, 0x7, 0xffffffde, 0x344f, "85ec21e1382c329131320f813d6d7ab7", 0x0, 0x7, 0x2, 0x5, 0x80, 0x2, 0x4})

1.288079508s ago: executing program 0 (id=2832):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0)

1.219011184s ago: executing program 0 (id=2833):
r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
close(r0)
r1 = socket$inet(0xa, 0x801, 0x84)
listen(r1, 0x8)
mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}})

319.468946ms ago: executing program 0 (id=2834):
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000480)={0x0, 0x669f, 0x8, 0x0, 0xfffffffc}, &(0x7f0000000380)=<r1=>0x0, &(0x7f0000000340)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
r3 = socket$packet(0x11, 0x2, 0x300)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r3, 0x0, &(0x7f00000019c0)={0x0, 0x0, 0x0}, 0x0, 0x6040, 0x1, {0x1}})
io_uring_enter(r0, 0x47f9, 0x3f, 0x0, 0x0, 0x0)

169.586396ms ago: executing program 0 (id=2835):
syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x800714, &(0x7f0000000000)={[{@test_dummy_encryption}, {@user_xattr}]}, 0xff, 0x48f, &(0x7f0000000b80)="$eJzs3MtvVNUfAPDvvW15/Hi0P0QUBK2gkfhoaUFl4UKNJi40MdEFLmtbEBmooTUR0mgxBpeGxL1xaeJf4M6NURfGxK0mLg0J0caE4qrmvugwnZa2tB3pfD7JdM6Ze+6c8733nplz7+mdANpWb/YnidgeEb9GRHeRvbVAb/E0Mz05fGN6cjiJ2dk3/kzyctenJ4erotV628rM4TQi/SSJ55P59Y5fuHhmqFYbPV/m+yfOvtc/fuHiU6fPDp0aPTV6bvD48WNHB559ZvDpVYkzi+v6vg/H9u995a0rrw2fuPL2D19nzdpzoFheH8dt3WgSUBO92Vb7azbXuOzRZbT9brCjLp10trAhLEtHRGS7qyvv/93REXM7rzte/riljQPWVPbdtHnhxVOzwAaWRKtbALRG9UWfnf9Wj3UaevwnXHshYlOZnpmeHJ65GX9npOXrXWtYf29EnJj654vsEcu9DgEAsAL52ObJZuO/NPbkz8Vcx85yDqUnIv4fEbsi4p6I2B0R90bkZe+LiPuLlWe7l1h/b0N+/vgnvdq0zaskG/89Vzf2m6mLv3zq6ShzO/L4u5KTp2ujR8ptcji6Nmf5gUXq+PalXz5baFn9+C97ZPVXY8GyAVc7Gy7QjQxNDK3WRrh2KWJfZ7P4k5szAdkRsDci9i3vrXdWidOPf7V/oUK3j38RqzDPNPtlxGPF/p+KhvgryeLzk/1bojZ6pL86Kub78efLry9U/x3FvwquHXygSMzt/4YS3X8nxXxtV9Rqo+fHl1/H5d8+XfCcZqXH/6bkzXzO+qd3itc+GJqYOD8QsSl5Nc9X53T564Nz61b5qnx2/B8+1Lz/7yrXyeLPtlJ2EB+IiAcj4qGy7Q9HxMGIOLRI/N+/+Mi7i8SfRBKt2/+XIkaafv7dPP57kvr5+hUkOs58981CM+ZL2//HYir/rC3kn3+3sdQG3uHmAwAAgLtCGhHbI0n7inTv9kjTvr7if/h3x//S2tj4xBMnx94/N1LcI9ATXWl1pau77nroQDJVvmORHyyvFVfLj5bXjT/v2Jrn+4bHaiMtjh3a3bZb+39U/T/zR0erWwesOfdrQftq7P9pi9oBrL+lfP87F4CN6db+vyX7s7VVbQHWl/N/aF/N+v9HDXnjf9iY5vf/35v8ZB2wERn/Q/vS/6F96f/Qlu7kvv6VJ6qbBVb+PluWfId/uySqX7xYy7q2xtwrkbY85DZKZD1mfSud+w0VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAu9m/AQAA//+kuOWe")
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000180)='./mnt\x00', 0x0, &(0x7f00000001c0)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@commit}]}, 0x1, 0x241, &(0x7f0000000540)="$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")
syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000100)='.\x00', 0xe1, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000))

0s ago: executing program 0 (id=2836):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]})
openat$dir(0xffffffffffffff9c, 0x0, 0xea, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000000), 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000480)={<r1=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r0, 0x40182103, &(0x7f0000000240)={r1, 0x0, r0, 0x0, 0x80000})

kernel console output (not intermixed with test programs):

38][ T7909] netlink: 228 bytes leftover after parsing attributes in process `syz.1.813'.
[  140.351305][ T6848] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  140.535876][ T6848] usb 3-1: config 0 has an invalid interface number: 98 but max is 0
[  140.540343][ T6848] usb 3-1: config 0 has no interface number 0
[  140.545175][ T6848] usb 3-1: config 0 interface 98 has no altsetting 0
[  140.558469][ T6848] usb 3-1: New USB device found, idVendor=0711, idProduct=0230, bcdDevice=76.91
[  140.562685][ T6848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.565938][ T6848] usb 3-1: Product: syz
[  140.567290][ T6848] usb 3-1: Manufacturer: syz
[  140.568782][ T6848] usb 3-1: SerialNumber: syz
[  140.601313][ T6848] usb 3-1: config 0 descriptor??
[  140.616237][ T6848] mct_u232 3-1:0.98: MCT U232 converter detected
[  140.622334][ T6848] mct_u232 ttyUSB0: expected endpoint missing
[  140.894546][ T6848] usb 3-1: USB disconnect, device number 13
[  140.897767][ T6848] mct_u232 3-1:0.98: device disconnected
[  141.381601][ T7957] dns_resolver: Unsupported content type (218)
[  141.447023][ T7961] capability: warning: `syz.2.837' uses 32-bit capabilities (legacy support in use)
[  141.527909][ T7965] loop2: detected capacity change from 0 to 1024
[  141.532529][ T7965] EXT4-fs: Ignoring removed nomblk_io_submit option
[  141.548187][ T7965] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  141.657549][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  142.252684][ T8017] loop2: detected capacity change from 0 to 1024
[  142.260882][ T8017] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (16), stripe is disabled
[  142.264619][ T8017] EXT4-fs (loop2): required journal recovery suppressed and not mounted read-only
[  142.332888][   T56] Bluetooth: hci2: Unknown advertising packet type: 0x74
[  142.332932][   T56] Bluetooth: hci2: Malformed LE Event: 0x0d
[  143.482795][   T51] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  143.643915][   T51] usb 2-1: config 1 has an invalid descriptor of length 107, skipping remainder of the config
[  143.647978][   T51] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  143.653417][   T51] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  143.657049][   T51] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  143.660156][   T51] usb 2-1: SerialNumber: syz
[  143.765222][ T8071] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  143.769655][ T8071] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  143.785375][ T8071] Bluetooth: hci0: Opcode 0x0406 failed: -4
[  143.797235][ T8071] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  143.799994][ T8071] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  143.806053][ T8071] Bluetooth: hci1: Opcode 0x0406 failed: -4
[  143.813873][ T8071] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  143.816524][ T8071] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  143.824379][ T8071] Bluetooth: hci2: Opcode 0x0406 failed: -4
[  143.884146][   T51] usb 2-1: 0:2 : does not exist
[  143.906665][   T51] usb 2-1: USB disconnect, device number 11
[  144.236117][ T8101] loop2: detected capacity change from 0 to 512
[  144.266840][ T8101] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a843c02c, mo2=0102]
[  144.270069][ T8101] System zones: 1-12
[  144.277513][ T8101] EXT4-fs error (device loop2): ext4_xattr_inode_iget:446: comm syz.2.898: error while reading EA inode 32 err=-116
[  144.285346][ T8101] EXT4-fs (loop2): Remounting filesystem read-only
[  144.288030][ T8101] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[  144.294196][ T8101] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -30)
[  144.298828][ T8101] EXT4-fs (loop2): 1 orphan inode deleted
[  144.302485][ T8101] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  144.319692][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  144.369344][ T8105] netlink: 36 bytes leftover after parsing attributes in process `syz.2.899'.
[  144.811425][ T6848] usb 2-1: new full-speed USB device number 12 using dummy_hcd
[  144.964046][ T6848] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.968342][ T6848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10
[  144.975561][ T6848] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  144.979150][ T6848] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5
[  144.988731][ T6848] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  144.994548][ T6848] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  144.997676][ T6848] usb 2-1: Manufacturer: syz
[  145.003583][ T8123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.907'.
[  145.007617][ T6848] usb 2-1: config 0 descriptor??
[  145.271184][ T6848] rc_core: IR keymap rc-hauppauge not found
[  145.273801][ T6848] Registered IR keymap rc-empty
[  145.276218][ T6848] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  145.292975][ T6848] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  145.322810][ T6848] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[  145.332518][ T6848] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input7
[  145.339345][ T6848] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  145.361399][ T6848] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  145.381359][ T6848] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  145.413077][ T6848] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  145.441467][ T6848] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  145.481360][ T6848] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  145.523729][ T6848] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  145.551582][ T6848] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  145.564714][ T8149] netlink: 'syz.0.918': attribute type 1 has an invalid length.
[  145.594551][ T8149] bond3: entered promiscuous mode
[  145.596589][ T8149] bond3: entered allmulticast mode
[  145.921601][   T56] Bluetooth: hci0: command 0x0c1a tx timeout
[  145.924361][   T56] Bluetooth: hci2: command 0x0405 tx timeout
[  145.926969][   T56] Bluetooth: hci1: command 0x0c1a tx timeout
[  146.011770][ T6848] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  146.017780][ T8149] bond3: (slave geneve3): making interface the new active one
[  146.020203][ T8149] geneve3: entered promiscuous mode
[  146.026617][ T8149] geneve3: entered allmulticast mode
[  146.030033][ T8149] bond3: (slave geneve3): Enslaving as an active interface with an up link
[  146.032866][ T6848] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  146.051192][ T6848] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[  146.062095][ T8155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.919'.
[  146.073193][ T6848] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  146.077760][   T12] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  146.081396][ T8155] netlink: 12 bytes leftover after parsing attributes in process `syz.0.919'.
[  146.084699][   T12] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  146.087847][   T12] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  146.090608][   T12] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  146.096172][ T6848] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  146.108773][ T6848] usb 2-1: USB disconnect, device number 12
[  146.644836][ T8171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.926'.
[  147.076472][ T8180] loop1: detected capacity change from 0 to 2048
[  147.106945][ T8181] NILFS (loop1): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  147.119654][ T8180] NILFS (loop1): failed to count free inodes: err=-34
[  147.125605][ T8180] NILFS (loop1): failed to count free inodes: err=-34
[  147.590135][ T8183] loop2: detected capacity change from 0 to 2048
[  147.600277][ T8183] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  147.726424][ T8195] loop2: detected capacity change from 0 to 512
[  147.738797][ T8195] EXT4-fs error (device loop2): ext4_iget_extra_inode:5075: inode #15: comm syz.2.937: corrupted in-inode xattr: invalid ea_ino
[  147.748537][ T8195] EXT4-fs error (device loop2): ext4_orphan_get:1397: comm syz.2.937: couldn't read orphan inode 15 (err -117)
[  147.756044][ T8195] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  147.809809][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  147.961241][ T5855] Bluetooth: hci1: command 0x0c1a tx timeout
[  148.148545][   T56] Bluetooth: hci2: command 0x0405 tx timeout
[  148.168559][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout
[  148.197140][ T8200] loop2: detected capacity change from 0 to 4096
[  148.220613][ T8202] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  148.338858][ T8204] loop2: detected capacity change from 0 to 2048
[  148.347763][ T8204] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  148.463245][ T8210] loop2: detected capacity change from 0 to 1024
[  148.472746][ T8210] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  148.693833][ T8228] netlink: 'syz.0.951': attribute type 5 has an invalid length.
[  148.716380][ T8230] tmpfs: User quota block hardlimit too large.
[  148.741908][ T8233] loop2: detected capacity change from 0 to 256
[  148.744501][ T8233] exfat: Deprecated parameter 'utf8'
[  148.746373][ T8233] exfat: Deprecated parameter 'utf8'
[  148.748489][ T8233] exfat: Deprecated parameter 'namecase'
[  148.755153][ T8233] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  148.942010][ T3930] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  149.091136][ T3930] usb 2-1: Using ep0 maxpacket: 8
[  149.095704][ T3930] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024
[  149.099985][ T3930] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024
[  149.103958][ T3930] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  149.107695][ T3930] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  149.112664][ T3930] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[  149.116048][ T3930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  149.333525][ T3930] usb 2-1: GET_CAPABILITIES returned 0
[  149.335825][ T3930] usbtmc 2-1:16.0: can't read capabilities
[  149.539500][   T24] usb 2-1: USB disconnect, device number 13
[  150.089513][ T8268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.969'.
[  150.094046][ T8268] netlink: 16 bytes leftover after parsing attributes in process `syz.1.969'.
[  150.191587][ T5855] Bluetooth: hci0: command 0x0c1a tx timeout
[  150.193962][ T5855] Bluetooth: hci2: command 0x0405 tx timeout
[  150.245839][ T8274] netlink: 'syz.1.972': attribute type 32 has an invalid length.
[  150.248445][ T8274] netlink: 8 bytes leftover after parsing attributes in process `syz.1.972'.
[  150.251685][ T8274] (unnamed net_device) (uninitialized): Setting coupled_control to off (0)
[  150.272181][ T5855] Bluetooth: hci1: command 0x0c1a tx timeout
[  150.345399][ T8279] loop1: detected capacity change from 0 to 16
[  150.349858][ T8279] erofs (device loop1): mounted with root inode @ nid 36.
[  150.435952][ T8281] loop1: detected capacity change from 0 to 512
[  150.439930][ T8281] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[  150.449201][ T8281] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode
[  150.457812][ T8281] EXT4-fs (loop1): 1 truncate cleaned up
[  150.461791][ T8281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  150.506182][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.565339][ T8288] loop1: detected capacity change from 0 to 2048
[  150.574693][ T8288] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  150.585973][ T8288] EXT4-fs (loop1): Online defrag not supported with bigalloc
[  150.608293][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  150.847154][ T8292] loop1: detected capacity change from 0 to 32768
[  150.855314][ T8292] 
[  150.855314][ T8292]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.855314][ T8292] 
[  150.892471][ T5849] 
[  150.892471][ T5849]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.892471][ T5849] 
[  150.896711][ T5849] 
[  150.896711][ T5849]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  150.896711][ T5849] 
[  150.978880][ T8306] netlink: 'syz.0.987': attribute type 32 has an invalid length.
[  151.141469][ T5943] usb 3-1: new low-speed USB device number 14 using dummy_hcd
[  151.293385][ T5943] usb 3-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  151.297225][ T5943] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  151.314332][ T5943] usb 3-1: config 0 descriptor??
[  152.949995][   T33] audit: type=1400 audit(1759224041.860:173): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=8388 comm="syz.1.1026"
[  153.047079][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1028'.
[  153.051653][ T8393] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1028'.
[  153.130103][ T8397] loop1: detected capacity change from 0 to 1764
[  153.133284][ T8397] iso9660: Bad value for 'map'
[  153.336843][ T8407] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1035'.
[  153.378531][ T8409] netlink: 'syz.0.1036': attribute type 15 has an invalid length.
[  153.476620][ T5943] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  153.479781][ T5943] asix 3-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  153.483260][ T5943] asix 3-1:0.0: probe with driver asix failed with error -71
[  153.487263][ T5943] usb 3-1: USB disconnect, device number 14
[  153.501090][ T3930] usb 2-1: new high-speed USB device number 14 using dummy_hcd
[  153.661196][ T3930] usb 2-1: Using ep0 maxpacket: 32
[  153.665709][ T3930] usb 2-1: unable to get BOS descriptor or descriptor too short
[  153.671999][ T3930] usb 2-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config
[  153.677191][ T3930] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice=5a.bb
[  153.680521][ T3930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  153.684429][ T3930] usb 2-1: Product: syz
[  153.685869][ T3930] usb 2-1: Manufacturer: syz
[  153.687340][ T3930] usb 2-1: SerialNumber: syz
[  153.947203][ T3930] usb 2-1: Invalid number of CPorts: 0
[  153.950074][ T3930] es2_ap_driver 2-1:7.0: probe with driver es2_ap_driver failed with error -22
[  154.308921][ T3930] usb 2-1: USB disconnect, device number 14
[  154.509615][ T8430] loop2: detected capacity change from 0 to 512
[  154.512566][ T8430] EXT4-fs: Ignoring removed nomblk_io_submit option
[  154.514994][ T8430] EXT4-fs (loop2): Test dummy encryption mode enabled
[  154.520891][ T8430] EXT4-fs (loop2): 1 truncate cleaned up
[  154.524184][ T8430] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  156.596105][ T8432] EXT4-fs error (device loop2): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap
[  157.008013][ T8473] loop1: detected capacity change from 0 to 32768
[  157.013084][ T8473] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.1059 (8473)
[  157.021776][ T8473] BTRFS info (device loop1): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  157.025779][ T8473] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  157.053172][ T8473] BTRFS info (device loop1): enabling ssd optimizations
[  157.055878][ T8473] BTRFS info (device loop1): enabling free space tree
[  157.133286][ T5849] BTRFS info (device loop1): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  157.567460][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  157.677347][ T8505] netlink: 'syz.0.1067': attribute type 1 has an invalid length.
[  157.714019][ T8505] bond4: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[  157.719027][ T8505] bond4: (slave ipvlan2): The slave device specified does not support setting the MAC address
[  157.723943][ T8505] bond4: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode
[  158.383596][ T8519] loop1: detected capacity change from 0 to 128
[  159.023950][ T8528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1073'.
[  159.070837][ T8528] netlink: 'syz.2.1073': attribute type 10 has an invalid length.
[  159.110239][ T8528] bond0: (slave netdevsim0): Enslaving as an active interface with an up link
[  159.754025][ T5855] Bluetooth: hci1: unexpected event for opcode 0x2027
[  160.253991][ T8618] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  160.256615][ T8618] macvlan3: entered allmulticast mode
[  160.258575][ T8618] netdevsim netdevsim0 netdevsim0: entered allmulticast mode
[  160.267753][ T8618] netdevsim netdevsim0 netdevsim0: left allmulticast mode
[  160.278745][ T8618] netdevsim netdevsim0 netdevsim0: left promiscuous mode
[  162.268556][ T8712] loop1: detected capacity change from 0 to 1024
[  162.284668][ T8712] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  162.325335][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  162.365957][ T8717] loop1: detected capacity change from 0 to 256
[  162.369301][ T8717] exfat: Deprecated parameter 'utf8'
[  162.374725][ T8717] exfat: Deprecated parameter 'namecase'
[  162.377190][ T8717] exfat: Deprecated parameter 'utf8'
[  162.387154][ T8717] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d)
[  164.858858][ T8771] loop1: detected capacity change from 0 to 512
[  164.962852][ T8768] loop2: detected capacity change from 0 to 32768
[  164.976779][ T8768] XFS (loop2): DAX unsupported by block device. Turning off DAX.
[  164.980730][ T8768] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  164.998533][ T8768] XFS (loop2): Ending clean mount
[  165.003938][ T8768] XFS (loop2): Quotacheck needed: Please wait.
[  165.041309][ T8768] XFS (loop2): Quotacheck: Done.
[  165.087291][ T5858] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  166.716789][ T8817] netlink: 'syz.1.1169': attribute type 1 has an invalid length.
[  166.719944][ T8817] nbd: couldn't find a device at index 20
[  166.786951][ T8825] loop2: detected capacity change from 0 to 64
[  166.876427][ T8829] l2tp_ppp: sess 2/0: no socket in recv
[  167.024891][ T8843] loop2: detected capacity change from 0 to 4096
[  167.029112][ T8843] ntfs3(loop2): Different NTFS sector size (2048) and media sector size (512).
[  167.037180][ T8843] ntfs3(loop2): Failed to load $Bitmap (-22).
[  167.115269][ T8849] xt_nfacct: accounting object `\$9ZM#mU|^c\F9YⳈ' does not exist
[  167.211620][   T24] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  167.364488][   T24] usb 2-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  167.371846][   T24] usb 2-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  167.376197][   T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  167.380236][   T24] usb 2-1: Product: syz
[  167.383518][   T24] usb 2-1: Manufacturer: syz
[  167.385422][   T24] usb 2-1: SerialNumber: syz
[  167.393077][   T24] usb 2-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  167.533848][ T3930] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  167.601843][   T24] usb 2-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  167.613563][   T24] usb 2-1: USB disconnect, device number 15
[  167.701124][ T3930] usb 3-1: Using ep0 maxpacket: 8
[  167.706166][ T3930] usb 3-1: config 0 interface 0 has no altsetting 0
[  167.709835][ T3930] usb 3-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00
[  167.714187][ T3930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  167.719543][ T3930] usb 3-1: config 0 descriptor??
[  168.134031][ T3930] uclogic 0003:28BD:0042.0005: interface is invalid, ignoring
[  168.336980][   T24] usb 3-1: USB disconnect, device number 15
[  168.879628][ T8887] netlink: 'syz.2.1203': attribute type 1 has an invalid length.
[  169.039856][ T8891] loop1: detected capacity change from 0 to 8
[  169.052486][ T8891] SQUASHFS error: Failed to read block 0x260685: -5
[  169.055531][ T8891] SQUASHFS error: Unable to read metadata cache entry [260685]
[  169.058541][ T8891] SQUASHFS error: Unable to read directory block [260685:0]
[  169.115040][ T5855] Bluetooth: hci0: SCO packet for unknown connection handle 100
[  169.123690][ T8897] loop1: detected capacity change from 0 to 1024
[  169.161431][ T3930] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  169.240188][ T8905] loop1: detected capacity change from 0 to 512
[  169.247658][ T8905] EXT4-fs error (device loop1): ext4_orphan_get:1392: inode #15: comm syz.1.1212: iget: bad extended attribute block 1
[  169.252560][ T8905] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1212: couldn't read orphan inode 15 (err -117)
[  169.257567][ T8905] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  169.268397][ T8905] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 7934 vs 220 free clusters
[  169.293141][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  169.313178][ T3930] usb 3-1: config 1 has an invalid interface number: 7 but max is 0
[  169.316415][ T3930] usb 3-1: config 1 has no interface number 0
[  169.321557][ T3930] usb 3-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  169.329279][ T3930] usb 3-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  169.339420][ T3930] usb 3-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  169.348925][ T3930] usb 3-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  169.353758][ T3930] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  169.356984][ T3930] usb 3-1: Product: syz
[  169.358610][ T3930] usb 3-1: Manufacturer: syz
[  169.360397][ T3930] usb 3-1: SerialNumber: syz
[  169.369367][ T8889] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  169.576993][ T8889] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  170.500038][ T3930] sierra_net 3-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:01:07
[  170.677620][ T8934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1222'.
[  170.680505][ T8934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1222'.
[  170.873314][ T5943] usb 3-1: USB disconnect, device number 16
[  170.879983][ T5943] sierra_net 3-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.2-1, Sierra Wireless USB-to-WWAN Modem
[  171.078179][ T5943] sierra_net 3-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  171.555383][ T8947] loop2: detected capacity change from 0 to 256
[  174.476566][ T8999] hsr0: entered promiscuous mode
[  174.479089][ T8999] macsec1: entered promiscuous mode
[  174.786146][ T9017] loop2: detected capacity change from 0 to 512
[  174.815427][ T9017] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2
[  174.818498][ T9017] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -2
[  174.830884][ T9017] EXT4-fs (loop2): 1 truncate cleaned up
[  174.835661][ T9017] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  174.873399][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  175.365898][ T9071] loop1: detected capacity change from 0 to 1024
[  175.632245][ T9089] loop1: detected capacity change from 0 to 164
[  175.674878][ T9091] syzkaller1: entered promiscuous mode
[  175.676785][ T9091] syzkaller1: entered allmulticast mode
[  175.853660][ T9104] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1297'.
[  175.978732][ T9114] loop1: detected capacity change from 0 to 512
[  175.986471][ T9114] EXT4-fs error (device loop1): ext4_orphan_get:1418: comm syz.1.1300: bad orphan inode 15
[  175.992159][ T9114] ext4_test_bit(bit=14, block=5) = 0
[  175.997048][ T9114] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  176.216176][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  176.358878][ T9119] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1301'.
[  176.368874][ T9119] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1301'.
[  176.722935][ T9130] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1306'.
[  177.175086][ T9137] netlink: 'syz.2.1309': attribute type 14 has an invalid length.
[  177.178144][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'.
[  177.209924][   T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[  177.210066][ T9137] netlink: 'syz.2.1309': attribute type 14 has an invalid length.
[  177.217125][   T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[  177.220426][   T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[  177.227541][   T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[  177.236799][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1309'.
[  177.441290][ T9147] loop1: detected capacity change from 0 to 4096
[  177.445119][ T9147] ntfs3(loop1): Different NTFS sector size (4096) and media sector size (512).
[  177.468763][ T9147] ntfs3(loop1): Failed to initialize $Extend/$Reparse.
[  178.191049][   T33] audit: type=1326 audit(1759224067.100:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.0.1320" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0e78ec29 code=0x7ffc0000
[  178.206028][   T33] audit: type=1326 audit(1759224067.100:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.0.1320" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0e78ec29 code=0x7ffc0000
[  178.222971][   T33] audit: type=1326 audit(1759224067.100:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.0.1320" exe="/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f0c0e78ec29 code=0x7ffc0000
[  178.232751][   T33] audit: type=1326 audit(1759224067.130:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.0.1320" exe="/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f0c0e7c14e5 code=0x7ffc0000
[  178.241953][   T33] audit: type=1326 audit(1759224067.130:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.0.1320" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0e78ec29 code=0x7ffc0000
[  178.251198][   T33] audit: type=1326 audit(1759224067.130:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.0.1320" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f0c0e78ec29 code=0x7ffc0000
[  178.262495][   T33] audit: type=1326 audit(1759224067.140:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.0.1320" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0e78ec29 code=0x7ffc0000
[  178.272890][   T33] audit: type=1326 audit(1759224067.140:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.0.1320" exe="/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7f0c0e78ec29 code=0x7ffc0000
[  178.282884][   T33] audit: type=1326 audit(1759224067.140:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9162 comm="syz.0.1320" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0c0e78ec29 code=0x0
[  178.312356][ T9166] netdevsim netdevsim1 : renamed from netdevsim0 (while UP)
[  178.366932][   T33] audit: type=1326 audit(1759224067.280:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9165 comm="syz.0.1320" exe="/syz-executor" sig=0 arch=c000003e syscall=60 compat=0 ip=0x7f0c0e78ec29 code=0x7ffc0000
[  178.718824][ T9205] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'.
[  178.764281][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1340'.
[  178.910128][ T9220] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1345'.
[  179.875217][ T9250] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  179.911311][ T9257] loop2: detected capacity change from 0 to 128
[  179.915511][ T9257] EXT4-fs (loop2): Test dummy encryption mode enabled
[  179.942079][ T9261] netlink: 'syz.0.1363': attribute type 1 has an invalid length.
[  179.959849][ T9261] 8021q: adding VLAN 0 to HW filter on device bond5
[  179.973774][ T9257] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  179.985517][ T9261] bond5: (slave ip6gretap1): making interface the new active one
[  179.990449][ T9257] ext4 filesystem being mounted at /376/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  179.997800][ T9261] bond5: (slave ip6gretap1): Enslaving as an active interface with an up link
[  180.113389][ T9257] fscrypt: AES-256-CBC-CTS using implementation "cts(cbc(ecb(aes-fixed-time)))"
[  180.124316][ T9257] EXT4-fs error (device loop2): ext4_validate_block_bitmap:423: comm syz.2.1361: bg 0: bad block bitmap checksum
[  180.165707][ T5858] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  180.369850][ T5943] IPVS: starting estimator thread 0...
[  180.418347][ T9300] netlink: 'syz.1.1379': attribute type 4 has an invalid length.
[  180.425403][ T9300] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1379'.
[  180.481149][ T9296] IPVS: using max 59 ests per chain, 141600 per kthread
[  181.141276][ T3930] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  181.241515][ T9327] __nla_validate_parse: 5 callbacks suppressed
[  181.241531][ T9327] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1392'.
[  181.284456][ T9329] net_ratelimit: 3320 callbacks suppressed
[  181.284472][ T9329] sock: sock_set_timeout: `syz.2.1393' (pid 9329) tries to set negative timeout
[  181.293462][ T3930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.297527][ T3930] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.308369][ T3930] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  181.314639][ T3930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.319585][ T3930] usb 2-1: config 0 descriptor??
[  181.735681][ T3930] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  181.739779][ T3930] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  181.742959][ T3930] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  181.745668][ T3930] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  181.748262][ T3930] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  181.750947][ T3930] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  181.753747][ T3930] cp2112 0003:10C4:EA90.0006: unknown main item tag 0x0
[  181.758178][ T3930] cp2112 0003:10C4:EA90.0006: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0
[  181.933215][ T3930] cp2112 0003:10C4:EA90.0006: Part Number: 0x00 Device Version: 0x00
[  182.011222][ T6848] usb 3-1: new high-speed USB device number 17 using dummy_hcd
[  182.191376][ T6848] usb 3-1: Using ep0 maxpacket: 32
[  182.195662][ T6848] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  182.198880][ T6848] usb 3-1: config 0 has no interface number 0
[  182.204106][ T6848] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  182.207769][ T6848] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  182.221095][ T6848] usb 3-1: Product: syz
[  182.222823][ T6848] usb 3-1: Manufacturer: syz
[  182.224682][ T6848] usb 3-1: SerialNumber: syz
[  182.230169][ T6848] usb 3-1: config 0 descriptor??
[  182.236057][ T6848] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  182.439379][ T6848] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  182.446364][ T6848] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  182.535207][ T3930] cp2112 0003:10C4:EA90.0006: error reading lock byte: -71
[  182.547205][ T3930] usb 2-1: USB disconnect, device number 16
[  182.643107][    C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 110
[  182.744480][ T9381] sctp: [Deprecated]: syz.0.1417 (pid 9381) Use of int in maxseg socket option.
[  182.744480][ T9381] Use struct sctp_assoc_value instead
[  182.844257][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  182.844993][ T5943] usb 3-1: USB disconnect, device number 17
[  182.960557][ T5943] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  183.009036][ T5943] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  183.019467][ T5943] quatech2 3-1:0.51: device disconnected
[  183.551179][ T3930] usb 2-1: new low-speed USB device number 17 using dummy_hcd
[  183.742751][ T3930] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  183.746401][ T3930] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  183.755424][ T3930] usb 2-1: config 0 descriptor??
[  184.122938][ T9415] loop2: detected capacity change from 0 to 32768
[  184.134109][ T9415] ERROR: (device loop2): xtTruncate_pmap: xt_getpage: xtree page corrupt
[  184.134109][ T9415] 
[  184.140771][ T9415] ERROR: (device loop2): remounting filesystem as read-only
[  184.143862][ T9415] ERROR: (device loop2): jfs_rename: 
[  184.143862][ T9415] 
[  184.155926][ T5858] ERROR: (device loop2): xtTruncate: xt_getpage: xtree page corrupt
[  184.155926][ T5858] 
[  185.137843][ T3930] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[  185.142520][ T3930] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9
[  185.146703][ T3930] asix 2-1:0.0: probe with driver asix failed with error -71
[  185.154640][ T3930] usb 2-1: USB disconnect, device number 17
[  185.743435][ T9456] loop2: detected capacity change from 0 to 256
[  185.772539][ T9456] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  185.891849][ T9460] tmpfs: Unknown parameter ''
[  185.909073][ T9460] comedi comedi1: bad chanlist[0]=0x0000015f chan=351 range length=1
[  185.994481][ T9460] loop1: detected capacity change from 0 to 1024
[  186.011142][ T9460] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (62631!=20869)
[  186.035215][ T9460] JBD2: no valid journal superblock found
[  186.038411][ T9460] EXT4-fs (loop1): Could not load journal inode
[  186.246432][ T9462] loop2: detected capacity change from 0 to 128
[  186.364504][ T9462] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  186.373175][ T9462] ext4 filesystem being mounted at /406/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  186.412958][ T9457] loop1: detected capacity change from 0 to 32768
[  186.416091][ T9457] btrfs: Unknown parameter 'ref_verify'
[  186.516081][ T5858] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  186.614454][ T9477] loop2: detected capacity change from 0 to 2048
[  187.457084][ T9499] loop1: detected capacity change from 0 to 2048
[  187.460727][ T9499] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  187.465159][ T9499] UDF-fs: warning (device loop1): udf_fill_super: No partition found (2)
[  187.680317][ T9503] loop2: detected capacity change from 0 to 32768
[  187.686383][ T9503] ocfs2: Slot 0 on device (7,2) was already allocated to this node!
[  187.692644][ T9503] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode.
[  187.727311][ T5858] ocfs2: Unmounting device (7,2) on (node local)
[  187.820419][ T9513] loop2: detected capacity change from 0 to 1024
[  187.825867][ T9513] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  187.832666][ T9513] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  187.836275][ T9513] EXT4-fs (loop2): orphan cleanup on readonly fs
[  187.839769][ T9513] EXT4-fs error (device loop2): ext4_free_blocks:6706: comm syz.2.1475: Freeing blocks not in datazone - block = 0, count = 4096
[  187.850000][ T9513] EXT4-fs (loop2): 1 orphan inode deleted
[  187.853979][ T9513] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  187.869075][ T9509] loop1: detected capacity change from 0 to 32768
[  187.878703][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  187.919056][ T5855] Bluetooth: hci2: unexpected event for opcode 0x042c
[  189.084174][ T9539] loop1: detected capacity change from 0 to 256
[  189.726675][ T9566] loop1: detected capacity change from 0 to 16
[  189.730609][ T9566] erofs (device loop1): mounted with root inode @ nid 36.
[  190.104988][ T9576] loop2: detected capacity change from 0 to 1764
[  190.495127][ T9588] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1509'.
[  191.061095][ T3930] usb 2-1: new high-speed USB device number 18 using dummy_hcd
[  191.229956][ T3930] usb 2-1: config 1 has an invalid interface number: 7 but max is 0
[  191.241089][ T3930] usb 2-1: config 1 has no interface number 0
[  191.243479][ T3930] usb 2-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  191.248008][ T3930] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[  191.253869][ T3930] usb 2-1: config 1 interface 7 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 64
[  191.256922][ T3930] usb 2-1: config 1 interface 7 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.266316][ T3930] usb 2-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00
[  191.269761][ T3930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  191.273914][ T3930] usb 2-1: Product: syz
[  191.275699][ T3930] usb 2-1: Manufacturer: syz
[  191.277394][ T3930] usb 2-1: SerialNumber: syz
[  191.283300][ T9592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  191.286190][ T9592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  191.547101][ T9592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  191.550093][ T9592] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  191.639894][ T9604] netlink: 92 bytes leftover after parsing attributes in process `syz.2.1518'.
[  191.646831][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1518'.
[  191.654838][ T9604] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1518'.
[  191.977835][ T3930] sierra_net 2-1:1.7 wwan0: register 'sierra_net' at usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem, 00:00:00:00:02:07
[  192.123748][ T9633] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1530'.
[  192.157465][ T3930] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71
[  192.160356][ T3930] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71
[  192.172440][ T3930] sierra_net 2-1:1.7 wwan0: Submit SYNC failed -71
[  192.175220][ T3930] sierra_net 2-1:1.7 wwan0: Send SYNC failed, status -71
[  192.198511][ T3930] usb 2-1: USB disconnect, device number 18
[  192.206903][ T3930] sierra_net 2-1:1.7 wwan0: unregister 'sierra_net' usb-dummy_hcd.1-1, Sierra Wireless USB-to-WWAN Modem
[  192.264528][ T3930] sierra_net 2-1:1.7 wwan0 (unregistered): usb_control_msg failed, status -19
[  193.077910][ T9661] loop1: detected capacity change from 0 to 512
[  193.081537][ T9661] EXT4-fs: Ignoring removed oldalloc option
[  193.087948][ T9661] EXT4-fs error (device loop1): ext4_iget_extra_inode:5075: inode #15: comm syz.1.1542: corrupted in-inode xattr: e_value size too large
[  193.094733][ T9661] EXT4-fs error (device loop1): ext4_orphan_get:1397: comm syz.1.1542: couldn't read orphan inode 15 (err -117)
[  193.101152][ T9661] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  193.130908][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  193.174255][ T9665] usb usb8: usbfs: process 9665 (syz.1.1543) did not claim interface 1 before use
[  193.214055][ T9667] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1544'.
[  193.217909][ T9667] openvswitch: netlink: Message has 44053 unknown bytes.
[  194.115779][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  194.118301][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  195.924098][ T9725] loop2: detected capacity change from 0 to 512
[  195.963486][ T9725] EXT4-fs error (device loop2): ext4_orphan_get:1418: comm syz.2.1565: bad orphan inode 15
[  195.978265][ T9725] ext4_test_bit(bit=14, block=18) = 1
[  195.980126][ T9725] is_bad_inode(inode)=0
[  195.991404][ T9725] NEXT_ORPHAN(inode)=1023
[  195.993878][ T9725] max_ino=32
[  195.995113][ T9725] i_nlink=0
[  196.011168][ T9725] EXT4-fs error (device loop2): ext4_xattr_delete_inode:2967: inode #15: comm syz.2.1565: corrupted xattr block 19: invalid header
[  196.026964][ T9725] EXT4-fs warning (device loop2): ext4_evict_inode:274: xattr delete (err -117)
[  196.039230][ T9725] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0009-000000000000 r/w without journal. Quota mode: none.
[  196.045077][ T9725] ext4 filesystem being mounted at /448/qY3aK supports timestamps until 2038-01-19 (0x7fffffff)
[  196.990869][ T9746] tipc: Started in network mode
[  196.995115][ T9746] tipc: Node identity 7f000001, cluster identity 4711
[  196.998601][ T9746] tipc: New replicast peer: 0.0.0.0
[  197.003146][ T9746] tipc: Enabled bearer <udp:syz2>, priority 10
[  197.164071][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0009-000000000000.
[  197.563414][ T9773] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1579'.
[  197.568477][ T9773] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1579'.
[  197.572751][ T9773] netlink: 'syz.1.1579': attribute type 1 has an invalid length.
[  198.114862][    T9] tipc: Node number set to 2130706433
[  198.278807][ T9781] netlink: 'syz.2.1592': attribute type 1 has an invalid length.
[  198.392011][ T9788] loop2: detected capacity change from 0 to 128
[  198.395287][ T9788] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256
[  198.627565][ T9790] loop2: detected capacity change from 0 to 32768
[  198.643902][   T33] audit: type=1800 audit(1759224087.560:184): pid=9790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1596" name="file1" dev="loop2" ino=4 res=0 errno=0
[  200.749588][   T33] audit: type=1326 audit(1759224089.660:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.0.1640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0e78ec29 code=0x7ffc0000
[  200.766459][   T33] audit: type=1326 audit(1759224089.660:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.0.1640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0e78ec29 code=0x7ffc0000
[  200.774964][   T33] audit: type=1326 audit(1759224089.680:187): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.0.1640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0e78ec29 code=0x7ffc0000
[  200.784445][   T33] audit: type=1326 audit(1759224089.680:188): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.0.1640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0e78ec29 code=0x7ffc0000
[  200.792849][   T33] audit: type=1326 audit(1759224089.680:189): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.0.1640" exe="/syz-executor" sig=0 arch=c000003e syscall=306 compat=0 ip=0x7f0c0e78ec29 code=0x7ffc0000
[  200.807852][   T33] audit: type=1326 audit(1759224089.680:190): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.0.1640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0e78ec29 code=0x7ffc0000
[  200.827858][   T33] audit: type=1326 audit(1759224089.680:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.0.1640" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0c0e78ec29 code=0x7ffc0000
[  200.840554][   T33] audit: type=1326 audit(1759224089.680:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.0.1640" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f0c0e78ec29 code=0x7ffc0000
[  200.848893][   T33] audit: type=1326 audit(1759224089.680:193): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9890 comm="syz.0.1640" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0c0e78ec29 code=0x7ffc0000
[  200.899542][ T5855] Bluetooth: hci1: unexpected event 0x01 length: 4 > 1
[  200.978261][ T9903] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0
[  202.873974][ T9970] loop2: detected capacity change from 0 to 512
[  203.361587][ T9995] loop2: detected capacity change from 0 to 512
[  203.465837][ T9995] EXT4-fs (loop2): revision level too high, forcing read-only mode
[  203.474589][ T9995] EXT4-fs (loop2): orphan cleanup on readonly fs
[  203.492701][ T9995] EXT4-fs warning (device loop2): ext4_enable_quotas:7180: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix.
[  203.508405][ T9995] EXT4-fs (loop2): Cannot turn on quotas: error -117
[  203.539836][ T9995] EXT4-fs error (device loop2): ext4_validate_block_bitmap:441: comm syz.2.1663: bg 0: block 40: padding at end of block bitmap is not set
[  203.548230][ T9995] EXT4-fs error (device loop2) in ext4_mb_clear_bb:6667: Corrupt filesystem
[  203.553609][ T9995] EXT4-fs (loop2): 1 truncate cleaned up
[  203.557222][ T9995] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  203.978185][ T5858] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  204.590782][T10046] input: syz0 as /devices/virtual/input/input11
[  204.698385][T10055] netlink: 'syz.1.1681': attribute type 3 has an invalid length.
[  204.766493][T10061] loop2: detected capacity change from 0 to 1024
[  204.793672][ T5858] hfsplus: bad catalog entry type
[  204.892481][ T1092] hfsplus: b-tree write err: -5, ino 4
[  205.316954][ T5709] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  205.323920][ T5709] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.760186][T10079] loop1: detected capacity change from 0 to 4096
[  205.797611][ T5709] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  205.804409][ T5709] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.865991][ T5709] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  205.869641][ T5709] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  205.924683][   T36] ntfs3(loop1): ino=5, mi_enum_attr
[  205.958262][ T5709] bond0: (slave netdevsim0): Releasing backup interface
[  205.970762][ T5709] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  206.012264][ T5852] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  206.017632][ T5852] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  206.021260][ T5852] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  206.025104][ T5852] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  206.028310][ T5852] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  206.056668][ T5709] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  206.339362][ T5709] bridge_slave_1: left allmulticast mode
[  206.342131][ T5709] bridge_slave_1: left promiscuous mode
[  206.345858][ T5709] bridge0: port 2(bridge_slave_1) entered disabled state
[  206.364915][ T5709] bridge_slave_0: left allmulticast mode
[  206.367121][ T5709] bridge_slave_0: left promiscuous mode
[  206.369322][ T5709] bridge0: port 1(bridge_slave_0) entered disabled state
[  206.655546][ T5709] gretap0 (unregistering): left promiscuous mode
[  206.956347][ T5709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  206.964937][ T5709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  206.970362][ T5709] bond0 (unregistering): Released all slaves
[  206.986984][T10081] chnl_net:caif_netlink_parms(): no params data found
[  207.164268][T10081] bridge0: port 1(bridge_slave_0) entered blocking state
[  207.167024][T10081] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.169810][T10081] bridge_slave_0: entered allmulticast mode
[  207.183002][T10081] bridge_slave_0: entered promiscuous mode
[  207.192557][T10081] bridge0: port 2(bridge_slave_1) entered blocking state
[  207.195601][T10081] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.198474][T10081] bridge_slave_1: entered allmulticast mode
[  207.213546][T10081] bridge_slave_1: entered promiscuous mode
[  207.324344][T10081] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  207.353486][T10081] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  207.397923][T10106] loop1: detected capacity change from 0 to 32768
[  207.415545][T10106] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  207.442567][T10106] XFS (loop1): Ending clean mount
[  207.495741][T10081] team0: Port device team_slave_0 added
[  207.518170][T10081] team0: Port device team_slave_1 added
[  207.637278][ T5849] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  207.641717][T10081] batman_adv: batadv0: Adding interface: batadv_slave_0
[  207.645122][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  207.668961][T10081] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  207.682909][T10081] batman_adv: batadv0: Adding interface: batadv_slave_1
[  207.684571][T10130] overlayfs: failed to clone upperpath
[  207.685386][T10081] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  207.696865][T10081] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  207.730140][ T5709] team0: left promiscuous mode
[  207.732895][ T5709] team_slave_0: left promiscuous mode
[  207.735224][ T5709] team_slave_1: left promiscuous mode
[  207.753461][ T5709] hsr_slave_0: left promiscuous mode
[  207.768153][ T5709] hsr_slave_1: left promiscuous mode
[  207.770840][ T5709] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  207.780848][ T5709] batman_adv: batadv0: Removing interface: batadv_slave_0
[  207.797128][ T5709] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  207.799726][ T5709] batman_adv: batadv0: Removing interface: batadv_slave_1
[  207.854188][ T5709] veth1_macvtap: left promiscuous mode
[  207.856387][ T5709] veth0_macvtap: left promiscuous mode
[  207.858553][ T5709] veth1_vlan: left promiscuous mode
[  207.870138][ T5709] veth0_vlan: left promiscuous mode
[  208.111757][ T5852] Bluetooth: hci2: command tx timeout
[  208.708328][ T5709] team0 (unregistering): Port device team_slave_1 removed
[  208.773887][ T5709] team0 (unregistering): Port device team_slave_0 removed
[  209.613795][T10081] hsr_slave_0: entered promiscuous mode
[  209.617944][T10081] hsr_slave_1: entered promiscuous mode
[  209.620541][T10081] debugfs: 'hsr0' already exists in 'hsr'
[  209.641259][T10081] Cannot create hsr debugfs directory
[  209.922392][ T5709] IPVS: stop unused estimator thread 0...
[  209.941844][T10081] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  209.953771][T10081] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  209.962964][T10081] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  209.970101][T10081] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  210.086931][T10081] 8021q: adding VLAN 0 to HW filter on device bond0
[  210.109074][T10081] 8021q: adding VLAN 0 to HW filter on device team0
[  210.122188][ T3574] bridge0: port 1(bridge_slave_0) entered blocking state
[  210.124880][ T3574] bridge0: port 1(bridge_slave_0) entered forwarding state
[  210.144382][ T3574] bridge0: port 2(bridge_slave_1) entered blocking state
[  210.147257][ T3574] bridge0: port 2(bridge_slave_1) entered forwarding state
[  210.192938][ T5852] Bluetooth: hci2: command tx timeout
[  210.410904][T10081] 8021q: adding VLAN 0 to HW filter on device batadv0
[  210.439084][T10081] veth0_vlan: entered promiscuous mode
[  210.446600][T10081] veth1_vlan: entered promiscuous mode
[  210.464827][T10081] veth0_macvtap: entered promiscuous mode
[  210.469180][T10081] veth1_macvtap: entered promiscuous mode
[  210.487682][T10081] batman_adv: batadv0: Interface activated: batadv_slave_0
[  210.498093][T10081] batman_adv: batadv0: Interface activated: batadv_slave_1
[  210.507651][   T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  210.514119][   T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  210.518250][   T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  210.523944][   T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  210.604663][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.607692][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.646882][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  210.650537][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  210.877656][T10220] netdevsim netdevsim3: Firmware load for './cgroup/../file0' refused, path contains '..' component
[  211.116892][T10238] netlink: 'syz.3.1756': attribute type 1 has an invalid length.
[  211.120119][T10238] netlink: 'syz.3.1756': attribute type 1 has an invalid length.
[  211.129782][T10238] netlink: 'syz.3.1756': attribute type 1 has an invalid length.
[  211.424165][T10250] !: renamed from dummy0 (while UP)
[  211.447655][T10252] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1762'.
[  211.630882][T10265] loop1: detected capacity change from 0 to 4096
[  212.271117][ T5852] Bluetooth: hci2: command tx timeout
[  212.953232][   T24] IPVS: starting estimator thread 0...
[  213.051590][T10318] IPVS: using max 63 ests per chain, 151200 per kthread
[  213.092587][T10327] loop3: detected capacity change from 0 to 4096
[  213.114623][T10327] EXT4-fs (loop3): Test dummy encryption mode enabled
[  213.118168][T10327] EXT4-fs (loop3): Number of reserved GDT blocks insanely large: 2304
[  213.415399][T10343] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1804'.
[  214.361908][ T5852] Bluetooth: hci2: command tx timeout
[  214.523637][T10348] loop3: detected capacity change from 0 to 32768
[  214.557637][T10348] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode.
[  214.637096][T10081] (syz-executor,10081,0):ocfs2_inode_is_valid_to_delete:948 ERROR: Skipping delete of system file 72
[  214.645903][T10081] ocfs2: Unmounting device (7,3) on (node local)
[  215.404468][T10359] loop1: detected capacity change from 0 to 32768
[  215.520752][T10359] XFS (loop1): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  215.597475][T10359] XFS (loop1): Ending clean mount
[  215.605333][T10359] XFS (loop1): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x20 
[  215.616447][T10359] XFS (loop1): Unmount and run xfs_repair
[  215.622411][T10359] XFS (loop1): First 128 bytes of corrupted metadata buffer:
[  215.627972][T10359] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff  FIB3............
[  215.638387][T10359] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40  ....... .......@
[  215.648135][T10359] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a  ...B..N....xv...
[  215.651768][T10359] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37  .......F......@7
[  215.655400][T10359] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00  ................
[  215.658858][T10359] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00  ................
[  215.664790][T10359] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  215.668256][T10359] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00  ................
[  215.674403][T10359] XFS (loop1): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x20 len 8 error 74
[  215.683805][T10359] XFS (loop1): Failed to initialize disk quotas, err -117.
[  215.758652][ T5849] XFS (loop1): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a
[  215.768240][ T5849] XFS (loop1): Uncorrected metadata errors detected; please run xfs_repair.
[  216.380432][T10393] netlink: 'syz.3.1821': attribute type 10 has an invalid length.
[  216.406478][T10393] 8021q: adding VLAN 0 to HW filter on device batadv0
[  216.417455][T10393] bond0: (slave batadv0): Enslaving as an active interface with an up link
[  216.443541][T10387] loop1: detected capacity change from 0 to 40427
[  216.446367][T10387] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12
[  216.448757][T10387] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock
[  216.456059][T10387] F2FS-fs (loop1): invalid crc value
[  216.496028][T10387] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  216.501185][T10387] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0
[  216.503451][T10387] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5
[  216.697071][T10414] vcan0: tx drop: invalid da for name 0xfffffffffffffffc
[  216.970325][T10440] loop1: detected capacity change from 0 to 256
[  216.979257][T10440] exfat: Deprecated parameter 'utf8'
[  216.986890][T10440] exfat: Deprecated parameter 'utf8'
[  217.019165][T10441] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22
[  217.019813][T10440] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  217.022522][T10441] netdevsim netdevsim3: Direct firmware load for . failed with error -22
[  217.022561][T10441] netdevsim netdevsim3: Falling back to sysfs fallback for: .
[  217.265552][T10443] loop1: detected capacity change from 0 to 128
[  217.282999][T10443] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  217.287484][T10443] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  217.302586][T10443] FAT-fs (loop1): FAT read failed (blocknr 3104)
[  217.741335][ T5898] usb 2-1: new high-speed USB device number 19 using dummy_hcd
[  217.891605][ T5898] usb 2-1: Using ep0 maxpacket: 32
[  217.898573][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  217.903318][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  217.907171][ T5898] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  217.910918][ T5898] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  217.919887][ T5898] usb 2-1: config 0 descriptor??
[  217.926673][ T5898] hub 2-1:0.0: USB hub found
[  218.144055][ T5898] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  218.334804][T10453] netlink: 'syz.3.1847': attribute type 21 has an invalid length.
[  218.337582][T10453] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1847'.
[  218.550928][ T5898] hid-generic 0003:046D:C31C.0007: item fetching failed at offset 0/1
[  218.555226][ T5898] hid-generic 0003:046D:C31C.0007: probe with driver hid-generic failed with error -22
[  219.071670][ T3930] usb 2-1: USB disconnect, device number 19
[  219.514876][T10472] loop3: detected capacity change from 0 to 1024
[  219.526673][T10472] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  219.536174][T10472] EXT4-fs (loop3): revision level too high, forcing read-only mode
[  219.539681][T10472] EXT4-fs (loop3): orphan cleanup on readonly fs
[  219.543298][T10472] __quota_error: 1 callbacks suppressed
[  219.543314][T10472] Quota error (device loop3): v2_read_file_info: Block with free entry 1283 out of range (1, 6).
[  219.551968][T10472] EXT4-fs warning (device loop3): ext4_enable_quotas:7180: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix.
[  219.557558][T10472] EXT4-fs (loop3): Cannot turn on quotas: error -117
[  219.560632][T10472] EXT4-fs error (device loop3): ext4_free_blocks:6706: comm syz.3.1855: Freeing blocks not in datazone - block = 0, count = 4096
[  219.569574][T10472] EXT4-fs (loop3): 1 orphan inode deleted
[  219.574273][T10472] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  219.587516][T10472] EXT4-fs error (device loop3): ext4_lookup:1787: inode #15: comm syz.3.1855: iget: bad extended attribute block 6
[  219.626005][T10081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  220.020444][T10494] Bluetooth: received HCILL_WAKE_UP_ACK in state 2
[  220.110934][ T1147] Bluetooth: hci3: Frame reassembly failed (-84)
[  220.148843][ T1147] Bluetooth: hci3: Frame reassembly failed (-84)
[  220.264985][T10499] loop3: detected capacity change from 0 to 2048
[  220.273950][T10499] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  221.306564][T10520] loop3: detected capacity change from 0 to 128
[  221.315089][T10520] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  221.320841][T10520] ext4 filesystem being mounted at /43/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  221.369654][T10081] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  221.399507][T10528] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[  221.490113][T10534] batman_adv: batadv0: Adding interface: gretap1
[  221.493968][T10534] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  221.505049][T10534] batman_adv: batadv0: Interface activated: gretap1
[  221.781751][T10550] loop3: detected capacity change from 0 to 8
[  221.789112][T10550] SQUASHFS error: lzo decompression failed, data probably corrupt
[  221.870701][T10550] SQUASHFS error: Failed to read block 0x91: -5
[  221.894131][T10550] SQUASHFS error: Unable to read metadata cache entry [8f]
[  221.918008][T10550] SQUASHFS error: Unable to read inode 0x11f
[  222.111473][ T5855] Bluetooth: hci3: command 0x1003 tx timeout
[  222.111748][ T5852] Bluetooth: hci3: Opcode 0x1003 failed: -110
[  223.497292][ T5852] Bluetooth: hci1: unexpected event for opcode 0x0c2d
[  224.552736][T10608] netlink: 'syz.1.1914': attribute type 5 has an invalid length.
[  225.504116][T10627] netlink: 'syz.0.1922': attribute type 4 has an invalid length.
[  225.646875][   T33] audit: type=1400 audit(1759224114.560:194): apparmor="DENIED" operation="setprocattr" info="current" error=-22 profile="unconfined" pid=10639 comm="syz.0.1928"
[  225.721478][T10648] loop1: detected capacity change from 0 to 64
[  225.731833][T10648] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  225.773756][T10652] loop3: detected capacity change from 0 to 1024
[  225.808335][T10652] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  226.363348][ T6848] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  226.526051][ T6848] usb 2-1: config 0 has an invalid interface number: 251 but max is 0
[  226.529227][ T6848] usb 2-1: config 0 has no interface number 0
[  226.533473][ T6848] usb 2-1: config 0 interface 251 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10
[  226.540194][ T6848] usb 2-1: New USB device found, idVendor=05e3, idProduct=0505, bcdDevice=85.fd
[  226.543968][ T6848] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  226.547106][ T6848] usb 2-1: Product: syz
[  226.548757][ T6848] usb 2-1: Manufacturer: syz
[  226.550609][ T6848] usb 2-1: SerialNumber: syz
[  226.556186][ T6848] usb 2-1: config 0 descriptor??
[  226.561271][ T6848] uvcvideo 2-1:0.251: Found UVC 0.00 device syz (05e3:0505)
[  226.564192][ T6848] uvcvideo 2-1:0.251: No valid video chain found.
[  226.604424][T10081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  226.640876][T10698] hfs: can't find a HFS filesystem on dev nullb0
[  226.762937][ T5943] usb 2-1: USB disconnect, device number 20
[  226.898984][T10704] loop3: detected capacity change from 0 to 40427
[  226.904509][T10704] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12
[  226.907021][T10704] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock
[  226.912385][T10704] F2FS-fs (loop3): invalid crc value
[  226.962966][T10704] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  226.968160][T10704] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0
[  226.971557][T10704] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5
[  227.349566][T10717] loop1: detected capacity change from 0 to 4096
[  227.384842][T10717] ntfs3(loop1): ino=5, "/" mi_enum_attr
[  227.398680][T10717] ntfs3(loop1): ino=5, "/" mi_enum_attr
[  227.821973][T10755] netlink: 'syz.3.1977': attribute type 46 has an invalid length.
[  227.824573][T10755] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1977'.
[  228.548337][T10766] IPv6: Can't replace route, no match found
[  228.598821][T10768] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 2621
[  229.388109][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2006'.
[  229.401745][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2006'.
[  229.414061][T10818] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2006'.
[  229.855883][T10825] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2008'.
[  229.858776][T10825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2008'.
[  229.863651][T10825] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2008'.
[  229.867866][T10825] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2008'.
[  229.939941][T10831] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2011'.
[  231.318799][T10878] loop3: detected capacity change from 0 to 128
[  231.383233][ T5898] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  231.437794][T10878] syz.3.2029: attempt to access beyond end of device
[  231.437794][T10878] loop3: rw=1, sector=145, nr_sectors = 16 limit=128
[  231.443881][T10878] syz.3.2029: attempt to access beyond end of device
[  231.443881][T10878] loop3: rw=1, sector=169, nr_sectors = 8 limit=128
[  231.451324][T10878] syz.3.2029: attempt to access beyond end of device
[  231.451324][T10878] loop3: rw=1, sector=185, nr_sectors = 8 limit=128
[  231.462567][T10878] syz.3.2029: attempt to access beyond end of device
[  231.462567][T10878] loop3: rw=1, sector=201, nr_sectors = 8 limit=128
[  231.471908][T10878] syz.3.2029: attempt to access beyond end of device
[  231.471908][T10878] loop3: rw=1, sector=217, nr_sectors = 8 limit=128
[  231.478275][T10878] syz.3.2029: attempt to access beyond end of device
[  231.478275][T10878] loop3: rw=1, sector=233, nr_sectors = 8 limit=128
[  231.491604][T10878] syz.3.2029: attempt to access beyond end of device
[  231.491604][T10878] loop3: rw=1, sector=249, nr_sectors = 8 limit=128
[  231.499937][T10878] syz.3.2029: attempt to access beyond end of device
[  231.499937][T10878] loop3: rw=1, sector=265, nr_sectors = 8 limit=128
[  231.509905][T10878] syz.3.2029: attempt to access beyond end of device
[  231.509905][T10878] loop3: rw=1, sector=281, nr_sectors = 8 limit=128
[  231.515640][T10878] syz.3.2029: attempt to access beyond end of device
[  231.515640][T10878] loop3: rw=1, sector=297, nr_sectors = 8 limit=128
[  231.532803][ T5898] usb 2-1: Using ep0 maxpacket: 8
[  231.538061][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  231.550368][ T5898] usb 2-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  231.555108][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  231.559940][ T5898] usb 2-1: Product: syz
[  231.563057][ T5898] usb 2-1: Manufacturer: syz
[  231.564906][ T5898] usb 2-1: SerialNumber: syz
[  231.568863][ T5898] usb 2-1: config 0 descriptor??
[  231.857304][ T5898] radio-si470x 2-1:0.0: si470x_get_report: usb_control_msg returned -71
[  231.860275][ T5898] radio-si470x 2-1:0.0: probe with driver radio-si470x failed with error -5
[  231.865828][ T5898] usb 2-1: USB disconnect, device number 21
[  232.816823][T10928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2051'.
[  232.992270][T10937] loop3: detected capacity change from 0 to 512
[  233.013048][T10937] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  233.017832][T10937] ext4 filesystem being mounted at /90/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  233.045378][   T33] audit: type=1800 audit(1759224121.960:195): pid=10937 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2055" name="file1" dev="loop3" ino=15 res=0 errno=0
[  233.087543][T10081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  233.580506][T10972] loop3: detected capacity change from 0 to 32768
[  233.874177][T10986] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2077'.
[  234.702319][T11000] netlink: 'syz.3.2083': attribute type 4 has an invalid length.
[  234.705295][T11000] netlink: 'syz.3.2083': attribute type 3 has an invalid length.
[  234.708180][T11000] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2083'.
[  234.889874][T11008] Invalid ELF header magic: != ELF
[  235.543589][T11024] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2094'.
[  236.199314][T11029] loop1: detected capacity change from 0 to 2048
[  236.204971][T11029] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found!
[  236.212312][T11029] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  236.225867][T11029] UDF-fs: unknown compression code (0)
[  236.309874][T11037] loop3: detected capacity change from 0 to 1024
[  236.322340][T11037] EXT4-fs: Ignoring removed nomblk_io_submit option
[  236.338650][T11037] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  236.400725][T10081] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  236.486430][T11048] loop3: detected capacity change from 0 to 4096
[  236.497906][T11048] NILFS (loop3): mounting unchecked fs
[  236.504229][T11048] NILFS (loop3): invalid segment: Checksum error in segment payload
[  236.507270][T11048] NILFS (loop3): trying rollback from an earlier position
[  236.524534][T11048] NILFS (loop3): recovery cancelled because norecovery option was specified for a read/write mount
[  236.752870][T11068] loop3: detected capacity change from 0 to 2048
[  236.759591][T11068] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  236.775688][   T33] audit: type=1800 audit(1759224125.690:196): pid=11068 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2113" name="file1" dev="loop3" ino=1367 res=0 errno=0
[  236.823070][T11068] bio_check_eod: 55 callbacks suppressed
[  236.823102][T11068] syz.3.2113: attempt to access beyond end of device
[  236.823102][T11068] loop3: rw=34817, sector=1986, nr_sectors = 63 limit=2048
[  236.932286][T11076] sp0: Synchronizing with TNC
[  237.007276][   T33] audit: type=1804 audit(1759224125.920:197): pid=11079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2118" name="file0" dev="ramfs" ino=21213 res=1 errno=0
[  237.355813][T11083] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2120'.
[  237.359633][T11083] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2120'.
[  238.929140][T11105] loop1: detected capacity change from 0 to 32768
[  238.932445][T11105] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.2130 (11105)
[  238.938150][T11105] BTRFS info (device loop1): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  238.941403][T11105] BTRFS info (device loop1): using sha256 (sha256-lib) checksum algorithm
[  238.969779][T11105] BTRFS info (device loop1): enabling ssd optimizations
[  238.973305][T11105] BTRFS info (device loop1): enabling free space tree
[  239.004847][ T5849] BTRFS info (device loop1): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  239.068089][ T5898] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[  239.231378][ T5898] usb 4-1: Using ep0 maxpacket: 8
[  239.243159][ T5898] usb 4-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[  239.246608][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  239.249610][ T5898] usb 4-1: Product: syz
[  239.255667][ T5898] usb 4-1: Manufacturer: syz
[  239.258429][ T5898] usb 4-1: SerialNumber: syz
[  239.262310][ T5898] usb 4-1: config 0 descriptor??
[  239.268103][ T5898] gspca_main: se401-2.14.0 probing 047d:5003
[  239.670932][ T5898] gspca_se401: Frame size: 115x0 bayer
[  239.673212][ T5898] gspca_se401: Frame size: 0x0 1/16th janggu
[  239.675251][ T5898] gspca_se401: Frame size: 0x0 1/16th janggu
[  239.876549][ T5898] input: se401 as /devices/platform/dummy_hcd.3/usb4/4-1/input/input13
[  239.886417][ T5898] usb 4-1: USB disconnect, device number 2
[  240.440407][T11156] loop3: detected capacity change from 0 to 128
[  240.562343][T11162] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2151'.
[  240.754857][ T5709] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.883021][ T5709] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  240.966540][ T5709] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.072514][ T5709] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  241.217038][ T5709] bridge_slave_1: left allmulticast mode
[  241.219239][ T5709] bridge_slave_1: left promiscuous mode
[  241.226417][ T5709] bridge0: port 2(bridge_slave_1) entered disabled state
[  241.234634][ T5709] bridge_slave_0: left allmulticast mode
[  241.236816][ T5709] bridge_slave_0: left promiscuous mode
[  241.239295][ T5709] bridge0: port 1(bridge_slave_0) entered disabled state
[  241.290467][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  241.299302][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  241.310771][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  241.314338][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  241.317556][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  241.702975][ T5709] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  241.708401][ T5709] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  241.714908][ T5709] bond0 (unregistering): (slave batadv0): Releasing backup interface
[  241.720829][ T5709] bond0 (unregistering): Released all slaves
[  242.046081][T11189] netlink: 'syz.0.2164': attribute type 4 has an invalid length.
[  242.050092][ T5709] hsr_slave_0: left promiscuous mode
[  242.055945][ T5709] hsr_slave_1: left promiscuous mode
[  242.058633][ T5709] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  242.062313][ T5709] batman_adv: batadv0: Removing interface: batadv_slave_0
[  242.066018][ T5709] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  242.068995][ T5709] batman_adv: batadv0: Removing interface: batadv_slave_1
[  242.090345][ T5709] veth1_macvtap: left promiscuous mode
[  242.093272][ T5709] veth0_macvtap: left promiscuous mode
[  242.095686][ T5709] veth1_vlan: left promiscuous mode
[  242.099813][ T5709] veth0_vlan: left promiscuous mode
[  242.100052][T11190] netlink: 'syz.0.2164': attribute type 4 has an invalid length.
[  242.704814][ T5709] team0 (unregistering): Port device team_slave_1 removed
[  242.720070][T11198] loop1: detected capacity change from 0 to 32768
[  242.738236][T11198] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  242.759172][ T5709] team0 (unregistering): Port device team_slave_0 removed
[  242.800786][ T5849] ocfs2: Unmounting device (7,1) on (node local)
[  243.231390][ T3930] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  243.323797][T11174] chnl_net:caif_netlink_parms(): no params data found
[  243.394444][ T3930] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00
[  243.397689][ T3930] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  243.400886][ T3930] usb 2-1: Product: syz
[  243.402698][ T5855] Bluetooth: hci2: command tx timeout
[  243.405644][ T3930] usb 2-1: Manufacturer: syz
[  243.407298][ T3930] usb 2-1: SerialNumber: syz
[  243.448035][T11174] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.450913][T11174] bridge0: port 1(bridge_slave_0) entered disabled state
[  243.454900][T11174] bridge_slave_0: entered allmulticast mode
[  243.458819][T11174] bridge_slave_0: entered promiscuous mode
[  243.464787][T11174] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.467832][T11174] bridge0: port 2(bridge_slave_1) entered disabled state
[  243.470753][T11174] bridge_slave_1: entered allmulticast mode
[  243.475397][T11174] bridge_slave_1: entered promiscuous mode
[  243.509650][T11174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  243.518419][T11174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  243.550726][T11174] team0: Port device team_slave_0 added
[  243.556954][T11174] team0: Port device team_slave_1 added
[  243.576802][ T5709] IPVS: stop unused estimator thread 0...
[  243.589524][T11174] batman_adv: batadv0: Adding interface: batadv_slave_0
[  243.592770][T11174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  243.602972][T11174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  243.608833][T11174] batman_adv: batadv0: Adding interface: batadv_slave_1
[  243.611923][T11174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  243.622640][T11174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  243.675056][T11174] hsr_slave_0: entered promiscuous mode
[  243.678263][T11174] hsr_slave_1: entered promiscuous mode
[  243.681571][T11174] debugfs: 'hsr0' already exists in 'hsr'
[  243.683814][T11174] Cannot create hsr debugfs directory
[  243.861726][T11174] netdevsim netdevsim4 netdevsim0: renamed from eth0
[  243.871597][T11174] netdevsim netdevsim4 netdevsim1: renamed from eth1
[  243.883675][T11174] netdevsim netdevsim4 netdevsim2: renamed from eth2
[  243.890237][T11174] netdevsim netdevsim4 netdevsim3: renamed from eth3
[  243.925235][T11174] bridge0: port 2(bridge_slave_1) entered blocking state
[  243.928110][T11174] bridge0: port 2(bridge_slave_1) entered forwarding state
[  243.931201][T11174] bridge0: port 1(bridge_slave_0) entered blocking state
[  243.934041][T11174] bridge0: port 1(bridge_slave_0) entered forwarding state
[  243.997826][T11174] 8021q: adding VLAN 0 to HW filter on device bond0
[  244.013402][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state
[  244.017385][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state
[  244.033599][T11174] 8021q: adding VLAN 0 to HW filter on device team0
[  244.046081][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state
[  244.048900][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state
[  244.056203][ T3930] rtl8150 2-1:1.0: couldn't reset the device
[  244.058294][ T3930] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[  244.060611][ T1092] bridge0: port 2(bridge_slave_1) entered blocking state
[  244.063650][ T1092] bridge0: port 2(bridge_slave_1) entered forwarding state
[  244.063939][ T3930] usb 2-1: USB disconnect, device number 22
[  244.245705][T11174] 8021q: adding VLAN 0 to HW filter on device batadv0
[  244.423935][T11174] veth0_vlan: entered promiscuous mode
[  244.433052][T11174] veth1_vlan: entered promiscuous mode
[  244.460744][T11174] veth0_macvtap: entered promiscuous mode
[  244.467396][T11174] veth1_macvtap: entered promiscuous mode
[  244.484981][T11174] batman_adv: batadv0: Interface activated: batadv_slave_0
[  244.495521][T11174] batman_adv: batadv0: Interface activated: batadv_slave_1
[  244.506648][T10110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  244.510633][T10110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  244.515521][T10110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  244.519396][T10110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  244.604306][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.607486][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  244.635708][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  244.638779][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  245.471503][ T5855] Bluetooth: hci2: command tx timeout
[  245.877642][T11282] loop1: detected capacity change from 0 to 128
[  245.890722][T11282] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only
[  245.896748][T11282] hpfs: filesystem error: improperly stopped
[  245.899037][T11282] hpfs: filesystem error: warning: spare dnodes used, try chkdsk
[  245.902557][T11282] hpfs: You really don't want any checks? You are crazy...
[  245.905503][T11282] hpfs: hpfs_map_sector(): read error
[  245.907478][T11282] hpfs: code page support is disabled
[  245.911846][T11282] hpfs: hpfs_map_4sectors(): unaligned read
[  245.914357][T11282] hpfs: hpfs_map_4sectors(): unaligned read
[  245.916359][T11282] hpfs: filesystem error: unable to find root dir
[  246.009768][T11284] netlink: 'syz.1.2197': attribute type 10 has an invalid length.
[  246.113762][    T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  246.271557][    T9] usb 5-1: Using ep0 maxpacket: 32
[  246.275982][    T9] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  246.288198][    T9] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  246.296818][    T9] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  246.300814][    T9] usb 5-1: Product: syz
[  246.305219][    T9] usb 5-1: Manufacturer: syz
[  246.316086][    T9] hub 5-1:4.0: USB hub found
[  246.531095][    T9] hub 5-1:4.0: 2 ports detected
[  246.926091][    T9] hub 5-1:4.0: set hub depth failed
[  246.930220][    T9] usb 5-1: USB disconnect, device number 2
[  247.551341][ T5855] Bluetooth: hci2: command tx timeout
[  247.717429][T11321] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2212'.
[  247.893800][T11330] netlink: 'syz.0.2217': attribute type 11 has an invalid length.
[  248.256291][T11348] loop4: detected capacity change from 0 to 32768
[  248.266092][T11348] XFS (loop4): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  248.294181][T11348] XFS (loop4): Ending clean mount
[  248.303765][T11348] XFS (loop4): Quotacheck needed: Please wait.
[  248.330834][T11348] XFS (loop4): Quotacheck: Done.
[  248.346796][T11174] XFS (loop4): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  248.853421][T11383] loop4: detected capacity change from 0 to 32768
[  248.857908][T11383] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2239 (11383)
[  248.867967][T11383] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  248.872324][T11383] BTRFS info (device loop4): using sha256 (sha256-lib) checksum algorithm
[  249.249801][T11383] BTRFS info (device loop4): enabling ssd optimizations
[  249.254944][T11383] BTRFS info (device loop4): enabling free space tree
[  249.300067][T11174] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  249.631710][ T5855] Bluetooth: hci2: command tx timeout
[  250.086980][T11453] loop4: detected capacity change from 0 to 1024
[  250.090910][T11453] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  250.096998][T11453] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  250.107211][T11453] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  250.110601][T11453] EXT4-fs (loop4): orphan cleanup on readonly fs
[  250.115043][T11453] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.2263: Freeing blocks not in datazone - block = 0, count = 4096
[  250.120587][T11453] EXT4-fs (loop4): Remounting filesystem read-only
[  250.123640][T11453] EXT4-fs (loop4): 1 orphan inode deleted
[  250.128383][T11453] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  250.171932][T11174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  251.006103][T11468] loop1: detected capacity change from 0 to 32768
[  252.308297][T11496] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  252.311670][T11496] overlayfs: failed to set xattr on upper
[  252.314059][T11496] overlayfs: ...falling back to redirect_dir=nofollow.
[  252.316821][T11496] overlayfs: ...falling back to index=off.
[  252.319275][T11496] overlayfs: ...falling back to uuid=null.
[  252.328559][T11496] overlayfs: upper fs does not support RENAME_WHITEOUT.
[  252.334255][T11496] overlayfs: failed to set xattr on upper
[  252.336627][T11496] overlayfs: ...falling back to redirect_dir=nofollow.
[  252.339336][T11496] overlayfs: ...falling back to index=off.
[  252.342064][T11496] overlayfs: ...falling back to uuid=null.
[  252.345066][T11496] overlayfs: conflicting lowerdir path
[  252.646235][T11510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2289'.
[  253.054269][T11519] atomic_op ffff8881102d7998 conn xmit_atomic 0000000000000000
[  253.676279][T11527] vlan2: entered promiscuous mode
[  253.678306][T11527] bond0: entered promiscuous mode
[  253.680252][T11527] bond_slave_0: entered promiscuous mode
[  253.687332][T11527] bond_slave_1: entered promiscuous mode
[  253.689735][T11527] !: entered promiscuous mode
[  253.702987][T11529] loop1: detected capacity change from 0 to 128
[  253.706325][T11529] UDF-fs: error (device loop1): udf_read_tagged: read failed, block=256, location=256
[  254.039061][T11551] loop4: detected capacity change from 0 to 64
[  254.067945][T11549] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  254.073328][T11549] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.078268][T11549] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  254.083486][T11551] minix_free_block (loop4:1): bit already cleared
[  254.085714][T11551] minix_free_block (loop4:4): bit already cleared
[  254.088197][T11551] minix_free_block (loop4:3): bit already cleared
[  254.090244][T11551] minix_free_block (loop4:2): bit already cleared
[  254.092851][T11551] minix_free_block (loop4:1): bit already cleared
[  254.111687][ T5943] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  254.168427][T11549] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  254.174521][T11549] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.178637][T11549] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  254.259811][T11549] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  254.271099][T11549] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.274575][T11549] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  254.278859][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  254.285410][ T5943] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  254.289551][ T5943] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  254.295953][ T5943] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  254.299513][ T5943] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  254.307097][ T5943] usb 2-1: config 0 descriptor??
[  254.376560][T11549] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  254.380815][T11549] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  254.385221][T11549] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0
[  254.541663][   T12] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  254.545047][   T12] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 20004 - 0
[  254.548270][   T12] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 6081 - 0
[  254.584740][   T12] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  254.614821][   T12] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 20004 - 0
[  254.617743][   T12] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 6081 - 0
[  254.620782][   T12] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  254.624586][   T12] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 20004 - 0
[  254.627835][   T12] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 6081 - 0
[  254.633216][   T12] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  254.636359][   T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 20004 - 0
[  254.639505][   T12] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 6081 - 0
[  254.724626][ T5943] plantronics 0003:047F:FFFF.0008: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  254.984662][ T6848] usb 2-1: USB disconnect, device number 23
[  255.270029][T11574] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2318'.
[  255.313994][T11576] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2319'.
[  255.336241][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2319'.
[  255.557283][ T1363] ieee802154 phy0 wpan0: encryption failed: -22
[  255.559853][ T1363] ieee802154 phy1 wpan1: encryption failed: -22
[  256.092415][T11619] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2340'.
[  256.119204][T11622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2342'.
[  256.491581][ T5898] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  256.683448][ T5898] usb 2-1: Using ep0 maxpacket: 16
[  256.762394][ T5898] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  256.767023][ T5898] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0
[  256.773940][ T5898] usb 2-1: New USB device found, idVendor=0e20, idProduct=0101, bcdDevice=7a.5a
[  256.777193][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  256.780174][ T5898] usb 2-1: Product: syz
[  256.782667][ T5898] usb 2-1: Manufacturer: syz
[  256.784610][ T5898] usb 2-1: SerialNumber: syz
[  256.788136][ T5898] usb 2-1: config 0 descriptor??
[  256.996091][ T5898] pegasus_notetaker 2-1:0.0: probe with driver pegasus_notetaker failed with error -22
[  257.007639][ T5898] usb 2-1: USB disconnect, device number 24
[  258.903138][T11675] loop4: detected capacity change from 0 to 32768
[  258.913533][T11675] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  258.948399][T11675] XFS (loop4): Ending clean mount
[  259.036335][T11174] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  259.374282][T11701] netdevsim netdevsim4 netdevsim0: entered allmulticast mode
[  259.417712][T11701] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[  259.612781][   T33] audit: type=1326 audit(1759224148.520:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.4.2377" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef358ec29 code=0x7ffc0000
[  259.628355][   T33] audit: type=1326 audit(1759224148.530:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.4.2377" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef358ec29 code=0x7ffc0000
[  259.636070][   T33] audit: type=1326 audit(1759224148.540:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.4.2377" exe="/syz-executor" sig=0 arch=c000003e syscall=67 compat=0 ip=0x7fcef358ec29 code=0x7ffc0000
[  259.644934][   T33] audit: type=1326 audit(1759224148.540:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.4.2377" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef358ec29 code=0x7ffc0000
[  259.657997][   T33] audit: type=1326 audit(1759224148.540:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11714 comm="syz.4.2377" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fcef358ec29 code=0x7ffc0000
[  259.757224][T11727] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  259.765652][T11727] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off.
[  259.769997][T11727] overlayfs: "xino" feature enabled using 2 upper inode bits.
[  259.789074][T11727] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2)
[  259.797315][T11726] overlayfs: inode number too big (/cgroup.controllers, ino=4611686018427387908, xinobits=2)
[  259.938366][T11735] loop1: detected capacity change from 0 to 256
[  259.940940][T11735] exfat: Deprecated parameter 'namecase'
[  259.944540][T11735] exfat: Deprecated parameter 'namecase'
[  259.950114][T11735] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0x5430151d, utbl_chksum : 0xe619d30d)
[  260.609053][T11760] loop4: detected capacity change from 0 to 256
[  260.612411][T11760] exfat: Deprecated parameter 'utf8'
[  260.614551][T11760] exfat: Deprecated parameter 'utf8'
[  260.616565][T11760] exfat: Deprecated parameter 'namecase'
[  260.624296][T11760] exFAT-fs (loop4): error, The cluster chain has a loop
[  260.627051][T11760] exFAT-fs (loop4): failed to count the number of clusters in root
[  260.630068][T11760] exFAT-fs (loop4): failed to recognize exfat type
[  260.716199][T11764] raw_sendmsg: syz.4.2399 forgot to set AF_INET. Fix it!
[  261.044572][T11780] loop1: detected capacity change from 0 to 512
[  261.069897][T11780] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  261.099614][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  261.201314][    T9] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[  261.353493][    T9] usb 5-1: unable to get BOS descriptor or descriptor too short
[  261.362362][    T9] usb 5-1: not running at top speed; connect to a high speed hub
[  261.368256][    T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  261.373113][    T9] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 64
[  261.379787][    T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  261.383358][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  261.386421][    T9] usb 5-1: Product: syz
[  261.388110][    T9] usb 5-1: Manufacturer: syz
[  261.389905][    T9] usb 5-1: SerialNumber: syz
[  261.395631][T11776] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  261.605221][    T9] cdc_ncm 5-1:1.0: bind() failure
[  261.611838][    T9] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  261.615091][    T9] cdc_ncm 5-1:1.1: bind() failure
[  261.620847][    T9] usb 5-1: USB disconnect, device number 3
[  262.268093][T11803] loop4: detected capacity change from 0 to 1024
[  262.274527][T11803] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled
[  262.307421][T11803] EXT4-fs error (device loop4): ext4_map_blocks:814: inode #3: block 1: comm syz.4.2415: lblock 1 mapped to illegal pblock 1 (length 1)
[  262.316118][T11803] Quota error (device loop4): write_blk: dquota write failed
[  262.319729][T11803] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota
[  262.328858][T11803] EXT4-fs error (device loop4): ext4_acquire_dquot:6945: comm syz.4.2415: Failed to acquire dquot type 0
[  262.336695][T11803] EXT4-fs error (device loop4): ext4_free_blocks:6706: comm syz.4.2415: Freeing blocks not in datazone - block = 0, count = 4096
[  262.345742][T11803] EXT4-fs error (device loop4): ext4_read_inode_bitmap:139: comm syz.4.2415: Invalid inode bitmap blk 0 in block_group 0
[  262.355028][ T1093] EXT4-fs error (device loop4): ext4_map_blocks:778: inode #3: block 1: comm kworker/u10:6: lblock 1 mapped to illegal pblock 1 (length 1)
[  262.368270][T11803] EXT4-fs error (device loop4) in ext4_free_inode:361: Corrupt filesystem
[  262.379520][T11803] EXT4-fs (loop4): 1 orphan inode deleted
[  262.383073][ T1093] Quota error (device loop4): remove_tree: Can't read quota data block 1
[  262.388154][T11803] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  262.394432][ T1093] EXT4-fs error (device loop4): ext4_release_dquot:6981: comm kworker/u10:6: Failed to release dquot type 0
[  262.421765][T11803] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000.
[  262.460244][T11174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  263.025381][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2430'.
[  263.127200][T11843] team0: Device gtp0 is of different type
[  263.532408][T11845] loop1: detected capacity change from 0 to 32768
[  263.543146][T11845] ocfs2: Slot 0 on device (7,1) was already allocated to this node!
[  263.551818][T11845] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode.
[  263.565762][T11845] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2434'.
[  263.593986][ T5849] ocfs2: Unmounting device (7,1) on (node local)
[  264.268896][T11893] loop1: detected capacity change from 0 to 512
[  264.272883][T11893] EXT4-fs (loop1): Test dummy encryption mode enabled
[  264.276768][T11893] EXT4-fs (loop1): warning: mounting unchecked fs, running e2fsck is recommended
[  264.280678][T11893] EXT4-fs (loop1): Errors on filesystem, clearing orphan list.
[  264.281896][    T9] usb 5-1: new high-speed USB device number 4 using dummy_hcd
[  264.286137][T11893] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  264.309967][ T5849] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  264.452335][    T9] usb 5-1: Using ep0 maxpacket: 32
[  264.457477][    T9] usb 5-1: config 0 has an invalid interface number: 85 but max is 0
[  264.460757][    T9] usb 5-1: config 0 has no interface number 0
[  264.464912][    T9] usb 5-1: config 0 interface 85 has no altsetting 0
[  264.469959][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  264.473803][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  264.476763][    T9] usb 5-1: Product: syz
[  264.478152][    T9] usb 5-1: Manufacturer: syz
[  264.479621][    T9] usb 5-1: SerialNumber: syz
[  264.482936][    T9] usb 5-1: config 0 descriptor??
[  264.486555][    T9] appletouch 5-1:0.85: Could not find int-in endpoint
[  264.488920][    T9] appletouch 5-1:0.85: probe with driver appletouch failed with error -5
[  264.492357][    T9] usbhid 5-1:0.85: couldn't find an input interrupt endpoint
[  264.854286][T11904] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2458'.
[  265.018476][ T3930] usb 5-1: USB disconnect, device number 4
[  265.520217][T11925] loop1: detected capacity change from 0 to 8192
[  265.581989][T11925]  loop1: p1 p2 p3 p4[EZD]
[  265.584047][T11925] loop1: p1 start 171116544 is beyond EOD, truncated
[  265.592900][T11925] loop1: p3 start 360447 is beyond EOD, truncated
[  265.595014][T11925] loop1: p4 size 262912 extends beyond EOD, truncated
[  265.916355][T11949] loop4: detected capacity change from 0 to 256
[  266.014188][T11954] Bluetooth: MGMT ver 1.23
[  266.020355][T11954] loop1: detected capacity change from 0 to 256
[  266.032382][T11954] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x76936814, utbl_chksum : 0xe619d30d)
[  266.101909][T11954] exFAT-fs (loop1): start_clu is invalid cluster(0xffffffff)
[  266.154572][T11957] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.365151][T11957] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.443218][T11957] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.495121][T11957] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  266.537583][T11968] loop1: detected capacity change from 0 to 128
[  266.678582][T10110] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  266.693013][   T12] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  266.853789][   T12] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  266.866137][T10110] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  267.511143][    T9] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[  267.621481][ T5898] usb 5-1: new full-speed USB device number 5 using dummy_hcd
[  267.773115][    T9] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  267.774697][ T5898] usb 5-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[  267.777447][    T9] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  267.784457][ T5898] usb 5-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b
[  267.785103][    T9] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  267.788599][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.792275][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  267.799166][ T5898] usb 5-1: Product: syz
[  267.801433][T11985] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  267.804483][ T5898] usb 5-1: Manufacturer: syz
[  267.806427][ T5898] usb 5-1: SerialNumber: syz
[  267.909161][ T5898] usb 5-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state
[  268.103062][    T9] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  268.113819][   T33] audit: type=1326 audit(1759224157.030:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.1.2491" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cad8ec29 code=0x7ffc0000
[  268.124075][T11985] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  268.126847][   T33] audit: type=1326 audit(1759224157.040:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.1.2491" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ff6cad8d590 code=0x7ffc0000
[  268.136059][T11985] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  268.136700][   T33] audit: type=1326 audit(1759224157.040:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.1.2491" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff6cad8e82b code=0x7ffc0000
[  268.147323][   T33] audit: type=1326 audit(1759224157.040:206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.1.2491" exe="/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff6cad8e82b code=0x7ffc0000
[  268.156301][   T33] audit: type=1326 audit(1759224157.060:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.1.2491" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cad8ec29 code=0x7ffc0000
[  268.165152][   T33] audit: type=1326 audit(1759224157.060:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.1.2491" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cad8ec29 code=0x7ffc0000
[  268.183845][   T33] audit: type=1326 audit(1759224157.100:209): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.1.2491" exe="/syz-executor" sig=0 arch=c000003e syscall=289 compat=0 ip=0x7ff6cad8ec29 code=0x7ffc0000
[  268.188719][   T24] usb 2-1: USB disconnect, device number 25
[  268.199499][   T33] audit: type=1326 audit(1759224157.100:210): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.1.2491" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cad8ec29 code=0x7ffc0000
[  268.210707][   T33] audit: type=1326 audit(1759224157.100:211): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.1.2491" exe="/syz-executor" sig=0 arch=c000003e syscall=19 compat=0 ip=0x7ff6cad8ec29 code=0x7ffc0000
[  268.221259][   T33] audit: type=1326 audit(1759224157.100:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11978 comm="syz.1.2491" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff6cad8ec29 code=0x7ffc0000
[  268.418222][ T5898] usb 5-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter)
[  268.497836][ T5898] usb 5-1: USB disconnect, device number 5
[  269.153376][T12017] loop4: detected capacity change from 0 to 32768
[  269.160220][T12017] BTRFS: device fsid c6b85f58-0c7e-41ca-a553-c8d9f94f6663 devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.2510 (12017)
[  269.167980][T12017] BTRFS info (device loop4): first mount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  269.172226][T12017] BTRFS info (device loop4): using blake2b (blake2b-256-generic) checksum algorithm
[  269.200374][T12017] BTRFS info (device loop4): enabling ssd optimizations
[  269.203396][T12017] BTRFS info (device loop4): enabling free space tree
[  269.205984][T12017] BTRFS info (device loop4): use lzo compression, level 1
[  269.343360][T11174] BTRFS info (device loop4): last unmount of filesystem c6b85f58-0c7e-41ca-a553-c8d9f94f6663
[  269.577477][T12038] loop4: detected capacity change from 0 to 512
[  269.583523][T12038] EXT4-fs: Ignoring removed nomblk_io_submit option
[  269.589180][T12038] EXT4-fs (loop4): revision level too high, forcing read-only mode
[  269.592780][T12038] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002]
[  269.596348][T12038] System zones: 0-1, 15-15, 18-18, 34-34
[  269.599019][T12038] EXT4-fs (loop4): orphan cleanup on readonly fs
[  269.602823][T12038] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #16: comm syz.4.2511: casefold flag without casefold feature
[  269.608167][T12038] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2511: couldn't read orphan inode 16 (err -117)
[  269.615589][T12038] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  269.648832][T11174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  270.296131][T12093] loop4: detected capacity change from 0 to 2048
[  270.327766][T12093] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  270.364498][  T182] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm kworker/u9:2: bg 0: block 234: padding at end of block bitmap is not set
[  270.372771][  T182] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117
[  270.377870][  T182] EXT4-fs (loop4): This should not happen!! Data will be lost
[  270.377870][  T182] 
[  270.384381][  T182] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 159 with max blocks 1 with error 28
[  270.389352][  T182] EXT4-fs (loop4): This should not happen!! Data will be lost
[  270.389352][  T182] 
[  270.396667][  T182] EXT4-fs (loop4): Total free blocks count 0
[  270.399587][  T182] EXT4-fs (loop4): Free/Dirty block details
[  270.403049][  T182] EXT4-fs (loop4): free_blocks=0
[  270.405179][  T182] EXT4-fs (loop4): dirty_blocks=16
[  270.407220][  T182] EXT4-fs (loop4): Block reservation details
[  270.762662][T12110] loop4: detected capacity change from 0 to 4096
[  270.781084][T12110] ntfs3(loop4): Different NTFS sector size (1024) and media sector size (512).
[  270.981218][T12110] ntfs3(loop4): Mark volume as dirty due to NTFS errors
[  270.984201][T12110] ntfs3(loop4): Failed to load root (-22).
[  271.356434][T12139] loop4: detected capacity change from 0 to 128
[  271.360093][T12139] hpfs: hpfs_map_sector(): read error
[  271.363273][T12139] hpfs: filesystem error: can't load hotfix map; already mounted read-only
[  271.368524][T12139] hpfs: hpfs_map_sector(): read error
[  271.437351][T12147] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2559'.
[  271.525368][T12153] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2563'.
[  271.529031][T12153] netlink: 'syz.4.2563': attribute type 6 has an invalid length.
[  271.849096][T12181] loop4: detected capacity change from 0 to 512
[  271.895014][T12181] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  271.902030][T12181] ext4 filesystem being mounted at /125/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  272.681324][ T5855] Bluetooth: hci2: command tx timeout
[  273.387273][T11174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  273.396905][T12192] loop1: detected capacity change from 0 to 1024
[  273.438743][ T3574] hfsplus: b-tree write err: -5, ino 4
[  273.488612][T12194] loop4: detected capacity change from 0 to 1764
[  273.829481][T12224] loop4: detected capacity change from 0 to 512
[  273.838898][T12224] [EXT4 FS bs=2048, gc=1, bpg=16384, ipg=32, mo=a842c01c, mo2=0002]
[  273.842903][T12224] System zones: 0-7
[  273.864794][T12224] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  273.906285][T12212] loop1: detected capacity change from 0 to 32768
[  274.099733][T12240] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2601'.
[  274.239590][T12252] tipc: Started in network mode
[  274.242102][T12252] tipc: Node identity ac1414aa, cluster identity 4711
[  274.245748][T12252] tipc: Enabled bearer <udp:s>, priority 10
[  274.280417][T12256] loop1: detected capacity change from 0 to 65
[  274.283987][T12256] BFS-fs: bfs_fill_super(): loop1 is unclean, continuing
[  274.286226][T12256] BFS-fs: bfs_fill_super(): NOTE: filesystem loop1 was created with 512 inodes, the real maximum is 511, mounting anyway
[  275.253983][T11174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  275.361314][   T24] tipc: Node number set to 2886997162
[  275.474042][T12279] tmpfs: Cannot enable quota on remount
[  276.734889][T12323] loop4: detected capacity change from 0 to 1024
[  276.760936][T12323] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  276.796917][T12323] EXT4-fs warning (device loop4): ext4_empty_dir:3099: inode #11: comm syz.4.2636: directory missing '..'
[  276.822627][T11174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  276.948793][   T33] kauditd_printk_skb: 10 callbacks suppressed
[  276.948803][   T33] audit: type=1400 audit(1759224421.852:223): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3A273A02 pid=12334 comm="syz.4.2644"
[  277.383510][T12344] loop4: detected capacity change from 0 to 8
[  277.405392][T12344] SQUASHFS error: Unable to read directory block [2c0:35]
[  277.637524][T12341] loop1: detected capacity change from 0 to 32768
[  277.673182][T12341] (syz.1.2646,12341,0):ocfs2_check_set_options:1252 ERROR: User quotas were requested, but this filesystem does not have the feature enabled.
[  277.701222][T12341] (syz.1.2646,12341,0):ocfs2_fill_super:1177 ERROR: status = -22
[  277.999215][T12350] loop4: detected capacity change from 0 to 32768
[  278.044923][T12355] loop1: detected capacity change from 0 to 512
[  278.047718][T12355] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  278.055937][   T36] read_mapping_page failed!
[  278.057674][   T36] ERROR: (device loop4): txCommit: 
[  278.057674][   T36] 
[  278.064328][   T36] jfs_write_inode: jfs_commit_inode failed!
[  278.171773][T12359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2655'.
[  278.702638][T12366] loop4: detected capacity change from 0 to 32768
[  278.711108][T12366] XFS (loop4): Mounting V5 Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  278.727665][T12366] XFS (loop4): Ending clean mount
[  278.778633][T11174] XFS (loop4): Unmounting Filesystem ed37bf6e-74ea-4e01-afba-5fee274b0f3a
[  279.379169][T12405] loop4: detected capacity change from 0 to 32768
[  279.392076][   T33] audit: type=1800 audit(1759224424.292:224): pid=12405 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2671" name="file1" dev="loop4" ino=4 res=0 errno=0
[  279.502363][T12405] ERROR: (device loop4): dbAdjCtl: the maximum free buddy is not the old root
[  279.502363][T12405] 
[  279.506345][T12405] ERROR: (device loop4): remounting filesystem as read-only
[  279.985778][T12425] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2678'.
[  279.989322][T12425] bridge_slave_1: left allmulticast mode
[  279.992183][T12425] bridge_slave_1: left promiscuous mode
[  279.994809][T12425] bridge0: port 2(bridge_slave_1) entered disabled state
[  280.000797][T12425] bridge_slave_0: left allmulticast mode
[  280.003529][T12425] bridge_slave_0: left promiscuous mode
[  280.006124][T12425] bridge0: port 1(bridge_slave_0) entered disabled state
[  280.253121][T12431] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2683'.
[  280.453791][T12438] input: syz1 as /devices/virtual/input/input15
[  280.520358][T12442] loop4: detected capacity change from 0 to 512
[  280.530843][T12442] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.2688: iget: bad i_size value: 38620345925642
[  280.538370][T12442] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.2688: couldn't read orphan inode 15 (err -117)
[  280.544356][T12442] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  280.698381][T11174] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  280.784773][T12449] tipc: MTU too low for tipc bearer
[  281.131474][T12471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2701'.
[  281.799595][ T5855] Bluetooth: hci0: unexpected event for opcode 0x0c26
[  281.957322][T12490] cgroup: Invalid name
[  282.146698][T12495] loop4: detected capacity change from 0 to 32768
[  282.153355][T12495] XFS (loop4): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  282.165818][T12495] XFS (loop4): Ending clean mount
[  282.177772][   T33] audit: type=1804 audit(1759224427.082:225): pid=12495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.2711" name="/newroot/178/file1/file1" dev="loop4" ino=4422 res=1 errno=0
[  282.201967][T11174] XFS (loop4): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  284.611607][T12561] Invalid ELF header magic: != ELF
[  285.511304][T12587] loop4: detected capacity change from 0 to 256
[  285.526362][T12587] FAT-fs (loop4): Directory bread(block 64) failed
[  285.528449][T12587] FAT-fs (loop4): Directory bread(block 65) failed
[  285.531070][T12587] FAT-fs (loop4): Directory bread(block 66) failed
[  285.533556][T12587] FAT-fs (loop4): Directory bread(block 67) failed
[  285.536212][T12587] FAT-fs (loop4): Directory bread(block 68) failed
[  285.538225][T12587] FAT-fs (loop4): Directory bread(block 69) failed
[  285.540285][T12587] FAT-fs (loop4): Directory bread(block 70) failed
[  285.543859][T12587] FAT-fs (loop4): Directory bread(block 71) failed
[  285.546751][T12587] FAT-fs (loop4): Directory bread(block 72) failed
[  285.556880][T12587] FAT-fs (loop4): Directory bread(block 73) failed
[  285.911124][   T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  286.071117][   T10] usb 5-1: Using ep0 maxpacket: 8
[  286.075486][   T10] usb 5-1: config index 0 descriptor too short (expected 301, got 45)
[  286.078699][   T10] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  286.082956][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  286.086856][   T10] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32
[  286.090637][   T10] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  286.095776][   T10] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  286.099415][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  288.687553][   T10] usb 5-1: USB disconnect, device number 6
[  290.737298][T12670] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2773'.
[  291.391486][    C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[  292.836305][T12696] trusted_key: encrypted_key: keylen parameter is missing
[  293.286837][T12709] loop4: detected capacity change from 0 to 1024
[  293.295417][T12709] hfsplus: failed to load extents file
[  293.694714][T12732] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2802'.
[  294.001116][ T3930] usb 5-1: new high-speed USB device number 7 using dummy_hcd
[  294.181140][ T3930] usb 5-1: Using ep0 maxpacket: 32
[  294.186047][ T3930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  294.190428][ T3930] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  294.201062][ T3930] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  294.204600][ T3930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.209917][ T3930] usb 5-1: config 0 descriptor??
[  294.217139][ T3930] hub 5-1:0.0: USB hub found
[  294.501083][ T3930] hub 5-1:0.0: 1 port detected
[  294.773520][ T5852] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[  294.786832][ T5852] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[  294.802028][ T5852] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[  294.806135][ T5852] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[  294.810186][ T5852] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[  295.053711][T12746] chnl_net:caif_netlink_parms(): no params data found
[  295.084346][ T3930] hub 5-1:0.0: activate --> -90
[  295.183029][ T5709] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.305793][T12746] bridge0: port 1(bridge_slave_0) entered blocking state
[  295.308643][T12746] bridge0: port 1(bridge_slave_0) entered disabled state
[  295.314642][T12746] bridge_slave_0: entered allmulticast mode
[  295.317619][T12746] bridge_slave_0: entered promiscuous mode
[  295.348237][ T5709] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.357294][T12746] bridge0: port 2(bridge_slave_1) entered blocking state
[  295.359788][T12746] bridge0: port 2(bridge_slave_1) entered disabled state
[  295.363391][T12746] bridge_slave_1: entered allmulticast mode
[  295.366641][T12746] bridge_slave_1: entered promiscuous mode
[  295.390619][T12746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  295.419886][T12746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  295.443227][ T5709] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.683754][   T10] usb 5-1: USB disconnect, device number 7
[  295.694741][T12746] team0: Port device team_slave_0 added
[  295.698435][T12746] team0: Port device team_slave_1 added
[  295.765419][ T5709] netdevsim netdevsim1  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  295.774820][T12746] batman_adv: batadv0: Adding interface: batadv_slave_0
[  295.777576][T12746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  295.788908][T12746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  295.799776][T12746] batman_adv: batadv0: Adding interface: batadv_slave_1
[  295.803670][T12746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  295.813497][T12746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  295.865661][T12746] hsr_slave_0: entered promiscuous mode
[  295.868426][T12746] hsr_slave_1: entered promiscuous mode
[  295.871751][T12746] debugfs: 'hsr0' already exists in 'hsr'
[  295.873931][T12746] Cannot create hsr debugfs directory
[  296.504432][ T5709] team0: Port device bond0 removed
[  296.508289][ T5709] bond0 (unregistering): Released all slaves
[  296.525556][ T5709] bond1 (unregistering): Released all slaves
[  296.694949][ T5709] tipc: Disabling bearer <udp:s>
[  296.701274][ T5709] tipc: Left network mode
[  296.726738][T12794] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2826'.
[  296.832804][ T5852] Bluetooth: hci3: command tx timeout
[  297.070307][ T5709] hsr_slave_0: left promiscuous mode
[  297.082977][ T5709] hsr_slave_1: left promiscuous mode
[  297.125653][ T5709] veth1_macvtap: left promiscuous mode
[  297.128021][ T5709] veth0_macvtap: left promiscuous mode
[  297.130669][ T5709] veth1_vlan: left promiscuous mode
[  298.660521][T12746] netdevsim netdevsim5 netdevsim0: renamed from eth0
[  298.671721][T12746] netdevsim netdevsim5 netdevsim1: renamed from eth1
[  298.682149][T12746] netdevsim netdevsim5 netdevsim2: renamed from eth2
[  298.724920][T12746] netdevsim netdevsim5 netdevsim3: renamed from eth3
[  298.911944][ T5852] Bluetooth: hci3: command tx timeout
[  298.950356][ T5709] ------------[ cut here ]------------
[  298.952715][ T5709] WARNING: net/ipv6/xfrm6_tunnel.c:341 at xfrm6_tunnel_net_exit+0x7e/0x100, CPU#0: kworker/u8:2/5709
[  298.956922][ T5709] Modules linked in:
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  298.959006][ T5709] CPU: 0 UID: 0 PID: 5709 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  298.963711][ T5709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  298.967658][ T5709] Workqueue: netns cleanup_net
[  298.969551][ T5709] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  298.972110][ T5709] Code: f8 be d4 f7 4b 83 3c 2c 00 75 19 e8 4c 1d 6f f7 49 81 fd f8 07 00 00 74 1d e8 3e 1d 6f f7 49 83 c5 08 eb c9 e8 33 1d 6f f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  298.972158][T12746] 8021q: adding VLAN 0 to HW filter on device bond0
[  298.979570][ T5709] RSP: 0018:ffffc90002d47890 EFLAGS: 00010293
[  298.984643][ T5709] RAX: ffffffff8a513ded RBX: ffff88810a4ec000 RCX: ffff88810db00000
[  298.987666][ T5709] RDX: 0000000000000000 RSI: ffffffff8db9fb03 RDI: ffff88810a4ec000
[  298.990802][ T5709] RBP: ffffc90002d47990 R08: ffffffff8fc35777 R09: 1ffffffff1f86aee
[  298.994541][ T5709] R10: dffffc0000000000 R11: fffffbfff1f86aef R12: ffff88810a4ec000
[  298.997668][ T5709] R13: 0000000000000000 R14: ffff888108aaa3c0 R15: dffffc0000000000
[  299.000795][ T5709] FS:  0000000000000000(0000) GS:ffff8880b83fc000(0000) knlGS:0000000000000000
[  299.004786][ T5709] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  299.007374][ T5709] CR2: 000000110c44a891 CR3: 000000012ef56000 CR4: 00000000000006f0
[  299.010474][ T5709] Call Trace:
[  299.012080][ T5709]  <TASK>
[  299.013312][ T5709]  ops_undo_list+0x49a/0x990
[  299.015145][ T5709]  ? __pfx_ops_undo_list+0x10/0x10
[  299.017220][ T5709]  ? do_raw_spin_unlock+0x4d/0x240
[  299.019260][ T5709]  cleanup_net+0x4d8/0x820
[  299.021360][ T5709]  ? __pfx_cleanup_net+0x10/0x10
[  299.023367][ T5709]  ? _raw_spin_unlock_irq+0x23/0x50
[  299.025431][ T5709]  ? process_scheduled_works+0x9ef/0x17b0
[  299.027670][ T5709]  ? process_scheduled_works+0x9ef/0x17b0
[  299.029929][ T5709]  process_scheduled_works+0xae1/0x17b0
[  299.032375][ T5709]  ? __pfx_process_scheduled_works+0x10/0x10
[  299.034788][ T5709]  worker_thread+0x8a0/0xda0
[  299.036631][ T5709]  kthread+0x711/0x8a0
[  299.038152][ T5709]  ? __pfx_worker_thread+0x10/0x10
[  299.040221][ T5709]  ? __pfx_kthread+0x10/0x10
[  299.042129][ T5709]  ? _raw_spin_unlock_irq+0x23/0x50
[  299.044218][ T5709]  ? lockdep_hardirqs_on+0x9c/0x150
[  299.046270][ T5709]  ? __pfx_kthread+0x10/0x10
[  299.048085][ T5709]  ret_from_fork+0x4bc/0x870
[  299.049931][ T5709]  ? __pfx_ret_from_fork+0x10/0x10
[  299.052090][ T5709]  ? __switch_to_asm+0x39/0x70
[  299.054006][ T5709]  ? __switch_to_asm+0x33/0x70
[  299.055933][ T5709]  ? __pfx_kthread+0x10/0x10
[  299.057771][ T5709]  ret_from_fork_asm+0x1a/0x30
[  299.059711][ T5709]  </TASK>
[  299.061013][ T5709] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  299.063872][ T5709] CPU: 0 UID: 0 PID: 5709 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT(full) 
[  299.067558][ T5709] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  299.071495][ T5709] Workqueue: netns cleanup_net
[  299.073427][ T5709] Call Trace:
[  299.074755][ T5709]  <TASK>
[  299.075936][ T5709]  dump_stack_lvl+0x99/0x250
[  299.077799][ T5709]  ? __asan_memcpy+0x40/0x70
[  299.079651][ T5709]  ? __pfx_dump_stack_lvl+0x10/0x10
[  299.081714][ T5709]  ? __pfx__printk+0x10/0x10
[  299.083570][ T5709]  vpanic+0x237/0x6d0
[  299.085182][ T5709]  ? __pfx_vpanic+0x10/0x10
[  299.086991][ T5709]  ? is_bpf_text_address+0x26/0x2b0
[  299.089094][ T5709]  panic+0xb9/0xc0
[  299.090623][ T5709]  ? __pfx_panic+0x10/0x10
[  299.092417][ T5709]  __warn+0x334/0x4c0
[  299.094007][ T5709]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  299.096184][ T5709]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  299.098323][ T5709]  report_bug+0x2be/0x4f0
[  299.100000][ T5709]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  299.102110][ T5709]  ? xfrm6_tunnel_net_exit+0x7e/0x100
[  299.104262][ T5709]  ? xfrm6_tunnel_net_exit+0x80/0x100
[  299.106384][ T5709]  handle_bug+0x84/0x160
[  299.108077][ T5709]  exc_invalid_op+0x1a/0x50
[  299.109917][ T5709]  asm_exc_invalid_op+0x1a/0x20
[  299.111859][ T5709] RIP: 0010:xfrm6_tunnel_net_exit+0x7e/0x100
[  299.114280][ T5709] Code: f8 be d4 f7 4b 83 3c 2c 00 75 19 e8 4c 1d 6f f7 49 81 fd f8 07 00 00 74 1d e8 3e 1d 6f f7 49 83 c5 08 eb c9 e8 33 1d 6f f7 90 <0f> 0b 90 49 81 fd f8 07 00 00 75 e3 48 81 c3 00 08 00 00 45 31 f6
[  299.121655][ T5709] RSP: 0018:ffffc90002d47890 EFLAGS: 00010293
[  299.123943][ T5709] RAX: ffffffff8a513ded RBX: ffff88810a4ec000 RCX: ffff88810db00000
[  299.127068][ T5709] RDX: 0000000000000000 RSI: ffffffff8db9fb03 RDI: ffff88810a4ec000
[  299.130186][ T5709] RBP: ffffc90002d47990 R08: ffffffff8fc35777 R09: 1ffffffff1f86aee
[  299.133323][ T5709] R10: dffffc0000000000 R11: fffffbfff1f86aef R12: ffff88810a4ec000
[  299.136449][ T5709] R13: 0000000000000000 R14: ffff888108aaa3c0 R15: dffffc0000000000
[  299.139542][ T5709]  ? xfrm6_tunnel_net_exit+0x7d/0x100
[  299.141676][ T5709]  ops_undo_list+0x49a/0x990
[  299.143469][ T5709]  ? __pfx_ops_undo_list+0x10/0x10
[  299.145436][ T5709]  ? do_raw_spin_unlock+0x4d/0x240
[  299.147314][ T5709]  cleanup_net+0x4d8/0x820
[  299.149028][ T5709]  ? __pfx_cleanup_net+0x10/0x10
[  299.150909][ T5709]  ? _raw_spin_unlock_irq+0x23/0x50
[  299.152887][ T5709]  ? process_scheduled_works+0x9ef/0x17b0
[  299.155087][ T5709]  ? process_scheduled_works+0x9ef/0x17b0
[  299.157308][ T5709]  process_scheduled_works+0xae1/0x17b0
[  299.159441][ T5709]  ? __pfx_process_scheduled_works+0x10/0x10
[  299.161683][ T5709]  worker_thread+0x8a0/0xda0
[  299.163405][ T5709]  kthread+0x711/0x8a0
[  299.164916][ T5709]  ? __pfx_worker_thread+0x10/0x10
[  299.166802][ T5709]  ? __pfx_kthread+0x10/0x10
[  299.168543][ T5709]  ? _raw_spin_unlock_irq+0x23/0x50
[  299.170580][ T5709]  ? lockdep_hardirqs_on+0x9c/0x150
[  299.172638][ T5709]  ? __pfx_kthread+0x10/0x10
[  299.174514][ T5709]  ret_from_fork+0x4bc/0x870
[  299.176360][ T5709]  ? __pfx_ret_from_fork+0x10/0x10
[  299.178286][ T5709]  ? __switch_to_asm+0x39/0x70
[  299.180022][ T5709]  ? __switch_to_asm+0x33/0x70
[  299.181819][ T5709]  ? __pfx_kthread+0x10/0x10
[  299.183568][ T5709]  ret_from_fork_asm+0x1a/0x30
[  299.185493][ T5709]  </TASK>
[  299.187484][ T5709] Kernel Offset: disabled
[  299.189224][ T5709] Rebooting in 86400 seconds..

VM DIAGNOSIS:
09:23:08  Registers:
info registers vcpu 0

CPU#0
RAX=000000000000003a RBX=000000000000003a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002d47030
R8 =ffff888107388237 R9 =1ffff11020e71046 R10=dffffc0000000000 R11=ffffffff8556cf10
R12=dffffc0000000000 R13=ffffffff99d19920 R14=ffffffff9a00f5a0 R15=0000000000000000
RIP=ffffffff8556cf8c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b83fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=000000110c44a891 CR3=000000012ef56000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff8168cabf ffffffff8168cabf
XMM02=00007f0c0e9a7498 ffffffff8176012b XMM03=00007f0c0e9a74a8 00007f0c0e9a74a0
XMM04=00007f0c0f50d100 00007f0c0e9a7460 XMM05=00007f0c0e9a7478 00007f0c0e9a74c0
XMM06=00007f0c0e9a74b8 00007f0c0e9a74b0 XMM07=00007f0c0e9a74a8 00007f0c0e9a74a0
XMM08=6161616161616161 6161616161616161 XMM09=0000000000000000 00007f0c0e812fed
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000001 RBX=ffffffff90537f01 RCX=ffff888108833a00 RDX=ffffc90003196e01
RSI=dffffc0000000000 RDI=ffffc90003196e70 RBP=dffffc0000000000 RSP=ffffc90003196d30
R8 =ffffc90003196e58 R9 =0000000000000000 R10=ffffc90003196eb8 R11=fffff52000632dd9
R12=ffffc90003196e68 R13=ffffc90003190000 R14=ffffc90003196e68 R15=ffffffff81742d25
RIP=ffffffff8b7fa8fd RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000555583dc2500 ffffffff 00c00000
GS =0000 ffff8881a39fc000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffcfc34dcec CR3=000000010f2da000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000600
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
