last executing test programs:

7m40.937999911s ago: executing program 1 (id=69):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x80000000, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_PRIMARY_RESELECT={0x5}, @IFLA_BOND_PRIMARY={0x8}, @IFLA_BOND_MODE={0x5, 0x1, 0x1}]}}}]}, 0x4c}}, 0x0)

7m40.86878726s ago: executing program 1 (id=70):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/rt_cache\x00')
pread64(r0, &(0x7f0000000200)=""/158, 0xc4, 0x80)

7m40.868388473s ago: executing program 1 (id=71):
r0 = socket(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', <r1=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x2, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x5}, @TCA_HHF_EVICT_TIMEOUT={0x8, 0x6, 0xfffffff7}]}}]}, 0x40}}, 0x0)

7m40.809585614s ago: executing program 1 (id=72):
syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000200)='./bus\x00', 0x1400c, &(0x7f0000000680), 0x3, 0x470, &(0x7f0000000dc0)="$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")
syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c})

7m40.750664392s ago: executing program 1 (id=73):
r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000001680)=ANY=[@ANYBLOB="1800000000030000000000000000000095"], &(0x7f0000001700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='kfree\x00', r0}, 0x18)
syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x3, &(0x7f0000000140), 0x1, 0x25f, &(0x7f0000000b00)="$eJzs3U1oHGUYB/Bn9oOYZJGoF0FQQUQkEOJN8BIvCgEJ4kFQISLiRUkETfC268mLF88iOXkJpbemPZZeQi8thZ7SNof00tKGHhoK/YAp+xXSdttsupuZNvP7wWZmknfmeQfm/74T2GECKKyJiJiJiHJETEZENSKSvQ3ebX8mOpsro+vzEWn61a2k1a693dbdbzwiGhHxcUScKSXxcyViee3brTsbn3/w91L1/f/XvhnN9CQ7trc2v9j5b+6vE7MfLZ+/eGMuiZmoPXJew5f0+F0liXj9MIq9IJJK3j2gH1/+cfxSM/dvRMR7rfzfTdsiHuyu9ZLW/7l54a2s+wsMV5pWm3NgIwUKpxQRtc5Nams9SqWpqfY9/OXyWOmXxd9+n/xpcWnhx7xHKmBYahGbn50aOTneWk9KU538Xyu38w8cVfXOcvVK8+dOOd/eAMO0f6Cb8//k9/UPQ/6hcA6U/1ey6ROQjU7+W8l+LP/X8+oTkI0Dzf9P+xoA8FLy/z8U1zPzX82nT0A2zP9QXPIPxSX/UFzyD8W1N/8AQLGkI30+KNzo7gAcFTkPPwAAAAAAAAAAAAAAAAAAQA8ro+vz3U9WNc/+G7H9aURUetUvt95H3H352NjtpNlsV9LebSDfvTPgAQZ0LOenr1+9mm/9c2/nW7++ENH4MyKmK5Unr7+kc/09v9f2+Xv1hwELDOiTrw/ryLW+Wt1fPaz6/ZndiDjdHH+me40/pXiztew9/tSG8JqEX+8NeAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAy8zAAAP//JS12Fg==")
open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[@ANYBLOB="20000000020000000b"], 0x8840)

7m40.292755813s ago: executing program 1 (id=75):
ustat(0x801, &(0x7f0000000300))

7m39.910142797s ago: executing program 32 (id=75):
ustat(0x801, &(0x7f0000000300))

7m21.86676233s ago: executing program 2 (id=232):
r0 = socket(0x10, 0x803, 0x0)
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000001400b59500000000009b44082d"], 0x40}}, 0x0)

7m21.684139414s ago: executing program 2 (id=233):
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
mount$tmpfs(0x0, &(0x7f0000000200)='.\x00', &(0x7f0000000240), 0x204084, &(0x7f0000000540)={[{@huge_advise}]})
read$FUSE(r0, &(0x7f0000000f00)={0x2020}, 0x2020)

7m21.365838106s ago: executing program 2 (id=234):
syz_emit_ethernet(0x72, &(0x7f0000000000)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x3c, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f079171000741000000"}}}}}}}, 0x0)

7m21.225748156s ago: executing program 2 (id=235):
syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0xab, &(0x7f0000010140)="$eJzs1zGKwkAYBeB/s7CbdptFsLBO4x08ilhqI1aK4A3Ei3gVj5DewiKtiCOYiIidRQT5vmLgzWPgtbM7brubIiKtIlLRme7T3Wy+GA8n9Rl8pCwifiMij4jeX50Pg7r7avqyWo7K6vv58c+69b0AAMDrsug/5nNqLk7NL/Aa/m993vI+AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgHe7BAAA//+dfyiL")
mknodat(0xffffffffffffff9c, &(0x7f0000000140)='./file4\x00', 0x40, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0)
mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0)
r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]})
linkat(0xffffffffffffff9c, &(0x7f0000000000)='./file4\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./file5\x00', 0x0)

7m20.903293422s ago: executing program 2 (id=240):
r0 = socket$inet_sctp(0x2, 0x1, 0x84)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x0)
getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000a80)={0x0, 0x10, &(0x7f0000000a40)=[@in={0x2, 0x4e24, @rand_addr=0x64010101}]}, &(0x7f0000000ac0)=0x10)
shutdown(r0, 0x1)
r1 = socket(0x2, 0x805, 0x0)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [<r2=>0x0]}, &(0x7f0000000040)=0x8)
getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={r2, 0xff}, &(0x7f0000000040)=0x8)

7m20.279480427s ago: executing program 2 (id=244):
r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acbf5"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000140)='\x00\x00', 0x2)

7m20.094917097s ago: executing program 33 (id=244):
r0 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[@ANYBLOB="12010000e75fcc08c0070515c5b8010203010902340001000080000904ba00038e4ee2000905000000041a06010905010300021007c109050c04400006030f07059acbf5"], 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000100)={0x14, 0x0, &(0x7f00000000c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r1, &(0x7f0000000140)='\x00\x00', 0x2)

4m22.853300335s ago: executing program 3 (id=2354):
r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x3}})
ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000000040))

4m22.551568485s ago: executing program 3 (id=2357):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x2c, 0x2b, 0xb, 0x70bd2d, 0x0, {0x8}, [@typed={0xc, 0x3, 0x0, 0x0, @u64=0x8000000000000000}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @pid}]}]}, 0x2c}}, 0xc00)

4m22.501334735s ago: executing program 3 (id=2358):
r0 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000040)=0x7, 0x4)
bind$inet(r0, &(0x7f0000000140)={0x2, 0x4e25, @empty}, 0x10)

4m22.427906759s ago: executing program 3 (id=2360):
syz_mount_image$hfsplus(&(0x7f00000000c0), &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="6e6f626172726965722c63726561746f723d5c5d07842c63726561746f723dbd3cfff52c6e6c733d63703433372c756d61736b3d3030303030303030303030303030000000000000dc599bad22eebebb0002372c6e6f6465000000000000000000"], 0x1, 0x6a4, &(0x7f0000001380)="$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")
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f0000000340)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='net_prio.prioidx\x00', 0x275a, 0x0)
creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f000000c3c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f00000001c0)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x0, 0x0, 0x401, 0x100, 0x400008, 0x0, 0x0, 0x2, 0xffffffff}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000061c0)="c0f61a5fb77193bea0c6599de09cf570067192ff7d5bf191681878eb121895cd4c4052feb0a5196b61ab6e28d35aec54bb2aee6802a27f50c4e8f36a2b1bb12d93dbcd320ed338fd1a8ed43a2dcb2bf11c773ae982800321c7dcd67fa8930472eee2990090cc2a92f3373d898573a2cd1712c18ea624e82422c96f0d8895bfc4541911ff3662cd28fd55d795d1a5f31c92defbed88d48db688f899fe88997b057ce3e898eaf9eb2e76a59c1d2c10610768b3296595221c2b063ca2aa664fa0a5456c4e2bcddc7f856e2e29ce1b8852997a4d24f918408bfa9969074de495dd4cc9591e48287d78a2b3e0de09b48eb5b6bf78c6afd134b09770c164000d1f300c92877afe8be5d381c38da3b5fb9bd540c2f43c7dd2ec8dcff2af3517ba839c827866d10608964445bdead091df1264f5591e91d2f31b2015dff1b3b7ff0a5dc8b15748278849ddf4389ca7112ec1ca45957e2809b3d763e336f7051ac4e832ec61d1b95b9266565293806933dd8e3b65eaa1b4fe7946056703426674379ccec7abff1c459b91248f3a1d9e8103ae395aa86dd4235a5c16d9bd12dcb1ea9565a7c3d58d247a51db6d9077ecf47152d0733d79a5c449480c40b1cf8e115df4de3404b73ad06ac4c0d03f3b51d1b89b05ded082a5db1f5fbd8d351015b93862b2cc0995fb318609237e404e8d78d8982af761c27ad1fbc8f4693194c5e6b99edcb7a6e9dd261a386d8ed4420a7c12cbdcc86ab19f4e7a6c0c9b80fa3f0549ae57b38a93f669a87584b81e56211b34263db87c2d244e422878aa93e2c24260c71d06f75da33079b48b7072859669c128ba03d1487336a4a04167f2a3fa928d002c8b3cafdedf7a479604aa8f94e6b7ba58395df3d136b783f7be6b0b6b7b4b735c88a53da064a493b16713726b39ce23f08af19a671fe81be1e9772d87ca9cb5dccc35759fe3f7935a3167924d0a7d1586821ffebe0fa57e72a24967f7958875c4bf56d779369074db0077ee58138400c2f646c645e0f453e9e39aaf48da67775f59f8e282db3dec88bbe20ca6e65e2c7e44ab0583840513bfab76d94d1512549ea6db4a5a64cbe6f76b0ecdb2f1f71aa6446bcf4f7249366474cb77ed70ccb2702134b9dc6c2bfaf27ac9a9c85b8d9c48d100ae8c0eaa34701d2125a405b1117307119b754ccbbbcb2c8b71eb76d1157ddc7fbe0c75652a4cfc31d785a489f2344d8b4c47ff1b772104f49658f62d6241ef7f782db0cc071788b3dfa74e69533cd0a02ffadacdfbc8b5a83b9d4b8db068b5a7370f947fc4a99158c6296a442beba2e23ac1ef68c50f19851f3fb68b67fb714a5e7e53bb5a7690286cac12f2b002e854d8595075fbd00622b29bd423c3dbaf600ad6f37c96dcde43de6290b053c76df5620ce17118e2230039304c88a0d207c7cd05dd3854c545cdbebe907cc4d3411a382afed5e080502363cebe68e2c8dc1f800ea4add827a83a9cdf0fe6d54eabfca5a0ba370a06a4af1c49a60cd19141a4d994fbcce888278ade6300bd40685267fcdf1317cdb3b06cae9e7d9edb08d5c98b6d7115c025fcc05058a515adcc23c65ce526aed3b8203f3c54986f65ba9ffe2a9bc26b2813a1fe339ba2a58515cb8375e2d62550bf35dfd4fbdb75a70bb9fdc47d3d0346a65b986b7efd12aab760124b6888480b341b16ef2fea93fe2fbdeb55706690aa2c02bd80b1ccb7b8f23720283df89b515e2020bc5364cc4aea5fdc250f10d46db93c128e2de7477f4c80ec016f7a872efdef50ae1730b3a1deb8085d82f4fd53015a518803cd02646c087d67b0fd7092852dd81ac93ca60346f23fd847cf7c4883cab81af956342da21fb399b69e1988d89f9693b0630fa8cc95714285940d20eda153f8f7b01e6b2b892327b5d1e754a36a3430c5c22c3b841357eb80e526d7792a8ab9c4b1d23d82e31f23ef38580c2b33ca72424fbfbbf237f315cf2e5d134783982cad204be087ef58da96c6bc5da2dc4bc78f293eed56157a10848c0a956de15b83daacede9ae1c54731149f9ce7231cd84e14f128f87361e1fc0cdb2940766f39c93b9ddc74bba0a32548cddb1ae20981576de2ef8a772b04ed90900b2da11ffc70bbdb7091b8b8ed600dc0c9d236277afd9bb97b035f3b8fc95ef3f30c056b67a195c5c9f44c0f2ca4debba0d6d8779903e8e34fdd6b766fbba6b57e722ad9a852dbbeca8eb9acb9929bdcb4d4fa57d54ef1c1a0fdc032a898d3334f5671c7df82361b7d616c1f87e23f7adf043edda83458051f073f2562904ed25ad9a7129f3c14286007c9e4c81ea56c6a7289d8e58782d949a19a2642dc89d107fb465d0a98128250e66eedd93cf063963b7f7a0e1d3b9f1dd212cc9edd662af45852dbbaec84c69a640be115a239b5abd46d990fa007988f6be78a8c1e426091ecb33822529f7fddfb34d9304466ea06bb546a34735021e98674ae4a5f5c0b4f153ad5434b81c6343c42ae79224fe5abfe8b9e6fba38164c3c318500c130323b2f9bbcdf6aceb664e10483e2084defa744cd745e565ac5a8b5c30166330dd95e70f2a072a5cf5462635f7e0a4f455bcb607426aede9fa06d708c7c0daaafe2b84896134ab3b379c6690c9049903156232e5b7ca9529d602968f1e1f7a73214aaf4a9575dd5147e5bef8f05907267580abdb728cf32f6845cdf3bc779451669e4972e0b787afac5a36bacc3c1bcce125e91e4bf9810d91d1f1a3d8316328dd2626040af09892f1241c6645537ebfbeb752afba5e8171f487edba97aa92404973d4e8d09254abd2b70bdadd9b98fa3c33355295a5c474e9b2f017a6636233a382e8ef4e73506880e2a588bf257b6bb11e57cd9e75e45ef609ba583f3a6b1f2f94c7a0443dc0a8906a13e0188b61550cd296e4c63faf45bf7aed852f68ffed377302da3f73d89e4274a64667636bf00e8e4408a8407e098aeeed98e545b9aef40896c8070a76aaa0042162979ec0b7b69b4ee701100d66d3e7d25a48c59989424522889b32e4f18676475782e86d652d2eb836c326b46b8544bb755eeb14727e5ca25875f7b9ae1c113068be55a1521cb4edefef34a7a4cabc3639e456c94f01d78c059c441ce2c468e7b39b56555ad5cd6a14df8e3518e4e1970fbd6f586ce46c51c4d9ad20c3f7f5048c071994e807f19b7176290a82406dd0ad3f0b64350bbce79b223f27ed99f819def43a33696c0739e09030460a5a5d04d251adfbde1af7a485894d3d30c79d49796a9a5e077aeddba1303f3e3a3187298c88da70885e2a9dc966eb69a6439e2d3b1934ae6e8ea328497d87a9dbbddbdbf12b0c582ca4ffe1f25cdcf89a6ccdb31880776ab808b4f050ae02adf70f64c73ab2a3b1c4da69950ab4f7bcf9cc22f81b99694a7783b792facd8197904c12d3776de5184afa143ee23eee82aab2ac79b25503e0692f3463e5c363e0b4b5f31af82898009f7da13d4f249a70de40314c003e7e59dfb233bc44d0316df3e45af806d216ca76a58417ff8abcdf7cfea2da8868c496cdec8f47c451ccdc8908c5e8c1039b6bfa8751637c29fdd9b7dc76279dea5ad7455af4db3394a34cb9be8b9bf1105862108f920c44d029c3372e77c44a25d06cba956da65ee40abe32b8b557e123fddaa87b4ed5ab3485eb11f13c61072720d4adbb937c336f2b60525933b6d49e7c6751f0769377bdcef02abe63639b17a6780a4afccc8067403aeea42726f253ec97994dcf55358e6faa3e622344dfc613f8be96714d5c49633d7b74b9a72883985782ea8691d26da620d905f3583adbd9d527d93f1ce623bcf70d98a0455ff80fb1d472c6fc6bf0390e81b8d755b196e94fb73bcc883f5f310043c5138c95c5d7079c24d5bc5876b422f46a2bb17aee407bf7a55dbbdb253e2865c1b91839737c37142a8fe8bdbc0a7bf89a392da717a5ed87af754052b1d0a1a37313b00cf3b4aad91ce7fa7777b1851121a63e374865b238ddf9a7ebd20641a719c68682b97e3c5126e732800c04cdb627bd415efbb7e5e19917bf4bd53f072b7ec2eaa0128b56e069a32e9f729718fa4a7212ab0fd1e5d3582a5723a704d84a88c235b44812849301ee8155cea471028beea1918cb1f4118728718674cca9dcc58bafcdb9379c57e9333ab348b30a801aa2f5c05c3107e52613cf0f591781ddb5e1e4844633057a26bb3179c31b5664db4bb8c6d762c7b9886317ab6e9e301de67f12085547ad2a20d1d63d361c2bcd66be2e25fe104f8b53b7cf89d90d456f063da31f60078b760ce340f9c9a8e8da113b6c6e3c53e666488d75ab209dbe31ecb531553f17446a29edc465ed22aee2d4c013ee8a4d935c0cd92bcba9e5a56a6c19ac114d12db58bcf5f931a7b282404af34fee464f4c28e16dab834de98dd57b107e45fa66b26c32fd94e848aef6e4a2a65fd4fbead1b1d445d6c343bf50d785e664220371e27566646e284c6a3b07c14c0c5b84b5cd1a01a84d655f8dd72ab8e3d0c48e67596f605cd4a50b5fde9b182792d7ee8ee457eb6666aadea80563b4d176933cc482f75cb98a8dde4a414041187cfb2abe3e5077f23c98bafd0afb8b023e0cb26efc1488dd98a51a19dc93412b5fd91c4e06439b6d2d20a174989f860de6b1be55923a11e5893d30fae74a625f777ef9362e64b529c964b5c0b5817a579a647ded28582c45f965e52e1f76084267c73f8fce8037b22c2496ee6674f56056d9c691eab831c831a27fccd90f961e949a51c90a80b677d11e70d01744f9632cc26b7e6476b8c92a688ec8e1280ea8b795eae7ee61e2735045b9ea516af752b35388a6c3ed98cfbc4e74c8d0717dc31eac87b6a9c06f0d4f412e8e1155ce48cec6d9c106f3013329596a2d43ffe7f942cb7b7449f38620a8a9e5138b5d5d03c8a563446e4dfb1905d841f7a350d6c67d85652297db21b3dd3291b795c90276ccc50eaf513f3ff9480b3d2c0096e92c93cbbea680833cfa630d72c4f5a21ef0f81910b8a5ef77d62175d3abf5b3417cce43e3c53bb84ee1f5e354b2d79c2b46e3bdb2ffb15420e7a28c800c2591cd331d71c645a6b1bc43f06703164c05f61b4abc0fecbaee510def6340c2bbcc32248655e9161c3e6f01520bb0c53be04c3a3ef4a2dc401663f6719ac758aa297f65d1681652e4ad042d754b054df9cede3ffef7ad2f52184ea6d93d6867cc262b0a413da11c02d0c7c49a663319333d8b29d56cbf630e66b6683ff7f3b1ce5c481d37151626eae761adb77642f802bf0f663f3c322ee17cf01a09f058dbf82d04bdd7c48f34f54392d1dd489891ce28373ae980f74897fe3f90db2a9ccdbe56160fd2517adbc953e88c5fa8981456b87ab9f122321816e0df119f6f6c505f0dcab1c8e6a7f4109055dd80001dd90ea984b80f0b0766bd9772d96ed42d95f219b4a8420d7cf04f28475d7f5d8a8a07b0930c40d0dfc2592f8f54e90a80e0a98d3055f4660b1530565c7f2d91d7d96142da19d644aa7c512e24f83e8305970f9d3fc3b9382ad141f63f2d5b265b7cda258119ca4f553fab11f2fd925a7a24c4021045073d867bb089ca7bcb702bcedbc28781e408cf8bd43498f8661a320d28c95c1fc42635c9e4c4de8787afc70bf5c8bf75e0a2937a9ca2b08c15453f24211168c7fb2a24218fc3f04160c2daaa46ef7fb710606a53228e134f20511169034cec55e77037a108060b8fd10ab9ae228d9ee4d5ab1380cfcb8611e6c9d5dc143db2bc856d967b0b9d0187ba8483f7adbd1092562b2b16420baa5ab6c1f7c02ae56f013e752d9f41df4b4f0b008bc25ff58f816e50bdce308e219068bc898a21f1dd26d7fe7760459629f3615bcf7582c87d296f041fb005a72c7ef4013ccd8ca3bea85db90ae6349f101adb9235dd343be423816b37db2661dde2b9db33800da7599e8a9194fcf06755e2659670c62aba1d5a01172a416a0296bade0b32e69b0ee60dd6cd1eecca4335eb0416df6ded75049a14660276df47bb4f224e087235742e90ddf6f57827a0cf26d71b9338f2ff5166bea85a7639de6ac97ec829a7d071fac1f4b27c6c23e952adb5536b45a68e75c1c1a6d44508be6f4b87c5bb880a6baad5faecd1fd6730783d8729c2d89b23a3f2f9b79b78f7fcb70a7812607b25b17ae857e65f205ad5dd87a34e52c6e9611f588236bdc59d816f277aa8cd4a19750461d3e82c8621181b803900d1df439babcf4909168d4125a7c962ceac2f834d79460f17f92f415a85ad7e12da4b76105bceb4641fc87da7797fee092828f6e9e42631fd5c87046ebe5c4044663a31a1b39a6f6a53ee2b7fbc3eede57619535b1011c10d2d5a97c781c44bb6e493287528bc5281496f1aee3c746e09aeef0b2d38bdd33e37446c1f7516767ecbe298b78ef8e03336a08a1a9e62805140573b034459a445240aff04593539aa97056957f3dec9c43e50a1bce1b9c8e860940e03ae39e8f76fb80ae746f7fa4ed0b050c9e08a788e666e9f18bc8e83c64ee3ea04eb9f1c1dd92b3be73d18cc53bca76ba4688b48c13982ae6d25fdd9b5b85612d5b706c9b9d7c6cca91141313356f0d7b859da0de669fb52a829014a0fdde51df658303ce085222a42ad624ee6c659ec94e0d0713b2d3c3becb53c6f76d30530e6129943e20361a7c9f7847f79cb871d866b5277eecc8c1626fe2719c9cf872c0fc78a98e6ca998555721e9abd5bf9e2d1848016e0bd3202c44575c688837136e71e85765d677e0f2b081707a4e7e22bef50b9280a1a5ea549022ef2a9fed989f156198975302608dffd03f8f1186a12585d4670ce868f0c96be37416b9132144f65c9abe8b00894d7a7e6d0a8554e09139ec2a0eb6d4f00c637684602c106257f5abe816e068e0f6f3e94a916ff41e23b6baa4876931209a6b0bce1f6fa8d1965665d3dc42e5c6b011bdb5144fa5fe4879779ac9dffe0843cf49806ecbb615b818e54c6dfe4d12ccae5b12b0ce87909c1e852e8d7587d1ee24c2575af61eb0b667c37b6d15b88121974598ac23cbc66503f95cf01a7a1e217f0712c4cc4e5fc22e83e3aa375eda531a73828eba91223d7de1194af730bbf2c1ed5ec47ecdf465b1794971010ff8c8771c488a1d3f98292b5d2ea9625e52589aaf7212fcdddcc0f1681b785911fcc64a6427358e4307a3d8bc583dd635ba5c41eeae96e0b6bc5236a1f539d291e568d5a0aee25ffbaa73d0cb84bf558cbf6d04b16ef7e97617b42d07100d82fda6f75dcade611e459bdb4773bf2b70e90a8add2bfe6ea6d3a4427940fef6c81931762dbea6678fc63e50c4430227b15cf184dbae4c3b2d8096292c17f701c560ac7cb33efe7d79d0c2a3c0c06e22d4e84e9e959697879f0d27df460046fc20394655cfa19793256cd9074f1c5f8ef530af537164e0e43184f921d56094fa7c7744af35821a5833c9b9d56fcf525a39fc795cf33f14705d0c7087c081bf11ad29e4d6c8f6cbbb3a0d873262b89cfc54d4cec42c3e13a5ba604df942bf8b4eef7cdae1c0e2970edb7ea6437618e6f8312a745ca8bbf0c42df103f42c824ab4e77e8b118e2b9a84568ed3d4aa3800011d02be29c032192719635a1c6c28315b27368f6ffe852bbd661c351cbfbf97b1b36d52371a4ce57e5eb6e4b13cd01b022de1770a5b1cab0fe548092a16e04de76fb8d29d69a1c55f8aa11b34bd6f018d283a9a7c0338b8c1900e21c0054616ade6b56d0fe3379f1a8dec38b85fa8e74e9bb5df4287d037f77bad30de89ea87b03d40c3a1618db1073c07032f6d22f8a264cbf0c1113689308a2fcd7299603a64f884cb03f8c5f0e61e4981d2baac3d50975cb917b815efe2f7eda88f1cef1f34997f0819a92051c1d9eac3ef05de25a2b4d5f65619b4ea377180c541f2afbfa5c8fdae59f8e3a7635d2b30c4c759c32e570b8d9ec03b4aab65503e81e545dd41f593615cfedcf009424ae4854de3a9111115cb254608bc2666b18c85698ac193a9799f1a1f6098288b42dd2684db37e0d3b023ac9b417263b1566acd6d951df147e83db8e909b39bb6a1aa3fcc1c1a20795521b84e0884254b2524ebf0321e5709e7a79f2d62309247b7b24ec71553a9ab9daccacac1a8bd6019b7703c0ed468379640ac6e764ededb2fefaa2f88e15fc97ec6f16007f540cd7a57c7726f4aa9ff6640cc7f5d71a6c12048f98a9071ffd594f17e42e7336ab6d0fd429328df1238e5eb4ebe4f9d8ef01fbcfe8f53eb3f6defd4c7cb40b3772ea2f2130b655d2ad3643977cafa991bbc6aa2aaa2879a3c2d1dace3ec034beb3d06f0a09429b3fd1ac06870dde4ab97b7d5d7ff1394577a6bea7a3a53ca883a16c98d574ddad00de5dfe9f75369be7686a4badf44f4d9b110846b6ffca67f63973186433f6bc3691b580cdc689c159064c55a974fb849f56fd2f9cbe4738e0a1a8a764467dc1d3723278ee1ea573fad98a5318104218d359d89579614592fa6ae7cc4720e6ed71706fdc4c707b03ff77454daf4505700f249aea0abc909763416d44a069a6d605118ac0c20a325577fe1d8af053673fc72e489d24405281f01b4e2e05e4fa14e68a53294e4b5d201c146ff994cfb7a776ad80828732ee647092c20fe46d917142880318136557c47ff7e31d26f35f407c1e6d4254aae442b233b89dd4c0adcfc92b0f821a5a9dce95a24bed9bb5cd17a5b59d3e82086cdd7a3755064e4de22d8f0f973f4235aa58c6214dab89325638d94d3dc25f3ac4d912ff74be6ad8ef49aa2becede5453a409cc8ed8065dacf28a1a7498f6dd07a3478af093574fdd2d0a4f98d12fe898e47cd0550f1fc42810ed2e4cfe5cc4faa67d965f252aab1bd5c536bf2c936706bc71aae98b93494d364faac72a9a60188a23f15ddf1238896e4848da876789b57ca53cd5b1041612a49de9a64a545a39375aa2a516c4af4744daf65a9c28ffb635ba56b96731b763934afa0651fd6fb65e9f71eb0e6fd54bcfd2bf0118b486e97db512290bdb1dcfca76ed974722e13e5acd0569d5f944de70adf728379094981ffaec43848367ec8cdcc227b266649ced47a03b22016ce42be3a33135229670244cc7b3325ee448c95236d0de4bbf641e1cbb0516edb3f8829e60f91d43f0fe45595d8a99e699252930c7b05ba2ba679f8f46c38f789a7750ffa4eaed19c4c1a33aff60c8926ae42497662a130b83b3211e9399e2565d9f082ec30e26e5b02ea91cf43b0a046f9fe596e5bb2a9c800d761008dc7fced2a510af6b02d3f702fc3e1a98c6a87661f0d353b81bc4435c0d4376cfc74c057bf23febb101252c4eb168d4e347e697c8d0c48a687fb2224d58e5dc68c38de930164aba51e7cb19051fe64603c6b602c02c5cc22c6da1c47d906fa1cbf67312658b201b8f89a377d61695daaeee18eb2fb8caf38280fa8b95cca721afdf33d2c3092af57204bca72c46aeae9e9fc46f0ce76b96bbbb59a8517cb72d68f8b189280b6ce1e2686204913bac1d9aecd77623b7f05475352e57f245197894d767e5f17611bbf1bfe2015c9750e9b3f5ad4ad57be1ac4988c30d90829946b05fc5bd709dbd2590da2e3666294f83336e52758bc12c9d02af342a91fdcfc9144021a783643a9845a4898ee03417329ee0e2dd7bd53f3b23f3f9a10ea643b91b3c2df8438efb22fc894bbcdc408a13dbded7002d9cef6e38bf6dfa16f52f0f24087281a3ae95fb4995131938f9ca80c5f466c7367665e5717c823b318f43e7a3e2e8fe9c2e74959ca3d53b79fa45ac778d0a99351a1919b1c9ddfda10d61487fc5a2b8227493b14e2ea9fa41db870deb1700eb46665424fbc3f21c5d7ad61089ad0f99aadcca2a97d46fd091cf21d95674c3cf48f2724a89299b5342ebf8b18770e61c449455f77cacc5b2e0123005cc296acfc28e42e3d3b426469e39def114d6071a3f015f94dd8eab597dc4cf6109f2aeba0639ffe3f66f15ddaa74460a884a5c067e1e6f8d961ff32518e7571d53ae36badcaca50258a15743e67fb35e062e697d44ccd4e416010dbe62a1d13319d3ce88dc7826514d0f84cf7ffd5f1dbdbe3534af35bba26c5f951e18b012234a3e1cd22199358ba66421a326af09d36d45c3497c4725c0e8557395376fa9dcbe4c595aef7f822cb160e72138cd610563c382769b64f5da2ae6f62cbf09d24490565d7b88f6fefc30f050e74327b7efc168f040f18110a61cc6ecf73c43c0e9e73fafcfc6079ee68839a8ed710160fdcfd987394a790e01c42c916169e8c6a7af905c15d51f87e88877386b8f8743efe4fffc2dc8fd73b4e8905b428d4cd87d90e93513f19a981b5037370cd634f23859cb7bd6b5632bd25c6873b7195691e0f76fb07fce6e72d4b2b467e57a325febf4bb842820fe6896b23aa2a3eb37697753a3693ee936692e6cd91eae410bf89192df913f2689adc73b7b35eaf8bf80928c0023b105cbd2be51a08a371be88926636bd590466c218b203fe311d73dd1a8b440133f1ebb8249b4e1f6723b7b18b508dc34acd9da927ea60d2dc361c2d14cd43ad3b0137ac32e8988d11d11de19065d02e8012a2ee24891541989d11da87de4383036b757769222af022e86803b64ccd03e4bfe3a9d3b8a5d6522d7b6ade88aca72bc436382cfcba22a426ecb21366d42588e9a68c0d61722617a4706852ef6e5eb42842d127f88dabcb8cd635d621a9082efe0cbb52fffb017c8cbf80e48ad1d8ac4c927bda50be7bbb6a302081951dd7c05142465ef8188774807ba482c155f7b56b663d24c4ad88140ddba388e4d6abda83048db46ad18328c63006d02844189a769167d94265148e06f3eca08dcd81691df655968de44c5931e62f5dcc4aa16b24ceb6e7a2c8783d9918a9be7c72dcd57fbf39f985ac29069241cbe3298d7651124f03bef8e2adcadb0c0e08efb096f72e5df2d3f8e2ea6f9cd2401533469e5099a6faa98acc2f73028eae115b3a771bc7ddd186ee7a634398e206ce9b1262b1dbb80575eac718eade048bc01ac1d410e21393dada6c1ced94c411fc19ccacdd175996501d66819b491fef65697f736ecc3a4c32f3675d1f90c8e4d44a1ba6048e77fa24d6998ad88da3cf5de223446d53dd72981c19d5915af69b9a7b9bdf35114ac1cee66b9f3f6df4b9a2d2c017d44443a28badca61b1e8db627d967827ebf32c8642b7de41508c15538b6cdf0284f1a94e8d9fcaa086236f11fb1689d57d500423a0c1d362a4fd57e5efa8858c237a0b58210b4df2b6f10fb01ff8b305cb69e65120c716970e1752cae51022a068b9ac2b7775ac415c56d31536c9f1eca654ec89d7ed00855b2d2564a74bf1a0a3b75cbeadad89fd4ce7e0a83a565c6d69077f026dd40ee186fb496d575c5f5d2f4f84e0efd6bca34f070b185903c7fcd6478f467b73687dee0b765477cc474cbe7f067d1f655efe1fac24a6cda9ed82dee343a36f5ce3894587937f31a14dff66e8384bb3c9adebb753f782570a894e09a38c096f523fbdfb7e0c09026fa023c8dc9e5822410d8343afd647a91130744017166a9b195996ee871eb284279fa725f7af7f853eb85bce100cfade5d458c4e166c839e4c1a86", 0x2000, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)={0x78, 0x0, 0x0, {0x2000000000007, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
chmod(&(0x7f0000000080)='./file0\x00', 0x1)

4m21.88628529s ago: executing program 3 (id=2364):
r0 = socket(0x10, 0x803, 0x0)
write(r0, &(0x7f0000000340)="1c0000005e001f3814584707f9f4ffffff000000230000001ff80000", 0x1c)

4m20.826078712s ago: executing program 3 (id=2367):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, &(0x7f00000000c0), 0x10)
sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x644000, 0x4)
recvfrom$l2tp(r0, 0x0, 0x0, 0x20, 0x0, 0xfffffffffffffdf2)

4m20.599436277s ago: executing program 34 (id=2367):
r0 = socket$l2tp(0x2, 0x2, 0x73)
bind$l2tp(r0, &(0x7f00000000c0), 0x10)
sendto$l2tp(r0, &(0x7f0000000040)="e5786a0d000000000000c83b", 0x5d, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10)
setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f0000000000)=0x644000, 0x4)
recvfrom$l2tp(r0, 0x0, 0x0, 0x20, 0x0, 0xfffffffffffffdf2)

2m21.170583155s ago: executing program 4 (id=3689):
syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @multicast2=0xe0001b59, @rand_addr, {[@timestamp_prespec={0x44, 0x2c, 0x0, 0x3, 0x0, [{@private}, {@private}, {@dev}, {@remote}, {@private}]}]}}}}}}}, 0x0)

2m21.170389659s ago: executing program 4 (id=3690):
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000100)=@bpf_lsm={0xa, 0x4, &(0x7f00000000c0)=@framed={{0x66, 0xa, 0x0, 0x0, 0x9, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0xc9}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x94)

2m21.107132404s ago: executing program 4 (id=3692):
r0 = syz_open_dev$vbi(&(0x7f0000000080), 0x3, 0x2)
ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000180)={0x8, @raw_data="d5e0665d70249386d1097e9c28b1ddd00456793948a0e93f27be13b907b66a8651e2e119e8151e4fe3c61f85dec58d713bbd70d6c509df4d2ff9402e6b2eb9b0ae5401b67dc2a252329bc7151e8d8890696ef2e5d25f27843e9de0190fa4531bec24c539ea15db078d2ce619f5177069d3e9464f87f1f59413053b86582d5abe814af12076eca3e29bcd67e9804e2056be4024eb6bbaabbba9b2befdb750c9f8affdd7090f38c1f39747a41c98c4b42cfaf01d5d507c5d38e2a303d7e51cda4663e5fd4b00"})

2m21.030856574s ago: executing program 4 (id=3693):
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0)
mount(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='devpts\x00', 0x0, 0x0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x120584c, 0x0)

2m20.9601558s ago: executing program 4 (id=3694):
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x2812, 0x1}, 0x18, 0x0)
write$usbip_server(r0, 0x0, 0x0)

2m20.84928257s ago: executing program 4 (id=3695):
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)

2m20.724984218s ago: executing program 35 (id=3695):
sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r0, &(0x7f000001aa40)=""/102400, 0x19000)
r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc4)
ioctl$SIOCAX25GETUID(r1, 0x89e0, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, 0x0, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)

1m29.753729156s ago: executing program 5 (id=4245):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_VFIO_IOAS$SET(r0, 0x3b88, &(0x7f0000000180)={0xc, r1})
ioctl$IOMMU_VFIO_IOMMU_MAP_DMA(r0, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0x0, 0x0, 0x8000000000000400})
ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f00000000c0)={0x28, 0x4, r1, r1, 0x7ffffffffffffffe, 0xfffffffffffffffe})

1m29.63810983s ago: executing program 5 (id=4247):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, r1, 0x431, 0x70bd28, 0xfffffffd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_RX={0x5}, @ETHTOOL_A_PAUSE_TX={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x40)

1m29.518953018s ago: executing program 5 (id=4251):
r0 = socket$inet_mptcp(0x2, 0x1, 0x106)
ioctl$sock_ifreq(r0, 0x8931, &(0x7f0000000000)={'netdevsim0\x00', @ifru_hwaddr})

1m29.416660719s ago: executing program 5 (id=4254):
syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000300)='./file0\x00', 0x48, &(0x7f00000003c0), 0x20, 0x51c, &(0x7f0000001e40)="$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")
mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f})
chdir(&(0x7f0000000040)='./file0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0xa0)
ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)=ANY=[])

1m29.170029264s ago: executing program 5 (id=4257):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x70bd2a, 0x0, {{@in=@loopback, @in6=@dev={0xfe, 0x80, '\x00', 0x21}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x3c, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x100000000, 0xca8, 0x0, 0x0, 0x6}, {0x3}, 0x400, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in6=@mcast1, 0x4d5, 0x6c}, 0x0, @in6=@mcast2}, {{@in6=@remote, 0x4d4, 0x3c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0x1}, 0x0, 0x0, 0x0, 0x0, 0x800, 0xb3, 0x1}, {{@in6=@local, 0x0, 0x32}, 0x0, @in6=@loopback, 0x3, 0x0, 0x0, 0x81, 0x8, 0x0, 0x8}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0xfffffffa, 0x3c}, 0x0, @in=@multicast1, 0x0, 0x1, 0x3, 0xd, 0x0, 0x9}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x20040041}, 0x0)

1m28.386393391s ago: executing program 5 (id=4259):
socket$alg(0x26, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x1}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)

1m27.980935855s ago: executing program 36 (id=4259):
socket$alg(0x26, 0x5, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x6, 0x8, 0x1}, 0x48)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r0 = socket$packet(0x11, 0x2, 0x300)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={<r1=>0xffffffffffffffff})
getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
bind$packet(r0, &(0x7f00000000c0)={0x11, 0x18, r2, 0x1, 0x81}, 0x14)
setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c)

8.704215126s ago: executing program 6 (id=5155):
bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004680)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70)

8.703880817s ago: executing program 6 (id=5156):
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
futex(&(0x7f00000040c0), 0x87, 0x0, 0x0, 0x0, 0x0)

8.640059731s ago: executing program 6 (id=5157):
r0 = shmget(0x1, 0x4000, 0x200, &(0x7f0000ffb000/0x4000)=nil)
shmctl$SHM_LOCK(r0, 0xb)
shmctl$IPC_RMID(r0, 0x0)

8.639693426s ago: executing program 6 (id=5159):
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, 0x0, 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x205)
move_mount(r1, 0x0, r0, 0x0, 0x46)

8.569556845s ago: executing program 6 (id=5160):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0])
mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040))
r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CATATONIC(r1, 0xc0189379, &(0x7f0000000000)={{0x1, 0x1, 0x18, <r2=>r0}, './file0\x00'})
ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000100)={{0x1, 0x1, 0x18, r2, {0x1}}, './file0\x00'})

8.380790276s ago: executing program 6 (id=5161):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0)
sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)

8.270502665s ago: executing program 37 (id=5161):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r0, 0x0, 0xfffffffffffffffd}, 0x18)
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$inet(r2, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0)
sendmsg$tipc(r2, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0)
recvmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0)

1.967255884s ago: executing program 8 (id=5250):
mount(&(0x7f0000000140)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000080)='cramfs\x00', 0x208000, 0x0)

1.867631136s ago: executing program 8 (id=5251):
r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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")
ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r0, 0x4008941a, &(0x7f0000000140)=0x2)
ioctl$BTRFS_IOC_SEND(r0, 0x40489426, &(0x7f00000000c0)={{}, 0xffffffffffffff62, 0x0, 0x5, 0x11, 0x800006})

1.12466245s ago: executing program 8 (id=5265):
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r0, 0xc0189375, &(0x7f0000000000)={{0x1, 0x1, 0x18, r0}, './file0\x00'})

1.098331408s ago: executing program 7 (id=5266):
r0 = socket$inet(0x2, 0x3, 0x2)
r1 = socket$inet(0x2, 0x3, 0x2)
setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc)
setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0xc)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x7f000001}}}}}, 0x0)

988.942878ms ago: executing program 0 (id=5267):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0}, 0xfc00)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00'}, 0x10)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_SIOCGIFCONF(r0, 0x890b, &(0x7f0000000000)=@buf={0x0, 0xffffffffffffffff})

988.66058ms ago: executing program 7 (id=5268):
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x40505330, &(0x7f0000000500)={0x800080, 0x810000, 0xdd4, 0x4, 0xfc, 0x558})

911.104578ms ago: executing program 0 (id=5269):
bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48)

910.724718ms ago: executing program 7 (id=5270):
r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x7)
r1 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31})
io_uring_enter(r1, 0x7a98, 0x0, 0x0, 0x0, 0x0)

809.524738ms ago: executing program 7 (id=5271):
r0 = syz_open_dev$radio(&(0x7f0000000000), 0x3, 0x2)
ioctl$VIDIOC_S_EXT_CTRLS(r0, 0xc0205648, &(0x7f0000000200)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000080)={0x9b090b, 0xf, '\x00', @p_u32=&(0x7f0000000040)=0x45f6}})

809.014436ms ago: executing program 0 (id=5272):
r0 = socket$kcm(0x2, 0x1000000000000002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48)
socket$kcm(0x11, 0x200000000000002, 0x300)
setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f00000002c0)=r1, 0x4)
sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000000)="813e785600", 0x5}], 0x1, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x40}, @dev={0xac, 0x14, 0x14, 0x3a}}}}], 0x20}, 0x4840)

752.18855ms ago: executing program 7 (id=5273):
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/tty/drivers\x00', 0x0, 0x0)
pread64(r0, &(0x7f0000000080)=""/181, 0xb5, 0x126)

669.707339ms ago: executing program 0 (id=5274):
r0 = syz_open_procfs(0x0, &(0x7f0000000180)='task\x00')
getdents(r0, &(0x7f0000000100)=""/49, 0x31)
getdents64(r0, 0x0, 0x43)

669.230446ms ago: executing program 7 (id=5275):
r0 = socket$kcm(0x10, 0x2, 0x10)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7)
socket(0x400000000010, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0xe1}, 0x0)
sched_setscheduler(0x0, 0x2, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x2000000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r5 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$6lowpan_control(r5, &(0x7f0000000180)='connect aa:aa:aa:aa:aa:11 0', 0x1b)
r6 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0)
ioctl$COMEDI_DEVCONFIG(r6, 0x40946400, 0x0)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x33fe0}], 0x1}, 0x0)

668.987357ms ago: executing program 8 (id=5276):
pipe(&(0x7f0000000100)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r2=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r1, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, r2, 0x0, 0x0, 0x200000000})
setreuid(0x0, 0xee01)
ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f0000000000)={0x28, 0x6, r2, 0x0, &(0x7f0000ffb000/0x1000)=nil, 0x1000})
close_range(r0, 0xffffffffffffffff, 0x0)

599.314701ms ago: executing program 0 (id=5277):
r0 = socket$qrtr(0x2a, 0x2, 0x0)
r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2)
write$binfmt_aout(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="03040000b50000000100fefffeefffff"], 0xc8)
sendmsg$sock(r0, &(0x7f0000001540)={&(0x7f0000000140)=@pppoe={0x2a, 0x0, {0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}, 'lo\x00'}}, 0x80, 0x0}, 0x0)
r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x37, 0x7fffffff}]})
close_range(r2, 0xffffffffffffffff, 0x0)

510.223491ms ago: executing program 8 (id=5278):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
clock_adjtime(0xffffffd3, &(0x7f0000000000)={0xb, 0x6, 0xfffffffffffffffe, 0x9, 0x7, 0xb, 0x651, 0xfffffffffffffffc, 0x9657, 0x0, 0x7fffffff, 0x0, 0x8, 0xb, 0x80000000000000, 0xcc0, 0x1, 0x1, 0x94d6, 0x0, 0x0, 0x5, 0x0, 0xfffffffffffffffa, 0x3, 0x2000000000000})

457.228597ms ago: executing program 0 (id=5279):
mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
pipe2$9p(&(0x7f00000001c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x0)
write$P9_RVERSION(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15)
r2 = dup(r1)
write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18}, 0x18)
write$FUSE_DIRENTPLUS(r2, &(0x7f00000003c0)=ANY=[@ANYBLOB="b0"], 0xb0)
write$FUSE_GETXATTR(r2, &(0x7f00000004c0)={0x18}, 0x18)
write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x29, 0x20200}}, 0x50)
mount$9p_fd(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}, 0x2c, {[{@cache_fscache}]}})
r3 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
writev(r3, &(0x7f0000000000)=[{&(0x7f00000000c0)="14", 0x1f68}], 0x2)

0s ago: executing program 8 (id=5280):
syz_mount_image$f2fs(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x8, &(0x7f0000000100)={[{@nodiscard}, {@noinline_dentry}, {@alloc_mode_def}, {@noinline_data}, {@discard_unit_block}, {@fault_injection={'fault_injection', 0x3d, 0x10}}, {@discard}, {@noacl}, {@fsync_mode_posix}, {@alloc_mode_def}, {@noextent_cache}, {@two_active_logs}, {@fault_type={'fault_type', 0x3d, 0xfffffe}}]}, 0x1, 0x5505, &(0x7f0000000340)="$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")

kernel console output (not intermixed with test programs):

 attributes in process `syz.4.3508'.
[  387.892707][   T24] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  387.894640][   T13] usb 6-1: Failed to submit usb control message: -71
[  387.903344][   T24] usb 6-1: USB disconnect, device number 14
[  387.908265][   T13] usb 6-1: unable to send the bmi data to the device: -71
[  387.918486][   T13] usb 6-1: unable to get target info from device
[  387.921035][   T13] usb 6-1: could not get target info (-71)
[  387.924468][   T13] usb 6-1: could not probe fw (-71)
[  388.050801][T14465] loop4: detected capacity change from 0 to 40427
[  388.059968][T14465] F2FS-fs (loop4): invalid crc value
[  388.116280][T14465] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  388.120759][T14465] F2FS-fs (loop4): Start checkpoint disabled!
[  388.135983][T14465] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6
[  388.162959][T14465] syz.4.3509: attempt to access beyond end of device
[  388.162959][T14465] loop4: rw=2049, sector=45096, nr_sectors = 88 limit=40427
[  388.179390][T14465] syz.4.3509: attempt to access beyond end of device
[  388.179390][T14465] loop4: rw=2049, sector=45184, nr_sectors = 8 limit=40427
[  388.216651][   T26] kworker/u9:0: attempt to access beyond end of device
[  388.216651][   T26] loop4: rw=2049, sector=45192, nr_sectors = 8 limit=40427
[  388.226156][   T26] CPU: 0 UID: 0 PID: 26 Comm: kworker/u9:0 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  388.226184][   T26] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  388.226194][   T26] Workqueue: writeback wb_workfn (flush-7:4)
[  388.226221][   T26] Call Trace:
[  388.226228][   T26]  <TASK>
[  388.226236][   T26]  dump_stack_lvl+0x189/0x250
[  388.226258][   T26]  ? __pfx_dump_stack_lvl+0x10/0x10
[  388.226275][   T26]  ? __pfx_queue_work_on+0x10/0x10
[  388.226289][   T26]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  388.226308][   T26]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  388.226335][   T26]  f2fs_handle_critical_error+0x37c/0x540
[  388.226364][   T26]  f2fs_write_end_io+0x886/0xb60
[  388.226402][   T26]  __submit_merged_bio+0x27a/0x6a0
[  388.226428][   T26]  __submit_merged_write_cond+0x255/0x530
[  388.226454][   T26]  f2fs_write_data_pages+0x261d/0x3000
[  388.226506][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  388.226539][   T26]  ? __pfx_f2fs_available_free_memory+0x10/0x10
[  388.226586][   T26]  ? __pfx_f2fs_balance_fs_bg+0x10/0x10
[  388.226616][   T26]  ? trace_f2fs_writepages+0x7f/0x200
[  388.226635][   T26]  ? f2fs_write_node_pages+0x478/0x6e0
[  388.226676][   T26]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  388.226698][   T26]  do_writepages+0x32e/0x550
[  388.226723][   T26]  ? reacquire_held_locks+0x127/0x1d0
[  388.226738][   T26]  ? writeback_sb_inodes+0x384/0x1010
[  388.226764][   T26]  __writeback_single_inode+0x145/0xff0
[  388.226782][   T26]  ? do_raw_spin_unlock+0x4d/0x240
[  388.226804][   T26]  writeback_sb_inodes+0x6c7/0x1010
[  388.226847][   T26]  ? __pfx_writeback_sb_inodes+0x10/0x10
[  388.226904][   T26]  ? rcu_is_watching+0x15/0xb0
[  388.226928][   T26]  wb_writeback+0x43b/0xaf0
[  388.226953][   T26]  ? queue_io+0x2f1/0x590
[  388.226973][   T26]  ? __pfx_wb_writeback+0x10/0x10
[  388.226999][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  388.227020][   T26]  wb_workfn+0x409/0xef0
[  388.227050][   T26]  ? __pfx_wb_workfn+0x10/0x10
[  388.227069][   T26]  ? __lock_acquire+0xab9/0xd20
[  388.227099][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  388.227119][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  388.227163][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  388.227175][   T26]  ? process_scheduled_works+0x9ef/0x17b0
[  388.227190][   T26]  process_scheduled_works+0xae1/0x17b0
[  388.227233][   T26]  ? __pfx_process_scheduled_works+0x10/0x10
[  388.227264][   T26]  worker_thread+0x8a0/0xda0
[  388.227306][   T26]  kthread+0x711/0x8a0
[  388.227328][   T26]  ? __pfx_worker_thread+0x10/0x10
[  388.227342][   T26]  ? __pfx_kthread+0x10/0x10
[  388.227361][   T26]  ? _raw_spin_unlock_irq+0x23/0x50
[  388.227383][   T26]  ? lockdep_hardirqs_on+0x9c/0x150
[  388.227400][   T26]  ? __pfx_kthread+0x10/0x10
[  388.227418][   T26]  ret_from_fork+0x3fc/0x770
[  388.227436][   T26]  ? __pfx_ret_from_fork+0x10/0x10
[  388.227457][   T26]  ? __switch_to_asm+0x39/0x70
[  388.227473][   T26]  ? __switch_to_asm+0x33/0x70
[  388.227489][   T26]  ? __pfx_kthread+0x10/0x10
[  388.227506][   T26]  ret_from_fork_asm+0x1a/0x30
[  388.227540][   T26]  </TASK>
[  388.227546][   T26] F2FS-fs (loop4): Stopped filesystem due to reason: 3
[  388.525899][T14476] loop5: detected capacity change from 0 to 8192
[  388.817379][T14483] netlink: 2048 bytes leftover after parsing attributes in process `syz.4.3511'.
[  388.824361][T14483] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3511'.
[  389.060082][  T792] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  389.212375][  T792] usb 6-1: config index 0 descriptor too short (expected 32820, got 52)
[  389.216316][  T792] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  389.220772][  T792] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  389.224951][  T792] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[  389.231000][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  389.234869][  T792] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[  389.239220][  T792] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  389.250314][  T792] usb 6-1: New USB device found, idVendor=0ccd, idProduct=0035, bcdDevice= a.97
[  389.253344][  T792] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  389.256454][  T792] usb 6-1: Product: syz
[  389.258077][  T792] usb 6-1: Manufacturer: syz
[  389.260113][  T792] usb 6-1: SerialNumber: syz
[  389.263490][  T792] usb 6-1: config 0 descriptor??
[  389.269417][  T792] usb 6-1: Quirk or no altset; falling back to MIDI 1.0
[  389.342944][  T792] snd-usb-audio 6-1:0.0: probe with driver snd-usb-audio failed with error -12
[  389.371232][ T6279] udevd[6279]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  389.623344][ T5899] usb 6-1: USB disconnect, device number 15
[  391.064458][T14543] input: syz1 as /devices/virtual/input/input15
[  391.714669][T14565] loop5: detected capacity change from 0 to 4096
[  391.719743][T14565] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512).
[  391.741307][T14565] ntfs3(loop5): $Secure::$SDH is corrupted.
[  391.743795][T14565] ntfs3(loop5): Failed to initialize $Secure (-22).
[  391.930743][T14563] loop4: detected capacity change from 0 to 32768
[  391.940344][T14563] ocfs2: Slot 0 on device (7,4) was already allocated to this node!
[  391.947440][T14563] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode.
[  392.042439][ T6564] ocfs2: Unmounting device (7,4) on (node local)
[  392.745467][T14588] : left promiscuous mode
[  393.134396][T14598] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3561'.
[  393.279892][T14612] loop4: detected capacity change from 0 to 128
[  393.283983][T14612] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  393.288056][T14612] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  393.440134][T14620] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3571'.
[  393.503283][T14622] loop4: detected capacity change from 0 to 512
[  393.511086][T14622] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  393.517030][T14622] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended
[  393.521587][T14622] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c01c, mo2=0002]
[  393.525195][T14622] System zones: 0-2, 18-18, 34-34
[  393.529237][T14622] EXT4-fs error (device loop4): ext4_orphan_get:1392: inode #15: comm syz.4.3572: iget: bad i_size value: 360287970189639680
[  393.535120][T14622] EXT4-fs error (device loop4): ext4_orphan_get:1397: comm syz.4.3572: couldn't read orphan inode 15 (err -117)
[  393.543431][T14622] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  393.573459][ T6564] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  393.911522][T14640] loop4: detected capacity change from 0 to 512
[  393.926845][T14640] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended
[  393.930555][T14640] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem
[  393.941261][T14640] EXT4-fs (loop4): orphan cleanup on readonly fs
[  393.943912][T14640] EXT4-fs error (device loop4): ext4_orphan_get:1418: comm syz.4.3578: bad orphan inode 15
[  393.948875][T14640] ext4_test_bit(bit=14, block=18) = 1
[  393.951192][T14640] is_bad_inode(inode)=0
[  393.952944][T14640] NEXT_ORPHAN(inode)=1023
[  393.954476][T14640] max_ino=32
[  393.957456][T14640] i_nlink=0
[  393.964020][T14640] EXT4-fs error (device loop4): ext4_xattr_delete_inode:2962: inode #15: comm syz.4.3578: corrupted xattr block 19: ea_inode specified without ea_inode feature enabled
[  393.974027][T14640] EXT4-fs warning (device loop4): ext4_evict_inode:274: xattr delete (err -117)
[  393.980992][T14640] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  394.010666][ T6564] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  394.360668][T14667] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3592'.
[  394.374171][T14667] unsupported nlmsg_type 40
[  394.413613][T14669] loop4: detected capacity change from 0 to 128
[  394.416673][T14669] FAT-fs (loop4): bogus number of reserved sectors
[  394.421192][T14669] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero
[  394.426966][T14669] FAT-fs (loop4): Can't find a valid FAT filesystem
[  394.458941][    C1] vcan0: j1939_tp_rxtimer: 0xffff888108c79400: rx timeout, send abort
[  394.469199][    C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888108c79400: 0x2f000: (3) A timeout occurred and this is the connection abort to close the session.
[  394.481739][T14614] vcan0: tx drop: invalid sa for name 0x0000000000000002
[  395.035686][T14683] loop5: detected capacity change from 0 to 8
[  395.068036][T14683] SQUASHFS error: xz decompression failed, data probably corrupt
[  395.074744][T14683] SQUASHFS error: Failed to read block 0x108: -5
[  395.077329][T14683] SQUASHFS error: Unable to read metadata cache entry [106]
[  395.080380][T14683] SQUASHFS error: Unable to read inode 0x11f
[  395.227876][T14687] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3601'.
[  395.239622][T14689] syzkaller1: entered promiscuous mode
[  395.241879][T14689] syzkaller1: entered allmulticast mode
[  395.630930][ T5889] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  395.664314][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3613'.
[  395.668533][T14712] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3613'.
[  395.720617][T14717] loop4: detected capacity change from 0 to 64
[  395.898245][ T5889] usb 6-1: Using ep0 maxpacket: 32
[  395.902451][ T5889] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  395.906251][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  395.910475][ T5889] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  395.913953][ T5889] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  395.917121][ T5889] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.922307][ T5889] usb 6-1: config 0 descriptor??
[  395.924964][T14696] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[  395.934253][ T5889] hub 6-1:0.0: USB hub found
[  396.059442][T14723] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3616'.
[  396.277897][ T5889] hub 6-1:0.0: config failed, can't read hub descriptor (err -22)
[  396.316727][ T5889] usbhid 6-1:0.0: can't add hid device: -71
[  396.322173][ T5889] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[  396.345570][ T5889] usb 6-1: USB disconnect, device number 16
[  396.800417][   T55] Bluetooth: hci3: sending frame failed (-49)
[  396.806773][ T5847] Bluetooth: hci3: Opcode 0x1003 failed: -49
[  397.092024][T14735] loop5: detected capacity change from 0 to 4096
[  397.106912][T14735] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  397.114975][T14735] ntfs3(loop5): Failed to load $Extend (-22).
[  397.116934][T14735] ntfs3(loop5): Failed to initialize $Extend.
[  397.137068][T14739] sctp: [Deprecated]: syz.0.3625 (pid 14739) Use of struct sctp_assoc_value in delayed_ack socket option.
[  397.137068][T14739] Use struct sctp_sack_info instead
[  397.297767][T14749] veth1_to_bond: entered allmulticast mode
[  397.300407][T14748] veth1_to_bond: left allmulticast mode
[  397.357273][T14751] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3631'.
[  397.363187][T14751] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3631'.
[  397.420644][T14753] overlayfs: option "index=on" is useless in a non-upper mount, ignore
[  397.424152][T14753] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it.
[  397.427881][T14753] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null.
[  397.434938][T14753] overlayfs: missing 'lowerdir'
[  397.743412][   T33] kauditd_printk_skb: 50 callbacks suppressed
[  397.743428][   T33] audit: type=1326 audit(1755246568.300:196): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.4.3636" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05fef8ebe9 code=0x7ffc0000
[  397.975036][T14774] loop5: detected capacity change from 0 to 1024
[  398.089284][T14774] hfsplus: xattr searching failed
[  398.248693][T14764] loop4: detected capacity change from 0 to 32768
[  398.297011][T14764] read_mapping_page failed!
[  398.300758][T14764] ERROR: (device loop4): txCommit: 
[  398.300758][T14764] 
[  398.317881][ T1092] hfsplus: bad catalog file entry
[  398.324163][ T1092] hfsplus: b-tree write err: -5, ino 3
[  398.511256][   T33] audit: type=1326 audit(1755246568.300:197): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.4.3636" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05fef8ebe9 code=0x7ffc0000
[  398.520535][   T33] audit: type=1326 audit(1755246568.300:198): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.4.3636" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05fef8ebe9 code=0x7ffc0000
[  398.528935][   T33] audit: type=1326 audit(1755246568.300:199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.4.3636" exe="/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f05fef8ebe9 code=0x7ffc0000
[  398.537520][   T33] audit: type=1326 audit(1755246568.310:200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.4.3636" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05fef8ebe9 code=0x7ffc0000
[  398.546530][   T33] audit: type=1326 audit(1755246568.310:201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.4.3636" exe="/syz-executor" sig=0 arch=c000003e syscall=283 compat=0 ip=0x7f05fef8ebe9 code=0x7ffc0000
[  398.556134][   T33] audit: type=1326 audit(1755246568.310:202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.4.3636" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05fef8ebe9 code=0x7ffc0000
[  398.564919][   T33] audit: type=1326 audit(1755246568.320:203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.4.3636" exe="/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f05fef8ebe9 code=0x7ffc0000
[  398.573683][   T33] audit: type=1326 audit(1755246568.320:204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.4.3636" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05fef8ebe9 code=0x7ffc0000
[  398.582419][   T33] audit: type=1326 audit(1755246568.320:205): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14760 comm="syz.4.3636" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f05fef8d550 code=0x7ffc0000
[  398.959120][T14809] netlink: 'syz.5.3657': attribute type 2 has an invalid length.
[  398.962273][T14809] netlink: 132 bytes leftover after parsing attributes in process `syz.5.3657'.
[  399.187993][T14801] loop4: detected capacity change from 0 to 32768
[  399.197245][T14801] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.3648 (14801)
[  399.231594][T14801] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  399.235145][T14801] BTRFS info (device loop4): using crc32c (crc32c-lib) checksum algorithm
[  399.237865][T14801] BTRFS info (device loop4): using free-space-tree
[  399.529360][ T6564] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  400.055298][T14874] loop4: detected capacity change from 0 to 256
[  400.077477][T14874] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xc2dc8e67, utbl_chksum : 0xe619d30d)
[  400.206185][T14878] loop4: detected capacity change from 0 to 512
[  400.236530][T14878] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback.
[  400.241980][T14878] ext4 filesystem being mounted at /1022/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  400.306103][ T6564] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000d40000.
[  400.702931][T14883] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3682'.
[  401.310180][T14912] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[  401.314419][T14912] bridge2: entered allmulticast mode
[  401.630102][T14926] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3705'.
[  401.733641][   T55] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  401.742357][   T55] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  401.759118][   T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  401.767198][   T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  401.773101][   T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  402.087977][ T5862] dvmrp5 (unregistering): left allmulticast mode
[  402.182064][ T5862] bond0 (unregistering): Released all slaves
[  402.341604][ T5862] bond1 (unregistering): Released all slaves
[  402.621470][ T5862] hsr_slave_0: left promiscuous mode
[  402.624555][ T5862] hsr_slave_1: left promiscuous mode
[  402.627489][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_0
[  402.632537][ T5862] batman_adv: batadv0: Removing interface: batadv_slave_1
[  402.649859][ T5862] pimreg (unregistering): left allmulticast mode
[  402.820655][T14934] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  402.990345][T14934] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  402.994338][T14934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  403.015329][T14934] usb 6-1: config 0 descriptor??
[  403.026652][T14934] cp210x 6-1:0.0: cp210x converter detected
[  403.116654][ T5862] team0 (unregistering): Port device team_slave_1 removed
[  403.173060][ T5862] team0 (unregistering): Port device team_slave_0 removed
[  403.436206][T14934] cp210x 6-1:0.0: failed to get vendor val 0x000e size 3: -32
[  403.442937][T14934] usb 6-1: cp210x converter now attached to ttyUSB0
[  403.641422][ T5899] usb 6-1: USB disconnect, device number 17
[  403.665377][ T5899] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  403.686930][ T5899] cp210x 6-1:0.0: device disconnected
[  403.754208][T14930] chnl_net:caif_netlink_parms(): no params data found
[  403.846658][ T5847] Bluetooth: hci1: command tx timeout
[  403.847835][T14930] bridge0: port 1(bridge_slave_0) entered blocking state
[  403.854566][T14930] bridge0: port 1(bridge_slave_0) entered disabled state
[  403.857098][T14930] bridge_slave_0: entered allmulticast mode
[  403.860048][T14930] bridge_slave_0: entered promiscuous mode
[  403.864747][T14930] bridge0: port 2(bridge_slave_1) entered blocking state
[  403.867166][T14930] bridge0: port 2(bridge_slave_1) entered disabled state
[  403.871281][T14930] bridge_slave_1: entered allmulticast mode
[  403.874829][T14930] bridge_slave_1: entered promiscuous mode
[  403.879568][T14949] sctp: [Deprecated]: syz.0.3710 (pid 14949) Use of struct sctp_assoc_value in delayed_ack socket option.
[  403.879568][T14949] Use struct sctp_sack_info instead
[  403.945001][T14930] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  403.954602][T14930] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  403.970706][T14951] netlink: 'syz.0.3711': attribute type 1 has an invalid length.
[  404.019085][T14930] team0: Port device team_slave_0 added
[  404.024079][T14930] team0: Port device team_slave_1 added
[  404.057168][T14930] batman_adv: batadv0: Adding interface: batadv_slave_0
[  404.060453][T14930] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  404.070115][T14930] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  404.076034][T14930] batman_adv: batadv0: Adding interface: batadv_slave_1
[  404.078454][T14930] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  404.088780][T14930] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  404.122913][T14930] hsr_slave_0: entered promiscuous mode
[  404.125810][T14930] hsr_slave_1: entered promiscuous mode
[  404.129939][T14930] debugfs: 'hsr0' already exists in 'hsr'
[  404.132400][T14930] Cannot create hsr debugfs directory
[  404.277619][T14956] batadv0: entered promiscuous mode
[  404.280947][T14956] macsec1: entered allmulticast mode
[  404.282754][T14956] batadv0: entered allmulticast mode
[  404.299464][T14956] batadv0: left allmulticast mode
[  404.301523][T14956] batadv0: left promiscuous mode
[  404.705721][T14930] netdevsim netdevsim6 netdevsim0: renamed from eth0
[  404.711368][T14930] netdevsim netdevsim6 netdevsim1: renamed from eth1
[  404.717562][T14930] netdevsim netdevsim6 netdevsim2: renamed from eth2
[  404.723561][T14930] netdevsim netdevsim6 netdevsim3: renamed from eth3
[  404.752584][T14930] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.755218][T14930] bridge0: port 2(bridge_slave_1) entered forwarding state
[  404.758202][T14930] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.760903][T14930] bridge0: port 1(bridge_slave_0) entered forwarding state
[  404.803189][   T32] bridge0: port 1(bridge_slave_0) entered disabled state
[  404.812027][   T32] bridge0: port 2(bridge_slave_1) entered disabled state
[  404.880223][T14930] 8021q: adding VLAN 0 to HW filter on device bond0
[  404.892961][T14930] 8021q: adding VLAN 0 to HW filter on device team0
[  404.903614][   T53] bridge0: port 1(bridge_slave_0) entered blocking state
[  404.906528][   T53] bridge0: port 1(bridge_slave_0) entered forwarding state
[  404.915854][   T53] bridge0: port 2(bridge_slave_1) entered blocking state
[  404.918264][   T53] bridge0: port 2(bridge_slave_1) entered forwarding state
[  405.182164][T14930] 8021q: adding VLAN 0 to HW filter on device batadv0
[  405.598950][T14930] veth0_vlan: entered promiscuous mode
[  405.606256][T14930] veth1_vlan: entered promiscuous mode
[  405.624237][T14930] veth0_macvtap: entered promiscuous mode
[  405.630835][T14930] veth1_macvtap: entered promiscuous mode
[  405.660405][T14930] batman_adv: batadv0: Interface activated: batadv_slave_0
[  405.685186][T14930] batman_adv: batadv0: Interface activated: batadv_slave_1
[  405.695849][T14936] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  405.702228][T14936] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  405.707096][T14936] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  405.710719][T14936] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  405.917028][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  405.920152][   T55] Bluetooth: hci1: command tx timeout
[  405.933011][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.961079][   T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  405.963798][   T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  405.998337][   T55] Bluetooth: hci0: command 0x0406 tx timeout
[  406.355723][T15032] loop6: detected capacity change from 0 to 2048
[  406.390208][T15032] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  406.394424][T15032] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  406.415161][T15032] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm syz.6.3732: bg 0: block 345: padding at end of block bitmap is not set
[  406.443760][T14930] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  406.613421][T15043] netlink: 'syz.6.3736': attribute type 1 has an invalid length.
[  406.616598][T15043] netlink: 'syz.6.3736': attribute type 1 has an invalid length.
[  406.682672][T15047] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3738'.
[  406.686141][T15047] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3738'.
[  406.690641][T15047] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3738'.
[  406.701315][T15047] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3738'.
[  406.704730][T15047] netlink: 5 bytes leftover after parsing attributes in process `syz.6.3738'.
[  407.046058][T15069] team0: Port device team_slave_0 removed
[  407.171453][ T5899] usb 7-1: new high-speed USB device number 2 using dummy_hcd
[  407.354935][ T5899] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  407.374459][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  407.377743][ T5899] usb 7-1: Product: syz
[  407.386276][ T5899] usb 7-1: Manufacturer: syz
[  407.390146][ T5899] usb 7-1: SerialNumber: syz
[  407.456668][T15096] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  407.504277][T15101] overlayfs: failed to clone upperpath
[  407.777542][T15112] loop5: detected capacity change from 0 to 4096
[  407.783206][T15112] ntfs3(loop5): Different NTFS sector size (4096) and media sector size (512).
[  408.055095][ T5847] Bluetooth: hci1: command tx timeout
[  408.085215][T15112] ntfs3(loop5): ino=19, mi_enum_attr
[  408.087448][T15112] ntfs3(loop5): Mark volume as dirty due to NTFS errors
[  408.110349][T15112] ntfs3(loop5): failed to convert "c46c" to maccyrillic
[  408.115806][T15112] ntfs3(loop5): ino=20, mi_enum_attr
[  408.372336][T15128] loop5: detected capacity change from 0 to 128
[  408.410074][T15128] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  408.416924][T15128] ext4 filesystem being mounted at /399/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  408.446481][T11713] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  408.661541][T15143] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3782'.
[  408.675113][ T5899] cdc_ncm 7-1:1.0: MAC-Address: 42:42:42:42:42:42
[  408.677818][ T5899] cdc_ncm 7-1:1.0: dwNtbInMaxSize=0 is too small. Using 2048
[  408.685375][ T5899] cdc_ncm 7-1:1.0: setting rx_max = 2048
[  408.876379][ T5899] cdc_ncm 7-1:1.0: setting tx_max = 184
[  408.932103][ T5899] cdc_ncm 7-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.6-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  408.963959][ T5899] usb 7-1: USB disconnect, device number 2
[  408.982523][ T5899] cdc_ncm 7-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.6-1, CDC NCM (NO ZLP)
[  410.085227][ T5847] Bluetooth: hci1: command tx timeout
[  410.543253][T15170] loop5: detected capacity change from 0 to 32768
[  411.150883][T15177] loop6: detected capacity change from 0 to 32768
[  411.189272][T15177] JBD2: Ignoring recovery information on journal
[  411.231507][T15177] ocfs2: Mounting device (7,6) on (node local, slot 0) with writeback data mode.
[  411.306492][T14930] ocfs2: Unmounting device (7,6) on (node local)
[  411.396648][T15196] loop4: detected capacity change from 0 to 524255232
[  411.481670][T15199] loop4: detected capacity change from 524255232 to 524287956
[  412.991559][T15211] loop6: detected capacity change from 0 to 32768
[  412.995717][T15211] XFS: attr2 mount option is deprecated.
[  413.025075][T15211] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  413.061415][T15211] XFS (loop6): Ending clean mount
[  413.089169][T15211] XFS (loop6): Quotacheck needed: Please wait.
[  413.168358][T15211] XFS (loop6): Quotacheck: Done.
[  413.194246][T14930] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  413.267429][T15231] netlink: 108 bytes leftover after parsing attributes in process `syz.0.3817'.
[  413.272163][T15231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3817'.
[  413.314076][T15233] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3818'.
[  413.318076][T15233] netlink: 'syz.0.3818': attribute type 21 has an invalid length.
[  413.440832][T15241] sit0: entered promiscuous mode
[  413.463544][T15241] netlink: 21 bytes leftover after parsing attributes in process `syz.0.3820'.
[  414.593362][T15256] loop6: detected capacity change from 0 to 32768
[  414.596958][T15256] XFS: ikeep mount option is deprecated.
[  414.602309][T15256] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  414.621446][T15256] XFS (loop6): Ending clean mount
[  414.625828][T15256] XFS (loop6): Quotacheck needed: Please wait.
[  414.663805][T15256] XFS (loop6): Quotacheck: Done.
[  414.693707][T14930] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  415.076270][T15280] netlink: 'syz.6.3835': attribute type 3 has an invalid length.
[  415.080314][T15280] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.3835'.
[  415.263814][T15288] tunl0: entered promiscuous mode
[  415.275547][T15288] netlink: 'syz.0.3839': attribute type 4 has an invalid length.
[  415.281657][T15288] netlink: 9 bytes leftover after parsing attributes in process `syz.0.3839'.
[  415.303316][T15290] loop6: detected capacity change from 0 to 1024
[  415.318806][T15290] hfsplus: Unknown parameter ''
[  415.512964][T15296] netlink: 36 bytes leftover after parsing attributes in process `syz.0.3842'.
[  415.569716][T15298] ptrace attach of "/syz-executor exec"[5854] was attempted by ""[15298]
[  416.797645][T15314] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  416.803041][T15314] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  416.953929][T15314] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  416.969754][T15314] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.219160][  T792] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  417.355402][T15314] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  417.359585][T15314] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.403599][T15314] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0
[  417.407556][T15314] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  417.440703][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  417.445127][  T792] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  417.450759][  T792] usb 6-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.00
[  417.453738][  T792] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  417.462223][  T792] usb 6-1: config 0 descriptor??
[  417.507461][ T5865] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0
[  417.511387][ T5865] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[  417.527085][ T5865] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0
[  417.530538][ T5865] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[  417.548993][ T5865] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0
[  417.552191][ T5865] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[  417.563880][ T5865] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0
[  417.567079][ T5865] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[  417.879181][  T792] arvo 0003:1E7D:30D4.0008: unknown main item tag 0x0
[  417.892202][  T792] arvo 0003:1E7D:30D4.0008: hidraw0: USB HID v0.00 Device [HID 1e7d:30d4] on usb-dummy_hcd.5-1/input0
[  418.084116][  T792] arvo 0003:1E7D:30D4.0008: couldn't init struct arvo_device
[  418.094682][  T792] arvo 0003:1E7D:30D4.0008: couldn't install keyboard
[  418.108773][  T792] arvo 0003:1E7D:30D4.0008: probe with driver arvo failed with error -71
[  418.124567][  T792] usb 6-1: USB disconnect, device number 18
[  419.252940][T15355] ./file0: Can't open blockdev
[  419.642872][T15366] overlayfs: conflicting options: nfs_export=on,metacopy=on
[  420.008673][ T5914] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  420.181903][ T5914] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  420.186066][ T5914] usb 6-1: New USB device found, idVendor=0e8f, idProduct=0012, bcdDevice= 0.00
[  420.189943][ T5914] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  420.463866][ T5914] usb 6-1: config 0 descriptor??
[  420.926894][ T5914] greenasia 0003:0E8F:0012.0009: hidraw0: USB HID v0.00 Device [HID 0e8f:0012] on usb-dummy_hcd.5-1/input0
[  420.932286][ T5914] greenasia 0003:0E8F:0012.0009: no inputs found
[  421.131886][ T5914] usb 6-1: USB disconnect, device number 19
[  422.527781][T15420] loop6: detected capacity change from 0 to 512
[  422.593283][T15420] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  422.615215][T15420] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  422.670720][T14930] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  422.804322][T15438] Bluetooth: MGMT ver 1.23
[  422.833424][   T33] kauditd_printk_skb: 36 callbacks suppressed
[  422.833442][   T33] audit: type=1326 audit(1755246593.390:242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15439 comm="syz.0.3905" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x0
[  424.035812][T15464] loop5: detected capacity change from 0 to 4096
[  424.041878][T15464] ntfs3(loop5): Different NTFS sector size (2048) and media sector size (512).
[  424.495399][T15470] loop6: detected capacity change from 0 to 128
[  424.512165][T15470] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  424.517452][T15470] ext4 filesystem being mounted at /64/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  424.553727][T14930] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  424.685557][T15474] loop6: detected capacity change from 0 to 4096
[  424.705028][T15474] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  424.763326][T15474] ntfs3(loop6): Mark volume as dirty due to NTFS errors
[  424.779259][T15474] ntfs3(loop6): Failed to load $Extend (-22).
[  424.781791][T15474] ntfs3(loop6): Failed to initialize $Extend.
[  424.865924][T15467] loop5: detected capacity change from 0 to 32768
[  424.897609][T15467] JBD2: Ignoring recovery information on journal
[  424.935719][T15481] netlink: 'syz.6.3922': attribute type 8 has an invalid length.
[  424.997184][T15467] ocfs2: Mounting device (7,5) on (node local, slot 0) with writeback data mode.
[  425.124440][T11713] ocfs2: Unmounting device (7,5) on (node local)
[  426.168071][T15505] loop5: detected capacity change from 0 to 512
[  426.235893][T15505] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  426.242709][T15505] ext4 filesystem being mounted at /443/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  426.253504][T15505] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.3930: corrupted inode contents
[  426.311993][T15505] EXT4-fs error (device loop5): ext4_dirty_inode:6538: inode #2: comm syz.5.3930: mark_inode_dirty error
[  426.317399][T15505] EXT4-fs error (device loop5): ext4_do_update_inode:5653: inode #2: comm syz.5.3930: corrupted inode contents
[  426.326019][T15505] EXT4-fs error (device loop5): __ext4_ext_dirty:206: inode #2: comm syz.5.3930: mark_inode_dirty error
[  426.420986][T11713] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  426.581514][T15517] loop5: detected capacity change from 0 to 8192
[  426.949932][T15530] loop5: detected capacity change from 0 to 4096
[  427.387601][T15547] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3942'.
[  427.554985][T15553] loop5: detected capacity change from 0 to 1024
[  427.844078][   T33] audit: type=1800 audit(1755246598.400:243): pid=15553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.3944" name="file1" dev="loop5" ino=20 res=0 errno=0
[  429.868332][T14934] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  430.033208][T14934] usb 6-1: New USB device found, idVendor=0b95, idProduct=772b, bcdDevice=a2.4c
[  430.036753][T14934] usb 6-1: New USB device strings: Mfr=24, Product=2, SerialNumber=3
[  430.049034][T14934] usb 6-1: Product: syz
[  430.050609][T14934] usb 6-1: Manufacturer: syz
[  430.062888][T14934] usb 6-1: SerialNumber: syz
[  430.079697][T14934] usb 6-1: config 0 descriptor??
[  430.339335][T15605] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[  430.349694][ T5879] bond0: (slave bond_slave_0): interface is now down
[  430.353130][ T5879] bond0: (slave bond_slave_1): interface is now down
[  430.394823][ T5879] bond0: now running without any active interface!
[  430.468566][T15611] netlink: 209832 bytes leftover after parsing attributes in process `syz.6.3968'.
[  430.511297][T14934] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -32
[  430.525954][T14934] asix 6-1:0.0: probe with driver asix failed with error -32
[  430.533150][T14934] usb 6-1: USB disconnect, device number 20
[  431.260864][T15622] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'syz0'
[  431.366105][T15627] netlink: 'syz.6.3975': attribute type 5 has an invalid length.
[  431.370435][T15627] netlink: 'syz.6.3975': attribute type 5 has an invalid length.
[  431.373188][T15627] netlink: 3657 bytes leftover after parsing attributes in process `syz.6.3975'.
[  431.794765][T15640] loop5: detected capacity change from 0 to 32768
[  431.980131][T15640] bcachefs (loop5): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  431.980157][T15640]   allowing incompatible features above 0.0: (unknown version)
[  431.980167][T15640]   features: 
[  431.996064][T15640] bcachefs (loop5): Using encoding defined by superblock: utf8-12.1.0
[  431.999789][T15640] bcachefs (loop5): initializing new filesystem
[  432.033688][T15640] bcachefs (loop5): going read-write
[  432.052524][T15640] bcachefs (loop5): marking superblocks
[  432.102933][T15640] bcachefs (loop5): initializing freespace
[  432.120333][T15640] bcachefs (loop5): done initializing freespace
[  432.131397][T15640] bcachefs (loop5): reading snapshots table
[  432.133455][T15640] bcachefs (loop5): reading snapshots done
[  432.193234][T15640] bcachefs (loop5): done starting filesystem
[  432.462903][T11713] bcachefs (loop5): shutting down
[  432.464943][T11713] bcachefs (loop5): going read-only
[  432.466969][T11713] bcachefs (loop5): finished waiting for writes to stop
[  432.503082][T11713] bcachefs (loop5): flushing journal and stopping allocators, journal seq 3
[  432.513973][T15676] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3994'.
[  432.630769][T11713] bcachefs (loop5): flushing journal and stopping allocators complete, journal seq 3
[  432.636679][T11713] bcachefs (loop5): clean shutdown complete, journal seq 4
[  432.641887][T11713] bcachefs (loop5): marking filesystem clean
[  432.689767][T11713] bcachefs (loop5): shutdown complete
[  432.793279][T15685] overlayfs: failed to clone upperpath
[  435.891147][T15721] loop5: detected capacity change from 0 to 262144
[  435.955244][T15721] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  435.960237][T15721] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5
[  436.270563][T15742] loop6: detected capacity change from 0 to 512
[  436.279256][T15742] EXT4-fs: Ignoring removed mblk_io_submit option
[  436.287143][T15742] EXT4-fs (loop6): ext4_check_descriptors: Block bitmap for group 0 overlaps superblock
[  436.310963][T15742] EXT4-fs (loop6): revision level too high, forcing read-only mode
[  436.320550][T15742] EXT4-fs (loop6): orphan cleanup on readonly fs
[  436.343042][T15742] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:483: comm syz.6.4021: Invalid block bitmap block 0 in block_group 0
[  436.354801][T15742] EXT4-fs (loop6): Remounting filesystem read-only
[  436.359110][T15742] Quota error (device loop6): write_blk: dquota write failed
[  436.362492][T15742] Quota error (device loop6): write_blk: dquota write failed
[  436.365976][T15742] Quota error (device loop6): qtree_write_dquot: Error -28 occurred while creating quota
[  436.370146][T15742] EXT4-fs (loop6): 1 orphan inode deleted
[  436.374271][T15742] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback.
[  436.415016][T14930] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  436.877611][T15762] loop6: detected capacity change from 0 to 128
[  436.899851][T15762] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  436.917198][T15762] ext4 filesystem being mounted at /114/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  436.978952][   T33] audit: type=1800 audit(1755246607.540:244): pid=15762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4030" name="file1" dev="loop6" ino=12 res=0 errno=0
[  437.062643][T14930] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  437.292563][T15771] netlink: 6 bytes leftover after parsing attributes in process `syz.6.4033'.
[  437.317311][T15771] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[  438.194394][T15782] loop5: detected capacity change from 0 to 16
[  438.202952][T15782] erofs (device loop5): rootino(nid 36) is not a directory(i_mode 26000)
[  438.613809][T15790] loop5: detected capacity change from 0 to 256
[  438.690342][T15790] FAT-fs (loop5): Directory bread(block 64) failed
[  438.692555][T15790] FAT-fs (loop5): Directory bread(block 65) failed
[  438.694574][T15790] FAT-fs (loop5): Directory bread(block 66) failed
[  438.696568][T15790] FAT-fs (loop5): Directory bread(block 67) failed
[  438.704298][T15790] FAT-fs (loop5): Directory bread(block 68) failed
[  438.706607][T15790] FAT-fs (loop5): Directory bread(block 69) failed
[  438.711303][T15790] FAT-fs (loop5): Directory bread(block 70) failed
[  438.713748][T15790] FAT-fs (loop5): Directory bread(block 71) failed
[  438.716231][T15790] FAT-fs (loop5): Directory bread(block 72) failed
[  438.725838][T15790] FAT-fs (loop5): Directory bread(block 73) failed
[  438.804038][T15802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4044'.
[  438.807923][T15802] netlink: 4 bytes leftover after parsing attributes in process `syz.5.4044'.
[  439.012436][T15815] loop6: detected capacity change from 0 to 1024
[  439.488489][  T792] usb 7-1: new high-speed USB device number 3 using dummy_hcd
[  439.727739][T15837] netlink: 'syz.0.4060': attribute type 4 has an invalid length.
[  439.760578][    C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured!
[  439.762409][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  439.766217][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  439.858570][  T792] usb 7-1: Using ep0 maxpacket: 32
[  439.862789][  T792] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 102, changing to 10
[  439.867599][  T792] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24624, setting to 1024
[  439.873858][  T792] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  439.882132][  T792] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22
[  439.885977][  T792] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131
[  439.890911][  T792] usb 7-1: Product: syz
[  439.893637][  T792] usb 7-1: Manufacturer: syz
[  439.895725][  T792] usb 7-1: SerialNumber: syz
[  439.911199][  T792] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input17
[  440.155262][T15151] usb 7-1: USB disconnect, device number 3
[  440.195661][T15151] appletouch 7-1:1.0: input: appletouch disconnected
[  440.991681][T15875] bridge2: entered promiscuous mode
[  441.101605][T15884] loop6: detected capacity change from 0 to 4096
[  441.192165][T15889] NILFS (loop6): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  441.888798][T15900] loop6: detected capacity change from 0 to 128
[  442.149326][T15909] netlink: 76 bytes leftover after parsing attributes in process `syz.0.4089'.
[  442.218070][T15915] netlink: 'syz.5.4094': attribute type 11 has an invalid length.
[  442.313696][T15921] netlink: 180 bytes leftover after parsing attributes in process `syz.6.4097'.
[  442.380511][T15925] loop6: detected capacity change from 0 to 8
[  442.515776][T15931] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4102'.
[  442.600615][T15934] tipc: Failed to remove unknown binding: 66,1,1/0:1717748654/1717748656
[  442.612460][T15934] tipc: Failed to remove unknown binding: 66,1,1/0:1717748654/1717748656
[  442.619017][T15934] tipc: Failed to remove unknown binding: 66,1,1/0:1717748654/1717748656
[  442.689050][T15939] loop6: detected capacity change from 0 to 128
[  442.707390][T15939] EXT4-fs (loop6): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  442.713051][T15939] ext4 filesystem being mounted at /140/mnt supports timestamps until 2038-01-19 (0x7fffffff)
[  442.753275][T14930] EXT4-fs (loop6): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  443.019692][T15960] serio: Serial port ptm0
[  443.342674][T15971] loop6: detected capacity change from 0 to 32768
[  443.349824][T15971] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4121 (15971)
[  443.363442][T15971] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  443.459339][T15971] BTRFS info (device loop6): using crc32c (crc32c-lib) checksum algorithm
[  443.470844][T15971] BTRFS info (device loop6): using free-space-tree
[  443.515236][T14934] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  443.975632][T14934] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  443.984123][T14934] usb 6-1: config 0 interface 0 altsetting 13 endpoint 0x81 has invalid wMaxPacketSize 0
[  443.987172][T14934] usb 6-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  443.991224][T14934] usb 6-1: config 0 interface 0 has no altsetting 0
[  443.993285][T14934] usb 6-1: New USB device found, idVendor=0b05, idProduct=1abe, bcdDevice= 0.00
[  444.021079][T14934] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  444.035695][T14934] usb 6-1: config 0 descriptor??
[  444.085300][   T33] audit: type=1804 audit(1755247127.556:245): pid=15971 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.4121" name="/newroot/146/file1/file1" dev="loop6" ino=260 res=1 errno=0
[  444.134007][T14930] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf
[  444.505344][T14934] hid (null): report_id 0 is invalid
[  444.511612][T14934] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0
[  444.513860][T14934] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0
[  444.516036][T14934] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0
[  444.521662][T14934] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0
[  444.524374][T14934] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0
[  444.526865][T14934] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0
[  444.547907][T14934] asus 0003:0B05:1ABE.000A: unknown main item tag 0x0
[  444.552133][T14934] asus 0003:0B05:1ABE.000A: report_id 0 is invalid
[  444.554232][T14934] asus 0003:0B05:1ABE.000A: item 0 1 1 8 parsing failed
[  444.556818][T14934] asus 0003:0B05:1ABE.000A: Asus hid parse failed: -22
[  444.567246][T14934] asus 0003:0B05:1ABE.000A: probe with driver asus failed with error -22
[  444.756778][T14934] usb 6-1: USB disconnect, device number 21
[  444.798898][T16014] loop6: detected capacity change from 0 to 32768
[  445.114449][T16014] bcachefs (loop6): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names
[  445.114465][T16014]   allowing incompatible features above 0.0: (unknown version)
[  445.114470][T16014]   features: 
[  445.126035][T16014] bcachefs (loop6): Using encoding defined by superblock: utf8-12.1.0
[  445.129153][T16014] bcachefs (loop6): initializing new filesystem
[  445.137370][T16014] bcachefs (loop6): going read-write
[  445.146428][T16014] bcachefs (loop6): marking superblocks
[  445.177749][T16014] bcachefs (loop6): initializing freespace
[  445.192186][T16014] bcachefs (loop6): done initializing freespace
[  445.200233][T16014] bcachefs (loop6): reading snapshots table
[  445.202267][T16014] bcachefs (loop6): reading snapshots done
[  445.235655][T16014] bcachefs (loop6): done starting filesystem
[  445.422302][T14930] bcachefs (loop6): shutting down
[  445.424555][T14930] bcachefs (loop6): going read-only
[  445.426700][T14930] bcachefs (loop6): finished waiting for writes to stop
[  445.436181][T14930] bcachefs (loop6): flushing journal and stopping allocators, journal seq 3
[  445.498463][T14930] bcachefs (loop6): flushing journal and stopping allocators complete, journal seq 4
[  445.503176][T14930] bcachefs (loop6): clean shutdown complete, journal seq 5
[  445.507698][T14930] bcachefs (loop6): marking filesystem clean
[  445.606112][T14930] bcachefs (loop6): shutdown complete
[  445.646619][T16039] sctp: [Deprecated]: syz.0.4139 (pid 16039) Use of struct sctp_assoc_value in delayed_ack socket option.
[  445.646619][T16039] Use struct sctp_sack_info instead
[  447.298586][T16087] loop6: detected capacity change from 0 to 16
[  447.314257][T16087] erofs (device loop6): rootino(nid 36) is not a directory(i_mode 16700)
[  447.400394][ T5914] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  447.564727][ T5914] usb 6-1: unable to get BOS descriptor or descriptor too short
[  447.575634][ T5914] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  447.581923][ T5914] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  447.586531][ T5914] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[  447.595434][ T5914] usb 6-1: language id specifier not provided by device, defaulting to English
[  447.600199][T16100] 8021q: adding VLAN 0 to HW filter on device bond1
[  447.601267][ T5914] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  447.603979][T16100] team0: Port device bond1 added
[  447.607319][ T5914] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  447.612302][ T5914] usb 6-1: Product: syz
[  447.617424][ T5914] usb 6-1: Manufacturer: ᨕ昉ﺴꖂ쯍넊꿊퐃ﯻ뵫ਖ਼汢鏎餗␫芯ﰤ齐ജၥ仵챹苵弨鞆찠꛷异ⵡ✩빏󔏪
[  447.622791][ T5914] usb 6-1: SerialNumber: syz
[  447.699916][T16106] loop6: detected capacity change from 0 to 512
[  447.734225][T16106] EXT4-fs warning (device loop6): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value
[  447.739219][T16106] EXT4-fs warning (device loop6): dx_probe:849: Enable large directory feature to access it
[  447.742667][T16106] EXT4-fs warning (device loop6): dx_probe:934: inode #2: comm syz.6.4168: Corrupt directory, running e2fsck is recommended
[  447.754217][T16106] EXT4-fs (loop6): Cannot turn on journaled quota: type 1: error -12
[  447.760154][T16106] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.4168: corrupted in-inode xattr: invalid ea_ino
[  447.766034][T16106] EXT4-fs (loop6): Remounting filesystem read-only
[  447.771249][T16106] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  447.834291][T14930] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  447.861347][ T5914] usb 6-1: 0:2 : does not exist
[  447.929219][ T5914] usb 6-1: USB disconnect, device number 22
[  447.965644][T16114] netlink: 'syz.6.4170': attribute type 29 has an invalid length.
[  447.975338][T16114] netlink: 'syz.6.4170': attribute type 29 has an invalid length.
[  448.009070][T14501] udevd[14501]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  448.310939][T16135] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4181'.
[  448.330771][T16133] loop6: detected capacity change from 0 to 4096
[  448.335471][T16133] ntfs3(loop6): Different NTFS sector size (4096) and media sector size (512).
[  448.466868][T16141] dns_resolver: Unsupported content type (218)
[  449.005072][T16173] netlink: 32 bytes leftover after parsing attributes in process `syz.6.4200'.
[  449.109335][T16181] sg_write: process 1137 (syz.5.4204) changed security contexts after opening file descriptor, this is not allowed.
[  449.211744][T16187] netlink: 'syz.6.4207': attribute type 10 has an invalid length.
[  449.214910][T16187] netlink: 40 bytes leftover after parsing attributes in process `syz.6.4207'.
[  449.254656][T16187] team0: Port device geneve0 added
[  449.622253][T16201] loop6: detected capacity change from 0 to 512
[  449.633140][T16201] EXT4-fs: Ignoring removed bh option
[  449.640028][T16201] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem
[  449.713031][T16201] EXT4-fs (loop6): 1 truncate cleaned up
[  449.720693][T16201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  449.844815][T14930] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  449.896214][T16186] loop5: detected capacity change from 0 to 131072
[  449.899310][T16186] F2FS-fs (loop5): Wrong CP boundary, start(512) end(1536) blocks(0)
[  449.902134][T16186] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock
[  449.906345][T16186] F2FS-fs (loop5): invalid crc value
[  449.946864][T16186] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  449.955978][T16186] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0
[  449.958777][T16186] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4
[  449.973422][T16186] F2FS-fs (loop5): Stopped filesystem due to reason: 0
[  450.325871][T16222] loop5: detected capacity change from 0 to 1024
[  451.608358][T16264] loop5: detected capacity change from 0 to 2048
[  451.620096][T16264] NILFS (loop5): broken superblock, retrying with spare superblock (blocksize = 1024)
[  451.650760][T16265] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds
[  451.893452][T16267] loop5: detected capacity change from 0 to 32768
[  451.905838][T16267] bcachefs (/dev/loop5): error validating superblock: Invalid superblock layout type 7
[  451.922745][T16267] bcachefs: bch2_fs_get_tree() error: invalid_sb_layout_type
[  452.312437][T16282] netlink: 'syz.0.4248': attribute type 29 has an invalid length.
[  452.315664][T16282] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4248'.
[  452.556490][T16295] loop5: detected capacity change from 0 to 512
[  452.646316][T16295] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  452.652132][T16295] ext4 filesystem being mounted at /529/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  452.703711][T11713] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  452.800600][T11713] EXT4-fs error (device loop5): ext4_ext_check_inode:523: inode #11: comm syz-executor: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 0(0), depth 0(0)
[  453.502784][T16035] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  454.594663][   T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  454.599732][   T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  454.606960][   T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  454.611425][   T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  454.614296][   T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  454.636837][T16327] loop6: detected capacity change from 0 to 2048
[  454.642361][T16327] UDF-fs: error (device loop6): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[  454.649353][T16327] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  454.855677][T16334] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4268'.
[  454.859412][T16334] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4268'.
[  454.863690][T16334] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4268'.
[  454.900462][T16323] chnl_net:caif_netlink_parms(): no params data found
[  455.030506][T16323] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.035412][T16323] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.038191][T16323] bridge_slave_0: entered allmulticast mode
[  455.041518][T16323] bridge_slave_0: entered promiscuous mode
[  455.045845][T16323] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.053209][T16323] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.060097][T16323] bridge_slave_1: entered allmulticast mode
[  455.063647][T16323] bridge_slave_1: entered promiscuous mode
[  455.099667][T16323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  455.117598][T16323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  455.191105][T16323] team0: Port device team_slave_0 added
[  455.209081][T16323] team0: Port device team_slave_1 added
[  455.239778][T16323] batman_adv: batadv0: Adding interface: batadv_slave_0
[  455.242573][T16323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  455.254128][T16323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  455.261097][T16323] batman_adv: batadv0: Adding interface: batadv_slave_1
[  455.263868][T16323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  455.275254][T16323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  455.281732][T16350] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4274'.
[  455.385856][T16323] hsr_slave_0: entered promiscuous mode
[  455.392495][T16323] hsr_slave_1: entered promiscuous mode
[  455.399301][T16323] debugfs: 'hsr0' already exists in 'hsr'
[  455.401899][T16323] Cannot create hsr debugfs directory
[  455.448637][  T792] usb 7-1: new high-speed USB device number 4 using dummy_hcd
[  455.600624][  T792] usb 7-1: Using ep0 maxpacket: 8
[  455.617555][  T792] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  455.627154][  T792] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[  455.638966][  T792] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  455.653348][  T792] usb 7-1: config 0 descriptor??
[  455.744030][T16323] netdevsim netdevsim7 netdevsim0: renamed from eth0
[  455.754954][T16323] netdevsim netdevsim7 netdevsim1: renamed from eth1
[  455.761809][T16323] netdevsim netdevsim7 netdevsim2: renamed from eth2
[  455.768715][T16323] netdevsim netdevsim7 netdevsim3: renamed from eth3
[  455.812788][T16323] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.815681][T16323] bridge0: port 2(bridge_slave_1) entered forwarding state
[  455.818841][T16323] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.821674][T16323] bridge0: port 1(bridge_slave_0) entered forwarding state
[  455.879500][  T792] iowarrior 7-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[  455.916382][T15539] bridge0: port 1(bridge_slave_0) entered disabled state
[  455.920643][T15539] bridge0: port 2(bridge_slave_1) entered disabled state
[  455.939540][T16323] 8021q: adding VLAN 0 to HW filter on device bond0
[  455.959653][T16323] 8021q: adding VLAN 0 to HW filter on device team0
[  455.969156][T15539] bridge0: port 1(bridge_slave_0) entered blocking state
[  455.972079][T15539] bridge0: port 1(bridge_slave_0) entered forwarding state
[  455.982966][T15539] bridge0: port 2(bridge_slave_1) entered blocking state
[  455.986053][T15539] bridge0: port 2(bridge_slave_1) entered forwarding state
[  456.214987][T16323] 8021q: adding VLAN 0 to HW filter on device batadv0
[  456.313586][  T792] usb 7-1: USB disconnect, device number 4
[  456.396274][T16323] veth0_vlan: entered promiscuous mode
[  456.406452][T16323] veth1_vlan: entered promiscuous mode
[  456.430364][T16323] veth0_macvtap: entered promiscuous mode
[  456.444475][T16323] veth1_macvtap: entered promiscuous mode
[  456.456099][T16323] batman_adv: batadv0: Interface activated: batadv_slave_0
[  456.465605][T16323] batman_adv: batadv0: Interface activated: batadv_slave_1
[  456.488081][ T5879] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  456.504115][ T5879] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  456.548508][ T5879] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  456.564304][ T5879] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  456.700958][T15541] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.704243][T15541] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  456.743516][ T5847] Bluetooth: hci0: command tx timeout
[  456.773505][T15541] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  456.778406][T15541] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  457.817111][T16411] loop7: detected capacity change from 0 to 32768
[  457.844803][T16411] 
[  457.844803][T16411]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  457.844803][T16411] 
[  457.867106][T16411] JFS: metapage_get_blocks failed
[  457.873814][T16411] ERROR: (device loop7): release_metapage: metapage_write_one() failed
[  457.873814][T16411] 
[  457.880934][T16411] ERROR: (device loop7): diWrite: ixpxd invalid
[  457.880934][T16411] 
[  457.883893][T16411] ERROR: (device loop7): txCommit: 
[  457.883893][T16411] 
[  457.895437][T16411] ERROR: (device loop7): diWrite: ixpxd invalid
[  457.895437][T16411] 
[  457.899017][T16411] ERROR: (device loop7): txCommit: 
[  457.899017][T16411] 
[  458.422340][T16323] 
[  458.422340][T16323]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  458.422340][T16323] 
[  458.429237][T16323] 
[  458.429237][T16323]  ... Log Wrap ... Log Wrap ... Log Wrap ...
[  458.429237][T16323] 
[  458.558560][T16415] loop6: detected capacity change from 0 to 64
[  458.820136][ T5847] Bluetooth: hci0: command tx timeout
[  459.643513][T16428] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off.
[  459.649181][T16428] overlayfs: missing 'lowerdir'
[  460.249880][T16445] 9pnet_rdma: rdma_create_trans (16445): problem binding to privport: 13
[  460.531102][T16455] openvswitch: netlink: Duplicate or invalid key (type 0).
[  460.534200][T16455] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  460.599291][T16457] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4313'.
[  460.695994][T16463] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  460.704238][   T10] IPVS: starting estimator thread 0...
[  460.783353][T16477] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4321'.
[  460.790814][T16469] IPVS: using max 41 ests per chain, 98400 per kthread
[  460.897709][T16484] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[  460.901649][T16484] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[  460.920452][ T5847] Bluetooth: hci0: command tx timeout
[  461.002591][T16491] netlink: 36 bytes leftover after parsing attributes in process `syz.6.4329'.
[  461.318274][T16507] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  462.033092][T16529] netlink: 'syz.0.4345': attribute type 6 has an invalid length.
[  462.036353][T16529] netlink: 168 bytes leftover after parsing attributes in process `syz.0.4345'.
[  462.042466][   T33] audit: type=1326 audit(1755247145.172:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16528 comm="syz.0.4345" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x7ffc0000
[  462.049567][   T33] audit: type=1326 audit(1755247145.172:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16528 comm="syz.0.4345" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x7ffc0000
[  462.058853][   T33] audit: type=1326 audit(1755247145.212:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16528 comm="syz.0.4345" exe="/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f19ef98ebe9 code=0x7ffc0000
[  462.071588][   T33] audit: type=1326 audit(1755247145.212:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16528 comm="syz.0.4345" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x7ffc0000
[  462.084948][   T33] audit: type=1326 audit(1755247145.212:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16528 comm="syz.0.4345" exe="/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7f19ef98ebe9 code=0x7ffc0000
[  462.097190][   T33] audit: type=1326 audit(1755247145.222:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16528 comm="syz.0.4345" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x7ffc0000
[  462.343840][T15151] usb 7-1: new high-speed USB device number 5 using dummy_hcd
[  462.494073][T15151] usb 7-1: Using ep0 maxpacket: 8
[  462.498613][T15151] usb 7-1: unable to get BOS descriptor or descriptor too short
[  462.503140][T15151] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E
[  462.513267][T15151] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  462.520015][T15151] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  462.527917][T15151] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[  462.536595][T15151] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1
[  462.549905][T15151] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[  462.556151][T15151] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x31, changing to 0x1
[  462.568849][T15151] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 13364, setting to 64
[  462.581472][T15151] usb 7-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[  462.587167][T15151] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  462.595423][T15151] usb 7-1: Product: syz
[  462.599635][T15151] usb 7-1: Manufacturer: syz
[  462.604045][T15151] usb 7-1: SerialNumber: syz
[  462.611648][T15151] usb 7-1: config 0 descriptor??
[  462.618953][T16531] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22
[  462.626541][T15151] usb 7-1: Quirk or no altset; falling back to MIDI 1.0
[  462.757768][ T9873] udevd[9873]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  462.834635][T14934] usb 7-1: USB disconnect, device number 5
[  463.019982][ T5847] Bluetooth: hci0: command tx timeout
[  464.062275][T16642] netlink: 20 bytes leftover after parsing attributes in process `syz.7.4373'.
[  464.104814][T16644] netlink: 'syz.7.4374': attribute type 1 has an invalid length.
[  464.107568][T16644] netlink: 184 bytes leftover after parsing attributes in process `syz.7.4374'.
[  464.751211][T16648] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512
[  464.959101][T16677] netlink: 'syz.6.4386': attribute type 11 has an invalid length.
[  465.541624][T16711] IPVS: nq: UDP 224.0.0.2:0 - no destination available
[  465.744962][T16724] 9pnet: p9_errstr2errno: server reported unknown error @cDB0xffffffffffffffff
[  465.848844][T16728] loop6: detected capacity change from 0 to 1024
[  465.892576][T16728] hfsplus: invalid xattr key length: 0
[  465.923530][T15541] hfsplus: b-tree write err: -5, ino 8
[  466.116082][T16745] netlink: 2036 bytes leftover after parsing attributes in process `syz.6.4416'.
[  466.119425][T16745] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4416'.
[  467.397687][T16788] loop6: detected capacity change from 0 to 256
[  467.408396][T16788] FAT-fs (loop6): Directory bread(block 64) failed
[  467.412447][T16788] FAT-fs (loop6): Directory bread(block 65) failed
[  467.415003][T16788] FAT-fs (loop6): Directory bread(block 66) failed
[  467.417031][T16788] FAT-fs (loop6): Directory bread(block 67) failed
[  467.419066][T16788] FAT-fs (loop6): Directory bread(block 68) failed
[  467.421407][T16788] FAT-fs (loop6): Directory bread(block 69) failed
[  467.424301][T16788] FAT-fs (loop6): Directory bread(block 70) failed
[  467.426855][T16788] FAT-fs (loop6): Directory bread(block 71) failed
[  467.429312][T16788] FAT-fs (loop6): Directory bread(block 72) failed
[  467.439563][T16788] FAT-fs (loop6): Directory bread(block 73) failed
[  467.570106][T16798] netlink: 'syz.0.4443': attribute type 28 has an invalid length.
[  468.241112][T16832] loop6: detected capacity change from 0 to 512
[  468.246011][T16832] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  468.344401][T16834] loop6: detected capacity change from 0 to 128
[  468.360408][T16834] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256
[  468.753526][T16846] netlink: 40 bytes leftover after parsing attributes in process `syz.7.4466'.
[  469.001337][ T5865] netdevsim netdevsim0 eth0: unset [0, 0] type 1 family 0 port 8472 - 0
[  469.007336][ T5865] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0
[  469.017533][ T5865] netdevsim netdevsim0 eth1: unset [0, 0] type 1 family 0 port 8472 - 0
[  469.023657][ T5865] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0
[  469.028609][ T5865] netdevsim netdevsim0 eth2: unset [0, 0] type 1 family 0 port 8472 - 0
[  469.037534][ T5865] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0
[  469.044474][ T5865] netdevsim netdevsim0 eth3: unset [0, 0] type 1 family 0 port 8472 - 0
[  469.048937][ T5865] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0
[  469.118690][T16864] netlink: 'syz.0.4475': attribute type 4 has an invalid length.
[  469.319774][T16862] loop7: detected capacity change from 0 to 32768
[  469.341483][T16862] XFS (loop7): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  469.369871][T16862] XFS (loop7): Ending clean mount
[  469.380225][T16862] XFS (loop7): Quotacheck needed: Please wait.
[  469.448307][T16862] XFS (loop7): Quotacheck: Done.
[  469.498123][T16323] XFS (loop7): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791
[  470.432698][T16935] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4503'.
[  471.892280][T16952] loop6: detected capacity change from 0 to 1024
[  471.930892][T16952] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled
[  471.956320][T16952] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  472.573910][T16962] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4513'.
[  472.751944][T14930] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  472.921886][T16979] loop7: detected capacity change from 0 to 1024
[  472.961403][T16979] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  472.966250][T16979] ext4 filesystem being mounted at /37/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[  472.974025][   T33] audit: type=1326 audit(1755247156.083:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.0.4523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x50000
[  473.006473][T16323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  473.020826][   T33] audit: type=1326 audit(1755247156.083:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.0.4523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x50000
[  473.028471][   T33] audit: type=1326 audit(1755247156.083:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.0.4523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x50000
[  473.039826][   T33] audit: type=1326 audit(1755247156.083:255): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.0.4523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x50000
[  473.049186][T16986] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4524'.
[  473.054618][   T33] audit: type=1326 audit(1755247156.083:256): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.0.4523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x50000
[  473.067497][   T33] audit: type=1326 audit(1755247156.083:257): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.0.4523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x50000
[  473.081146][   T33] audit: type=1326 audit(1755247156.083:258): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.0.4523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x50000
[  473.097153][   T33] audit: type=1326 audit(1755247156.083:259): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.0.4523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x50000
[  473.129963][   T33] audit: type=1326 audit(1755247156.083:260): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.0.4523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x50000
[  473.144004][   T33] audit: type=1326 audit(1755247156.103:261): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16983 comm="syz.0.4523" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x50000
[  473.317950][T16998] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4529'.
[  473.325559][T16998] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  474.082702][   T24] hid (null): global environment stack underflow
[  474.088162][   T24] hid (null): unknown global tag 0xe
[  474.117036][   T24] hid-generic 0005:0B57:000F.000B: reserved main item tag 0xe
[  474.129950][   T24] hid-generic 0005:0B57:000F.000B: global environment stack underflow
[  474.150299][   T24] hid-generic 0005:0B57:000F.000B: item 0 1 1 11 parsing failed
[  474.163076][   T24] hid-generic 0005:0B57:000F.000B: probe with driver hid-generic failed with error -22
[  474.172713][T17019] overlayfs: conflicting options: metacopy=on,redirect_dir=nofollow
[  474.199660][T17021] IPVS: Error connecting to the multicast addr
[  474.339006][T17025] bochs-drm 0000:00:01.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=io+mem:owns=io+mem
[  474.596982][T17036] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4547'.
[  478.192053][   T24] usb 7-1: new high-speed USB device number 6 using dummy_hcd
[  478.359294][   T24] usb 7-1: Using ep0 maxpacket: 8
[  478.377098][   T24] usb 7-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77
[  478.388150][   T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  478.392903][   T24] usb 7-1: Product: syz
[  478.394833][   T24] usb 7-1: Manufacturer: syz
[  478.396915][   T24] usb 7-1: SerialNumber: syz
[  478.420696][   T24] usb 7-1: config 0 descriptor??
[  478.441949][   T24] gspca_main: sq905-2.14.0 probing 2770:9120
[  478.895231][   T24] gspca_sq905: sq905_command: usb_control_msg failed 2 (-71)
[  478.901818][   T24] sq905 7-1:0.0: probe with driver sq905 failed with error -71
[  478.930250][   T24] usb 7-1: USB disconnect, device number 6
[  479.514272][T17117] [U] ^G
[  479.570504][T17120] loop6: detected capacity change from 0 to 2048
[  479.581674][T17120] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  479.629479][T17122] pimreg3: entered allmulticast mode
[  479.976204][T17126] loop6: detected capacity change from 0 to 40427
[  479.986159][T17126] F2FS-fs: heap/no_heap options were deprecated
[  479.991268][T17142] overlayfs: missing 'lowerdir'
[  479.992538][T17126] F2FS-fs (loop6): build fault injection rate: 19
[  480.002891][T17126] F2FS-fs (loop6): build fault injection type: 0x3bfe8c
[  480.012610][T17126] F2FS-fs (loop6): invalid crc value
[  480.032410][T17126] F2FS-fs (loop6): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970
[  480.079025][T17126] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0
[  480.089360][T17126] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0
[  480.095876][T17126] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5
[  480.105109][T17126] F2FS-fs (loop6): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40
[  480.110317][T17126] F2FS-fs (loop6): inject lock_op in f2fs_trylock_op of f2fs_write_single_data_page+0x9f1/0x16a0
[  480.114631][T17126] syz.6.4584: attempt to access beyond end of device
[  480.114631][T17126] loop6: rw=2049, sector=45096, nr_sectors = 16 limit=40427
[  480.142230][T14930] syz-executor: attempt to access beyond end of device
[  480.142230][T14930] loop6: rw=2049, sector=45112, nr_sectors = 8 limit=40427
[  480.148320][T14930] CPU: 1 UID: 0 PID: 14930 Comm: syz-executor Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  480.148337][T14930] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  480.148343][T14930] Call Trace:
[  480.148348][T14930]  <TASK>
[  480.148353][T14930]  dump_stack_lvl+0x189/0x250
[  480.148370][T14930]  ? __pfx_dump_stack_lvl+0x10/0x10
[  480.148380][T14930]  ? __pfx_queue_work_on+0x10/0x10
[  480.148390][T14930]  ? _raw_spin_unlock_irqrestore+0xad/0x110
[  480.148402][T14930]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  480.148418][T14930]  f2fs_handle_critical_error+0x37c/0x540
[  480.148433][T14930]  f2fs_write_end_io+0x886/0xb60
[  480.148451][T14930]  __submit_merged_bio+0x27a/0x6a0
[  480.148465][T14930]  __submit_merged_write_cond+0x255/0x530
[  480.148480][T14930]  f2fs_write_data_pages+0x261d/0x3000
[  480.148509][T14930]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  480.148543][T14930]  ? __mod_zone_page_state+0xd7/0x140
[  480.148560][T14930]  ? folios_put_refs+0x560/0x640
[  480.148576][T14930]  ? __pfx_folios_put_refs+0x10/0x10
[  480.148583][T14930]  ? rcu_is_watching+0x15/0xb0
[  480.148598][T14930]  ? __lock_acquire+0xab9/0xd20
[  480.148618][T14930]  ? __pfx_f2fs_write_data_pages+0x10/0x10
[  480.148630][T14930]  do_writepages+0x32e/0x550
[  480.148679][T14930]  ? do_raw_spin_unlock+0x4d/0x240
[  480.148697][T14930]  filemap_fdatawrite+0x199/0x240
[  480.148709][T14930]  ? __pfx_filemap_fdatawrite+0x10/0x10
[  480.148744][T14930]  ? do_raw_spin_unlock+0x4d/0x240
[  480.148756][T14930]  f2fs_sync_dirty_inodes+0x31f/0x830
[  480.148772][T14930]  f2fs_write_checkpoint+0x95a/0x1df0
[  480.148793][T14930]  ? __pfx_f2fs_write_checkpoint+0x10/0x10
[  480.148825][T14930]  ? kill_f2fs_super+0x298/0x6c0
[  480.148837][T14930]  kill_f2fs_super+0x2c3/0x6c0
[  480.148849][T14930]  ? __pfx_kill_f2fs_super+0x10/0x10
[  480.148855][T14930]  ? radix_tree_delete_item+0x2b6/0x400
[  480.148871][T14930]  ? shrinker_free+0x2ce/0x3e0
[  480.148881][T14930]  deactivate_locked_super+0xbc/0x130
[  480.148898][T14930]  cleanup_mnt+0x425/0x4c0
[  480.148908][T14930]  ? lockdep_hardirqs_on+0x9c/0x150
[  480.148921][T14930]  task_work_run+0x1d4/0x260
[  480.148934][T14930]  ? __pfx_task_work_run+0x10/0x10
[  480.148943][T14930]  ? __x64_sys_umount+0x122/0x160
[  480.148956][T14930]  ? exit_to_user_mode_loop+0x40/0x110
[  480.148970][T14930]  exit_to_user_mode_loop+0xec/0x110
[  480.148980][T14930]  do_syscall_64+0x2bd/0x3b0
[  480.148991][T14930]  ? lockdep_hardirqs_on+0x9c/0x150
[  480.149000][T14930]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.149009][T14930]  ? exc_page_fault+0x9f/0xf0
[  480.149020][T14930]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  480.149027][T14930] RIP: 0033:0x7fab1bf8ff17
[  480.149038][T14930] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8
[  480.149045][T14930] RSP: 002b:00007ffcce451a78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  480.149055][T14930] RAX: 0000000000000000 RBX: 00007fab1c011c05 RCX: 00007fab1bf8ff17
[  480.149060][T14930] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffcce451b30
[  480.149065][T14930] RBP: 00007ffcce451b30 R08: 0000000000000000 R09: 0000000000000000
[  480.149070][T14930] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffcce452bc0
[  480.149076][T14930] R13: 00007fab1c011c05 R14: 0000000000075140 R15: 00007ffcce452c00
[  480.149091][T14930]  </TASK>
[  480.149095][T14930] F2FS-fs (loop6): Stopped filesystem due to reason: 3
[  480.515735][T17159] sg_write: data in/out 16514940/4 bytes for SCSI command 0x1c-- guessing data in;
[  480.515735][T17159]    program syz.6.4597 not setting count and/or reply_len properly
[  480.574709][T17161] loop6: detected capacity change from 0 to 2048
[  480.597440][T17161] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  482.678292][T17181] overlayfs: failed to resolve './file1': -2
[  482.698872][T17181] loop6: detected capacity change from 0 to 512
[  482.728642][T17181] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e042c118, mo2=0002]
[  482.745040][T17181] System zones: 1-12
[  482.747270][T17181] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.4608: corrupted in-inode xattr: e_value size too large
[  482.764057][T17181] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4608: couldn't read orphan inode 15 (err -117)
[  482.770210][T17181] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  482.779686][T17181] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.4608: corrupted in-inode xattr: e_value size too large
[  482.818381][T17191] program syz.7.4612 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  482.884266][T17192] EXT4-fs error (device loop6): ext4_iget_extra_inode:5104: inode #15: comm syz.6.4608: corrupted in-inode xattr: e_value size too large
[  484.173024][T14930] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.082500][T17241] loop7: detected capacity change from 0 to 512
[  485.128978][T17241] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.4635: casefold flag without casefold feature
[  485.167572][T17241] EXT4-fs error (device loop7): ext4_orphan_get:1397: comm syz.7.4635: couldn't read orphan inode 15 (err -117)
[  485.175376][T17241] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  485.254517][T16323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  485.731866][T17266] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4646'.
[  485.769841][T17266] vlan2: entered allmulticast mode
[  485.771952][T17266] bond2: entered allmulticast mode
[  485.892422][T17271] loop7: detected capacity change from 0 to 512
[  485.910633][T17271] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  485.915766][T17271] ext4 filesystem being mounted at /74/bus supports timestamps until 2038-01-19 (0x7fffffff)
[  485.963321][T16323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  486.992987][T17296] loop6: detected capacity change from 0 to 32768
[  487.005664][T17296] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4658 (17296)
[  487.037181][T17296] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  487.048524][T17296] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  487.054561][T17296] BTRFS info (device loop6): using free-space-tree
[  487.662208][T14930] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  487.912415][T17325] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4665'.
[  488.123247][   T33] kauditd_printk_skb: 10480 callbacks suppressed
[  488.123333][   T33] audit: type=1326 audit(1755247171.201:10742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17326 comm="syz.6.4661" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fab1bf8ebe9 code=0x0
[  488.320197][T17331] loop7: detected capacity change from 0 to 2048
[  488.501120][T17331] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000)
[  489.943952][ T5914] usb 7-1: new high-speed USB device number 7 using dummy_hcd
[  490.095223][ T5914] usb 7-1: Using ep0 maxpacket: 16
[  490.113621][ T5914] usb 7-1: config 0 has an invalid interface number: 1 but max is 0
[  490.120080][ T5914] usb 7-1: config 0 has no interface number 0
[  490.123929][ T5914] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  490.131575][ T5914] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  490.139144][ T5914] usb 7-1: config 0 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  490.146418][ T5914] usb 7-1: New USB device found, idVendor=04d9, idProduct=a072, bcdDevice= 0.00
[  490.150102][ T5914] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  490.165442][ T5914] usb 7-1: config 0 descriptor??
[  490.277463][T17362] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4681'.
[  490.586849][ T5914] holtek_mouse 0003:04D9:A072.000C: unknown main item tag 0x0
[  490.593154][ T5914] holtek_mouse 0003:04D9:A072.000C: unknown main item tag 0x0
[  490.604924][ T5914] holtek_mouse 0003:04D9:A072.000C: unknown main item tag 0x0
[  490.607759][ T5914] holtek_mouse 0003:04D9:A072.000C: unknown main item tag 0x0
[  490.612498][ T5914] holtek_mouse 0003:04D9:A072.000C: hidraw0: USB HID v0.00 Device [HID 04d9:a072] on usb-dummy_hcd.6-1/input1
[  490.744789][T17374] netlink: 'syz.7.4687': attribute type 12 has an invalid length.
[  490.791193][ T5914] usb 7-1: USB disconnect, device number 7
[  490.905313][T17382] loop7: detected capacity change from 0 to 64
[  490.921737][T17382] Trying to free block not in datazone
[  490.924229][T17382] Trying to free block not in datazone
[  490.935852][T17382] Trying to free block not in datazone
[  490.953476][T17382] Trying to free block not in datazone
[  490.962385][T17382] minix_free_inode: bit 5 already cleared
[  491.476655][T17419] loop6: detected capacity change from 0 to 128
[  491.555572][T17419] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  492.237889][  T792] usb 7-1: new high-speed USB device number 8 using dummy_hcd
[  492.399450][  T792] usb 7-1: Using ep0 maxpacket: 16
[  492.409817][  T792] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  492.424820][  T792] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  492.440568][  T792] usb 7-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  492.451736][  T792] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  492.454963][  T792] usb 7-1: Product: syz
[  492.469840][  T792] usb 7-1: Manufacturer: syz
[  492.471783][  T792] usb 7-1: SerialNumber: syz
[  492.481237][  T792] usb 7-1: config 0 descriptor??
[  492.498057][  T792] em28xx 7-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  492.501871][  T792] em28xx 7-1:0.0: Audio interface 0 found (Vendor Class)
[  493.188722][  T792] em28xx 7-1:0.0: unknown em28xx chip ID (250)
[  493.404939][  T792] em28xx 7-1:0.0: Config register raw data: 0xfffffffb
[  493.645310][  T792] em28xx 7-1:0.0: AC97 chip type couldn't be determined
[  493.648310][  T792] em28xx 7-1:0.0: No AC97 audio processor
[  493.669148][  T792] usb 7-1: USB disconnect, device number 8
[  493.672395][T17470] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4731'.
[  493.676017][T17472] syz_tun: entered promiscuous mode
[  493.681061][  T792] em28xx 7-1:0.0: Disconnecting em28xx
[  493.685475][T17472] syz_tun: left promiscuous mode
[  493.713443][  T792] em28xx 7-1:0.0: Freeing device
[  493.781851][T17475] loop7: detected capacity change from 0 to 128
[  493.797086][T17475] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256
[  493.803657][T17475] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  494.102573][T17481] loop7: detected capacity change from 0 to 32768
[  494.129684][T17481] XFS (loop7): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  494.161082][T17481] XFS (loop7): Ending clean mount
[  494.256155][T16323] XFS (loop7): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  494.273439][T17499] program syz.6.4742 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  494.593125][T17507] loop7: detected capacity change from 0 to 256
[  494.624667][T17507] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.
[  494.685832][T17507] FAT-fs (loop7): error, fat_bmap_cluster: request beyond EOF (i_pos 196)
[  494.710641][T17507] FAT-fs (loop7): Filesystem has been set read-only
[  495.074321][T17516] loop7: detected capacity change from 0 to 512
[  495.107173][T17516] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  495.114685][T17516] ext4 filesystem being mounted at /118/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  495.189773][T16323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  495.452660][T17530] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4753'.
[  495.468267][T17530] netlink: 52 bytes leftover after parsing attributes in process `syz.7.4753'.
[  495.592056][T17532] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4754'.
[  495.925364][T17543] loop7: detected capacity change from 0 to 4096
[  495.929243][T17543] EXT4-fs: Conflicting test_dummy_encryption options
[  496.013741][T17545] loop7: detected capacity change from 0 to 1024
[  496.017703][T17545] EXT4-fs: inline encryption not supported
[  496.020170][T17545] EXT4-fs: Ignoring removed bh option
[  496.048428][T17545] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  496.100634][T16323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  496.207336][T17549] netlink: 12 bytes leftover after parsing attributes in process `syz.7.4762'.
[  496.322848][   T33] audit: type=1326 audit(1755247179.390:10743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17556 comm="syz.0.4765" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x7ffc0000
[  496.346466][   T33] audit: type=1326 audit(1755247179.390:10744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17556 comm="syz.0.4765" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x7ffc0000
[  496.360902][   T33] audit: type=1326 audit(1755247179.390:10745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17556 comm="syz.0.4765" exe="/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f19ef98ebe9 code=0x7ffc0000
[  496.384763][   T33] audit: type=1326 audit(1755247179.390:10746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17556 comm="syz.0.4765" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x7ffc0000
[  496.393995][   T33] audit: type=1326 audit(1755247179.390:10747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17556 comm="syz.0.4765" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x7ffc0000
[  496.495339][T17566] netlink: 'syz.0.4769': attribute type 1 has an invalid length.
[  497.366439][T17575] loop6: detected capacity change from 0 to 4096
[  497.908195][T17596] loop6: detected capacity change from 0 to 32768
[  497.912133][T17596] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4781 (17596)
[  497.956499][T17596] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  497.972474][T17596] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  498.080880][T17596] BTRFS info (device loop6): rebuilding free space tree
[  498.139090][T17596] BTRFS info (device loop6): disabling free space tree
[  498.142687][T17596] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  498.152829][T17596] BTRFS info (device loop6): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  498.261757][T14930] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  498.746573][T17628] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.4790'.
[  498.880742][T17624] loop7: detected capacity change from 0 to 32768
[  498.885179][   T33] audit: type=1326 audit(1755247181.908:10748): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17629 comm="syz.6.4791" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1bf8ebe9 code=0x7ffc0000
[  498.895219][   T33] audit: type=1326 audit(1755247181.908:10749): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17629 comm="syz.6.4791" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1bf8ebe9 code=0x7ffc0000
[  499.035424][T17624] bcachefs (loop7): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,nojournal_transaction_names
[  499.035440][T17624]   allowing incompatible features above 0.0: (unknown version)
[  499.035446][T17624]   features: atomic_nlink
[  499.047226][T17624] bcachefs (loop7): Using encoding defined by superblock: utf8-12.1.0
[  499.050452][T17624] bcachefs (loop7): initializing new filesystem
[  499.061684][T17624] bcachefs (loop7): going read-write
[  499.061758][T17641] loop6: detected capacity change from 0 to 256
[  499.084083][T17624] bcachefs (loop7): marking superblocks
[  499.092016][T17624] bcachefs (loop7): initializing freespace
[  499.096863][T17624] bcachefs (loop7): done initializing freespace
[  499.100056][T17624] bcachefs (loop7): reading snapshots table
[  499.101965][T17624] bcachefs (loop7): reading snapshots done
[  499.152101][T17624] bcachefs (loop7): done starting filesystem
[  499.434920][T17648] netlink: 8 bytes leftover after parsing attributes in process `syz.7.4789'.
[  499.816657][T16323] bcachefs (loop7): shutting down
[  499.818767][T16323] bcachefs (loop7): going read-only
[  499.820751][T16323] bcachefs (loop7): finished waiting for writes to stop
[  499.838604][T16323] bcachefs (loop7): flushing journal and stopping allocators, journal seq 2
[  499.939232][T16323] bcachefs (loop7): flushing journal and stopping allocators complete, journal seq 3
[  499.942802][T16323] bcachefs (loop7): clean shutdown complete, journal seq 4
[  499.945782][T16323] bcachefs (loop7): marking filesystem clean
[  499.980322][T16323] bcachefs (loop7): shutdown complete
[  501.135283][T17683] loop6: detected capacity change from 0 to 4096
[  501.166802][T17683] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  501.193657][T17683] Quota error (device loop6): do_check_range: Getting block 7 out of range 1-5
[  501.200391][T17683] Quota error (device loop6): qtree_read_dquot: Can't read quota structure for id 0
[  501.204057][T17683] EXT4-fs error (device loop6): ext4_acquire_dquot:6933: comm syz.6.4811: Failed to acquire dquot type 1
[  501.240053][T14930] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  501.708336][ T1364] ieee802154 phy0 wpan0: encryption failed: -22
[  501.713916][ T1364] ieee802154 phy1 wpan1: encryption failed: -22
[  502.065188][T17705] [U] V3Fپ"W/4:XTZWTLW=
[  502.068760][T17705] [U] J"E:"
[  502.094810][T17707] loop6: detected capacity change from 0 to 256
[  502.803737][T17722] overlayfs: failed to resolve './file1': -2
[  502.922370][T17724] netlink: 'syz.0.4826': attribute type 6 has an invalid length.
[  503.043901][T17728] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  503.298974][T17742] loop6: detected capacity change from 0 to 512
[  503.317153][T17742] EXT4-fs (loop6): ext4_check_descriptors: Checksum for group 0 failed (57259!=33349)
[  503.327392][T17742] EXT4-fs (loop6): orphan cleanup on readonly fs
[  503.330295][T17742] EXT4-fs error (device loop6): ext4_read_block_bitmap_nowait:517: comm syz.6.4835: Block bitmap for bg 0 marked uninitialized
[  503.351805][T17742] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6657: Corrupt filesystem
[  503.355715][T17742] EXT4-fs (loop6): 1 orphan inode deleted
[  503.359965][T17742] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none.
[  504.186401][T14930] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  504.577023][T17760] netlink: 'syz.6.4840': attribute type 10 has an invalid length.
[  504.794306][T17760] veth0_vlan: left promiscuous mode
[  504.801456][T17760] veth0_vlan: entered promiscuous mode
[  504.820130][T17760] team0: Device veth0_vlan failed to register rx_handler
[  505.528229][ T5914] usb 7-1: new high-speed USB device number 9 using dummy_hcd
[  505.635939][T17774] loop7: detected capacity change from 0 to 8
[  505.657248][T17774] SQUASHFS error: Failed to read block 0x260685: -5
[  505.666793][T17774] SQUASHFS error: Unable to read metadata cache entry [260685]
[  505.669582][T17774] SQUASHFS error: Unable to read directory block [260685:0]
[  505.683463][ T5914] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  505.686488][ T5914] usb 7-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  505.693525][ T5914] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66
[  505.709571][ T5914] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[  505.720550][ T5914] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[  505.733518][ T5914] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  505.739880][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  505.744374][ T5914] usb 7-1: Product: syz
[  505.746626][ T5914] usb 7-1: Manufacturer: syz
[  505.765961][ T5914] cdc_wdm 7-1:1.0: skipping garbage
[  505.768105][ T5914] cdc_wdm 7-1:1.0: skipping garbage
[  505.778017][ T5914] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device
[  505.780911][ T5914] cdc_wdm 7-1:1.0: Unknown control protocol
[  505.955492][T17784] tipc: Started in network mode
[  505.957176][T17784] tipc: Node identity aaaaaaaaaa1a, cluster identity 4711
[  505.966599][T17784] tipc: Enabled bearer <eth:team0>, priority 10
[  506.884837][T17789] loop7: detected capacity change from 0 to 32768
[  506.913144][T17789] ocfs2: Slot 0 on device (7,7) was already allocated to this node!
[  506.924685][T17789] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  507.085201][ T5914] tipc: Node number set to 11578026
[  507.275456][T16323] ocfs2: Unmounting device (7,7) on (node local)
[  507.472100][T17802] loop7: detected capacity change from 0 to 164
[  507.592972][T17808] tipc: Enabled bearer <ib:gre0>, priority 24
[  508.481241][ T5899] usb 7-1: USB disconnect, device number 9
[  509.027668][T14936] nci: nci_add_new_protocol: the target found does not have the desired protocol
[  509.162704][T17864] loop6: detected capacity change from 0 to 256
[  509.175547][T17864] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x36e00b20, utbl_chksum : 0xe619d30d)
[  509.496071][T17866] loop6: detected capacity change from 0 to 32768
[  509.516714][T17866] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  509.538538][T17866] XFS (loop6): Ending clean mount
[  509.546675][T17866] XFS (loop6): Quotacheck needed: Please wait.
[  509.598834][T17866] XFS (loop6): Quotacheck: Done.
[  509.608789][   T33] audit: type=1800 audit(1755247192.662:10750): pid=17866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.4886" name="bus" dev="loop6" ino=4426 res=0 errno=0
[  509.655702][T14930] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb
[  510.079115][T17892] netlink: 'syz.6.4894': attribute type 2 has an invalid length.
[  510.350497][ T5899] usb 7-1: new high-speed USB device number 10 using dummy_hcd
[  510.512507][ T5899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  510.517562][ T5899] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  510.521681][ T5899] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00
[  510.525332][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  510.531220][ T5899] usb 7-1: config 0 descriptor??
[  510.949353][ T5899] cp2112 0003:10C4:EA90.000D: unknown main item tag 0x0
[  510.956502][ T5899] cp2112 0003:10C4:EA90.000D: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.6-1/input0
[  511.145628][ T5899] cp2112 0003:10C4:EA90.000D: error requesting version
[  511.150436][ T5899] cp2112 0003:10C4:EA90.000D: probe with driver cp2112 failed with error -71
[  511.159179][ T5899] usb 7-1: USB disconnect, device number 10
[  511.209822][T17908] overlayfs: conflicting options: userxattr,redirect_dir=follow
[  512.090878][T17944] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4919'.
[  512.775989][T17964] loop6: detected capacity change from 0 to 32768
[  512.784032][T17964] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.4927 (17964)
[  512.797356][T17964] BTRFS info (device loop6): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  512.801763][T17964] BTRFS info (device loop6): using sha256 (sha256-lib) checksum algorithm
[  512.805934][T17964] BTRFS info (device loop6): using free-space-tree
[  512.957911][T17964] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4927'.
[  513.016521][T14930] BTRFS info (device loop6): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d
[  513.883648][T18008] netlink: 'syz.6.4938': attribute type 1 has an invalid length.
[  514.157953][T18010] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4939'.
[  514.480360][   T33] audit: type=1326 audit(1755247197.530:10751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18013 comm="syz.6.4940" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1bf8ebe9 code=0x7ffc0000
[  514.502020][   T33] audit: type=1326 audit(1755247197.550:10752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18013 comm="syz.6.4940" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1bf8ebe9 code=0x7ffc0000
[  514.525352][   T33] audit: type=1326 audit(1755247197.570:10753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18013 comm="syz.6.4940" exe="/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7fab1bf8ebe9 code=0x7ffc0000
[  514.543912][   T33] audit: type=1326 audit(1755247197.570:10754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18013 comm="syz.6.4940" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1bf8ebe9 code=0x7ffc0000
[  514.581512][   T33] audit: type=1326 audit(1755247197.570:10755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18013 comm="syz.6.4940" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1bf8ebe9 code=0x7ffc0000
[  514.615898][   T33] audit: type=1326 audit(1755247197.580:10756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18013 comm="syz.6.4940" exe="/syz-executor" sig=0 arch=c000003e syscall=129 compat=0 ip=0x7fab1bf8ebe9 code=0x7ffc0000
[  514.645387][   T33] audit: type=1326 audit(1755247197.580:10757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18013 comm="syz.6.4940" exe="/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7fab1bf85ba7 code=0x7ffc0000
[  514.662542][   T33] audit: type=1326 audit(1755247197.580:10758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18013 comm="syz.6.4940" exe="/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7fab1bf2add9 code=0x7ffc0000
[  514.671553][   T33] audit: type=1326 audit(1755247197.580:10759): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18013 comm="syz.6.4940" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1bf8ebe9 code=0x7ffc0000
[  514.698098][   T33] audit: type=1326 audit(1755247197.580:10760): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18013 comm="syz.6.4940" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fab1bf8ebe9 code=0x7ffc0000
[  517.052661][   T33] audit: type=1800 audit(1755247200.099:10761): pid=18066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=set_data cause=unavailable-hash-algorithm comm="syz.0.4960" name="/newroot/2025/file0" dev="tmpfs" ino=10466 res=0 errno=0
[  518.415047][T18117] loop6: detected capacity change from 0 to 256
[  518.417773][T18117] exfat: Deprecated parameter 'utf8'
[  518.428213][T18117] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0xf6acc499, utbl_chksum : 0xe619d30d)
[  519.023345][ T5914] usb 7-1: new high-speed USB device number 11 using dummy_hcd
[  519.173752][ T5914] usb 7-1: Using ep0 maxpacket: 8
[  519.206628][ T5914] usb 7-1: config 5 has an invalid interface number: 206 but max is 0
[  519.209160][T18145] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048)
[  519.209911][ T5914] usb 7-1: config 5 has no interface number 0
[  519.222509][ T5914] usb 7-1: config 5 interface 206 has no altsetting 0
[  519.237284][ T5914] usb 7-1: New USB device found, idVendor=2639, idProduct=0017, bcdDevice=be.0b
[  519.242506][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  519.253338][ T5914] usb 7-1: Product: syz
[  519.255387][ T5914] usb 7-1: Manufacturer: syz
[  519.257260][ T5914] usb 7-1: SerialNumber: syz
[  519.492438][ T5914] usb 7-1: USB disconnect, device number 11
[  520.265543][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5005'.
[  520.269285][T18165] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5005'.
[  520.616582][T18170] overlayfs: missing 'lowerdir'
[  521.562256][T18201] loop6: detected capacity change from 0 to 1024
[  521.581913][T18201] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[  521.600492][T18201] EXT4-fs error (device loop6): ext4_xattr_inode_iget:437: inode #11: comm syz.6.5021: missing EA_INODE flag
[  521.614130][T18201] EXT4-fs (loop6): Remounting filesystem read-only
[  521.635771][T14930] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  521.956859][T18224] loop7: detected capacity change from 0 to 4096
[  522.093839][ T5914] usb 7-1: new high-speed USB device number 12 using dummy_hcd
[  522.243708][ T5914] usb 7-1: Using ep0 maxpacket: 16
[  522.247313][ T5914] usb 7-1: config 1 has an invalid descriptor of length 97, skipping remainder of the config
[  522.250399][ T5914] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3
[  522.255895][ T5914] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  522.259296][ T5914] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  522.262153][ T5914] usb 7-1: Product: syz
[  522.264125][ T5914] usb 7-1: Manufacturer: syz
[  522.265981][ T5914] usb 7-1: SerialNumber: syz
[  522.475229][ T5914] usb 7-1: 0:2 : does not exist
[  522.483520][ T5914] usb 7-1: 5:0: failed to get current value for ch 0 (-22)
[  522.495972][ T5914] usb 7-1: USB disconnect, device number 12
[  522.515966][T14501] udevd[14501]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  524.024163][T18263] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5049'.
[  524.759169][T18267] loop6: detected capacity change from 0 to 32768
[  525.080431][T18278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5055'.
[  525.637685][T18286] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2)
[  526.483076][T18296] overlayfs: failed to clone upperpath
[  526.534895][T18288] loop7: detected capacity change from 0 to 32768
[  526.538518][T18288] bcachefs: bch2_fs_parse_param() Error parsing option gc_reserve_bytes: option_value
[  526.879880][T18320] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  527.068305][T18330] loop7: detected capacity change from 0 to 64
[  527.184486][ T5899] usb 7-1: new high-speed USB device number 13 using dummy_hcd
[  527.335051][ T5899] usb 7-1: Using ep0 maxpacket: 8
[  527.346862][ T5899] usb 7-1: config 0 interface 0 altsetting 42 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  527.354920][ T5899] usb 7-1: config 0 interface 0 has no altsetting 0
[  527.364629][ T5899] usb 7-1: New USB device found, idVendor=056a, idProduct=00d6, bcdDevice= 0.00
[  527.368225][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  527.376028][ T5899] usb 7-1: config 0 descriptor??
[  527.456809][T18350] Invalid ELF header magic: != ELF
[  527.462445][T18338] loop7: detected capacity change from 0 to 32768
[  527.993716][ T5899] usb 7-1: USB disconnect, device number 13
[  528.191588][   T33] audit: type=1326 audit(1755247211.237:10762): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18357 comm="syz.0.5094" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x7ffc0000
[  528.202603][   T33] audit: type=1326 audit(1755247211.237:10763): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18357 comm="syz.0.5094" exe="/syz-executor" sig=0 arch=c000003e syscall=206 compat=0 ip=0x7f19ef98ebe9 code=0x7ffc0000
[  528.211850][   T33] audit: type=1326 audit(1755247211.237:10764): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18357 comm="syz.0.5094" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x7ffc0000
[  528.222006][   T33] audit: type=1326 audit(1755247211.237:10765): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18357 comm="syz.0.5094" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x7ffc0000
[  528.231105][   T33] audit: type=1326 audit(1755247211.237:10766): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18357 comm="syz.0.5094" exe="/syz-executor" sig=0 arch=c000003e syscall=333 compat=0 ip=0x7f19ef98ebe9 code=0x7ffc0000
[  528.254514][   T33] audit: type=1326 audit(1755247211.297:10767): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18357 comm="syz.0.5094" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x7ffc0000
[  528.263437][   T33] audit: type=1326 audit(1755247211.307:10768): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18357 comm="syz.0.5094" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f19ef98ebe9 code=0x7ffc0000
[  528.824380][T18370] loop6: detected capacity change from 0 to 128
[  528.833273][T18370] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive!
[  528.840699][T18370] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  528.942133][   T27] FAT-fs (loop6): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1)
[  529.401854][ T5847] Bluetooth: hci1: command 0x0406 tx timeout
[  530.670389][   T55] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0
[  530.678423][   T55] Bluetooth: hci1: Injecting HCI hardware error event
[  530.691688][   T55] Bluetooth: hci1: hardware error 0x00
[  531.292014][T18425] veth0_to_team: entered promiscuous mode
[  531.294187][T18425] veth0_to_team: entered allmulticast mode
[  532.021916][T18447] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[  532.144340][T18451] 8021q: adding VLAN 0 to HW filter on device batadv1
[  532.151336][T18451] team0: Failed to send port change of device batadv1 via netlink (err -105)
[  532.156754][T18451] team0: Failed to send options change via netlink (err -105)
[  532.160109][T18451] team0: Port device batadv1 added
[  532.399869][T18457] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5136'.
[  532.745295][   T55] Bluetooth: hci1: Opcode 0x0c03 failed: -110
[  532.781504][T18463] loop6: detected capacity change from 0 to 32768
[  532.820302][T18463] ERROR: (device loop6): dbAlloc: the hint is outside the map
[  532.820302][T18463] 
[  532.849043][T18463] read_mapping_page failed!
[  532.851032][T18463] ERROR: (device loop6): txCommit: 
[  532.851032][T18463] 
[  533.875987][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[  533.882735][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[  533.889638][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[  533.889688][T18512] sctp: [Deprecated]: syz.0.5165 (pid 18512) Use of struct sctp_assoc_value in delayed_ack socket option.
[  533.889688][T18512] Use struct sctp_sack_info instead
[  533.904026][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[  533.907859][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[  534.084419][T18520] netlink: 4388 bytes leftover after parsing attributes in process `syz.0.5168'.
[  534.139512][T18509] chnl_net:caif_netlink_parms(): no params data found
[  534.235578][T18509] bridge0: port 1(bridge_slave_0) entered blocking state
[  534.238467][T18509] bridge0: port 1(bridge_slave_0) entered disabled state
[  534.241435][T18509] bridge_slave_0: entered allmulticast mode
[  534.245497][T18509] bridge_slave_0: entered promiscuous mode
[  534.250478][T18509] bridge0: port 2(bridge_slave_1) entered blocking state
[  534.253342][T18509] bridge0: port 2(bridge_slave_1) entered disabled state
[  534.258081][T18509] bridge_slave_1: entered allmulticast mode
[  534.261866][T18509] bridge_slave_1: entered promiscuous mode
[  534.301853][T18509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  534.309150][T18509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  534.346848][T18509] team0: Port device team_slave_0 added
[  534.352472][T18509] team0: Port device team_slave_1 added
[  534.397593][T18509] batman_adv: batadv0: Adding interface: batadv_slave_0
[  534.400549][T18509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  534.411086][T18509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  534.417463][T18509] batman_adv: batadv0: Adding interface: batadv_slave_1
[  534.420357][T18509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  534.435591][T18509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  534.500183][T18509] hsr_slave_0: entered promiscuous mode
[  534.503385][T18509] hsr_slave_1: entered promiscuous mode
[  534.507816][T18509] debugfs: 'hsr0' already exists in 'hsr'
[  534.510176][T18509] Cannot create hsr debugfs directory
[  534.776879][T18509] netdevsim netdevsim8 netdevsim0: renamed from eth0
[  534.789727][T18509] netdevsim netdevsim8 netdevsim1: renamed from eth1
[  534.802583][T18509] netdevsim netdevsim8 netdevsim2: renamed from eth2
[  534.806716][T18535] fanotify: failed to encode fid (type=0, len=0, err=-2)
[  534.809828][T18509] netdevsim netdevsim8 netdevsim3: renamed from eth3
[  534.983258][T18509] 8021q: adding VLAN 0 to HW filter on device bond0
[  535.004842][T18509] 8021q: adding VLAN 0 to HW filter on device team0
[  535.016166][   T36] bridge0: port 1(bridge_slave_0) entered blocking state
[  535.019308][   T36] bridge0: port 1(bridge_slave_0) entered forwarding state
[  535.037921][   T36] bridge0: port 2(bridge_slave_1) entered blocking state
[  535.040989][   T36] bridge0: port 2(bridge_slave_1) entered forwarding state
[  535.227112][T18509] 8021q: adding VLAN 0 to HW filter on device batadv0
[  535.430442][T18509] veth0_vlan: entered promiscuous mode
[  535.441523][T18509] veth1_vlan: entered promiscuous mode
[  535.470497][T18509] veth0_macvtap: entered promiscuous mode
[  535.481394][T18509] veth1_macvtap: entered promiscuous mode
[  535.526791][T18509] batman_adv: batadv0: Interface activated: batadv_slave_0
[  535.562277][T18509] batman_adv: batadv0: Interface activated: batadv_slave_1
[  535.574625][T17761] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  535.592606][T17761] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  535.613355][T17761] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  535.643358][T17761] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  535.800999][   T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  535.816075][   T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  535.917238][T15539] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  535.922880][T15539] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  535.946363][   T55] Bluetooth: hci1: command tx timeout
[  536.061371][T18567] loop7: detected capacity change from 0 to 32768
[  536.072123][T18567] (syz.7.5180,18567,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  536.077822][T18567] (syz.7.5180,18567,1):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC.
[  536.115018][T18567] JBD2: Ignoring recovery information on journal
[  536.171394][T18567] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode.
[  536.203913][T18586] ip6erspan0: entered promiscuous mode
[  536.309388][T18589] netlink: 'syz.8.5189': attribute type 1 has an invalid length.
[  536.323597][T16323] ocfs2: Unmounting device (7,7) on (node local)
[  536.572642][T18599] loop7: detected capacity change from 0 to 4096
[  536.735947][T18605] loop7: detected capacity change from 0 to 512
[  536.753532][T18605] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled
[  536.785906][T18605] EXT4-fs (loop7): ext4_check_descriptors: Inode table for group 0 not in group (block 34)!
[  536.789898][T18605] EXT4-fs (loop7): group descriptors corrupted!
[  536.862034][T18611] fuse: Bad value for 'fd'
[  536.928999][T18616] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.5203'.
[  536.978197][T18623] loop8: detected capacity change from 0 to 64
[  536.984025][T18623] MINIX-fs: file system does not have enough zmap blocks allocated.  Refusing to mount.
[  536.992087][T18623] MINIX-fs: bad superblock or unable to read bitmaps
[  537.198671][T18635] smc: net device bond0 applied user defined pnetid SYZ2
[  537.363829][T18643] netlink: 3 bytes leftover after parsing attributes in process `syz.7.5216'.
[  537.371521][T18643] 0X: renamed from caif0
[  537.392543][T18643] 0X: entered allmulticast mode
[  537.400201][T18643] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check.
[  537.438818][T18645] netlink: 64 bytes leftover after parsing attributes in process `syz.0.5217'.
[  537.580253][T18634] loop8: detected capacity change from 0 to 32768
[  537.609840][T18634] XFS (loop8): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  537.672632][T18634] XFS (loop8): Ending clean mount
[  537.679704][T18634] XFS (loop8): Quotacheck needed: Please wait.
[  537.755934][T18634] XFS (loop8): Quotacheck: Done.
[  537.788376][T18509] XFS (loop8): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d
[  538.037331][   T55] Bluetooth: hci1: command tx timeout
[  538.261084][T18672] loop8: detected capacity change from 0 to 256
[  539.075442][T18691] loop7: detected capacity change from 0 to 512
[  539.090928][T18691] EXT4-fs error (device loop7): ext4_orphan_get:1392: inode #15: comm syz.7.5231: casefold flag without casefold feature
[  539.096542][T18691] EXT4-fs (loop7): Remounting filesystem read-only
[  539.099606][T18691] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[  539.122838][T16323] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[  539.732185][T18719] loop8: detected capacity change from 0 to 128
[  539.757316][T18719] EXT4-fs (loop8): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none.
[  539.769640][T18719] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[  539.814597][T18509] EXT4-fs (loop8): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09.
[  539.975829][T18731] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5249'.
[  540.106867][   T55] Bluetooth: hci1: command tx timeout
[  540.424808][T18735] loop8: detected capacity change from 0 to 32768
[  540.440530][T18735] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.5251 (18735)
[  540.484246][T18735] BTRFS info (device loop8): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  540.494642][T18735] BTRFS info (device loop8): using sha256 (sha256-lib) checksum algorithm
[  540.505751][T18735] BTRFS info (device loop8): using free-space-tree
[  540.555410][T18765] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5261'.
[  540.574707][T18765] vlan2: entered allmulticast mode
[  540.582405][T18765] bridge_slave_0: entered allmulticast mode
[  540.589564][T18765] bridge0: port 1(vlan2) entered blocking state
[  540.594458][T18765] bridge0: port 1(vlan2) entered disabled state
[  540.684396][T18765] vlan2: entered promiscuous mode
[  540.693337][T18765] bridge_slave_0: entered promiscuous mode
[  540.793965][T18509] BTRFS info (device loop8): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d
[  541.309334][T18806] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  541.937100][T18816] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000005: 0000 [#1] SMP KASAN PTI
[  541.942041][T18816] KASAN: null-ptr-deref in range [0x0000000000000028-0x000000000000002f]
[  541.945801][T18816] CPU: 1 UID: 0 PID: 18816 Comm: syz.7.5275 Not tainted 6.17.0-rc1-syzkaller-00036-gdfc0f6373094-dirty #0 PREEMPT(full) 
[  541.952066][T18816] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  541.956246][T18816] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  541.958588][T18816] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 09 5e 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 e8 5d 36 f9 4d 8b 24 24 48 83 c3
[  541.966496][T18816] RSP: 0018:ffffc900030bfa60 EFLAGS: 00010206
[  541.969055][T18816] RAX: 0000000000000005 RBX: ffff8880226c3300 RCX: 0000000000080000
[  541.972367][T18816] RDX: ffffc900216fb000 RSI: 00000000000003bc RDI: 00000000000003bd
[  541.975636][T18816] RBP: 0000000000000001 R08: ffff88801fe7a92f R09: 1ffff11003fcf525
[  541.978877][T18816] R10: dffffc0000000000 R11: ffffffff88ec9110 R12: 0000000000000028
[  541.982109][T18816] R13: dffffc0000000000 R14: ffff88801fe7a800 R15: dffffc0000000000
[  541.985385][T18816] FS:  00007f0b46ffa6c0(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  541.989060][T18816] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  541.991739][T18816] CR2: 00007f5ecf227033 CR3: 000000003872a000 CR4: 00000000000006f0
[  541.994997][T18816] Call Trace:
[  541.996414][T18816]  <TASK>
[  541.997659][T18816]  pcl818_detach+0x66/0xd0
[  541.999552][T18816]  comedi_device_detach_locked+0x178/0x750
[  542.001988][T18816]  comedi_unlocked_ioctl+0xcde/0x1020
[  542.004217][T18816]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  542.006701][T18816]  ? __lock_acquire+0xab9/0xd20
[  542.008749][T18816]  ? __fget_files+0x2a/0x420
[  542.010690][T18816]  ? __fget_files+0x2a/0x420
[  542.012567][T18816]  ? __fget_files+0x3a0/0x420
[  542.015309][T18816]  ? __fget_files+0x2a/0x420
[  542.017286][T18816]  ? bpf_lsm_file_ioctl+0x9/0x20
[  542.019174][T18816]  ? __pfx_comedi_unlocked_ioctl+0x10/0x10
[  542.021549][T18816]  __se_sys_ioctl+0xfc/0x170
[  542.023654][T18816]  do_syscall_64+0xfa/0x3b0
[  542.026576][T18816]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.029183][T18816]  ? asm_sysvec_call_function_single+0x1a/0x20
[  542.031822][T18816]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  542.034540][T18816] RIP: 0033:0x7f0b4618ebe9
[  542.036237][T18816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  542.043851][T18816] RSP: 002b:00007f0b46ffa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  542.047028][T18816] RAX: ffffffffffffffda RBX: 00007f0b463b6090 RCX: 00007f0b4618ebe9
[  542.050180][T18816] RDX: 0000000000000000 RSI: 0000000040946400 RDI: 000000000000000a
[  542.053236][T18816] RBP: 00007f0b46211e19 R08: 0000000000000000 R09: 0000000000000000
[  542.056500][T18816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  542.059739][T18816] R13: 00007f0b463b6128 R14: 00007f0b463b6090 R15: 00007ffd450612e8
[  542.062979][T18816]  </TASK>
[  542.064286][T18816] Modules linked in:
[  542.066276][T18819] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.5275'.
[  542.068482][T18816] ---[ end trace 0000000000000000 ]---
[  542.072079][T18816] RIP: 0010:pcl818_ai_cancel+0x69/0x3f0
[  542.074262][T18816] Code: 8b 1b 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 09 5e 36 f9 48 8b 03 48 89 04 24 49 83 c4 28 4c 89 e0 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 e7 e8 e8 5d 36 f9 4d 8b 24 24 48 83 c3
[  542.082136][T18816] RSP: 0018:ffffc900030bfa60 EFLAGS: 00010206
[  542.085299][T18816] RAX: 0000000000000005 RBX: ffff8880226c3300 RCX: 0000000000080000
[  542.088695][T18816] RDX: ffffc900216fb000 RSI: 00000000000003bc RDI: 00000000000003bd
[  542.091924][T18816] RBP: 0000000000000001 R08: ffff88801fe7a92f R09: 1ffff11003fcf525
[  542.095211][T18816] R10: dffffc0000000000 R11: ffffffff88ec9110 R12: 0000000000000028
[  542.098992][T18816] R13: dffffc0000000000 R14: ffff88801fe7a800 R15: dffffc0000000000
[  542.102221][T18816] FS:  00007f0b46ffa6c0(0000) GS:ffff8881a3c1c000(0000) knlGS:0000000000000000
[  542.105999][T18816] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  542.108721][T18816] CR2: 00007f5ecf227033 CR3: 000000003872a000 CR4: 00000000000006f0
[  542.112026][T18816] Kernel panic - not syncing: Fatal exception
[  542.115180][T18816] Kernel Offset: disabled
[  542.117029][T18816] Rebooting in 86400 seconds..

VM DIAGNOSIS:
08:31:45  Registers:
info registers vcpu 0

CPU#0
RAX=ffffffff81b44d4b RBX=1ffff11026cc7f61 RCX=ffff88801f9e9cc0 RDX=0000000000000000
RSI=0000000000000001 RDI=0000000000000000 RBP=ffffc9000440f7e0 RSP=ffffc9000440f660
R8 =ffffffff8fa37e37 R9 =1ffffffff1f46fc6 R10=dffffc0000000000 R11=fffffbfff1f46fc7
R12=ffff88813663fb08 R13=dffffc0000000000 R14=ffff88804b03b1c0 R15=0000000000000001
RIP=ffffffff81b44d33 RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff8880b861c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=0000001b30c17ff8 CR3=000000000df36000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=ffffffff81688a1f ffffffff8133c57e
XMM02=ffffffff8167991b ffffffff8133c57e XMM03=ffffffff8167991b ffffffff8167991b
XMM04=00007f0b46eed100 00007f0b46387460 XMM05=00007f0b46387478 00007f0b463874c0
XMM06=00007f0b463874b8 00007f0b463874b0 XMM07=00007f0b463874a8 00007f0b463874a0
XMM08=0000000000000000 00007f0b46212ee7 XMM09=0000000000000000 00007f0b46212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000036 RBX=0000000000000036 RCX=0000000000000000 RDX=00000000000003f8
RSI=00000000000015f3 RDI=00000000000015f4 RBP=00000000000003f8 RSP=ffffc900030bf1f0
R8 =ffff88801fda0237 R9 =1ffff11003fb4046 R10=dffffc0000000000 R11=ffffffff854efeb0
R12=dffffc0000000000 R13=ffffffff99af98d5 R14=ffffffff99dee3a0 R15=0000000000000000
RIP=ffffffff854eff2c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f0b46ffa6c0 ffffffff 00c00000
GS =0000 ffff8881a3c1c000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f5ecf227033 CR3=000000003872a000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 0000000000000000 XMM01=0000000000000000 0000000000000000
XMM02=00007f0b46387498 00007f0b46387470 XMM03=00007f0b463874a8 00007f0b463874a0
XMM04=00007f0b46eed100 00007f0b46387460 XMM05=00007f0b46387478 00007f0b463874c0
XMM06=00007f0b463874b8 00007f0b463874b0 XMM07=00007f0b463874a8 00007f0b463874a0
XMM08=0000000000000000 00007f0b46212ee7 XMM09=0000000000000000 00007f0b46212fc5
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
